Analysis

  • max time kernel
    95s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-02-2024 02:48

General

  • Target

    Lunar Client v3.2.3.exe

  • Size

    1.0MB

  • MD5

    0814a485d44ded97e275e8e80f6c17ca

  • SHA1

    69862f6fb82651f3a097fe7554440537ea0f1a90

  • SHA256

    560b03c4ba18e5a443f74a69727db0eabac6f455bb836757d620cc51615a92ea

  • SHA512

    bd9abe5bd35d21bb57be9e757a6e7293f9e71738045fff6b53788e36bd442d1b8af21ea38a528ea0910434cc32ac610fbaf4200a6faf615828f47d8b74987dbd

  • SSDEEP

    24576:s2Oawk0MDhozjDu173pG1szLSvJwnHNiTWQC:MkPDhEjK73pfqvCHH

Score
4/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Loads dropped DLL 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.2.3.exe
    "C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.2.3.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2136
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Lunar Client.exe" | %SYSTEMROOT%\System32\find.exe "Lunar Client.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4084
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Lunar Client.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1752
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "Lunar Client.exe"
        3⤵
          PID:4052
    • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
      "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe"
      1⤵
        PID:1320
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "chcp"
          2⤵
            PID:3296
            • C:\Windows\system32\chcp.com
              chcp
              3⤵
                PID:3936
            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
              "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\launcher /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\launcher\Crashpad --url=https://f.a.k/e --annotation=_productName=launcher --annotation=_version=3.2.3 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=25.9.8 --initial-client-data=0x574,0x578,0x524,0x4b8,0x534,0x7ff62dffd208,0x7ff62dffd218,0x7ff62dffd228
              2⤵
                PID:4028
              • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\launcher" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1912 --field-trial-handle=1916,i,16256063063562596765,17232827026297074064,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                2⤵
                  PID:6656
                • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                  "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\launcher" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2220 --field-trial-handle=1916,i,16256063063562596765,17232827026297074064,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                  2⤵
                    PID:6740
                • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                  "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe"
                  1⤵
                    PID:4536
                    • C:\Windows\system32\cmd.exe
                      C:\Windows\system32\cmd.exe /d /s /c "chcp"
                      2⤵
                        PID:4580
                        • C:\Windows\system32\chcp.com
                          chcp
                          3⤵
                            PID:5264
                      • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                        "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe"
                        1⤵
                          PID:1524
                          • C:\Windows\system32\cmd.exe
                            C:\Windows\system32\cmd.exe /d /s /c "chcp"
                            2⤵
                              PID:772
                              • C:\Windows\system32\chcp.com
                                chcp
                                3⤵
                                  PID:2428

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\.lunarclient\logs\launcher\main.log

                              Filesize

                              3KB

                              MD5

                              f9432b0e2fb10f39abc1f1e1c324cdcb

                              SHA1

                              74adc550d281698a46deca7fcbbc11938d80ce1e

                              SHA256

                              e7587056f250a54229b1986ba8ec9621877ad8950614a9be1d1e7691f75cc96e

                              SHA512

                              b3c1bd549797a0405c5047b473295ede843d8f639f9803a869da30b55b40e8175d82fa845bc043ae189ef7c5c5890bc2ecb17e13d0b6f25cf65db3e2d0121500

                            • C:\Users\Admin\.lunarclient\logs\launcher\main.log

                              Filesize

                              3KB

                              MD5

                              47731f30b98343e205b29b6786b015fe

                              SHA1

                              6d0790de912ad2dda534797e3a0cc0f8d21a2595

                              SHA256

                              198fd86deba8c5abece169977f9d860762b094cb7657e71b1532f762868b10b3

                              SHA512

                              b3b1ce75566c09057fe820b9465a90cb2bc983b95d8c404ffbc2dbfd4055e6c5430fc8148bfc4819abaa5f6264594b6b2b82e2a2f2a702710e5f06a4a03685b3

                            • C:\Users\Admin\.lunarclient\logs\launcher\main.log

                              Filesize

                              750B

                              MD5

                              3183c4f156fc3d6c73fab4e138ec577e

                              SHA1

                              5fc8ed7a62da5ae47859678475b9872a795b8fbf

                              SHA256

                              99d9cfc01b354478ad6bbd06c977ec1511314561cfa1d5002de824bbbdecb780

                              SHA512

                              f9c3cf05b244b792698970e84f2ba225f9906b36e9d9796cc7ae97c36ba334a8ba0496842cde231df72b1a9cbc1a8631255a79297be94ee1a9930a3bbe5488d8

                            • C:\Users\Admin\.lunarclient\settings\launcher.json

                              Filesize

                              2B

                              MD5

                              99914b932bd37a50b983c5e7c90ae93b

                              SHA1

                              bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                              SHA256

                              44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                              SHA512

                              27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                            • C:\Users\Admin\.lunarclient\settings\launcher.json.tmp-7965387656b99f51

                              Filesize

                              306B

                              MD5

                              15d6ddf978a6b5ec2b9dcac065ce7be8

                              SHA1

                              b3d2867cd6ffd1808a5117d84bd1a2365af0478a

                              SHA256

                              a7b7f2886cbb7bdb258982c6e622ef4981a2d43d198572aa6b562a0ddc68d60d

                              SHA512

                              31cc2f5d2d50cbdda2c940ed7dbf8d7fe1925a00dfa32d08d62c9e95b1af848fb839f27ac72d1e8da24a2a93f9dd5504358de2669d90e02f629e5274fa48bef8

                            • C:\Users\Admin\AppData\Local\Programs\launcher\D3DCompiler_47.dll

                              Filesize

                              373KB

                              MD5

                              c54b18d10eeb3234468879c32520808d

                              SHA1

                              a907b5cc5c32f5fb18276ab647e5e46cb41f5cc0

                              SHA256

                              67f35291577033bc9711f15f2abcfd4b820ae9ac9bf2e767a86e5fbafd16158a

                              SHA512

                              a5befd33ae47ffc47f3551e0f51947ae6dd3c8f51d4e310448aa86925835b3a4c8fee9b1f9d7ad0a6f9c9b1f6b7978bd0b535a0caa8365d610a8506e66a3c14d

                            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                              Filesize

                              657KB

                              MD5

                              b44973467ff1f5ce2825cd7d43abcdbd

                              SHA1

                              59e707c3070610594450ca1d0be1baa89685c492

                              SHA256

                              4d426d9a4f64c8c860d951a4b45776994b3063459596844b2f5dfe460067d99c

                              SHA512

                              7d96dc04c5752c0fe4f55d5777a9cb9466985d2661b716330c6bcb8ecfec73c4d3cca822f06ed8f2bed48797e6270ca2e468a48b16fedc78e6eabdd853c040e8

                            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                              Filesize

                              640KB

                              MD5

                              20c639d21717304b39ee8265510f3bd9

                              SHA1

                              e51b8b8820b9f97f4c8c49e30620e886d3194cf0

                              SHA256

                              86d70e09bc9d86007c72bf300bdef6616f665dbfe9e5a4019152391eee17e4d1

                              SHA512

                              5fc73c4039571f9190902ce2693474a90bc5c64b57f15b4bb4e79e05ad029932f5ca82e9a62d37b36f7ee9f5b6cf7cc2bf51fc4ce31382fb6754cf4ebb5cd4c9

                            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                              Filesize

                              1.2MB

                              MD5

                              446c5fd0673742c0c8cddd4b3ef81375

                              SHA1

                              46c84ae099a0ca88e65a78a7c57a04bf256ceafb

                              SHA256

                              657c4a28cd562674ab094517577a5ac989b0f876f306274d7691e586b76a6de2

                              SHA512

                              b16bcd2bb1271aa8791b5f3dc877fa5484242a5c7d08ac63b55682b92f054b38a8359f7f8424a3aff5a6e4c69045a8043d7a8dd840c85f7aad3f60c169137449

                            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                              Filesize

                              3.9MB

                              MD5

                              52f587279760cfec165dbbf1d682050c

                              SHA1

                              1a91d46098b171947e4ba7561962b48a41557f8c

                              SHA256

                              9dce8d0b64749f8a4a82358a975fc048b24056d8e640a53936fd1323bb29a589

                              SHA512

                              e0efaebeadbfbfa297b166e2f522b8025f22690748066c1b848ea66eb4ab57fcac3266202a06bf6d7b72dee2c5a12e8ecbd1dce99ab2bb2183db5a7b5d10a6a0

                            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                              Filesize

                              1.4MB

                              MD5

                              8964f245fd9a18c0293c1b034e9821e5

                              SHA1

                              7f1078bfc29ad6a66955c3fe1518746684febb8c

                              SHA256

                              44a7dc67a485c93120b0c3176482568892cb5def915d19e20c3f8bc8ca1c49be

                              SHA512

                              68c9c4540a093b55f48f6f6abb753cad501b46f803de002518d2d58c8f5b8548bc9fb256be1c4900614124565f31ef2556c687d4c3b84f2732e236f6722a4a74

                            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                              Filesize

                              1.2MB

                              MD5

                              edc1a3e075ebc67d4b3ca9a6dee468d2

                              SHA1

                              d4f0f340f9e696e0402bd8ff64192b0cb5acf976

                              SHA256

                              8d7e2abdcf9923a571210dd600f9dac9ca4bc31cae91d0fa7c32bf812b92eed6

                              SHA512

                              287623760e6e0c6479606fb7db76e791358f719be7091e708fe85198f5a0443b00b80f0823d366443529ed2d8c44271e6bd1db646b57f668a023b4ed360c7afc

                            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                              Filesize

                              2.6MB

                              MD5

                              86bb3aad901d5460b9a1350d7750d059

                              SHA1

                              e352e3a01db3c609189aceaf3ab27a0ec14c2129

                              SHA256

                              6b44b1dffa360b80fc19035f6c0dbeb3d86cefa8da4ee63aea8385833be6637e

                              SHA512

                              a357ff730b17562ddacc43e54b233078ca6a7519632dc38fd765a16c0a49a472cd7df6aefeea87abd9785a6bf1e3aea0a95daf7ea49d76013acc405e8c82998c

                            • C:\Users\Admin\AppData\Local\Programs\launcher\chrome_100_percent.pak

                              Filesize

                              132KB

                              MD5

                              443c58245eeb233d319abf7150b99c31

                              SHA1

                              f889ce6302bd8cfbb68ee9a6d8252e58b63e492d

                              SHA256

                              99ca6947d97df212e45782bbd5d97bfb42112872e1c42bab4209ceedf66dc760

                              SHA512

                              081f3ee4a5e40fdc8bb6f16f2cfd47edde2bd8f3b5349775526092a770b090c05308d4289ecdda3d541cf7f0579ac64b529930fd128edad9b0991dfa00b0e9bc

                            • C:\Users\Admin\AppData\Local\Programs\launcher\d3dcompiler_47.dll

                              Filesize

                              386KB

                              MD5

                              42cccd8afe15102656cff4be89e5b4d0

                              SHA1

                              bf24b1ab842972daecff239d7f78626277ad466f

                              SHA256

                              6d105c6c39c5f649deeab3b4f03e7c63f9414f5533b92d6a1dba3f7d2329761b

                              SHA512

                              e7fb0cca9564dc60d3e308ae1cf958f761b994d49f3195b96ce4a71b02e64437f64a56850cad84c0ef278b3d3a90de6824ebb41cfb089281fde4e1514bc4809f

                            • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                              Filesize

                              326KB

                              MD5

                              0ee202b51c9a408c1a35939e46072f8c

                              SHA1

                              7fee2afb7e726a6e36f11e22918f336879b18901

                              SHA256

                              5596ee91bbc3b756cc46391472c2d547fca57f7aa3ad72c8ea823f7809d998f3

                              SHA512

                              4659d3eeea4176ae24de67ee0f78eac5b4722b5dfc50eddeabc2810bdd3b4fc7c3c5838cc6e6e470062ce8b8c15c8ddc37555e245ef948d46b97f56bc72422fe

                            • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                              Filesize

                              403KB

                              MD5

                              5021be29fe6c5e03066e4c77a818bb30

                              SHA1

                              f6a721401bf26e05e05cdec8e554d7ef7f0a6265

                              SHA256

                              e53764be09a92edb2fb410925c9271db37063733daabd7dfc95ad77965396da6

                              SHA512

                              1a1926a188724a239282b226f028a21f34eab9625d84c2aa20a7474d0c98f3a56f2ab09d0e3386d1450426b3d334edd8cfaf98ac23e758e5534539ca8008c454

                            • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                              Filesize

                              1.5MB

                              MD5

                              f964c9a92263df1fdd357a0790cd3cb8

                              SHA1

                              7bc7285f8956f033a8f533a762b9890680f46b68

                              SHA256

                              ace0224bfc8b4bb40fd635fd3691eb08f0b0ee8a49b47fe457c5cc989437773d

                              SHA512

                              d826fa6af22b015374e2014c43eb348db3d00bd2e39e5f49611fd2f6874b1394924abd15aab1ec432d7be0e9208d550cfa6b7934a4dbc2605d095d1a91c69986

                            • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                              Filesize

                              2.7MB

                              MD5

                              d5e1f1e9d0ccfe7f21b5c3750b202b4d

                              SHA1

                              74144ac93c0c58a9b9288bce5d06814c9a1b1dc2

                              SHA256

                              e1ab367644f72ebcdc8eb3fcfe829ff51719559ac2a43a1600e712b16871ad65

                              SHA512

                              dcf70d43f1a83c424be99c38e33e520c72115c3d30945980e5e394d460462251bde309e543213b2b08dcbe9769d11d46792e1cc99aa42777fcc34d6f3361a3d2

                            • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                              Filesize

                              2.2MB

                              MD5

                              0a8cc29dcaab765374e6c8ab952af3c5

                              SHA1

                              4da47b8ec4ea56c40402e624330fbefdf5813e59

                              SHA256

                              87e9b1c5bd5fc535b3a5cfd7f384206d0b0a0c79acd66510c3823ca431775b1a

                              SHA512

                              5ccd5c832ad26b2e2047ad69fb09b4527b77c7b7fd8cbc98f3817bde865a954766a0de32029e5785c1ab7772d8140335405e38dd6c5840d141a5e32b4e391fed

                            • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                              Filesize

                              1.6MB

                              MD5

                              8f0fcbfa676881ccc58581c5fa3efe04

                              SHA1

                              d1aa7280fe3fbf53178191e842abe7ffc302de1f

                              SHA256

                              2408d9de0a0e26e28d684f7e6d8ecfebadc658d4dac35c631b7cb866654dfc12

                              SHA512

                              6f3f5110a9fc7cc3d803b35b37cc21fa5589ee40f1edfe2b45d9e7ffc8d68949f276666d9982d8fcc68fcf24eb2d4c0f9bd3dbcc4067a96357e0909cb1ec2e7a

                            • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                              Filesize

                              2.4MB

                              MD5

                              f51fb3bf56b050ebc5d202b47f400201

                              SHA1

                              05bdb3d650b0efd63591fe52e5d26e6b324155a6

                              SHA256

                              2abf915b5e90c181475d352a3bbe2e86ff5460f3b4efbb87db6ba8f190cd7a3e

                              SHA512

                              58592fe10a73876e0374cb3facba8e9a0abb1a1db1ef58293fdaf17e8e6536ee897f0d7006895d8f36e261fe97201c8b7ce5622bc946a1cb691cb51411a5935e

                            • C:\Users\Admin\AppData\Local\Programs\launcher\icudtl.dat

                              Filesize

                              1.4MB

                              MD5

                              94a3ffdef0db0f5405da62e588774cb7

                              SHA1

                              0f571f6c5bed2ae1d6529a461a6f1f751709acbc

                              SHA256

                              b9610190e8a6bebbb46efcb693bbed320bbb08dfe9272a3cf7585c7e4df1a7d1

                              SHA512

                              ca26a88897d1f95a8b949027164105121191928741d00a48bfaf4a2147a73d7f5e35cdebff6c52e2f39647532a4b6d0bf4e5e00e2ed880f6689f83bf499805e7

                            • C:\Users\Admin\AppData\Local\Programs\launcher\libGLESv2.dll

                              Filesize

                              185KB

                              MD5

                              d980f696753fcfd2887d7b2fc1daa23c

                              SHA1

                              a3cedd143fa9f2f7784cdad1762eddc027c2fe23

                              SHA256

                              9066f9ff9918d05106bbcc6b90740e8bc438dc162032ed02a7f85bc204d5b8be

                              SHA512

                              fb3794ede6b92655af151320045147e5770aab987145c9d45a0f3bd46bf7d66ce56c689e0c05ba74646f558c4848ef1b9119da6b91aa5101abd3c8f040a2d423

                            • C:\Users\Admin\AppData\Local\Programs\launcher\libglesv2.dll

                              Filesize

                              466KB

                              MD5

                              81f4c0f90a9e76854b601ca8e4e248e9

                              SHA1

                              8c1072be31f721a661a5d971eb88887c417f9836

                              SHA256

                              0bcece0659c494bb1ea3458b01128205712dd75cf89d3fa9b46c95bffbaad262

                              SHA512

                              0b9a84127d358cb74919b99e3055df43fdb30ecec27b0d848b96a0e465d8c5810ca9bcc9687cf7298cab67e3ce5f4a5681934b5823f0df647645b11c44e44c4d

                            • C:\Users\Admin\AppData\Local\Programs\launcher\resources.pak

                              Filesize

                              644KB

                              MD5

                              22e2b066cb33f6345d29166d2265b8c5

                              SHA1

                              4433b7029c5e10b8caa6aaa862285be2632d15de

                              SHA256

                              744fb71bb7536c822f67c7ae4d0685d526668a419e6194f5bc6c557a42769e0f

                              SHA512

                              3f03790a82b6bb99e89b85094e785f87cacd0870a08f0af15b4075739ae1da99604388dadebce8f49eba4af2934dbb8972ac7a9b54ca0ecd450910da4067d72b

                            • C:\Users\Admin\AppData\Local\Programs\launcher\resources\app.asar

                              Filesize

                              689KB

                              MD5

                              e2ea1788af90e91077a9e55a0df0c55c

                              SHA1

                              e4b384317a75e710962f1b951ca0848bb88dc4fe

                              SHA256

                              096acb64614163d60ed2a72016e6a6865273d3359a9c856a4bc54239e012f3a1

                              SHA512

                              693aaa49fc24434d5fdab68fc49cbebbbb8a6527eb08416dc4fe0b827ae4f0b13c7b58edb0e7c734cde0df9e5b7931dab696f7b586cd7c741ad4d7ce4c30e9cc

                            • C:\Users\Admin\AppData\Local\Programs\launcher\v8_context_snapshot.bin

                              Filesize

                              564KB

                              MD5

                              5db8a5bb87c7999343f30128979057a1

                              SHA1

                              c4177c2fe973a495db59b6228ac26264eec46a4d

                              SHA256

                              5b1f69f39f3d5865dce13ee3bdbc1af2938f5cc4c056dc9f9e213e9af346ad4b

                              SHA512

                              da2d516251376952729a33de2cd23764290d400fafc49642f2ccd799e3f989cce4d5561a76d380a950b77b53b50148dec9089c30de6c3dc38666237e196e569b

                            • C:\Users\Admin\AppData\Local\Programs\launcher\vk_swiftshader.dll

                              Filesize

                              640KB

                              MD5

                              fb9792adb8c7709704968f27e2c3eaa0

                              SHA1

                              a4cf26598a76356274b75d62c19336f9e7e82fe1

                              SHA256

                              f954a209a49fade4af261495d200f305ebe9ef92a545f35f20ede523f4f39d73

                              SHA512

                              215e05839e648597973d29133facb30445c31f99cbca92d1d5c79898f4ef3a68fc96394402eb0cc62cb388e95802b074ab2e0cb8b66b9aa28425c8ab039f64b2

                            • C:\Users\Admin\AppData\Local\Programs\launcher\vk_swiftshader.dll

                              Filesize

                              262KB

                              MD5

                              6b576cf9ed4141e989aa126163b84b80

                              SHA1

                              2ee4ed4c324467f1cc3c3537c5d7c0ad3096f3e2

                              SHA256

                              ba61fe3db8c6feac8191cb2a94cf61eb332c683acf4aea2e572a53b22774986e

                              SHA512

                              a9febd40c6091b4cfbec5ee10e37d2de872588626e111370a7f48a2be2253f645ca7fd153234570bbcda3160d13406413bf8b608cea4f225c8214877ec92851e

                            • C:\Users\Admin\AppData\Local\Temp\d57fe073-6806-42e8-8f21-9a5f69f76a5b.tmp.node

                              Filesize

                              259KB

                              MD5

                              21b516d2f425d6a7e0a70ecca543028c

                              SHA1

                              732cbba5aecab1b52486817261ee2618843afff1

                              SHA256

                              7031bf1b506c31245a6505722a4be79684bca41ea65b271b314d4466032530b9

                              SHA512

                              2367692e74a2c2aba5cfd2b94504bf4e661c41431a06025010794b133a3d6d9cad38fbbf356ff32db228746a37034c69fde3e9efb8f13a11d8643f1aa88fc358

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\LICENSE.electron.txt

                              Filesize

                              1KB

                              MD5

                              4d42118d35941e0f664dddbd83f633c5

                              SHA1

                              2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                              SHA256

                              5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                              SHA512

                              3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\LICENSES.chromium.html

                              Filesize

                              2.2MB

                              MD5

                              2d5eecc8c607f835c243a0a64d98fd3b

                              SHA1

                              ddb38377d586b9b646ebeac9bc622f387738de65

                              SHA256

                              0eadede94983985521808bb4e80595a569ad580a94c03f656d90eef2f72df66e

                              SHA512

                              9c88cc9c7cd11c62c877c2abe9a377b4bcb0698546bb604662fd3ee4c2bbb0d3991bce787c5d0de6ea23fca77e93c8c2dfddc1d6ca8fb393155957b6c61ad945

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\Lunar Client.exe

                              Filesize

                              617KB

                              MD5

                              6e4429522ea271cc8785873cdd8a7138

                              SHA1

                              1ac1bf3ab2f2109a9f0c2d6f945fedb8d640b695

                              SHA256

                              2ef36372c6b4e19a91aa3dfdc8defb83a6ec7cbc01bd5fbb035853df51295a98

                              SHA512

                              6fca67c1337ebe14145be6ef7acd0c540fc607451e9e6c244b5a741b865987d678a849997523f4a9a300effe3217606da01cd9edb85d2dbdf902474db54b8d7f

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\chrome_200_percent.pak

                              Filesize

                              191KB

                              MD5

                              81b5b74fe16c7c81870f539d5c263397

                              SHA1

                              27526cc2b68a6d2b539bd75317a20c9c5e43c889

                              SHA256

                              cb4fd141a5c4d188a3ecb203e9d41a3afca648724160e212289adcac666fbff4

                              SHA512

                              b2670e2dfa495ccc7874c21d0413cfbebfd4a2f14fc0217e823ec6a16ac1181f8e06bfe7c2d32543167bc3a2e929c7f0af1a5f90182e95913ba2292fa7cadb80

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\d3dcompiler_47.dll

                              Filesize

                              2.8MB

                              MD5

                              3de1639277d745a42ac3fb9722d99cb3

                              SHA1

                              4682a6b44ab81052fecf57063bfc577ac7b14ef6

                              SHA256

                              59ea183f137f3fd9af04f4f3ad16dc2a032ff57d5645b837a87c1732f8cc01b4

                              SHA512

                              4f894cabba83a4f2b23d16e4e34bda55acaa04161b7d41dd28eff7daa6fbcc43db50dbd47f4618adb07174a6016c7bb9dca0ac898da5ad73081432a5da38a2e8

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\ffmpeg.dll

                              Filesize

                              2.5MB

                              MD5

                              0250d3d68c46fa170e09229951033af8

                              SHA1

                              ed4cfad1c0a1ef8eaf9d547bcdcf7cdccd46efdf

                              SHA256

                              36b97a75fe4b3fb464fd489b671ff9c2a197df8f11b6d8d8e98452cabb54278c

                              SHA512

                              65a9d3e71ef8f87b297cbba287674e16dfcc360c50851068b140f5c17ad7213f4500cf5da7c5d48ef796404e41582d662200be43c4042f708a38a748c012300b

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\icudtl.dat

                              Filesize

                              3.1MB

                              MD5

                              28002bb7e168a8fafe83b25015d8ed78

                              SHA1

                              df940476e1ee6066b9a2a4d01688b329d39e8937

                              SHA256

                              863116557e3dbc250f5c6a8f8d236ca64af17d57227f625f84d4b76b9c0c53ea

                              SHA512

                              0cb0be19afe12fb8620a53f1ec64ce29ef8804154ce7f6d7c86dc35e14ec3e91c07c4c85e5454221e273ef845e82b35f20976cebd545a1cc259f7223d33bfe05

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\libEGL.dll

                              Filesize

                              469KB

                              MD5

                              dd78b86b3c92d61c37b44ef5b157cfe0

                              SHA1

                              4dcf9ebc3ff5ca552c0e83469b921153b29aea1f

                              SHA256

                              e142752e073c0051a0beb963981af70263ed673959515545521a7941d3230838

                              SHA512

                              9d071568dc56db2ab93d034d07a11a477aab8ac50d9ea3c4db3ac4866fcd3c2f3002ba7a3f2c55589a9d68463181fc7a03327dc164310d7e80e30cc6f6bf2423

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\libGLESv2.dll

                              Filesize

                              2.7MB

                              MD5

                              291c5a613f39664261b6417dab381c57

                              SHA1

                              ad97fe33e7a0583eaa0f7e8bb7a324fcfa14bc30

                              SHA256

                              da531cf8a6e467b17398edb4ba82a59959c46cd46de4f3039aa4b5fa7568a7ac

                              SHA512

                              660ce82b709df4a289bbbb2f52ab1a68b2da54d6f31f08ae03b8b5ffefbd64f8b5006dba3c2ee11681348a27f136d0bc471a00d04f1d149f6a05ddcae2f86ccd

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\af.pak

                              Filesize

                              381KB

                              MD5

                              b293cc5ea7db02649bd7d386b8fa0624

                              SHA1

                              32169b9d009b7a0fb7ecdaf650c989e956291772

                              SHA256

                              7bb75adef02d28819f1bd3b42fa46ed56d6dfbeae072341997b09b8c1f52d8dc

                              SHA512

                              496bc72e7b798d02e453eb96d20566b91405bab774521527ef882c1fcb58f25e2d0718013ddc0d23f7fad883f4cde93b57c6caaeba8cd18a09665c9f6245f557

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\am.pak

                              Filesize

                              619KB

                              MD5

                              4cb4b30911e9fbfe6c1de688cca821ab

                              SHA1

                              58cc2d8e954b5c74a902f13c522d1f6836769623

                              SHA256

                              685ecdff01d4ae92be1d900ef00fd8632616bc41f18a56e682528f312d4a5167

                              SHA512

                              6629af841c52463c46dbeb03e3b4b1cad550c2db790c75365d63512e039b3369cdd9f18316e9c50dcf3aa77aa4d2becb6a87570f3b538b456af3041d60393434

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ar.pak

                              Filesize

                              680KB

                              MD5

                              7294148ba219909a4909613381ea45ac

                              SHA1

                              a8a70e589760b5eaeae1a95fe51723cce48fca87

                              SHA256

                              acc1b352ea206c25afe88a614346b468f4f78bf23f886883a38dae905d121dc0

                              SHA512

                              cabf320e827067ef8efb7c021ff098430054d125fb50540c06d12167c7d1c6d08449e6a1b33fa4a092ce6c81a600415711005e100b1b756a199e05ca18dbf3b7

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\bg.pak

                              Filesize

                              706KB

                              MD5

                              080cffa1d4032b7d4bfa217aa00c4f47

                              SHA1

                              525cf2baf62ec4c90e3a1d89cce37c9f433c61e1

                              SHA256

                              3fd27d562e32f1a052e924b6c468486acf0b2af42dd1ad2270e83d115d4b3f65

                              SHA512

                              9470ea433a7c08331ff26df00170c81309e72145e6f32c16e7c2c1e53c54b3974b991ea128e636138f8212e276a2fdf94c344d9ab7fcee35ec231543e08196b0

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\bn.pak

                              Filesize

                              911KB

                              MD5

                              bea57ab3921250ff4dadc9f42f8202d9

                              SHA1

                              ace7fc0579a946d32419e8c5ff9bc64d40e53364

                              SHA256

                              2bb70dc94361267e755169dde430ea31aa21b4daf31b5eed78901b27bc596a2e

                              SHA512

                              164f5c081bf23def7378450dfaf4db1ceb49595351de5d933375d9b1b409f7bc2dc96c4f228a7f024b7ac891a27603ec174ee8b3a7937bf678d61fdcd3e4c7a8

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ca.pak

                              Filesize

                              430KB

                              MD5

                              2cddd012546caf0aed6775cdf5cfdee9

                              SHA1

                              cacce951770feefd1bcf89de5be97bb39606e7ee

                              SHA256

                              02d60b97f70c31f5c5003108321fc3ac3c79bf39a36392c3adaf7735b9cc1c1d

                              SHA512

                              b75d9b2946b11b9fc7430c5773835422aae6e716504d7841c1b08413ec18d454d9d6faa5ed63e19c59ab2e1ee919822283fd7e21a97f54482685d541e4dd2519

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\cs.pak

                              Filesize

                              441KB

                              MD5

                              6d43974c98037eecee8691520de4d63e

                              SHA1

                              e15672b3ab22a059b976d245ea3f59d35c3387d1

                              SHA256

                              c1020222b90558a6a8a07f24756b183594641ef77562d35e7899e1489d0ebd8e

                              SHA512

                              64e76499d56c3e32cc013bd05e2d3eaf5618527b8035bd5a37f5018a1e6072cde4a06f7c66921b9b087e60ff686ed63b7321f0295a34451443797ffa8e5cea35

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\da.pak

                              Filesize

                              400KB

                              MD5

                              ba54e3345d61d5cf431db6a0d649f792

                              SHA1

                              32b2edc19df7e14e6567e0faf671c038f78a65da

                              SHA256

                              dab543bcc1a8abf057f720f9f448e45ca5cfd1c424826bce8933174bb2eccad7

                              SHA512

                              5f858c4c876e1d15d4929464b7d9bc2cc497eea93d887c3cf0cc1c651a0f5a81d75f04f7a0b4277dc43bd9deb148d147d35fa1aa2dd218d404fa2c8c389ecb5d

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\de.pak

                              Filesize

                              427KB

                              MD5

                              46a45fb8e7880802e1624df86d254973

                              SHA1

                              13778b3bf0101c3894fcb228080c25ebd47dc046

                              SHA256

                              6283ec48cddd08c387a36ec71fff87c2ab0ef27449e8971eba2d76a6136b1708

                              SHA512

                              ffa8ebaebb3f057440176f123442b13b6f96842b9688efe6633c0014f0dcde982e667b0f2dc84a1f6450e310a8e05a13e35ddc24b1de8d25ba5a711d8b07d357

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\el.pak

                              Filesize

                              775KB

                              MD5

                              7f92f844b9d8bef68dadbdb85a084bd6

                              SHA1

                              96c508fc2b624fe9c2945e2d673a645fe39ad3f2

                              SHA256

                              87f0a26d73fea2ebb5017a95e937e08d7c347baecbe93514c1b866c1e28dea32

                              SHA512

                              d47eb475f9ca60bc1e7ec33fe2e2a395bb8ef3f109bc4b769fc2e03e2ddc04bb3391b10f1b382b7497555e36ef02fca31cd47f67c03de43d275bbddc3bd8e7ac

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\en-GB.pak

                              Filesize

                              348KB

                              MD5

                              a32f3f357725ff256be9026398a1cd06

                              SHA1

                              cf492e3e5c18e9e8c8cdd6b964e987541cc46505

                              SHA256

                              914b7bec10c1e8c2a9e461edaa498b2b344aadc130a30321d4116ce0c4c99ad3

                              SHA512

                              a96b2b00ad6883c205224770bc2cfcc93a5cf29b41bc8169117771f36264a8a89ad4e5bddc0c50f85c0979f3355188ba86c915f0b3b1013b3ecac9383fa8b192

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\en-US.pak

                              Filesize

                              351KB

                              MD5

                              06d28839ea0b3aab4597ba8646a53a96

                              SHA1

                              9c6a74aae8c783546d613c6f38cbfc8f5e3736f1

                              SHA256

                              69c1a2e1b30d83612decf1a8dd7b124a04f58e9f2465876726f02f7f7d5eb54a

                              SHA512

                              a432542dc98795ce0ea6fa4a6bbcbae8ba126f1fda025a9ad6ff3fa67eee85dcf7afc6678f5100bb1543c4d00ac75043ea92e64b65c9ef6bd946ce3dc4d5ae71

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\es-419.pak

                              Filesize

                              425KB

                              MD5

                              c753cb5296cc411ae72964735ce0de78

                              SHA1

                              4151545bc2cb9fe4330f3b238aeb28e9ff0dbd6c

                              SHA256

                              5fcf21564ceec93eb64d2002de165a55c1875859975e0bf9035cbe96f258b50d

                              SHA512

                              5688e1f406125f939840e8308d950a741a02ef24a006fd3619f3e943595630ce32010b51bb7a37768f1c595f4c77b104bb7483ca24ff599eb04434974d894c1d

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\es.pak

                              Filesize

                              425KB

                              MD5

                              c9e0b58f2d9e087b2e8e92d31be2a3e6

                              SHA1

                              59a43b7021860db2d2a7fe8ced8fd1a4b0c8322c

                              SHA256

                              468e0143c978a948c62d4a3dc743099a4147d39773a6112b303692d0e335810e

                              SHA512

                              16160e6375fdde1ec2e17ba8622c9c953a46372143d0b09a33ee55852b2b9f037c1c16dd5bb6bd1f2454559dcb172c8317aa8b6c6b26d44e8da706eb16ec5f07

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\et.pak

                              Filesize

                              384KB

                              MD5

                              ccd361017778964de23bf1d741cb888a

                              SHA1

                              5b0305538762987901b7a8332635f3d7996c09dd

                              SHA256

                              41883af1e49cc180fb48e02659e75b0169d974d77373cf7bb2a4ea02dd654e26

                              SHA512

                              a9d7c99c07229d382e8ba7cc3199bc66fc39df5fd9b58e6a76e423b865f8c05f53398125a17a20c27462b2db595f3d778b4d94b1853121d8447b771f9284e5c5

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\fa.pak

                              Filesize

                              629KB

                              MD5

                              87a2305436bad7556fe7abb68767802a

                              SHA1

                              0edad3677b0872321a1f8f3d391c17ab373aba17

                              SHA256

                              9068dc6c71fd8bbc1a4f3b2009689472d1fd2c096b7e8afb3e089a46b98d8b38

                              SHA512

                              6c32b1c83e03b553843faabb5a9c1b63c769b13de60841d2bc81f2c9514b30ebf16551acf33262ef8abaa4a5aa3955600a35a045b0fd446964109c58a2734969

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\fi.pak

                              Filesize

                              392KB

                              MD5

                              f87a1ccbcf3db6988e95e94333bc5a4f

                              SHA1

                              e85f8446eb74d8bd4318354ec98135c17afe3248

                              SHA256

                              052a72c9d6f2bb55f02fb1c5c4c68525a32b8cc9120c270d07d7b813d604f7dc

                              SHA512

                              c4a7ee0552b343010fce8ceeef70620acf672c9ab56fc24ccfb88abdbad23aac4cee65c8b241c594b7ec92d0841087485aeda583d2e887cf4c823a10b2e7cd3c

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\fil.pak

                              Filesize

                              442KB

                              MD5

                              2e6a6728bd5a09339ac01a38bf686310

                              SHA1

                              619e27f30c99eff8f2df3ba2287c6f7fe0b5b063

                              SHA256

                              e8f03c2e9c88adb04648ef93f9ea3cff87641638ac97c9a6752b751e7f7a8a20

                              SHA512

                              0452ac74eafcf971265de92041659c006b5e559919b895b41795bb1307ee7c302e873440b006485b7cffcdab0f6b908a119683fab40a664d5bf3591239427c00

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\fr.pak

                              Filesize

                              459KB

                              MD5

                              8e21cec6cb5732fd2baa28f3e572ef7d

                              SHA1

                              778228dee97f5475b9982375740d6f90e8e5fe0c

                              SHA256

                              cd21cae54eb6cb115771d1afe14d17822e13332759f8710d6386a6e4277c11c8

                              SHA512

                              07726afa312f6104e3d92c6be13fc4b0e728a4a21f643c9552a961784063d3c8a9c52e5649ffaa9fd6a083dc5de37316e0d2cc10cd1a6fbeb83789c385ae990b

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\gu.pak

                              Filesize

                              886KB

                              MD5

                              0c33e2a35eaaed3572f31e7b24d4493b

                              SHA1

                              278498568109ea7d6cb34c634316f95b04155b64

                              SHA256

                              0f0fee8a2f22f80a0c4a758e7f4fd90d40be4048dcab0d824135caa5e92efd5d

                              SHA512

                              4eebf9be5a8c317d2d2e8e9b1e607774f5c7c35af7d8bd6c80326fe3c6e2e05089f04485eedde8be8c7b71a7b49e407289f361361d86802c0463c5b6b296f2a4

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\he.pak

                              Filesize

                              549KB

                              MD5

                              8b3957dda3c9fd903d2c4b8a5f686475

                              SHA1

                              36e45b4d30fd1e59ecafe095f405e0722a814a17

                              SHA256

                              ad20b3d634130c247f4ff954f1a5c56687523e5610f2ec6085e257126c4513a4

                              SHA512

                              1dd54ce0a1f30ba087a9d09b9aa2928dec3070788d7db3dc2bbd27fa6126f70fa1e05106a1503602b203fa76be914210a38d5dc9c6bb56c56857ef08c528c4f2

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\hi.pak

                              Filesize

                              928KB

                              MD5

                              4eb5c501aecb647fa81fb4b65b0cb6d6

                              SHA1

                              5154741cceb272352f0814850e75b517f7f8a023

                              SHA256

                              71830814b8c7028a114a53a4e715ffa8da12f01d920455242a0cbc35fef48e6b

                              SHA512

                              2bf32962d4f018959281f6f09d149aadd901c21131ef25aa1199ecd73dc16e2377eeeb67352e030198aa280ac1fd5962eb226fc6481c654d8d332751a20329d8

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\hr.pak

                              Filesize

                              428KB

                              MD5

                              23fdde99818ba28131a6ba81decf2c1b

                              SHA1

                              c1a87661f80c7dde9a08a360d2f5b72f58042076

                              SHA256

                              08fc2b1e6b9652d809a7550f1343b3ee54ebcbad0fe74b009aab6ef926c0279b

                              SHA512

                              0f53b131d142c7b88081afa59f10e17be489c342f2e328d0e7bcaa18b5dcfa599b37ca09317aa9ae564e52a3cea06d79021eac6ab5ab38a9c0ec99bdce797e9e

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\hu.pak

                              Filesize

                              460KB

                              MD5

                              2fef83993a62f73f8e4b40a6e28a085c

                              SHA1

                              8bae181f3eed8d5ea8fb0f912c679e608ee7c008

                              SHA256

                              ca4b4c7c7be45ea0871abf7d5668ab948f712a02facdc1d6bbc189b1b3522446

                              SHA512

                              6eed29acd38b662f62381a5c00ebfb254915a57de6fde8e6da77f60dffd13d4846b26b1897d710ef852bcec5728a4460becaed2367f1a06a066da77521701324

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\id.pak

                              Filesize

                              377KB

                              MD5

                              0dcb56f6b196199f7ed802c06b774037

                              SHA1

                              f62edd5e814d05cc4aeb5574fc63acfdeffb6010

                              SHA256

                              bd512e36a88f0d7e6fecc0b559adb2761589947fef9c253dc350cd8d6ea889f2

                              SHA512

                              e03474255bce20004788475ee1f546ee7830e9b9960023b15210d88347032b5376848aeadef3e953ec654d3905baee37279bfaa287af7669ca66e382a4b1344c

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\it.pak

                              Filesize

                              417KB

                              MD5

                              47c89f9ba4993e7cb6640c23f444e9cd

                              SHA1

                              0e3755d2835742b7aa4e1d5245454f7cf22a2d47

                              SHA256

                              95bbf94625cf0476124763cebedcf5ee46148bb6b5c006f86540a02e8d8c883c

                              SHA512

                              948e4da235cf7d0272fd7a99e7238596e5d50913886fc73fe35f9af17d1087f550a3cc3251ee6595f9872ef0b88e75725405382e6aea4850088e068d5b80922d

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ja.pak

                              Filesize

                              510KB

                              MD5

                              afd423713e28b3980392443f31dbda7b

                              SHA1

                              926560b21af422f22e1cca1a4a2948ff988bc6d9

                              SHA256

                              88383ddccacb53f3ce5918cd80b5dafb16b3cf1fab295e230cc15490600615e4

                              SHA512

                              1544f7a91b4b63bb80f651833a931204e44745bb0bccfb5564ee9af3149218f140b6adfb6d4ebb5ce5e82f5c345c098cae8a0637b274c42f6711aa53877b0bd4

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\kn.pak

                              Filesize

                              1023KB

                              MD5

                              74f0e9c7c670a981d3651e0d189dfc47

                              SHA1

                              a2fd3037311f36aaa348805d57172f9e9b0680c6

                              SHA256

                              0c8e0b6a8398d7b9ab9cac634e4a7ce4453540358e79ac6e9c5633efb4182fe9

                              SHA512

                              2c555439f7de3902b2b1a940cd43977558c4d9239c449105fc24777952af8de592ba86a7476567d190719c66d38f7a7982c9b94278c0594de1b427dc546f2d89

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ko.pak

                              Filesize

                              429KB

                              MD5

                              c90a42bb27bcbf1bd345dc998f9e410e

                              SHA1

                              66f8bb72db6b38e2d288959bcee3c43caefdc59a

                              SHA256

                              56100d20a59fe6cb333f57ffdef90157324ae1b90194e852478daa8c46d29de9

                              SHA512

                              b5912c895a6a3b391555efc10b15d45fe9a84473c8687327b7d2fa033711e437e2f160345daefd554374357e0afbaeda4a25f4f69ca74e498d7081062f299b46

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\lt.pak

                              Filesize

                              463KB

                              MD5

                              06d8db8aab68c565af14bfe408ae4daf

                              SHA1

                              0898fd0ee4d7380b93b8fb3d4a1816eb810ea9a7

                              SHA256

                              ecb4ecbd96575f6f984f60e85ab1ebb0067e73174ff9912941ee1aaa28516d93

                              SHA512

                              1ebc04cca7e3bf005f9befad5a81736fc572383a636c7237e4206e75b05befe49f967427f912c97758aa392f9cc2dcbdf07c471562cb4ccc90f7d8e951c3ab9f

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\lv.pak

                              Filesize

                              461KB

                              MD5

                              f8a5403bd91f231db58e77c9d4514e2f

                              SHA1

                              7d29e2d8459af6fc3082cec0d9638daf5275bf3d

                              SHA256

                              dfb9b5ee446977dc0435cff4d66402d3a9426edb106effdbb7d86379527c5956

                              SHA512

                              f491cffdc5cc588f7ec70f87be84615aaf5b39e9c990cd9c835e65beb27f26334517abac1af7419f2b7b18f94c369037c8df4c1c8e26a5fed4288d477dc0874e

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ml.pak

                              Filesize

                              1.0MB

                              MD5

                              fb1a6e31dfb4f4c78a50b4dbece0e1c1

                              SHA1

                              367c506478380f8bab411747a906f8f8c60df30a

                              SHA256

                              a7afb3ebfa8f4d2e35dfdd5554ff2702182e73dad0fd82f8b4207a61563ed134

                              SHA512

                              18afb816e974c9f0d669af7cb6a5d8761e1c5af69317e6ea293559876549692baf1567657b356ba9d52ecdf4d117b7ee7fe003d1820286470d43af89321e3f6d

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\mr.pak

                              Filesize

                              870KB

                              MD5

                              1675668911fd3063e092fe34579c210c

                              SHA1

                              d1d09041778599002d07a89848ddd79cf5f4f4db

                              SHA256

                              436efbdbce605c23f855644a9ff1b04d9a3eca37de3b18de8c3e589930d54096

                              SHA512

                              61c7aabb00700773bb55522e7ae9482d1d97ace936c9bbfeaef3215a976c411a51f41a2d5aa05f2b286b0d112b5616215b9fa3632eaee38b1ec090dfb29391b1

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ms.pak

                              Filesize

                              395KB

                              MD5

                              2c4056d84b980267faadd69d52c17086

                              SHA1

                              3b3c5fcf182d86a170c8f35c041bf3869a82b362

                              SHA256

                              163eb7ba5f0c61acb6443709c24e38ca6370a33f89a12e13d0a57c258a87ca16

                              SHA512

                              47285ab42b46cf7d6556eac2a8f7afb9a9c9abe8cb026fe847b2504e4dbddd481a98c1ea959c74e31f195ecdbb618a3d93df8f20b797411a8bf2b3856fc9b963

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\nb.pak

                              Filesize

                              386KB

                              MD5

                              23ecce10db7753622fd7cd956aa55212

                              SHA1

                              52affc68e91448d8aecf2396f02ede77d4ea664f

                              SHA256

                              29f38d3720c948fd261a2aea7d195e861a73a1313071bd2cbf1ebcbba77c63e6

                              SHA512

                              553543bef496052995e33e2f3e8bd66ac845351cd292623479a303261900c393cec35af3e0ecd57db84197e6f7653ffa4eeaf4950647ae2d5304f961890deba1

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\nl.pak

                              Filesize

                              398KB

                              MD5

                              54817be286dbfd9de461f42304eb72cc

                              SHA1

                              79386881a11e6c7d49f2d117822c29d7631f3830

                              SHA256

                              3c682e37df71cc036c2b5e91064407fed8091c0306a856121e28c19e7110e1e4

                              SHA512

                              d8f922b028b03c6379911308cf240d104b40a9c46f67a6ddbbfcd20110c287e8106376cd6e8295915d054e05b2a8a045b3ab8d98932c1be97b1f258525db1a68

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\pl.pak

                              Filesize

                              444KB

                              MD5

                              41cb68de75d011281c7936194ef8457f

                              SHA1

                              6bd3efbf5142769c6fbe8478185edf89f471716a

                              SHA256

                              d52358b8fd70f1f18b3f8ecc4aa9c791591dbb698ef8d8670312e50f024db451

                              SHA512

                              ceb90fa9f723c3d8d522a401cb46545c72a2ddd1d04f091e9d7ca5212cedcc641c54cb8fe19595e9c823b2ed374757e5ba7d1813cd763bbd8d726b1e2ebe0407

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\pt-BR.pak

                              Filesize

                              419KB

                              MD5

                              4f3f65f6639ae1905fa37b9b6ee2e4d4

                              SHA1

                              07553f41c4f8f3d105eb92b65497c4976449a6b4

                              SHA256

                              b4e0a6064dcfe876c819ec4b00f9857b84ff52cd3e845bd0c48e31ad43a23db9

                              SHA512

                              85cfcaed8fa2026c13735e7d4b6852bf794dd4a8ac078889d5ef46ec2ff7173ae443addcb0b0c711f6a31f80469fc1df5af1a78da6397d9df5e33cabb354fba2

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\pt-PT.pak

                              Filesize

                              420KB

                              MD5

                              7074036013be3839e218ec7b15d49215

                              SHA1

                              7711ae4e96efd4f4676a3c0281a92af56329deee

                              SHA256

                              342381f89058bedd809991a0b416f48642df3c71aea10bb13e13bc15eaaf46c8

                              SHA512

                              8a1e9cefb8a64b3664d9496e2d2f76e2281b3c427fe24ecb70ee74f78778d94def66787a7e35ccde6037ec061e29a6ac7fd8b4010f77b13945780e1316bb16e0

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ro.pak

                              Filesize

                              434KB

                              MD5

                              e66343d1af0b8f483116ad7689e7faba

                              SHA1

                              a245b6aa9309a7c10aca8502cbd10d9dcbd5d8de

                              SHA256

                              b7b56396806412ac1721d2648fa98a89a069d1f58d359d8e90dd1c6b8473b9a2

                              SHA512

                              9f6517aae57f3d8a65d4f9b354b7ed9923c1bab8a414b78347f4dc375707907d16d458d9d458d8fbd28f065e268e092770fbc198833315ce14e6eecfc0d3f0aa

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ru.pak

                              Filesize

                              711KB

                              MD5

                              6092ff0430736682e24595b37b3c018d

                              SHA1

                              9d2b9822556ab1f33861c45b2f7f4236b3ea5f05

                              SHA256

                              c5264fa2b485326e91d4df7a6e39122554ed632c0c17fa1f130205ed50e2d6b9

                              SHA512

                              fdd960f3295c280cc57915f7cabd7ffde0c0cdf4cf6b671748a6f5b8b39376141f2a552afce3e2a428ba18057fb9890da9b95fc6b8367dbda5430e1b205a08cf

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\sk.pak

                              Filesize

                              448KB

                              MD5

                              b88ec1f7bbdcf1b6690f2698b3dff738

                              SHA1

                              c5975de1d66827087bbf8cf0f4b3bda816a723e1

                              SHA256

                              04b179b5c3a5468f495a0620a2dbc6e312ebd76ba32b98d8cc7daafb46edc21e

                              SHA512

                              ef30ac14b17b71f5659f33778d8c4b017127c3c5bfb593dca919a80320a66dcf5e0a3f228dcf62b05df5d4d6929eb5401ba9c369affe89cf541633bb743553f0

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\sl.pak

                              Filesize

                              433KB

                              MD5

                              1b02b0834b8bbd12a77f7fff09e1d81a

                              SHA1

                              1898cfedde55aae307f7578b88cb0bcaf61e1d52

                              SHA256

                              b36e1fe2405cc4b9f34587e30da2feadaa6f03124769b02f79333adacaddb49b

                              SHA512

                              b1006053ace6f8842e9436c94934b2e7d1b502e3df9ecd1fe59ab39ae35e69e8f0dcff8728aee2c35a3a1eb7a27f0146d6113b4de0632dbab20eb0a37942bc4c

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\sr.pak

                              Filesize

                              666KB

                              MD5

                              4d1ee9487f4ddfdc4471366d3965293f

                              SHA1

                              4e53084fe0d4bf4f46ea980f7423787084152ff2

                              SHA256

                              b75a222db70c3f5734a75042718da599881d5e84cc52b332e9162f78b32f4819

                              SHA512

                              a44a448203cc9388d8df4c39be9db5436546fa17add0975c18ce01ea0a5cba142692660ce6efbf00699793ca98af8e392e41a07dcd9c183fe03414574389609c

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\sv.pak

                              Filesize

                              389KB

                              MD5

                              094d69544816535e4d040ef0ce923100

                              SHA1

                              5891cdc73bc4c112855d099ee112da0c3e9cea81

                              SHA256

                              110112c2f7ff5d3c8599036669d156e96ec19e70515fbba3bbcb2043ab994680

                              SHA512

                              023037077a3482a3bf2ac076b5c00922d7039bfc2098797275465138142fea0f97c1e003f77de71b9ab88f786b7401182618603610c51f634ad17a123faf5bd4

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\sw.pak

                              Filesize

                              408KB

                              MD5

                              bc771a0e8398e14653d9a4373a73496a

                              SHA1

                              6e844c7daa666640ac3093d5e51276886a0f5a66

                              SHA256

                              7a5d056fd317b7b60a4fbf0df39dfdd21829f2245393a21e1ddccf1a4e3b61fe

                              SHA512

                              79b916c737bc44051e6b4c0a9afdfba26928536034c5a5149586594454855b7074f6f8fdaeb98f0b7bde5c3da36d66988f683de8961e13c9c82301676f942998

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ta.pak

                              Filesize

                              1.0MB

                              MD5

                              abf95e05d798043abf4f2f514c0517a9

                              SHA1

                              b8c6c1cdcbfea03fb106c7a44385a3a8e6806aa6

                              SHA256

                              9cd624a97493282afed3b9b1e848b12639234fa54c04b22128169924f9c92777

                              SHA512

                              aacd7439df84ec76a3d0c69c39341b51031b66b24be53c87f3ffbced989b38fee416b19db2c3b36904eaf88f98b24e1e26f070bcc8dfb4ecc99dc7bb6f6b911f

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\te.pak

                              Filesize

                              973KB

                              MD5

                              51356402af92c1912f185b6bc9aa9026

                              SHA1

                              60ccd65d7ef35e5219f2bd1eced66e1ba984a8cb

                              SHA256

                              11df9eaa9216b091fab01f66fd77bcb17c0bea0db3ea7a803bdf5dc6c6e18322

                              SHA512

                              8ddc7946a9445a832b4b3b254d24e12d66c42af8cf7dc13add4cd3a9ae50b83e5178830300c0b08aa145d55d79b868efa9d95a116623044d7df8eac1a6556632

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\th.pak

                              Filesize

                              817KB

                              MD5

                              2376dc182234c3f1188dc0d6e1840453

                              SHA1

                              2dd35d89e79512e37b721fa697cb2e9e07a1d1cf

                              SHA256

                              610a440605110f1aa18b1134d116c66cd2050da53e0360924a3171d0850c27fc

                              SHA512

                              7c81fe0c2172ff49b6ad9236762fe81e0a786991ca6c6e3549bd66f9cba3c14d96f8560e01bf3681355d6155a0b1b9cb5fa0177137f71ba3d8a1fb6fded29e38

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\tr.pak

                              Filesize

                              415KB

                              MD5

                              418dc1cdd7ccc10679523665e1626280

                              SHA1

                              d4407ba9bc55153963150e6e30f23cc5b2304e30

                              SHA256

                              26fd3317bedd4080038d7a0003d73923fc0edd40283ef11b5ba80bb27f946c13

                              SHA512

                              4a907bf14dc9cd8ecb2f17152ff5ea0a6dc37034c95ed31a445395bcb9ad6fc23d4117e81f94ac82d767869b0b828738eacd33b810df87dd41cc3ec2d5b92e94

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\uk.pak

                              Filesize

                              711KB

                              MD5

                              0ed34d4a274d21d3376ca37df97b3017

                              SHA1

                              3db12dcc6d1e85d4a497e4cb1cc8103f4a9565be

                              SHA256

                              0523b68c3320674d1565dedaf0436ec821a7175a34ac673338d6447aab20fd7a

                              SHA512

                              6a5f4c02a23cabc79ec69738778a6c62685cdbe0d8cbeccd830cd75911e00caac4e1d0a1a2165f4cec070e7c417d0ad13e03fe5d7e89c3352e6f2d25cb6e2f06

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\ur.pak

                              Filesize

                              622KB

                              MD5

                              8d6fa97205a1d2b371a54144aea453ca

                              SHA1

                              11a77318f571d15daf7ad047b06e1ec8a51c8f8c

                              SHA256

                              578aef61fc8b5c2e0f3765b1487f8af9f72f6506050d501fec9edcbf93c7a3e4

                              SHA512

                              9c8dbf1126b97bca195c801b81afdbd8f68e8f44ebd57c563d63f6c1a3f7fa08b1abc76e25a28d1eb2cd8bc47c9438f23b72063f081f0bce6b8f48bd90a56433

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\vi.pak

                              Filesize

                              492KB

                              MD5

                              7b2cbb79992021e2fa2714ae9cdf0728

                              SHA1

                              a543c9b6d4dabd48c6b5d995cfa3c915a2b76433

                              SHA256

                              326e44c27579796e4b55cc281c3e4c9bf5ad7aa87156530709cd6296350758af

                              SHA512

                              5c77c2dd9e5ee9d381a2524c733d3ffb55146160393bf919ed8855781d1e8ed0c4d707bd71554d7868ff53bc546344a415e846dc15f68f0e7630d49a94f14049

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\zh-CN.pak

                              Filesize

                              357KB

                              MD5

                              d15fa5c75a835983af2663466b5a8494

                              SHA1

                              6580f7c91e31491a296a039f681c93810281717c

                              SHA256

                              b33b23552f8f76aa43671556676298c0af54641e9f1de27a8208750148e737ca

                              SHA512

                              39a63db44e1e2b67b1937af803336b221bbe94d3bb31b2117530886fb9e66131efd0eb3969c251d2ee264a7c07bdaecac330c97b1cbe74b3988cac6ff86f3be5

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\locales\zh-TW.pak

                              Filesize

                              353KB

                              MD5

                              c1c8f601f2d0bb06b49d870c80904907

                              SHA1

                              6237df5d4580afccaa6a07f35729f9e2737c82a8

                              SHA256

                              69d888be9d5affc6086e901cf52936477101374abd8186f8e8f6cc38af826691

                              SHA512

                              2d68f116cbfc77a17b9fb550addbde95ca09f10ce1745d5aacbb9e76dd4d041d6de8e423844266711c64fc6733bb805311a5c8838f576d049340f32d4e0eccb2

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\resources.pak

                              Filesize

                              996KB

                              MD5

                              ccb51c8d3ec6b82a3032313d743bdad4

                              SHA1

                              b7d75a001139613a0e3388caf671e23ad413f01e

                              SHA256

                              23ab3bc28fbf364013f436b1b4d30e9645715c213379a9ac136e200547fa88a2

                              SHA512

                              aea6ca862408608ade6ef279c83d746123abe760a4fd426b14395cb4239c51706c7cc5eef55ec71bc2582f6178c3a33d794f2774a9c9c125f6d6ee9386841758

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\resources\app-update.yml

                              Filesize

                              175B

                              MD5

                              9fafe2931214f36d81e3632b0be80774

                              SHA1

                              cac08ef88b787dfea0acc0d18e559fd9180819ba

                              SHA256

                              9161bcc9763091ff3670ef98eff99d004c0f67f13b5dd94715c661fae274cf33

                              SHA512

                              a671cec02c8957864797cad7657b4d2165b40980410db0696cb6dbd05b9485f0491065f1249461fb7777d73cba601f8d1035c9c2718a52a56a217da859c03217

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\resources\app.asar

                              Filesize

                              6.9MB

                              MD5

                              7e9b4e892662690457b8301beabeb310

                              SHA1

                              54ed65e8032a2b1be330e4c5c859da4c7a20b0b8

                              SHA256

                              4dd0fb0d220a24c7a678639dbe9a78fc1b61b93f09beee8cb09b5d35bcb6d7cc

                              SHA512

                              0b34c1dad902fcd16ac4de1c2697d5d29a69df682399920c8181e6701cb7fcc6d2ad336efdb09019ab49ad5aa5d041672a91751cc5e736b2533474419012b915

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\resources\elevate.exe

                              Filesize

                              115KB

                              MD5

                              b33d236ff8fb7aca592b9e1e12c9da4c

                              SHA1

                              df6e78e4127f7e3060547b8ad17b2d49362e2421

                              SHA256

                              e439b50cdf14e2e9fe147a0d819ab8e675151f60f91c5c356cccd42edf4b22aa

                              SHA512

                              07439e198fe7c8ba96f9983202c1a7ce3f4f84b7a77ee8b8001771f74da595e8d11b7ffc76a4ae690d43aad158a3441ba65a82568441753ff7e8b72086c19838

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\snapshot_blob.bin

                              Filesize

                              253KB

                              MD5

                              3a4095538e021b84396b3ce25affafc3

                              SHA1

                              cfc20771227b3c1f3197ff6a91cee68555afb247

                              SHA256

                              c1c9145735032bff20b2fff50a4b92ae9cf47290f433e3f3b32e3b232d610c59

                              SHA512

                              7b71083180f237f5f37cbe7a9755f6606708b959986562f9c5880cccea17b80a5187649fc0cb6965a8b40526bcb2cb6d980d364be528465290658b4d9084348e

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\v8_context_snapshot.bin

                              Filesize

                              313KB

                              MD5

                              bc03a90b230676b55a3cf5bb8179d98a

                              SHA1

                              9623430b66185a6322fc69788f93ef6022b73c74

                              SHA256

                              3ae77d7bdcc7e3f70fcdfcc821f381d7f503dba538a8d63fc4f4c8d2a28117cf

                              SHA512

                              ca3f7bed9ad7fd75866918f5258f7564df125b18523d7d7a80c702931d6a55e46dc5ba2032b5aa350e419567886d8651a248749ad6f88e3871336318dfcceef2

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\vk_swiftshader.dll

                              Filesize

                              293KB

                              MD5

                              556f17e0f1b038ee69a5787c31f758df

                              SHA1

                              978dfb3d52a52290f786fd78de34d3efbe39ec20

                              SHA256

                              1a96a2cb2c43720662abcb836d2befab8e89393977600f496d121fb010c83ea1

                              SHA512

                              421e33c988609945baac79562ed26d891455ab38da2d77d59f59ebef67c24b59b08aa90af96c62444cbf4e552de1b2a127cb676fd4f813d262160989e0012014

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\vk_swiftshader_icd.json

                              Filesize

                              106B

                              MD5

                              8642dd3a87e2de6e991fae08458e302b

                              SHA1

                              9c06735c31cec00600fd763a92f8112d085bd12a

                              SHA256

                              32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                              SHA512

                              f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\7z-out\vulkan-1.dll

                              Filesize

                              910KB

                              MD5

                              d562628f9df56ae61770ffdef79c8d05

                              SHA1

                              2423105a960fe0ceb038ca36d6a37638ebd32b6f

                              SHA256

                              5789ca1822f3a5a67cd2c24e6ff0307e688b76a2e99831050bdcf8b8d155956d

                              SHA512

                              739f9f41d8e3e48dbd20bfecfc5679f38e59b3fc8cb406a77c384fd5146f19efafa1e4f23f15071dbeaa1d0dc71e125966e19fb757fc39e6abe953159669c096

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\INetC.dll

                              Filesize

                              238KB

                              MD5

                              38caa11a462b16538e0a3daeb2fc0eaf

                              SHA1

                              c22a190b83f4b6dc0d6a44b98eac1a89a78de55c

                              SHA256

                              ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a

                              SHA512

                              777135e05e908ac26bfce0a9c425b57f7132c1cdb0969bbb6ef625748c868860602bacc633c61cab36d0375b94b6bcfbd8bd8c7fa781495ef7332e362f8d44d1

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\SpiderBanner.dll

                              Filesize

                              9KB

                              MD5

                              17309e33b596ba3a5693b4d3e85cf8d7

                              SHA1

                              7d361836cf53df42021c7f2b148aec9458818c01

                              SHA256

                              996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                              SHA512

                              1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\StdUtils.dll

                              Filesize

                              100KB

                              MD5

                              c6a6e03f77c313b267498515488c5740

                              SHA1

                              3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                              SHA256

                              b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                              SHA512

                              9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\System.dll

                              Filesize

                              12KB

                              MD5

                              0d7ad4f45dc6f5aa87f606d0331c6901

                              SHA1

                              48df0911f0484cbe2a8cdd5362140b63c41ee457

                              SHA256

                              3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                              SHA512

                              c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\WinShell.dll

                              Filesize

                              3KB

                              MD5

                              1cc7c37b7e0c8cd8bf04b6cc283e1e56

                              SHA1

                              0b9519763be6625bd5abce175dcc59c96d100d4c

                              SHA256

                              9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                              SHA512

                              7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\nsExec.dll

                              Filesize

                              6KB

                              MD5

                              ec0504e6b8a11d5aad43b296beeb84b2

                              SHA1

                              91b5ce085130c8c7194d66b2439ec9e1c206497c

                              SHA256

                              5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                              SHA512

                              3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\nsis7z.dll

                              Filesize

                              424KB

                              MD5

                              80e44ce4895304c6a3a831310fbf8cd0

                              SHA1

                              36bd49ae21c460be5753a904b4501f1abca53508

                              SHA256

                              b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                              SHA512

                              c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                            • C:\Users\Admin\AppData\Local\Temp\nso42C7.tmp\package.7z

                              Filesize

                              7.1MB

                              MD5

                              151ff9f47468dec18d1d548734c59c3e

                              SHA1

                              eb004f50da07a9b206f02e96a3ddd57429258201

                              SHA256

                              cdf94ebb110af872b0c0f385accbe0fbd77aa5a642c3c28cfe613b8b3ebaca5d

                              SHA512

                              4f5840926bbff289c0964b9c8d35f599e9369dba589449a780d94e6c9477a134eb6bde8cf519d9f400e5ab29cf7d9b9c958d924e9c7c4201491f80c8a1ac8ff8

                            • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                              Filesize

                              2B

                              MD5

                              f3b25701fe362ec84616a93a45ce9998

                              SHA1

                              d62636d8caec13f04e28442a0a6fa1afeb024bbb

                              SHA256

                              b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                              SHA512

                              98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                            • C:\Users\Admin\AppData\Roaming\launcher\Network\TransportSecurity

                              Filesize

                              351B

                              MD5

                              1c4befa81da8ecf1b7722ed820d3ac5a

                              SHA1

                              e98bf7e34c6a9344067cd69c8a1ab653f5764927

                              SHA256

                              bea32cceed66bb68321a7923944a4af09f485002a7f68140c73923e97f05b577

                              SHA512

                              0a7f219f5c6970596fa5c087b8c65622fd3a6c907be9b463c6cd2b16bbf93990bec5101d7a4e61215d3ab8d2e7ee63c0accc031e7a05816b8f03069d0b7e077c

                            • C:\Users\Admin\AppData\Roaming\launcher\Network\TransportSecurity~RFe5927c2.TMP

                              Filesize

                              351B

                              MD5

                              0a098e40bb4f7a2b2e6cf5d62d864c3c

                              SHA1

                              f995c41925ada07b62529202c3f4d6054472ab0a

                              SHA256

                              14cd1fed88a99ec44803580c7bc50f51fc581fa17e51bf6fee2cee9268592ecf

                              SHA512

                              b426d377242f33c1c43878c341fa843f8dea00b2d7010d49e792f3c9dbb5de56b64e1ad326caddf8a842ba4933571f9262a3600765236e776dca7f1f59178d1c

                            • C:\Users\Admin\AppData\Roaming\launcher\sentry\queue\92f321fd705d45978ce8651d4955b29c

                              Filesize

                              6KB

                              MD5

                              af18a4c872ecfbdfb0e9e4cf6b9f95c7

                              SHA1

                              a74e0b0f22d2815a676af352f4b79c12e48aa92e

                              SHA256

                              b05b09ea1d98fe0861b123891478ea2d903eb7c1320974d2eb39c72e2a8f71de

                              SHA512

                              347e8baef5e69c1386b92f6b0417b06c670f33be8da6de1136e463dd2b7bc0f6adf0c3d9b1f8b14a526126215ed8da268720908af581d0ebe492872698e7ebfe

                            • \??\pipe\crashpad_1320_NTAKGEAZPWPTMXVF

                              MD5

                              d41d8cd98f00b204e9800998ecf8427e

                              SHA1

                              da39a3ee5e6b4b0d3255bfef95601890afd80709

                              SHA256

                              e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                              SHA512

                              cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e