69d3b8a2b9bf9fe4e1be8a17edcf3bf19379aa27c53a73853585b832a8babe5b

Analysis

max time kernel
151s
max time network
130s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/02/2024, 04:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Spacetherapy.exe
Size

62.5MB
MD5

c94619836149d229fc66376b457e0be0
SHA1

d12f2257f1f34e5bf0fac650963624e8e74f326a
SHA256

94caad77d4dbb16061a78f418c49f445f7855ede2cd2ca27fd5fb454aecc6ec0
SHA512

2b9cb680312f463faa8edc95dcc1f7cdacd1cc291a2ce479fa588487560cc8dc91b5907039ee0298da00e14840c62f686b004ea67f4ed62952ac8e27736d0d1c
SSDEEP

1572864:5m6LAM8qfCCLHIIDkYDO37J4JPnMOKwZ4ryOp0DZoFoPcSGk:E6LAfQLHI4lC3fwZiy3ZoNk

Score

7^/10

spyware stealer

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Control Panel\International\Geo\Nation	Spacetherapy.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Control Panel\International\Geo\Nation	Spacetherapy.exe

Executes dropped EXE 6 IoCs

pid	Process
2452	Spacetherapy.exe
1628	Spacetherapy.exe
2004	Spacetherapy.exe
2356	Spacetherapy.exe
2996	Spacetherapy.exe
2112	Spacetherapy.exe

Loads dropped DLL 31 IoCs

pid	Process
2376	Spacetherapy.exe
2376	Spacetherapy.exe
2376	Spacetherapy.exe
2376	Spacetherapy.exe
2452	Spacetherapy.exe
2452	Spacetherapy.exe
2452	Spacetherapy.exe
2452	Spacetherapy.exe
2004	Spacetherapy.exe
1628	Spacetherapy.exe
2452	Spacetherapy.exe
2356	Spacetherapy.exe
1628	Spacetherapy.exe
2452	Spacetherapy.exe
1628	Spacetherapy.exe
1628	Spacetherapy.exe
2452	Spacetherapy.exe
2996	Spacetherapy.exe
2996	Spacetherapy.exe
2996	Spacetherapy.exe
2996	Spacetherapy.exe
2452	Spacetherapy.exe
2112	Spacetherapy.exe
2112	Spacetherapy.exe
2112	Spacetherapy.exe
2112	Spacetherapy.exe
2112	Spacetherapy.exe
2112	Spacetherapy.exe
2112	Spacetherapy.exe
2112	Spacetherapy.exe
2112	Spacetherapy.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
2	ipinfo.io
3	ipinfo.io

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 7 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	Spacetherapy.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	Spacetherapy.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Spacetherapy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Spacetherapy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Spacetherapy.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Spacetherapy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	Spacetherapy.exe

Detects videocard installed 1 TTPs 1 IoCs

Uses WMIC.exe to determine videocard installed.

System Information Discovery

T1082

pid	Process
2704	WMIC.exe

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
2100	tasklist.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2452	Spacetherapy.exe
2452	Spacetherapy.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeSecurityPrivilege	2376	Spacetherapy.exe
Token: SeDebugPrivilege	2100	tasklist.exe
Token: SeShutdownPrivilege	2452	Spacetherapy.exe
Token: SeShutdownPrivilege	2452	Spacetherapy.exe
Token: SeIncreaseQuotaPrivilege	3060	WMIC.exe
Token: SeSecurityPrivilege	3060	WMIC.exe
Token: SeTakeOwnershipPrivilege	3060	WMIC.exe
Token: SeLoadDriverPrivilege	3060	WMIC.exe
Token: SeSystemProfilePrivilege	3060	WMIC.exe
Token: SeSystemtimePrivilege	3060	WMIC.exe
Token: SeProfSingleProcessPrivilege	3060	WMIC.exe
Token: SeIncBasePriorityPrivilege	3060	WMIC.exe
Token: SeCreatePagefilePrivilege	3060	WMIC.exe
Token: SeBackupPrivilege	3060	WMIC.exe
Token: SeRestorePrivilege	3060	WMIC.exe
Token: SeShutdownPrivilege	3060	WMIC.exe
Token: SeDebugPrivilege	3060	WMIC.exe
Token: SeSystemEnvironmentPrivilege	3060	WMIC.exe
Token: SeRemoteShutdownPrivilege	3060	WMIC.exe
Token: SeUndockPrivilege	3060	WMIC.exe
Token: SeManageVolumePrivilege	3060	WMIC.exe
Token: 33	3060	WMIC.exe
Token: 34	3060	WMIC.exe
Token: 35	3060	WMIC.exe
Token: SeIncreaseQuotaPrivilege	3060	WMIC.exe
Token: SeSecurityPrivilege	3060	WMIC.exe
Token: SeTakeOwnershipPrivilege	3060	WMIC.exe
Token: SeLoadDriverPrivilege	3060	WMIC.exe
Token: SeSystemProfilePrivilege	3060	WMIC.exe
Token: SeSystemtimePrivilege	3060	WMIC.exe
Token: SeProfSingleProcessPrivilege	3060	WMIC.exe
Token: SeIncBasePriorityPrivilege	3060	WMIC.exe
Token: SeCreatePagefilePrivilege	3060	WMIC.exe
Token: SeBackupPrivilege	3060	WMIC.exe
Token: SeRestorePrivilege	3060	WMIC.exe
Token: SeShutdownPrivilege	3060	WMIC.exe
Token: SeDebugPrivilege	3060	WMIC.exe
Token: SeSystemEnvironmentPrivilege	3060	WMIC.exe
Token: SeRemoteShutdownPrivilege	3060	WMIC.exe
Token: SeUndockPrivilege	3060	WMIC.exe
Token: SeManageVolumePrivilege	3060	WMIC.exe
Token: 33	3060	WMIC.exe
Token: 34	3060	WMIC.exe
Token: 35	3060	WMIC.exe
Token: SeShutdownPrivilege	2452	Spacetherapy.exe
Token: SeShutdownPrivilege	2452	Spacetherapy.exe
Token: SeIncreaseQuotaPrivilege	2704	WMIC.exe
Token: SeSecurityPrivilege	2704	WMIC.exe
Token: SeTakeOwnershipPrivilege	2704	WMIC.exe
Token: SeLoadDriverPrivilege	2704	WMIC.exe
Token: SeSystemProfilePrivilege	2704	WMIC.exe
Token: SeSystemtimePrivilege	2704	WMIC.exe
Token: SeProfSingleProcessPrivilege	2704	WMIC.exe
Token: SeIncBasePriorityPrivilege	2704	WMIC.exe
Token: SeCreatePagefilePrivilege	2704	WMIC.exe
Token: SeBackupPrivilege	2704	WMIC.exe
Token: SeRestorePrivilege	2704	WMIC.exe
Token: SeShutdownPrivilege	2704	WMIC.exe
Token: SeDebugPrivilege	2704	WMIC.exe
Token: SeSystemEnvironmentPrivilege	2704	WMIC.exe
Token: SeRemoteShutdownPrivilege	2704	WMIC.exe
Token: SeUndockPrivilege	2704	WMIC.exe
Token: SeManageVolumePrivilege	2704	WMIC.exe
Token: 33	2704	WMIC.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2452	Spacetherapy.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2376 wrote to memory of 2452	2376	Spacetherapy.exe	28
PID 2376 wrote to memory of 2452	2376	Spacetherapy.exe	28
PID 2376 wrote to memory of 2452	2376	Spacetherapy.exe	28
PID 2376 wrote to memory of 2452	2376	Spacetherapy.exe	28
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 1628	2452	Spacetherapy.exe	41
PID 2452 wrote to memory of 2004	2452	Spacetherapy.exe	29
PID 2452 wrote to memory of 2004	2452	Spacetherapy.exe	29
PID 2452 wrote to memory of 2004	2452	Spacetherapy.exe	29
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30
PID 2452 wrote to memory of 2356	2452	Spacetherapy.exe	30

C:\Users\Admin\AppData\Local\Temp\Spacetherapy.exe
"C:\Users\Admin\AppData\Local\Temp\Spacetherapy.exe"
1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2376
- C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe
  C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2452
- - C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe
    "C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Spacetherapy is a game" --mojo-platform-channel-handle=1452 --field-trial-handle=1288,i,10955299585091183667,15146084888609856283,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2004
- - C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe
    "C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Spacetherapy is a game" --app-path="C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=1652 --field-trial-handle=1288,i,10955299585091183667,15146084888609856283,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2356
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKCU\Software\Valve\Steam" /v SteamPath"
    3⤵
    PID:2364
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe QUERY "HKCU\Software\Valve\Steam" /v SteamPath
      4⤵
      PID:2924
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
    3⤵
    PID:2276
  - - C:\Windows\system32\tasklist.exe
      tasklist
      4⤵
      Enumerates processes with tasklist
      Suspicious use of AdjustPrivilegeToken
      PID:2100
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKCU\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions""
    3⤵
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe
    "C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Spacetherapy is a game" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1116 --field-trial-handle=1288,i,10955299585091183667,15146084888609856283,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:1628
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName /Format:List"
    3⤵
    PID:2612
  - - C:\Windows\System32\Wbem\WMIC.exe
      wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName /Format:List
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3060
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "wmic path win32_VideoController get name"
    3⤵
    PID:1788
  - - C:\Windows\System32\Wbem\WMIC.exe
      wmic path win32_VideoController get name
      4⤵
      Detects videocard installed
      Suspicious use of AdjustPrivilegeToken
      PID:2704
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "cmd /c chcp 65001>nul && netsh wlan show profiles"
    3⤵
    PID:1580
- - C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe
    "C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Spacetherapy is a game" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1380 --field-trial-handle=1288,i,10955299585091183667,15146084888609856283,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2996
- - C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe
    "C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Spacetherapy is a game" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=2208 --field-trial-handle=1288,i,10955299585091183667,15146084888609856283,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2112

C:\Windows\system32\reg.exe
C:\Windows\system32\reg.exe QUERY "HKCU\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions"
1⤵
PID:2220

C:\Windows\system32\cmd.exe
cmd /c chcp 65001
1⤵
PID:980
- C:\Windows\system32\chcp.com
  chcp 65001
  2⤵
  PID:2592

C:\Windows\system32\netsh.exe
netsh wlan show profiles
1⤵
PID:2212

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\D3DCompiler_47.dll

Filesize
357KB

MD5
1065e893b4f04d214822dfca0a375866

SHA1
21eb708722e0fdbfb68a71d96e96c887fdbd21cd

SHA256
f39045ded9b703196582368feeeb462a74bf3473ed8306eef01ec3caf268b206

SHA512
99982526aa6e09d73d2d7337bb979a97d6f02f2b53fdc2859c72db678f838e155800d797856fcad8d6a5d0f7fd12afd42f4de7c0a461ba26cdfc69810bb68ebb

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
648KB

MD5
d77cab7d990616db3f034f825252ca2d

SHA1
736d2f01e46024563f9c70b9e5594d421c34e4ca

SHA256
9aef0c4ad22b28b5c1ebd9580307119d980216b9a464a13f556538bc13d6b4ea

SHA512
e74bbda7f9e8ffeded63f2b32dc7875841c75531df2eddc17688dda806c969caaa0dcbf01e909db52a11e7b857f4f3663393938cf078ce1bef8373934c5ee579

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
312KB

MD5
6f27ba4ef810f08f2177588b7cbe28ec

SHA1
8ec5ccd97b7431ea5eedf0caed4190a8f957115e

SHA256
519629645ce7cc6a86614808311bb0432c1876b5a97a0fadb9a81f109d48ff00

SHA512
cda0401ee068a85a6f858a525933572cf4bfad5124338330c0b9ef20752b1fb2da5c04b56f4ae7d985d59a75c7970b95c3c7175f378399ccf454f4ce910b32a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
32KB

MD5
4cae8fa0f38710e5c3a38e7922fd8997

SHA1
f715281ed42d5671e205023a4a8260bb03332c37

SHA256
25fffb27daeb12b4e58d981f5d4c496c7bebc7f0460e8f83d37c27dbad79ec0d

SHA512
41bfa6ca0d5b311481ee17a50f285d9be61b666ea6bca49c961af11435eb3983fa9fd80177585d3738464ae7fc1b02ca36f04c8e3b1fb454e1f9deac3a033596

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
76KB

MD5
e75a67fb7f15788e66440d50e4781891

SHA1
7c238afe515bbbf64b0598bda1390e825eb5efd1

SHA256
46477f6781150f0f03b19241de4ad0221373bfe822bdff7df228cfe4802db375

SHA512
95d7f48b78a0ee545df9987b02a4efe44af1b1503a259890d5bd08791263c6824ddec495c348c62ec8fb2754bcdbb44355d7ab0d352cddf4d9faa56564d56abd

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
210KB

MD5
05cbce1446635c1254e919e81c55fdba

SHA1
10b3e8f973f85a9be5cf6937274410c40bcf1dbf

SHA256
8f059f671d86650c7e3614676881b41244174f1a3fc476fb14b8bd70c57014a3

SHA512
f442bd02f87b60a159aecf2266b47d63f589fb4c849e8970f72582974b6e0c505bc0fcf14dc9af0fda36a9ed0d8c15538c8f1d30fe6691402c48dd6ed77a1900

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
65KB

MD5
84637300f3d856a9dd4f3f308e1e470f

SHA1
9b5585cb64fc0dc482eb8b237f0cf67c29618a77

SHA256
1739ccdc32356ec655ff3df4af0a20dc468ac6b690d1c2584d060d1e0df2b0c8

SHA512
310fef3e11c3049dfc46dd30eb78002616c1b2ed6c791faa13c50a054952b6196e48ffe9c7de6ef122929c3f08d214c01d13f00d9992cc2acf035d94eadb5e74

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\ffmpeg.dll

Filesize
501KB

MD5
fafb66336152b3f9aff2c21d5deb1219

SHA1
b60544fc9b99f8dabbcfe1cc42f09cf04f191662

SHA256
7daa8d50867dec65d90a4bcd87b673f6e57e3fc825fd2591274c641ec75c5ab3

SHA512
141c233c862e373db5adf0a1948be51f77e19d060783b71403ba7ca1e481329b43213020cb5ca3cebf22a113427281a75e435bd869bd46d8238ec6cc97bc3d95

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\icudtl.dat

Filesize
289KB

MD5
f0e706fd6f978a39f8fade9b3f5634eb

SHA1
0b45e83256f01573600c3bc05387bd176e2ab368

SHA256
489d4062eb4dc4f9b1f3f5ce082c833b68d47e202b73e574d5a3099240823328

SHA512
ddbcb1f5053e0cda0013472489a1fd9c175290e85c11cf4f1ac2a7743c1d4cd503bc95e2aede3b6853380b278e8c77c62827b5afa6108fcb605fce730b43a7f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\libegl.dll

Filesize
165KB

MD5
e2bc6f5cb487e76ccf432893c86c858b

SHA1
f5be10672c132e9cde72cb850a21e6de7b41cebf

SHA256
d11eabb90c6955396c149ac9646a4c31c9a093f0f960c516c8df831a1d6e581b

SHA512
36fcdbdf346a283b9953964e4d272a545ff73b06adafbd1283e6d2da80a0c4fb350254056b1071eac439fd571fcfde2782a46303bf29f5e3e7ef3a0006ea2632

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\libglesv2.dll

Filesize
449KB

MD5
273d1907a6080d1b908af1c6d1a9f6f3

SHA1
4e50d2aebac317ccd467364821c7df56d443dcdc

SHA256
6bd6a777645db25cf177dd2d3e2e010cc987fba25aad3095509088fa64ed5d1b

SHA512
d78332433561020508ed289b217209e65368a3a613128af935a44ca8f77f592cd20f59c5ae158ba587f21e5fa767c38d8e44c9dd9a733dd2f9e7aa6191d98d31

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\locales\en-US.pak

Filesize
73KB

MD5
3f8d1443ad3596d6bdb2831ad6832086

SHA1
c842c174e5be2f4ba1124fe08309a17e3af14cef

SHA256
dd1bbbdf1765e8ca1c85a005cf19f485c266b3c7a6d6a03fe94aa874b085683e

SHA512
dbc08b8fda33f8802280c2c654e0a7b52dc0b8f9730ef751841a0fc942142d0583b6c5f6f87ec7b840b4618b30b39af34329444a91ccf7945daaaf494dbb05d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\resources.pak

Filesize
464KB

MD5
81d195f120f32de4fd5555a1214b58e1

SHA1
b10336be7f8ff6328021e4684823ae98d8cdb138

SHA256
f9251671b1322734735037bed26ed316df487a0accc058d58666323c58bce3c8

SHA512
cf962ecd3630ae090a8838aa9f5ba87e4f1d287a0157c8615910db80de9558e78bd0ef4fe3e28afb4f44cee3309b952b513ac3041f7f3d6eec49824a95fa57f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\resources\app.asar

Filesize
423KB

MD5
632fdfb4c0da6dd236e5f0fd528025a5

SHA1
0edfe7112fa5aadf971a3c4b8045b761d451c0e2

SHA256
bf5941e03d2e24531113a28dc2bc0e3b85f378951ca60980c0d2a0dd2185e96b

SHA512
6912419a345fa2349bbf5dc1dc5061f4b15d250945877125377573a2408a0e1534e695251cfd78b7cb58795fdfbcd0ed981a8e8705ae767c6062f32a0f9ea4fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\v8_context_snapshot.bin

Filesize
709KB

MD5
a7ca4f63aad12693225e8fce2d205917

SHA1
c75ed0758459153cd013d4ad75aacbcda7188dd0

SHA256
ca150395b8284b9e9ee5f672354fe7324fd48a62e16a8cc0ab30fa1e52c0fef8

SHA512
820be9193cb459e95df0b5d773bd584a35b6a19c205fe03f312e02da243326d93f73a09258ed438a15d959d82f547983ad459924588b8210b266ab4ad8d3d8ff

Download Submit
C:\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\vk_swiftshader.dll

Filesize
6KB

MD5
4cec1790083b47fd7ff17c87dc6607a8

SHA1
a77a3f8d9101817cab1fa199b5b4d08a337e224c

SHA256
342471ac36a95e0a086dc51e9fd17332d0d14efc2576b8cb382579a152464b20

SHA512
3c18ef9d9b8a3911404c1b82b6609fbe992d78bcb238ebfb81ce23bdb9cdd2c1d6b4f4ed5212d823a52585946c49ede1b34b667ded232007f26ef8edb491a2d2

Download Submit
C:\Users\Admin\AppData\Local\Temp\epsilon-Admin\Antivirus.txt

Filesize
231B

MD5
dec2be4f1ec3592cea668aa279e7cc9b

SHA1
327cf8ab0c895e10674e00ea7f437784bb11d718

SHA256
753b99d2b4e8c58bfd10995d0c2c19255fe9c8f53703bb27d1b6f76f1f4e83cc

SHA512
81728e3d31b72905b3a09c79d1e307c4e8e79d436fcfe7560a8046b46ca4ae994fdfaeb1bc2328e35f418b8128f2e7239289e84350e142146df9cde86b20bb66

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\LICENSES.chromium.html

Filesize
33KB

MD5
79ad34b7f1e8c88611c4ffa5c819bb88

SHA1
06c2b41b265a6d45b2cb92423794052024730970

SHA256
0a59727ecfffd1717fc993919657be75f6eb9c6e791324faad94aa7bc127681c

SHA512
297225c0c3df4676f11d6867603820ca500f5862bf424b922eaf7823254b49ceb67ebc9f62205336f4522db7a73b8071fd98b7ab648d2f3f13f6b0099b971a93

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\Spacetherapy.exe

Filesize
76KB

MD5
ad55e5a8a9241d5690e10e8b31b665e9

SHA1
9077b54f4afb0f771ed92681ec9d145669927506

SHA256
e6a97f961560b314108385bf1a2efcfa1ae12919e49285a48dc861a25366edcb

SHA512
4342c112326e050d11280d1903b94f5964cfd612eb2a65b0438dfeab21807b78e8e8936111b3e3e23f498963b184fbe3f173d4de9e939bf76de36fdcb658bd23

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\chrome_100_percent.pak

Filesize
145KB

MD5
237ca1be894f5e09fd1ccb934229c33b

SHA1
f0dfcf6db1481315054efb690df282ffe53e9fa1

SHA256
f14362449e2a7c940c095eda9c41aad5f1e0b1a1b21d1dc911558291c0c36dd2

SHA512
1e52782db4a397e27ce92412192e4de6d7398effaf8c7acabc9c06a317c2f69ee5c35da1070eb94020ed89779344b957edb6b40f871b8a15f969ef787fbb2bca

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\chrome_200_percent.pak

Filesize
214KB

MD5
7059af03603f93898f66981feb737064

SHA1
668e41a728d2295a455e5e0f0a8d2fee1781c538

SHA256
04d699cfc36565fa9c06206ba1c0c51474612c8fe481c6fd1807197dc70661e6

SHA512
435329d58b56607a2097d82644be932c60727be4ae95bc2bcf10b747b7658918073319dfa1386b514d84090304a95fcf19d56827c4b196e4d348745565441544

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\d3dcompiler_47.dll

Filesize
1.3MB

MD5
f53ee1e659572cfa484f6db1ba4763c4

SHA1
5ddfdc9171e88af5b2fa38faf4e7ab66d8fa3453

SHA256
9c7cf0e0ff0eee627db246baa6e7d7cdcf9dbbef4076abf640837277285cc86f

SHA512
c7c52ed3d0ce7223712e0e3af12ff4a1ac343c0a1b70fa00949435e33959d4a19bae4ba466c8430ca6ebafc7f9606e1a8b861a23c7560758a6fa3271f95bafc2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\ffmpeg.dll

Filesize
726KB

MD5
c0d75e306225eecffcda5c754eb68b3d

SHA1
6b28ffe9d09e4deca2229e04e11b8d1211eca3d1

SHA256
f994b142d1f604567a4d98bd2daa2b4b4ed760c6bd0c0d1b840fc45a0d31e1cc

SHA512
22f13676b21a5033ffdf19d9b4dae54af86d7649eeaaf624d6b5a0323d12cf6a8098c1274eb0943b320ff1e0075fecc3c9036d3323ea001ea9ba3e6bc24773ab

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\icudtl.dat

Filesize
128KB

MD5
a99b18be4b0a947d2af35a29129fa61d

SHA1
1e05731d59f0710deaeea94e2c03a49014f97e10

SHA256
78e04c04b44399f84eb9d87c81d949e403eb8416e12fb7bb97b08eccea8fb9e9

SHA512
c0a565704f558683eedc2815e65b6c79d1502373dbcc0c685064ea5af1ab92adbad8c8c9843197c57cdd895d497fe975effe755f9ca738d2ad463c38656593f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\libEGL.dll

Filesize
45KB

MD5
5c0d5a653fd5848aa6de172b779eea46

SHA1
f28e24624f419fd5de9175dddf791bf1a589743f

SHA256
2d1893ece2fb0d6ff74061c35a4872902f2ff69d21acec392d5b11ee08b18582

SHA512
c28afbd3765b694e618755c9365c2f1842951f92eeb902f82dfa224f78556e361ff221a56fa3b605f250edb6079dc611baeeb8b2bba9e197caa423d2ce74ba97

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\libGLESv2.dll

Filesize
64KB

MD5
f33600f9efbda7d6579db229e446c5b7

SHA1
0d533f4d6f4bdc51e210b5797e446642c2864a94

SHA256
aa32085b89b3b99201ba475f2c415cd4a678bf56c744476c3ab98762268d8bf4

SHA512
00fe0845a8374ee6856431f27bb2fc54c518b57eee1ca6064692a14d97a75a76747665af60c9ecd074b6ee6aedf8f96bd9649e42376652271ec470b015338c52

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\am.pak

Filesize
193KB

MD5
cea549409055b1c6fe04c6932740e94f

SHA1
fdc6f84f97d506e5620c9ae4cdcb6f857ddac3dc

SHA256
fab95a53ea884bcdd304acf6771e6ad77c2ed0b3d019ca78d3313f9665e64420

SHA512
6c4efb2cf1c58329077fb045b3da6929c82eb3e3a52ec90131c95e63c4ffe54e92e0db8d787dc74573cd1c0cb07b487d83a6a98ff703ffbed9dc28b806ac5d57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\bg.pak

Filesize
114KB

MD5
f746cb996baa4d4eee9480922f4ad09c

SHA1
f1e4d3ceb38031cc3ae948d88ec028a66c1525a9

SHA256
f8a57c4efce7a2c5409a0aef5ed2763bfc372290f7442949a6e010c1c93f0693

SHA512
bc612daa34bbd833d0e4494f306425d1436d231fbffadf928ff8fd9e7643aa17f403089389f5de0f551018b6eeac7981e433afc8a4793603e2755556fe765b43

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\bn.pak

Filesize
45KB

MD5
c8f108ca65a2289755830bc5bb347bd9

SHA1
e1b51b3800a99ccc38971dfe10e32985224d0057

SHA256
667ee46bd31327d24cf317bfacef560962f596f1ea690283d02a578044e54a7a

SHA512
79eb8fb4345aac3c32b369faa1047725887761d248039244b71a5fcbe000c037d46b69d6a64ae1bfa5a0e002b371eb62ff081dbf75ca4b35819612a682af85b0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\ca.pak

Filesize
71KB

MD5
d2de3a46ed356a52f5ab4e86dcb88799

SHA1
07f8e0911f0ebd6b1bda55c7c3952e29bbec0a27

SHA256
10e62d5c4702d5dbc63e6f8f22f69821bf90b8d93aae9e325099934bca07ef55

SHA512
95c0819895e9cb396bb1aa492fb80ccf30776984033338bed379da74d2549a58fa7d57c5c8fbbc6df272d7f730014d6612784ee4fbca71c8fd039ad97f7efb80

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\cs.pak

Filesize
20KB

MD5
0b8a2f14b9c5b45e3196045dd6478adc

SHA1
00cffc8177c1ff7af7cdf0a8168e38fb98b1bf85

SHA256
118d22e646ab8fb3f6680113bbfc97a16e8b5d1be582d73488795e845bfc52f8

SHA512
4291eda6159c54d7cc8c6de8be7c1936d5f10574ddcd878f98527524f8687338910eab3adc09ddc8d0f8513bab4af09c8031d0b88dbffdeab63b96a2edda95bc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\da.pak

Filesize
1KB

MD5
9ef41917784aea6023c34ac8a974c62f

SHA1
2dd0a19a8eb4bcb33dcc0dd155de817dd51d9138

SHA256
d6192d9c6e075b0d1c18464311c320832eb72a2c3d548cf3b00cd473cf33d4de

SHA512
863e486d14d5a6a8e739f94e80dc696d2ead26cee0f6b21cd2432e11b80a0eda14e31c0bda930f2809ab7de00d278e630e65edb807a6ae7bbdaf280692f0a7d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\de.pak

Filesize
137KB

MD5
a2f76deb231427db252713b1d370a2c2

SHA1
e15c9245e8f1a50d1ed0d7aa61bf22bf9e668d37

SHA256
d853202c9d590fa88ff7c2adc57917ca01e829b4f87d803d3be6a0dbc09d3af6

SHA512
67a293c5109ba729cc7833b08aabf5e464e54ac65e286137d228c76c407e81b733a01f5be6cb770c57bad539e7a0807fde7abf880004cda8b497a882e07753a8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\el.pak

Filesize
42KB

MD5
0386ac47a7494ebc1f6950a3d2282c3b

SHA1
8ad4cd6dc52692861f2e2770fe93b8e6c5d39afd

SHA256
b5d598c6ead7ad0cf9b501a666f5ac6851d8f5621bbb13c1d2c5fe302bed2cf5

SHA512
fa7f52387741e81d4b3efbefe73f74675e713182b038cf7ecaba7cbcf22c3f77e7cadb9203d34690641b1687164dda3d4bb1e6533fede26faaab8b700b1dd1d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\en-GB.pak

Filesize
92KB

MD5
66c927298884450c685d7a99ebbc40a5

SHA1
1162a96e4918c4573d13d42627e64d53b22caaba

SHA256
4fcb2b487dd902ebf5ff8d90278dafb23295a3538cfca138742be31f120a86e4

SHA512
798ab4cd62421b85b5821103b50c0007f9b048990e6f360108f53718c3edc152d2575cd938eee4686457ec7b54f30ca960c944cf181a56aed13a8ea99a12c097

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\en-US.pak

Filesize
113KB

MD5
7f265e4c9ef26d5f2edf59d9cd381ebe

SHA1
375d4eb00411e0e40c673068d625b4ceccfa877f

SHA256
71debddf737ed04beb9465dd2aaaa493cb7d165ce53e9e5fb225c8c73f28e11f

SHA512
6dd2df99de14bf10867050b7d6bf454f96d8e4ae780b3784534588beaa68d797b766ffaa21ade0162a853d41a1b5347775373ba3a06bc30f64bbeab817a4857f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\es-419.pak

Filesize
85KB

MD5
9ac418956dfa2b995e4f4b5cf50ec42b

SHA1
c3eb25cda0934a89fd0400894f04861707c8e129

SHA256
a75e5def7486c56a2577ffb4b3dd4e0aa88f5d1cbbc10043e7d17682b3441025

SHA512
f807dddefbe87a35429de63b477f50c9140864f33ce146d43e99a3c32dc9aa9e7c5e12357cdb3f6bca47d26ca6ff0b630dc91efde0cacf10c9846db8705cce16

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\es.pak

Filesize
91KB

MD5
0c06ce9302f2742f7b008d2ecb5b858c

SHA1
099d304283a0d5a939d4217c7e7f9a0f2301fe60

SHA256
e267949b9a497a0bb314fc89f2b3c15d67c2953bb6639a55f745b17d836ae6de

SHA512
fb49522635193c127de91b82ebdb45a97aff51f9e960033704701777cd1fd897be92c82e067fe3155744cfe93384bcc057c89a069d5aa2d312c8f1de62d3d13b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\et.pak

Filesize
102KB

MD5
97b51d94c27e7ec564b5ffdac793de62

SHA1
47d2b0e8d6d84ec6ea37b18368556f829005f1ec

SHA256
e4104a84af4057c2057e39caf88ff3373485160850e32e88af7a8653c25e7bfc

SHA512
7016fda29872e69696dcc33f29a6f7643bbe57354ae1e7ebe7f97ddd0b938ddc77d28a215e5619440d4051e64e2e4f63f59229723ee30788dfe7eae1eeafd74e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\fa.pak

Filesize
56KB

MD5
963633046d5d6a165af2629115608387

SHA1
c2bbc5341d93a3f2c896f7548242db5b767fc475

SHA256
2e1049695907b66191cb6e709387ff075d656a575d296813a0a6b0666891af5d

SHA512
7880a6a21b84677a43bb101717000b553e8aadb3ffc2996fd90ddda2975db9abd93ae0743d28e937368fdf1a0a2608e1d8d2fc319809b0c3104fa0c2c9c1a7a6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\fi.pak

Filesize
65KB

MD5
b90bb060430e3de095f5c1d284a00f00

SHA1
00e893456ccc9f3e07cfb1e1a31bb665757df66f

SHA256
80262e88e9c912ccceb2793276e588a1e53e78c0c9a07c80f845d9212f8c7dc2

SHA512
8eaa70408bdd87d904fe1d25ba3f4504163c9153e201f742c2ed49d0776d769a43ca2937045fe8f1ea8d6138ee79991c5d7d13a800776f046b4dc6e49412cc63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\fil.pak

Filesize
140KB

MD5
b69fee960d82bbaa106a28fd7847e904

SHA1
b8e4aff8de27dad6b605574318955fbf32a87139

SHA256
044104a8f2e54418b2f8fe44132ea6406b2043495564172895d2c748f2261fed

SHA512
af10eef2531a03e4767b54a0541b7501fef247ead879cc70238369aaa9749f7cbe30c3e6d79876f9f6b8b24bad58feea7b92b817db3948c9832b20052e6b4a1a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\fr.pak

Filesize
115KB

MD5
a616dcec486322888a1ed509f3842e46

SHA1
2b6d9fbb106396565ef4387dd64dee4aaf353159

SHA256
0128302c00938906596a8cd6e926678bbf229d1d0d6856d3899ae79c10c8c21c

SHA512
a372e3a662ca40e30eb1982ff1c7c1e9e0a75418168d9fbdbdfe864e306b902d2f85671a93335bbab261f3f24c7647568e903ea1965ee50354f21df0e262fa0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\gu.pak

Filesize
188KB

MD5
618692577af135f7c7f2f5b789f3244d

SHA1
d854332d157f9c9a08945ee8da7150d0c26f1170

SHA256
8b3c20a1a084ad53ceed3b46e37ec574995a46d6fff8738f435e393f0745e054

SHA512
15870ee6c79fd0a09244b498543f9e6b9b12a4e963e860ef5810de77c57658f6148b601a15688245fe7a829d022e788872d4db92a63d6c94cf047dce2c9c2813

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\he.pak

Filesize
139KB

MD5
8b622626d86ec3eb7a27c1266aaa1970

SHA1
c7f18d68788254be213d81d2c61f79eaef23d6dc

SHA256
a9af90853b0c50a63d2b07221fdee9937d532a57310191b688472cc85aa4564f

SHA512
b2ba3ba9f8f71c3fed782f19f0f49724ef3e9a07f61db5028f342f42d4f1d745ef81009f674e5f9afbd5d11f4f09adf037db8b27b3647af837681041587c38c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\hi.pak

Filesize
115KB

MD5
de8acc922928feb7a2f4bf38627b0736

SHA1
55988cc0d2bbd0db0fe727bac1256ac2466618cb

SHA256
cf75126ad2831a225a505b6ebbe0a0d39b56b2071bfeb4e57a0ee1aae712bd90

SHA512
9f7bea885085f9bf65fdc546daa82f27d1a6e6fd53b012ffc4367e71fa9d1a35a4e36a0b753331a40a29bf7aaa224880f359477fb8133ccf6a8a7f57069845bb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\hr.pak

Filesize
1KB

MD5
0eb82a469b33b2283c2ba3801ed4c0e5

SHA1
1ea8e14155814b81f338123ee4f547e4d7fed8e2

SHA256
b22d04bf1ff7e671b161a7045a50f97984c3dc8d423c9b7d6ed3f9946ccec87a

SHA512
7e382e8749316a8a732b6a051d52e348effea3450ee6010cc3bde99132b11b7641f65def0e0dc7539f44c04f57cf7b91c3f15d9306fe558ddbf2058093e5d057

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\hu.pak

Filesize
145KB

MD5
f4c0de0a17f3e6a53f221bfff4aa64a7

SHA1
e82e59ecd1cea48f82c97b2dd5ba87dc6f13251a

SHA256
32fb888b7396b23a399cc8b8b58fadc8a7c04e8ca417f8f8772061803529f470

SHA512
171a3ecd205aeb1479664761dfca6bd450c471a7137296f1164df0c3641a94ff4d3fe326deb7e8ab6998eb6df49b1b5f8443ecbdf8b4b2f70dbfaafd9922e164

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\id.pak

Filesize
122KB

MD5
bdccf52de61554dcac07536c2b43edc6

SHA1
0cf291ed2cf2c9c8bde04e3f59d4863b42e10322

SHA256
a4773647c12cf7facf511be5ad583c95d1ac020e6d02f8a5d048c85d15839f99

SHA512
ebe085d899dad8d4fe481ba9ab4251d46415214c0721c9a3c0bc0b52db88f207e5933c2f6650c8b0449edc980202561dac860843d71b1262142d262d2c919d15

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\it.pak

Filesize
87KB

MD5
78d77b788a974c47baead7e4d19b9ec2

SHA1
d18a9144605391ccb4fdeb9e79a9ac5ee2bcd7a9

SHA256
f22a92b98f5def597d0a1aed67485a9148d035bfff2834889ba09c46441f5289

SHA512
67ff486d1d02a86c10344ae7d8a5bcc1dce912aa6386a5ae8804eb318433cfda620576b9c01ee6feb6dcb522897220fd5b71e88b96328e714e11c7f4c5d8f0b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\ja.pak

Filesize
39KB

MD5
4231253fa62f512e556c7eeb8632de2d

SHA1
28f3490d54134073c31e6e691568f0dbb284c29a

SHA256
9950ccb650f83a4547c6100ca079b84915bff07342cc253050204c5b9cba3ec0

SHA512
25fb42283d89972b6bafb17651f6f581cd38c04c4f9ff4969a47d93c09b2322d9ffc1896b867bf14fb7d5e18e4ff272e2f5eeae8ced5e4b47ecc04f98210328b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\kn.pak

Filesize
69KB

MD5
d3b460681c8cef5b572916794ec2cf89

SHA1
2d009e610a60b2f87986b95c98510d6334645ef1

SHA256
9d86d80ac435858bdbd561dcacb9e01dc6b0cc40676267eebe27130e7eaf74a8

SHA512
99c83b04107fc8ea8caeda5837a4945b84fa27df25307dbb958c47cb7a1499d3e000f3ddbf3eba0f60247a39d12d5723ab3898a477d3da9cfca81b4c67f363a1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\ko.pak

Filesize
92KB

MD5
84c6ac23f5e28e579a6967e91ba48037

SHA1
0c81a0bda7a786e5ac36e1fe1e9430425fb3a4b3

SHA256
ceeda42146ef018582e27c60894c6b11491b355341596509d2cce31b2887008a

SHA512
90a44b7a8f3497ac245fd3bd4bbd53379268b1dff29a27c6e2eaf3f5808e1bf06847d6d1c4beec388a79cdeff4ebbcfdea7792cd4002f21a4a1c551a15802b01

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\lt.pak

Filesize
69KB

MD5
d3605b3f4bba6492f6a996a8d01d336b

SHA1
6039aeb3aed3330d20867f94950d6241229f10b5

SHA256
929a1ceada91798909bbd115ca8e525d639bb34f05401cd578406dcb40315b44

SHA512
0bedf800547d01aa8e2ddc80a0bbf98b62d91e18d03db530d43ce40db44b63cf6689bdc4f79213e7a73ce848038f1e3d9f33ee7ed83f84d74f72b6628c4907b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\lv.pak

Filesize
80KB

MD5
a242e0f743e32cb8b37c2242f635d23a

SHA1
9c4be3d667d78a5e2709e8460152ac1322365302

SHA256
4f209366789369e327c85601b207dbb27f21c78854bf439fae4717917507184f

SHA512
6e330aae5231f0f4ac33e992967792474dbbef6834a74bf59bb6a4542912627a3338cb60b67aedc2ed84395b167c13b16f6ff2b08580fd8e2574907cd4ba65b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\ml.pak

Filesize
37KB

MD5
185cc8767707d080eb5450d229c3972a

SHA1
1c0343f071ed67846fd9ea21fe4bbaaee79dc9ad

SHA256
37d9a293ae4cf271c1db5ca8e86ed65f7eb89f758da51c0c685db96e82416fa9

SHA512
8c176e27dd386afe075c7bb71c6af878b0ce7aa7bafb616c7ba7e9d8da25c2f981177221e955dfca79fce0bdaed9c0c388b3a83b1dd09550a3ce1968bbc264f2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\mr.pak

Filesize
92KB

MD5
2c50f44b0e64b40185fc7de4179cd7c0

SHA1
6626ef9585d2b0b75fb9700ee3bb23776550ee87

SHA256
9214311cef2fa9b52cabfe756137fc391c662dc9cf91b82383446a3d048a3030

SHA512
0dde2da4329ebb5701f96bbbb666be01637347e3d28d449dcce1d71ce7194c74c03bcb30bb017a528f66d760f9276e9ab3df0a0a7bab9bd3ec25f8df08aea0c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\ms.pak

Filesize
82KB

MD5
a6df6bec9cad41a7cbe7b77400890d50

SHA1
c88ebbd570bcd996d79844c4105db3724d7fd506

SHA256
d1c632c64d1b0cfa55691c299d1db30a7c4cb710edbc18e4308c37e70683b3b9

SHA512
20244093e23bea00feea9fe46a760e1799dc4b70c754d28155000f9f4d6fa0e587bf4e6b5e1ff60909cfef55248df93cda16d1d11872d22b3dba3725e300f38f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\nb.pak

Filesize
74KB

MD5
bed3bc0c92cf2e5ef3745908e2fdaba1

SHA1
61d30464ddf99df7851968a0758a056a82725357

SHA256
879c51903ae10aaa80da05c8e2455f707384c3f05ecbf50962388bfeca9ce327

SHA512
f620713b34fb173719d064ba3393fcf7019fbdd018f55fc97292a5263872411e2077014b1470c25b1ae6002f31b17e1584157bdd92a60d6f97deffdbdfd96b21

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\nl.pak

Filesize
82KB

MD5
b44ea935fbdc5873ad18260d5c3c78cd

SHA1
f6dc1d19887ffc1eb01a4c18d7c01b528ac4f1bc

SHA256
431804ad27c029e111da6018639b64d1165fdbcc0790880ae0055c2927c68456

SHA512
1e1fac21ee8a0046064ff81c8a53df17a009b62e48dd883e88f42d81a93ac140df2069d5906d6300e7ec44a0bab9b5f0dbb9dfede477d18d5ce7471c3428d129

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\pl.pak

Filesize
41KB

MD5
c4c1deea3cad2d911425e0d009d042d7

SHA1
8b0bd1477d430ba5308162a4d67e4f05ca9a6444

SHA256
e26f91f1643acfbff0b820c670af5576f366b92492196f4cf4d7503df93bf0ee

SHA512
80c71f450aeb95f20697d9b05c0798f2b23191cef97758731ae95b7ed22b4c06108eef6fcbede142b52d323fd91d466cad0599530fd327be1ea2893324493add

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\pt-BR.pak

Filesize
92KB

MD5
8cf77df27e2643e6c188a9b1791c595a

SHA1
13f188d9b2fcb9d123a558b989eddc3a599d2b8d

SHA256
3e040e2118013a20661bf08aca43c45c07a8275cd9ce52cd8a9cedbb56a70b58

SHA512
a2d89bd3ddbdacb13a3d5dc08aa6e9b3c7b1e06c88c11858131160e4e813735653ca102c6e14d1af74c7e3d9f4e5375ea90f3b2daec5dbea947017ad2ddf9297

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\pt-PT.pak

Filesize
73KB

MD5
0e32cf1df496bccf6716d159d8237d5e

SHA1
efa5b523b7d534721259d60f41df76d124f2e205

SHA256
18f955482cb0392d022463f3de83dbc35f541e487820f9f9427b0896b2fbd9ed

SHA512
071637ae55ebca689740fba0b1622a8730782264246019697c20a7c78f5af197a7de438daeea3f7ad980477b746044b3ca2bc86bd78d294773d8a967785585b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\ro.pak

Filesize
129KB

MD5
149467b0b361255956cffe591f3ae736

SHA1
d2f09d68b0b9c552a58e05e94586332f687e1b25

SHA256
1c3490e59d01583cd0c2912a9d88c56146b95889ad289bbece2e4986c4324bdb

SHA512
c20fd7083698d1a9e730aba724c93e25ec1241093a21dc2d6219fbfe42bda334c650958b8654344de71303495909bb4b4d1a6d26117af94ba0cc077146a130b0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\ru.pak

Filesize
38KB

MD5
f0e458d521184ce327236378993b58be

SHA1
2f8deafc49a3e2dafa241f168388f8f06daaeae9

SHA256
d27a79263656665305841ebd290ebe3fe2f578fe4e239a19ee85356853e63924

SHA512
7e3db1431e7e00bbb0f0882642dda76da2dcee26967825dc7b5836467c158a42f6612ba01170d4264025f5fba98f8a1c155e01216ccd4a608153444d9f59d19c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\sk.pak

Filesize
61KB

MD5
bea819c63996d4fb76eac5b1210f1a0a

SHA1
1c824523fb4b14fcba953b29538fa4b6f437b1e7

SHA256
21a875df3d14c3adf385055085ba6e499696c94136386cfbbb9171242cefc30e

SHA512
dbd6227681a09bf2a38191ba1dcb08ec2839cf4f8088feb27c041d2ba8f163fbde656577f836c94c3b926293d11f62011cdd0318f1c4a1f33d7c2ae431d58fac

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\sl.pak

Filesize
135KB

MD5
5279e70ecb386eba5b7560a0a4ad3810

SHA1
4019002eec942dbf6ce27dff0fb8b6b54629e1a9

SHA256
cc8ba4283529525f5f5a620d75c9c30f53e7a5dec4a75cdd1fc29b107f1e7488

SHA512
db09e0c34d7589372619438cdf95a0bcb34946f9992ac29ba33c9c3188d8f43ea3d0e3d2908dfd65f70c2a3f3b2889936b7ffb7596c3d1612151be8b1d9ad758

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\sr.pak

Filesize
76KB

MD5
543eca249be1131caa4381651e111949

SHA1
a40d79153ce51b3686d408b262a4cd93cd2b90fb

SHA256
561649615cbcf11a9cbf83119ef74366c687e47dda1610f0cbe5c1176a62c9fc

SHA512
77f347cc3cdc675e39541e3a8d66dccf6f77a5f27740e627d8e933eae242d78e0399da0d7cff28ba308fe489bda479946fb0fa10a02cc9115cb8e054b9c595e5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\sv.pak

Filesize
105KB

MD5
f89f9e2bc92404a885d38e5a42e5b2c4

SHA1
5a1f2d9afe3a66b208c9906ee328ee040cee4852

SHA256
d544ed223213e9ad72f3d47d514068ae4879e7313eb80df1f31c11a1f01a6f7b

SHA512
26c1f628e13c330272887bd1ab0fb87e0e00bce9367f569d22e152e48ae7113d7018e8fdfb5fb01c587c4c654a9d4b98d630c93fb84580d96d46f7f28b254cd5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\sw.pak

Filesize
41KB

MD5
a01ec051d0cbc25c08d40977d0760b2f

SHA1
5403b308afbc022ef397bfd5f1084cdf9c09669a

SHA256
cbf3c2b021549a09b2eb98516541613af0e66971955b31378bef997d50a97a6f

SHA512
cbc0102ef56561c9a75f079691e39c0c485eb6578386e998ab77ebd4351ae5a245ccea0fca57489c3e8d65888db50c5c038bd508eabb4710aa478d13a0a9928b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\ta.pak

Filesize
26KB

MD5
e0ce34623ebc5ad522663b01236db5af

SHA1
a74fc75d9afde322524ece5aff170ca1b82fea11

SHA256
024dead123abe0a9574ed8b9b81fe97bdec9865054da3fc213dcd0af122e0e67

SHA512
36eca274d3f7fe07b748d2987e2bb2cafbd0ce7d1e2c7ff67fe93fc9a1231cd66e56d03adfdde0830245cabd493f219c3648ce071da9b9ea43eac98c381f172d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\te.pak

Filesize
99KB

MD5
8673dc04a3b519cabf49e1975ba8b03d

SHA1
f998eda3bee37e895a5d18d4ab31588ec4b988cf

SHA256
ec35a594231f84a88a069633a8c05bdd1d7261969e49d5ef1d70ae5c5f3301c4

SHA512
7708ff3be5261ccf4bd9bec97c600d79688b8e27e66feccf84ed79eb5ba0ee1d8fa994e14d579afc4ffada3e828ae225f8ab1729a8f8eb859f881160b799517c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\th.pak

Filesize
134KB

MD5
847285abe91f5984ac197a6fb26bc35a

SHA1
4d761d74d43334b32fe70ccbca171d008642be85

SHA256
116bf116ad070f1a67da85cf0eee713a84b7b7258aa83a35ebecde6a28a3ce39

SHA512
78640ba786ab02f90e33d133d4ebb3eea761060758916b0646dced0a5f59bc6e3e6f418758216caedce0844e6c11d5921dee69b2c41c13c32361064de2635d31

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\tr.pak

Filesize
27KB

MD5
73719284ceaa75d90120a93b73055de7

SHA1
09b34f02336cbc0d4ec136c1c2a222b34dfe1da6

SHA256
54f3ca6f6d8edaf3a2eca2d96e1a8b5044c7d77ed432cd5d2e7405859529789d

SHA512
fbc4470ef4c9284f1def83392f01b7688b9d1b55e6899df093ad36e3cbc59ac8573d92bc3c29c7bd00c94758d210b371c9e72cd9de51cab78f40304125c96142

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\uk.pak

Filesize
81KB

MD5
99c6a6fcbdb79920e194d180d12a944b

SHA1
7bcbcfb1591956dc0a7bc78302bc58b630156d41

SHA256
b23d332cbf4f6912b58252342a0a2529f38316590d03d94c60c367e759c66c98

SHA512
235f5e3dddcf51d1f686a2dd4caf439b9bade1067598dcdb5c05f40db7193d74c8e08ed809dc31f824a16296225b4bb601a7c222f6157de67b03b0ccb890ddf5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\vi.pak

Filesize
24KB

MD5
646ce722dd1d0de6e96bda163fb2250c

SHA1
4d7588f8bbf64f3dd14f83867f6ad54c3667cc84

SHA256
b032d9007ac46f1af518f0b15768b271e6512ec1c4a423c803aa4220e2d77e1a

SHA512
b2b37d2a9a52e8402cee465699cce95f9b68a9d72d76a0b915da5e72ba8cc468e3a7c42ada22a94a9640ab6b4643ecd170f89299cde1c44af3d7c52f41a86a9b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\zh-CN.pak

Filesize
54KB

MD5
4eaed1a98fd4d61d732a7b6a8949eaf9

SHA1
76e41edac6ea162483543a55014e247d0fc3e48e

SHA256
31ce1b9e83543d7e9ab6c2bdb4df4fc57a50a571e749df4148cada0f57a41251

SHA512
8a1829a4531cc36334fd57abb8f4166e5ac073568305aaadda2971b80c08448fe88467a6516736d1a98eb44eaeffe7007ecf069cade60771cb99f0694f983566

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\locales\zh-TW.pak

Filesize
114KB

MD5
3d65c602fd24a760819c285d09e724ea

SHA1
361009e3ba4bfb9150c2857a94c9653a4110b68e

SHA256
84dcbb01d9c7a10bc917e03dd71a308b26f3039fa9396920a1879e7b5729e6ff

SHA512
0527313c7afd7334ba5a3e38d939742290eccd913f623dfb116663a4a3463b3e19efdac8cfcc58ec60bf6dcef9bc22ee90e57bafbe6d9a8ac02d5dfe15ee642d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\resources.pak

Filesize
125KB

MD5
a0e210f0dc12f148b7ac603db2ed9d08

SHA1
1740b45a8a0074a07ad5c33d9638fe854ae2f37e

SHA256
c535512c21cc818016f08905cd3fd0042a4fb2358f7b80fbe52e4c66355bc81b

SHA512
f0bc06f11a6a377dce58a9235e4d4bf5af6ef658a1c157fb31ff6a59cb37b1a2cd99d6fbfa4316c1373493e4e0eca5b5539ad450aa9933156bf06ef1b8270aab

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\resources\app.asar

Filesize
435KB

MD5
aa8a8ba6c9a1dae7b20c7333f4a7b7dd

SHA1
f909ea563bde42ae4e0b6de0e81e110afdce4086

SHA256
d88f5cb9895884df2122b1d5e6f2083e198b902cde674d7d703ee8dae72cc820

SHA512
a6eca2a7cd3daf26ecbeac8744c5b152347a414dea02852303142922d7f5cae02da254f35d64272766a55698b044a899bd21b3d12aea0234f39927994e627956

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\resources\elevate.exe

Filesize
105KB

MD5
792b92c8ad13c46f27c7ced0810694df

SHA1
d8d449b92de20a57df722df46435ba4553ecc802

SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\snapshot_blob.bin

Filesize
113KB

MD5
58c7a38d4d746746bc9adcbc95d0a772

SHA1
70dc283d4e3a38fc1234297547e36f6cf26da0ac

SHA256
346b64fffaa006b6cff667770a5fe560ef6aef26093b59c862f5058eb2e304a3

SHA512
220d30efff77e10fb98c9fba14d2df68aa723784e2d3ecad43c753a7b27ebb899262470139e155661e852a55505d771df4220cecf1801e2bf4cbb072d1375deb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\swiftshader\libEGL.dll

Filesize
449KB

MD5
8fc5c3b6c2d12869896b391ce9047ecb

SHA1
9568df98d3cd12b5110bcd9879bb1ac71a2cc4df

SHA256
6d24ef2dd27e80f898e5e3569db01229b94336641944c9456daebd8f3991cff3

SHA512
c892330be8d3d720821de77a5fe510b8f61588e7cb64bc3359b1150168db1ccb6de108289819cb338bf6d3bc75d38747481f0f31de5a8c1566b9b18ef0821908

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\swiftshader\libGLESv2.dll

Filesize
569KB

MD5
a483b97fe4da71af9f4d8e54b31866be

SHA1
3aee9c6169f370d492b6bfada5e1351f4bf44b4b

SHA256
7486f3ae4a92b0bc964321e132f8679f248880f8e5c47e656c79452a69144d0a

SHA512
72eed7545ca2e0b0bac6d7634c911c607081ae09c0c4535a2937b68e496342ff36fa8760c7fb704e9230c4e3544e9883e3a555e7f726cef2a32fe04f9c4dbdde

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\v8_context_snapshot.bin

Filesize
362KB

MD5
58e54ac213d0da3b6e32b865cb4a8128

SHA1
1e35f3146059899973187ab0a18f03148f2b7a46

SHA256
6aabdf074967afd876ca4cf3abf1fa922003899f89051a0ea2af307bba8477cd

SHA512
f3682b993eea210c91c3df0d2fd26a09bb9600878bfb5189488fd17a87b8fb67c3b1454ff41c76efb120480963c64715290ee683bae82cf46f47ce75af3fd149

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\vk_swiftshader.dll

Filesize
1KB

MD5
6b1d7a965d836ab921f4cc1e9bc92b28

SHA1
aa9dc06e4cb68fd7730d1a57c87ad02a5f9e2c04

SHA256
5e10b79d2acbf515ee616e50095ee7d3c3ae3c019cdeb4bbb37a4fe7cac5bb62

SHA512
48c68c727fc7868929370b5dc8b1a382eb6fe7bb42e5f1a251a5a2ac7535955e5bfbab439d82cd6838dbae280ade941e0dab5a35c2f2c24b0755816be7c6a938

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\7z-out\vulkan-1.dll

Filesize
23KB

MD5
44d49985a137112474c4b3fd40636918

SHA1
9bd9a785000e881c45b932daef1531e4fb46209c

SHA256
9315dde7026797aaa2ce2d4cd08c592a9dc7df461f2b1114c079f11456c58577

SHA512
e9d5384d6dad783cbb888fa017ad54f31e51e701795ec6aa313aa20bac8eda4b18e279ab84a724f75d7f8c41dde0fb294c858ecdb738e2e824ab47fd97250c88

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst4D66.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Roaming\Spacetherapy is a game\Local Storage\leveldb\CURRENT~RFf767d5a.TMP

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
\Users\Admin\AppData\Local\Temp\0cba4466-5d52-449a-b22c-a98b3233de8a.tmp.node

Filesize
272KB

MD5
9ee507ee765587ffce15426cc28ac7e8

SHA1
2856096d88fe44c12ecd9f1dd1532ad72855cfd4

SHA256
d29c7a2823a312bb22e0d64a0108cdf32b4d82e3d962e9a44863ec36919801db

SHA512
8eb5b01d1ccaf024b22eb30022ea77e233c827597a9610fb598c362537733fd0ecd49e202780185053d517b4f7fa2d2608436dd3003d8665ee248d290739be51

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
473KB

MD5
8bff7d67b9f19c9ce893c3769c911053

SHA1
76c3be350e40459658812c73b512fc40cbc55d94

SHA256
8e202de6cf80d9576a8c2a164573e78b9678b7fcdd40c9b7687dc49c9d9d73b8

SHA512
6fde0f991282bd2ea7a4a4024c4077e17af0a61ba002dc96fb7e1c367f69a3ac4d0cb8520faf10ec7f61d352c02d963c739c399c02088f80df73644f0036fc6a

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
267KB

MD5
cf01359708d7ed702a3ea393ee1229a1

SHA1
b697c9d5c53fa044b6f9fe0504480204c1f3ec3f

SHA256
955032b76a308573d9a3136cba4d6bb5f2825d97d1617a4b491d0fe25444ec70

SHA512
945658b5223881e7ade15122408afb19c9903cd8ebfb58beaa1d3d9b66d90cb25c9ed690e1e4b00cabd978999b2460d97994cf28bf9ba0a6de2b8c5b1bb00ceb

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
157KB

MD5
8f71b7b5647eba02e41b5179a9e4e19b

SHA1
f2a99f611b2d2471f459cc8dfb9699fdda7bc888

SHA256
f15df81468e0a0417a64e9daacaacaf1dd1796a9094072d4c70d4d9f47e17b8c

SHA512
6bc6c401e46dafc4c5cfb520e8b0fb9cc42831dcbe39f173ebf31a92f5e81663d6fd99fc8fde86f006af4a6da41ce28d1d66b9388e5f57bc4215cbaabca517f7

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
64KB

MD5
07d2b422c5842095590fada36ab5b3e4

SHA1
a20e829082752d2452771a7db19a8826168f3ba2

SHA256
14baf427bf9ed6a1d73664ea6c9a45f883d986f44990e26abb52c1a81f10f12c

SHA512
6e3ca4c04d2d6cf8e76251eebc9f4a9342e3582e352a91489648a783a0d35bb34097893cf47fd8c005ed25a0e37210ca57c64504a2864ec32b45826a65162686

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\Spacetherapy.exe

Filesize
178KB

MD5
4a70116d1111c896e1dd88b15591986f

SHA1
12f0e7e385862c775f92dea9e5d240913ff2852e

SHA256
16564b9cfb27ec16d5bce30012680792a6c96d720f1e9a5ef70af0e99c0e2186

SHA512
d09512cd8d331c2f7938f6f1c9bf626393a400329fd883f15278c4b3b10e76bfe51dca6a4499a81dcd8698b665669438825d2df2508b2797c382901e23d51582

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\d3dcompiler_47.dll

Filesize
434KB

MD5
38f98a72d446e400d2600485b345437c

SHA1
7ed3390b4f6dbfcc41f01c1ec8b00334e7473388

SHA256
d5f6ce19e45d7b04e630434b05545d5419011a0f21cbb62d4fe1f683ff30c8bb

SHA512
4cc86bfa9b8ba12edae6ba84288211de5a51789cb11b239cfb865a0ce5239d9234cafbb1b0534c9780e0db2f4d2d4d4a0af5b2e5e0c33f6b893df156f782e769

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\d3dcompiler_47.dll

Filesize
1KB

MD5
f9a85f5c42ad273c48811517de2842bc

SHA1
278ff324449228f559dd50ce553906e586eb8d23

SHA256
f96462e7a6079c9c1b635f661a8860903240b026f4c0258980e43d35eb92053b

SHA512
fc71264b8bb381aa0817b79729f6bd09c0fcd34465c6c7616b85a48d83c139f730da6a76925cadb59e98c9ad135645fa1e67563318daf063b7cbabd43b0045e3

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\ffmpeg.dll

Filesize
372KB

MD5
2254b8b760f5ebe6eb1d0f604bfff552

SHA1
03d36d224ecfb10ac42c32df9ebc2f8b2412e138

SHA256
e0ff6790e500036df8a6fc66be4028ee20895eaac184017da0e9f67f9eb2392e

SHA512
d447c4f09ccab1a0c3487f441fbbc8ee317baa16c3892c905c47b79f0671f4844857525150ac91cea875a2c146d4002be2c4f2d0f927bb0faecc631ce04cd8c8

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\ffmpeg.dll

Filesize
33KB

MD5
4e4c1e41fe904810e36e0f87b73857c5

SHA1
72c51b92bc2d138fa5fd5dfbbe8a8efe63deefe3

SHA256
cc97da1801fc50087f739859527f7359ded74a3a97762197ef0a896c42168ac8

SHA512
5494ba466007c76b299712ba8e35ce000f43ed32de8f42f8bd368e3823bba620ab8e87374aadd2dc065f092a62639201e6782783377022df44097638d1f69647

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\ffmpeg.dll

Filesize
552KB

MD5
f79ad4316b4b5e08145916afe96f9682

SHA1
ff11147a9d18942fab36f3828a67e72d6ee0f923

SHA256
5a5b377bba5e911657cb8b7539a4f4c83e01fb0a7d07b42e18060654c6066687

SHA512
6ce147073d295ee023e6be34e5a1ee210ec8f163e89dcb38d5a9c74ee960a1daf3382a61ced60ccc541d2ee0dd601e0a1717f681b8230fed6bca5458542f8098

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\ffmpeg.dll

Filesize
157KB

MD5
5ebb07d6b59e0ecdabf0bab339e1c82e

SHA1
7c49cf20b9b5621123a04aafd401dd1e606f40b4

SHA256
6f192f01967bf76f659813179e21176c299e13dce307cce536dcb4de88fb77d6

SHA512
20b3b33d24cf32a7228e04002ab05d3634080e34a4dff4c3fedcab9569d621d2f3d2349fe7f81a1d9047a9990a7f0b3506c98305d0e4e086ff8872b9c5de39c1

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\ffmpeg.dll

Filesize
1KB

MD5
585c0266254d32ebe28ec7d8a6ae3cbc

SHA1
600f30d5a04e4ce5505466f4d8c125381b9937d7

SHA256
cb4549182826f5b7965d94049175781948eee5174f59d4ae17d0993c797e0024

SHA512
7310684d24caf2a880e7983e38027cd379ed75d1a33e7af3992497e74dbfd7ea8671c1df3353235188c70f7a01c3b2ba74fd9c0a88531ecc57417f7fc378fd19

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\libEGL.dll

Filesize
168KB

MD5
f37e9f70bc898cfb25660afb2ddd9ef9

SHA1
2f1ccac07f3869d5d9c7c4474475951c93abd651

SHA256
6e7bca00acc4248d631d00e3cb1bb21cf34e5972cbee45fa654aee897dc64fea

SHA512
d5268710024211fbe17c4431745dc353b7182d28d2cad9ec260aa60a9b3a890251f44b3e760cc00d0179731c261791fcc982f636e4077b688b14a69d27126e03

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\libEGL.dll

Filesize
92KB

MD5
02274bd1b091cf185898cf9f81436b89

SHA1
a42a055ad98a2f590cf89a8d900f0fc47d14da5c

SHA256
ceedc26fd20bed12cd8a9509c390ec2b71b5339e64e6cd113cd6f72c7ec0e4d3

SHA512
d5d152cd57ee146f81e0a97e20d571c1c935aff562092a5f5ae9400c55d355646013bbfb964c15580a02076bb67801e4d7ddbf00badc51415d9ae576111a7c19

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\libGLESv2.dll

Filesize
117KB

MD5
62b1fab4b3f4207792fdfa5001c6fa84

SHA1
a344db3640054d33c9ea64e9008f72629d0708f9

SHA256
b9c7c396bccf191c6a6c47e554cfeb5e9f974ffeff075660fc0910a536c0ea4c

SHA512
a3044c25d5f294f051e8ebbfcaf7af0826bbcefe54c4ea34fcf5392517024abc761b928241604024bc71eebcc1298b959aa4e457733c8c6bdee90e9236a0089a

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\libGLESv2.dll

Filesize
35KB

MD5
20bbd5851d294f7ccbfff322c0bf1cd6

SHA1
85a7a779daca3246295fbdd7fc24df9e0ce6d533

SHA256
8c8461e0f85001c24e2c89128c1946a4b3a292c344899c5da0fb58d68df0f70e

SHA512
b88a035a994cc3e93b8ed818359dede9832fa32f3bd3285976a9be9b998d49932a29a6e292af3a410d71a3a32338f244b0974b9327271d922462f343405654a4

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\vk_swiftshader.dll

Filesize
277KB

MD5
4cd9cfb9dcafaa3df2a0cf1bafa31635

SHA1
6e8db9ac0428ff369c3c7f99272092e0e814aff4

SHA256
c2f5f905f5c9f22f4af0e3a2191e64a5c8fa4f26a0fbcb2b2009589c9f9b494e

SHA512
a69c448a44e68aad4ca8b707865d709b3f022b358d32bc7a52c5abdf97e06c1eb293523b7abf068ed07e02d118dca06c52763c57d79215bb2d82aa8c069a9c09

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\vk_swiftshader.dll

Filesize
33KB

MD5
3167525320b65ce06751c9abce0af92f

SHA1
917e912d6b33ca92857e94db0ee8483346909be2

SHA256
b51c2a6d64e6e77f8d0c5c169fd28eae99715aa7cd43618bdb1b010d9226cf26

SHA512
56f46234c47d3632b0c04d4106c21a539aace882a6dd87a59e5b19c06bb89d2b7c02b228721578a2af4ec066d769c36c3f136400e6e48ae5dc9b4aa8b0806ec8

Download Submit
\Users\Admin\AppData\Local\Temp\2bGQfCnmLX0CEquW5eyhwVfGDhY\vulkan-1.dll

Filesize
1KB

MD5
136cc9c74baac0ff841013aa10f3de4f

SHA1
35b852cc777a54e34a6555bf675c2306fa5db42e

SHA256
e678d51fe54b05122ede33f3f64f5acc5ead48db8c7a3723a629a5e57e79c953

SHA512
e06b20af1a146e397b5896f7f978f6d0e781dfc5489ef80f4a6383f54b596da5d64980bc0aee583323d07494944fa9dc107e0695fbf17a9824c836ead2d2d67e

Download Submit
\Users\Admin\AppData\Local\Temp\9928a032-c086-4094-a74e-fb0ba8b63fd0.tmp.node

Filesize
98KB

MD5
c26dc99ec7408fcabc261471af14fa17

SHA1
4a74bfc375ecc2433f6c33bbb854bd1711a388fd

SHA256
52d03ed79b48c9ab50d00eeada1a37fe890e1fd6c98e03b311a310a786dc89df

SHA512
362e0d87c134ef0b00c99813d2609991fba4bf22e3bb9055718a2544eb5caf58a3d48f8acc4d75c1c064d8e3a824d011138fed3a426f73aafa96b9351c74b7fb

Download Submit
\Users\Admin\AppData\Local\Temp\nst4D66.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
\Users\Admin\AppData\Local\Temp\nst4D66.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
memory/1628-581-0x0000000077BA0000-0x0000000077BA1000-memory.dmp

Filesize
4KB

Download
memory/1628-548-0x0000000000060000-0x0000000000061000-memory.dmp

Filesize
4KB

Download
memory/2452-590-0x0000000002410000-0x0000000002411000-memory.dmp

Filesize
4KB

Download