Analysis

  • max time kernel
    1859s
  • max time network
    1148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-11-2023 22:29

General

  • Target

    https://d2sp96t5bif788.cloudfront.net/PDFunk-Setup.exe

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file 1 IoCs
  • Executes dropped EXE 9 IoCs
  • Loads dropped DLL 22 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in System32 directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 13 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 59 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://d2sp96t5bif788.cloudfront.net/PDFunk-Setup.exe
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2440
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd33239758,0x7ffd33239768,0x7ffd33239778
      2⤵
        PID:4624
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1764 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:2
        2⤵
          PID:2644
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1764 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
          2⤵
            PID:2140
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2172 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
            2⤵
              PID:4228
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3356 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:1
              2⤵
                PID:3980
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3224 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:1
                2⤵
                  PID:4800
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5324 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
                  2⤵
                    PID:3912
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5464 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
                    2⤵
                      PID:3096
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5420 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
                      2⤵
                        PID:2416
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5592 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
                        2⤵
                          PID:1896
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
                          2⤵
                            PID:4604
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2708 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
                            2⤵
                              PID:3804
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=856 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
                              2⤵
                                PID:1328
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2728 --field-trial-handle=1876,i,6740214493334172816,10910295780597514072,131072 /prefetch:8
                                2⤵
                                  PID:3456
                                • C:\Users\Admin\Downloads\PDFunk-Setup.exe
                                  "C:\Users\Admin\Downloads\PDFunk-Setup.exe"
                                  2⤵
                                  • Drops startup file
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Modifies registry class
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:888
                                  • C:\Windows\SysWOW64\cmd.exe
                                    cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq PDFunk.exe" | %SYSTEMROOT%\System32\find.exe "PDFunk.exe"
                                    3⤵
                                      PID:3096
                                      • C:\Windows\SysWOW64\tasklist.exe
                                        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq PDFunk.exe"
                                        4⤵
                                        • Enumerates processes with tasklist
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:1340
                                      • C:\Windows\SysWOW64\find.exe
                                        C:\Windows\System32\find.exe "PDFunk.exe"
                                        4⤵
                                          PID:4092
                                  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                    "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                    1⤵
                                      PID:3800
                                    • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe
                                      "C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe"
                                      1⤵
                                      • Checks computer location settings
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious use of FindShellTrayWindow
                                      • Suspicious use of SendNotifyMessage
                                      PID:3800
                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe
                                        C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\PDFunk /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\PDFunk\Crashpad --url=https://pdfunk.com --annotation=_productName=PDFunk --annotation=_version=1.0.0 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=27.0.0 --initial-client-data=0x460,0x468,0x46c,0x43c,0x470,0x7ff6ac67a860,0x7ff6ac67a870,0x7ff6ac67a880
                                        2⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        PID:1796
                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe
                                        "C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\PDFunk" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1700 --field-trial-handle=1704,i,14238153158629698126,12332331080871216111,262144 --enable-features=SharedArrayBuffer --disable-features=CrossOriginOpenerPolicy,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                                        2⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        PID:1308
                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe
                                        "C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\PDFunk" --standard-schemes --secure-schemes --bypasscsp-schemes=crx --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=1736 --field-trial-handle=1704,i,14238153158629698126,12332331080871216111,262144 --enable-features=SharedArrayBuffer --disable-features=CrossOriginOpenerPolicy,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                                        2⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        PID:3860
                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe
                                        "C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\PDFunk" --standard-schemes --secure-schemes --bypasscsp-schemes=crx --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\AppData\Local\Programs\PDFunk\resources\app.asar" --enable-sandbox --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2480 --field-trial-handle=1704,i,14238153158629698126,12332331080871216111,262144 --enable-features=SharedArrayBuffer --disable-features=CrossOriginOpenerPolicy,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                        2⤵
                                        • Checks computer location settings
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        PID:4240
                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe
                                        "C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\PDFunk" --standard-schemes --secure-schemes --bypasscsp-schemes=crx --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\AppData\Local\Programs\PDFunk\resources\app.asar" --no-sandbox --no-zygote --node-integration-in-worker --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3164 --field-trial-handle=1704,i,14238153158629698126,12332331080871216111,262144 --enable-features=SharedArrayBuffer --disable-features=CrossOriginOpenerPolicy,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                        2⤵
                                        • Checks computer location settings
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        PID:5104
                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe
                                        "C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\PDFunk" --standard-schemes --secure-schemes --bypasscsp-schemes=crx --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\AppData\Local\Programs\PDFunk\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3404 --field-trial-handle=1704,i,14238153158629698126,12332331080871216111,262144 --enable-features=SharedArrayBuffer --disable-features=CrossOriginOpenerPolicy,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                        2⤵
                                        • Checks computer location settings
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        PID:4448
                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe
                                        "C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\PDFunk" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2240 --field-trial-handle=1704,i,14238153158629698126,12332331080871216111,262144 --enable-features=SharedArrayBuffer --disable-features=CrossOriginOpenerPolicy,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                                        2⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Drops file in System32 directory
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:3012
                                    • C:\Windows\System32\rundll32.exe
                                      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                      1⤵
                                        PID:1892

                                      Network

                                      MITRE ATT&CK Enterprise v15

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                        Filesize

                                        1KB

                                        MD5

                                        2d2f3fa34a2c819610ef25141356a900

                                        SHA1

                                        a93877f4949859a0c7b7fa95edd48f1a21876c52

                                        SHA256

                                        bc6f4dbc6aa9f24e8bbc411604fcfb15a74c4be4a65d4cae8487d3e2ba1bf958

                                        SHA512

                                        26e235981206a1ae8bfd82009ffe87848f37e29818f4c6a59c4086342fbd791e630b949eb7755a2670f3197360334d581e80ef59c906ac22cdcc3323150e46bb

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                        Filesize

                                        5KB

                                        MD5

                                        12ee622a05e779680aed7d3b1c986670

                                        SHA1

                                        ac68df261c9a6687d35aa29e160cacb4fbf261fa

                                        SHA256

                                        6af0931a443c5b8d0561985eb5eed2977a4c09262e03ef0b024b31759e536220

                                        SHA512

                                        e24d990157e7f5ee3a8887e5e352344abe8f058a15427edb84b4ac749af798c96e5853ce79c86821d2fb97f44b16cf4b1d7fc84473733de7b7cd35beda451d4d

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                        Filesize

                                        5KB

                                        MD5

                                        cc647a4851f8c3b313a7326cc37aebcb

                                        SHA1

                                        57d4c8853d16ff1db7d487f224ddda3d52c6e8bb

                                        SHA256

                                        e0dc447d3492b004c3f31844922f2a477f5e43b27edaf627fa0ca99e4ab76e2a

                                        SHA512

                                        56ee70ba4e63dad0c80071bbd59c7afd37135189a139fb4319a0e545e3917420f9a02ad43309f6f73bfcde870ca646392472cde3bfe1bd811b7f344bce718b9a

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                        Filesize

                                        5KB

                                        MD5

                                        9fe192a9b2d6b7f14b95c68358a12406

                                        SHA1

                                        e88a39430aec71dc11b2a4697efec3db1786336f

                                        SHA256

                                        441a8198bfcaa4e7e4f9ebb832d749e3e1be139ac48a6f9e323d3b1d0aa70930

                                        SHA512

                                        de260a884b0cee00b952e0b4d178459e751ecee34f4111ac89a118c66184d28cbdd41a13d3f7af777c22fdb20514b08f2b34bad77fd442fe4c199098e670694e

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                        Filesize

                                        5KB

                                        MD5

                                        fae48729a7ce8855c9e06919cdd6dde3

                                        SHA1

                                        3cde25f011694d8381c60f181a004a9be44c4579

                                        SHA256

                                        dfb4af84534fe627d59910df25cbb9728a6770f52e4eb844e9b62826154a49ba

                                        SHA512

                                        56a35535962ff96df4c2279d7fbceb84c3e6ef1317630df6b482c1c3e7f7ade66929a9cfeed769604697a6ccea9ce46b76cb7a25ac5f3389cc61002cbb73dcb0

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                        Filesize

                                        5KB

                                        MD5

                                        b662bdf0b2c9e3f9689fa09be2190919

                                        SHA1

                                        171621c95cd3d6fc3c0c806f8e7ae6daf02387c7

                                        SHA256

                                        32a2571ece1fbf452cec88c0b11dd80466bb0ba865a006abcf035e19a5b74e19

                                        SHA512

                                        9e710768fb4d131adc4d9c3e7ddea2f072fc85be1b1cf7c6ef18b2af56a8d33e1281643f8feb7867e081857be9e7040cb0b70d20364ca822fbbfa65d377acbd3

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                        Filesize

                                        109KB

                                        MD5

                                        ee8dfca72a74678378520091e3afef15

                                        SHA1

                                        2d863739c262f014963b365c6fd17744d3a51e35

                                        SHA256

                                        c9a19f56e388c1dd31d7fe9e3e35123d080b5f103218956320ec00fe20176de6

                                        SHA512

                                        288bc12efde1f0e7bad633e1a91bb9b8d5f54cfeb189b215b24384062424f38e86001873ecdc20a7fba38460ea78e805bd139bb36697c3c6ca4d2ddd308fb076

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                        Filesize

                                        109KB

                                        MD5

                                        2f8ea19ea0529f5db98727c44999c198

                                        SHA1

                                        29e0e0ad81b1795c6af2b3bf43e98e0f8327ca27

                                        SHA256

                                        91d6fb9f648d47e426816d659a57e560f5f73b6b4d62dc5df46c25e41c39e211

                                        SHA512

                                        6dcea1a6242db744efed375441281347f126c0eb9fdc1746b6fd4339ec880ca52fb21f502d28d036b9cf7a849307fc2c16acbb3ef56f064bb087473bbf376fee

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

                                        Filesize

                                        114KB

                                        MD5

                                        ceac3fd01e7974c1bc47deb17e549d8f

                                        SHA1

                                        a452ced4c8391930a0f2c445231bf34f5334ff76

                                        SHA256

                                        d39599693b08cd144fd053a9216cf7a4349894377762ef0d27a2442bb40fda6a

                                        SHA512

                                        f7c15e6d73bbebaa6879d4126735e0c0a11f95ee0e24ddac3aa1606bacd4ade76ff8dcc7dacabcc83192472ac535b7384d1073aacc103dab5e4abf067d9fe527

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5909ab.TMP

                                        Filesize

                                        107KB

                                        MD5

                                        ea32e2bb878f3eeffec7a243a07a8858

                                        SHA1

                                        b580b719db0c52c78f75b4d2931b6e311d57ff2f

                                        SHA256

                                        c650acb9d98b31380a987ef074de52ce78a8e7f00d851924a6290b1aab221aec

                                        SHA512

                                        21824703441d11497f52d9b4b9b8be53f43d51ad33c24e6d5c1fe91f8d23616c5469ee920acbab9194242e5e4585c1e3950d0bb8aa85f90eaa2c384d84cfc345

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

                                        Filesize

                                        264KB

                                        MD5

                                        c074d71ebb35c6895f09e27ea606f2fa

                                        SHA1

                                        4ae58e462fd917db0480ccbdebee1ac0c8ae7fe4

                                        SHA256

                                        25e76f6a7a544999177cfea9af6762e62174cdcea015e0076f8b3f2930b5f67d

                                        SHA512

                                        63503dcf5a47aa3817e92e6fa95a498e3b7dc9412e6fe313f3920d82fe926db19d4bbb41cdf6758fcec728c695555763561793886876df2292a5f154835e0b14

                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

                                        Filesize

                                        2B

                                        MD5

                                        99914b932bd37a50b983c5e7c90ae93b

                                        SHA1

                                        bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                                        SHA256

                                        44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                                        SHA512

                                        27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\D3DCompiler_47.dll

                                        Filesize

                                        4.7MB

                                        MD5

                                        9b7fa5b73141b809f83760b540400bcc

                                        SHA1

                                        612f7190d30e461fd10674c2fe76a60f71ad2be1

                                        SHA256

                                        88b65fd685b8dddf10499a3fa89e4233e41a2f005800970d60b60d9d78885f37

                                        SHA512

                                        e07ae8e3d18411350da3f9be479ecb86eafe8adf1036753ce8048bf9dac5c3df2117ff1b72a4a96bbbfadbfdd99e46e626ea149dd02f98dd5c439c353f0fca9d

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\chrome_100_percent.pak

                                        Filesize

                                        132KB

                                        MD5

                                        a0e681fdd4613e0fff6fb8bf33a00ef1

                                        SHA1

                                        6789bacfe0b244ab6872bd3acc1e92030276011e

                                        SHA256

                                        86f6b8ffa8788603a433d425a4bc3c4031e5d394762fd53257b0d4b1cfb2ffa2

                                        SHA512

                                        6f6a1a8bfe3d33f3fa5f6134dac7cd8c017e38e5e2a75a93a958addbb17a601c5707d99a2af67e52c0a3d5206142209703701cd3fab44e0323a4553caee86196

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\chrome_100_percent.pak

                                        Filesize

                                        132KB

                                        MD5

                                        a0e681fdd4613e0fff6fb8bf33a00ef1

                                        SHA1

                                        6789bacfe0b244ab6872bd3acc1e92030276011e

                                        SHA256

                                        86f6b8ffa8788603a433d425a4bc3c4031e5d394762fd53257b0d4b1cfb2ffa2

                                        SHA512

                                        6f6a1a8bfe3d33f3fa5f6134dac7cd8c017e38e5e2a75a93a958addbb17a601c5707d99a2af67e52c0a3d5206142209703701cd3fab44e0323a4553caee86196

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\chrome_200_percent.pak

                                        Filesize

                                        190KB

                                        MD5

                                        c37bd7a6b677a37313b7ecc4ff01b6f5

                                        SHA1

                                        79db970c44347bd3566cefb6cabd1995e8e173df

                                        SHA256

                                        8c1ae81d19fd6323a02eb460e075e2f25aba322bc7d46f2e6edb1c4600e6537a

                                        SHA512

                                        a7b07133fa05593b102a0e5e5788b29488cb74656c5ee25de897c2ba2b2a7b05c0663ade74a003f7d6df2134d0b75f0ad25e15e9c9e0969e9453b7fc40b9f8bb

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\d3dcompiler_47.dll

                                        Filesize

                                        4.7MB

                                        MD5

                                        9b7fa5b73141b809f83760b540400bcc

                                        SHA1

                                        612f7190d30e461fd10674c2fe76a60f71ad2be1

                                        SHA256

                                        88b65fd685b8dddf10499a3fa89e4233e41a2f005800970d60b60d9d78885f37

                                        SHA512

                                        e07ae8e3d18411350da3f9be479ecb86eafe8adf1036753ce8048bf9dac5c3df2117ff1b72a4a96bbbfadbfdd99e46e626ea149dd02f98dd5c439c353f0fca9d

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\icudtl.dat

                                        Filesize

                                        10.2MB

                                        MD5

                                        e0f1ad85c0933ecce2e003a2c59ae726

                                        SHA1

                                        a8539fc5a233558edfa264a34f7af6187c3f0d4f

                                        SHA256

                                        f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb

                                        SHA512

                                        714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\libEGL.dll

                                        Filesize

                                        500KB

                                        MD5

                                        a690b81f1f92799c2f0232acc2823432

                                        SHA1

                                        4afe806a8e30861e5c9b86db33faf27276e48eca

                                        SHA256

                                        36171974ca48454fc5026e3e04d45774e5f60e41244a8e7080419c66ebfdeadd

                                        SHA512

                                        e84e45343986bf98e965d898919f52d8f3d375e65b511e75a1979a43117eb4811dfc7c8b7fa77f33d8ae06392532162d94763d7c5c6026dafd1fe2ee35ae0da6

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\libGLESv2.dll

                                        Filesize

                                        7.3MB

                                        MD5

                                        0d376768f70ed228861509af43947b94

                                        SHA1

                                        59cd9f11991372f495100515634c0fc3e71d8cc1

                                        SHA256

                                        3ce7669dc6ff0c759eadfe20550dcf8b42e8014bb7634c02b46ea671148aada4

                                        SHA512

                                        f549f454e3aec34cd666fa4127e6161eb89a273858c9a32935035c81e1a47ccdca9ff93e2edd98eb852d95dac9839a603e615acecb29df99544a2bf994321775

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\libegl.dll

                                        Filesize

                                        500KB

                                        MD5

                                        a690b81f1f92799c2f0232acc2823432

                                        SHA1

                                        4afe806a8e30861e5c9b86db33faf27276e48eca

                                        SHA256

                                        36171974ca48454fc5026e3e04d45774e5f60e41244a8e7080419c66ebfdeadd

                                        SHA512

                                        e84e45343986bf98e965d898919f52d8f3d375e65b511e75a1979a43117eb4811dfc7c8b7fa77f33d8ae06392532162d94763d7c5c6026dafd1fe2ee35ae0da6

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\libglesv2.dll

                                        Filesize

                                        7.3MB

                                        MD5

                                        0d376768f70ed228861509af43947b94

                                        SHA1

                                        59cd9f11991372f495100515634c0fc3e71d8cc1

                                        SHA256

                                        3ce7669dc6ff0c759eadfe20550dcf8b42e8014bb7634c02b46ea671148aada4

                                        SHA512

                                        f549f454e3aec34cd666fa4127e6161eb89a273858c9a32935035c81e1a47ccdca9ff93e2edd98eb852d95dac9839a603e615acecb29df99544a2bf994321775

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\locales\en-US.pak

                                        Filesize

                                        411KB

                                        MD5

                                        626f30cfd9ad7b7c628c6a859e4013bd

                                        SHA1

                                        02e9a759c745a984b5f39223fab5be9b5ec3d5a7

                                        SHA256

                                        0fd74bb69ad35b3f9391fa760bf0eb0ee73d2bea0066244577ef2abd269513de

                                        SHA512

                                        9ce902f21fef70c5b5af444b532b36c9a00d896878cb4021c9b1dc07aa3277d956bca65ee0adb68467eec113e535b60a8a5fb5414c7d0ca761ceae5c43b7d9a9

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\resources.pak

                                        Filesize

                                        5.2MB

                                        MD5

                                        f245d1ce31841bd341b67b2558e09e9a

                                        SHA1

                                        b21368bc5d2e26ceaddfdc2233d756058113b499

                                        SHA256

                                        e1fa4a87921c2d1c970828f4c9685e3c628885dede9eb1a739c940c5bbf0de59

                                        SHA512

                                        46579abc863668b91ce5dfde3557f325deb1866ef20b68cfc8f635fbd78c062747b616422a52cf9096795106147d4fa1e427d513c128fe6562f4b75a83713fe4

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\resources\app.asar

                                        Filesize

                                        93.0MB

                                        MD5

                                        9d488e947e3da2138660cc5ec5bd6d44

                                        SHA1

                                        c9434e3681afa033c3115dca6599ec223343df4f

                                        SHA256

                                        d4c7fd1b276b9b8f6ec8692b751c2b62638c3e5a36cfa6dfc3866dc766c723ea

                                        SHA512

                                        2e625d8685a7780a2b5f2c9f9da0769d6cb3d236961b9daa64c11997dc71809e116752d71c26887f615ef6dedf80e13d20f9b5e7c695cfc716dbe1ef1d998950

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\v8_context_snapshot.bin

                                        Filesize

                                        622KB

                                        MD5

                                        0627809a565135e5299ea7c8d358e91e

                                        SHA1

                                        7473245ed9d401b66442abf7757504571ab819f7

                                        SHA256

                                        cc43d8839d139224a48d57dbc87640cd27fe1a884f625b3857664333cf00e77d

                                        SHA512

                                        cf1435e493715d565f9bfd0b5968c76c6f434eed6679ec3caa116eb8b205eb127b25944a59287f4ec6c618bfd2c88712b048d4dcb1a43d9aed2baf6622654654

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\vk_swiftshader.dll

                                        Filesize

                                        5.0MB

                                        MD5

                                        4e23afc6c26c66902d7a58547177ded1

                                        SHA1

                                        2db8b69c9caef8b5aabf3ac044920c6cdcf6eac8

                                        SHA256

                                        0cff3e08716f5145abc129604bfe759bfd546408ce0048aeece476b49e930c67

                                        SHA512

                                        61bf1b3f152ebe60aab9dbb85a39d8fd992578578c60e27f463a9ece464d666b71330d88cb763ba25b73e2f5a43cb869c2ebe5bc850b70d47276c08e91a2bb9c

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\vk_swiftshader.dll

                                        Filesize

                                        5.0MB

                                        MD5

                                        4e23afc6c26c66902d7a58547177ded1

                                        SHA1

                                        2db8b69c9caef8b5aabf3ac044920c6cdcf6eac8

                                        SHA256

                                        0cff3e08716f5145abc129604bfe759bfd546408ce0048aeece476b49e930c67

                                        SHA512

                                        61bf1b3f152ebe60aab9dbb85a39d8fd992578578c60e27f463a9ece464d666b71330d88cb763ba25b73e2f5a43cb869c2ebe5bc850b70d47276c08e91a2bb9c

                                      • C:\Users\Admin\AppData\Local\Programs\PDFunk\vk_swiftshader.dll

                                        Filesize

                                        5.0MB

                                        MD5

                                        4e23afc6c26c66902d7a58547177ded1

                                        SHA1

                                        2db8b69c9caef8b5aabf3ac044920c6cdcf6eac8

                                        SHA256

                                        0cff3e08716f5145abc129604bfe759bfd546408ce0048aeece476b49e930c67

                                        SHA512

                                        61bf1b3f152ebe60aab9dbb85a39d8fd992578578c60e27f463a9ece464d666b71330d88cb763ba25b73e2f5a43cb869c2ebe5bc850b70d47276c08e91a2bb9c

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\LICENSE.electron.txt

                                        Filesize

                                        1KB

                                        MD5

                                        4d42118d35941e0f664dddbd83f633c5

                                        SHA1

                                        2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                                        SHA256

                                        5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                                        SHA512

                                        3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\LICENSES.chromium.html

                                        Filesize

                                        8.8MB

                                        MD5

                                        a3c98bc630d6894aba7e37ce648dfe80

                                        SHA1

                                        66e504425a39bccf82977f357cd38d4df48e33b3

                                        SHA256

                                        93e5429e6af9cfed4526eef78a3800e43ef2fd21086aa582f8e4b2eb924f677d

                                        SHA512

                                        70bdd6925a47239cd5c78a46e5c738b75e1903188a9ab74bb4ba5a5a2812b469e5630aa07052596f4913a41ff893c5f9d1c635e03da6d0f48823c845f1fef857

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\PDFunk.exe

                                        Filesize

                                        164.1MB

                                        MD5

                                        6bc1903e754ac859e300757d34b02e31

                                        SHA1

                                        3c72403599f12ea9df25da23f5e5df38ed55a266

                                        SHA256

                                        9ebe9377a393a9963d853ab758271086500f3cebf09dd08c338a15c8386e0d37

                                        SHA512

                                        c09eef6b996c165a53c2ca2665bb6b8410d4ba822cbd18e6db3c8b3984da7109c0bef9d11e4f642fed65ea534a0c06d2b629ae4b15086bf28b9a952258f17b4f

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\chrome_200_percent.pak

                                        Filesize

                                        190KB

                                        MD5

                                        c37bd7a6b677a37313b7ecc4ff01b6f5

                                        SHA1

                                        79db970c44347bd3566cefb6cabd1995e8e173df

                                        SHA256

                                        8c1ae81d19fd6323a02eb460e075e2f25aba322bc7d46f2e6edb1c4600e6537a

                                        SHA512

                                        a7b07133fa05593b102a0e5e5788b29488cb74656c5ee25de897c2ba2b2a7b05c0663ade74a003f7d6df2134d0b75f0ad25e15e9c9e0969e9453b7fc40b9f8bb

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\d3dcompiler_47.dll

                                        Filesize

                                        4.7MB

                                        MD5

                                        9b7fa5b73141b809f83760b540400bcc

                                        SHA1

                                        612f7190d30e461fd10674c2fe76a60f71ad2be1

                                        SHA256

                                        88b65fd685b8dddf10499a3fa89e4233e41a2f005800970d60b60d9d78885f37

                                        SHA512

                                        e07ae8e3d18411350da3f9be479ecb86eafe8adf1036753ce8048bf9dac5c3df2117ff1b72a4a96bbbfadbfdd99e46e626ea149dd02f98dd5c439c353f0fca9d

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\ffmpeg.dll

                                        Filesize

                                        2.8MB

                                        MD5

                                        4cb5925bbf8c916011f54d969197afb5

                                        SHA1

                                        058a970dbc142f79ea6a09ac2458346c00184858

                                        SHA256

                                        7c241c684b3aeaad8ae95ecc827e4e961717365f664eac51d6cda8bdc4d17e8e

                                        SHA512

                                        7c67c513e8463352a0d632458f6e1c7e1a756523dffb11b6075cb2b2140887d139adeb27daf1925166008c80b3529d1ca0a95dd279f919981488fd3444842a89

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\icudtl.dat

                                        Filesize

                                        10.2MB

                                        MD5

                                        e0f1ad85c0933ecce2e003a2c59ae726

                                        SHA1

                                        a8539fc5a233558edfa264a34f7af6187c3f0d4f

                                        SHA256

                                        f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb

                                        SHA512

                                        714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\libEGL.dll

                                        Filesize

                                        500KB

                                        MD5

                                        a690b81f1f92799c2f0232acc2823432

                                        SHA1

                                        4afe806a8e30861e5c9b86db33faf27276e48eca

                                        SHA256

                                        36171974ca48454fc5026e3e04d45774e5f60e41244a8e7080419c66ebfdeadd

                                        SHA512

                                        e84e45343986bf98e965d898919f52d8f3d375e65b511e75a1979a43117eb4811dfc7c8b7fa77f33d8ae06392532162d94763d7c5c6026dafd1fe2ee35ae0da6

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\libGLESv2.dll

                                        Filesize

                                        7.3MB

                                        MD5

                                        0d376768f70ed228861509af43947b94

                                        SHA1

                                        59cd9f11991372f495100515634c0fc3e71d8cc1

                                        SHA256

                                        3ce7669dc6ff0c759eadfe20550dcf8b42e8014bb7634c02b46ea671148aada4

                                        SHA512

                                        f549f454e3aec34cd666fa4127e6161eb89a273858c9a32935035c81e1a47ccdca9ff93e2edd98eb852d95dac9839a603e615acecb29df99544a2bf994321775

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\af.pak

                                        Filesize

                                        447KB

                                        MD5

                                        917a688d64eccf67fef5a5eb0908b6d4

                                        SHA1

                                        7206b01bbc3fd8cc937db9050dd8ac86cf44d8cc

                                        SHA256

                                        6981249837ad767fc030edc8838878a5e493fb08cc49982cffaed16cfbeb564d

                                        SHA512

                                        195dbec8463cf89990232296c5c927e1501f0c2e01a7be7c6a6acae651853ce1edb23d639af65979b39a3c61979119c3a305acfa3aadf0cb93e241c5e57f4534

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\am.pak

                                        Filesize

                                        727KB

                                        MD5

                                        3cfd7c5bb92ab72c63e003208a9e4529

                                        SHA1

                                        165d2f69ab6a6e237f0fec943b5577123cefea87

                                        SHA256

                                        12e9e1bec1c46e5ea706157726e17a4429acf288a5754fa183bd9b4cf7d3853b

                                        SHA512

                                        cd7c7837d758ea66abc871503cda6fe99ff45990405e60c1133e7c1f4cb29ee69723c9558bb2d3eccb42948da57351f4f095062616686ab2e255acd3c86236f0

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ar.pak

                                        Filesize

                                        794KB

                                        MD5

                                        95807ec53ff36827aa78aa3407b0e6dd

                                        SHA1

                                        e65f278ee5a90937d7e26920a53a0091050164b5

                                        SHA256

                                        dd94215d80cb619f3119372cdaeb90e9ebc7ed10f2a2470e50b72c56a1e7e61b

                                        SHA512

                                        13d65721a0687d4cd49cc27c993ebcc4f127d429e922777fc542d67b35d67d3b8d880e40e9b76f8d1b4199f2882d56bca49aba9d6693bbc218848d7cb9ab919e

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\bg.pak

                                        Filesize

                                        828KB

                                        MD5

                                        a69f6075863d47b564a2feb655a2946f

                                        SHA1

                                        062232499ff73d39724c05c0df121ecd252b8a31

                                        SHA256

                                        a5eb7038ed956bad7704a722f05691474ff709dffbad92b8e31dbb869ad58334

                                        SHA512

                                        930ce3938aa02a8bcc609a64bd86b7e6164d63baad157a980fd079859a6bee5db87bd1f7a74a71108f8368bc9c6154bf14a2dba1abf269f572bc262614bcf1db

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\bn.pak

                                        Filesize

                                        1.0MB

                                        MD5

                                        d43ce80ddca3fab513431fa29be2e60a

                                        SHA1

                                        3e82282e4acfec5f0aca4672161d2f976f284a0c

                                        SHA256

                                        87670ff2ceb1ebc38fce2c3b745ac965f3de5de3133d99ed33933a8f3e99d874

                                        SHA512

                                        1d33ca9bacb91ef328f89a14777a704000bf30fe59aa1cbbbff34d8bad266c98d78c9e411e289e834e76eb721dd98934426a565cd5b3436d5a103abe37f7612a

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ca.pak

                                        Filesize

                                        503KB

                                        MD5

                                        d465d09c3faf7073f70b4dc7e02dba93

                                        SHA1

                                        e1e1de3cd31f146503758dfda4703eeb24d3938f

                                        SHA256

                                        c62f2999775fdf65146dd3f62478033daa28d8a267940076ff0cfee54c56d6a8

                                        SHA512

                                        4205c669bb708bdd07a545acffae64b100eb0df15f0864d2d680af407fbe213305ae6008ee76219b475f4dfc0cb444058d33e5009d28048b5179c73599b617ba

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\cs.pak

                                        Filesize

                                        518KB

                                        MD5

                                        c194b0dc73de42cac7879c8d8aad38bd

                                        SHA1

                                        fb5a91e03a414deb3588e483cbff3894d9b5174b

                                        SHA256

                                        51c00cfa284b70fadc95fb4a240c86c1402f31fc8a23951fb56ccb6f1e6c92d1

                                        SHA512

                                        82b821f25e0f138da92ac2130c59773db493dc9626d6aa4d117cdf6c04572f7e78d9bb4c95d4821b1b9a7af312e975aeb1338abcae18f86f8a52561d91792096

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\da.pak

                                        Filesize

                                        468KB

                                        MD5

                                        824548e3b37d348ba7fd57c398427f2b

                                        SHA1

                                        e63d298d47dd2f7ffe821fe614414c392de7a733

                                        SHA256

                                        1f263825e871ba1cfc2d47abf7df955772da82d97196521defcbae321806627b

                                        SHA512

                                        6fce1840f9ff2569a26a13e77d469ed22fddcacc78df03018adb661f2d2f0e46e6d8a9c248f2f81d655aebc92b1f32b818750dfee0769be50d9fa5b966256d12

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\de.pak

                                        Filesize

                                        500KB

                                        MD5

                                        e10a39d8f41f7473178d2881c72a7691

                                        SHA1

                                        e637abfd8b1e05b8399aae3909c106d41393b143

                                        SHA256

                                        518a5ada84eff763034d90e1b3f38109d13e7678094029d91acebff609893074

                                        SHA512

                                        5f14bcaa2fe798e43a77f7cca04366f45474e7bfa0a71910f9a61118e698b3963db2a911b573e7ef72b69db072aa2486d6dd08606ee7974781c209359b7968b6

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\el.pak

                                        Filesize

                                        907KB

                                        MD5

                                        a14d8a4499a8b2f2f5908d93e2065bf7

                                        SHA1

                                        1473a352832d9a71c97a003127e3e78613c72a17

                                        SHA256

                                        eb46d9860835b69d33b2583d1e52b20238b666b967bf00906424e3c8a161ed64

                                        SHA512

                                        427271d12590f8ea3f11b83e4c0ce79c55c289573c5f6e5c70c789b28a5181f295a3c9b1a4bdd1f731f338e6edb1e06318ea6410ceac546128a84ff8f2ec0b40

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\en-GB.pak

                                        Filesize

                                        408KB

                                        MD5

                                        b7f9397c0f3cee07667f78a47dcb79b5

                                        SHA1

                                        23b195409aa79065ec6719ad7731b4bfa6488fa0

                                        SHA256

                                        37de35396aa9f339a24ead5435d7d7b7a46a698129e3e160bf2e753519e71a9e

                                        SHA512

                                        6a6ac49e72cd93f01a6b95dc8f789ce8097b51ca4404079e32a6699af744b87520f9b8c7a5dd38af27b8f0cc480ea637a2bc387872f1e53121a2b0a5187c0c42

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\en-US.pak

                                        Filesize

                                        411KB

                                        MD5

                                        626f30cfd9ad7b7c628c6a859e4013bd

                                        SHA1

                                        02e9a759c745a984b5f39223fab5be9b5ec3d5a7

                                        SHA256

                                        0fd74bb69ad35b3f9391fa760bf0eb0ee73d2bea0066244577ef2abd269513de

                                        SHA512

                                        9ce902f21fef70c5b5af444b532b36c9a00d896878cb4021c9b1dc07aa3277d956bca65ee0adb68467eec113e535b60a8a5fb5414c7d0ca761ceae5c43b7d9a9

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\es-419.pak

                                        Filesize

                                        496KB

                                        MD5

                                        0d2090b6bdb632b5a2c2ab7b933f0012

                                        SHA1

                                        fa1929736f333f56af2f7586b0580b779b7cc6ac

                                        SHA256

                                        d670e30841f334b324a69b01c6bfc02140007c47b77916fb665457224d335313

                                        SHA512

                                        7ea9c56161c5bb0abd404d2d0eea6a3afc72b11498fbd3edfe8da24f2e651a8ef889e59f4ad0fe88ca3613cee551ab555a5fe909f65dad4f200c0225badd1b54

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\es.pak

                                        Filesize

                                        496KB

                                        MD5

                                        5ac7eed65d6be4078b4c0f3e4ad209ae

                                        SHA1

                                        a22b8a2b758a09e2f99e57dcda6346196ec182af

                                        SHA256

                                        2e110c4e2922a44e4c5d2723a913dc4f41995e6c68375535b9be17e54d47c4ad

                                        SHA512

                                        b699f120e905905f1cc61a37cabf66827b2f9b1288e75c25b6196dadf2f7bf89079cd9cb0994078446b96b2c48dff926a44de7564ed068196c5297c4e3e4d8c0

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\et.pak

                                        Filesize

                                        449KB

                                        MD5

                                        82a07b154cb241a2ebe83b0d919c89e9

                                        SHA1

                                        f7ece3a3da2dfb8886e334419e438681bfce36cf

                                        SHA256

                                        84866ccaf2ec39486f78e22886bef3fe75c1eb36e7a7c071471040e12018db28

                                        SHA512

                                        07319d155bdf9e27762ecb9ef6871430bef88b1af129450eb65aa798ebaa4e02b25b0cf9bde3b12ff1b04a3d14241569b73d6af895d2e85dd7b24d393e7317e9

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\fa.pak

                                        Filesize

                                        738KB

                                        MD5

                                        063aa2262f1ca236d6e8bf7ea2c923eb

                                        SHA1

                                        179b203864fe7f4c6a4863abe458f13e8e9c3c31

                                        SHA256

                                        f18297ead384b66fde037559597ccc3ba5ccbc13e2c8a078cb0315ae3c08e25e

                                        SHA512

                                        7d516dc39af0bf6cf9caeabd90b4aca31a60aaea0a06912949f6095738231f734eb093766af7cf6f6e66ba908777a6a1fde15c19d1e36ffbd5ed1317a80b387e

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\fi.pak

                                        Filesize

                                        459KB

                                        MD5

                                        2b3296dc20dc385d00416fd926be4363

                                        SHA1

                                        1b92ca548a39b6cb134478f1e9e6d37b0b407cb9

                                        SHA256

                                        7f826047bf16836e2f4216ad2d81476d4188fd30a7167161aa72778bd549c09b

                                        SHA512

                                        b3655f383b36adcf7f067fc46667168b70a0ddf979c1877fb6c554536ce0161fe6c853fe2da854a884fb5969877495422271a5586a7c1513f75974d99be4b6b7

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\fil.pak

                                        Filesize

                                        519KB

                                        MD5

                                        7354de570c8132723c8e57c4ccb4e7c4

                                        SHA1

                                        177780faf460e3c8a643a4d71c7a4621345a8715

                                        SHA256

                                        91149190c856195fb330605686acf09c7197e5b7efe37fe2a7c76bb8fb08cc89

                                        SHA512

                                        a8487a6a7fd46d62e78ca4262de49e12c120268561ee61a642c45efa48116edebeb40cf9e8be229db0bbf06bb6b5457cc54399a08ee6a603e5540ef5ca482798

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\fr.pak

                                        Filesize

                                        537KB

                                        MD5

                                        a21c24a333e59960832cc93ac2a7c5f5

                                        SHA1

                                        cb201b136917fba8028c28da96a1f6202b2cdbac

                                        SHA256

                                        4d0456edc5b9adaf52f563a86a2df1a9d8352eb9e0db3ebd0cd52d144fcf3d96

                                        SHA512

                                        cdca5ede21245d7b4cbff284fc6ed8666c3fafec2fa6493c2b7ea472b426b8b423eaad2f222a3a8a923681edda70f5317eed6e77b59a3eb0775743353a842247

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\gu.pak

                                        Filesize

                                        1.0MB

                                        MD5

                                        b26dc47525fdf21fe5e5f7a9f9e369e4

                                        SHA1

                                        17036782e412c9bfb90c475996dd1a77cb047f69

                                        SHA256

                                        f289db0902485b882f54d21be128511e17eedd656b1193bd7e3867c6ef72c721

                                        SHA512

                                        4c60735518ea08a7a924c2d355f982cc87e321f586310e7e574ffe4ee6a324f5649419dfbd051672d9faf70c6af689af838b9ae98d6859eb3477f76f53432268

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\he.pak

                                        Filesize

                                        646KB

                                        MD5

                                        430a115a4bf3f2cb18f94fb30288d304

                                        SHA1

                                        b21656d1b8c5da8d5939ae99e5c5cf70a02ae15c

                                        SHA256

                                        1d11768814f433e51b385c106c5b6b93c862c9bd7ad5e94c5db38e8be39abe7f

                                        SHA512

                                        3e9bd4bcb90b9570889edae6c97192374822182aa4f84404545c70801046a2e02a64677381e16221147ae7dfd729a2b2b4f68702f189cb0245540eeee4eca0dd

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\hi.pak

                                        Filesize

                                        1.1MB

                                        MD5

                                        d5c8bccf763de31916fc3fefbffa1e78

                                        SHA1

                                        e45b88b418006f773a01efbdf8e7b845eced2eb6

                                        SHA256

                                        fab49ef1d662f83c5957bd533be416890a5493b1a1017f59a900f26dec4ab218

                                        SHA512

                                        0253b76e4b441699a6048028aff1fcc0ec96dbfa154d5ffaf93b9514da77effa9623fd54eff5ae482b911138c4ba45f681ca3665e8ed3a3fdb7d7cde07a96e55

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\hr.pak

                                        Filesize

                                        500KB

                                        MD5

                                        e3b5567a76a7317f0d2558f165932970

                                        SHA1

                                        16a5128edd395c75ec1f5fbf402c30d0c5334d71

                                        SHA256

                                        e21e7db69264d049748c1e8a5c0b9e729344eeb24095a6a0d4296bac0ed3efd4

                                        SHA512

                                        e676bbfb1ab762b511238dab5eabbaa6096d3e1326f3c7b4c65b15fc578f3c5569fb37819ce7f820d52b6e5a4fcfe443beaeac41df698289952ab82cf91a7741

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\hu.pak

                                        Filesize

                                        538KB

                                        MD5

                                        8d7f8984b37d8addd9d129deffb5d82f

                                        SHA1

                                        d452f8c38f127a235e63a18a9c0f6fe34554291c

                                        SHA256

                                        f38a89355056f5c79da77eb061ef81818773f31f05454abdc04f90bda2582182

                                        SHA512

                                        0276082be9050f02bc7b5af3d2c20d5042adc8821971383543e27675ba707384d31c34982434c97cfb71eb2b277163ff955260aa08af588c6f77172a40640da8

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\id.pak

                                        Filesize

                                        443KB

                                        MD5

                                        7a8305111a209281bb52a9aed9fa76c1

                                        SHA1

                                        5ace28eac2aee90a94c0fa90a42d2cdb3f090558

                                        SHA256

                                        917f0982811e1af91eae2ef9e8d04a311f0ff07f35ceda6cb4ed44a99341b8c8

                                        SHA512

                                        8a1e8155b8c333c871cefbad671d6303480dc5748370d0d79398f43ffe2ab3c1145fbc61d443d58589cb9fbee186eab9b1e6417187150789d70b1f89a186d6d1

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\it.pak

                                        Filesize

                                        489KB

                                        MD5

                                        29a5872a85624746b6b121b5eeb9df75

                                        SHA1

                                        b45c9532c3cadaebe55b4e4e7ac79a5c431b582f

                                        SHA256

                                        a7b8d2ff2b57f45bf772ffacc8d6d40c84ebed7cc93eb90eb29dc79fc3b39332

                                        SHA512

                                        e90261bebcd73e4715c26f6216c24b775c650a9d79836072e77646cb2d2ce973db399d4cccb076b3edc3f76392d705722f1cdc3cc86c96752590d850bddd9acb

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ja.pak

                                        Filesize

                                        598KB

                                        MD5

                                        502862bbf3354c21cfe41ca030f05460

                                        SHA1

                                        74fa182b00d52a038beddba761d46a6489a43f89

                                        SHA256

                                        8dfec15e5e0b9ab1ecf90e70c8d8334eeb01cf98c2dee8ba0c087961ee83dc85

                                        SHA512

                                        809270deae74d14055895d4b25a6a83558f382b33ec0702220f41a570b65bfebde7f8d3ce0096ca4880c17255440ca700e4e8551555352826202dbd9a840eb11

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\kn.pak

                                        Filesize

                                        1.2MB

                                        MD5

                                        14c385329a3886cee489e74c7c39a9db

                                        SHA1

                                        ec645bdb8cd74792dce58664c5f673aaa9d37cb9

                                        SHA256

                                        28b0cd94e0112bb8bb0f3eb6223deb639fdcb81f7fe9c44db6cac0576e6db8ee

                                        SHA512

                                        e8effba55346bab30508ee3d1f7fa6a5fda75400980b136a9dff57ed8c8ef8c0f65e231a1a309a64007b15dd459d2fa34c1cf7e74f42700b3dd8d6e5ba84ff08

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ko.pak

                                        Filesize

                                        505KB

                                        MD5

                                        c1f8d364263dced2c0375f0a3714b538

                                        SHA1

                                        8ff723bca34f72a1104d7bc0efed5e7b00f87250

                                        SHA256

                                        f0cf3384f1e3d464187727fd54a030bbdd1de0e19164bb61a1418346e53c8185

                                        SHA512

                                        c243875d80e0d8bb491d92550dbf2ecdffadaabf2a2c33b4af3566042b66f25bb14ff507d6af7efb319ad4b96c4e8bf5ae54d3e68818ff0477d0a8e4de775b17

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\lt.pak

                                        Filesize

                                        543KB

                                        MD5

                                        3e9119a712530a825bca226ec54dba45

                                        SHA1

                                        10f1b6bf2fa3a1b5af894d51b4eb47296c0dbc36

                                        SHA256

                                        3da531a9a5870315823e74b23031cb81379d2d94ae9894a7fb1d8a8ad51a2da9

                                        SHA512

                                        765c872cafa1b266575b0cac09dfa796cdb860bd82e1c657397fe2aada11771f306b0a1776e4d66ff41e94b153c812592430f31e7b1ff97abe7d8e6b96d321f1

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\lv.pak

                                        Filesize

                                        541KB

                                        MD5

                                        e75cdda386dd3131e4cffb13883cda5f

                                        SHA1

                                        20e084cb324e03fd0540fff493b7ecc5624087e9

                                        SHA256

                                        ae782f1e53201079ca555baa5ec04b163188e5161242d185f04a606a49fc8c0d

                                        SHA512

                                        d27bc61028031946ed6708918f921c3d681c8962b8d5507a91ab6576e3b2c462524e550305db87ede886e41fb0e49edec2d84cdbbad675282105627e01d98bf5

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ml.pak

                                        Filesize

                                        1.2MB

                                        MD5

                                        6e96eddfe80da6aaa87f677feef4d1d6

                                        SHA1

                                        8a998785d56bc32b15cee97b172cd2dcdc8508d9

                                        SHA256

                                        e2fb73353ab05eb78f9845bdbdf50b64c9fb776b7f08948f976fe64e683397c4

                                        SHA512

                                        feea11dfc6ec153ab903b5828306617eedeee19daa73bd046ae47757795fecb9abce6192bb3a9561aaace7fc85ee442057b93081c6c986855b819fd38815e6f7

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\mr.pak

                                        Filesize

                                        1.0MB

                                        MD5

                                        fda40999c6a1b435a1490f5edca57ccd

                                        SHA1

                                        41103b2182281df2e7c04a3fff23ec6a416d6aa9

                                        SHA256

                                        0ebb125a0bdfd1e21b79914ca8e279790d41f7bac35bf2d031dd7981f1c1c056

                                        SHA512

                                        666ceb24d2e568a00a77512295e224a6545bf6abcfa19c93aa823db5330117fcb39fde570e7601dbd41976950c3ec03634f89fc5d9203357515e6651ab0b6d32

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ms.pak

                                        Filesize

                                        465KB

                                        MD5

                                        7194110ed1154b3a93a69b0782c381f2

                                        SHA1

                                        1fed9c176e09e0c3be4a7869dd8ec8bea89253f9

                                        SHA256

                                        b1c7d236cf3ecb0b8dda67c0144a0b7f9475ea9f8caecc7cdb7f9bc38657e38c

                                        SHA512

                                        fa96904519f35901adc02e6943e23e1863d99694e721b026bcf488448a80fc96a2283c550c0263ba3cbe9c2cc13756f4b23b39fec3ee94a8e9a2de0d5c8be910

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\nb.pak

                                        Filesize

                                        452KB

                                        MD5

                                        8d4079fa5e1bc2b997e03f9d778ffa3e

                                        SHA1

                                        aba0aa098d2e4c2f357d7c3d24b4e5dd8f8ba7f8

                                        SHA256

                                        c86a5e4999006c57de6b5a73304264ef1e90026ec42cd77b087432b31a293070

                                        SHA512

                                        7986bae3e34e77d9d19b8a7fab6b5dc4d0a724cdb0c20d8d8bf8f69d25561592815620e866805f362e1b71aec777a397185da69eba90a86c0db137524569ecf9

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\nl.pak

                                        Filesize

                                        466KB

                                        MD5

                                        9422c5857313c144af3d771329b4a62c

                                        SHA1

                                        b2bf6c7468f1d534c3f4672e9393fcad7ee5e162

                                        SHA256

                                        b3612c960fdd36dea7a4ef5ca438931c0b68d3d7c83f9b41463a372a0b3d7d20

                                        SHA512

                                        16b38367f90caf2b322521187ea3748d1c540aa592593934a63a632f9ba536f5898ef44c3a11c1feeafc268ca871640b454d2322e82d764aa9fabd794d0628c3

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\pl.pak

                                        Filesize

                                        521KB

                                        MD5

                                        78cf44f4c20a1f5c39ff2d1eb4521cf0

                                        SHA1

                                        2fb727c7445e0ce2a1d45bfe041045db26b427b4

                                        SHA256

                                        6485f283092bcc2c77492a37e72008758a66691ef02784eaa94afe072f5804f2

                                        SHA512

                                        1f80a83da2c998770b0a6746616f0eca1726c73cddc5f3ba1df1abd79ca64ed5893b9f87c3fc42d1d33af529ac9667acdfa27fa1fa39432a428accead54704d2

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\pt-BR.pak

                                        Filesize

                                        490KB

                                        MD5

                                        2a99d53bfeb9411106629724b91137e2

                                        SHA1

                                        a25c5073044965cd712aecd690c2c4280aa1faea

                                        SHA256

                                        b76d74dddc463440b98a5ccace7c86870768ae96859e267cc28bcea1513d2b85

                                        SHA512

                                        c949332b93649f3807c30efe1ab10fd9935bddc922ca2c5b0cd5bffcef2c2889f6b59ce90e2cf3b9404e6763412c9f444a55fa884e0ea0ec4435a3e855c2b7e6

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\pt-PT.pak

                                        Filesize

                                        492KB

                                        MD5

                                        48fd5038c03e52161a319884d4679c2e

                                        SHA1

                                        862bbc25012efe513b4124bf897459807940928f

                                        SHA256

                                        e363e50ab6c96015311051e76f4d7a34dd54eaabbb16fcc33d0809f9669426de

                                        SHA512

                                        84978bdbfb046e2918c9d7e297185b3b40765a256763cb9ae63c4101b84e635032ce2f2162d6a07734d7b2d8d36d8980131f245ab8df2754177b860ed7dcd252

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ro.pak

                                        Filesize

                                        510KB

                                        MD5

                                        45b758db92da6e222d61d68817c39231

                                        SHA1

                                        022f25dd84a7128cc8fa88cc0788efe6ea1803b5

                                        SHA256

                                        a0de06e80a6254dfe96cb89f3b044d8995afc041319cd68eb951df7027c94c4d

                                        SHA512

                                        d88b8797fbe91405e1c4e7c2c4ceae50650b6e03f90524a357edabc51ca1cf172ff24d63ae80f4c8a28d85b762974e6870ad49c069c77fb49b2a29d5c71eda23

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ru.pak

                                        Filesize

                                        836KB

                                        MD5

                                        861afee54ac41dd3c1c18f0249244862

                                        SHA1

                                        bf300427bbaacf527453a049311dc384603044f1

                                        SHA256

                                        543033e93e7e0835889f25532d016299702105e972ffb4598ab4cdc325cc31c3

                                        SHA512

                                        3bc838dba56593296125301992fd3c2d4af816674492e40f97f2cb78a40bb1d93a6999b16c0033f5423a10029a5bcca10d73d447a58290cb95a4fba1f7c65c0d

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\sk.pak

                                        Filesize

                                        526KB

                                        MD5

                                        f117e58e6eb53da1dbfa4c04a798e96f

                                        SHA1

                                        e98cee0a94a9494c0cfc639bb9e42a4602c23236

                                        SHA256

                                        b46db20eeba11f8365296b54469fdd001579852dc1d49a01fc59d2a8bcf880a3

                                        SHA512

                                        dea792a63e0557d9e868c0310ec2a68b713daf5cf926389e05a0885cdb05433d20f35d087de269f9584795da50600966b8ff5dd95583861443a1e90564a89793

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\sl.pak

                                        Filesize

                                        506KB

                                        MD5

                                        cf2f4bab4e5c2475409cf2b658d401e8

                                        SHA1

                                        8f20d0dccaf14939fd7c6a368ee0fe73a509809d

                                        SHA256

                                        20f91b60653bfa043dcd1e6c5af0beece029742b41b3f7157837bde3a6357e83

                                        SHA512

                                        ee74c11eadd48b1034059391e382335b133d8df5ecf8340010cdbea0f98a30e040e711f7aff108b25bd03867ce0492d6247f0b9ddf4609e95b08342ca1dd8769

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\sr.pak

                                        Filesize

                                        780KB

                                        MD5

                                        8f58b2463e8240ef62e651685e1f17d8

                                        SHA1

                                        6c9f302aed807a67f6b93bcb79577397a5ad3cf7

                                        SHA256

                                        5a55320d6953efb5b565893e32e01f6dae781a16460df5502c8ba012c893edfd

                                        SHA512

                                        6076d43a73d5fa5192cbe597e018b268cfdc7efb94a6cb45dad5b0da9c3abf68aaf2ea06f3ad650b28a993605917b6d356339d79f8dd6962d2c40dbf4653ef83

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\sv.pak

                                        Filesize

                                        454KB

                                        MD5

                                        6fff1843aa7ba3b0f00f04effc6768b2

                                        SHA1

                                        c47f17efdd348db7af0e24a65caa797e20663011

                                        SHA256

                                        0a992cd84501a736cbf22c7299ac98e98fcb0772006cedbacf853b7c88cc9382

                                        SHA512

                                        5f317dd82391cd7c963df5dcd65a16fda0f24d89fc3da905a99d5b78611362a4c12537f7dce2e475a9f9df2197bc0cb99ec08dfc093f2e80c01bb63477c0f947

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\sw.pak

                                        Filesize

                                        479KB

                                        MD5

                                        b167d748390dd2618faafc32ea93a744

                                        SHA1

                                        da5b68a3f09904578bf361d3a316e39689b5f906

                                        SHA256

                                        a5b3021ab3a25a1a2cebcdcc7a8afabfba4e51a4e732f92f77c10c53ad1edcf3

                                        SHA512

                                        1e01c8d6793f4cd7856807c317551a32b004fff69c31eae08339a5577f32a048b9313d152f2b703a5997e29bbf18c2b2ba436cbd7f8e02c1accda74622f548a8

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ta.pak

                                        Filesize

                                        1.2MB

                                        MD5

                                        17dc3b0955abf8615cc5ac76d15bac4b

                                        SHA1

                                        d7a246f15a9d87130e2c604f8b7613a392ddf5b7

                                        SHA256

                                        e1d53f194f2139387b9e090878cc8d0598c9eb264e4a64fd1cae15f1b924b55a

                                        SHA512

                                        61c5734cded251fefc2e2d749837dde90bf5ce6cfcd281b9b31f4d0c1a12d9650a70ecd40a0264dfa03c69f80259184ae3cb74837b28e9e6998c2dc9367112c8

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\te.pak

                                        Filesize

                                        1.1MB

                                        MD5

                                        4459db04ea82d38f506bdfc54b4fa518

                                        SHA1

                                        e61e21c389db4de88a6a87b6789b3539dd3674a3

                                        SHA256

                                        27495d60416114dc8036c1c52f1d8699c183ae63bbd7d37123254178e95a8bd5

                                        SHA512

                                        c97277bb08e7063c732bd83ecbef72ce686bb6ab4d53acb5bbbb65096ccd3c939e18e0d17c41b8c8aeba19c1c2092ce1c3b5511fe3c85d9e4e8721d19a5e11a0

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\th.pak

                                        Filesize

                                        964KB

                                        MD5

                                        42cc3bb8b447484dbd5c52a084f7210e

                                        SHA1

                                        0f0531fa4001624dd9f24cb3201743295fa6f699

                                        SHA256

                                        6e7a5239750de9f4656baff139f44ebe5529a8fed52f44de2ca9e7cfa098c223

                                        SHA512

                                        6e7513a78c2dc9799ab6ef6d252db70ab8631077bc5024b69ec9813d7b5ea6df378520f0e47dc1471dce52c8f3d81a553c13e3a8bd1585a62adfd30290337edf

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\tr.pak

                                        Filesize

                                        489KB

                                        MD5

                                        9d2fe4b96529259b59eae96fe238d248

                                        SHA1

                                        2d0da13b1b8560a49fbac4219319bce058edf926

                                        SHA256

                                        307ed9cc2180fb16b97f08179daf24f49d0b9e5716619be77a06fa92c5abfa22

                                        SHA512

                                        2a3184e2e6920208c1e29241fe20e82646559a6f50d70f5e181b9e793d52c2c2f444dc7f4b04ce78b5ef687e8a67b7b5f226a4fc42b4005729505895a17a9f7e

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\uk.pak

                                        Filesize

                                        836KB

                                        MD5

                                        19046d2beb8fa677884db876952e2bd1

                                        SHA1

                                        adb587c20af8f59109ef17e59029da1e95af068f

                                        SHA256

                                        3c53272597791b9887da82e5aae8a2454bdd6bfc33104bb384ac78f5acc991ca

                                        SHA512

                                        c527c8fb4ed92d621d6799a9ac1732f155019b1b091ca93efbb316aa33d971896d6b1dcde4e1e3a5ff1af04cfe445f7e0936349be1dd4085573b93e6096b8808

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\ur.pak

                                        Filesize

                                        732KB

                                        MD5

                                        861ffd74ae5b392d578b3f3004c94ce3

                                        SHA1

                                        8a4a05317a0f11d9d216b3e53e58475c301d7ea5

                                        SHA256

                                        b9f22a23368bf1e21f3085583ecb775cce8045176721ff6ae798b06bd2810dbc

                                        SHA512

                                        52ede35b7ed1fb6e51b18e450b95c3245d326f2afda646e3642ee68b714dcf9a726afe32e2759e9ea87a104f4a59e6fc2c60b3275aad8332ae1c626231e6747b

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\vi.pak

                                        Filesize

                                        578KB

                                        MD5

                                        9f832a3fadeea142633aa5b12478b603

                                        SHA1

                                        4ed8857d36f11050c44944bff1c02f1376c19abb

                                        SHA256

                                        71c3d54b72347c0a5620921765fcfd1e8ca727f800ef043f9364c87ca5ebea2c

                                        SHA512

                                        686b99e5e42a0c634547fcece36c2e70d1df03e084df7970dd71b83f3b1a8870085cd55b8e23505c7b1046eef3b4a7999c807a18daf7acf71381d51140832467

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\zh-CN.pak

                                        Filesize

                                        418KB

                                        MD5

                                        b0bb909e6def0826f42d13e4912b9b26

                                        SHA1

                                        a15378b60192729c6b03300e5417ed60def0c51d

                                        SHA256

                                        36a1249bf51a1c7fdf52f96541babd10e4102f524ec2f9560807c86f1db70ac8

                                        SHA512

                                        de50fa9ca63acd1f9a3baddee67946f239bbe422d05412cb4391712ad56e54666aa8c3336b965b4803d9412bb3ae83cae94ee709d17826dcd9ca518c864f329f

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\locales\zh-TW.pak

                                        Filesize

                                        414KB

                                        MD5

                                        f8c463cb3e00e3ee498b882df12870c6

                                        SHA1

                                        d1a06671e64ad40a976b9a6ab3ffa91bed016872

                                        SHA256

                                        121212682e9cef810d933f9600511c94e96232537908586b1608a52158e16d83

                                        SHA512

                                        b639632aef6df35101c198a228ef766bf4cf66cefa25c36d3e8811363d1067875a7e4ab2a5901f0ccaa7f095735d60549a1a08dd450468983fe74b2e6b73ef65

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\resources.pak

                                        Filesize

                                        5.2MB

                                        MD5

                                        f245d1ce31841bd341b67b2558e09e9a

                                        SHA1

                                        b21368bc5d2e26ceaddfdc2233d756058113b499

                                        SHA256

                                        e1fa4a87921c2d1c970828f4c9685e3c628885dede9eb1a739c940c5bbf0de59

                                        SHA512

                                        46579abc863668b91ce5dfde3557f325deb1866ef20b68cfc8f635fbd78c062747b616422a52cf9096795106147d4fa1e427d513c128fe6562f4b75a83713fe4

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\resources\app-update.yml

                                        Filesize

                                        127B

                                        MD5

                                        00501e3d0d8a098a23156d3d22cbdd82

                                        SHA1

                                        7b52a1915a4c4a85a7c2c8dd1a1ca61a1aa555cc

                                        SHA256

                                        58c4350e9f01aab2e541357f37fb1cd28dae37120c8b9ff69517dd2e06dab5dd

                                        SHA512

                                        70887391374f8a31c3ea96cc30d1d6f08c9691d784703dd571a1a48c6455f51d88315f1b6860e850bff8d09037567f854b695b6c9024f72bfae44dd834ab82dd

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\resources\app.asar

                                        Filesize

                                        93.0MB

                                        MD5

                                        9d488e947e3da2138660cc5ec5bd6d44

                                        SHA1

                                        c9434e3681afa033c3115dca6599ec223343df4f

                                        SHA256

                                        d4c7fd1b276b9b8f6ec8692b751c2b62638c3e5a36cfa6dfc3866dc766c723ea

                                        SHA512

                                        2e625d8685a7780a2b5f2c9f9da0769d6cb3d236961b9daa64c11997dc71809e116752d71c26887f615ef6dedf80e13d20f9b5e7c695cfc716dbe1ef1d998950

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\snapshot_blob.bin

                                        Filesize

                                        269KB

                                        MD5

                                        063037259835b8849f17d8994c9b0bba

                                        SHA1

                                        07b5121f87a6109514237a6e48d58d6d9683548f

                                        SHA256

                                        a323ecc84d7ecd10bea49399ffb1aabc9452388e33a5ca19e0c28bf9fffb6d62

                                        SHA512

                                        fbfc9a9145834a0f756d2b74af61b5b902b6f2c4f9db06dc49c12ee2c64956ea12d2b756b31ac3f0532839f52f47613b2fe23b6a7c1eb1615385ad29d5454650

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\v8_context_snapshot.bin

                                        Filesize

                                        622KB

                                        MD5

                                        0627809a565135e5299ea7c8d358e91e

                                        SHA1

                                        7473245ed9d401b66442abf7757504571ab819f7

                                        SHA256

                                        cc43d8839d139224a48d57dbc87640cd27fe1a884f625b3857664333cf00e77d

                                        SHA512

                                        cf1435e493715d565f9bfd0b5968c76c6f434eed6679ec3caa116eb8b205eb127b25944a59287f4ec6c618bfd2c88712b048d4dcb1a43d9aed2baf6622654654

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\vk_swiftshader.dll

                                        Filesize

                                        5.0MB

                                        MD5

                                        4e23afc6c26c66902d7a58547177ded1

                                        SHA1

                                        2db8b69c9caef8b5aabf3ac044920c6cdcf6eac8

                                        SHA256

                                        0cff3e08716f5145abc129604bfe759bfd546408ce0048aeece476b49e930c67

                                        SHA512

                                        61bf1b3f152ebe60aab9dbb85a39d8fd992578578c60e27f463a9ece464d666b71330d88cb763ba25b73e2f5a43cb869c2ebe5bc850b70d47276c08e91a2bb9c

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\vk_swiftshader_icd.json

                                        Filesize

                                        106B

                                        MD5

                                        8642dd3a87e2de6e991fae08458e302b

                                        SHA1

                                        9c06735c31cec00600fd763a92f8112d085bd12a

                                        SHA256

                                        32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                                        SHA512

                                        f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\7z-out\vulkan-1.dll

                                        Filesize

                                        954KB

                                        MD5

                                        4d4caae9f811877a42f00ca12b863628

                                        SHA1

                                        12faa49f2a3da98cea498b5526e1c933b583a717

                                        SHA256

                                        d3e3097818e0cba69c43b96e9ca1f2f06f00d1795eff82021ab7cce91d31478d

                                        SHA512

                                        675ddfde647161f8defd61875c6a8ad3f86562ed0b8a97ce3a7336282737f9a9c2102c74637fe123f5255ee162b22ab0cbd6ff445ca9ec9c9c81380a925a3c6d

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\StdUtils.dll

                                        Filesize

                                        100KB

                                        MD5

                                        c6a6e03f77c313b267498515488c5740

                                        SHA1

                                        3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                                        SHA256

                                        b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                                        SHA512

                                        9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\StdUtils.dll

                                        Filesize

                                        100KB

                                        MD5

                                        c6a6e03f77c313b267498515488c5740

                                        SHA1

                                        3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                                        SHA256

                                        b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                                        SHA512

                                        9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\System.dll

                                        Filesize

                                        12KB

                                        MD5

                                        0d7ad4f45dc6f5aa87f606d0331c6901

                                        SHA1

                                        48df0911f0484cbe2a8cdd5362140b63c41ee457

                                        SHA256

                                        3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                                        SHA512

                                        c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\System.dll

                                        Filesize

                                        12KB

                                        MD5

                                        0d7ad4f45dc6f5aa87f606d0331c6901

                                        SHA1

                                        48df0911f0484cbe2a8cdd5362140b63c41ee457

                                        SHA256

                                        3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                                        SHA512

                                        c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\UAC.dll

                                        Filesize

                                        14KB

                                        MD5

                                        adb29e6b186daa765dc750128649b63d

                                        SHA1

                                        160cbdc4cb0ac2c142d361df138c537aa7e708c9

                                        SHA256

                                        2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

                                        SHA512

                                        b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\UAC.dll

                                        Filesize

                                        14KB

                                        MD5

                                        adb29e6b186daa765dc750128649b63d

                                        SHA1

                                        160cbdc4cb0ac2c142d361df138c537aa7e708c9

                                        SHA256

                                        2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

                                        SHA512

                                        b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\WinShell.dll

                                        Filesize

                                        3KB

                                        MD5

                                        1cc7c37b7e0c8cd8bf04b6cc283e1e56

                                        SHA1

                                        0b9519763be6625bd5abce175dcc59c96d100d4c

                                        SHA256

                                        9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                                        SHA512

                                        7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\WinShell.dll

                                        Filesize

                                        3KB

                                        MD5

                                        1cc7c37b7e0c8cd8bf04b6cc283e1e56

                                        SHA1

                                        0b9519763be6625bd5abce175dcc59c96d100d4c

                                        SHA256

                                        9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                                        SHA512

                                        7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\WinShell.dll

                                        Filesize

                                        3KB

                                        MD5

                                        1cc7c37b7e0c8cd8bf04b6cc283e1e56

                                        SHA1

                                        0b9519763be6625bd5abce175dcc59c96d100d4c

                                        SHA256

                                        9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                                        SHA512

                                        7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\WinShell.dll

                                        Filesize

                                        3KB

                                        MD5

                                        1cc7c37b7e0c8cd8bf04b6cc283e1e56

                                        SHA1

                                        0b9519763be6625bd5abce175dcc59c96d100d4c

                                        SHA256

                                        9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                                        SHA512

                                        7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\WinShell.dll

                                        Filesize

                                        3KB

                                        MD5

                                        1cc7c37b7e0c8cd8bf04b6cc283e1e56

                                        SHA1

                                        0b9519763be6625bd5abce175dcc59c96d100d4c

                                        SHA256

                                        9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                                        SHA512

                                        7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\nsExec.dll

                                        Filesize

                                        6KB

                                        MD5

                                        ec0504e6b8a11d5aad43b296beeb84b2

                                        SHA1

                                        91b5ce085130c8c7194d66b2439ec9e1c206497c

                                        SHA256

                                        5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                                        SHA512

                                        3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\nsExec.dll

                                        Filesize

                                        6KB

                                        MD5

                                        ec0504e6b8a11d5aad43b296beeb84b2

                                        SHA1

                                        91b5ce085130c8c7194d66b2439ec9e1c206497c

                                        SHA256

                                        5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                                        SHA512

                                        3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\nsis7z.dll

                                        Filesize

                                        424KB

                                        MD5

                                        80e44ce4895304c6a3a831310fbf8cd0

                                        SHA1

                                        36bd49ae21c460be5753a904b4501f1abca53508

                                        SHA256

                                        b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                                        SHA512

                                        c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                                      • C:\Users\Admin\AppData\Local\Temp\nspE9B0.tmp\nsis7z.dll

                                        Filesize

                                        424KB

                                        MD5

                                        80e44ce4895304c6a3a831310fbf8cd0

                                        SHA1

                                        36bd49ae21c460be5753a904b4501f1abca53508

                                        SHA256

                                        b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                                        SHA512

                                        c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                                      • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                        Filesize

                                        2B

                                        MD5

                                        f3b25701fe362ec84616a93a45ce9998

                                        SHA1

                                        d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                        SHA256

                                        b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                        SHA512

                                        98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                                      • C:\Users\Admin\AppData\Roaming\PDFunk\Cache\Cache_Data\data_0

                                        Filesize

                                        8KB

                                        MD5

                                        cf89d16bb9107c631daabf0c0ee58efb

                                        SHA1

                                        3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                        SHA256

                                        d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                        SHA512

                                        8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                                      • C:\Users\Admin\AppData\Roaming\PDFunk\Cache\Cache_Data\data_2

                                        Filesize

                                        8KB

                                        MD5

                                        0962291d6d367570bee5454721c17e11

                                        SHA1

                                        59d10a893ef321a706a9255176761366115bedcb

                                        SHA256

                                        ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                                        SHA512

                                        f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                                      • C:\Users\Admin\AppData\Roaming\PDFunk\Cache\Cache_Data\data_3

                                        Filesize

                                        8KB

                                        MD5

                                        41876349cb12d6db992f1309f22df3f0

                                        SHA1

                                        5cf26b3420fc0302cd0a71e8d029739b8765be27

                                        SHA256

                                        e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                                        SHA512

                                        e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                                      • C:\Users\Admin\AppData\Roaming\PDFunk\Network\Network Persistent State

                                        Filesize

                                        300B

                                        MD5

                                        c4d258783410128a284528be797cc013

                                        SHA1

                                        44bbdd9f5ecf1a28d6c03d053877d30cc0493d71

                                        SHA256

                                        402aa0148bbe0383de9ac16d8513c1717d43f35000ed8c2340aa676078aafe85

                                        SHA512

                                        d05c23e6ac052ba9b482f1eb659dacba2e0d40f47a8ad708c88617691e98667b40b2ccc26fda4b0badac63b6e446c540ac13b140519d35b3088b85b35a8d6c58

                                      • C:\Users\Admin\AppData\Roaming\PDFunk\Network\Network Persistent State~RFe5b2ecd.TMP

                                        Filesize

                                        59B

                                        MD5

                                        2800881c775077e1c4b6e06bf4676de4

                                        SHA1

                                        2873631068c8b3b9495638c865915be822442c8b

                                        SHA256

                                        226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                                        SHA512

                                        e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                                      • C:\Users\Admin\AppData\Roaming\PDFunk\Session Storage\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        46295cac801e5d4857d09837238a6394

                                        SHA1

                                        44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                        SHA256

                                        0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                        SHA512

                                        8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                      • C:\Users\Admin\Desktop\PDFunk.lnk

                                        Filesize

                                        2KB

                                        MD5

                                        f0ceebe0c01c5989fdadf357e8fd8eca

                                        SHA1

                                        c154d7b65c528c81cd1a3154d612a02b925fbed2

                                        SHA256

                                        a90a43c7a83d3d202a9a5c1729720625ab690a4ec88d0095e9a3db1770a134be

                                        SHA512

                                        55fddd29e18fefd8af270a0643f53cea5a7278d749135a5f8868d7fca8fafa3d1ab35f13cf0765e5aadc28de2f6a8e3fee20218ce03d3fb4403d3370d78c3535

                                      • C:\Users\Admin\Downloads\PDFunk-Setup.exe

                                        Filesize

                                        93.3MB

                                        MD5

                                        3b7f9e51c3ca9737fd00bd33896dbb26

                                        SHA1

                                        206ab0d2e435e5d99e236e120a0a172c6a70e481

                                        SHA256

                                        13b15f78a647c8d0a55dec079a89d7d48c09c6f0120cd6396bcc17d80f8762f8

                                        SHA512

                                        0a2eb1a5544b6c26d610dbabaa8ab03b62085af02ab0fc8b3757326d50ca0ed7ff879eae5d8933eca16dfef9c72e5ae8e4afa6228dadde41db4221bd2922defe

                                      • C:\Users\Admin\Downloads\PDFunk-Setup.exe

                                        Filesize

                                        93.3MB

                                        MD5

                                        3b7f9e51c3ca9737fd00bd33896dbb26

                                        SHA1

                                        206ab0d2e435e5d99e236e120a0a172c6a70e481

                                        SHA256

                                        13b15f78a647c8d0a55dec079a89d7d48c09c6f0120cd6396bcc17d80f8762f8

                                        SHA512

                                        0a2eb1a5544b6c26d610dbabaa8ab03b62085af02ab0fc8b3757326d50ca0ed7ff879eae5d8933eca16dfef9c72e5ae8e4afa6228dadde41db4221bd2922defe

                                      • C:\Users\Admin\Downloads\PDFunk-Setup.exe

                                        Filesize

                                        93.3MB

                                        MD5

                                        3b7f9e51c3ca9737fd00bd33896dbb26

                                        SHA1

                                        206ab0d2e435e5d99e236e120a0a172c6a70e481

                                        SHA256

                                        13b15f78a647c8d0a55dec079a89d7d48c09c6f0120cd6396bcc17d80f8762f8

                                        SHA512

                                        0a2eb1a5544b6c26d610dbabaa8ab03b62085af02ab0fc8b3757326d50ca0ed7ff879eae5d8933eca16dfef9c72e5ae8e4afa6228dadde41db4221bd2922defe

                                      • memory/1308-1102-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1100-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1067-0x0000019487C10000-0x0000019487C11000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/1308-1065-0x0000019487C10000-0x0000019487C11000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/1308-1093-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1101-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1070-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1072-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1075-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1066-0x0000019487C10000-0x0000019487C11000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/1308-1103-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1081-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1099-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1084-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1098-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1085-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1088-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1097-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1091-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/1308-1096-0x0000019487D20000-0x0000019487D22000-memory.dmp

                                        Filesize

                                        8KB

                                      • memory/3012-1080-0x000002AD31F50000-0x000002AD31F51000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/3012-1094-0x000002AD31F50000-0x000002AD31F51000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/3012-1090-0x000002AD31F50000-0x000002AD31F51000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/3012-1089-0x000002AD31F50000-0x000002AD31F51000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/3012-1086-0x000002AD31F50000-0x000002AD31F51000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/3012-1083-0x000002AD31F50000-0x000002AD31F51000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/3012-1079-0x000002AD31F50000-0x000002AD31F51000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/4240-1036-0x0000028F69D10000-0x0000028F69D40000-memory.dmp

                                        Filesize

                                        192KB

                                      • memory/4240-965-0x00007FFD40E70000-0x00007FFD40E71000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/4240-988-0x00007FFD40700000-0x00007FFD40701000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/4448-1041-0x0000024BB0E30000-0x0000024BB0E60000-memory.dmp

                                        Filesize

                                        192KB