Analysis

  • max time kernel
    293s
  • max time network
    309s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    07/01/2024, 15:50

General

  • Target

    TrafficerMC-2.2-windows-x64.exe

  • Size

    62.7MB

  • MD5

    c2201ad041500e27551271d1ded5c701

  • SHA1

    c47d27b840481e137e3a526507362f4a626ae383

  • SHA256

    ee8f806c62fc735f22012bd6f121b701421095882c7cb7994e081bef21aa9654

  • SHA512

    feba30d20b7530f28d810917c4f1eea16f67c2975888c2ffd6ce20f2bcca84cd2d0ccd13fe9d92b75dd13b44a495f9d9adb56ccdb93877ae64ffae5556483253

  • SSDEEP

    1572864:tyXoONw5lRiCMZI7YAbaqWmkjK7dbzQqZDB8kcjjnt7:YXk5SC0AbaqWlYoqZqNjjt7

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 12 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 44 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TrafficerMC-2.2-windows-x64.exe
    "C:\Users\Admin\AppData\Local\Temp\TrafficerMC-2.2-windows-x64.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3592
    • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe
      C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2340
      • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe
        "C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1520 --field-trial-handle=1592,i,10868840837930240171,18074396536128325152,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:408
      • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe
        "C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --mojo-platform-channel-handle=1788 --field-trial-handle=1592,i,10868840837930240171,18074396536128325152,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4836
      • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe
        "C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --app-path="C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2008 --field-trial-handle=1592,i,10868840837930240171,18074396536128325152,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1892
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:652

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\D3DCompiler_47.dll

            Filesize

            214KB

            MD5

            6c192bf413ee0bdd73002d5a2be5db44

            SHA1

            26c58b8d0f37c656e966d88684168d17fe31be89

            SHA256

            8968f80060dc49c0a5f8512987e9dee2d02c50176582b3b464e4d1f7c5c36ed1

            SHA512

            e33a543c365cfac155a0196f40870ee37ef27e692d1676398c1dcd81ca2300d30f93660768cd2b579d2f6837efcbb5873fa39c288995d48256802ee566af92a1

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe

            Filesize

            51KB

            MD5

            66d928eb2d927a3d6e11f19c43320d24

            SHA1

            24d682bde78f1bd590d092bed1b293e40cfe57d4

            SHA256

            480b4ca4f8a694f60d041aa06e69f13ecfe39309d17a57db7fe3887dfed88eb5

            SHA512

            14802148ef43d73b7e4b672366b2b5b948d980d52893ff7c48248410b9301364d1630b01465b2512c514797e8684575875bf869727c0353a6107140c093116ab

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe

            Filesize

            249KB

            MD5

            ce211d47578c4acaba0f4877516597c1

            SHA1

            1cf152a4d4fce6ff74a99e0ba5ada333f4a3517d

            SHA256

            7ec2a6029be138d8ad5f3ceafa4f7c7162f6644cab561d8bbd03dc092ba60156

            SHA512

            39e7c6bf331a6ab34b00f4f31acabe57795bea5551ea550c77626b98e1eb206610ed4817b9bb4232bfeb95264dace6713fb62f1ff070266c1834b87bdbaaecfe

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe

            Filesize

            284KB

            MD5

            c10ffba0f8369d0f99a3d6b6a9dc3985

            SHA1

            b701ff98ec2f8f223893e5f84cce8915451eb9c5

            SHA256

            fc0c752cf83a8e0a86d0933870a01bd49bc304cb298e125d46a2758679e6503f

            SHA512

            bb9c75782524dc6c20aa95e68f391b3827f88b40d3f30cd7d7d2a7fae163bcfad3e0643709ddff9de188c649d8caaf5cdf8899adc4e472111f05b2c8c81f5863

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe

            Filesize

            180KB

            MD5

            919c976d13ba9e446202c9f40b6bb299

            SHA1

            37f7458a31e62df6dc4ce671ac2c4956053edc98

            SHA256

            a4c60d0b7973040524e9dd47b6031d72e059bfb1f6e26b1d3759af6663da8b7a

            SHA512

            be0ede68685ea53b3dcb338f3cfa015fcec53b6068224a049f633b8b703e8d4354f0aa213de6c0a63c64794aa9b3708d6d6b1c42c38083eaadd7f392404fb860

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\TrafficerMC.exe

            Filesize

            213KB

            MD5

            835fc2b2eb689d7efc11caf381ba3556

            SHA1

            67889c183b7d5b2eafcd5bf85add0f72b66ac7cd

            SHA256

            2b8bf6b2e0a2cdde0fd5e34d727ce5901f33ad742d9c02ac466625db9e4ef76b

            SHA512

            5ea1f01cd20214ec5712cc8a58ecee82b12aeaff9c7879f1c3e89ccc54b443d394aebb9fedd2f300101242bf0a0078d50383ad1f24116a67be165077c094f836

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\chrome_100_percent.pak

            Filesize

            126KB

            MD5

            44a69827d4aa75426f3c577af2f8618e

            SHA1

            7bdd115425b05414b64dcdb7d980b92ecd3f15b3

            SHA256

            bca4401b578a6ac0fe793e8519fed82b5444972b7d6c176ec0369ed13beaad7b

            SHA512

            5c7bdf1f1deb72c79b860bf48f16c19cb19b4d861c0b6beb585512ad58b1bc4b64e24edfcd97233e5b91dcd0f63ed1c7b278d22ec062fd0dfe28fe49cae52049

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\ffmpeg.dll

            Filesize

            96KB

            MD5

            d7137368e4abbbad311395e91f72d849

            SHA1

            b744d4d6d35624a0ba8840f811d3412270cfeb79

            SHA256

            1a9c7b3c9854e7e7fcf17fef3821af9af970b309646f655b3dc238a56f0093f2

            SHA512

            8f244582aac77ffa4eb86938bbadf7f23677fec651cd7e6ce8ac0fcc462fa28e37e279038197c0d4aca640fd90f6debbb55db749e99b15049c6b9e48802899a5

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\icudtl.dat

            Filesize

            12KB

            MD5

            783227c205df23f4de71bc4f877e4e7d

            SHA1

            d0fc53b6167f473d97010ce7c9b35c7c93ebc262

            SHA256

            3b38a2f2d64ce69b203a9355b6333f6dd7911f8a1cda9cd55b34300395cbbeac

            SHA512

            8be4b6fccc1ad451bd0317750d0fff2bb505541bc9fe6f7752bcb95c77c83478264ef34989522a446f2e2125bbc89b6fdfec7aed41d5260e8a73f89fff15f048

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\libegl.dll

            Filesize

            142KB

            MD5

            73bd129714106cb60128b5d864880b3a

            SHA1

            cfcb832a1dd2db0ae6769261171ed1004cb1fdbc

            SHA256

            41675f8f39cb294fd6b40decd2a7f7b09c5bb1f5bfca3a201be9a05c974fc866

            SHA512

            5344b8797182e561eb4d60dbc22a8b95b241a282258b448c360349b8b3cf5ecf3c0ae8bdf3be6aaceabbd3cded667bf7b3bb241a0cfb5a806809b250899bad26

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\libglesv2.dll

            Filesize

            325KB

            MD5

            694965ee8c1fe90de6b6fbcb5908ffba

            SHA1

            d518ebd757272052b37a782e9e0de5c7004acbcd

            SHA256

            2aaedff51d9efeda024433faac1e4e407d98d232ec2e1bb7005bb513d69f3fb8

            SHA512

            ed1c320213ea12c59d60d6b2202f9de8877c716fb0e36b55f87985a59eb08102439807a8edf9abfdbc40cbdecf48ffde1f7ce2efd835083c85f87595338c8cc9

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\locales\en-US.pak

            Filesize

            302KB

            MD5

            3fef69b20e6f9599e9c2369398e571c0

            SHA1

            92be2b65b62938e6426ab333c82d70d337666784

            SHA256

            a99bd31907bbdc12bdfbff7b9da6ddd850c273f3a6ece64ee8d1d9b6ef0c501c

            SHA512

            3057edfb719c07972fd230514ac5e02f88b04c72356fa4a5e5291677dcbab03297942d5ecdc62c8e58d0088aed4d6ea53806c01f0ea622942feb06584241ad2d

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\resources.pak

            Filesize

            405KB

            MD5

            623e3b7e4edb70ce4933d79595d1180f

            SHA1

            800116c61147a6f7983450a9e3cfe09d5ca09aa8

            SHA256

            5a1e7bf3c189c9953cb5c08442c8b1569c7cff5a1682b31608c17d16b80fe2db

            SHA512

            33af23f01b161e70aa0b81fdedf354a50def0abc8fa3d280b70ec0d4d032d4806f6f57e3a4754f8bbb03031bad15be68de8c612f5ace7e338e25c7b46299290a

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\resources\app.asar

            Filesize

            970KB

            MD5

            d261d83df54ab13489a24c0795c7ac98

            SHA1

            debdca5e8bdb2b241f770efe99aaeea4ce212a72

            SHA256

            5894b968ba475bf971be5f0e86377eaa278dd224dbb3f923746084339638aa1e

            SHA512

            d2a06f540d0a64bc32522744047d48ecc87c6558ce9db082bfda0d241ac0d5b5f081bee946aa2ddcd9ac13380862c48a2a0d3c2676e8218cf9e778e9f041e0cc

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\v8_context_snapshot.bin

            Filesize

            6KB

            MD5

            b5a515884160b68d577893c40f3d05b1

            SHA1

            188ba073fb5dc2291682f5d4b7b14e6b766444b3

            SHA256

            8d28683cced4e0f0c2be2f2f3cda7ec807c38f76cfc6bd862c103606559316bd

            SHA512

            51237e99214956e37eb9f5c020e9c2dd27c0edcfe8b8e98536111d47cddc3123665b20228ff9410f92b32b9330f680a6a1a859c14f78cf8fc79a2d329c5e27e5

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\vk_swiftshader.dll

            Filesize

            103KB

            MD5

            252453902ad5c266d96c33ba214f5a78

            SHA1

            9e0d5287cdf02671d9ecec0e930aceb2128010f6

            SHA256

            1af94526c02f25d23aad59e52430a91db8ef738ce48ec1856cf394a3b52137e5

            SHA512

            4306a3abf8e17c0a332151cb14226d89c672cc450176aaf6e2c56c10eabf79f0ccd8127ee9c99c8dd539c71057ab195a216fa1fb31572109c3556fe6ca89ca88

          • C:\Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\vulkan-1.dll

            Filesize

            162KB

            MD5

            2c5da5befbb9394a89288d7170106b41

            SHA1

            51f3abbf5b17fb647e2dcfc548aec4a9692bb517

            SHA256

            e8781718a6e7e16c7c754db481d1c6d4249a6b14da2c96434d034789e1aade56

            SHA512

            37f1c116ce22b97182f3074e916772a5b53ebf11f3be4673c127f2f4d30b315711bb25e144af59e45d56543d068e9ce66972c87fd7ba0fde78f1e91ca968a7e7

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\LICENSE.electron.txt

            Filesize

            1KB

            MD5

            4d42118d35941e0f664dddbd83f633c5

            SHA1

            2b21ec5f20fe961d15f2b58efb1368e66d202e5c

            SHA256

            5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

            SHA512

            3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\LICENSES.chromium.html

            Filesize

            893KB

            MD5

            b9c036f84fb0dce7b19a5032cfdde1d7

            SHA1

            0ee7380d0f16c4c1fe58fd37c505d0a2e44c03c3

            SHA256

            1043d22784528e95a3cf4985bdbe7fa8c3a8cd90e800f0268ed8c1a6ca4f9ec7

            SHA512

            ba818f2507017accb84a8d29902b4aba3ea5dd56d7e950857d318ee81cbc22068c904626fa35990515fa35ce76ec1762d3afd690576a9b12ff4a0e461ea39245

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\TrafficerMC.exe

            Filesize

            778KB

            MD5

            088bed2240c86c88364fcc467241c3f6

            SHA1

            77a7bdd83635a5f344c77a7f489e01b57f9f593d

            SHA256

            21b36bed189a15cbf460c460c2f4a4373055671e70794b80b5507965f27f661f

            SHA512

            c6874ec21209f08d6d5c3b9869f6b6bae5680eaa47b7da3041baf50eeca8713a4a62fc7f6df46075d4f20261f79b86f1b2977ad7a064a44ac62d9bd6009c95d8

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\chrome_200_percent.pak

            Filesize

            175KB

            MD5

            9c379fc04a7bf1a853b14834f58c9f4b

            SHA1

            c105120fd00001c9ebdf2b3b981ecccb02f8eefb

            SHA256

            b2c25fb30fee5f04ccdb8bf3c937a667502d266e428425feeb5af964f6167d48

            SHA512

            f28844dba7780e5f5c9d77ac3d29069dfcd6698447d5723886e510eadd51d6285e06adbda06bf4a69f841afc161c764cb2e5b9ad2c92f0a87176709b4acd2c13

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\d3dcompiler_47.dll

            Filesize

            1.0MB

            MD5

            d86a715c924578e4651a0011fd000f38

            SHA1

            01ac77b59c96e48873873af236c7240552732ddf

            SHA256

            609fc20e19d4a62bf0becf6403ecfa56f41f34bc6f3e0003a8af158f06b8b4fb

            SHA512

            8c210e4af27568f8558ece40865a8c31ca31f07a67c57786f318d88216e12849618f2c9aab19c04f5c92734075f8972436176d732c1f643a9392a7e22a493340

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\ffmpeg.dll

            Filesize

            1.5MB

            MD5

            61d9f11202da99f66deac814f2adc474

            SHA1

            ef5ca36338798bbfe7032aa53423ec961c2ddbbb

            SHA256

            c518bf245e6595bff60b38fd4025d54a1e0418cc3ff57575f1d32d284ef9b939

            SHA512

            9cf13afed47a984db75ebf15cbdc7558f751d0cd289ee06d6b62ea9245fa270a6416b20f2d16f433209e167b36e179a6dd17b949a9e502e084a315263e4118e8

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\icudtl.dat

            Filesize

            1.3MB

            MD5

            f172ec0738dd62603ec02ea95e9dc5ce

            SHA1

            6013e4ca89a7b4f4582d69118919f14f0081f119

            SHA256

            59137fadbb23eee415d9ae0d5911a7f5cc2fa1c864c6f4a3c138fb8e4f385d30

            SHA512

            8a4e3a44f60863b9602b6ae314007616e21a3b658d214f7c7cb12c14a66265280d53f649e78b2bb1bcaca3c5ffc0fe63299409b2324e176e231821207517c313

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\libEGL.dll

            Filesize

            464KB

            MD5

            4b1c6fae4e5ad623642408f029dbcd93

            SHA1

            9a5e55ef7afb81061b0be90c183957db77268511

            SHA256

            71e4896016446bb46984a4cb11741a1fea9f2da40fcc2808847206147530fae4

            SHA512

            ae69e3b782ddfda96b8d168be0839c10bae5eaf297cf3a2f8676329c513259f9c31c81e0f1ea59ed69add79196c2793a5465da2a3ea12948ecc2629cff548232

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\libGLESv2.dll

            Filesize

            1.4MB

            MD5

            b7ea10c41afb0929eca42baaa89a7228

            SHA1

            bebdb2d2d27c8956a258932554c93cfc4ed172e0

            SHA256

            293e85f8b24893acc841ed0c3ed25165404d6c5fe91190bbb41381ea5ed39ba2

            SHA512

            4b938aba66e684f820774ef292cfc50bb49aa7dd5fae4a69b8e4f4cc21fd41b05c6062d1a4e3bf8431d09b8519f7f5b8e1593e63beb869762f0af7737c9199f5

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\af.pak

            Filesize

            327KB

            MD5

            c9312ff081e600e5fb4483b46ddd7c23

            SHA1

            1ff05a6a06cc73caf2d7545a3821d90c228ac0af

            SHA256

            b1987cdcbb8d76598422aa1739a246ed6690dc1b211f950fcbf2f040491ed7a8

            SHA512

            20c136b44770aa0e06259687656675a3e14310ea4e8ba214726b216bc1bcad6026267bf0132cbca642c0b5c49293386d0a1bd93ba40e1c33b648ae70416e8898

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\am.pak

            Filesize

            531KB

            MD5

            e8bac983607c5432f789afdacdda42ac

            SHA1

            95c26f47f7102be338263fd7f7e365632651f22e

            SHA256

            ee363b88697a26d486c77bbf05f5f7f62d4b40c235e1d85e11448083070576f7

            SHA512

            5e26f40c8dc088d21b9b6a01041ece3bd4b2899ee33fdd85be995545c7a24860fdc9c672da8c9345a08891e0bac04ccf4d65de543f4cfba0bab0ae3fb32354c7

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\ar.pak

            Filesize

            478KB

            MD5

            8c020db9d9d3e00e2a668adea4f3f4ca

            SHA1

            68f61c650ecc213c4b71e4a3ccd563c63a38e0bf

            SHA256

            b40ea1c5ffab72e9d3857d96fe5d89b25310b4a97144d70f63ed512b5b07a9c1

            SHA512

            6ca70d4cb3a4c7c66a8be0e017a1293ef74e8246b2fc7bbd08aaac9a9a8d97b60c00e2c227bf161c540f8994e62afd4371143a2110108bd1bcbc3ac51dd81e88

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\bg.pak

            Filesize

            453KB

            MD5

            8c3be7aecff4abcd4ad039ddca0f153c

            SHA1

            c8ae056813c3f9fcd90ab2dc5dbeec76cfedfefa

            SHA256

            15c8ee4ca791131b275772e5fa3c4b7fc3e19c5e8fb25c427ffe41e7e38d83ab

            SHA512

            5813fcf7c6a6d31d435314cb97c132d67ea6de49c680195ee5214e0c7a922c7723b635b3d275285a3bda72cd474cf3889153a983dc90fa9ffc6096b079cf5394

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\bn.pak

            Filesize

            400KB

            MD5

            ea970af5177cb4230d7ff3f075a72d9c

            SHA1

            f24bf49d10f19677e56f8ef348d0cf24cc5c57f5

            SHA256

            a2d49e90779d276b8661cde54ad086b10370f2740eea0d96e471796c5fcc13e0

            SHA512

            7df233c973ef7a205f4d7700ad0975e27a62624eead9f44430513e83cafac3701acd1758412a4e400f2a69be62fd4f41e8ff9dfd7ddc5d0359a106ea2d5390e8

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\ca.pak

            Filesize

            325KB

            MD5

            c00f67d5f5cce22d0852a2ac48181f32

            SHA1

            6ee2a255c1720377320ebc1b8b672ef4a23894f7

            SHA256

            4eda11d30a634e3e8446f48fcbb3ead98a627aed42da4501f330cd4f224ac811

            SHA512

            8c4787741f539d9f5946b65926686c6841115984d914c4cc815afa378c61089394a3d8478895dd5d0f4354c79cf9aadd1edf4148a81e01f2c0fb92c2a1faad17

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\cs.pak

            Filesize

            377KB

            MD5

            3e2c49143f4718ddd9c1c74f8599fac2

            SHA1

            7cce45de66a3895c3493b998fef7bedf045b29e2

            SHA256

            08e40f5efc616cdc0588fb4b1a706d997c69d17ddaf97eb91a4aabafaa11cee6

            SHA512

            a849ca0d09e0d4c025d9de6c8008c13e13581961c321f53a552deeaa210db891914386fd51673615aec8b5d8d68a921a968db5d0fe447963892ceb0948861e3d

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\da.pak

            Filesize

            258KB

            MD5

            89d5b59dc0b7e47790da3295e88cf680

            SHA1

            c9e44c3b1d771f3319e90d6b381cbb1948ce24d3

            SHA256

            a30061df7a27fb313d6d7e8987da8e7e257e76ee7f7e85d704d14b0b4ca7eeab

            SHA512

            0105712b4e5e3aa8e78ec37b02211952b90a3d84366f36e5e62d12bfee5b50653a64df6413060ca0c14dd600e0986c5d3fcc2d9b286f1c6c20e5a909a06805c6

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\de.pak

            Filesize

            367KB

            MD5

            cfc9d90273c31ccf66d81739aa76306a

            SHA1

            ecab570041654b147b3dd118829e2f7ae668f840

            SHA256

            8bd127d689be65e45bb8d2a2ff66698200da97835809c6b56ec9e2929b70618a

            SHA512

            c9a5058b34c4045ff1b7ae25f1f47bff14d06b3a97b7b1f30da65618ca7aeb0638d79f4e1cea4773cd92d9dfa7f9d2203e5734d0cfe11ee2d2a460d6cec18380

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\el.pak

            Filesize

            276KB

            MD5

            30cc050e7867fb558bc9840320644651

            SHA1

            b47213ea5329338f1a39aedb27dd9b192b835891

            SHA256

            4a2df8a45ca7c114acbe93f21dffcc1048eff8be5faf701b02a171eb19f82989

            SHA512

            32b1cd1790c0650ca67eb84120a598cbe78d2e62c32216ed92c8a62240e18d8cb594d7a9e42613b4f9215455f416396624b192b2b81d30e774d4dc385e20c670

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\en-GB.pak

            Filesize

            195KB

            MD5

            82635b5e3957e9e9e80cb9cb595dd72c

            SHA1

            1f6fe09d713c556e972b5bd96290433b7e18970e

            SHA256

            b24cda9ebe804cf34daf222fe298636cdc14bd9feee19b46e2358517c244157d

            SHA512

            93951504219b8b6b7645ec463153a9dacc87800670517386c98e2bf48bba82638905ca0da560e87179e1a839aa3595e4032dd393fb07614b8c569206be8d9142

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\en-US.pak

            Filesize

            224KB

            MD5

            123ac03682451df6329a9087475d8ad5

            SHA1

            94dee613d2d4f074844218e5a5ff3c83df59492d

            SHA256

            78a90e8a86e3757e7284218d00f15ad3ca6b061beb3308a4d3b304f635be408a

            SHA512

            d269dde16c2dfb84237ecbfa8ff13d6ff0d12fd3a1849169f1dfff4f7534a2eab3cd274764a68e9b1a35d6053a9d94fd9e856d78739aec41f941be65d2e8efcf

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\es-419.pak

            Filesize

            178KB

            MD5

            f7b86ab553ac5382035257c1f027a8ca

            SHA1

            2fcd623cc8b0e4c39a143a2844fe18e5f4a6ec28

            SHA256

            d7ecde766297ad667bd6b6af9f492ae8d51691c1c39d74a57d24f9c6d1753c86

            SHA512

            cc5919d7f8a570f074ec8ef266e59d3ca4a577935f0af45c0fd58bee7de62a5a7b612732a798c6395793662aa8c4cd6c2adb2ebdd7a3bb6b3d1a98c29a4903e0

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\es.pak

            Filesize

            92KB

            MD5

            7be666912fffd598a519c50b0c02f7bb

            SHA1

            99b0b35170e5339ad5d4cbffa29ac1faedf801df

            SHA256

            f365b8058ee1dde6293d1ff3bb5e0e8fab2b50fa6576f7567aaf0f5488e5d0d2

            SHA512

            cbf962123668bf029c12b4948f4c4da959b88aeee519275aafa09024d662e7be164a9ba1f5b37bdf4c4fee95e89eb9ce09af536ef608c7a07343778932bc1e25

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\et.pak

            Filesize

            188KB

            MD5

            fa6baacdbfcefeb794a3d53251d81efd

            SHA1

            71f9ad53ea7f0e47ff885486a68762ce266f8f92

            SHA256

            2d02f7c9ff8674c559a1be758af707f87c5edf8aca5ab440dac297f0be9ea041

            SHA512

            36b27a5873104e9698897dfc35ff9651c9e559a3831ccf9e800c79ef8f89899f7f077306571722fbc93982be3dc19d8b632129fb8cfc0f1b280f1fe2869d5162

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\fa.pak

            Filesize

            162KB

            MD5

            58db9e1741e41c94a2ccec9056cb8702

            SHA1

            6f4b7ef5a239de004cad4b9524a619a30246d0bc

            SHA256

            6f9e16c0bb76ca3071f10b2193f665d4c12f12659f18539c5f993fc3fb2b9804

            SHA512

            41bef1345ed697c43c1a74f6ba77e2c4ac0f1083ca2a064e8a332bd23aa0be12e152bfe94fed80f3a4897621cbbba37dd7ae05b0e70e9bf8be5d52d8486cdce3

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\fi.pak

            Filesize

            216KB

            MD5

            54dbc3594ce0c7d145bef7b66b330227

            SHA1

            213b6bef8c94d14d4abc507b87193bd31206c877

            SHA256

            b2f27d180469ccbd25f08365905cc161f81bec3e93adb0a5f6dc13ac6f1f43ed

            SHA512

            12b603161cece2e759fb0a2cf20aedb4b8d0f6fcbd03b28845dc4e47f96061602446592664b10261afcefe5ca1be71471ddba2c40e98a0ea15bba0e527248962

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\fil.pak

            Filesize

            125KB

            MD5

            3b6be146f6b51cb2eaef7388cc24ec3b

            SHA1

            e7034d9cff1cd717a34a12bc51384f321849fba4

            SHA256

            bb30dc696f7310a9b91bfc213eaac78b324bd0ac197d0cd6c16119ef088ab894

            SHA512

            7e20017fbdcb80c7000bc634acda0d193ab815af8597d77d8bd3fdf6da897ebc7567b47e2ac69a7d85779b4618defbfc2498bfed1e5f8df533286e1d5ab6e267

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\fr.pak

            Filesize

            132KB

            MD5

            2a2e939413d6338cbcc50b341cc6b563

            SHA1

            dcc30d2c1602454bdacca8a72a31dfe5498ab719

            SHA256

            0be9a390515f0ccd22b3839f5af1773012abe5ae855328ac20518e5d86024d6e

            SHA512

            1fe2b4a3d8e6131a50db02b30cb696b1cf99ddf631d9753590d8a64906a6e6a96bfb86d145b9c2c5a7627b6743f7f8571648ceb8c070372b05eda9a669f4c1be

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\gu.pak

            Filesize

            148KB

            MD5

            13a172fceb59eeba2af319a143ace735

            SHA1

            7a262b24e67c61ca6936cf8e2e5369a33429985a

            SHA256

            6e28d72698d7bc0ebab30beac6c418d1f5beef6a1bbadfc65afdc51aa78de210

            SHA512

            57bc037a3b3513c971f38e5f954fe7dd1585b9ed0750a26dfd088a7b9f4980bc4ccec44e8f4dbf2c3ed506550b6ef800dc25a5d5e90c8e25c903cff86fcd9139

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\he.pak

            Filesize

            89KB

            MD5

            af8fb96457b61f559d0538355adf6597

            SHA1

            f95893a9ab562464ae659b6bf40fa3a70d0e2d78

            SHA256

            45b4d28fc2f654bd390f4428b49ec0282d18bdf44a6251bd63c741ab2e263e41

            SHA512

            8255a8851790141cc02478398675bfec84758a90e9d1ea1991f84c6a7608e5f719344ae595b7dead9328cac9507739116bf9fa5df9d6ed51ff25accfedc87de1

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\hi.pak

            Filesize

            124KB

            MD5

            7bd9ed1a1d1d4c69a02ecaab8028db73

            SHA1

            6e708d3edaaedfd91d852c4f9aa93305704b736a

            SHA256

            15f14a45afa4fced095f16582cd22301b95ddb6d0e6f0c9267df1e3073e82a9c

            SHA512

            97b890deee41391883179981d7e480249e3083442169e743fa82dc9779c77b958b5e222c7a05724fbcb791b52491dcf22d989602fc1be778bb72957cd4fb243b

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\hr.pak

            Filesize

            92KB

            MD5

            237754bf93a79d048ef7b1d7fdb92013

            SHA1

            e899f1e2315a33fb4a8e0300b2f643b1f88d8466

            SHA256

            f08e5f53ae8cc8fee0dab4d454186705586eeb028a7a5052e9a187d328fd15a7

            SHA512

            653437c3e0b7340a9043d34102ae2daa7baa625d252f262d2f9816be30277cec9ada1de52f912c896fb78d8b433bfeb3743cabf837773e6fbb328d1ece094040

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\hu.pak

            Filesize

            150KB

            MD5

            ec838832ec1e703f015b314a4517e8e9

            SHA1

            83d3ba295a496baa69d8638b38d0df4436febbe9

            SHA256

            4a87cbd07d306e70b42b945a1582a684fabee7f2eaf6a02f7b11ac98c8c0e8ad

            SHA512

            f2c5f16fd76bc1c60a7be99d2bbec7788de26266872822e22c72675bfea3fb894c6860e2037a7f1ad3cab881a6eec45dfa46348bcda1b7e711f2a05b44579c22

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\id.pak

            Filesize

            111KB

            MD5

            eefb931642da38a521cdc791a70a4667

            SHA1

            8d5686667e8d852e241de4c16a7d1ef5004c645e

            SHA256

            dac6cd7c4734cad33ef4abe1901a7392751b5ce723920d86e997ba09b11e7839

            SHA512

            8f97b5a822c876d596f3fa8cdc1398feead6bf0a2a1900fb29c58553e02a55d1c013b992665ac7e1171bd37b005228b45c32e76dba6159136a5f38c96be0b760

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\it.pak

            Filesize

            92KB

            MD5

            08f72f504b76d6278c851cee39e84c26

            SHA1

            25261d6a555d5a446a39f85822a16cae2e918515

            SHA256

            ccd07169a2c049ca4d75f5b3b8f5e1d33353b004a28817dfb962bb65eda50987

            SHA512

            d4e87c6aabe0b1dd89b0593a47d7ddd945136cfcffd0bfd5b84908ee7e0be767abd9063a763e97bf4a5e86c8b39c24853a0bc8f3d49491067e8398c014bf9b2d

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\ja.pak

            Filesize

            108KB

            MD5

            250b0093975a3ea1b327f9ec62ff5fb6

            SHA1

            8086596a153311145b90614195abf9f357a89ff3

            SHA256

            f470661bf921675be02df3cbdf536d2e9248bcd89153866afddc67dd46eba83b

            SHA512

            d13a59890f6995ed91a651198d00421c1f7405c4e9b246b53e306b7db9513c94bd328b20a0dbcd6b43727b98d9d6141d596793e3737b187ea77c46c7d974a54b

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\kn.pak

            Filesize

            155KB

            MD5

            90fc5793936be0788835ee5a8cd6a02e

            SHA1

            20ef73357bebc960a26b2b137503dd5f65fd17e5

            SHA256

            97da817b92732f5187cac52bd399626b6ec85afe485ce3eeddc85b4af77d935b

            SHA512

            d71574b496699914417580bd93bc9f3291d2b8c392746b362479aef39ee0d46764a4b29f29b7b29ccbac2b3543ae6465d1aff501805a5e5b6dc974b9531cb14f

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\ko.pak

            Filesize

            43KB

            MD5

            15c92fc063565537be4f674a6d36c6e3

            SHA1

            913242b4680d21846528a70998a445aaf232862e

            SHA256

            3faf6b8cc12ad2ceebb6c4f090eeb0f597048bb1f3c50781de250e72d5afb7ef

            SHA512

            8527a3ec81af4c2da04e23e41edc958648bcff921af0c7b9c83f493abf720d18a5c5c332e4871e68d7806e9ac2978de7619e43ad0a978b47da9213ed14c5f779

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\lt.pak

            Filesize

            47KB

            MD5

            fd7ca95d425038bde9b32b133cf13b2c

            SHA1

            0d291239497ead56934bf2d583e49d46332acf1f

            SHA256

            aebb94127e0a4fdf14be277e3d42e82b2432725214206ede9453d297543c155d

            SHA512

            ed949a689a566a3bb0319836e877fd68200e1a3c31da9b288705ee72a95a5b6eb48a34d9631792bfec969eaa1af1ffb742d102bf8bafee3d4550cbae7f4be35d

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\lv.pak

            Filesize

            6KB

            MD5

            983c0198cc684fe4ca300ebb0cf7eb7a

            SHA1

            ea3d152b8aeaaed53544bbef70574b11e8e8a5dd

            SHA256

            b6576f5d3914f0d70e91d9de75fb5f7ecec7185bfed48f639af8074523166eb6

            SHA512

            1bef0528be0f107eca36e8d41b6507b59536fe320e77278c53699fdd8f92e7bec4b9f7cd2487e6cb4e03b6381f5ac82c2214239c827f30ec3cb5c595d1399c71

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\ml.pak

            Filesize

            68KB

            MD5

            9a5578d7eb3ed1596d3a364a5f0afe1b

            SHA1

            2115491b64bf114e0bb85c377c58bede4d425b9c

            SHA256

            d5643d1f834fc98b217483ca0610b0bc1229278ce5047c25d518b791757e8bb9

            SHA512

            d8a2840d8949db34303a14cff353b424eb386ee91fd1e4f2ca84457e12a11d168cf4f16084c07b51a929181a5d0eaca9455b5ad82ba2fac35b197773511f0e57

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\mr.pak

            Filesize

            73KB

            MD5

            8e7fa975454f9957f1bea49892f1de5f

            SHA1

            5f5f4df5b7cc9ebf05735b96a07c88ea58e2f413

            SHA256

            2cb5999ce062400b0f18eb68dc576ded10d9a386a01302c9d95df24d351f2e68

            SHA512

            234e6810f47f4d0f02a92e463e05af066d042019a9db45acb6b7f7daef249289649a75db3784b7ec5a550fb2d15c48882f744f572ac12cfa4fc9ad62a0837839

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\ms.pak

            Filesize

            28KB

            MD5

            cf369d4d15bb943d7b762b1eafc892b1

            SHA1

            74bcdb2c0944d6be622be94331fd60441500d3f9

            SHA256

            919dce9554552f3c9b75984df2db7fba7810ab6a7712e7cd4efa365a0d0213f4

            SHA512

            a676daff31f120cc239e51f469c4028660683c134ad290d6d02d0163af51514eb5a93cc3a8e535d7e2a95547de41f425bc05d26d9c44959baf2e0279b2156ad5

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\nb.pak

            Filesize

            32KB

            MD5

            91615f6d2058fd5ff71a8492875baea7

            SHA1

            4837daa0e6d3aab17a08def0ec9f67e88f223918

            SHA256

            2d5d2e20de33c247476f0752905abddaddcdefb32038e5010323ca78d8e35ba5

            SHA512

            47e40602d5d7690c485858cd1254cb321e3551c0030822a7715e141a103b21428f50feb16e35ec3dcbf0401f4d6d2f0104e99d941fb4f0d485188a19204963f0

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\locales\pl.pak

            Filesize

            2KB

            MD5

            f40068a142da5f2e930ca99a6fb748c9

            SHA1

            00ea2594f40ec9572e63a4d21bb013d9c302d728

            SHA256

            7d2a4ad9789ee64decc9c58dd65fcc8eaf70d476423b4611ff1a035c4b6f25f8

            SHA512

            abd4da13e259bca0ef1085fb0a943a1f4d0659b6653d2eeb605884daa997cf99ade4d7df801e732e66c426461e49256df59ed6fd0b13191c3da75769145a7727

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\resources.pak

            Filesize

            972KB

            MD5

            4c55997385bf746a3c02da293882c03c

            SHA1

            ca2b79b6c1d1b40c357d488c6f12c5294069e202

            SHA256

            3d5326153ffe35bee9296e0448d1fa265a555438ad62e56fa952022712e10aaa

            SHA512

            72b9d6a46d689358c147959337225f7d58879bf8c3f38faea349b692a1f5a6eec0f8cd2066f933cfd6d3395e48978898e415eeebc0c33f8ba1a0f51bf7ef0d62

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\resources\app.asar

            Filesize

            74KB

            MD5

            bec2ded80120ea215f390e868e6d4b06

            SHA1

            cff941be02a80889c988c4b810ba7ceefb4b7a2e

            SHA256

            093084b0d4942d2d8a6a10a32590bda19859125a9d10a5c90ef3b6f90083ca0c

            SHA512

            d68f64798ef95145edfb6ff0fc5be5272a29c2da06889eab0b127167cef130217fe9ec2e6d0360604fdc2f19c4f65da6af02817f88c556cf06b9f2bce1f84817

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\resources\elevate.exe

            Filesize

            63KB

            MD5

            93e879dad45f8c18727e61b41b1f1b36

            SHA1

            4e41f39345d95a684d89895117bc64f5e01dbe12

            SHA256

            3413c24cade779324f0e2e02d6c8f39103eb8b9e7dc19e5be6be518a8514a60a

            SHA512

            bb181b9fcf91e5b39c06df76431101d428a9cef00ace6ff3a6db1fc8533efc96ebb9a64e7c0b641f5d9f0ddd9c3f30b806d5b711f0f4bf54f88c8b44b0eac94c

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\snapshot_blob.bin

            Filesize

            410KB

            MD5

            c5d06bf7a12109e49dce962b6888f051

            SHA1

            63189d373271fd89079b4f55d035b7746f96ff00

            SHA256

            ece191beef3b53272a925c1f5e8c02a0dc78b00559799d27a0665fc480380b3c

            SHA512

            622854c9310ccd84dd100ced5eb3ba3d52f75dc68597cfb550b9b84e3798bbb90d39a41d3f9fa7b0fa58654e2ba0ac657d70b8dd89677126d39889abf9e0c008

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\v8_context_snapshot.bin

            Filesize

            640KB

            MD5

            6b5c6a682f9bbb73ed07b52df7812009

            SHA1

            945e2f3001bed5a23d70ceeedf6ad2ccbb4c4a0b

            SHA256

            fd63b93ea738179685da68b012a6a32bf0b06957dd0376a410f00459bc6d2d7e

            SHA512

            721fa3bb234521f3880add13b59e6781cd6f6b6610d38076aa3a4df19496230ffda848eb0220bf8b3ff34f2adf2635c37e883d0d6ec83aeeef83c7bcad980088

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\vk_swiftshader.dll

            Filesize

            623KB

            MD5

            f4d8d1c2b4b2883111d0ebee80c809da

            SHA1

            4091ccfc8cd0cea04d7088dda750d7a7f081ba97

            SHA256

            2d6040fe29c7b1310bb42e6d9d3023730bf30956533927b9da21ed8f07816bc5

            SHA512

            71d276498c9f208190d88aa9e1646ed086f5f8755aa628239c7ac20364d42f8c4dbe008b8fce0654ad43bab6e5bce763e15bbf5ef7c9ce57c3cbdb12457ceed3

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\vk_swiftshader_icd.json

            Filesize

            106B

            MD5

            8642dd3a87e2de6e991fae08458e302b

            SHA1

            9c06735c31cec00600fd763a92f8112d085bd12a

            SHA256

            32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

            SHA512

            f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

          • C:\Users\Admin\AppData\Local\Temp\nsjB70C.tmp\7z-out\vulkan-1.dll

            Filesize

            858KB

            MD5

            7935f27952b085cd1298323b3905d4ed

            SHA1

            08ca6df7475ccf536178fef17114b6e945a03258

            SHA256

            7adaaeb870b6c3220527cfd971e75c22567d8f921a0737dc2574419b36cf8b4f

            SHA512

            775c33c56aa29854883e496c27dd8d3d1bbdf53612bec78cd8fccbc2625cc18d479629911590a7de36fad214b93e86ee17f0f67080732ccfd5412c0eb1dde8ad

          • C:\Users\Admin\AppData\Roaming\trafficermc\Network\Network Persistent State

            Filesize

            296B

            MD5

            aa9c740dfa473cf0c883f8a2324c22c3

            SHA1

            3acf94b3bb7240d7178e03cb78381d115d121de2

            SHA256

            536efc295b2f83f04e5364b11301c4fa01e6e431f342e62e7ab7c5641ef0871c

            SHA512

            c181d3b49f05ff0aa159cbcc888ec355d41c9f5d9309c9ffe03e4bf39767cabfd4058a90619056f6403379ba4e4114f5b50b369c5348deeab60614a524a883ac

          • C:\Users\Admin\AppData\Roaming\trafficermc\Network\Network Persistent State~RFe597584.TMP

            Filesize

            59B

            MD5

            2800881c775077e1c4b6e06bf4676de4

            SHA1

            2873631068c8b3b9495638c865915be822442c8b

            SHA256

            226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

            SHA512

            e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

          • C:\Users\Admin\AppData\Roaming\trafficermc\config.json

            Filesize

            209B

            MD5

            716884474939fae404bfaf9002edd79a

            SHA1

            dd1e5e8b185ae256a2491ee21578ef6116b525a1

            SHA256

            8bd200a5d0078aec1b05afd3b104700f20282c73d190752195ad62952ac1974d

            SHA512

            c17f8c263c036ecf876e1e0906ea565acfe37ec0842ea2ad0b421b43bb753d3231d967f22a2c081be16841cb8ed5c923f52ef839e2548b896a896bce44b14f08

          • \Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\d3dcompiler_47.dll

            Filesize

            219KB

            MD5

            4096c83f0edb4cbf321811126efbc3fd

            SHA1

            260822ab3b9aea2fcb753c495e36463550fafa0a

            SHA256

            221f4b0d23f667dfd886bad97bd103c6f250313ca6c94cf29ecad520e77f80a6

            SHA512

            3afb4d8cb26c591c6e0939cec5c45e145c5131ab95bde1ce6e7e02980fac77a222d543febe81e46054473171c23370f6d2e4ff52c05980c721e04c4fc99c7ace

          • \Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\ffmpeg.dll

            Filesize

            64KB

            MD5

            49e6e1c83ee5c6ea8fe21255a7670573

            SHA1

            48a4cdb41bf5f67e3200c20683f2b2d06baba1a2

            SHA256

            ebbd1be131ef26f692ea745eed7b2bbd3ac396fc2f28a7a76ce8353a0d7d764e

            SHA512

            8b505dfc8ce20dfde793902a17e110b3172fe12842d7183c70c6006ee1ad59714c0bd3b783f1428b02a14ef8a19535d9d51afe0264854738d5923450fdc9fc17

          • \Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\ffmpeg.dll

            Filesize

            373KB

            MD5

            7d7011e21bed09deca295672613c5a81

            SHA1

            0111ed837f8e625ca459b840bd4ffe7781ca9175

            SHA256

            4762e91f70ad4f69be6f4e4218714bb9437a9db1a98fcf0a8d96b0704e059143

            SHA512

            d769b55fd612e19db5498536d16b7688c01f4c06c7dcc9aefdc7d4cfe36f233247e977ac37444c80db772aafcd5ce4ce825c7c5d2283486302b5bee0622cd61b

          • \Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\ffmpeg.dll

            Filesize

            62KB

            MD5

            8db00e3bbdcc13aeb7508217377eb76a

            SHA1

            764828054999e5ffb717a7ae2f9c8e6560a109b4

            SHA256

            45ee07eb241bd1a85def2edee98d52593b7cf24b67102d0dea6a63c645b80586

            SHA512

            0c4f5938fce24733029581837685a2ee19f9137c83ae30a28c443038857ea19da0aa28358bd82802dbfd398467d29e0fd9321beea4899174ac0c80eab97f1a64

          • \Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\ffmpeg.dll

            Filesize

            295KB

            MD5

            9bd4d05757bc3b550004c0fda9cf2e11

            SHA1

            4b29339a2a100da865ac211ad27ca862fcf5eb94

            SHA256

            c457233a841f0aacde2627ea57bb5cd932f384a18928e3263d4d7e7d7375313e

            SHA512

            a7d87c6420f0ac43ecc5b902495279b10c2f9a25ba8168a8a8c68a8767adc1131ff3c713e705d4491212c9484d769a774d129a3e97af093324e6d022bdb63ac8

          • \Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\libEGL.dll

            Filesize

            158KB

            MD5

            df938215abecf24063000a72be062dea

            SHA1

            49ea24b47557a0c9a934a52e345f112e181469b6

            SHA256

            a5e250559ea632bced07b1eb8587b89810bae50591ea217d7252900e008ec759

            SHA512

            6b584029d879965711eac059b8b5765921e8dcc3c908ab46aa415f7637820983d04537854f1c80e7f2e6268be8fd45fd1542d7945b139b17a69b360fa1df81fc

          • \Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\libGLESv2.dll

            Filesize

            339KB

            MD5

            4409d7b9081dcd16f75bf6dbf63257a8

            SHA1

            58b324659fd7a885c4a0aa8061ab206fe968d5e7

            SHA256

            cc97702e553740cc113fa9fff052753aad0f27a5579b17938cfe3ec83baa5198

            SHA512

            1cfed93259bd949623dfd850bf8228fb934308ccb7520b2daa3928065731d1014921e589ed552f8eb64cdcfcf4296107a3557ac148085f880ccaf2736debf915

          • \Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\vk_swiftshader.dll

            Filesize

            78KB

            MD5

            7598d87ee389de7a52724ed7bbb0003c

            SHA1

            8ebed034fec9af488beef0da8c6d00a9fa2eea62

            SHA256

            2300e742467c0a4452200d292ded92c76c3aade1b28312801834855148f07867

            SHA512

            c678e5135bf0a0b884929baf02f97aef2857e05f56efb95c5654e86fa573dae2aa24c49eee2c10d37eb59f1ced8864c8266b83dc021b657e1c2a4ec809028c28

          • \Users\Admin\AppData\Local\Temp\2T9DhkUutS23JeEFsjPfCA0i2Ci\vulkan-1.dll

            Filesize

            80KB

            MD5

            6c7d9eb3a5ecb5d76a652a29f03bba59

            SHA1

            9d4d5f86cdcb1834ab975fe1e352cf3729bf5fc3

            SHA256

            10e54bfff87416baf069d9939f56ac96f0276d86bbe810ef97a5ee151c91ab3c

            SHA512

            2df8ba5f4aa9031ee2288b5f70b04dfc2137e9aba911c78c67957dbc8db47aa3f1f9245f6c7749fc9ef3d5eaab94480e0812140fc3e23b4ea584cdd22dd47496

          • \Users\Admin\AppData\Local\Temp\nsjB70C.tmp\StdUtils.dll

            Filesize

            22KB

            MD5

            8857bd48d191334306abbb936e1d3398

            SHA1

            40a3b242d7d74788ab0b6ba4454485cbd1785d9d

            SHA256

            65dbf6801ff78374e491608ab3467a929cdc997e2da3bc0a236b60db4eaf07f8

            SHA512

            f918fa1fafadfbf3a7d327547375be6bbbc77a5101e68f62b50aace209f8ec9c097cb12c37eb9b40321a62e2808ab897a5dbac1fff55746d34a9bb35b8b0c5af

          • \Users\Admin\AppData\Local\Temp\nsjB70C.tmp\System.dll

            Filesize

            12KB

            MD5

            0d7ad4f45dc6f5aa87f606d0331c6901

            SHA1

            48df0911f0484cbe2a8cdd5362140b63c41ee457

            SHA256

            3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

            SHA512

            c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

          • \Users\Admin\AppData\Local\Temp\nsjB70C.tmp\nsis7z.dll

            Filesize

            424KB

            MD5

            80e44ce4895304c6a3a831310fbf8cd0

            SHA1

            36bd49ae21c460be5753a904b4501f1abca53508

            SHA256

            b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

            SHA512

            c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

          • memory/408-600-0x000002C221540000-0x000002C221599000-memory.dmp

            Filesize

            356KB

          • memory/408-545-0x00007FFCD6020000-0x00007FFCD6021000-memory.dmp

            Filesize

            4KB