eb71dad7e3c7fc10f128a9f4c1aebdb527eb4192e3525010322559ca9b63d610

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
02/02/2024, 01:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

EasyMC_Setup_v1.6.14_x64.exe
Size

61.3MB
MD5

3d34ef77549c696aa25ad60924afb265
SHA1

6989a37c8691475c60293251ef6ed743ac54637b
SHA256

eb71dad7e3c7fc10f128a9f4c1aebdb527eb4192e3525010322559ca9b63d610
SHA512

91e115ff7023982e0c00436fbffd2f84a5ccb86244f67bf92758e1577ddc006b7e7d0a1cd33e434f19158f6fc696d40cceb050a9cd2bf39188ad226727ee99a5
SSDEEP

1572864:eV1g0aTp2uRPflkYr+p5N/2QWSuUPTZYfD2:eV1haTp20CYI/HWfUbZSC

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1497073144-2389943819-3385106915-1000\Control Panel\International\Geo\Nation	EasyMC Launcher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1497073144-2389943819-3385106915-1000\Control Panel\International\Geo\Nation	EasyMC Launcher.exe

Executes dropped EXE 6 IoCs

pid	Process
2300	EasyMC Launcher.exe
216	EasyMC Launcher.exe
4200	EasyMC Launcher.exe
3684	EasyMC Launcher.exe
4688	EasyMC Launcher.exe
1072	EasyMC Launcher.exe

Loads dropped DLL 16 IoCs

pid	Process
4928	EasyMC_Setup_v1.6.14_x64.exe
4928	EasyMC_Setup_v1.6.14_x64.exe
4928	EasyMC_Setup_v1.6.14_x64.exe
4928	EasyMC_Setup_v1.6.14_x64.exe
4928	EasyMC_Setup_v1.6.14_x64.exe
4928	EasyMC_Setup_v1.6.14_x64.exe
4928	EasyMC_Setup_v1.6.14_x64.exe
2300	EasyMC Launcher.exe
216	EasyMC Launcher.exe
3684	EasyMC Launcher.exe
4688	EasyMC Launcher.exe
4200	EasyMC Launcher.exe
4200	EasyMC Launcher.exe
4200	EasyMC Launcher.exe
4200	EasyMC Launcher.exe
1072	EasyMC Launcher.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
936	tasklist.exe

Modifies system certificate store 2 TTPs 6 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	EasyMC Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	EasyMC Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13	EasyMC Launcher.exe

Suspicious behavior: EnumeratesProcesses 22 IoCs

pid	Process
4928	EasyMC_Setup_v1.6.14_x64.exe
4928	EasyMC_Setup_v1.6.14_x64.exe
936	tasklist.exe
936	tasklist.exe
2300	EasyMC Launcher.exe
2300	EasyMC Launcher.exe
2300	EasyMC Launcher.exe
2300	EasyMC Launcher.exe
2300	EasyMC Launcher.exe
2300	EasyMC Launcher.exe
2300	EasyMC Launcher.exe
2300	EasyMC Launcher.exe
2300	EasyMC Launcher.exe
2300	EasyMC Launcher.exe
3684	EasyMC Launcher.exe
3684	EasyMC Launcher.exe
4688	EasyMC Launcher.exe
4688	EasyMC Launcher.exe
1072	EasyMC Launcher.exe
1072	EasyMC Launcher.exe
1072	EasyMC Launcher.exe
1072	EasyMC Launcher.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	936	tasklist.exe
Token: SeSecurityPrivilege	4928	EasyMC_Setup_v1.6.14_x64.exe

Suspicious use of WriteProcessMemory 61 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 3560	4928	EasyMC_Setup_v1.6.14_x64.exe	85
PID 4928 wrote to memory of 3560	4928	EasyMC_Setup_v1.6.14_x64.exe	85
PID 4928 wrote to memory of 3560	4928	EasyMC_Setup_v1.6.14_x64.exe	85
PID 3560 wrote to memory of 936	3560	cmd.exe	87
PID 3560 wrote to memory of 936	3560	cmd.exe	87
PID 3560 wrote to memory of 936	3560	cmd.exe	87
PID 3560 wrote to memory of 4464	3560	cmd.exe	88
PID 3560 wrote to memory of 4464	3560	cmd.exe	88
PID 3560 wrote to memory of 4464	3560	cmd.exe	88
PID 2300 wrote to memory of 4752	2300	EasyMC Launcher.exe	98
PID 2300 wrote to memory of 4752	2300	EasyMC Launcher.exe	98
PID 4752 wrote to memory of 4464	4752	cmd.exe	97
PID 4752 wrote to memory of 4464	4752	cmd.exe	97
PID 2300 wrote to memory of 216	2300	EasyMC Launcher.exe	94
PID 2300 wrote to memory of 216	2300	EasyMC Launcher.exe	94
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 4200	2300	EasyMC Launcher.exe	96
PID 2300 wrote to memory of 3684	2300	EasyMC Launcher.exe	95
PID 2300 wrote to memory of 3684	2300	EasyMC Launcher.exe	95
PID 2300 wrote to memory of 4688	2300	EasyMC Launcher.exe	100
PID 2300 wrote to memory of 4688	2300	EasyMC Launcher.exe	100
PID 2300 wrote to memory of 1072	2300	EasyMC Launcher.exe	108
PID 2300 wrote to memory of 1072	2300	EasyMC Launcher.exe	108

C:\Users\Admin\AppData\Local\Temp\EasyMC_Setup_v1.6.14_x64.exe
"C:\Users\Admin\AppData\Local\Temp\EasyMC_Setup_v1.6.14_x64.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4928
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq EasyMC Launcher.exe" | %SYSTEMROOT%\System32\find.exe "EasyMC Launcher.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3560
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq EasyMC Launcher.exe"
    3⤵
    - Enumerates processes with tasklist
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:936
- - C:\Windows\SysWOW64\find.exe
    C:\Windows\System32\find.exe "EasyMC Launcher.exe"
    3⤵
    PID:4464

C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
"C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\easymc-launcher /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\easymc-launcher\Crashpad --url=https://f.a.k/e --annotation=_productName=easymc-launcher --annotation=_version=1.6.14 --annotation=prod=Electron --annotation=ver=16.2.8 --initial-client-data=0x460,0x474,0x488,0x468,0x434,0x7ff68e0329d8,0x7ff68e0329e8,0x7ff68e0329f8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:216
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1468,13868983358997270878,15728587615248518646,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\easymc-launcher" --standard-schemes --secure-schemes --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=1824 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:3684
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=gpu-process --field-trial-handle=1468,13868983358997270878,15728587615248518646,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\easymc-launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAABAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1660 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4200
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4752
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\easymc-launcher" --standard-schemes --secure-schemes --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\AppData\Local\Programs\easymc-launcher\resources\app.asar" --no-sandbox --no-zygote --field-trial-handle=1468,13868983358997270878,15728587615248518646,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2208 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:4688
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=gpu-process --field-trial-handle=1468,13868983358997270878,15728587615248518646,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\easymc-launcher" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAIAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAABAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3344 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:1072

C:\Windows\System32\reg.exe
C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
1⤵
PID:4464

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2296

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Programs\easymc-launcher\D3DCompiler_47.dll

Filesize
20KB

MD5
57743892e7ac68805af9126cf6ac0e44

SHA1
49dbc6a8ced49259b2591de4911ae2295d39ad94

SHA256
b8cdb0a82cd51ea74620942d545f5df1071c5697f89bc4f50c110c8ed95f3a7c

SHA512
0caa740b236daeb581683d87022dfccac2198366c360da10277c4cf0ae53156d7f1361f82c57ba7782ffc286ae6b95ec1e7e0375692a50c16d7d13badfd3a33a

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
2.6MB

MD5
7bc6401ea74676211718606e5cd630a4

SHA1
269823dfee05d5357eff99b94af2a652577e051f

SHA256
dbebb1f668718ff8dba51d221eebd93a1c442e8064ac9887f0b3e0654b1a83b6

SHA512
dcd5f36b69ff362442e77913003bee83f8d9864b5206a269a2e4ad5f549db930ab1bd785d79bb5aa8059fee41a4698dc42ddbc174bbfc861b9339b172cc7a884

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
85KB

MD5
173c7481c37480f092a9e5be93e87b53

SHA1
3389135e0d8f6bfc60eb3c5837a5a93448beaca0

SHA256
336680f0d19cd6eb05e367a2a0ffa7cb9f95cadf88cbc627d6e3a5741db25b39

SHA512
1fa66c64e6f7d65ca25df59c4962a8d230e42a793dbc7532f6d8e1ac406ac581448da80fa7ad010beba113b1ebc7c4d4a48ba40e753bb5962ff3718d249b0bb5

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
142KB

MD5
87cf097f94ef80d8eb80223fb832f52d

SHA1
1075d1eced127e350a8c91831a1fb4cc2a7d902f

SHA256
398039ef2741ff06397e46f85b60ffc95a4d588b5c397285631ddabfc49bd884

SHA512
ae3842db73f7856de0141abac326c0cd4f46611eda07cbf48abf7ca2739eeb60b5ec802da969ffb1f316d01fa4ced217a3918f1af7a443d730a923171860bc65

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
32KB

MD5
5f3424ddf0a17d135d7a355d038bd1cf

SHA1
4ddd388a59fb9925b50f9a35ec1e13dd0a56a30f

SHA256
55b3e35b5b3d19570acfe27e6f3df9cd28b2621ef0f55e808c1f9e1b751be1e8

SHA512
6e0a7126df39506734380e215a7ba075f885daadbf7938317ef25deb10bb15195542907188f6d5d74cb4188d3e40eccd0541b59de639f9ab26d373532e22ba35

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
131KB

MD5
c9510564212c56d51f46792201ff65aa

SHA1
9a378053b86f0a86fe6446919496367e76f90086

SHA256
9f5990c93c18406e6a54d01138e6e17b8b900e8853c0e14f54f97917b759b82c

SHA512
34ddf5b9fb3a1a8c4cdff8ff21f890644a3304ff7f54470a4e13fad12cff42d6e3e3fe899035b4ebf6d7abee3b10be49ffdb3046b34a8e308bdf2aaabf966c72

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
168KB

MD5
62662ea715b431728d64cff419fba641

SHA1
54e33bb56cd8c2b5274a6c0ef1b19e83f182e651

SHA256
fb12d49e9695787c5155964b23d952c71ef651b86ba39dbdf8cfa2d1002ccb63

SHA512
53d0f7d16eb1a6aaea7c848ccfc41efe99382407a21efa41c5a2bde53cb9fc16c3e0ec2fd255beec0cfe179cd5817d97d3f685c30022e270cec39607873559cd

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
39KB

MD5
562cdec6a57b4eeca012211419e112cf

SHA1
02315cca31e2802ca1fd61a669ca3cf2e9b8dc9a

SHA256
9434955aabaeae2d515f6e988b16f6b900f09fdbc6681b565333881cbbdbd9ab

SHA512
de545e1fb2c3d8f7483c6b20bab2153db324c24203947e67ed4751dd9339e60fa06591bd14eb0bd8c3bb4cdf76429ddb07291ebae36e62ff58eac813fa29a288

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\chrome_100_percent.pak

Filesize
56KB

MD5
680a917cfd6af4b8c89a5aa84914850b

SHA1
dffaa171d9ce3915b77f47704c23fb810e3a6d33

SHA256
ff693cd61ab4e9a3452283fbd4ec9c6702d95fb9f420dc4c5ff90404b5e29578

SHA512
de47558604025e46fd748b36b82d73320597bdbc652748c8c5d33ccde7aa6cef2c479df73252976bdc280f93038b9b292ad623d26991eb78c87a9194e5e18761

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\chrome_200_percent.pak

Filesize
27KB

MD5
8ccf7862fd0870cf99012a46479975ac

SHA1
e3a15f9119a349252df02e21b9735c705b58ecdf

SHA256
ca640e688416a248170e037154fa4316902061bebedb3c56b5f89c7dc834ff72

SHA512
e33c0d9f9d29eeede5a0719073cd814f48d1b63757e99b953bbca4f282754a4e9f3b47a6b12c2fdbd4b738f4057b7325d3e1ff301e8050094e305c4266d17089

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\d3dcompiler_47.dll

Filesize
57KB

MD5
c3b5f6724122c68258d71e778ced84f7

SHA1
83f7777168598b3da871409409e299ac873e5d79

SHA256
1824fad270ec0439c9f12caf3155f069e27b832645d837d307a310b4184dfba4

SHA512
0fab59f47610f8e396febb2c77802ad31474081a051f777fddad8668f87817d46940c45e2363cd4d50fb471f14485d44be48ce8658c2077cf23aa2c9665634e0

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
1.8MB

MD5
62848a9b38f35513f68d9ffae8d0c1ed

SHA1
e781061bb2283a97471d05b5e41b72fd57998335

SHA256
84e7db8454e3262309f981ae9e500c2ecbc88684de06c97190d64f6bc8a81bdf

SHA512
3edb7cee0932865f784116236a69e8a17294d9280e1e67c16a240b01d8ea150cc537623961973dac933edb991f9fd239228bd622e25557a4810a58eedf29a8c6

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
1KB

MD5
77870191fbf3d92084d34363d3706b36

SHA1
8a4f1ea76364d1188f5f0a146141d6e488c470e2

SHA256
4b94fb5ce2c520b61c65279ac69fd767b118d98235f648c0733181b3c9891cd4

SHA512
9903e971254388a1a869565487da8ff573bb777e8575d57d9c098e63b87cfd36f79360ae2b12e944b523eaacfc42a72d12816c36c7b1fb29f254af5139c45bab

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
63KB

MD5
b4a7e8acf8000573ea17117dc62c1483

SHA1
83906ec173de249bd652c834ceb1b830d9610c05

SHA256
d87bb7556b6ee1f8f05bf66dd190cdea5dee26f1893344b54d40cc38a8734e25

SHA512
edd2799327becc93ba87459f41c0984f04b0e0731f836a6f216b22a8925606feb183634478c2094442f1aab8b20ed70df39b52a7806d463564f3a88d11c4b006

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
33KB

MD5
f79b7ba1e2d4e9e1d7448ea2d5f2b138

SHA1
acd5b946ef0ff2fc0a589c1de1a00e89e1feed3c

SHA256
a0c946c314055603503c5f3db6b98633ad6bd02360469106358496dc512d77d4

SHA512
3967f3075ce1ad54388eb9121562f753a74f56689ca5d02b04b3886cf777aaf70158388dc778cf130324cd79a6067a4559e6578058842f44c75f199b542b51af

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
5KB

MD5
0e8288e540172550b5d75c30a262c67e

SHA1
204ba969d209fbfa6cb6ccfc4544b58263c04aa1

SHA256
b76a510223357e1c294a88c47497e405c0a6997eb0073db141f8e1f9ff5a75fd

SHA512
54322aee917238a52a7ef44cd3a5c984762c8b08f5cd7e848f8cdd543c3569616456a95107eb644746abf89c6d86d37343a943db3233d1bd90711a09bae632dc

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
54KB

MD5
26bcdf25150173399bc489e263f7efa5

SHA1
8e85fbb38ffd675c354cbbf5cdf3615c9a11aa17

SHA256
4eaeaff18323b62a50a63ac8c0d72b0ece24c171bfb81d1ef29a36c6590b54fd

SHA512
801f96bc79148fc93af1e5136f4c2157d897c24bc3f916145f0b87979b6617e624f680a0fdd3670d799d3e9d412386fc498e17b12df94042e374aa55eec21f46

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\icudtl.dat

Filesize
95KB

MD5
f570eef4c2aed3283de26dc4e765defd

SHA1
4098a4e6143a943cf88fab08dc68217d7a90f8cb

SHA256
dfdde6c2dd091ddb125189e21266daf585bee4279f892d36c310119d94b022ee

SHA512
f5803a60e59a56a80e4395f0731ab459d114523d58459e41c2abff10891b3626c349f7f1a83628dd2eac002857b05f8cb8d2311e34c194540dc038636c7a5c0a

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\libEGL.dll

Filesize
20KB

MD5
bb89438e2152cd585e14a8d6b6dbe375

SHA1
c8a7f7ebc0f7b475f9a1c0deade3cfc077c180d2

SHA256
1c704b632fb26c5b9626ba114602c2473207ea1dd37eb83e04387827d8443ee8

SHA512
04ef02d1720eff6a52866a74b8d372ccb6574a4e0d9fa1343087aff1e77010ee99211c807d019ce9521b04e4a95b233be81a388534b254b95da22245808f808f

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\libGLESv2.dll

Filesize
150KB

MD5
02f250248ab93f9c9c3268044a42f818

SHA1
6e9d3a74209dc9751525ad4abc9dd30e526ae4a9

SHA256
c6fdbb41e802733ea11d9b0ac3313a440c5cbdf31bf4d6192263c21d0e59cc0e

SHA512
53d891f77919dc94ec3e2e80f31c12901837fa6a99483216197ba5e8260d2456b94424e726b371d0ff32b19f5f911be6f8d48a7203dc1d8ad8ed8b5c4ecb2c76

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\libegl.dll

Filesize
11KB

MD5
b3d5895708c8643122ba11f4afee39cc

SHA1
efa5bf429f49d25445513072d743e2e642cc8e1c

SHA256
14db6e45f7c9d0eb029f5f99e0264d069f8720a3ff84c2826eb87a1ba4106e4a

SHA512
bff8a8e33ec127d50a1a33b6bdf8df5130bd7142ae77712e996c9108c4fc43de1152442eaf32a8b7555699bb19597eef0ade4e54272a2e434f056de262c1ae73

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\libglesv2.dll

Filesize
1KB

MD5
d5d702bf837ff83b60b8d5ba502fe530

SHA1
ecc0e3dd4e9798da4dc70ae5afd35e5e4d9ac41b

SHA256
e0e0daa49086f290f26b764c09d1a69cf0558ec23e4bbe9a2285ff0a7b774d46

SHA512
3a854c42368dabf22f527ad260d692507fdedc635b8a952efd3b202238f17a9777885b3d8e3a0c9794e085f26f569e20ccdb5da2bdcea2a18304528829ba6ff1

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\locales\en-US.pak

Filesize
61KB

MD5
224baba80fd429300e8fb8c8ae88ab31

SHA1
28a5d5be09d6a3e7f4e7f766d7640ba51ea5aeac

SHA256
8b6595cd02c47d2d4f704201ebd8c0cc58d4a4ad54b47ef5c587dab1c87bbde1

SHA512
5db3b31b5465211dd0241fed06378fa38d0f67de0ef2e1468a2298c8657a24aee7b4c36e6e551b0a9d02506c7cffa430a24842a452b61e72a1cca6ba1d379137

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\resources.pak

Filesize
92KB

MD5
185924e9aa897681b98e116afdf6e7b5

SHA1
e2d7ab0dcfec7a4ef55fec0664a4437c48e0f5a7

SHA256
8d7a4bdcda2f4319db6a2c7a8a94368f89c775fcd33a30c2dd90b3a86a9878a1

SHA512
07fc1da369d4c4c601932ed254d0a94be5d357cacd363cc4a82688bfee2fa4c62fdcd30409cedc59a292add37093a9f0a8f1aefdb9049813f565d6d45afe1c5d

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\resources\app.asar

Filesize
129KB

MD5
2c2abc5b500d22f45cebd4f5ba214c71

SHA1
0a419ebdeff54d33997bbf7187f4370127d0396e

SHA256
178c073ae6e3cf5a0c8666190e6e0742bfb87ee93b6e0be113913cde5176f2c3

SHA512
83386334f8a87a9741f40af79d5d121a286b02b920dfbf03aa3761ee90ee5871194415f7f21d52c59c74bd771efc072407740ae7f72edbc1c82736af556ec234

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\v8_context_snapshot.bin

Filesize
69KB

MD5
c9825b943083f58ef73e0ea59e5a0bdd

SHA1
e6cee6e4f3c92ad8f348fe72920270ac196c8498

SHA256
2ff645d06bb56c70bbb61779dc320db2b7a1b194a7ab6de1119850e7f4fdd0ba

SHA512
0661031f4ac7f9cb22058e173d18774d81884f25caff614eb1ac84bd9f3b73d85343d23af9d3b8a0e5d14d7db48379be63e8896b97af22704837a22c8cfc2c46

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\7zip\linux\x64\7za

Filesize
57KB

MD5
462ac9e5177b9269eea07edf656f4359

SHA1
ad6144c1709f145806c095f78c329e9665ad8c14

SHA256
e5eafbf0f93c324c30524e4f1e57f2a3f30a846b379b5a940224062826af7e94

SHA512
f146646dfa7b18571ccf32385f969ab110429438ef3d2d76a99fb60b7f71ebbe164e7f150dfd0694c9a2aa16e6fae3fec211e82e44cd0fd87a95f6af85e71a87

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\7zip\mac\x64\7za

Filesize
37KB

MD5
7c99d2b4d063d75db49aa6ff26953641

SHA1
6fd03d5ef2201ace58d39923eb6b842a82e09381

SHA256
9bfeef95407ce8705211c2c9a95ee50ad1399be8022a35ab4a0bd5d816729dd1

SHA512
cc2e36f2701a857da85b2e269a45f45811f86c33d89db3523c00a0b2417b62e7f117479f6f108dc07ecee76faac07b95f15fe9b447dd4ba4a440df3e171cce1e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\7zip\win\ia32\7za.exe

Filesize
36KB

MD5
6d930432a07d8ac02e560b26675c7685

SHA1
e64ef1a033c9442f0f12d003de247c4dfa86528f

SHA256
135a3129a887d8cd1969d17df7e2cd12651c3ff3d8dfdd79539570f8e184e53b

SHA512
e63f8291dd19d79f1e7666a69655bbf32e23841dc6eb8bfaf3748186dc1694cd1f6f999f52b7e6d6842f21653925a042b43a3bb90a22348e9c40d98232b59951

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\7zip\win\x64\7za.exe

Filesize
124KB

MD5
2efbac9088e5d92f77a7ef774eb62249

SHA1
434225f424bff507816c562843e4753c2f9b23d8

SHA256
cf46eaee6b48668df09b04a9c62fddc87559235802fdc0c138b57bb2668aaae4

SHA512
84d53696a2249cea2d7dc16318f162f03a276471f081665a3ce9aaaf90a3d0d03073b6077a42f72ec107e5217db87df0c1a17f3d056a239449868e0e19a95a63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\EasyMC Launcher.exe

Filesize
57KB

MD5
1be5c5835bd58b7a6c35542707ddb243

SHA1
a55520f051b759c9e8ed67ebd2d766646a68b3f4

SHA256
d576e7b3e1aa9dfe35b34ffb3cfa7a3e8f21c31e6d08b4ffdbce3c1736daf6f4

SHA512
8ef36d979ebcf5bf92e29c60037e7de5bbeb196a5981316849063db55cdc67afe3c6354d6ac2b9dcd057d2807140dcbb434ecfb62f9cbef27f8e0e3328bc610b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\LICENSES.chromium.html

Filesize
45KB

MD5
718c2efb52239893be063abf6c22c007

SHA1
c19358b6e8d42114750999a44000b062395b820d

SHA256
60134bc0cc83e86903ee349d2532c481636e7859bcb1b757345fed7da20e4757

SHA512
a54f1aef1562d8be59d46ba06f726ba99a33601eaab566f716f0121be3a0271956bce262c7b216a1876b598a6e4f64779f710ea46dae7748ffafd8afff47f242

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\chrome_100_percent.pak

Filesize
138KB

MD5
4f7cf265db503b21845d2df4dc903022

SHA1
970b35882db6670c81bd745bdeed11f011c609da

SHA256
c48e6d360aee16159d4be43f9144f77d3275a87b3f77eae548e357601c55fc16

SHA512
5645d2c226697c7ac69ce73e9124630696516fc18286a5579823588f93a936da71084a3850f1f9a7b34c624f4c502957107f5957ffba5e6c1e4da6d8da7d3348

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\chrome_200_percent.pak

Filesize
202KB

MD5
6a7a9dee6b4d47317b4478dba3b2076c

SHA1
e9167673a3d25ad37e2d83e04af92bfda48f0c86

SHA256
b820d19a7a8ce9d12a26837f967f983e45b07550b49e7b9a25e57b417c5f6fd9

SHA512
67466e21a13ca449b014b511fb49bfc51df841eb5776f93b4bda2e0023da96d368ac5c65de051ed9de1899275b9f33839af2c387be903688cdb48bf08993791e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\d3dcompiler_47.dll

Filesize
1.2MB

MD5
e20a3a4dd4262a2c9f12398c8a638983

SHA1
5b829a379ced406110bd57825d8e51013c7ea8f2

SHA256
dcc396eaf02ba1d79a97caed03431e6d3fbb58ba4b3da0c2a5a7174cb48cef30

SHA512
85e07393ac6e8ca0a3f28fc0750633e4b6f0b0376e38a1df08504f40c159fb40567e95030032db88591b4d6ce86c2f00d14c83bdcc09fe563ce6711716521916

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\ffmpeg.dll

Filesize
65KB

MD5
d95a298fbf3eb8ab563060bb1bd8f315

SHA1
2b9ec64fbad570dea184c1e1e4de1e6882e91a07

SHA256
76a2ff98f41c837e7059777bfb1edabb54f93eff31cf59153936f22cd4266109

SHA512
394ebcf5db905b4fd49c3718a31ad03c6682de32bd86ea541b0664f29c27ecb3d40869468f556ceb1fda81c18ea407c98c00599fec5c6ee22a65d0f818c52344

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\hostsremover\EasyMCHostsRemover.exe

Filesize
13KB

MD5
dff1888306d5036e9e831d62d16412ab

SHA1
2597f86a16af51f61f7b4754fe290a9969e85abe

SHA256
136b6ddebbd837f775a10425fc0a6eaf4a46d32473f372208873cfeb2f64a28a

SHA512
c2f984340c6d01531151b6ff58d2e5b47740b3faf309bc28c6349c4dd2b1e8715e24a69ee238380bd3ffc52e7922cf6c9a0c1ab685f449dc7e13054383b1de62

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\icudtl.dat

Filesize
85KB

MD5
7ad9ec34d0fc79c3f49f788c29c36303

SHA1
010ab4d7e199d2a9dccd71070a40b6a00cafe408

SHA256
fbb208962b63177dc8ed0acbc1f947f5a9c911e7a2f407fb45703edaede8af60

SHA512
5a947c7bec2da339fa77532d69179c820f8c87ea43425b2930836475022b2f7a7bdc57b7055b0b16e7eb5f21e3a243528c05db5de83570552aff36a7b327624b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\libEGL.dll

Filesize
57KB

MD5
3b381a9b5cbc3a1477f329e8442c7c91

SHA1
aaf5c8d9b91683061c71e283bc5c174f76b8d903

SHA256
3ef7d8a8da654d7092b3cfc4bec731f7d2f2fbbb6101ac5779af9753d240981e

SHA512
b57f2149ef746ec1c798723ba631f2de935cee8a59dfc0dcd9e5593dac119e624660df83f95161f7104857f9f2f1900ee1592a8e3d8e158a7188b73e31ac69d4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\libGLESv2.dll

Filesize
134KB

MD5
79e1d55a5770f3fd413151a7a46faf7f

SHA1
5608b79066750349a75066e49142dd2e4587fa8e

SHA256
48813889526fb2a15ccad3be7f0838efb4a2c161274d82be7f49e6a80c916eda

SHA512
d1667de9d5931f22edc6ed15ac9b9eeeae2951c01428445724d0d93a1c28047a710f37d209d0d2ded96a38131fa925168552c8485a275c1e30823c15cd0bd417

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\am.pak

Filesize
64KB

MD5
3fbe11ffa4b643b6ea310f03930d2588

SHA1
9a9e4bb21405f7595299b93ee2911ff2a17af9ea

SHA256
3dc90f284f488a32e67924535f490a29e036d93ee5eb2e1d23e53a6597a8855f

SHA512
6b3e194412bbe7de0d4ad6002e07942f22bf695a21ef4379d1dba7391b3d9f86edb96bebcb651b8fd8055e059bc409f77623ea25a45ce039fab9034f88613ff4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\ar.pak

Filesize
164KB

MD5
0f1aa25f57294f1f0061b319c89aa907

SHA1
2a615408e2203cba3601663460051635e5612c41

SHA256
3eef4e2654debe2b1d4e9b77e522bfa742323faeba49a5754f3c1fcc7777255b

SHA512
0d9771b7f775764654dec3d7530295a480bd71f53f5a2090b23ec2a9011e6c39f89e38fe3da8030485ebe21d56159b4e3fba9db4babe7f7a0d910718a79ef2e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\bg.pak

Filesize
89KB

MD5
1c0bc9cca9440515e4c188f3b235bdf3

SHA1
3a237098c356a4549aa4cf5d11c463b7115c1a77

SHA256
fb9eacd3ed723b556fc8eb09e68069b680fa2bf1552c1372ac2389ccf891d5cb

SHA512
b8975e671a3837a152863cc7578c07af251e2829de45b0b000d80d851dc3782fdd87147c3f009816124b597ee6b077af48683bf839a07134962c2083bea488ca

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\bn.pak

Filesize
69KB

MD5
6cbb57b1d7dfe68d15b0bf8546d567e7

SHA1
3588301087191854f5e91b7fa136ca14fca05ce0

SHA256
29700ae4dee470c56218cee8cc9d06e570024e3249787637dcfb66c258e69eca

SHA512
89dbd41ab4fbc75b91b0f59933dc6f641fd3ada75d145ccad3352ac15a766a1b4fd4d226edbc49e55858af13e7218592339f4e7f7b3a7e644fbc4a64ee83b975

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\ca.pak

Filesize
66KB

MD5
076aad4afecc7c5c378b024fda11e41a

SHA1
a628a08d5c316405e021f8eb212b993753a15918

SHA256
6c0082109f527ef9577c2d03d0c514dc5be64594eef9bd594e02a71c5c38f1a5

SHA512
b0f631e4cfee8cec10eb8774a012847a52d3f7c84b183e978181dc1a0cf056601f35f5b6d7c7b68f0d42ffd801be23a15c9515db4ab233e119adde7c44cd9f5a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\cs.pak

Filesize
7KB

MD5
559cf0fc64d237dbf24b57caa28578ea

SHA1
c9332c1109e0a1c5fdeedb0f2573e3473d765973

SHA256
745e52f121120fdd83b8de4f5e5c4de3c0105cc969cc3e149ec7b542eb7f1783

SHA512
115e15a36c5bd4811e71f73dc22119476eeaee767f7aa1d0da48574aeed1daf463540668740f898640641a9e66040de6662f1f307434ff793fb6f498e0636a56

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\da.pak

Filesize
92KB

MD5
ac2ffe5ccebcd76945b414d665921c48

SHA1
acb4eb9c1be33606cb5df1ffda25258b45d1e9e9

SHA256
49d797581ccf2656ac66d57255da7ca8ab5b697cf61fca3c9c3396d1409298ad

SHA512
2f67f6b8f3598a2513ab8ad271f7bfef9f0133de25d7d422ef015742c7b769add37481b0b3c2e898d06e423e1f4464f71a370955cd5d1a634a1259aa3805f7dc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\de.pak

Filesize
72KB

MD5
07157309cb7f6033ca7dcf19c0626321

SHA1
443e96bfa6c3d6d1627de103900d46cf29c0b7f1

SHA256
82c7c76650c9cb08c615837d577c0340bc508441e461c03bdd53b2143cd911bb

SHA512
eca5cd657b8c951d757a45f879cfe180b67936b4ff781e1bc55d84bde3a4a5051f314507c53178f73d06e381be4c3cf3b6edb63ed15f503a4153e0f8a65b0583

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\el.pak

Filesize
70KB

MD5
5d75ddd0dabd38798401c040f03f5532

SHA1
f7af625ac1484a0b4f05f911b9c1c7ec9fb24802

SHA256
6c4128f0abecb62b5e0ef89293e451b1f4395cd477dc95b8227c224440711f88

SHA512
4062799a7472101ab683f75dabb045ff0d635513488f75775b240191db0a124a945d80927983864b4b3d3608f2b5d6f736818e5340c08bd086f53a2034aa2901

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\en-GB.pak

Filesize
1KB

MD5
5149191d5bdd38f5d6473b1d2f006673

SHA1
57721f4f9bbcaef229ba4fec732cdfb92b207a8e

SHA256
651d1c56ef13dd6fd2ad242c2d6551efcd0c1ee4146607d0d1ae1f53688602c6

SHA512
6d790054870a2c091b9cb9f13a75e4581befe1417cd7af25b9af385a02e45a3fbb36a8f814ac3394d6f1e15c8910498bad10f050a57a6936b4c3d28cf3907d6f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\en-US.pak

Filesize
15KB

MD5
34700edff9a1cf870af893a866eb7467

SHA1
2fc6e77087cc0f61b038a4e518fe1182e55a8d68

SHA256
eb58a5c86d4ab7cc2d6afae0f1e91a20dc87d75986968b15efdf89afe0e521d7

SHA512
6ff4f0e02c99619735b4da8ad197419c3414d7ee7216cdcb035ed4fa099267a6d07212a050f9a0bf28bdec0483874b621c5eaab28eb3e20175756dca5c4e3e7e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\es-419.pak

Filesize
35KB

MD5
58d601ced91d69925dd6593fb16b8f7d

SHA1
64ff41eb1486b014988fcbef6deea6b6081aaba5

SHA256
7f6bcc4bc519b97270284855a4f4de6c41a3e7be8594c09c632dd39f5c459ac1

SHA512
d4102c983e7f2be67296f5180963e8d18c281845199a8e144236dcde811986fef7a072e5fe3c46b4e84dcde4a82876d646b00f974d85855c795a7cbca57fb348

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\es.pak

Filesize
65KB

MD5
5715fa04880bfe00f055c1e1335b7234

SHA1
c8b4404058aac6d60ac5240b9e26e9d1a0e802ed

SHA256
8509a35bbff2128e2eecfe1e4d3b8fee7d7d556004da86a125194c414f73ee78

SHA512
cc61a439bc6ff3319eb9b72d61ca8ad7f7cf70f3bcb46df88b754134edd269fdb1ba399cb1ff4a756e0699af9cf7da610e77d7489735282e0ad7520ee949e931

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\et.pak

Filesize
36KB

MD5
3d88236a11d75de6ce11c355d5693bd1

SHA1
e06d6bdf6d7ca2939065611d88b8ea01770868c9

SHA256
3dae455f18d40b5bad8f2c236fcaa5ce6949d931795264184c9098073cf4e9a6

SHA512
ea7f3dfe2f1c5ed66a2c5dd35943933b36bd6e290e71a2de402e8d6a7f694aa7d70f84117afe9ae24cc2d5748f256342d8c6a516545f082f74e76406cd2becc4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\fa.pak

Filesize
75KB

MD5
93440b5ecf17fceefd44d026fb1eca6b

SHA1
0b50451c8999f6602838949106a517271e59acdc

SHA256
aa4ce657d00a17a51c4eb333e1d4e9320ce97068b26c7ac9a60271d208651e24

SHA512
f845a64a730cb30298c1b38040620ac7920b948deabd18a71f43ac082214ff5974af20a73c631f447117f9ffefc9459a669f6e46f9be1841081ddb2e5bcaf835

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\fi.pak

Filesize
115KB

MD5
4f323a2eb73ccd029e742cee4dfa9769

SHA1
b860372d21cc55eb7ddbbf9f5bac61fed39426de

SHA256
e1888472c8e1330e70e514d0a1936749a7e5d39f67e7edc818661c2cbf3e301a

SHA512
d07d0f74736cd32d73b3a33867e65a25b727b5c30cb743162908e23d958fb3ae97285f600a9ef8196e61be9d450da5903d1e468fceb3b05ced93aa600387fddb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\fil.pak

Filesize
6KB

MD5
fcab81a1b141407bb9e959fbd713488d

SHA1
1ecc84394f9869049e43c9c6437d8eb84a732033

SHA256
8a0382c78af2c706eac6045b55c9f552db92c57becfab9b4e4b39b1d739a6725

SHA512
97292d514e5e374d59080f33822041b0d725504d1a29aee8b3a20c9ab900e4d3fe662b6d2209bd96cca2822392a39e0ca029a0b62ff183086ffb79c031a39c6f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\fr.pak

Filesize
134KB

MD5
e609419893f1d885a2f17f94805a441c

SHA1
31083ac114fa4077a7da7c796ab3744873fb893f

SHA256
8d71c36d04f2d6062458aa2614f7ce223b2ee9b4665556803f764f384b191091

SHA512
77f965f436a009a5aacebed3cc15adde5a1054e1c699b8a50b947a7e78a97cf43317d50b0ab7a42532c77d320b7393007e47199f31c58f7acb6f462f98fdd4c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\gu.pak

Filesize
92KB

MD5
20f6c237c4ddc645c4e6bc139c2d8d2a

SHA1
051919d02695cacf2e54961a77579fac03fce8ae

SHA256
6e3c22517b6209db97d1f4247381c8b1840947edf31362a743e7646b71d3a584

SHA512
c74a088d72f0f56bb5679c18831940cadaa67e5bd63c9273360c1a1e1a4b32a51dfb4b93475fde7a9a315237373266d3a61bf8365b4767285eb80f4718315f60

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\he.pak

Filesize
155KB

MD5
6010987755f300c7984dd3f72f518ab2

SHA1
eb85f0849a86aa5fb585efaa070d2d7300b197a3

SHA256
1c84a575e28e9a72335ed13409d6861995bd9859fd57a4d9509fe912db4a56a9

SHA512
4b77f74d986c16524a3a6c7f60cdbe53ac5be59418737835a7fa186e4b6ee853cce8317cce352fe4064c75a7d27bf1303d76eabc53993ff1e4b7758a8ccc6228

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\hr.pak

Filesize
123KB

MD5
feea1754a955eb61cd41763be4e5ae2e

SHA1
bb6252fec9ada8bf9ed7b81f59843d5abfcac80d

SHA256
787680ecb5d5ece246894481834b30145919c22b04d2dcad2f6ea2b2254abafb

SHA512
3d24c9ccb83f6ecf976df5cf00fdb0b46d53f09c1cb08ab68bb8d9944452785f40a761a152605708d7672f7dcb24e0b7cad1cfc14b267bf5fc1393cfd05ae4d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\hu.pak

Filesize
82KB

MD5
75509a28dbac82b2b3f0d59408393bff

SHA1
7e20227fc90fd824c19c97c15e4d2aa3f3b1ceb3

SHA256
454f493a2a68bbb3d9153ed97d06b1dfb3674f5327a4312acb5fbce4aab1b7cc

SHA512
d36c58b8c75b566ddeeab22264a8b83661dd78843bc931c6c3f396fc87286c6edc012ab5c034936f28cc27fd8b9ef3a00a12702b6da1410188308c06bc629b5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\id.pak

Filesize
76KB

MD5
168d3e6e54bdb226db7667c1d62aefc0

SHA1
7348050abe1a2252a67d1bad0953242c28be58ca

SHA256
6fb70a20776d24b25e6076a68d8ea90733d66a9db7f2c75532bcd63475d8552c

SHA512
55ffe0dcb2f648d1fc2d80b2bf255fea67bba92fc91b26676b45973c1a5633353c3d3e4d02b6c29f69b8899f5044457cdb69f87f44f77514c019418724d8e421

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\it.pak

Filesize
64KB

MD5
73c365bf065b0b7739a3db97009b8694

SHA1
3b85d32531f9e62e6f156f46dceb49a02a8e9236

SHA256
6c2b8380e2f960ab1b7e73bf7accfb48decf811ee6d13e7fda18a962a0da7303

SHA512
54322b2059c24420a7d71ae0269f98d74693ae8d353783126cc05d50401d840eb026fa51dcefc2117f58ac9b92487a845d218600ecfbd236cc325f72e28dd111

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\ja.pak

Filesize
1KB

MD5
4fc475a7f4322157637a5ba3a0bc9d38

SHA1
b2ca40fc70d976491b375af095e6bdcc8059c7ba

SHA256
fcff34e894a8d82b9999625b8520d2fb48138e1a4049c0f9ef709f464ca6b4ee

SHA512
7fc63db3aae1b323cccd01f12f1fe333517e65e0c31f9532a8dc0d9a06a7b2ace7b5ccf44901efd2ae81454d432677869554a9b5cfa5db6961435f73ba4aca12

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\kn.pak

Filesize
38KB

MD5
04941dfe133c962988e3f0c1174ac8ec

SHA1
a583d85d9e0f50929a2b3188f455975690d1fed8

SHA256
aefd20141bdaa30c260863a03e6b5d893d1f756e61dd34466fe0883fa680da51

SHA512
28ad3fbe699ebab67ac64a765f737db2ddc1b8d6afd0c58a60fec05a6f3feb2f0839cab87f5b139a89ae8d2e3fe9637dfeb42c8dbbf0600f7e5d732edf84a8be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\ko.pak

Filesize
1KB

MD5
c593c994fecd3ea71b554f35074b6239

SHA1
c5dfaba9bc1db262de6fdfe9c9fb1d46c654a192

SHA256
1c1f84912cc6d3569f22e1b28f61665cdceb2c63d58705b80a250941d7e7f4ff

SHA512
84fe0379be8cdd63904fa8e468b4254cb9da573f7c3e767b6861fafaa09a64f8bc5ae3423e7fd37b86ec99477f5e03e7dacf065e9d66391091d7de3879732f38

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\lt.pak

Filesize
22KB

MD5
1f8490d7badad7cc902cc95c741b27dd

SHA1
b60171cb9d751f20a4ea6619ba64a9720649f259

SHA256
9d9b502b585078c1718e680a7455c9eec52c03eeebd4611e18f810b60b8b0692

SHA512
05f399a1b9ef921caf881cef7905639c5e05c333df6f04d527f12a946c4c0fd69157db40f7488b88ea4421afffdab33c1484cbbbe95cfc16835bab395684c8d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\lv.pak

Filesize
54KB

MD5
1799d952374b4663eb5fccdc38eb922f

SHA1
5a4bab89dbbc356b5df0a6d65fad74f0131a927f

SHA256
e6c2e51080859397f599f7a2922f5d0565244e17ca092efc75e692b8a73705c8

SHA512
c131a8ce6aa77b6d3de7f61798e2d0700ff64be6cd782dac0067a21b93911b6dcbc8bdf51d26bd24b580a5e81df1b4dfd5183340076d9fa963b2064971253307

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\ml.pak

Filesize
67KB

MD5
dac3dce1c8801e0c8fb64f5622d25519

SHA1
e663e41db70e48df554693315f269230888cb6e7

SHA256
31f5415981cbbb7b1df7b8c4730cf6a98a1a72d48d7867b1398acd49687bb1f9

SHA512
e1fe0ed13c475527bc8eb25d2645ddaef3c40eb83e1419a15f81da963e971531840541639b9a99e26ecb69487b32e2f0bd5ebc9e7a5bba1c745aa193b8fd89c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\mr.pak

Filesize
92KB

MD5
731f7a001b2422713e5f5df2118ab508

SHA1
3d63456332f2b82abe8199ecc1f3fb00de5362aa

SHA256
361ba6c5d83633ddd158ffc2665bd248ed3f618c4cff1a8c7066f9a0cd34e1b7

SHA512
d30891ed12a9218efc652190890ea356c29578db69c382b4d29788d0265d868c26fc44928e1f252e78277d8e6cc546a936ce7867963e566be9cfb9693b4df4b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\ms.pak

Filesize
16KB

MD5
ce3cf82c09cf961f6ec1c1bb0c5f67d4

SHA1
bd31dd391713568a5b67f544fec2597f1387bed8

SHA256
f914883b716f0d0c28f3297e57a99b0e11e857c2b498fd267eebd21ac8a69c6f

SHA512
0c25a6fac62f6f9b42c2537085de44075f919c097ae5b22607e92f6a7fa1db9536a66ec5fb2132794a79224cb175436ba01b8979bcc6a891585ec5cfab8e3b93

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\nb.pak

Filesize
52KB

MD5
d4c9097087a0875ebff1c4d345dd07d1

SHA1
5e8afc8fa7a0e0ae101517534a3b9fb1fe2cabd1

SHA256
f03d86ae2d2793f4d2a8340f21042a3c39527140a1559286342577a1a56a8711

SHA512
88188df7581829b7f4e5320406a07238535cedd8d0932a1b0c954c28983568d7c9d7203fa395fc5a3f246644fb36dbd2fd1bda4d4a90417c4041442c7ee3466c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\nl.pak

Filesize
79KB

MD5
96458d4dceb24615a1ac39635b2448b0

SHA1
94e91a8e077826cb12110e7cc3b47f3eab244acd

SHA256
fe89db75f834d0db6edeb408a4dc8f6d01e57ba07fb847249ceaef5023a8cd71

SHA512
adc8a1fb5546d82b4379b83744fc7859949668270e506947607705b8ddf3f37b36010412340fc0f7bf47d81739d6a264a462f5b6acb1554ce80bb948de290982

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\pt-BR.pak

Filesize
58KB

MD5
21681e66d377f9d14c99455ddfd8640b

SHA1
52d8c07eb84d0b9821e2c30bacaa71eaa636c15e

SHA256
d68913c8c489c83551bcb9759d012ddb5c9506a6c73c17534064e717d679d2c4

SHA512
54d5545932d7e34ffbece43a26af504dc84a9afffdb1a8b1c1ae3822d4c2f157eacae934e342aeed20aefd34be3033db4174be3b00c197fd119f4e7068c3a5bb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\pt-PT.pak

Filesize
20KB

MD5
3d14d852d6e89f5fdadcd850fa7e5d45

SHA1
f3cc0a76e0005f08875b850faa676d5bf6e95ce4

SHA256
1646d6bf0013a203951c6fb7d4d05f811ec516937d8ed93e5802d4c80e00fd2a

SHA512
0b4703f10a21d0b3236b0bb321a357533b22195c4748532fc90f4a3bab50e8c8d4d0cfcd940e66878497d18887fddff43abc5d17de22ef7896031cb980da9e19

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\ro.pak

Filesize
92KB

MD5
fe969ac980fc22dbabd55f483db94fe4

SHA1
739bc6a2fd1b0ff73aa8d2328b90adb27918baa8

SHA256
53cdb44aeef2f2e718c23b2e8c0a0ebd4d384635406ea82bb98e75f06e76f443

SHA512
704f73ab6400a329d51d1687423cb1de460c16859c46b046ee678c573498ad6c2fdc3b93ee1bd2a658e8ceb595321f22a23816795147bf072f1a9a1d3064573c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\ru.pak

Filesize
43KB

MD5
f49cead0609bacf08b1cee2db5cbc36b

SHA1
70ba6534308fadc524fabe8bfde68e81b4c36926

SHA256
153cb7554664e707bb301c257847464f2a9011a3cb896f1b9e8f562691d56e15

SHA512
15f8c1750d2b95b85cdfea2bb6df273a6e38adf3f9afa65335bf973e99d963fafa2f7c74e86a5807225b322baacf1d139aa110282de2031d03f9936e96481240

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\sk.pak

Filesize
57KB

MD5
eed71e9739d889727365131ea05b6fcf

SHA1
f4749f266ea5c84a026bb600b45934f65a874a93

SHA256
490f1c23ca0445845597969e4ccae458265240b1b66a986a18aa5ea6d1627d9f

SHA512
6cfa6bb18d8d732adbf32a0275b5fc3aa05f16a8da6bb63741388abca57f2d2b16cfe57cd543665fa64d1dcc9e303a4e008bd9d4f1e6eac26f161759487f1d8f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\sl.pak

Filesize
5KB

MD5
72f30c5f80b0a77a323367feaa6e4c95

SHA1
184f2d3513a5302aa43125ed6647e4a3cdd0972b

SHA256
a9092bc391650bedbc22a7e7fd6d8a20c4e16e40c39a42e1acea240c4360b62b

SHA512
ebb306167c5e4dfac5821b9f7bbb01562c7a1762a1ad5d31d0112a0347b566e61644ceccdca953ad304462490ee234413065df94d975573fce20476acb7a1bea

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\sr.pak

Filesize
53KB

MD5
b57ed4feea9aed9fedd8328b70ea7bb9

SHA1
2efc60830eec34c564325d9798b96c31dc353cc6

SHA256
28f74157cd675a54bcd72638f201d7f92491961f8d73bc5723bce4ab87973f8b

SHA512
fcd347138cf683cb550406c48b559637e4b9347464e8fafe091580676878ecfc960c3d073209068fdd0471cf56b8d953f4e3e7c79d3d42d71d67e3b53759cbfc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\sv.pak

Filesize
28KB

MD5
410e222f578355dbd3a868011a1cc91e

SHA1
87048f2b12270bac5a8570408e1c2b4e85e8f25c

SHA256
fb9ef25ee88173a43d9e6b0958d85c155a926cb6cee0625d86b48bcda7cc12b1

SHA512
974da1d5d14a5656d0d01fd524eb78a47decc54bf2f35496733aaf012b494bae437b676b493ac53fe8324bb081b0abfe7e659e9d88455576b68a0d49fdba1118

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\sw.pak

Filesize
48KB

MD5
da03739482368176b7aae17af08dbdcf

SHA1
c0e9073c075c4497cb2a3ed3beefc9d6d9ed6303

SHA256
56a341ebbb3e1ec6a014bd6b717af415a585c34d525a940de697a32e4634efe9

SHA512
1f52e8abb36db075017b7930b38ca6da5b188974510a07ab2c906a67680b56688079c225a1a44d6d5f10501a197b75b07cc95cf284707af939560b3cbb64db90

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\ta.pak

Filesize
138KB

MD5
78b30c6d89a44d5316be67ec5e9734d1

SHA1
590d5f661e59121e9f0c40e93799fb431c0a6147

SHA256
f1ce5a7910db1724d74f1f4ba045637eb06cadf13c68f61a1e0793530073e1cd

SHA512
c3d584bffc52a55cea42e6fdb0e1e60d97cedfd4a679f53a437a973a8e49d10a87f83b297c27aff8c3ce31587ea98310cd7a8583876c64c00cccfcd382cadd79

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\te.pak

Filesize
33KB

MD5
522cacc7ce748d7136c5573eebdea74b

SHA1
e09f7840a81236372196bdc8684c272cb1c61b5c

SHA256
456c159944e2debceaee0d2667c0a2a03fc528ef24f4c6897ba31ded20363add

SHA512
cfb24945f1518603f6acf6efbe1ba829f70c53832c6c9cbdbdf048213ce78fc7cb1696a32a1e26b90e249524e298fcd4927fc37bc580e8e1f1415599a15257a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\th.pak

Filesize
79KB

MD5
bff64c4a35cca6ccf66795d0e0e39f53

SHA1
d777144ef4b4874b527f403021bb0fb37c86fde0

SHA256
d3400c0f6eede8f6dd8141c7401178722b40e12206b36479679c9648ed9793d8

SHA512
079fa817dda5e739e333c1d0169006fb157f9d9a72313804310ac7ed6b2d741c0ee72ca9b721368deb764ca53f3478ba3fdb84c58ab63c1b516bab6877f8f594

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\tr.pak

Filesize
97KB

MD5
b94a93ed21d40991ca73b0f9f8b6f11d

SHA1
e7c6887e1efc4063d124b739ad3dbe1fff6682bb

SHA256
69a594a88f9a33617bc3ad626e25f0983ef94d1b5b3d4ee5fde88f0a268ac82c

SHA512
6503c55e98b0daa922238e1674d5dd67d3234d0fd874cd4bb555a713c6e83eab15c9c8c59183d5eae08f8c68c4c15f50989c1a1f206cc926eb7b042271c6d953

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\uk.pak

Filesize
74KB

MD5
641d5d534701a35da00071d2da08d2cb

SHA1
bcbd68e26692f430170a7917e53559e056c4f5b9

SHA256
2d7b6d0d2d230bad26f1f23291856c73586cd9dbf40cc5f5330f05a55a3e0ab0

SHA512
196dd9eaf935801ae26592c749092a0e5614d74c01b323471b3c69fc705132495b0cdcb6d55cbedcad42c0a2bff55e22e47831758f1e8640cd52338866153ac3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\vi.pak

Filesize
14KB

MD5
7e64288af350b3d6c0434e0daaa4e389

SHA1
5b1250cb92e40083b9b4b0f826c80f352de145ad

SHA256
deb0a69a0a0b36ea90a6730a87b9acac8e4c3228d643571661b6788a90001fbb

SHA512
b3f271b55805782e97a69a0175c8f0013601b330ee80887b2e1fe76c0d767229d783508f54f1d98212845fca9a4e85886fa578f1847ea00039ea359fe3f3973a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\zh-CN.pak

Filesize
37KB

MD5
f67dbaa28af06d8064ff60984a47a142

SHA1
125435dae7f0601558a66f0371b46781eed1b3bd

SHA256
dadd5a7498f90628696333565dbc17ad143b132dcc6465babe4f7f9dbeb2c661

SHA512
a4908f9d91c4d88afdf21b888d5aa9b16ddf1908565f5fb54e75d60a537dda58e03e44b29b67491a8ddbdaca8a2db796fc7be75dc47aa1c04657c3a6f63aa724

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\locales\zh-TW.pak

Filesize
23KB

MD5
125095a877a00563cbc0d7481fe8c02e

SHA1
2a1735149cd99d0832de450c3b32711113e6d8f0

SHA256
e93b308a8cc4bb2a946d32866ced80bfdd1864b5de4072e190cae2ebe33d5366

SHA512
7b5314db5e7848c0a960467bbb8cea3f2d2b4f96a90bf2aad4f714ea5981154c4e5928579da0b81926502e9bf5965f4f8e0e579ac7c6d07fb7e289d1014c6edb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources.pak

Filesize
28KB

MD5
b7ab82c8337e8385d10d358156b8b382

SHA1
576da3da6d4b972ac2ebaee798c5165bd6e9f645

SHA256
5f36ed3a786fdae83e68a0da5028a29a27609e43dea2455fad9edaa03ea95b28

SHA512
e46df4b0d994ff43383e1abda0656e881ead338f05e3fab4e766ff81c0453257ad37d9998eaa6033906db07f9e40308a8bb49cbcd1c4923e5dff8832f710abd4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\app-update.yml

Filesize
100B

MD5
753871ff73d231ba73614677412ac14d

SHA1
789f696b41591498eec4fdb0db78c68c6d59dfd1

SHA256
2090cb7c9033d9cd1afa2275ede6ee080aa7bb97ff741e3e449af97b177551ef

SHA512
f56bf2114cb84f0888eaec4d715bbac5653c5dd038b3bdb07282a9a560b20efc590909428a3f7b0d95bdc3c6aa9d2f37c8810d07f737a8b290ba0e924c7be1f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\app.asar

Filesize
176KB

MD5
5d12778f443a8ca88eb63c1400132f03

SHA1
7d289bb4e6d5479e63ff5b800c2607179dacda12

SHA256
b8732edd263636dc12ec9af01c9bdad2a4af42c7cbb5d8173c61a597644317dd

SHA512
a5d0e9ef65c4bfec590685cad0997a0ea07782e59fc17d3881d1898d57764f9152d107a280ab0e3438fbea00c88eb131d8edb1147faafb337b2d26f21f1a3efb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\assets\assets.d.ts

Filesize
514B

MD5
3474b89e956a0f104c48700caf1f35e8

SHA1
061fd896f9f418a4db9685fdf4cc4646bbd7018d

SHA256
498a5a3ecd170f99e34ef350c1150397a56461ca7f9961d2a22890833eec2edd

SHA512
164804bb6b9142dd423f75e3f75700813a154f4a41a271aad4e191fefcf4a8d32d4c7d5972cfec6a7f4753ea44ea5dc03d4fbbe0c28cf00af47729b2f66c3ca7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\assets\entitlements.mac.plist

Filesize
333B

MD5
9920b60c89256ceca825062dc9c53c53

SHA1
0f1d847ef4067022c69fd82c135f3dfd2e4d352d

SHA256
f4b2891dc2b1239191cecf7cd5b9a36ea4edaec33c1cc091e09380d669e8fb63

SHA512
93ef0a66d6aa8091af3ab8af4b1ced502ded11f658aa77b6a5fe9e3d36bd5d01231060a0a656ea627c0fa32313b7a3438c75e1eb96f4f07692ee4d0f53ce9a90

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\assets\icon.icns

Filesize
18KB

MD5
fd27b269f6bb7c7c28d0f8d330cb8b78

SHA1
5436360c72d3bcf03099b91904d6013e4ef9098a

SHA256
c32d173e12c75d85532de8bebf8a65389ff352e38623cbcb5d90614f979b4a1f

SHA512
647e113d40973b96377ab818a3ea3f269613da29c84e0b5649cd024c9ea1c2d63235dadd97bc9490fa46706a2f39c2957360741e85da78df96c74cc0144cccb8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\assets\icon.ico

Filesize
2KB

MD5
ba449c2f602dbee8ccb754ab9ccb013b

SHA1
b61391be537be84bb22140a22d43fbf96472cc55

SHA256
8557d5790488957917671bb447fa41248961cbcf60395023d700f4b431e16db8

SHA512
cc5ca1fc2844ad01eeb5dc50d469427a6a4c18ae54c5732e8cb9f20be5667207330f870d18e681503ae2bf9c6c94a03eac8b83d8d32e344101566a933405b885

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\assets\icon.png

Filesize
2KB

MD5
bd8d487e261ad75074f94d065a1fe5ea

SHA1
5fed02a831fa006d24d2053f271817969c411539

SHA256
5155e83d66a6c33b38551a7806b2ecedf4c3d6022811c18e3a90a542e725dd20

SHA512
5ab2b0b469ff0af0cd8e26a6767335369ca8b73e7b9f574ba38458b1499978242dc88fef5975ffc6417335c7931dedfc91158e70018982adb92c23d776dd1de8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\assets\icon.svg

Filesize
3KB

MD5
6e21449b8640ba1dcf485c7f4fabbd2f

SHA1
1a50ae72417ef6bbf868f6a3fc75d1a6a4d8cce7

SHA256
08545f22c3bd00fca027a79a26f605c815166a0f18ffe41ce706b5cf68525bd1

SHA512
754a63e1e04b8a4e1c674c4e7fbee91d025a10010cd5051d2aa22d303e7ed5de1a404833a9ab2f9662f478bc269424672ea3d172ddfc4854fc18620719a5597f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\assets\icons.icns

Filesize
17KB

MD5
158e222cd935bd0896c0ae9f487ff802

SHA1
608d0f248deb75705ff42c3143f16456debd9307

SHA256
a62384102c23e7dd8e715a671c75bae0b66d455088cd80c957276a97915386dd

SHA512
1f166bbbb73ae64575b0dc6359769cb16095bbe49b3f94a6cba9cf5ac433e62e3ca1779ce7d40abe8aa1a2b8dad4fd0bfab4fa386ebd8acc4dd86b78c88bfa9d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\assets\images\mojang.png

Filesize
15KB

MD5
c87524b65e064c564d97b782cd5e49be

SHA1
439e9d6ba008a53015bb35dd4c757f68a27035c7

SHA256
ab15f46745e9f79b03f2dd414db0692c43776297b416c508dfb478f3fc31d517

SHA512
4bc2c07479aac39b2529c6639f7dbbfa6866b10dc2aee055b549f8d49e6609e68d9073166169c304cea65784c45c18ba9bc3a751fdefeaa0e8df1174e7ec2b9e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\resources\elevate.exe

Filesize
58KB

MD5
1cd11586ca8328b4b6f6cb9a4b0f25d0

SHA1
ef9bac5e2e4ac182d30e2a26a1eaad10afb4722e

SHA256
89bae6a94f607a8489ad8eb8c41abbd9d2e0d68cb5e50ad581f419b9b9f31891

SHA512
b1ba1d28ffbc31e8b4ef8deab53406fdfe66bf24be08f13de2c6708445ce6847c189a6312a5826a883913f78013add29069f1b94f991df0eb66c25443ce035bb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\snapshot_blob.bin

Filesize
48KB

MD5
c497639990ef3d4435fd721e8e855c9a

SHA1
85e7df364daab70730c756b8e24e81965d5a2255

SHA256
5e15a82831965e521bee172e6878806bba51d410d1fdf1b4eb01385d1954502b

SHA512
63f2514d585dd7d3b988f0aaeed8106a06b67629eb54f2152e8b4a24276d9f56fc4650c8770d0ab44b4c57ca458856a0cce5f26f6226a56a807b38ce5615ead3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\swiftshader\libEGL.dll

Filesize
1KB

MD5
caa932b0d59b2a3885cc298506bc2650

SHA1
342acaece9f4dbe59e88f71298a05323c58bbe19

SHA256
eb841b6f82ab49e3477317a3b1043ed37b0568465caf6cf03b272e30bd3191de

SHA512
b6862b9bffe841063c8c4d1cb0f64cd6ae4891cfe835a8013f10e55e9c7cab2eec775047ed3b153d5958ecd5ff02e721f4db7b225f9ccafb886b2f36382ddb1f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\swiftshader\libGLESv2.dll

Filesize
5KB

MD5
f52bf802ded01c46ad647f8c97082823

SHA1
84434653086501038f52e59b1e95f9065ac5d365

SHA256
df36b9bba292c762a45b9006f93804ebae8d2313965b52c6989fa5a00497fb25

SHA512
26c2618a83197630ff681107fe05aee72ffe55d6d8ce7dc9af4653593a358aa01663ec8fbc9c90fd850f09e5495b7dd536628abadeb722d1713e26620ca1283c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\v8_context_snapshot.bin

Filesize
1KB

MD5
8466a4d37651c417d41acb516a11a5fc

SHA1
790692b13efdb1b01fef4f2714795d20cbf12026

SHA256
ca70b80222ae8b18581603f4a20c4dfd32c1f47c83df2d7ceedaffac670172f7

SHA512
cd902643516687d254a85abeb2c8b232b76d6b297c8c5b88445ef810c2e0e510382665d43279904274e65bc698c6a4653d7f530e4aeabd944b16cfb49b6a9ef1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\vk_swiftshader.dll

Filesize
64KB

MD5
60ddf9e0e26aee167a1505ecdd39c570

SHA1
018a0e4faf8ee1ed0da89ff13f1f80d9abed6465

SHA256
417f11a49cf0b81df277b7bc231aff9b1781c153596ac4f6c0c03d746f7ccf99

SHA512
921262d91a5f3da01d4482cfb585e3d048931d8a7d6337493db5cceecae81ab7bde1d8cb359b9f3509ada965f46d7ca29216935e10308f0d2e274e30bda2f688

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\7z-out\vulkan-1.dll

Filesize
98KB

MD5
ab912f08523e0953fb624a1afdcb368c

SHA1
136355dbff98af5b88434034c821ff4e9acbb5a3

SHA256
02e9caeec5535919baf20b5285babb10ff98cdf10eac301b8e2ba45857f97e5e

SHA512
9cfb2eb34725f4895ba147311170ccf80f0be50447a33e5de04174bd0836dc74bf8da5bad76153a640e7f54891d5457e189e8b2a4c00108db0325afa4a8f98e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\StdUtils.dll

Filesize
70KB

MD5
7325e47ce648e82c116b19e3ece20de3

SHA1
a136d1706f9e8e85ad3f798cd739d548d020fe82

SHA256
121fa42f7a3062e2d3dff3765a6a275cd968e637cfc0f7d43e98789367e2d5b5

SHA512
8cf6334890d2d997bc95b5f19f72c814d89270e05745a5642218c2e565bf86db02e795bb8032563d96e9cfa91d92bed456959ce1302fad559a7cd9a5e738f93f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf471C.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Crashpad\settings.dat

Filesize
40B

MD5
07d92ca971887fe1b2f60b23a46df85c

SHA1
48428258d99dadc810ef6e47cb7e2acee0dc0536

SHA256
1b8b2a6efe75af899815c4d34738a01401a7f016b71319268fd13b884cf156dd

SHA512
a9ed572d3133a1f6d9d99637fd5c12faac1a849d0cc428876d716a833c32c67b44ba97159a4f5f44ad2909b552b63b8cefaaa58cb0b57a9ed961afadcbda9c88

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
996B

MD5
6b23532e7b7427a6d1395dc548a6d04c

SHA1
927bb6969ae717e5f6dc93fbd9e365f40251d3ce

SHA256
b84a1dea6bdd549d4dbf776b11bfc50f014864666c726c9d19069e68bde97104

SHA512
ffe0bdfb5cc1d137bb41aaabfd5a808b409178312c2aa53583d154678c4c0c833df7af4cbf3acb02f96c77a8a2400e82e9af99e893e7f1146590e583c8c38a21

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
875B

MD5
98be56e0818d137628f444f0e3e10089

SHA1
196f7efd71734910544f42c42e37514e0bbeead9

SHA256
8393d1e2fc01f352ef7b3c31f1dc75e54d41b533da5de903aada4ee593d51b8f

SHA512
140a3b84950221978ba497b4d4da0136f3f200688a4faf4f6d4306a7835537797b67495669a8d32b36dc824e04cc71bf8e3d6d6bb27b60a8a54eb63f746df7dd

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State~RFe587412.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\TransportSecurity

Filesize
371B

MD5
bb45ba1ac7ce64ea399de98880fd45d5

SHA1
8ed1f582cccbc1d09c1135b943d71d50979842e1

SHA256
77d120412264ffc263574a86364227bb74c040867d408a84f2680592c14e21ca

SHA512
1397d690002a5b90324f5295328bbc6367660d3f68806421bccceced0ff31b1e271ed04654fe93939ec0557c63c2f52a777ca0d2c63364063c02d6ef08643d7a

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\TransportSecurity

Filesize
371B

MD5
0f6dfb4d50483f8fdeae90794febba72

SHA1
370387700290c8da2e9f29c72bb9461ee0dc547d

SHA256
c536e5fcde348ce539f79531706fcb86dcfd46ecf88eab8ea445f074fc448995

SHA512
c88e7edebe273fa7dbcf787ed2d94e02034f7117c9cdb914a52b8734588ff6c63df61f16c8f337ab9f823c079025c4f17d036d7bd6e54e5cda3701cfecc19ee6

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
67KB

MD5
af90996eb7e9fde388234aa2ef4290e8

SHA1
27ec316e9dc99e4044d014e48a6aaa15dc2c2db6

SHA256
8ebb2d36ce8e5fea1265d8cd3831f1f66d2d24dc99c93ca73825e281c5c5f858

SHA512
e3cf2a1aa48cc5b85bbda3e873fa860ab5a7eb1a5a555718673e16c761e85267932c912fc1fe0668a81d0894a5a0da0a360ac62c65050ad7754849727600b423

Download Submit
memory/1072-1047-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/1072-1046-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/1072-1045-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/1072-1044-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/1072-1043-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/1072-1042-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/1072-1041-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/1072-1037-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/1072-1036-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/1072-1035-0x00000229F6340000-0x00000229F6341000-memory.dmp

Filesize
4KB

Download
memory/4200-706-0x00007FFE444F0000-0x00007FFE444F1000-memory.dmp

Filesize
4KB

Download
memory/4200-1001-0x0000029FF1770000-0x0000029FF1911000-memory.dmp

Filesize
1.6MB

Download