Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

26/01/2024, 02:54 UTC

240126-dd3b1scgc9 7

26/01/2024, 01:55 UTC

240126-ccj9dabhc5 3

Analysis

  • max time kernel
    54s
  • max time network
    52s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/01/2024, 02:54 UTC

General

  • Target

    MitalaFixed.exe

  • Size

    71.3MB

  • MD5

    9191a0a66c0ea5ee8b43779567ba6fa5

  • SHA1

    c75d2a4f8441589065bc2af55565a17622594d2c

  • SHA256

    42d4b7cfa75e3b7420e8e3b678287657140b6cef4c3d3a5157accf67ba6bbb83

  • SHA512

    92ddddcd81181175b7d3a9089db80e67728a3a5ebd447f462a711af87d8240e54c3447cc29f682674db62ce6acbe68617884672d82f09b72392de35321963c70

  • SSDEEP

    1572864:a4/4rzOchPaTSFhcJTeaIR0ZVH57BYil6/MsLsBSEJ/10MwKztSVzn2L7:pkqcdWSF6JbI676i/sLsBd/VwR4L7

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Detects videocard installed 1 TTPs 1 IoCs

    Uses WMIC.exe to determine videocard installed.

  • Enumerates processes with tasklist 1 TTPs 64 IoCs
  • Runs net.exe
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MitalaFixed.exe
    "C:\Users\Admin\AppData\Local\Temp\MitalaFixed.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:4824
    • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe
      C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe
      2⤵
        PID:3740
        • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe
          "C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\script" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1596 --field-trial-handle=1744,5501125707869108114,13269761682355568997,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          3⤵
            PID:5116
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
            3⤵
              PID:1036
            • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe
              "C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\script" --mojo-platform-channel-handle=1624 --field-trial-handle=1744,5501125707869108114,13269761682355568997,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
              3⤵
                PID:1792
              • C:\Windows\system32\cmd.exe
                C:\Windows\system32\cmd.exe /d /s /c "wmic process where processid=4824 get ExecutablePath"
                3⤵
                  PID:3680
                  • C:\Windows\System32\Wbem\WMIC.exe
                    wmic process where processid=4824 get ExecutablePath
                    4⤵
                      PID:4476
                  • C:\Windows\system32\cmd.exe
                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                    3⤵
                      PID:4672
                      • C:\Windows\system32\tasklist.exe
                        tasklist
                        4⤵
                          PID:7904
                      • C:\Windows\system32\cmd.exe
                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                        3⤵
                          PID:404
                          • C:\Windows\system32\tasklist.exe
                            tasklist
                            4⤵
                              PID:7984
                          • C:\Windows\system32\cmd.exe
                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                            3⤵
                              PID:5024
                              • C:\Windows\system32\tasklist.exe
                                tasklist
                                4⤵
                                  PID:7840
                              • C:\Windows\system32\cmd.exe
                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                3⤵
                                  PID:2388
                                  • C:\Windows\system32\tasklist.exe
                                    tasklist
                                    4⤵
                                      PID:8204
                                  • C:\Windows\system32\cmd.exe
                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                    3⤵
                                      PID:5284
                                      • C:\Windows\system32\tasklist.exe
                                        tasklist
                                        4⤵
                                        • Enumerates processes with tasklist
                                        PID:2496
                                    • C:\Windows\system32\cmd.exe
                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                      3⤵
                                        PID:5908
                                        • C:\Windows\system32\tasklist.exe
                                          tasklist
                                          4⤵
                                          • Enumerates processes with tasklist
                                          PID:8944
                                      • C:\Windows\system32\cmd.exe
                                        C:\Windows\system32\cmd.exe /d /s /c "wmic OS get caption, osarchitecture | more +1"
                                        3⤵
                                          PID:6208
                                        • C:\Windows\system32\cmd.exe
                                          C:\Windows\system32\cmd.exe /d /s /c "wmic csproduct get uuid"
                                          3⤵
                                            PID:6184
                                          • C:\Windows\system32\cmd.exe
                                            C:\Windows\system32\cmd.exe /d /s /c "C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\resources\app.asar.unpacked\bind\main.exe"
                                            3⤵
                                              PID:6160
                                            • C:\Windows\system32\cmd.exe
                                              C:\Windows\system32\cmd.exe /d /s /c "net session"
                                              3⤵
                                                PID:5424
                                              • C:\Windows\system32\cmd.exe
                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                3⤵
                                                  PID:5432
                                                • C:\Windows\system32\cmd.exe
                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                  3⤵
                                                    PID:5448
                                                  • C:\Windows\system32\cmd.exe
                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                    3⤵
                                                      PID:4956
                                                    • C:\Windows\system32\cmd.exe
                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                      3⤵
                                                        PID:6136
                                                      • C:\Windows\system32\cmd.exe
                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                        3⤵
                                                          PID:5924
                                                        • C:\Windows\system32\cmd.exe
                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                          3⤵
                                                            PID:5892
                                                          • C:\Windows\system32\cmd.exe
                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                            3⤵
                                                              PID:5872
                                                            • C:\Windows\system32\cmd.exe
                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                              3⤵
                                                                PID:5852
                                                              • C:\Windows\system32\cmd.exe
                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                3⤵
                                                                  PID:5840
                                                                • C:\Windows\system32\cmd.exe
                                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                  3⤵
                                                                    PID:5828
                                                                  • C:\Windows\system32\cmd.exe
                                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                    3⤵
                                                                      PID:5816
                                                                    • C:\Windows\system32\cmd.exe
                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                      3⤵
                                                                        PID:5808
                                                                      • C:\Windows\system32\cmd.exe
                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                        3⤵
                                                                          PID:5788
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                          3⤵
                                                                            PID:5780
                                                                          • C:\Windows\system32\cmd.exe
                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                            3⤵
                                                                              PID:5768
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                              3⤵
                                                                                PID:5760
                                                                              • C:\Windows\system32\cmd.exe
                                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                3⤵
                                                                                  PID:5748
                                                                                • C:\Windows\system32\cmd.exe
                                                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                  3⤵
                                                                                    PID:5740
                                                                                  • C:\Windows\system32\cmd.exe
                                                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                    3⤵
                                                                                      PID:5728
                                                                                    • C:\Windows\system32\cmd.exe
                                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                      3⤵
                                                                                        PID:5720
                                                                                      • C:\Windows\system32\cmd.exe
                                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                        3⤵
                                                                                          PID:5712
                                                                                        • C:\Windows\system32\cmd.exe
                                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                          3⤵
                                                                                            PID:5688
                                                                                          • C:\Windows\system32\cmd.exe
                                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                            3⤵
                                                                                              PID:5676
                                                                                            • C:\Windows\system32\cmd.exe
                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                              3⤵
                                                                                                PID:5660
                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                3⤵
                                                                                                  PID:5640
                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                  3⤵
                                                                                                    PID:5628
                                                                                                  • C:\Windows\system32\cmd.exe
                                                                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                    3⤵
                                                                                                      PID:5620
                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                      3⤵
                                                                                                        PID:5452
                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                        3⤵
                                                                                                          PID:5344
                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                          3⤵
                                                                                                            PID:5336
                                                                                                          • C:\Windows\system32\cmd.exe
                                                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                            3⤵
                                                                                                              PID:5324
                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                              3⤵
                                                                                                                PID:5308
                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                3⤵
                                                                                                                  PID:5264
                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                  3⤵
                                                                                                                    PID:5252
                                                                                                                  • C:\Windows\system32\cmd.exe
                                                                                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                    3⤵
                                                                                                                      PID:5224
                                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                      3⤵
                                                                                                                        PID:5204
                                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                        3⤵
                                                                                                                          PID:5188
                                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                          3⤵
                                                                                                                            PID:5180
                                                                                                                          • C:\Windows\system32\cmd.exe
                                                                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                            3⤵
                                                                                                                              PID:5172
                                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                              3⤵
                                                                                                                                PID:5156
                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                3⤵
                                                                                                                                  PID:5148
                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                  3⤵
                                                                                                                                    PID:5136
                                                                                                                                  • C:\Windows\system32\cmd.exe
                                                                                                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                    3⤵
                                                                                                                                      PID:5128
                                                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                      3⤵
                                                                                                                                        PID:3796
                                                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                        3⤵
                                                                                                                                          PID:876
                                                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                          3⤵
                                                                                                                                            PID:4792
                                                                                                                                          • C:\Windows\system32\cmd.exe
                                                                                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                            3⤵
                                                                                                                                              PID:3316
                                                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                              3⤵
                                                                                                                                                PID:4504
                                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                3⤵
                                                                                                                                                  PID:2860
                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                  3⤵
                                                                                                                                                    PID:2688
                                                                                                                                                  • C:\Windows\system32\cmd.exe
                                                                                                                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                    3⤵
                                                                                                                                                      PID:4308
                                                                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                      3⤵
                                                                                                                                                        PID:1232
                                                                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                        3⤵
                                                                                                                                                          PID:1224
                                                                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                          3⤵
                                                                                                                                                            PID:3284
                                                                                                                                                          • C:\Windows\system32\cmd.exe
                                                                                                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                            3⤵
                                                                                                                                                              PID:4324
                                                                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                              3⤵
                                                                                                                                                                PID:904
                                                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                3⤵
                                                                                                                                                                  PID:2068
                                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                  3⤵
                                                                                                                                                                    PID:2808
                                                                                                                                                                  • C:\Windows\system32\cmd.exe
                                                                                                                                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                    3⤵
                                                                                                                                                                      PID:1316
                                                                                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                      3⤵
                                                                                                                                                                        PID:3728
                                                                                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                        3⤵
                                                                                                                                                                          PID:396
                                                                                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                          3⤵
                                                                                                                                                                            PID:1084
                                                                                                                                                                          • C:\Windows\system32\cmd.exe
                                                                                                                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                            3⤵
                                                                                                                                                                              PID:4900
                                                                                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                              3⤵
                                                                                                                                                                                PID:1768
                                                                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                3⤵
                                                                                                                                                                                  PID:3748
                                                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                  3⤵
                                                                                                                                                                                    PID:2724
                                                                                                                                                                                  • C:\Windows\system32\cmd.exe
                                                                                                                                                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                    3⤵
                                                                                                                                                                                      PID:4632
                                                                                                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                      3⤵
                                                                                                                                                                                        PID:1408
                                                                                                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                                                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                        3⤵
                                                                                                                                                                                          PID:3760
                                                                                                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                                                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                          3⤵
                                                                                                                                                                                            PID:776
                                                                                                                                                                                          • C:\Windows\system32\cmd.exe
                                                                                                                                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                            3⤵
                                                                                                                                                                                              PID:836
                                                                                                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                              3⤵
                                                                                                                                                                                                PID:600
                                                                                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                3⤵
                                                                                                                                                                                                  PID:2788
                                                                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                    PID:2664
                                                                                                                                                                                                  • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                      PID:3200
                                                                                                                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                        PID:1220
                                                                                                                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                          PID:4016
                                                                                                                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                            PID:4676
                                                                                                                                                                                                          • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                              PID:4276
                                                                                                                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                PID:2660
                                                                                                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                C:\Windows\system32\cmd.exe /d /s /c "wmic cpu get name | more +1"
                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                  PID:6912
                                                                                                                                                                                                                  • C:\Windows\System32\Wbem\WMIC.exe
                                                                                                                                                                                                                    wmic cpu get name
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:11140
                                                                                                                                                                                                                    • C:\Windows\system32\more.com
                                                                                                                                                                                                                      more +1
                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                        PID:10792
                                                                                                                                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                        PID:560
                                                                                                                                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                          PID:4000
                                                                                                                                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                            PID:1004
                                                                                                                                                                                                                          • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                              PID:3876
                                                                                                                                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                PID:5032
                                                                                                                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                  PID:4992
                                                                                                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                  C:\Windows\system32\cmd.exe /d /s /c "wmic PATH Win32_VideoController get name | more +1"
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                    PID:9984
                                                                                                                                                                                                                                    • C:\Windows\system32\more.com
                                                                                                                                                                                                                                      more +1
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                        PID:6728
                                                                                                                                                                                                                                      • C:\Windows\System32\Wbem\WMIC.exe
                                                                                                                                                                                                                                        wmic PATH Win32_VideoController get name
                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                        • Detects videocard installed
                                                                                                                                                                                                                                        PID:10136
                                                                                                                                                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "powershell Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' -Name BackupProductKeyDefault"
                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                        PID:6340
                                                                                                                                                                                                                                        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                          powershell Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' -Name BackupProductKeyDefault
                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                            PID:10072
                                                                                                                                                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion' -Name ProductName"
                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                            PID:9972
                                                                                                                                                                                                                                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                              powershell Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion' -Name ProductName
                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                PID:11012
                                                                                                                                                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                PID:11052
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                    PID:8700
                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                                                                              PID:800
                                                                                                                                                                                                                                            • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                                                                                                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                PID:1028
                                                                                                                                                                                                                                              • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                tasklist
                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                  PID:6872
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                  PID:6792
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                  PID:6268
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                  PID:5592
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                  PID:7380
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                  PID:7504
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                  PID:7592
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                  PID:7584
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                  PID:7708
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                  PID:7792
                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                    PID:7972
                                                                                                                                                                                                                                                  • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                    tasklist
                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                      PID:7992
                                                                                                                                                                                                                                                    • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                      tasklist
                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                        PID:8088
                                                                                                                                                                                                                                                      • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                        tasklist
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                        • Enumerates processes with tasklist
                                                                                                                                                                                                                                                        PID:8172
                                                                                                                                                                                                                                                      • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                        tasklist
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                        • Enumerates processes with tasklist
                                                                                                                                                                                                                                                        PID:8244
                                                                                                                                                                                                                                                      • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                        tasklist
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                        • Enumerates processes with tasklist
                                                                                                                                                                                                                                                        PID:8352
                                                                                                                                                                                                                                                      • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                        tasklist
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                        • Enumerates processes with tasklist
                                                                                                                                                                                                                                                        PID:8504
                                                                                                                                                                                                                                                      • C:\Windows\System32\Wbem\WMIC.exe
                                                                                                                                                                                                                                                        wmic csproduct get uuid
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                          PID:8612
                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                          PID:8728
                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                            PID:8788
                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                            PID:8848
                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                              PID:8960
                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                                                                                              PID:8952
                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                PID:8920
                                                                                                                                                                                                                                                              • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                tasklist
                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                PID:8720
                                                                                                                                                                                                                                                              • C:\Windows\system32\net.exe
                                                                                                                                                                                                                                                                net session
                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                  PID:8700
                                                                                                                                                                                                                                                                  • C:\Windows\system32\net1.exe
                                                                                                                                                                                                                                                                    C:\Windows\system32\net1 session
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:9540
                                                                                                                                                                                                                                                                  • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                    tasklist
                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                    • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                    PID:8684
                                                                                                                                                                                                                                                                  • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                    tasklist
                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                      PID:8692
                                                                                                                                                                                                                                                                    • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                      tasklist
                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                      • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                      PID:8668
                                                                                                                                                                                                                                                                    • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                      tasklist
                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                        PID:8648
                                                                                                                                                                                                                                                                      • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                        tasklist
                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                        • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                        PID:8640
                                                                                                                                                                                                                                                                      • C:\Windows\system32\more.com
                                                                                                                                                                                                                                                                        more +1
                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                          PID:8628
                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                          PID:8592
                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                          PID:8584
                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                          PID:8568
                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                          PID:8576
                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                          PID:8560
                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                            PID:8552
                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                              PID:8492
                                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                              PID:8424
                                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                              PID:8416
                                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                              PID:8408
                                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                              PID:8400
                                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                              PID:8392
                                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                              PID:8384
                                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                              PID:8372
                                                                                                                                                                                                                                                                            • C:\Windows\System32\Wbem\WMIC.exe
                                                                                                                                                                                                                                                                              wmic OS get caption, osarchitecture
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                PID:8320
                                                                                                                                                                                                                                                                              • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                tasklist
                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                PID:8312
                                                                                                                                                                                                                                                                              • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                tasklist
                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                PID:8304
                                                                                                                                                                                                                                                                              • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                tasklist
                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                  PID:8296
                                                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                  PID:8288
                                                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                  PID:8280
                                                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                    PID:8236
                                                                                                                                                                                                                                                                                  • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                    tasklist
                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                      PID:8228
                                                                                                                                                                                                                                                                                    • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                      tasklist
                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                      • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                      PID:8220
                                                                                                                                                                                                                                                                                    • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                      tasklist
                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                      • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                      PID:8212
                                                                                                                                                                                                                                                                                    • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                      tasklist
                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                        PID:8196
                                                                                                                                                                                                                                                                                      • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                        tasklist
                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                          PID:7648
                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                          PID:4812
                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                          PID:3032
                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                          PID:8164
                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                          PID:8156
                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                          PID:8148
                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                          PID:8140
                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                          PID:8132
                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                            PID:8124
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                            PID:8116
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                            PID:8080
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                            PID:8072
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                            PID:8064
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                            PID:8056
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                            PID:8044
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                            PID:7964
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                              PID:7956
                                                                                                                                                                                                                                                                                            • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                              tasklist
                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                PID:7944
                                                                                                                                                                                                                                                                                              • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                tasklist
                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                                PID:7936
                                                                                                                                                                                                                                                                                              • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                tasklist
                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                  PID:7928
                                                                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                                  PID:7896
                                                                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                  • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                                  PID:7864
                                                                                                                                                                                                                                                                                                • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                  tasklist
                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                    PID:7856
                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                    tasklist
                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                    • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                                    PID:7848
                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                    tasklist
                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                      PID:7800
                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                      tasklist
                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                      • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                                      PID:7784
                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                      tasklist
                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                        PID:7776
                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                        tasklist
                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                          PID:7700
                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                          • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                                          PID:7692
                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                          tasklist
                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                            PID:7684
                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                                            PID:7676
                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                                            PID:7420
                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\tasklist.exe
                                                                                                                                                                                                                                                                                                            tasklist
                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                            • Enumerates processes with tasklist
                                                                                                                                                                                                                                                                                                            PID:7356

                                                                                                                                                                                                                                                                                                          Network

                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            81.171.91.138.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            81.171.91.138.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            154.239.44.20.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            154.239.44.20.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            173.178.17.96.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            173.178.17.96.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                            173.178.17.96.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            a96-17-178-173deploystaticakamaitechnologiescom
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            69.31.126.40.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            69.31.126.40.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            95.221.229.192.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            95.221.229.192.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            183.142.211.20.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            183.142.211.20.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            www.google.com
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            www.google.com
                                                                                                                                                                                                                                                                                                            IN A
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                            www.google.com
                                                                                                                                                                                                                                                                                                            IN A
                                                                                                                                                                                                                                                                                                            216.58.204.68
                                                                                                                                                                                                                                                                                                          • flag-gb
                                                                                                                                                                                                                                                                                                            GET
                                                                                                                                                                                                                                                                                                            http://www.google.com/
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            216.58.204.68:80
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                            Accept: application/json, text/plain, */*
                                                                                                                                                                                                                                                                                                            User-Agent: axios/0.27.2
                                                                                                                                                                                                                                                                                                            Host: www.google.com
                                                                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                            HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                            Date: Fri, 26 Jan 2024 03:00:33 GMT
                                                                                                                                                                                                                                                                                                            Expires: -1
                                                                                                                                                                                                                                                                                                            Cache-Control: private, max-age=0
                                                                                                                                                                                                                                                                                                            Content-Type: text/html; charset=ISO-8859-1
                                                                                                                                                                                                                                                                                                            Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-BI2w7MuDenL1Kxli4rWqrQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
                                                                                                                                                                                                                                                                                                            Server: gws
                                                                                                                                                                                                                                                                                                            X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                            X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                            Set-Cookie: AEC=Ae3NU9OAUJi-h8J8TMSJ3NOss_uRYwIJBYCaafpKPoCy7AmzAfBq9xFWyg; expires=Wed, 24-Jul-2024 03:00:33 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
                                                                                                                                                                                                                                                                                                            Accept-Ranges: none
                                                                                                                                                                                                                                                                                                            Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            68.204.58.216.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            68.204.58.216.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                            68.204.58.216.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            lhr48s49-in-f41e100net
                                                                                                                                                                                                                                                                                                            68.204.58.216.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            lhr25s13-in-f68�G
                                                                                                                                                                                                                                                                                                            68.204.58.216.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            lhr25s13-in-f4�G
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            dns.google
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            dns.google
                                                                                                                                                                                                                                                                                                            IN A
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                            dns.google
                                                                                                                                                                                                                                                                                                            IN A
                                                                                                                                                                                                                                                                                                            8.8.8.8
                                                                                                                                                                                                                                                                                                            dns.google
                                                                                                                                                                                                                                                                                                            IN A
                                                                                                                                                                                                                                                                                                            8.8.4.4
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            26.165.165.52.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            26.165.165.52.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            ipinfo.io
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            ipinfo.io
                                                                                                                                                                                                                                                                                                            IN A
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                            ipinfo.io
                                                                                                                                                                                                                                                                                                            IN A
                                                                                                                                                                                                                                                                                                            34.117.186.192
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            192.186.117.34.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            192.186.117.34.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                            192.186.117.34.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            19218611734bcgoogleusercontentcom
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            206.23.85.13.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            206.23.85.13.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                          • flag-us
                                                                                                                                                                                                                                                                                                            DNS
                                                                                                                                                                                                                                                                                                            217.135.221.88.in-addr.arpa
                                                                                                                                                                                                                                                                                                            Remote address:
                                                                                                                                                                                                                                                                                                            8.8.8.8:53
                                                                                                                                                                                                                                                                                                            Request
                                                                                                                                                                                                                                                                                                            217.135.221.88.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                            217.135.221.88.in-addr.arpa
                                                                                                                                                                                                                                                                                                            IN PTR
                                                                                                                                                                                                                                                                                                            a88-221-135-217deploystaticakamaitechnologiescom
                                                                                                                                                                                                                                                                                                          • 216.58.204.68:80
                                                                                                                                                                                                                                                                                                            http://www.google.com/
                                                                                                                                                                                                                                                                                                            http
                                                                                                                                                                                                                                                                                                            634 B
                                                                                                                                                                                                                                                                                                            19.6kB
                                                                                                                                                                                                                                                                                                            11
                                                                                                                                                                                                                                                                                                            17

                                                                                                                                                                                                                                                                                                            HTTP Request

                                                                                                                                                                                                                                                                                                            GET http://www.google.com/

                                                                                                                                                                                                                                                                                                            HTTP Response

                                                                                                                                                                                                                                                                                                            200
                                                                                                                                                                                                                                                                                                          • 8.8.8.8:443
                                                                                                                                                                                                                                                                                                            dns.google
                                                                                                                                                                                                                                                                                                            tls
                                                                                                                                                                                                                                                                                                            1.5kB
                                                                                                                                                                                                                                                                                                            7.0kB
                                                                                                                                                                                                                                                                                                            13
                                                                                                                                                                                                                                                                                                            15
                                                                                                                                                                                                                                                                                                          • 34.117.186.192:443
                                                                                                                                                                                                                                                                                                            ipinfo.io
                                                                                                                                                                                                                                                                                                            tls
                                                                                                                                                                                                                                                                                                            887 B
                                                                                                                                                                                                                                                                                                            6.3kB
                                                                                                                                                                                                                                                                                                            9
                                                                                                                                                                                                                                                                                                            11
                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            81.171.91.138.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            72 B
                                                                                                                                                                                                                                                                                                            146 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            81.171.91.138.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            154.239.44.20.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            72 B
                                                                                                                                                                                                                                                                                                            158 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            154.239.44.20.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            173.178.17.96.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            72 B
                                                                                                                                                                                                                                                                                                            137 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            173.178.17.96.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            69.31.126.40.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            71 B
                                                                                                                                                                                                                                                                                                            157 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            69.31.126.40.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            95.221.229.192.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            73 B
                                                                                                                                                                                                                                                                                                            144 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            95.221.229.192.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            183.142.211.20.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            73 B
                                                                                                                                                                                                                                                                                                            159 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            183.142.211.20.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            www.google.com
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            60 B
                                                                                                                                                                                                                                                                                                            76 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            www.google.com

                                                                                                                                                                                                                                                                                                            DNS Response

                                                                                                                                                                                                                                                                                                            216.58.204.68

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            68.204.58.216.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            72 B
                                                                                                                                                                                                                                                                                                            169 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            68.204.58.216.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            dns.google
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            56 B
                                                                                                                                                                                                                                                                                                            88 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            dns.google

                                                                                                                                                                                                                                                                                                            DNS Response

                                                                                                                                                                                                                                                                                                            8.8.8.8
                                                                                                                                                                                                                                                                                                            8.8.4.4

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            26.165.165.52.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            72 B
                                                                                                                                                                                                                                                                                                            146 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            26.165.165.52.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            ipinfo.io
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            55 B
                                                                                                                                                                                                                                                                                                            71 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            ipinfo.io

                                                                                                                                                                                                                                                                                                            DNS Response

                                                                                                                                                                                                                                                                                                            34.117.186.192

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            192.186.117.34.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            73 B
                                                                                                                                                                                                                                                                                                            126 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            192.186.117.34.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            206.23.85.13.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            71 B
                                                                                                                                                                                                                                                                                                            145 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            206.23.85.13.in-addr.arpa

                                                                                                                                                                                                                                                                                                          • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                            217.135.221.88.in-addr.arpa
                                                                                                                                                                                                                                                                                                            dns
                                                                                                                                                                                                                                                                                                            73 B
                                                                                                                                                                                                                                                                                                            139 B
                                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                                            1

                                                                                                                                                                                                                                                                                                            DNS Request

                                                                                                                                                                                                                                                                                                            217.135.221.88.in-addr.arpa

                                                                                                                                                                                                                                                                                                          MITRE ATT&CK Enterprise v15

                                                                                                                                                                                                                                                                                                          Replay Monitor

                                                                                                                                                                                                                                                                                                          Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                          Downloads

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            2KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            6cf293cb4d80be23433eecf74ddb5503

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            24fe4752df102c2ef492954d6b046cb5512ad408

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            b1f292b6199aa29c7fafbca007e5f9e3f68edcbbca1965bc828cc92dc0f18bb8

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            0f91e2da0da8794b9797c7b50eb5dfd27bde4546ceb6902a776664ce887dd6f12a0dd8773d612ccc76dfd029cd280778a0f0ae17ce679b3d2ffd968dd7e94a00

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            64B

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            d8b9a260789a22d72263ef3bb119108c

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            376a9bd48726f422679f2cd65003442c0b6f6dd5

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            d69d47e428298f194850d14c3ce375e7926128a0bfb62c1e75940ab206f8fddc

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            550314fab1e363851a7543c989996a440d95f7c9db9695cce5abaad64523f377f48790aa091d66368f50f941179440b1fa94448289ee514d5b5a2f4fe6225e9b

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0aaaa846-39d5-419e-8bc8-1b0cf9055132.tmp.node

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            548KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            24eb17bd16968beb43ce12739ef4cacf

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            536b40484378499411772f320b603f6ab86a2901

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            0dc7db1e54b63579f373dbaf5d773c2001a596bbf19d7cbae1b0e7a8fc3e6a3d

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            1485615a84119ae6c9de8b381187670487126338024675328047b84e0327432b4d576a42172c52cfa25a8d765c5574131fb28e917c6671bef548fa967dd87669

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\D3DCompiler_47.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            430KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            6417b2bd89a461e7c9b8d12c47a8f0e6

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            287c97ac8b988a2ec9df9b89b718222875bf5248

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            51dd88d4f07bc7cf58a2ef675dc9d3c353ad840e6becc09e2bd6925a41ec5bc8

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            17da4a03e39003d16d7d8105a0baa7b68f6ee11dcc59202372c8d600a27997a74a7b656286be34730acdb4514fb51ff35da9a8e188f155ea9607483bfe707fc0

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\chrome_100_percent.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            138KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            9c1b859b611600201ccf898f1eff2476

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            87d5d9a5fcc2496b48bb084fdf04331823dd1699

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            53102833760a725241841312de452c45e43edd60a122546105ab4020ccef591b

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            1a8ec288e53b9d7e43d018995abe4e3d9c83d329d0561fbb7d022e8b79ffecf033e995b9bc6af352a71c646a1e8afba4addb54deab7455f24b7a279a3dd7c336

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\d3dcompiler_47.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            422KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            fa12fbf7e780af5ea61d5500dec405e1

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            c2106f364cae327ddf2adad97e3265ca4a12ea54

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            80fce9baa0a95c1018d1f36fc932a0dddb58b33a9f807f0104031303cce55950

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            36c662dead633681a65ef0596675f633e5d6437f810a199d2c2250c17520ad725fbb6dc9ad83726029463d8a6a20d48642abc68397bbcbee2ea109348e816b97

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\ffmpeg.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            618KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            6682af7375141b7c8c603a26fe241685

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            515eccef908f8d3b56f39586203c67145e170c1b

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            b50d1721991efc377523f29efa824a60338ae8ee3492dc19b7854898aaa86900

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            5bf60a52ec1853fcae20da19d532e05952986f3e87125d2a8a3665b69a233358015b1bf6bbb4a00f993013d0940d4f0f873a40bc3cded1c137b4e72a681558e2

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\ffmpeg.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            697KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            ae5e3540cb364e43817a683bbb003c91

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            e99703bbadbbf717dee1b84ff2ecd630312f7ffe

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            ce5d90d794f9b74cc7becdec586c10b9d2632196158c09bc28a8c831fbe8f153

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            548058ed8a5b7ca011025c6f9e112e34b220ad9c7be14a5ed07692057e45e64ce20227881fb2d2eb1e6b8ee7f64dde64e077831ac0e0759ea29df97b3d1c7ddd

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\ffmpeg.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            387KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            91b16bc17276d8b0d535bab2886f6218

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            6ead876f8f9bb3f5d68ef0778cc3f9fe9f1c6e2e

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            f08d21a0d6d038539a962045b37ece1bbe55a85de0a7b4fe41db562c4941864b

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            0706e29ff7a522c14dd8446b287208658cf5cdb392683246a4e2ab99df4a9d0adabd05b7842ebb93a06e3db6be7fbb79b30968a93f09f0dd62edf466252c48f7

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\ffmpeg.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            438KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            ecd448a8a54a2b82f6882b90821dd3a9

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            ba8ee7376303e457ceb92fe347aa5d78f2a35c03

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            571c0c0d9e1ba1777e736f0266359fe5569da425c79503db7d5cd75a5686b0ce

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            705ea40c83ba5c479e5b08b8c84e9f569f39817e53f31ee09849861029c7fa931f781107120a8b6e848b94282138dd1f1e9c9dfa12ce2b69c25f455603a16cbc

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\icudtl.dat

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            494KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            942634b89bbb5e77096199a100574282

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            5264cbcbfbaca963fa69e8f0c912f3318c3fa391

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            c829d78f30c99fb46b65d4f73c4f50313f5d4f42a80c72a1f0bb4ed92a7aad8c

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            ab6d46082b22bc48236b69e52d7d26ba352e323cee28f5bcf56531ccc864524ad264c3f08499d06bf805cd73737b1f4bc01061b639348a061dbb17e9e0bfbea4

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\libEGL.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            252KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            2ec740a8eb9f975e738bcd10fd43deb5

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            8a9a7207f921490d32f4c6291958961e309ff1d2

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            36635c59de63bd31556c8a2d8b8ef8cfe9d974647571410d2709ddb6cb633301

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            df1649461f368fbb31ea3d420106ca72142b71f522bf771e6aeeef36fb88ddde1456a20ba7fdb5802284603d1fa3f440ec30a9d83fd56aac6e5bc66c511ff01f

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\libGLESv2.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            301KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            dca7890b55bd812f9ab82736fa2ae71a

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            9751a1bfde0a732d9cc6975875978240bb052b64

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            9f4fb3e22c265916fd44b0e3a6e3c379cb50dd229cdfcc7a0f5c1a7baa1115b2

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            e4d4acc25dd3daf6671dd500225ea54b01c7717409e62667baa493bf53341446ae5c9837eb6b270e8fa03dad61d0c65385f0691fdeea4b89d47a9c690097f795

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\libglesv2.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            269KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            d7427334c0a3162d3011e2eb4fc68c08

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            3c6594fd34d485835cfd6caf4f98756614caf3e7

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            4c56967611a118b7c781e4178f57af879ba210d1ed58e52b2ab39b954312fd8c

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            5b8337f9cd900263c9eff94d692d89151a705cbbb91cc0ca7f16e23e1e11569fa83338a657abc28004a2dfc2ed6278322c1f966b316d8228403aebeac172c6df

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\locales\en-US.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            100KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            0bb857860d8c9ab6d617cea5a5bd4d00

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            351b744d95846bff2ce5f542fec2e87439aa0f8b

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            5c56df9699fc7e8f09ec81421e50a6264cde055e822f5a8cd9bb1edb3066d816

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            33fb73cffbb6781488cedbca4c92a7e4f66923a799beeb7f5cba58dbc23ba8f5130f63a7dac7114e3c3ef6f1df87884fbeb8858bc7604aec9449fdfd16c25078

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            578KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            3c0084b4cf69772876bb0c8c06c489df

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            2e2f7516e85bae6cb6c6a29d79e44426ce1c5524

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            aae4c977f710cf5a490612512f7d71115e2ea894453c7d1774a2f7645dc9854a

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            3eec3c6ef6f2b9da52a557297720d99afa75eee85e63fe6359a7ea8218d648079341197b9ebe77d477b4bb2a70b12d5bd752d34a91476c8f77356238e90f7906

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            349KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            c7374125af5cd8e0c8c4a2a760c758b3

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            690b8249f14f9bd779bd59b3708ebead18bb7751

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            208243c464df92e00d553b8b141d73a464811350a7446f09c75a27463941c2e3

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            1a9e3d410e077493021e816b4e127927a674142c2beb6b268e35b0d05ad96f5dca8f0803bbc67bdaf2bb28d32b21b0892a7b9f0a9085e1e41775062a475cd0af

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            267KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            019919be96c8ab9798108d1753f3001d

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            d8741ddd61a6954ffeb1fdba6f3721a49c42ad66

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            c36965e6e22532b16ef2cabb98b109abdae32a7d7f2a072ccc63c394f1a30cc8

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            982016e66b36ffc23fe0e00f1a690a7abac400d4ed249fae92f62f96a1dfb60b7f93fa1aaf29bf0eb495def0df171533163b091c95273bad53e7422208a9e58f

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\mitalafixed.exe

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            392KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            10d2526b7af64d9c325b247443192d55

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            f1a0fd2eae76d42519c961e6200fb9ee3ebd9f28

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            99b843f8958a1d0c88f89d1af5ba8e3139bdf4812ae7ff43d77554f1e8bf755e

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            bafcc2b6728521478f4b3bad06a89558b63ca1d854e4c9e09b991001c882476821000bbdbdc662f1e46ce929ba25290c6d6a85c2934097a0bd7e46b453497531

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\resources.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            543KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            70f0c899b79657d3ad50d9f51f652202

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            27f6f49a5e1f2c5f3e6fd2bb7c25fcfdc2daf2df

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            5f3f73fe522a586d2cea2a25956bf7aa298102d292bbde314a38b90e0fc54425

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            9f3005f10096e4d06c6fffffc513e833bdb60ef4a669064393304f8e1b1fb1969b73a075f99672e2c904eecc7d780d26a8ac3a9e14f2ceb6b784f2de048dc9d3

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2bSejjODK7AZ4t4FAFMhYh43Nrx\resources\app.asar

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            203KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            2014baa5728795a4fe67d9e83a943dc0

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            2460685a440f8fe90a31b19d0b0504c9ce1367c9

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            948e0924d182788a1d02c30afa5c896a0267f623eca0509143836559c7d1d11e

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            45398f87a223e2494a226931b355f6fd3d47bc515302c7747af741403bbf227d46ba761ec6d24efb4a57c3fe3239c72d04ca451e9a7e8844a5f35e392942f529

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2d279657-456c-4d27-867a-1141a0c7a540.tmp.node

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            656KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            855a32c5ec4cf7d371efe19e2360da34

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            0db551681bc71c467a833e7b83a555eec683336d

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            21934a7f11b736bb2c61e76150fcfd90debc12954be10b865f8258d58165c052

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            5dd59d3f8c195b29dea3e7aa41a073a18e1b0aa9b5b596b0114832a6c41b5f199867cad12133e301aad85b61bcc75688368e90aa632d211a79bd9896b0815246

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\4bc352a5-7e73-4df0-8af5-8b17dfa82b9c.tmp.node

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            225KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            671b2c895e45f164c7d34fc7dde5a47a

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            67dad59a98e1b5cb3f8a9d7d4d0dd2fe4e30b64d

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            677f9c125491d038f08b2db578c563875c33fef0865fa658807c28bcff0d50eb

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            f8cb869fe7de8faf90ac706660b8d59f6730f3659687944d9820df0f3f5540597077c15bf378d1690ba5ea63b766a65eaf4e46dfdfad3b996802dfbd8f9f825f

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_3cpdsqjr.4qv.ps1

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            60B

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            d17fe0a3f47be24a6453e9ef58c94641

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            6ab83620379fc69f80c0242105ddffd7d98d5d9d

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\LICENSE.electron.txt

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            1KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            4d42118d35941e0f664dddbd83f633c5

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\LICENSES.chromium.html

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            1.6MB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            baac16e55ad9dbb836e4abcffa2f7360

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            92965bdd50a825bc1cc012092f15d98b8f1d8cb0

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            6a8b32ed245cfc3b46f250576d79abbb47b29d528677bba9603a35fd7eae1ad8

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            df6241a3ecb2500732fad6c45ea1bb441158f3d4f083378063360f0b3569fd22d3b8cb651786b41aa3114182cb719daa2e112cc4b7c15cf5ea14edd595d6f3ec

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\chrome_200_percent.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            202KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            b51a78961b1dbb156343e6e024093d41

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            51298bfe945a9645311169fc5bb64a2a1f20bc38

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            4a438f0e209ac62ffa2c14036efdd5474b5ecaa7cbf54110f2e6153abdfb8be9

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            23dedde25ad9cb5829d4b6092a815712788698c2a5a0aefb4299675d39f8b5e2844eabd1ea42332a0408bd234548f5af628e7e365ab26f3385ebfa158cdd921d

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\d3dcompiler_47.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            3.6MB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            881ce2fe683b557c2dd1172af323c37d

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            2282f33e970a55549656051c6ae2166460aaa3d3

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            a2c573b0a532d9ef742221c27fc6c1e7523b7acb45f4a0839d5d80acc9c29dc7

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            b80ed3243ec67ba203062ce0512684c2541af32af2e7d8663768a00bcd91eeb18e03336b60aed9633833812a2ed463d66970472e7b8fed67e0402b218960ae96

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\ffmpeg.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            2.6MB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            5a6e42bfe86a7b655781966be86d178c

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            0aef42b18378bc46e947f2b84b94a4d4b32d6cab

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            b4d8d621bc6ec3d96c8d21c62d44e93b53943a376b23f35c1a7dedb57cb5f521

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            b5396f344a54e849aa793d2ba2e005e936d267e96c99ec70dac1b27f509262b7640cea63710453d1d07faa0070b9ac66c169d1f2f17b3543dca408b7e9c17642

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\icudtl.dat

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            2.2MB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            907b1490ed335e0935d603b1bd9b413d

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            57634c3e27220ce5c2a748cc8c925930c509e904

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            6e648ca76a901a57115362cbfcb0d41d076eeda63663a240f126eb48a97bffd0

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            ad98cbefc43459cda1cdd5c8f74d3698172c6c9a3f8081147acf29d63a828345a7cde3164d00d87d675278ffeec2daa24c675b5c50d893aa840af001dd917f25

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\libEGL.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            437KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            8352fd22f09b873193cabc2932be92f0

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            5bd2b58854b279f1733c5f54ea2669ee8a888d9e

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            14a4aaa010be14762edfee01fd1f6b9943471eb7a2f9011a2b5c230461cd129c

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            7281e980f2e82f1cc8173d9f8387a97f6e23ec5099ed8dca02222c4e17fa4cfef59d6aa300b1cf06d502bdcf77d9a6dbb08ad6658ae0a28ae6f9f995109da0d2

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\libGLESv2.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            2.2MB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            a6f4dcf62c93bbaeb8de7e8d1ff1b26f

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            810dc9c7fe92a59c4c00fb5325d4100d00382587

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            33196cbac0a94f8a111eb52c3b0e5d4aa37214d9946d8415f3c72f5ec6f0b80d

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            22ab3866fcb0e29326b94aed3a250e6bf50681b274da44513e66cc8b6cc2830bc0827a1686c1b7ba4b56039c1a5c899ffeec546a6b66288cdb1b67b6f0cac5d3

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\am.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            128KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            b6c749e77794542385d7f91bbe9695d4

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            87550809d8b709afa090a73927eec322c113a786

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            bbe3c51cfa33b1e47170789b199a59301483c0f7c8f5511235b4307cc3bf50d5

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            3bc44ebf545093d2cc06f4bd08e42681dea52b7425fa2f78b2ebd74a7a6614e71d028af20c2fb4a7799939705a3ba99f35debb812f5a1dba4fc59900d2a2519a

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\ar.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            181KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            6f3e791b4d35ee7d9515614d128752cf

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            181ec3a84fb3e89336d77f24f562a2cbe07619d8

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            e9df0fa338b763a3926c4ee3a87bedf650fa618b6fcf0560c3f5ffe891d48c60

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            3657e610d13a2c938558ec320c298dd490c9e4895ccd304f738aaa2f050373efd7382ca402365f93d23ed488bae82de2d859da788dc8faa8e621346a278f4441

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\bg.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            57KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            3a27e1cb44088a6c0a73e700e81938ac

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            4dd2866f3c9815c944412c666d8644821768951d

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            59cc272cf357d9f8a57bd21c4e675d8864d4b51ca851151d4629ff07ac673ec4

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            4d9e7fe1fec9850ae7e10a412bb2c47e977b8ee1db09d489ee9bc1ddc6302aa2d7d795c4757b3447bf8567227ccc43db41010f06cd2de35f354838acd91c8b7e

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\bn.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            109KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            4c9f1f225ee6229d25e95ba857aaa14f

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            b461f9282f5a351af1279afebcd2c260a0eb20e7

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            711c815ac6b9171464ec6d5bc04716f1ffd33bbae769963401c71aa4ff036345

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            605f6fdd42b9c8ff746e35e092d4543376e541f278c9238dc8a60ed31a0dc155e7b0ea24506673619e49587e8c19e15802c560508d8fef8dc98bb4bf3ef9198f

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\ca.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            89KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            c9879c201643ae3b9010a690cb5b8ed5

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            63788ef9b344386ac5594e063fe57a8c6706ec80

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            5c4f0910111c896a33a3c8a265e70e7d02ce62f9b937f98a2460f42013cced11

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            04116e11ac15360f4428cf1d44b5b079c5927bd17401bbdf94a5633cf07372175de8cfc309fccf1cec273cd3a7998f624fd195386a702e68aaf9729d2a463eeb

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\cs.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            125KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            3cfd9dc564cfcc33cc5524711365c376

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            2e5016d2643017f37658262122974429f18625a2

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            8be34e4f8226c1dd4e725711ddd884ef4476560f7863edcf378573dde9db3cee

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            6ee156d2fa3b6f601df28e38968d0eae2812d70b41333348dbecd833d5ee6ff944183f0eecde96be433cf1e98c8ec22d6a6d5af5153145842175ab43c73533ef

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\da.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            114KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            55a8f5883805a65c854d25edb3959209

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            d4b3b6bd2a26cbd021fa931d1f63c9ea64e2c268

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            e190187adcbb5f829d162660968ba598ed17bd11339062ca4d807deec8a27fdb

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            4e1f9e6da32f553cbc8cf162726d7aba9e23e2216d6d05b995cf19fff3aafa05ed08fce29b2f8538d46583366402b8630672e650dfbd46952a611e9db0d8016d

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\de.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            63KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            586e4fb3047b1ba3f78743772368d051

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            337fecbb366645061f537ea22fbc6756fa98d66e

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            7ddd306970251449f1f5e588746ac70c6718f25ca0d5780bee35d0f087c5f4d1

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            8ec66b5399a668888a54b5cbde790a1edaa2ea01ebd85713817c9c105fd2ec1ea2e270b3fe4907bd7d1b8f93af5d41ffc481b3f5a03071ec4e7e22b2ce45b23d

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\el.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            196KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            17b9d483591218ed877dee3e57de6eb1

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            18ea32b6354b21dfe89211a3529e19291ee55480

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            cc3476aa9a3022bf7d5d61ef1d09d68b6659747eea8143decca92c35daf6515b

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            23810498f3e6490c76f02694bdf95a02172682a10a588d774ad65ca13279a2322ddae4552d908a6496155120f7a2e61b91ea7e53b50d7f6b455bdb2908075584

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\en-GB.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            99KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            52e2826fb5814776d47a7fcaf55cb675

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            51fbbc59dcd61116cbc0a24b0304d4c1c58e8d0b

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            83ff81c73228c7cadba984d9b500e4fce01de583ecde8f132137650c8107c454

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            69257f976d01006c5f3d7e256738c97c59115471f8e7447cfa795f7fa4ff12d6fd19708e95ffb2aa494b50c1763fe35d5885b9414112d2934baf68fe668ed7cc

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\en-US.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            82KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            8530f94f3a6f225f7b70c8385c1d16de

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            09e9173c42e54864bf57a05907419506dab77fa1

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            54ed945f568e5207c3e23216638c44cc3d7a1bfa6ffa94e67397c50d08583d87

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            1f1de216f513d4465171eac22b369f05013b55b9ce8210451947d372274711762203eeec48544e45be2a3c97c6e51a96e34d9e49cad1160d23c088f99a00977b

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\es-419.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            52KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            68bd89ce298783f3fa56a9430fdb56d8

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            d1294feb45b5730f148d29348c64b7ea73177da5

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            b927f12c5c915182bb2233783ec8d31114658be756cce7045128045cf645fd1b

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            d0e7e6e318f8dc9fcde541a2c9873cf5188cb984977ce0d341d3131eaf918b8ff732330851ddb87ebd3bfdf209b5ebfdce3e54dfb3ef17f7c918bcb0e9beb39d

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\es.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            104KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            fcdb087d01b7480d1275a3f77f3b8b24

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            62fe9c09034c166326b44746d7b08a2cef1eba75

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            d107dded6e4e242e018c8b3adfb96bc47ca48458cbd216a25b69f076caa6bcda

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            eeff601315719cb77fd0a3eb50cd3790b0c1bbeb78d322f3fbf330ea697bc62d65f06d7fd0e15e30e3ebb0092485c6353cfd8b64bebd77b6cf3436c2d7838665

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\et.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            86KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            070f36e63b057020ee938480628b405a

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            be359631bee1e922653e5549cdf4650a3f1b17de

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            1e57ae8046128cfb4e53fcec79281c44164e16812e65c476346ab1839b952bae

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            36c316c501f29001dee7f6ec325aa8fb0df8afda6e6231800e57402e7a9342afcb3cffaa7a4702d3d4f9a650104b3dcc45c415d116966eede1329d93f1f223ba

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\fa.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            20KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            481d81b4e309533411416afdac1fa264

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            8bb0eb4c4939aaa7d8e6c9d9ca1d41a202e951f9

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            67d3a4e545903995b29c11b74e597a21af82ea4b8d6152e4adb672e7132179de

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            29827ef88f54acba716e4b7e0d5348e4a59720eb7afe38e32314484fdd7b43562040e4a4e27953472bd28367613d639cca16fc60ca4fac090a903408d3b3c0a7

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\fi.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            65KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            49afa97cc6a596c0238428ffcb6e6656

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            b54a7dd3a0f7e4b2306b6dbada2f98f2a9bb0aba

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            0cf2b4bb050393a94fc36284d74d12130e0951adb1fa8a702fdb7833fec0f797

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            2b8ba8d34090f2b85ad552eaf6e988b190d35bb9d7bca9423dabb5a7a50da26eef41dda579d865a367bd152fc733826b886454fbea18be3d4703ef20229394d8

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\fil.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            70KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            41ae0468e2fbb95a0d6f10eda1bb101e

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            72b642743ef61ebb7a4a97524abd19fd375f50e5

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            496a3c09061118755b56b9eae75e86a2e30b5d10f110ace365bef04f45e3e178

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            bd2175456b16809169bdf906f8315bf5135b97cf715d2f5533bdccd0e3a5dd652150019120e81d7fd268afd862e72f5bf7700ecec3a6c2db6cf56ec3e2a59939

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\fr.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            109KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            9227fcc3f94a0a9fb927c4b0d29b7115

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            055a48d3fa9ed2fa81282a10f350ba39c5b65167

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            5073f92458553afa49f959a0c78b115ee29998c367a685ab53d105087a382575

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            31a5822b1acbf98e3176793d1cf2f074443976dfc7916b464e0c055e5e97da8e5d5aff1f672d45ac513c87726e97504b696bcfe4cfee6563953cb73a6f05fe2f

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\gu.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            59KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            9fe297c3196e72f01b5b6fa9b3caf0e4

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            eb18e57f04c706ee02d7f30bf553fe57a4c49221

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            c7b8d959bd81fc7b996f1086c490956de6b7e143cd30297f8ca369ccc0a4ea43

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            afe61de42a20c448975a2120b27fb49d345232c3d13afa69ea54696f1a25309170229a6d38cba52c1ac31f1d8996a1f6635ee6841540b5da460cfa2afb4a28ca

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\he.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            151KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            6a02a37e1ca3215fa9ee0e1b0fbcf5e7

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            89a8a126c0bbf536ac58e29fc50e045fb1b88220

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            f5cf34ce58b7f0d450936981aa7ffa060821403e6768eee3746ea4ffc9193986

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            6607eb2329b81f1eaf0ed3a564eddcb30e6ab59229f2fbf6fd3d2140ffaa8853a330eda627a4458ef6bb06f32c5183edda869e34cd4ead1f87f88d5c622c1a16

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\hi.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            17KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            bdbc3027d6a29d5cb2a21bc6a332c09a

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            2617292715d070a01cf2c7fdbe89282223f0bb60

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            8b3e00d08551f57407482680584d29651902035a620b553ee894961525d0a9f0

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            ad98c1c1821a3d32968b5e658657c112be8903cb49e44c588c80fdf8fbd31029133acce457bc95a4f67c9b6e91dede34094bb09632276cbac42465fe9e52301f

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\hr.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            81KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            974ee622ada3b29bfe21521d290f47e5

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            282cd196f5f4ec6ca350a732ecef7f4e241661cd

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            c634ad4045f8d1b9422e0cbc8a9c8f71fc18bc7bc6f03654768f1f5026b46a83

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            a800a4d5879ec05d2c5d017e727f7f4aa081924a9fd40fe0411cf79608b9f9adde23bba2d200287d270cd1de440387cf1247f9bcbd97877355ed20ef23d7e1ff

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\hu.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            103KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            fe6140b6b0320298d89a3da15352dffa

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            ab13973658882eaaddf785301f4e6f0aa227847c

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            407593a81aa88d71f4d6f20b91d31bdcc307ee9f724aaf865ce9d5842109f555

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            189c0b84d2c958d52babd0603bedaa7b1109612e25266b10f369207e8d57111c37d35d44443194b7183e08cb68255d2c074c6fd7ae4ce87d63f9406a61ff292e

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\id.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            37KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            2f05f695206e67a7de376273528041f7

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            e232ae0748b89d5f428142824e68be135d608406

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            a2db4c1dcd30ac778990eb44ff0c1850efff9b9f528887c76cc23a19341874e5

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            57f7cf3d23de06b4e1a54df957984b60fa50c692d93c70b3044126c73cc7f9880519ccbfc62546f5d7c882f25e5c68be576329035c89ace9e96418c6d4b926c8

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\it.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            29KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            27b2b7f0ac689cc787a55e719b3ffb89

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            7a53c24dd16567fd6f9c13e95e69e1cf3cca8a1f

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            9102d5a85f513f739c1d5b1ea6d7df06cf69cc14dc939213c29b72b72860f502

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            2bc42026dfba6d8f0fcfe6cf120c79d2b60c9d17308fa248cedfb95ae82df0eea283450cfb62af5edb8ae0d79590d1c85f8a1833f8cde7657ba339db1f82e9d1

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\ja.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            79KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            9db77060981fb5aae1fd68a993ccef02

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            bb83fd566fde9fac3b79ade410da535d75c6b8a6

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            bc4be301f0887ea6e2694457f54db1b2c1853f799e1a99e3dfa0554cb468e5b3

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            36731f579b57f05bdeedfd215fe61927d85695aacdd520a1edb63d5352d0a2df330bde49d9e7a7b8d98b32a0c091597204fdf0885ce82b365d3d2ded5dee31ae

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\kn.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            39KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            32e8cc08c1c00c0ee83cd3ce2bc24396

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            74b57d49ea9cb40a15a4767feadd10852db85c0c

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            03c92a5493179b14ed1a0f22db961b3bc8457dfba4563ca5f9896fd6b68bdbdc

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            50accff2884bf6a9ce1ae5f46798b125e3cc5190cb658c55ba03c74eeb5acfd4414c5d3efb605406e59dee69a4fedb8c454ba95d79ed9eafe46b73c8b219a641

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\ko.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            120KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            d6e2c18c9eabba59b50d147d942125ea

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            0918879203c2050b4f9f449f5616e430897ba0b9

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            f3581cea2e5b022b121010ffc5d67f86f717e3a0c0402abd81e24c87fd135b76

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            f605f7b9893166778af156f9eb76eaa1209e7432450899540cd462ce0ffa69caf6f570b910cdd6d7bef54354379e9892a658e711baa93241da33755c107da859

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\lt.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            131KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            2d4fca437a7548893dc4b51fa5b33c33

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            c1493013d7d981ea9223716e415380992de65c2f

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            776dba792df7b444e1b720326312d8b8312cade74a1372c49456d932b7c65769

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            b6a55ee1deff48d717a3e9399aef3c45eeec810cc5b5709fa3e9f56850115a5b02e02b7959ec77a6797e68516ee9372bacd260e62ac0d55a8e4c1c27af782b42

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\lv.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            130KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            264c6e20b3088ceb4dae5773cef0cb55

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            fb6ff83ff14df008092bc3ee73bda7491e8e090e

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            a676a781c1a587eadf23e5c69bc52f2d352346a70bc53ca908450362535eefda

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            01e949f92e1e8599c581929a601d39640abaf1d907ce10102e591c3d490dd3874c679c75bb51308ead55a3bd0c6dcd1b8d4b2daf98ce1cf1c6bab42946e8b1e8

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\ml.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            78KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            056dc3c2711eba384b73a9a7d0ebdc80

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            d36eb3ab78424e4e7fd8b7e964bb55eb0cfc275c

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            ad41702a99c8fcaea9aff3ae275fc2244373322e1aafc786f7152b8c4c78c9ae

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            4ce825a475c6676553ac5659531511fc2ba484d9ce1b5e290805add6c1988512acd30bed5a01f7815ca93a12eb47e4d2e33b913d17c1ee2cf0a607b49ef92993

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\mr.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            112KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            2750fe9baca1cb326dbf8fea75eabfe2

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            76f23a6243bb63ad218ae485588d8f97722983f6

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            c2712519771c91ef476de532100fe3c6209ca41f957457fac7fc535b8a22959e

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            09f13efa8e67a0edcc6a494fa13fda85e99591b03c81f81aaec8850aa49eb7bd7552a3e48398dcd7480ce8067a9b0243c7bbdb24dbc35e0eecdc884aaab4b8aa

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\ms.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            77KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            3618488ddf024a1a56428f58352d8243

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            84ba39caf06bd7e09eb0a492d542eab9ecbab1a1

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            c22fa179e0e0310aa700ee92b8128d30269166d60b259f3e1461ea19a9eae243

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            ae46393ea4a473e607f8fbc0d85caf461a855b499a70477465306a6f948557b449f804bd654c94af0b01a4061a4a7842371dfe9aa68ccb98d7b5db3c1528c91d

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\nb.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            110KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            b61e42f66d581b6a8929cdf5fb10662e

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            6f06fa9ee092fbcb61bbd668734fb3b92cfb549a

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            1b17dcde8fc7308d926fbe0faa83dfc9ffe2efc5715e9afd557dde839ad98b7e

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            79b82346c3f133a6ba44148a8432ad4e08e2805187b759509cb386bc800fd20215592c07d953812c243f0b1d5e1354245f2cb42b2b3eb6c87280bcb4008dbe97

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\nl.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            114KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            cf6b1cbfd669e9461553974ba37a475e

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            b33867e9bc7fd88ca98a76dc4bd756bcf18887aa

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            9a83ad866ad7fd9d65ecbc1e95c276cfce27e8257c76a16950fd14971e66b864

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            e463029bb37f6bb3ff5cb6281f64291ada1b785fa33137e7aedfc7b5e409e99c75a91e7cf9b6c0933e970f70c14861190de66fc5d68925b687a6f5da02e21077

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\pl.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            107KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            0b6f6acd0d6a2dfc8659e2ac0eaf7e5f

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            4c574587c2d3768d2cbf4e1ad276413c0974ff1a

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            a7d9b68850d70716e6f7295d9f7053c511da0929892fd90374a9aa3c85e7fd32

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            2bf6ab61c99cf0d023b4936cf4a0006ec0111a8cbbc310d008745f49e6fdf1deab5e4edc7fd2ae3952d982c276fba7ec57b12742a908cbe6b264e78375c70b35

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\pt-BR.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            85KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            71a362a8ce80ba6e68b710da6f8a86de

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            57f9c9d5f93ceccee8fc2ac9697c32b426143d87

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            c90a0762474983da284ff25a110371f85e5d96a740cd7ceb3a21aca204245785

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            25931db6fb05cc0daacfc4357a38b91374e0c2aef5d82c11436af610ce1b5ba2412c394bbfd773f8c4780a352de6918d38e65bedcbb78e72101b07d7b4c125be

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\pt-PT.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            123KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            ecd84b296d3bb312ee18e21017311986

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            f5625523f85c10723750834a54ff59a2dd886fb3

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            fcfaa9c44c445876c286388b6a1abc1df949f3dda3d64fb57d6e0d54a05cdb94

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            e95b74238220024cdd0bd1c0f18beadbbe427d76cd8d6b32d5700adcd34ffb068ad0bf75404921485c8077f395f5111cd40d5dfe2b5b8f34c62e6fc80b507456

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\ro.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            122KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            24b01a438a3ab9699d4ca97c081b5e82

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            0d0b082544d23425a74199fb0a6c11192f0bdf7d

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            38290b1c9712296d82ea1681ef95544a1eef4872289134b11e50af735e6deaca

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            43199772312156f4633c4202499cde8f808e5e632c2013ec1129acee01a3f184e86df2616626173178efe04b6f0773ad9a0e8b8cc6a735d23d68dcfe9dfd945b

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\ru.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            143KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            0fcb0f06bc5595083ce1f28ca57b0bce

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            cf10ec6316cbad2903eba376e76f54cb32b526a1

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            2e50ec3b7048ac59ee5eeba55a07b663fd87ac7983fd7ae8e08bca1492cd8db7

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            b0f8548722d43fedbec959d8a03464d23286ccc8e058614a114072d328465b6d1ac912a2442e7aca91d9b2be5dfdd90bdcb497a3ea8d5dadbd3927e9bb376345

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\sk.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            127KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            b35daa0bd9627ca88b413a5af7c6b4a4

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            d5efdcbc7ca17de29f3075f6434f31ab2e895826

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            f47bc1f7f5ab64681d0b152e1a019da60f0ef057ee8bf2ccede019dc4030c177

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            48abb6ca2290820db2898b05820bb25e70fb1292c816eb0c8f17b3c5452de9fff7027d216d2bf413900f408f44ed4ac99151b28142a212c5cff8dfe229e87b9b

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\sl.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            102KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            ce47d49def6fb8fc872dabcbfff7a9e6

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            cd7b33caf0d532d37feec8632fd6313703558d2f

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            85c3562f187533560e0e92e835cc845c8ec85039538699c9d77569ba6b3b45e0

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            140cd4beb045cf334a860f228763a79b84a646f11a412175ffbb1f0cc48f3064cb1533dcd02fad95e63a0687b824b7d0d15baa094a87da22ac9b6712ee34f489

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\sr.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            78KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            eb0b568673a3b1c857fab951905edf33

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            04bb95d34b8e4723545bd109674b38c17e4085fe

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            0654571e3beb6e3f717c243ace7ca40cbf8994e09b319c92bbd15af65199c5ec

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            30a3f2aad36ed41fd00df66d4522b9c3c62cf54b7e780dcc2969bc7282ae5b27757858cf88ecca9e3f78cf84ab5f023d796112c5adfc4588674f7226fe9b368d

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\sv.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            111KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            41e76f7775fc9a2d6e3c02c46e9b32f6

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            088c15c74a68bee69682bf89c31055332b68c84a

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            2533676479e9469ffcdaabcb47d3e39bebfe7ae2b80f70784e918a8827439e13

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            6cde752d748c4772b533c8894f18134e5842113f8c7590b44a7dfa088aed65b232361fd16170df3b0d738066dbc3a769847adf4dd8ba42de63c9c2b33f9beb6b

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\sw.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            114KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            99e385ebc1ef8d3daddb3a171fa79edf

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            3164804dfe9d9b5e891abafe92e5ba67d2b5d4d1

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            8ec45ac391a085d531fb21815086c2da4841aa016653cb4f8484cfc2615d6c01

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            797c105fecef1e15870aa101e3fa1835d5a467a9059c03b3636c54934d1de263ab7f23599e21d9787cb3849c7cb7d29f5bdd8ae9ad10fda8015c1392462e94c0

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\ta.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            63KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            322e54273e1f62a68efd32e8e7789c7d

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            d3f32ef12fdb7e9553cd5dcd1c0ebee7ccb731e9

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            6b40c9969023ff61503bf3604e498a09747f9205872608bbbaceac1f01aaa71c

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            f74e7085ad48c959b1a0b864afbc7d4c46a2720a7d9da2306650a9f9fa9c3ec146e8688a584aa0a1da68bce6799c9b525a6560f13e0b06223cc764bdf4302fd5

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\te.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            149KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            d244577a70266415575a78d7e9ee59ad

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            92462e4ac9e5a4afdb1f583026ab897b48ed39b6

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            340bac82754662a75714487ba8319c5efee3e441838940b2da8e7b6267bb6ddf

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            7423db182a25799af4464d443565d574a36fecf8345fefcdff4bc44cf7c2b8b6107336efd0c77699e32995b3c232060763c2b78b2d9dcc0631555617f55151b1

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\th.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            74KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            ff826014ef695760d472d44e6b9c7b0b

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            2a61daad874b0db87d78dd2b88cd1889a9568327

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            68508d8e34feebae0e6e6d0a71063c5ad5a581e6cc82c73fdcac13d344f463cb

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            c0e64b389578099cc5d39090862801d939c780e5eac2392b3f60ac375fc69d4879a1122b15c7c6e7d74f0da7c22e9c45c66ccf4f8efbae035505cb2c00705a59

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\tr.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            117KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            40491896ad21543f339467186c5efb40

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            695dde7cc35056dcbf0a533aff8299d4c6b61bd8

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            43e99e132acaba88971b81a43531845dc7fc3a1e0794c3373de7d9a50a5655aa

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            18d5ee9914849462e0b1bafd1ca216b29d0795e282ae0bdb354b15caf5c18f37f44fbd6f626b2cbb095e3398a6496de72e5b0d15621433979b5a589e34fac818

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\uk.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            108KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            f310e480c913ccda0ee90d14da9bfc9f

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            7cfb4d022ddd3b71f363f126930129586edbf5a6

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            5ef0642065d23fe0d00e30aca53addb9692af27ee4d3af3996c78b535461d226

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            614c1b457bba95e2810bc01099a92356bfe8f0ecd7bcdce8c4f616d739945c256125282f8e1299a3389424a1339f43cd4434fc109b462a3a61be729f4d9c706e

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\vi.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            128KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            dac6fb2fdfffda363d02e35d91e30521

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            d02a335494162589c0110f20c88f96e2ec2ec974

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            b680e90800850481be7428e5f963f70c68d6d3620f80b7795aec1260ad941b9b

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            58b9132df0bbf68ade83bef5bd7cecc1a244a2bd19ef434368f3b3c7aca0fbd93f25701d8dec68c065ff2bb52559b2cc34217b0484bf99a7eb3619705c0ec74f

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\zh-CN.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            87KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            4fb35f1e60a8d0c550d7a59fec0f192d

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            147b5ea2a145761e41047b0cea9c88498284d9fa

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            c59993b0f1587273afc6e78691841284226462255d7c9f9d1e05820ceb70c55c

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            ab627f321fe111ead28fff82ac06747b48eff88a51f371c412ab127c86cf4f10ad2193282b7a4a50986f35957204b51b28982076b44475b01725cc62a7cde2bc

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\locales\zh-TW.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            101KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            c2c35fcedc3708b5bcadf36587393002

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            31d72402cbd44ceb921cedd806259c2cd14e411f

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            cfe4c2c5eb131fd92e0d11f912714c5a9a048833ef3ffbe32679b3d58da8f8ac

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            9ba3ea2d569d1d3ef09e94d7e66f843c8804368c4d016b6289e7dba002f7d2d50884a76c93eef879d87abcf8b36dd3e682b7bd3a18b2b5a969256cef672abf01

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\mitalafixed.exe

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            1.1MB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            99d79f05f5c7b612adedfb971f772b57

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            6ce53a635426cbe5de285424a6f9c305743a114a

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            a77d47cabe99a75baf9581bace386cf584c9eeb23b38221caa188c3bc8db0bc5

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            3f20b09b375be4a862b64dfdb52230b51e9db251adf8cc883b80c8ec8ee19544035b6d87439a34677c07aac38d0f3f04e5ab7c956333709844a11eaccc06e4ce

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\resources.pak

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            1.4MB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            34cdcdac106eb27230d2b88afa8548bf

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            376c693d6b0cbcef4643eaf239d5fc3d66bf321d

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            ae9275b4332f14aa60930628fcbd62a275e4080f46bda547d34391750e813169

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            e78482dc7c25115ad0f63ecad29b314822560e9c0402b6f904366ab108a97e71e91cb4f39011494d70f2cd8af75bda175ee0b230f47491ae722340c88b15d2db

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\resources\app.asar

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            83KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            ef4eb02711ec59d1a07205ccae3dfe8b

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            ae96f0c29984080a44dad3f0bdbc5f54525a3b3b

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            f5bd08f01154e34cd5e714f0475026c22ed5aac0bdb12258a5f63130857871e2

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            0ad287b79f861883f5a12fa864384e36fcb310094086e9189799530b4a8a6b76fb917ee603556aaeb75e160c0ccce8ba43caf2c1b7c579e4b7f8673561ab564e

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\resources\elevate.exe

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            36KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            13dffaf4259fbae2ca11a9cd04caf250

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            2ee486391de15ca6c09c15899f9e00a52c275299

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            f91b466597a8c3695404484778919b539ebe698e2d03305ed1d02cc051c1d5f9

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            3bc6e1ac2a33a04830945acf91f013f09ee4b16c529bf85b517fd0239f0e24b3806ae3f731d2ccfb1f5364b7be71082a4b247d561ed123d77c3a0c146f3f7abc

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\snapshot_blob.bin

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            342KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            c9ab741bbef53fa0e84952b8891a5f5a

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            e2dcb8d034e07243537c86371de0c52bce62cee1

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            4d82fe1e642fe3ca7ad1a173f806088c0652ecfe9f0f6f6e246066e15a3431d4

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            177b98a3090ecfe4b4598dfcd7e8b3ca49efafba4dbd8d6c6d0def462de47c3fabfde831725622783ddc177de982de6115178d9bd9830d918bb544a5a4c27fc9

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\swiftshader\libEGL.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            111KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            164320965c2d7b50c91d7c7c8ffce049

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            ee42ec2287f305a0885220374f0ecef7969b61ff

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            771b2e97ca567771c33c3a5bf64387ca364f37798fcdeeee94c8bac91e69cd99

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            bec09da9527d188a55c01b6ffcd6e3041dd886b64ebc3940d4852050f023f1ff9f1e71ce2c958918fdb5454239864a42ccaca0992711b8cb803873b655764a9c

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\swiftshader\libGLESv2.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            17KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            ddb335ed68183915758d62f47772489e

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            4232c3ff932990dbf0b1cceb52e414e274184dfa

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            082a4763cebe822518e476332b2163c1435acdc9855be8c5704191974d55adfe

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            1a55acee681b2c7b15b96b823a7d430f9fd2ae0a96529b581dc492dd5ee1a1c55eae444193602f1e0ffab13aa1813c530bf2037a7f1cbd2fd9468f5cc56cffba

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\v8_context_snapshot.bin

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            656KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            47014c0f81bad6d216c617c9c63bf040

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            7bb483fdc5fed3c6ed437d9fe6e5023bc38201bf

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            e1249d05bfc73c645b27d269f47b6923b33a3cf8088a8ca78b3b637c90f58178

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            052d86cf3305a9e493bd2472e6b7ddab5e0291efd6d899984a79bae46e5fa4bd21157e19ab4a2591c9cff9069de568bad18c7baf4f35d117c77134e635466f87

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\vk_swiftshader.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            1.1MB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            6e8e93c102b51a2e74a73184a95b6f57

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            1d960eb0c71a0a5ac95f6802ae34aadb083212ad

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            f7f31b9d3919fb48a92df61b8735d873638419394cdce1fae52ffc01c98d9536

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            aac63904d16561ded4378a19120d341d940a49bae712d638029075c7a767d3fda2afb45b863e3417572b4bd455ce65b9421343723c350a9ed8eb6963a45f3a32

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\vk_swiftshader_icd.json

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            106B

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            8642dd3a87e2de6e991fae08458e302b

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            9c06735c31cec00600fd763a92f8112d085bd12a

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\7z-out\vulkan-1.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            819KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            b91586bd80e057a7f62bdc4422744812

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            a1df644421ece2e740e5bf0ed98b4f269fd85c39

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            8ba72d98e0f78b77bda7816cd7232809d287310d34e0f1d7472b9d5fda2c6d02

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            94f0a8e3e75e4803891c0fcb257052dbe0e7399772fc7a46ab802629f76ee580ed30b3678fa6bc3744c12cf9f3103bbc8276e88f6711278748148e9fbeef2053

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\StdUtils.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            82KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            acb26845780c35fe0e25af72809050be

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            dffc1137a7e946f484b31a6e43121285abf92518

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            2b31670d39c1051ff1cdfcfbd937441df10d30755242880165e5193ae840410b

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            7e09be73363bb05262341aef15d225c68a74a1bf69935ce028d6176afce6aed273d3796ed4115c2eab5067849998ef805af51d97024e8dc5055bcc881dba78e1

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\System.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            12KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            0d7ad4f45dc6f5aa87f606d0331c6901

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            48df0911f0484cbe2a8cdd5362140b63c41ee457

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsy8E95.tmp\nsis7z.dll

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            424KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            80e44ce4895304c6a3a831310fbf8cd0

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            36bd49ae21c460be5753a904b4501f1abca53508

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                                                                                                                                                                                                                                                                                                          • memory/5116-554-0x00007FFCBB480000-0x00007FFCBB481000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            4KB

                                                                                                                                                                                                                                                                                                          • memory/10072-587-0x00000299786E0000-0x00000299786F0000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            64KB

                                                                                                                                                                                                                                                                                                          • memory/10072-584-0x00000299786B0000-0x00000299786D2000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            136KB

                                                                                                                                                                                                                                                                                                          • memory/10072-591-0x00007FFC9B920000-0x00007FFC9C3E1000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            10.8MB

                                                                                                                                                                                                                                                                                                          • memory/10072-585-0x00007FFC9B920000-0x00007FFC9C3E1000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            10.8MB

                                                                                                                                                                                                                                                                                                          • memory/10072-586-0x00000299786E0000-0x00000299786F0000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            64KB

                                                                                                                                                                                                                                                                                                          • memory/11012-594-0x00007FFC9B920000-0x00007FFC9C3E1000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            10.8MB

                                                                                                                                                                                                                                                                                                          • memory/11012-595-0x0000018624410000-0x0000018624420000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            64KB

                                                                                                                                                                                                                                                                                                          • memory/11012-602-0x0000018624410000-0x0000018624420000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            64KB

                                                                                                                                                                                                                                                                                                          • memory/11012-607-0x0000018624410000-0x0000018624420000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            64KB

                                                                                                                                                                                                                                                                                                          • memory/11012-610-0x00007FFC9B920000-0x00007FFC9C3E1000-memory.dmp

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            10.8MB

                                                                                                                                                                                                                                                                                                          We care about your privacy.

                                                                                                                                                                                                                                                                                                          This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.