0f16dca2b2fa402c1c5dc595578ddab6f8ee79292e16a3e4f92a469552e0d75f

Analysis

max time kernel
84s
max time network
131s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 19:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Lunar Client v3.1.3.exe
Size

1.0MB
MD5

b2f87d23b0b8766b4372001d707a882a
SHA1

826f6b69f2a95d9e1c0361216780a7f588931350
SHA256

0f16dca2b2fa402c1c5dc595578ddab6f8ee79292e16a3e4f92a469552e0d75f
SHA512

30fc2c1aba9da0daa79498325621b2efce6f3b80eab59e86701ddfa50ab20c44be2a4a034130f9217e49440466855345aa323910c7a8e93d5911a0a89b3436c4
SSDEEP

24576:LJG1vzfnMDhozjDu173pG1szLSvJwSHw9sUQSOGl:wvzfMDhEjK73pfqvCSHw9ZQlY

Score

4^/10

Malware Config

Signatures

Loads dropped DLL 6 IoCs

pid	Process
1860	Lunar Client v3.1.3.exe
1860	Lunar Client v3.1.3.exe
1860	Lunar Client v3.1.3.exe
1860	Lunar Client v3.1.3.exe
1860	Lunar Client v3.1.3.exe
1860	Lunar Client v3.1.3.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
2516	tasklist.exe

Modifies system certificate store 2 TTPs 3 IoCs

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474	Lunar Client v3.1.3.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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	Lunar Client v3.1.3.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 19000000010000001000000068cb42b035ea773e52ef50ecf50ec529030000000100000014000000d4de20d05e66fc53fe1a50882c78db2852cae47409000000010000000c000000300a06082b060105050703011d0000000100000010000000918ad43a9475f78bb5243de886d8103c140000000100000014000000e59d5930824758ccacfa085436867b3ab5044df053000000010000002400000030223020060a2b06010401b13e01640130123010060a2b0601040182373c0101030200c00b0000000100000034000000420061006c00740069006d006f007200650020004300790062006500720054007200750073007400200052006f006f00740000000f0000000100000014000000ce0e658aa3e847e467a147b3049191093d055e6f20000000010000007b030000308203773082025fa0030201020204020000b9300d06092a864886f70d0101050500305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f74301e170d3030303531323138343630305a170d3235303531323233353930305a305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f7430820122300d06092a864886f70d01010105000382010f003082010a0282010100a304bb22ab983d57e826729ab579d429e2e1e89580b1b0e35b8e2b299a64dfa15dedb009056ddb282ece62a262feb488da12eb38eb219dc0412b01527b8877d31c8fc7bab988b56a09e773e81140a7d1ccca628d2de58f0ba650d2a850c328eaf5ab25878a9a961ca967b83f0cd5f7f952132fc21bd57070f08fc012ca06cb9ae1d9ca337a77d6f8ecb9f16844424813d2c0c2a4ae5e60feb6a605fcb4dd075902d459189863f5a563e0900c7d5db2067af385eaebd403ae5e843e5fff15ed69bcf939367275cf77524df3c9902cb93de5c923533f1f2498215c079929bdc63aece76e863a6b97746333bd681831f0788d76bffc9e8e5d2a86a74d90dc271a390203010001a3453043301d0603551d0e04160414e59d5930824758ccacfa085436867b3ab5044df030120603551d130101ff040830060101ff020103300e0603551d0f0101ff040403020106300d06092a864886f70d01010505000382010100850c5d8ee46f51684205a0ddbb4f27258403bdf764fd2dd730e3a41017ebda2929b6793f76f6191323b8100af958a4d46170bd04616a128a17d50abdc5bc307cd6e90c258d86404feccca37e38c637114feddd68318e4cd2b30174eebe755e07481a7f70ff165c84c07985b805fd7fbe6511a30fc002b4f852373904d5a9317a18bfa02af41299f7a34582e33c5ef59d9eb5c89e7c2ec8a49e4e08144b6dfd706d6b1a63bd64e61fb7cef0f29f2ebb1bb7f250887392c2e2e3168d9a3202ab8e18dde91011ee7e35ab90af3e30947ad0333da7650ff5fc8e9e62cf47442c015dbb1db532d247d2382ed0fe81dc326a1eb5ee3cd5fce7811d19c32442ea6339a9	Lunar Client v3.1.3.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
1860	Lunar Client v3.1.3.exe
2516	tasklist.exe
2516	tasklist.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2516	tasklist.exe
Token: SeSecurityPrivilege	1860	Lunar Client v3.1.3.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1860 wrote to memory of 2460	1860	Lunar Client v3.1.3.exe	30
PID 1860 wrote to memory of 2460	1860	Lunar Client v3.1.3.exe	30
PID 1860 wrote to memory of 2460	1860	Lunar Client v3.1.3.exe	30
PID 1860 wrote to memory of 2460	1860	Lunar Client v3.1.3.exe	30
PID 2460 wrote to memory of 2516	2460	cmd.exe	32
PID 2460 wrote to memory of 2516	2460	cmd.exe	32
PID 2460 wrote to memory of 2516	2460	cmd.exe	32
PID 2460 wrote to memory of 2516	2460	cmd.exe	32
PID 2460 wrote to memory of 2540	2460	cmd.exe	33
PID 2460 wrote to memory of 2540	2460	cmd.exe	33
PID 2460 wrote to memory of 2540	2460	cmd.exe	33
PID 2460 wrote to memory of 2540	2460	cmd.exe	33

C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.1.3.exe
"C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.1.3.exe"
1⤵
- Loads dropped DLL
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1860
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Lunar Client.exe" | %SYSTEMROOT%\System32\find.exe "Lunar Client.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2460
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Lunar Client.exe"
    3⤵
    - Enumerates processes with tasklist
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2516
- - C:\Windows\SysWOW64\find.exe
    C:\Windows\System32\find.exe "Lunar Client.exe"
    3⤵
    PID:2540

C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
"C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe"
1⤵
PID:1452

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:1108

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x58c
1⤵
PID:1588

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Process Discovery

T1057

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

Filesize
2.3MB

MD5
365e03670e5007b55f414deb3b4b9de4

SHA1
a9b16c85366294b90bb8db1950a3b3e2a6b2d964

SHA256
79bf6ace6192adcdbebfc2ff6bcfcd322d3e8879adb177ea914d4411fa68cc44

SHA512
cfce25ed4b1e80575f0d019caa151c5d2a66927882156d902f882ab186dfe8e895540e40d7b128a1a9432b54905381e4fb9e32445ceddf645bf472f73a112bc1

Download Submit
C:\Users\Admin\AppData\Local\Programs\launcher\chrome_200_percent.pak

Filesize
191KB

MD5
81b5b74fe16c7c81870f539d5c263397

SHA1
27526cc2b68a6d2b539bd75317a20c9c5e43c889

SHA256
cb4fd141a5c4d188a3ecb203e9d41a3afca648724160e212289adcac666fbff4

SHA512
b2670e2dfa495ccc7874c21d0413cfbebfd4a2f14fc0217e823ec6a16ac1181f8e06bfe7c2d32543167bc3a2e929c7f0af1a5f90182e95913ba2292fa7cadb80

Download Submit
C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

Filesize
2.2MB

MD5
64e0dd83a68049c7abdbb43a62a8dd55

SHA1
8ee7b243a7a593409565a60bc0f3f4cb67c8a01a

SHA256
615d06331b519dd85e48a293980b986ae8f4095c37e9e327d494f87ec1957215

SHA512
41849ab4f16ccbca440778bddf207e526e9adb2517d67d4334355590e0cfe76bc7d65da632623cd6cf73125e356be695b51111ab12f75398a7847ae1ed90b48e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3CF5.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3D46.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\LICENSES.chromium.html

Filesize
6.4MB

MD5
a457c0c5395e33c467934c30190bb402

SHA1
f5154e7240e61d90810877f2ec4f7a4a61ea9a65

SHA256
c108d2bade56b2d39dee86a8b14c3c0654d27b20b8f36c4afb68e23dcb3d9195

SHA512
1490745bc52ce2a58993a3d690cffe1da56a2e30a2a5ec5630b2a6437d3c8265e554a7c75d58a4be8d9c1066126fb15b4405e8065cd8782030cc818937ea1bcf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\Lunar Client.exe

Filesize
26.2MB

MD5
ab0a0ffc9c3038ed47d5914eccdf35a1

SHA1
fcf87d6d7bb41182cb8f04861094b8083c0f5344

SHA256
560204877efda3aacd47789fba5e8826c229dbd84979f0d39978f2fe62976adf

SHA512
c41c4776fa655e54b1ba071edb12e573738327565b6bdafc6b188f00a7c0d4e81adb5aeb4e3071551bb11196f016344f0832fedadbdab2326b5466e105f4a42b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\chrome_100_percent.pak

Filesize
132KB

MD5
443c58245eeb233d319abf7150b99c31

SHA1
f889ce6302bd8cfbb68ee9a6d8252e58b63e492d

SHA256
99ca6947d97df212e45782bbd5d97bfb42112872e1c42bab4209ceedf66dc760

SHA512
081f3ee4a5e40fdc8bb6f16f2cfd47edde2bd8f3b5349775526092a770b090c05308d4289ecdda3d541cf7f0579ac64b529930fd128edad9b0991dfa00b0e9bc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\d3dcompiler_47.dll

Filesize
3.1MB

MD5
8f175418c97bb50e673371b376270514

SHA1
1cd16934788afac2988148011f5e5453ddf9c5da

SHA256
b8768dab2c7aafdac1785435e12783f094e84235d0056870a50a0f02f088ced2

SHA512
239e394c8cbeb16b467e224cfd61f008a3b08da789099a130b4c02e38caac5d00a6fe8faeab1dcc89cacc9c07145e073b01a764c188012422cbb20e55d5b6ba7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\ffmpeg.dll

Filesize
2.7MB

MD5
b879a3fd4a719703f6540c17ad38a0bb

SHA1
7ce27e80509f78ad3fdd75808cde6c4c30558685

SHA256
a1d05b2ff9f31870c3cbf9c3aa562267e758b1b9adee4a49b42c8813439db726

SHA512
2b55956283f11b921819ebd05d010534b0e003571d9327ed9b8e7b5d9eb4297ebe86c82983c9127af3b105039ee3b2f6fcc7b55707aaa2eb0599108b06a77398

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\icudtl.dat

Filesize
3.8MB

MD5
2d8474658fb66744ccbf2552a016c946

SHA1
949f6d2543a4f0c126675727d7e97fb686e7d1d5

SHA256
4b6f77858a23c52792dbd50f30313c38719952940ca515b8fa81722be39de215

SHA512
42e1511af1881df8561d74ad679a86727895a241372e9de6e471bba11abeb325275da387590913b57b497abf0a21404ce72eeae50c6470783a1b3ed64985b23e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\libEGL.dll

Filesize
469KB

MD5
10e024dd5da60107eca70f435ffafeda

SHA1
5461bb8d8cbb395168319791748bf75615a10938

SHA256
26810f892e867e1c6ffc24d747bb40130879f84ec26c1acb26e43aac8a04dc90

SHA512
5532c220a373bc403c06cccac62d53519fea4e5720f4ed37ac1e43efe47979bc0fa53d1a53083abdf760cb122f630e229ba2ad0f7d0d5c7a0a9b2ae1fbd710b2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\libGLESv2.dll

Filesize
4.4MB

MD5
4e4a4b06a0b0aa2eec1e6058e835182e

SHA1
b48b877156a7e19e49db307c38ba4780c1776938

SHA256
adc94b0de44252d67d08b35bd3ac9cbf23910a747b23683602e646f8419da674

SHA512
bcd39f17d1c023df9fa0244669e60eaae973dea890c72687eba15d8c1ef2a0c843b4b879e34a5c6591866efa2cc836e777dd722c4a94046778df66e6a3df9122

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\af.pak

Filesize
381KB

MD5
b293cc5ea7db02649bd7d386b8fa0624

SHA1
32169b9d009b7a0fb7ecdaf650c989e956291772

SHA256
7bb75adef02d28819f1bd3b42fa46ed56d6dfbeae072341997b09b8c1f52d8dc

SHA512
496bc72e7b798d02e453eb96d20566b91405bab774521527ef882c1fcb58f25e2d0718013ddc0d23f7fad883f4cde93b57c6caaeba8cd18a09665c9f6245f557

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\am.pak

Filesize
619KB

MD5
d3f48b60620c5bbe519db9c0cfb634de

SHA1
7b54a0bf25b2ecfd78c2ad7dfb6f6a09bfd20abc

SHA256
1974de0984976556288a4612d5f38fe0ff21e868bdd877ba5d5fde3bb4c9e36d

SHA512
279a7c162e53b2d4e7a92a57de3ce3c919cd9a9700595af6a26ebc53f925773127656b2c817e91cdead87c2b1f5dc00bb0b134d6d51cb083149d85598a2d5b85

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ar.pak

Filesize
680KB

MD5
d17d102001488c04f3995af168f7235f

SHA1
536e44f6ac5a42f25b57421a729dde67e2c08c99

SHA256
e106774edba6bf055ce8c8b7cce81bde9c898e43f1864c89326ee25a7b76f979

SHA512
9b049f3b9285fcb935c70baea03e3352ea6ecad4b41e01d823bb99091f20d1df3028aee29f6d84ffa851923ca2f39f31a2817f271088910fd5cedd3900726c92

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\bg.pak

Filesize
64KB

MD5
43243574791217376db87eb061b90e57

SHA1
bf94d801eb0b3625834870a337d22b5fc128f030

SHA256
960e7008646e0ce34db3f6a0df47a8bbac0427492b4bf674b3def57076590a75

SHA512
26ccdd9a342dac8d594fff7446291defa22b752780871c5a889baca06df4712bd6256b61e033eecd6155b78e7dc63b1e04e4f94953bb1afc918b2df152987795

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\bn.pak

Filesize
911KB

MD5
35f1083544e86bb85fe5860b36b743e2

SHA1
27ad8b23fc03f9b26eb5125e886d18ee3798765b

SHA256
28e1441c4950a90717ebd0641b1f0b4a087cbddeac39edb2618b7d24fbf5a58d

SHA512
69fd40b1d1ffab122c244a7111972fa8b2d6b38c595acee8c6b650a595eb756c35f0cd774d8a7b79656258ee1dca9b6fe0a72e6bc38901804e62ffcf9976ae1c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ca.pak

Filesize
430KB

MD5
2cddd012546caf0aed6775cdf5cfdee9

SHA1
cacce951770feefd1bcf89de5be97bb39606e7ee

SHA256
02d60b97f70c31f5c5003108321fc3ac3c79bf39a36392c3adaf7735b9cc1c1d

SHA512
b75d9b2946b11b9fc7430c5773835422aae6e716504d7841c1b08413ec18d454d9d6faa5ed63e19c59ab2e1ee919822283fd7e21a97f54482685d541e4dd2519

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\cs.pak

Filesize
441KB

MD5
10df8e30879822c94846933dbf4e86b0

SHA1
e54b8fb617b4fc46f3a33c7d33f31e77ca6cac9a

SHA256
225d019bacea15d90508f99247a1f69d1e18c15b2b6b45f6da66dee1a6db9418

SHA512
0bb25528a502b1a368158bcdd2f4825c1782d3bea8ced54f812330fab0b3908d8dd6eb645a8894b5d928c309da279dedb2df466d3e541cd27178499b46dbe9ed

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\da.pak

Filesize
400KB

MD5
d7d129a9d6023f650fd6164e0bb43365

SHA1
19deec3f629432daa9c51d23f23f93f04c904df6

SHA256
80ea75058f301e0087a8400e5d762bd1516562ef50442f32d74ea950531566e3

SHA512
699dbd8ee588791d6e42de8fd455baebdeb2ac1becf7b676cc49b2859c4a52e644416d2c6e70f1e3ee24bb049cd180829f20afb0f179fe3c25bfd35a4d62e7e4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\de.pak

Filesize
427KB

MD5
d6b6f2e1b0d2b29a608511a034d361fc

SHA1
26ba155ccedeb86b47ea361c3253cf789574fd54

SHA256
5877039bd5f9af50d34bb1189365653c4b8174ee0ca0b06f7ca09312e92fafd6

SHA512
d06bd570c5fd93ba7a5dd2c7a2e671be913d28fdda53228a47fddaf1c985a9e5f427f2abe23de26e28b6cead24a6d04348423290a7c0f595d76f776bf4abb63e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\el.pak

Filesize
774KB

MD5
33309b3685f75753aae6316b8d4aff8a

SHA1
4d53b3f62f020e2556bbdc4aa6adc050fee36d96

SHA256
795baa943e85a4c4b425163c7a27f08fd02a825e41387e24330921bca2a4a35e

SHA512
bac0dbe03e4ad63e7ff675481acbc29497dd2711e9b06f17c337c05d40aaf3e1c9f71e8221fd2c0a1dee9ef790fab12b3a070713cc89a139a160b4fc33c10a33

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\en-GB.pak

Filesize
348KB

MD5
a32f3f357725ff256be9026398a1cd06

SHA1
cf492e3e5c18e9e8c8cdd6b964e987541cc46505

SHA256
914b7bec10c1e8c2a9e461edaa498b2b344aadc130a30321d4116ce0c4c99ad3

SHA512
a96b2b00ad6883c205224770bc2cfcc93a5cf29b41bc8169117771f36264a8a89ad4e5bddc0c50f85c0979f3355188ba86c915f0b3b1013b3ecac9383fa8b192

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\en-US.pak

Filesize
351KB

MD5
06d28839ea0b3aab4597ba8646a53a96

SHA1
9c6a74aae8c783546d613c6f38cbfc8f5e3736f1

SHA256
69c1a2e1b30d83612decf1a8dd7b124a04f58e9f2465876726f02f7f7d5eb54a

SHA512
a432542dc98795ce0ea6fa4a6bbcbae8ba126f1fda025a9ad6ff3fa67eee85dcf7afc6678f5100bb1543c4d00ac75043ea92e64b65c9ef6bd946ce3dc4d5ae71

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\es-419.pak

Filesize
425KB

MD5
3d7e6495a77c509f1bddb8d3bc198141

SHA1
79bf7ec99b968ade259794433c4b3e2af9112ab9

SHA256
1900efaa8df0ed509b6096a2072ff0448042fff07b1c431bcb2559884864ebca

SHA512
78364b48c71a2ec0747f26e0a731e98dd8e0a020db71eec0578baac72a37fef532a47cd310586416e40806092175d30b8f0019159eeba17ed943a7c41a8543d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\es.pak

Filesize
384KB

MD5
e9b8ac8f2b2d63fd237ed5d8f5a026ce

SHA1
a6c0cd8207ec13bba8163b7b23a1fb7c468c04de

SHA256
033aaeb594fba1888b07290037d7d2a6618a7c151c93473446f1573caf5a5346

SHA512
e4d4dfd30321d98239305d6637e2cf8af4a15f4dcd4af2e200f684240949a5bb13b2a3da8f54a52a82e1e11cdfbe571cd76190ce6bcf3e22ad9960692a8caefc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\et.pak

Filesize
384KB

MD5
ccd361017778964de23bf1d741cb888a

SHA1
5b0305538762987901b7a8332635f3d7996c09dd

SHA256
41883af1e49cc180fb48e02659e75b0169d974d77373cf7bb2a4ea02dd654e26

SHA512
a9d7c99c07229d382e8ba7cc3199bc66fc39df5fd9b58e6a76e423b865f8c05f53398125a17a20c27462b2db595f3d778b4d94b1853121d8447b771f9284e5c5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\fa.pak

Filesize
629KB

MD5
9a4c72ea3c1ee83877c3f531552a980d

SHA1
72ec0ce8041912a4e4d055c83b56449f095f244d

SHA256
26e25094889781b2ef29eddb9503177a3d435e39941bf575a9a8ae9a680549cb

SHA512
6fd86c534f0bbbdf57ae7771e6175377d6728575cc2535d3367b13e3f983db62e44c975a3fa360def00f63ce2a46ad403781cbf1ed74c217ed5ea3800c79c8e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\fi.pak

Filesize
320KB

MD5
984e554648107e7b6a9fcc50ea997573

SHA1
5b9fe3debcb87ad84cff532c7e8247087186bc1b

SHA256
4e19e7d5ab899b58f5ed632aa2793529e72998f731a2c45b680a5640781e8483

SHA512
50a785b25f47d532fad80bac44b448b28086bc1c1dc2366b8895cddc9b498d9e47967a03eabc4d5d4b27f96e47f9fb664ea9056a41a4786b18b1acdf4ece5f0e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\fil.pak

Filesize
442KB

MD5
2e6a6728bd5a09339ac01a38bf686310

SHA1
619e27f30c99eff8f2df3ba2287c6f7fe0b5b063

SHA256
e8f03c2e9c88adb04648ef93f9ea3cff87641638ac97c9a6752b751e7f7a8a20

SHA512
0452ac74eafcf971265de92041659c006b5e559919b895b41795bb1307ee7c302e873440b006485b7cffcdab0f6b908a119683fab40a664d5bf3591239427c00

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\fr.pak

Filesize
459KB

MD5
3cd3e6b45351be7521934d3fee1637d3

SHA1
412dd480924482ff5231a10146966e71980c6f8c

SHA256
7d8b3dbb9792891088e60b26265cd7b4f044d3ec2130a95e249ef979b7b7b286

SHA512
f892f075fda7197c7851bf9902e0e807bdec6bd62486ed054f68210ae1c090bbba23060a6b515c3cb07499dcfeece010ae6244e62e2014d24cab587ac14aea45

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\gu.pak

Filesize
886KB

MD5
0c33e2a35eaaed3572f31e7b24d4493b

SHA1
278498568109ea7d6cb34c634316f95b04155b64

SHA256
0f0fee8a2f22f80a0c4a758e7f4fd90d40be4048dcab0d824135caa5e92efd5d

SHA512
4eebf9be5a8c317d2d2e8e9b1e607774f5c7c35af7d8bd6c80326fe3c6e2e05089f04485eedde8be8c7b71a7b49e407289f361361d86802c0463c5b6b296f2a4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\he.pak

Filesize
549KB

MD5
f28cbdc222c1add9aa3d02a80610e336

SHA1
0ef40078e53b2a9da9d8bd17852391c56bced8a7

SHA256
2083581fca2ee89abd9a1f932856037ed176f58d22c2f7ae997637f501e073f6

SHA512
bf62f81c4e12325fc8c9f777efa1b07c5e168424933e927a7a8b876dfe4ed5601bafab1b7076792fc519adfa58119cd491e73f4bb3867474ff83b275ccc492d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\hi.pak

Filesize
928KB

MD5
d740b36376da1735a3ce62d8772b3889

SHA1
4662bc4aad7265da54822e011f9a5309daa07f99

SHA256
eca013fdfa61add5e07e024263c9609c359da22aa122209c5eeee0a2984ac460

SHA512
7a7a4689a7242ab451e36e8eaaacec1aeae4db1b50a7f42a5259535ad43f9ed8437d473ea3b28ce9dff1ecf589f3cb6767f862de65ec8894ffdc8caab423d863

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\hr.pak

Filesize
428KB

MD5
5935df6c195c20ee473c65f96362c289

SHA1
d5e2f5ea1d64e0db2ad2a74a4faf4659b8c704d4

SHA256
bfea2aa3edb0577ed0d32e7b93912ea0d5d58b289c648bcce2229b2cebae6618

SHA512
f9f04ba2eff329f132d8854c28e3bf935146114ce051c42d39b1ae3ac8f4d11854dd299b1c1360919e924bf6816b49baa613b2fc984b7027033e2efca18eab95

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\hu.pak

Filesize
460KB

MD5
2fef83993a62f73f8e4b40a6e28a085c

SHA1
8bae181f3eed8d5ea8fb0f912c679e608ee7c008

SHA256
ca4b4c7c7be45ea0871abf7d5668ab948f712a02facdc1d6bbc189b1b3522446

SHA512
6eed29acd38b662f62381a5c00ebfb254915a57de6fde8e6da77f60dffd13d4846b26b1897d710ef852bcec5728a4460becaed2367f1a06a066da77521701324

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\id.pak

Filesize
377KB

MD5
0d3851266ed3b4e07a002ff2bf5379ce

SHA1
1ab781a9279c0e2c66f698540e20172779e43750

SHA256
fe417319039aaeb4b2d29b1a3bef21ef063a5cef6150740f8c9f7cc6d0e889e4

SHA512
ed12c7d51763a9e17db8e41061f20e8f094e8bac3dbd538949bec3c472eb4030e3cdaf4848bb0590a5f2d924cee76c289634d2be9bb18cb6c44a4e2e8c0f5276

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\it.pak

Filesize
417KB

MD5
ecff2d73d000effeca467c6ddeb7b8cc

SHA1
034450ce5cbfc379a19cdb51d52b93a30898c9e2

SHA256
6d13fb5e4e86e76a12f8f23095304e978e1133fea1f610867cef01a99bc2705a

SHA512
4feea355fb25819bd1eb4b23c7cae97b481790e5a8f1643f34840a105fdd558db7b9ba9708689cb12da80c01db39c28cc0d6a5e7c5ac8d33f1dfc7983ebb5f4e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ja.pak

Filesize
256KB

MD5
cc8a4811ecedc7beede85a754fe7a5d6

SHA1
695eedac34205e58c49d930183a4f5db2e9b921f

SHA256
a42297e0b3426b065fe49df48757683a9b4f998a705cf2ad2aec6bc676dcd3ef

SHA512
4e10426a6df54623f5af3c26d4758d94d76871ced8df7b721f50f0e592593dfe512b436c18e54ad6ad212c9ea9bf6ef5ceb54f9f171e5d7ff18a73c452a3bd6f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\kn.pak

Filesize
1023KB

MD5
7614d13fe55a3a9d81e259f1073d3170

SHA1
9ee6cf3b9cc9a2510870c319ed669f97f2534a96

SHA256
cdf92c21f6349203d9d785cf3ce1dbc2996904f4f5c81c1bcf27487707e7e8ca

SHA512
6970ad1d9bb4340d043de37da9839d146c59fa3b3b1b135ec9af88f03836be49ec55917151ec06f365c3c74e8130bcb08407e7fe386f25614e95de579c2ce8e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ko.pak

Filesize
429KB

MD5
fde2b0f2a810a2d853a46bda17d452f6

SHA1
8a04e5473be00bf3dd80bc44eb5e0196f4fb0622

SHA256
70f9b65c9b554ac64b4e690c77bfc7a524c4c483cc063254bedeea20ee437d15

SHA512
60f6dd69b7ed889f13ff75005faf8a836b962dbfbe01a654d227dd46b8d6beeab28c7dcd69b447223cefc197cc629b1bf387d3e765f3234371f745d3dcd44242

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\lt.pak

Filesize
463KB

MD5
06d8db8aab68c565af14bfe408ae4daf

SHA1
0898fd0ee4d7380b93b8fb3d4a1816eb810ea9a7

SHA256
ecb4ecbd96575f6f984f60e85ab1ebb0067e73174ff9912941ee1aaa28516d93

SHA512
1ebc04cca7e3bf005f9befad5a81736fc572383a636c7237e4206e75b05befe49f967427f912c97758aa392f9cc2dcbdf07c471562cb4ccc90f7d8e951c3ab9f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\lv.pak

Filesize
461KB

MD5
efbffd8c85df4a3a1d190f1f50c0d82b

SHA1
363df0e02fabae4339d90e3daa2172576c355ab0

SHA256
af1f3deb4bad0a8933ac9ba122557901061518a6bc41cbab129b3a1a17362bcb

SHA512
ce85ccc9f81d6b7e133032cb9ebedd6f9980a7b74f1899880ce36170480519a6fc6f4210e231d8715021916927a2a7a0aa8b8878d9bd938fbc7bd1b624a067b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ml.pak

Filesize
1.0MB

MD5
5bdcecf03b261abbe4d5984be5764618

SHA1
ea9977fc0660683a7e7f9b11f903e8ce5e3371cc

SHA256
5f98365084e6d88ad40e25fa48c72f0b5a2b6cda3f09f1e9f86f8b274ea4f345

SHA512
768ac5e680fb17f3e97f9b1bbfdb6ccf28d4187f95c05feb977864c082757c1329a7b212bb7b564015b98c7eef83d9a61f0668c06dd345f6727179cc94b74973

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\mr.pak

Filesize
870KB

MD5
1675668911fd3063e092fe34579c210c

SHA1
d1d09041778599002d07a89848ddd79cf5f4f4db

SHA256
436efbdbce605c23f855644a9ff1b04d9a3eca37de3b18de8c3e589930d54096

SHA512
61c7aabb00700773bb55522e7ae9482d1d97ace936c9bbfeaef3215a976c411a51f41a2d5aa05f2b286b0d112b5616215b9fa3632eaee38b1ec090dfb29391b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ms.pak

Filesize
395KB

MD5
2c4056d84b980267faadd69d52c17086

SHA1
3b3c5fcf182d86a170c8f35c041bf3869a82b362

SHA256
163eb7ba5f0c61acb6443709c24e38ca6370a33f89a12e13d0a57c258a87ca16

SHA512
47285ab42b46cf7d6556eac2a8f7afb9a9c9abe8cb026fe847b2504e4dbddd481a98c1ea959c74e31f195ecdbb618a3d93df8f20b797411a8bf2b3856fc9b963

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\nb.pak

Filesize
386KB

MD5
2c049b857245143dbccb6da34140e0e0

SHA1
c46365eab7de55a09f63f63d454d27a8942f5073

SHA256
51ad51f7b864ec66f1d26ccda649d7de24fde452832ad536d10618213d649392

SHA512
420856c2424d0b54130871f1b507341486e3fd9be50b95fd6b8ee61cc54c559820b4dc338b735e6cf2e564c0c99a08b1d972dfec55d836254b119661afa6f359

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\nl.pak

Filesize
398KB

MD5
9c01f0205662371d092971af322d7d16

SHA1
90ad9403656fd6fbc17181785dd121edab3e050d

SHA256
9bf91d71b2d69427d8cde04ceeb755a8e64b831b58ea3dce4356c40460569f39

SHA512
04474eeff9899b9b35c54999041700f3efaa30531838f907888c31b2a59de92a6532fa49b458f16f436509fa515d863dafa0a8f782362a4dd0426f1437bf5213

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\pl.pak

Filesize
444KB

MD5
8f4658d2e2c9bd2f3793fb7d652ef7f9

SHA1
f5ecf4999aa20862067acc157b4057013ada65de

SHA256
cfe591f585bb10299a0f572c1fc6f3fe4f744cc05553dc1a0fb4dc29841a4f8c

SHA512
bda5ce4a2d42351bd346c9232b2fe8db0f4b19569983166ee0a0a2a47635df366292cc451c989057d4603ed9755f83431b5c645cec7d7fc2c833117f0d27714a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\pt-BR.pak

Filesize
256KB

MD5
3737cacdf808b6ea3d47367f4b04c731

SHA1
156fa52cdb6e1eabcbcba63e4e504ef1dfb01a77

SHA256
c321f00e71733659cd5f054421d48d06f224a43707b20838f9c71ff2b962e28d

SHA512
e71ceca03dff79cbe094fea26d6402ddef6fc4284b2319f4492d8b6681baa8f5727aaf359b3501006d6c05abb4ef13f61bf0e0c42e04ea108550d2973e0f1aa0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\pt-PT.pak

Filesize
420KB

MD5
99a778b4aa7de0c35bc5c4274084300f

SHA1
6da50893d3f6e71cfac7f589cecf8a8a32f68d6a

SHA256
be1bd067cab849d8de83fbb13e0315dd6efdecddb748e0766622d7f9a6c7c1a6

SHA512
7a757afda4e35af89dd3a1ad19f3d2395b975543bf150112d76ed10ab804d722d9dda8032cebf7fd1bf50ff2634428695713793133dec8146fce36b229455f13

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ro.pak

Filesize
434KB

MD5
6805d8f53fb301aa1c70ec9886df8769

SHA1
78cf4ca5fd24ce88e912c172da308bb1cb6b1070

SHA256
a322744798d3930738fecacfcdb5a474a4de656aeb363f2b2f11503e6333801b

SHA512
ffd82bd9070200545974a4e02b312bb9407b881fba126c8151f5f5feb8314a8b9f7a4349e4061a1ad41a71c6f03fa7ae52016ff2fb2b094c9732e7410e562dd6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ru.pak

Filesize
512KB

MD5
f3648ce63aa0f6ff95215c34eae872ff

SHA1
fbe0454f6cbe0122792408a57506d9f96129d6da

SHA256
4e256b74e5170d5054b20bac77686fc5f305075e61409ae9aaccd18e80f293e0

SHA512
f855a180e7e9ca4a71905d22bf5a6305f6d229a3104046390ab819042c45e6a9d30c163083f9a19a74c15fa0193ed7825ba9f79f34ef2b17464618cfc30fa73f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\sk.pak

Filesize
448KB

MD5
055b58e866d3e20e1ace65308d3a191d

SHA1
1a34b45acb6f93a629748736ffeb00affb376283

SHA256
4f5e6ef643fe4b26e6607d7ab529515b356badaa50ccaf9142fe6275eb57bf0d

SHA512
cbbb0fda113393bc07afe51e60f59b268132fbfe2f09b230bfa22d5e781e874a1b9d8e3499cf68e6eb3d2fb34525e723a938ec84a3729a3194856b8ee440bb38

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\sl.pak

Filesize
433KB

MD5
1b02b0834b8bbd12a77f7fff09e1d81a

SHA1
1898cfedde55aae307f7578b88cb0bcaf61e1d52

SHA256
b36e1fe2405cc4b9f34587e30da2feadaa6f03124769b02f79333adacaddb49b

SHA512
b1006053ace6f8842e9436c94934b2e7d1b502e3df9ecd1fe59ab39ae35e69e8f0dcff8728aee2c35a3a1eb7a27f0146d6113b4de0632dbab20eb0a37942bc4c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\sr.pak

Filesize
666KB

MD5
4d1ee9487f4ddfdc4471366d3965293f

SHA1
4e53084fe0d4bf4f46ea980f7423787084152ff2

SHA256
b75a222db70c3f5734a75042718da599881d5e84cc52b332e9162f78b32f4819

SHA512
a44a448203cc9388d8df4c39be9db5436546fa17add0975c18ce01ea0a5cba142692660ce6efbf00699793ca98af8e392e41a07dcd9c183fe03414574389609c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\sv.pak

Filesize
389KB

MD5
094d69544816535e4d040ef0ce923100

SHA1
5891cdc73bc4c112855d099ee112da0c3e9cea81

SHA256
110112c2f7ff5d3c8599036669d156e96ec19e70515fbba3bbcb2043ab994680

SHA512
023037077a3482a3bf2ac076b5c00922d7039bfc2098797275465138142fea0f97c1e003f77de71b9ab88f786b7401182618603610c51f634ad17a123faf5bd4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\sw.pak

Filesize
192KB

MD5
b00e8400281f930e3738e6e2df25a7b9

SHA1
befa388d0f2c5513a7f524857f20160583a1d87a

SHA256
9c5c4d62326239fa4e27eec282f387c4e338bed650157b9f55575974542386ea

SHA512
4b8b9b854c68bfd139a360bed7fd6565e092b90597b4ee66801daae29201f39453899f9f6dc7adb99e65fb1554b3e34a624cfa6e2ab9c35e52083df7b5854a98

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ta.pak

Filesize
1.0MB

MD5
abf95e05d798043abf4f2f514c0517a9

SHA1
b8c6c1cdcbfea03fb106c7a44385a3a8e6806aa6

SHA256
9cd624a97493282afed3b9b1e848b12639234fa54c04b22128169924f9c92777

SHA512
aacd7439df84ec76a3d0c69c39341b51031b66b24be53c87f3ffbced989b38fee416b19db2c3b36904eaf88f98b24e1e26f070bcc8dfb4ecc99dc7bb6f6b911f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\te.pak

Filesize
973KB

MD5
20dfde107bc16af8f0e0c2b9bb082582

SHA1
0460238f1fdbdc466798da0a65707f02b3884470

SHA256
9107dfb5184dd0e3c5e5b03624b30623eb9a508bb4dbee93a5b14d8ed112fbf1

SHA512
fb2aece4679c479e0e7eacd5e967da8846ed247e833b90711ddf26f30ee0be4d161ca2549f8656053f7952086adf9810bffb0d2bb13bd8302fc4eab370e984e8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\th.pak

Filesize
817KB

MD5
4d33f6f44edcf206f2408120f507b1c3

SHA1
52fe9f58177eecf7476ac8f827580504210470e1

SHA256
e1d9feef119988bd7d3800cc318eebc92e0d00b902558c073d634052a97434a4

SHA512
783b4a09ede8dab551da6a2f686c382422b3b2ad2fbf806fd58e99db197c2e2a102deaee3529f819be822c76b021049730ca3885717bb306e4d575c954e3b6df

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\tr.pak

Filesize
415KB

MD5
91900ecd977b41f2079c1de6b265090c

SHA1
868f8354e74649635cf1899d424e9c503fe19d26

SHA256
f208750703ed615cf728275effc0535537a25484a1ab4979dab3c32f48cd90c4

SHA512
faa015b1eaf3acb1a7ca35ae54bf17c2f8c36179c72895ec8afdd391b6412795c1982746f6e1a06a5516d019741998269f376b7b8ad728179d40ebc4764b0644

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\uk.pak

Filesize
711KB

MD5
89308cc5a533b72348de2a14962230eb

SHA1
b955cf0c6c34632119fa73d0e8558d51f28407e0

SHA256
177e94b0c6eca37a38cabfd9d52dc3f25f15278de1ac0ba1c81d0c1ce4a194a0

SHA512
d4aa5f695626c4a34ecb1167a8fdc438f06a9b22ad80bb1f89fcc23e6424f5f11f320cd92b7a25bea103a72d23fbc8943758bfd797d8615e734aa0ccda9a7b2d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\ur.pak

Filesize
622KB

MD5
d85cb34c33a95ae444d49ca58f809b00

SHA1
f85c7c5c1a5f4b441fb70436f100b02907711608

SHA256
710f92ec980615110dd4ee66900060e2fbbc14dd2c42dab006c690ab3c23d520

SHA512
020ee46802aa3da1b5ac04dab7f97d72d4c04f54f7add0b9744dd95af6674ca35c8c1479dffe0fa8ada3235f72abd8f97fb5d5a5ce782701fe99297c289faf5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\vi.pak

Filesize
492KB

MD5
e0f7f3d937afaafb03fd0ca59ef36eb7

SHA1
42792e176f8a048490bd38509831d5df120d1bfe

SHA256
c27447b90369ecb2ac7d78c841996cb054270b36defbdf316129e0fdd8a80430

SHA512
ca97ee205cfe193e179cfed5e95a801b5dd0e7d819642e8c050839ea794768f654ec2da23c42e9b73efc9a110c41c976da4809934a828fee5cd4d414d83501be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\zh-CN.pak

Filesize
64KB

MD5
bda9152bf716e7efef82e44b084563af

SHA1
002433b5763dc62b956fa796de71b83b1e4b23e6

SHA256
e0207db3ff0cb5d9e414d48705bf4a581028567abc43715f1772df18794a885e

SHA512
6232d2164e15b242b6dc9419f4d10c71d2cf24633e62920b9fa1cafdb90a1b056f9ecedd4c1a1c57bcbb86e4c4fa70bfc42a4eccbe3dd5e5c73af83e741c2582

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\locales\zh-TW.pak

Filesize
64KB

MD5
75501d5a1fe53ac72d74e4efb25dbd98

SHA1
13004e1f35a6a27b6220581b3d355f98a03ad32c

SHA256
28f5e45f8374335e2a60395b0d0cb6c8a2a575977a3ee8c7c35d161c9ea4523d

SHA512
df4bf667754ec754ece6c1748ebee9b71b2f0c8db9cb6f27f0644b1cb7470653c55e34d4e4180070a930dae2e4c82d0107042418b27f15a4cebd253cbb48cb33

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\resources.pak

Filesize
4.9MB

MD5
775501877e4f3400dc6eff617427bd2c

SHA1
2f13dc6738407754d7d77ba627de502a68780348

SHA256
0716467446c434bb0b82ac1fec714a713026aac57483a19f2f13f2f90033029e

SHA512
056ecaca926402086958d95ccded8da56f31ba71789bbc30776c3926f67689a304d1c69e999c5be517543b414e030405d916a978e0a6bbb4a0d00c6789c485ce

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\resources\app-update.yml

Filesize
175B

MD5
9fafe2931214f36d81e3632b0be80774

SHA1
cac08ef88b787dfea0acc0d18e559fd9180819ba

SHA256
9161bcc9763091ff3670ef98eff99d004c0f67f13b5dd94715c661fae274cf33

SHA512
a671cec02c8957864797cad7657b4d2165b40980410db0696cb6dbd05b9485f0491065f1249461fb7777d73cba601f8d1035c9c2718a52a56a217da859c03217

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\resources\app.asar

Filesize
2.9MB

MD5
25e002e5edc23c0ba322d9fb6f40d5d0

SHA1
745901e5e025e00a55f003481a632c37d0198b3b

SHA256
436e1c4a21a5e52237c2edc4993ef6f0a14db4b7b719d4e76eaa23f368bc6421

SHA512
2508c042c1cda09d446536be65c782154732a2eddad2d96484ff89e552386d5a14b6f82d5a8ee85de105cd60c67e8cfc008542c0b464e69972ba50ac1dd20c64

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\resources\elevate.exe

Filesize
64KB

MD5
98d4d870a1c9f388239efb475f3eb68b

SHA1
db516a7f4e406ccc9a2369cfdfb4361ae44c2689

SHA256
905ae554e765ab537f3acfc6994b47c5b7f69ca5d85a37ed4c8a0ceb4e034f13

SHA512
bb7ae53f2a8801c14f620c7a273e7127d8ba830ea1de2ed255b841dc34af458e80865bbabb65c298ad8c320b0480a44f1eaf6bf8d559dda1bc6d19c99e7b8f48

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\snapshot_blob.bin

Filesize
253KB

MD5
eba8f6c2f1dbf8c652f1167ddf721cc8

SHA1
b929e810407c03e056e843bdc2cdc0492cd4e91d

SHA256
14e563d5c229c587b5bdd01fe2e81a211d718c75d69a8458736b7405e4f825a3

SHA512
27777653aa7b870ef397cb55741a7b254e32aac31eae6eeaddef49450035694aff9f6b12a86caace54b70cf4a94d16f5e559a6660b91f9aa55c2959c77a6b9bb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\v8_context_snapshot.bin

Filesize
564KB

MD5
313f7e376c11e5f7e39ab9e56ecb4190

SHA1
40ee75dd8f8ec227a3bd93498e0fa965b49442c9

SHA256
4cf0111daa0eb1523b57cf890567ba20ba72d05d6d961595eef250cf07419036

SHA512
c38fc0bfdef7dcfac551785ddd126f87a6eff71ab4681ba064c5a998d2bfe7d524758ec8515563642c55d7bfce0504c30713a2b5a3e3867c43a63256c4810b80

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\vk_swiftshader.dll

Filesize
128KB

MD5
80e170f84fa6693111fb307b6ef23d70

SHA1
7c93229dc188daa5bba23e9ae50ca84cd6f4a916

SHA256
447eeca4547f685a56393b51a7da6111d5bfa1664fddba5a540a1ee56312ac96

SHA512
1c62d8df3af825deb1b7086350eafcdcee4b5411012077b71369fb851528a2f15d47b86363c9c23236bdc19a45bead3a85effd5c603589fc555d1114ae9b8c76

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\7z-out\vulkan-1.dll

Filesize
910KB

MD5
04ab3474aa0e093193a9312653676b74

SHA1
654be10ae7bf883c3669422541269269b15ead84

SHA256
181677b745d3b2dbb37af1a73beaeddabac4ff0a918d2a7ff1e2eee052e91bbe

SHA512
3cf15c1278dbd5338b2d468f309f74c0361ee440b5e36146fd9fe05d5882b2a56c658d45da643ae056fbec7cfdd5c5c0f18297b719884da887ae854cf749011b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\package.7z

Filesize
64KB

MD5
68743cea1d14b0cb46b4a06f4f5d7c1a

SHA1
69c0a1fd1fbc45294377d3554c50a20d686c678e

SHA256
17f351ed8ba8d68c78aac53c87effed3fd3aefee851cd6107fab467a120a9ea3

SHA512
eea25a3a44984f8ddccd9821a127301d229d0805a91d09adc96267ba89434b8c796973b5b5c87d0bd1f8dab95b97fb6614c67ebf8905eee21281c3e79cdb1a1c

Download Submit
\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

Filesize
2.6MB

MD5
b92a2b6d0508a71abaefb21fe6f95815

SHA1
d3b720f5cb1a3b969ea94170eec606732d84afab

SHA256
5cf35674c4388256c06f56d9d97d9ad639903ac9ca182b42cafaf14ca2f9a661

SHA512
b46fa1a9c5bda297aa017a694ef61aedee2cb4d3f413bc2ff575fc70f8b2fdf28d27b769890c74f0cdf285927b858772a0864b09bf09be4b49189cf429940b95

Download Submit
\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

Filesize
2.2MB

MD5
067a8ba39678cafcd9d21a08d92511ce

SHA1
f132d98bcf4c15c49e939e1971f8ebd8e13366e6

SHA256
663166f6ab28266d250b3f4eb571f6ae9ecd86fa3fb3aec694a0d9ea2fab8970

SHA512
50131363dc9d4d1991ad5975418c896b4174732f78f2a791be01a0e89a087fd837ac77b6f9cc7ad9e4609dc5f825fe05bc874848b8604c5a64d0cefd6ad324dc

Download Submit
\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

Filesize
64KB

MD5
6eaa1ee2014fc5a8da3c2b8d9d4c30ad

SHA1
0ff28966f36a6c8f21e0963a13119c3ca4146f5e

SHA256
c88d7d424b756b1e92238972b6a076f8bbf32ae4c6133784d47260332f4c00cc

SHA512
0dcde87885ea58cb294400ff448388a03e937eb3e8924262f81534834846bd363a073abedc20fee8e0873efe96a279eed4379cc57eb6d5b8a2262b3a4eea4695

Download Submit
\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

Filesize
2.5MB

MD5
8398536d0a1b9f08405980281ec8faed

SHA1
f3db0ca961a43c2be95a3e5545608207982038f8

SHA256
4d59b274be32e3ec8eb6112fecd0741567c78fcaba32540838e56c6b15df5c77

SHA512
9b6646c0c075ba5861c5d3dd5e392bf5853a358e9fdc014b331d0c865e1218eb66b1cac2be39b0caf82ee05b0a5e0fa43eacc109fc60d06b6ed5c9f673b677dc

Download Submit
\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

Filesize
1.7MB

MD5
c1019f78cf23958db6d32162d5fe408d

SHA1
67a13df3b08c1525a117fc6a4f8c244a153a974b

SHA256
422370905f2c22964798829fd10015227c5a328fa62deb8d112fcab7d3246e9a

SHA512
bfa84cc87c8562096fde557f08a844e982c3916f4e44dd9c97d6538c77fe59fe457c268b476c69b2d254862d73c5892d0815d0119252bee0efafc0e7f9f83b85

Download Submit
\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

Filesize
1.6MB

MD5
7a0deb8ac5654eb8f482918fb1c66638

SHA1
06847e74fd0d696adadb2d9048db62e6c43b2e46

SHA256
c90e45f5c52305c25ba01ef2394add8b0dd0a18715b042a7367e99a449babb1e

SHA512
0f459afa12e76d3f42967f0b114cfc59aeaaa353348e4d8f33170285d6a331c5bdb01931c399af8440750fe9163fd1e10f93b6ff33f250524f8cee1ab1aec2f7

Download Submit
\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

Filesize
1.4MB

MD5
245497bd9112cdbe1f464eb7665fa29a

SHA1
13479c797fd1a1e7d5daaa53b19e34813be2474a

SHA256
86a82c427be481635b2f2a3b8c1e8a230abb190777423d7b741d3c35afdbca9d

SHA512
edc8cdc053eaa65385b8561e1cdc07af2511c9315063e6a0bf3b9e44402bbc0a2f3929668d81e3a47595253fdf2232375d08aee0624ffe41bebcd372ff7e933f

Download Submit
\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

Filesize
961KB

MD5
fbd3ddfe60a2364b00b718f98753cdbd

SHA1
ded0d20108340f969a3cb042697ab436c8442765

SHA256
481e5ed57fd68ca2c5f7559d3efec7eeb0258b1e517c6cb4fa4da3ef28a34cea

SHA512
ff9da1c6c533faa9a846914c4e77132c4b21d95ecc088112505d542e0442baedcdafcc3cee13069e791910ac7ff68abc7fd41667a72486d623c64adc458fa1df

Download Submit
\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

Filesize
2.0MB

MD5
4454e93ff303171a2330019d25d61b1e

SHA1
b0176d2beb40fa173110ecf237d1182a1b75178b

SHA256
fa6f767cedcfb49a91e80ed56db4ca909ef1e2d0f75f546d64270a2c9532d81d

SHA512
2993b648133c69bcd0be252d7c974713b475b8cb18c7d1c7017c9d1280a68d7c083792383107f1e2495fbd80ad7504932dd3e2b29c12bb7e5d3562affeb2f7d2

Download Submit
\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\INetC.dll

Filesize
238KB

MD5
38caa11a462b16538e0a3daeb2fc0eaf

SHA1
c22a190b83f4b6dc0d6a44b98eac1a89a78de55c

SHA256
ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a

SHA512
777135e05e908ac26bfce0a9c425b57f7132c1cdb0969bbb6ef625748c868860602bacc633c61cab36d0375b94b6bcfbd8bd8c7fa781495ef7332e362f8d44d1

Download Submit
\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
\Users\Admin\AppData\Local\Temp\nsd8C1A.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
memory/1860-636-0x0000000003500000-0x0000000003502000-memory.dmp

Filesize
8KB

Download