Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

17/02/2024, 20:29

240217-y9yzpabb28 10

17/02/2024, 20:20

240217-y4ry7aba54 7

Analysis

  • max time kernel
    23s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/02/2024, 20:20

General

  • Target

    Launcher Setup 9.4.0.exe

  • Size

    80.5MB

  • MD5

    5301c201d43582969608deb750c031d1

  • SHA1

    e0c81f24c1e7dfdbdbe4b6a88f06c16be264dc44

  • SHA256

    0f2fc74204872d5d29737e90ace73bd23edaa2e5af8211669f2a90a0a4767ae7

  • SHA512

    6a3781a72503d9475362f95ca798f0e6798e57fc69c17ec0b3b857b199f6cf5fbe4e7a57987b8eefa2aad7a69f39b3212896ff997413012225da772c1f27c86d

  • SSDEEP

    1572864:92b+n6npC5ZhWkKV0mxFee1STuEWSzPGZq5xGGmG6qcK2V78QrOptItrjYpi:92Sn6npCokE0O1STuEWSCZqfGGdTtQrb

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Launcher Setup 9.4.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Launcher Setup 9.4.0.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3384
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Launcher.exe" | %SYSTEMROOT%\System32\find.exe "Launcher.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4960
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Launcher.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:2804
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "Launcher.exe"
        3⤵
          PID:4744
    • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
      "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe"
      1⤵
        PID:412
        • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
          "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1556 --field-trial-handle=1716,i,9401673563642443158,14031805778852104310,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          2⤵
            PID:780
          • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
            "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --mojo-platform-channel-handle=1956 --field-trial-handle=1716,i,9401673563642443158,14031805778852104310,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
            2⤵
              PID:4448
            • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
              "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --app-path="C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2424 --field-trial-handle=1716,i,9401673563642443158,14031805778852104310,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
              2⤵
                PID:1956

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Users\Admin\AppData\Local\Programs\Launcher\D3DCompiler_47.dll

              Filesize

              227KB

              MD5

              ab4123cde8ddb61b414823bafa0d7435

              SHA1

              28d9a2c4b82b6830ff9854a46c814c7ed702eba0

              SHA256

              e05ef00f036af3b8d60a7e634d1adaa5c1282ae94294d305a9a32bf22a03bbd6

              SHA512

              5b9e587ebe442f890c59994277e45cabf55a949d7d47dca2ac874d21eb127143b7d71460d44d5609a0c691e9dd6cf952dcf13d8ff79d535d4280db13d9c31e5d

            • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

              Filesize

              530KB

              MD5

              7d5b143665082196f6f9f953f41f11d9

              SHA1

              12854f59c936e9ad99f2d083470941f750c582a8

              SHA256

              98cf063fd5b36e81389fe8ec42655dadfdb85d1f5f68d345cf8ee324ae4156e7

              SHA512

              a915e3e3d8c55e23f5c4f3cd8c39d8d81542b7e84e070912c43ad49559e90fdf7aac29f513b2eacaf9198d7d34e0395481928b1bc8991632c543ff88f05551e9

            • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

              Filesize

              328KB

              MD5

              9e336496bd07a9c07b57b2381bbb58dd

              SHA1

              f4ea9bf4bdd89456f865e6d8158c9a306f586553

              SHA256

              e65d4cc3a75ffa333d2fcd4c1a7a819ffd46f5a7508a24d6e86b3261320ff206

              SHA512

              01f38455740f7c64ba9b8bd34fa545b3ea228824bf4d37b87cca63f9529f6dd08e3df8b7ff776d155836bd835adcc454c49539de7eec4bddf004269b3bddb4a7

            • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

              Filesize

              413KB

              MD5

              96a5b576f3fed857a5d8c58f4dee5d3a

              SHA1

              25920b4b6ddf476f057cedcebf6f580bc72ed7a2

              SHA256

              b474d0b4279fee57ea301379378f0862dcc2e07b84c2019f3eeadb151d4c1ffd

              SHA512

              95c3081c63385c3b0a0496e4b76ca0d22186533aef6d5b9b838d4f1027e322f5a1aa0a6313259ab76e4dda160ba35754b30f9c1842956c1071b8c96edde94f1c

            • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

              Filesize

              647KB

              MD5

              708ee872bbc676b1bb3ae11e1c526858

              SHA1

              ccb2b38fcc09fddf89cc3dcedb474202370b45d5

              SHA256

              12c6ec490c5310e8ca51d2570a3c0ae88e7a0b5259e5a28cb31cbbdbda047c9c

              SHA512

              b8974ede745da89d31063227c304ed1ec32a4d6d7718b4f2b13afba8417d57cac85609887caa3251a9d06af6467b7ca25e0b0b01facd87af9188194b0e194afe

            • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

              Filesize

              414KB

              MD5

              e7ce2edd34f26832eadefd7a572c7868

              SHA1

              fd1520682d5638a01acaf8641cae560fe0a8ef67

              SHA256

              26fb97e265b206a6ce12af9d126028f65034ccca2ff358dee246b90bd2b2dd7c

              SHA512

              1bfd938389e84ff511ac8445ca7cd96a6f68cc5f12418474791825dbfdc05507c7d1c865dc1e9303c7839b7f452dda79c90f6f4012fcacc610ced65786f9f462

            • C:\Users\Admin\AppData\Local\Programs\Launcher\chrome_100_percent.pak

              Filesize

              126KB

              MD5

              d31f3439e2a3f7bee4ddd26f46a2b83f

              SHA1

              c5a26f86eb119ae364c5bf707bebed7e871fc214

              SHA256

              9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

              SHA512

              aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

            • C:\Users\Admin\AppData\Local\Programs\Launcher\chrome_200_percent.pak

              Filesize

              97KB

              MD5

              d42a803de3efc58aeb03e1df931a2e15

              SHA1

              4a4dbe830c00627ab0f0f7c758e747e1632ab0da

              SHA256

              1c591f2482c9776dbe6b4ef6b7ee7628bd1dc3e63d40648834972feadf982e33

              SHA512

              857ba05a84ff43aeedbb8c66a062b125f9fe01f457f4a0742c857ea6e711fb43e5ff7e493323a3926cba5228f76afa0521770a158a66e7fbf766d20c1b3a38b5

            • C:\Users\Admin\AppData\Local\Programs\Launcher\d3dcompiler_47.dll

              Filesize

              159KB

              MD5

              7ad9b48d31d5a85b777cc5ec5db84ffc

              SHA1

              14187cfd4baee40dc18230a2cbc20e8fb1901821

              SHA256

              5bc6a406c5aff43af8d14d313403db04e96ae7d18952c9f258e431f9303c787a

              SHA512

              1ef3f525ef0144c023566982f6b4edb26046c5f6848814c15fb6c813a8eecb5f2257ce75c5e89daef3d27ee091f3a173af670a81cbd1d6f70bf6f9ea42b43830

            • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

              Filesize

              80KB

              MD5

              511b1e583afe4bd9041588e2397be35e

              SHA1

              d6e4dc24631e7e88c04d87a762a27b250cd19821

              SHA256

              90310535e9a88cdb51fc158e1dc857ecbe478aca12a236f98a2962d57b6f990b

              SHA512

              ca62af51139c033ff6da2abcd0641ee6afcf62aeb8efdc7735ca778f601879cec25274bb51342d005368aebefd938e76bc81c16849e20cc53a4fee475c9f8846

            • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

              Filesize

              26KB

              MD5

              c91247e0824d8e504f99bced8d2b3b69

              SHA1

              abb8173ff971aa459c2990d195f2a96ebd768e0b

              SHA256

              3537923365a7b15060c88cbbb73674b8301feb8ed18eb573074eb2cdf03030e4

              SHA512

              6845d0eb72f14ac9ae1ef866f9e1d15ec45d83a1539f275f203ec7422fc885999e944867730719f29a2f294e5f5a1b46629d9f0d25dfd138ea9f5f81565d6315

            • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

              Filesize

              64KB

              MD5

              88e0c3b254ae239442ca452aa0357e48

              SHA1

              94507cd72b2bbc380098f1a356336fcfa310b5df

              SHA256

              a8822ed1cbb74301ef1f801407abf694637467efded1b523fcef97176ff5afc4

              SHA512

              e7ae821602211e6bf93e166cd9da234ce26cbaf20c27a64f9232625f0f918d60a1ae74d571d4c322a9f4f6051d951b9248b111c8dfabd815c36ea54c43a007f4

            • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

              Filesize

              70KB

              MD5

              d492c87721c6bb245321ae0f1dedad22

              SHA1

              e35d4716b251dc60b9f41c82724123ac45fe2daf

              SHA256

              d031c8f02ecc613d366644db99fed653972e2c0c3eec226c6644e91c02e18071

              SHA512

              f9ec4f24b44f5c318fa4f4d9311c359e1bc8fde226c79b3b3b640eafae8c52439361a31c59411acf0f7cd4fabf086c0f27309ac414b854e461c6de42d88fcf96

            • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

              Filesize

              384KB

              MD5

              8bdcfbf79e9689191c06a03976ddc2bc

              SHA1

              0ffaf8bcff92752c50cd9e3068624c88e8672db1

              SHA256

              145852b2ac6be20af8b091beb6bc99d7f155c0d6a308540bae72eb8e87ed9b7e

              SHA512

              e98cc8cfe41a38925c0b8e0cb3b76fbc9c1da37539160f382ad579afd95487e590bd19cfd88cb5a8f27a060c35fbb15fd02ae52eebb0526e2ea9bffefad3f303

            • C:\Users\Admin\AppData\Local\Programs\Launcher\icudtl.dat

              Filesize

              799KB

              MD5

              0af3c0929048cbb64f792053ffd06ae5

              SHA1

              ff6b732e61ab0ee8b2059db19879c708c83705c4

              SHA256

              fd02552c24adbf75290c89b64874d2310bd19776ff5b7d840d67f5589a1b9ea9

              SHA512

              7ed3fd2b0f039a86af5f6c237a64f593b13036b052d4844c092a477fb5cb4291147255829b69f08bab310a5dbcb52d311b8d9a78a044dcdbafac9f9c7536fb06

            • C:\Users\Admin\AppData\Local\Programs\Launcher\libEGL.dll

              Filesize

              211KB

              MD5

              b1442f616e4c262673cad5c4fc529901

              SHA1

              e74193e62ac5452b45f4c8ac4a705655f1b16d25

              SHA256

              35ba60431b5d7f5749290b4e6c777f13318321c36169482d9d733636138c3a9c

              SHA512

              9032b72dcddbcdbb1e88a72e31c3c016db3740af3fb9f165025e3d5656cd78aee584fcd5b6c7ba1892620aa5f9bc248df69b062c9e4a6a52bf3dabc527d0d14f

            • C:\Users\Admin\AppData\Local\Programs\Launcher\libGLESv2.dll

              Filesize

              286KB

              MD5

              e1b377b04812bc44d9bd368b7e04fc0c

              SHA1

              837c278c3b00767b2658067fb621b1a1a4ed9884

              SHA256

              dbd24c730c91a4ce15c133a84b85c8c76cd5dadfcdf5b343847f2b0b16d4aa49

              SHA512

              7d667b1ae25a4f010569d88677cf1711231ec976a4aa4146e5f860def7306558f080760fdd120f8a889a38e5ff825c972e930ddfc21752350b890ce01e3ffefb

            • C:\Users\Admin\AppData\Local\Programs\Launcher\libegl.dll

              Filesize

              257KB

              MD5

              4dfff55b916b98fe9c36f864283bc8ed

              SHA1

              4e5c2fd6a68e622556d7282c1321e1c955f93d9b

              SHA256

              79f7f1520154c3e0153a73058083083f906ee546d23196be36f0f7766e547cbc

              SHA512

              53fad953d8b32c84188366c052fdb10258c8ea7b5f2b3dc593278fb79d0f373758a6666499cd988cba58e38597fec4aabfd2a9a0bb0161c70cbef0828ceda766

            • C:\Users\Admin\AppData\Local\Programs\Launcher\libglesv2.dll

              Filesize

              403KB

              MD5

              6422c3a20741f65d34dbb600043b86bc

              SHA1

              7ccffdc845b744db4b2c719ec376f7d8b5b50278

              SHA256

              6a0642da7227121e5f3c0dc83aa98072a5021bedc845b011da3f3d4112565a85

              SHA512

              344c2ae68b90fc51f56a679c34d940a6091c28a1c3c5db7d761f888ce1b519034282fba1949a9bfea5fa079cf91a6e54c1d71a182094b67eb36011c15235b88e

            • C:\Users\Admin\AppData\Local\Programs\Launcher\locales\en-US.pak

              Filesize

              224KB

              MD5

              5a8c2cfa24a5dcd4ed7b5f8c9157e7b2

              SHA1

              7db123b84274b573607ce5e7e73ed3c9ddf6efaf

              SHA256

              15ebf4a5cf2e2b6269ceb0a3454e9119530a942fcf7a9a20fa7ee149a4c520e5

              SHA512

              5ec62c9bb66ae13422ccb93af1ee583d4c9bbd19832b25932023be9c9f951f28d5df971da756c743cd9243862d1847ea8d5c8918a906235b173ac8136d64dca1

            • C:\Users\Admin\AppData\Local\Programs\Launcher\resources.pak

              Filesize

              149KB

              MD5

              f15de97b4800b76731b7a6921c503252

              SHA1

              8add6d80669fb7e468acc5d458eec5ddec17ee15

              SHA256

              cfe3fe5ba438c02ed07034548e166a834c4e0f588979ed421a484460593153d3

              SHA512

              bf199e1cec6823c0d6d76f7a1f77df7f9761dc586bcf8140300db00d3a8b643c4cf2c39f94615e78d9b14a1a3ea2173ce97a2ef1386b21543e23384d7be3e778

            • C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar

              Filesize

              279KB

              MD5

              fd7a59906ada65aa0ecd309296570942

              SHA1

              7fdcb492a0a1e230294701735561f86038801e18

              SHA256

              789feaef1aab155f8f57ced7d14e6775909d51d39ddeadf3dadb1dff016b5ab5

              SHA512

              bbf853515b0f8b8567a11d1131fc84a77ef791d64bb85c79f5aa7f6d5d9807f973aa2be0e64f91beb2a1d4c8668d9a3f1cf2d378b29c0d21b268d09fc39eb17a

            • C:\Users\Admin\AppData\Local\Programs\Launcher\vk_swiftshader.dll

              Filesize

              204KB

              MD5

              804111f5e74b6d0e4125bfa16b903b40

              SHA1

              71c79f55cc442e4b70216e0480c039a42324ad0a

              SHA256

              39dc439b64100067c07608a9fdc75415c621cc15948ddb2fec02d084917e3d4c

              SHA512

              3c79748ed470717cc66595d26b098c851eac64a150e7c54babb325dd7e88865d37431d141d016d8e4595d23999e69ec8ac72744dbb519b9a21a0e387b0f86d99

            • C:\Users\Admin\AppData\Local\Programs\Launcher\vk_swiftshader.dll

              Filesize

              319KB

              MD5

              717dd580d292d1f3dce4d49aa5b2c4bf

              SHA1

              9d9ccd4f4a55d46e6ca718463758ed8faf7bca0e

              SHA256

              0a6f4e5ab101f006f5c89be1e9db0628132d905f5993c789e24d97aad084b443

              SHA512

              cbe88c545d9e6bd7ffa8f5a66ce8920413113d495ee7d129420fb7e58df1fce98ba5d2aed375bc51699f8dd935ccac363466e37919d95be4245c8fee9f139cc3

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\LICENSE.electron.txt

              Filesize

              1KB

              MD5

              4d42118d35941e0f664dddbd83f633c5

              SHA1

              2b21ec5f20fe961d15f2b58efb1368e66d202e5c

              SHA256

              5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

              SHA512

              3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\LICENSES.chromium.html

              Filesize

              606KB

              MD5

              190965e8819f07353ba2c5eb50ccacf5

              SHA1

              c578c2e97eb5c5832f671813287f7472f176f157

              SHA256

              ae6ae1a84310344e0105e00c3abae78ef01c489de21b1a98184aee0651360d0a

              SHA512

              39cb3804f878f5851b96abe7960e0387351d36efc720de4ea11a6d518cff6619310221a26e2d94810d84d004721457cfa92772ad5bdcb6f20af6f236d4d6ad9b

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\Launcher.exe

              Filesize

              1.3MB

              MD5

              2a00bfebc6504d21fe83439a79ff796e

              SHA1

              2311c9735e2ca60fc979309d19137ca16d2e5942

              SHA256

              fe32eab322fb8eb5f0cc8c51fa64faf838d32e5372bc0f58d375714762d77c2c

              SHA512

              82f2c0f5205a09373f2f7fc0412cadd16fee7f7342b3dfbc3ebf04a7ff09f4f4f69b7d04913b7ad5ca554a2020e882cafff9c91644c104cb11dd904c57dd2c2c

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\chrome_200_percent.pak

              Filesize

              175KB

              MD5

              5604b67e3f03ab2741f910a250c91137

              SHA1

              a4bb15ac7914c22575f1051a29c448f215fe027f

              SHA256

              1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c

              SHA512

              5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\d3dcompiler_47.dll

              Filesize

              1.4MB

              MD5

              2dce9f0cb6101bf67d4d337b093e099d

              SHA1

              d1b3eaaa5b7d76aa6bf6eccebdc849e34e1da52c

              SHA256

              3d9e203b46e4998166cff83e7e62246e03b87870744a20b08e7c0fe21a6b5905

              SHA512

              430b1260e339b208dd506c780825e045d820c268d8fa1bd43c460664d6eeee61f0eeabe5b4329abe95b8f0c9c4799bb5c2be0b457e45e6a45d8a98d42741c1e5

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\ffmpeg.dll

              Filesize

              65KB

              MD5

              dca14f6ce9f79cbfaee358e37969c11c

              SHA1

              4f91b69ed814db731b4d985fe61fe5d72b87c847

              SHA256

              3bbebe30a5477f494b8c3085c3c555407a5b553fc7e3401cbe37935989eef05a

              SHA512

              147879495e2037f8d49c4d1b46aacea1352f263d4f95623eb7f9c4b9e170e781cded4a2ae157cf94dda349790c9627917a3eb973bace829ea61bb89320556e22

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\icudtl.dat

              Filesize

              64KB

              MD5

              04a35da629646d54e6c0bdff29e5a635

              SHA1

              451ac17aff27b7ca23baa48ce5705990efdab187

              SHA256

              f43415867000b040a6685b3bfba243c914c0a0e8bfa9d0ed28bb72ea9b53a445

              SHA512

              6e8e7104fa0c720714a7e265ef4cc2d7361806036f3a2389a38955ca35c6a932a45cf29951aecf15e5b11426259745c4c88902ef7450d715d5e6febe6aeb4cd4

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\libEGL.dll

              Filesize

              473KB

              MD5

              637eeb39ddbeb3ff518ff1988604505f

              SHA1

              8b3d9a0d542718fb906f8fafb2583d7bb53176ef

              SHA256

              3c51a8e53ef7473e9a335673e909dc9c67bf962997e6e2a319c3bd70fd52b4ed

              SHA512

              3257f9c96665f1bc8bb39acd0d98015b7d5e32f3cf3f84e795df4d19f6bd3bcc14a4e89759cc0de83289b79cd290fd5f4b176c3e9a4cb2eca3acfba0c9e232df

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\libGLESv2.dll

              Filesize

              906KB

              MD5

              9df1ff5da234c180d6838fec3b0f0bf6

              SHA1

              9bc3414ed553821aa8c4d4baa1191734382ba8a4

              SHA256

              960f5007f275179fa08653f56e907b315a5335cd44ff3bcc99377c660d20ba20

              SHA512

              77d6d75950a9eea04af13e333fe7bd7d07007aa22ab9121dfec6006cfeb057ae89864f153adc2171647d792f4c21483102921aabfd61a85472b63006d0c5a1ba

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\af.pak

              Filesize

              83KB

              MD5

              1f68ab3a4a89d3668b82a89ff0554556

              SHA1

              5ff9e5d57d67e9da10dfea7748b1ac4d25d5628c

              SHA256

              033860e7cd1a4cf32bec6ed06728f9ac64d46e64c425655541803fcdba16165f

              SHA512

              a5d9b331268e90b4842d0025caaeb44920e39a99ba07589fbb2e20ff025af2eb10f8667027bc57345e1212f9fda39f7ecf005c708b3fbbc5ac36eca22f32cd47

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\am.pak

              Filesize

              226KB

              MD5

              2b6c0d2958a46e70ea54e041b9a2d105

              SHA1

              fe844ef0cf8b2d545dcc196766593158daef0b43

              SHA256

              ab36098993cf602db2277e7972c066d256649ac97763b88a7e4aac8bc1e2d1f3

              SHA512

              f6afc15fa23e2f17ab699f5f56e7709519a3ef421f09cd4dac544996812b4d677167fa7d2ed012b85b9107353dc8a0108b2559176f8155491f7d7ef9f5760321

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\ar.pak

              Filesize

              168KB

              MD5

              5ce10d16df39a47b17ece4904f61ceef

              SHA1

              b89c478e905f9710cf524326c984198bfd5ee340

              SHA256

              2a672c3fe44bf996f11e8a94ff40881c76a544aab24aa3da561e5f470a344bf5

              SHA512

              c44123b4d1cf07e8e38b9f373b15652c78c7c6591a8b0f6a13682f706b40153fc702ed3feff9258100bb752a1d54e7e894bbd58a141bf08d91bb0bb589c44b1a

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\bg.pak

              Filesize

              146KB

              MD5

              19b8f21bbcfd268c04f78f1b97889c8d

              SHA1

              e1edcb41131f662226162638b492bb5d0c0efc2d

              SHA256

              282a4284d7d2c1eb5b20a13d23b9823bc9c7b7d121197258240dfa36d755e68a

              SHA512

              7da6e7dbca9ef0756dfe7392b883f6db81e35051ebd2dfa65d0014c1e578c5e848df9d10497e79c80dcfc95f54d26d24aedb1103373897c0426a584ffe6ef585

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\bn.pak

              Filesize

              38KB

              MD5

              527d867c6d3b7dca7f22726bd3c764d4

              SHA1

              a61764fdfc82620879f4d9f322d26f1f818166d6

              SHA256

              b923db3f9b586650a8ad656a08176784d29639a2c5207709e8bf9e195a759543

              SHA512

              672d0585ca00ab74e054a6ca4dad7dd52a06855145b9ebb3051414dfcac460b7e1b92f44ca8e116636be46d28196910e5290389834138562747e3984ab2e88d9

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\ca.pak

              Filesize

              77KB

              MD5

              c79a50c0d3309d5d22dbf940dc450e85

              SHA1

              8596e8df95cd382db4013995a1238fc7aa07eb44

              SHA256

              0754611990dd95d2dd995a21f1476924a55566f8a90a1908bf2141683bc67d53

              SHA512

              42446da4883f77cada8299e3674b0a5045cf6a27ccdbc06f1a4e3d6dec1a510f885133d2a9a8b2c3db659221becbdf187763d7ba5bb064b8dcb008aa81d22d5f

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\cs.pak

              Filesize

              64KB

              MD5

              220ddb22ae38226a9862a60d873c983b

              SHA1

              848ee7dc3d6e045fec68c828fb21b2d3023183f0

              SHA256

              0793a75561b44ec860cbe758336a102d494e0a2033704ba2f7088059389749d7

              SHA512

              e8fe5d970ddc7bc2374df38c5550d05a365c094fac3cd1453a80434a004c0a3dc344834f689c55aa43e6c869b1c697b2bd07769b228af6317ac264d5b6fc2324

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\da.pak

              Filesize

              100KB

              MD5

              bdebbcd8fceaa2e917e0e5111768c0c7

              SHA1

              6269381ca40a9b2c2a41d1290e5537e6771b1283

              SHA256

              8c5ea81cb0607c4bb2e9d6a39e3edd5df909111df2e1c6aeacb92647d252f701

              SHA512

              c774b424e07ac205d31949da4314c248b687319bdc20bf08ea28f3cced591b41a669842e9d353215099b4903de76465010565ff04fde750a9c929628376cb788

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\de.pak

              Filesize

              64KB

              MD5

              338b192678bbf813c8bc58a761eca2be

              SHA1

              74f0431c05d652d0a014a84b03f468ef2a2a1abe

              SHA256

              0b59ff9400007734f88e90789e9d0420af36754783dac31f5fe7e67d4d8a2580

              SHA512

              176b9070661637c4e14f167e3d5b0a9c4786a11fa712c46e34046938a02155ad856913e94928a7f8411adfd7bc51b57741d0ddd837b38e396c7fa6c972eeaec4

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\el.pak

              Filesize

              44KB

              MD5

              d7bf7f3332b5b995051700567c257d3b

              SHA1

              21b2cdb32647c2e661caacdeefaa1787a60d09ff

              SHA256

              7069f73b2eff78892486601602a2652df828a8fb615185fbc42ea94b53048799

              SHA512

              0de12bcac1c46a52a8369e9d2ea8f5d8d0e30bcf68d9e254de6d2e7fb1ad69468b7eec9ccaaf7508ed0b7eb78de8047ce84fa55db4caffde74b53f6b69487eca

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\en-GB.pak

              Filesize

              42KB

              MD5

              1c62ce82a54f36c4bb4d0c190067dd25

              SHA1

              02bdf87729c72dbe66446cbb54a873141d2fb29e

              SHA256

              0b65def0222e1b8a41416d7c5ba154abd363eb5be7867d2157e97c8892b33c14

              SHA512

              a39e17222a0ad56afae8e9670b3325274b4bd662fd78d1c0e6c1028b8f073aad260d8d0df9fa26ed8a8e644fb3e51eff184e9e45df83922bbba51dda766a492e

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\en-US.pak

              Filesize

              204KB

              MD5

              dbb4dc345658d2b6fc107c3e08b3ccb4

              SHA1

              a2d751a2560426e5aeabdd41778bcdbfb5379b3c

              SHA256

              e52bf2b70b9a59b6d5d4b0d03e632a69ca21e6864fc4d1ac9c12812e0a456ec1

              SHA512

              5f4c6c9b24064e1b6ce887f8ef91ec6ba62689dd3425dac8325806d0fe4976b8358edf1a6466097f783583de93b7c00c8c0327c5907f741b599f88f5440aaba4

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\es-419.pak

              Filesize

              284KB

              MD5

              cdcb09a30e06d8510b98ede772d94619

              SHA1

              04a8c60f7764af7c22d0f0ac683c4c062a69d9ad

              SHA256

              4a2b598939d67692b6e8a006abdd96044be1e9c7ae88f68650073831ee8ca23d

              SHA512

              cdd24cdd31854059e76b277758b50ef299a125065b16d5c8c0af09e732884c5277de5cadff1b08edb9c73bd9aad21acc19f19d84999170419f44b60266374d1c

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\es.pak

              Filesize

              243KB

              MD5

              d2949300b3998b95b270d66f76c8456f

              SHA1

              08a6cda6d10876491ee070d156ae391ed5f65ca6

              SHA256

              a49efc232115f99570f822131d1d4c12f48517ca7238e873b64c260e1db526f0

              SHA512

              d697ca454a453c0bf0fc25bf1a8573f8fb45da55e27b9725186f90e06a23f15a7e53da3c00093d5c0344061bdb85fdcf685f5c84083906ef56ce5c18c9a74aa1

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\et.pak

              Filesize

              279KB

              MD5

              6ec3123d68e91f5a5180f1875fc47e05

              SHA1

              027edb2cb135288c924059cf89098d01f511b0b8

              SHA256

              68449a15195b1f2b7bee466ca8f16ea299d68c3b931993c3442655697ecf60bf

              SHA512

              2b4f79f51f19041e53162df3c460ea4468d2e66b47a9012efb1bc65ac0146250a0b389a6cd8b4f93d0ff74c1667165ea84502a2c51990345aa74dd3374f47d98

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\fa.pak

              Filesize

              171KB

              MD5

              aa9a77589c52e8a8eb222091d53d154b

              SHA1

              f9c9f6ef466cf7b64a515513029bec92b1763be9

              SHA256

              929d246bf4105c38cebc47a2b328117bf0dc55a93c49b31715f40f55f51ff2ee

              SHA512

              f6673d8754766bb1428349c585dbbc30b95df831954ac282c698ba873169930dc52892175899c21205eb88845904f9084cb4f4e56fdc275a237a2f76b0e9fe7c

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\fi.pak

              Filesize

              351KB

              MD5

              fa7dbd2ee35587ff31fde3c7107e4603

              SHA1

              baaa093dcb7eccf77ce599c8ff09df203e434b60

              SHA256

              5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c

              SHA512

              587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\fil.pak

              Filesize

              218KB

              MD5

              a38bc27ae85a8f6002300f68fe3610af

              SHA1

              0543ce95211726794a1dd4acc95775647aecdbe0

              SHA256

              c43e71a8d54877c23ea9ea86f7a5d65967c07b061af7f32e270744c6008e189c

              SHA512

              e88047c1864c7e2c2101333fdd2b241c0851aea94d6e8372cd37c186190845de58be2e948c1ec6ba36dcc1d55e0dab9a97e87e4cd1c9826518448078380cad8f

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\fr.pak

              Filesize

              255KB

              MD5

              60631a036889621295fd3917b685cd61

              SHA1

              18f59a6f276f68b8127ec9d7e173573732e8220a

              SHA256

              54a17db3852a11184580bacfd6aa0fa66d2fb6b392eab74dca200f9c807ea23d

              SHA512

              8c53c6ec51532250064e5d59cf0b9e7dad94f1e10d71d856fdaa26896a5b1adad0fe4df7eacb1f9ef3859d2296506f4ecaf4bb50156daaefbcec1e252e135903

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\gu.pak

              Filesize

              163KB

              MD5

              4790ccc0c27eb2e49ff0d75469c01379

              SHA1

              5074f30b9c113dd3a5ae50fafdc502fec2493135

              SHA256

              336b2bb5e8d51230411b03d3a00097608826725b4156d2bd93864a3ef5d7314b

              SHA512

              af37dcb65e862818c318ac45df68e8c5bf89e79ab86d25ad1b9a63d1ef3bbc732ca1abe76d7d7cb1c65dd7aaf6f2ab95019cb1aaba57cfce72a0891821f14bbc

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\he.pak

              Filesize

              108KB

              MD5

              3cb6e2d09c4324c6c4cc214b16c3f583

              SHA1

              acb3b934162ecdf049a3740fb35a0f7e46545dff

              SHA256

              67a5bff9323280d4a98ffb6113e0181807820eda4c41b7d8ff72d9ceabd93bd4

              SHA512

              adc6cefcafd30ea8bee1ce192ba53b658f0ddd00cd7fcf3592e444c2a52f7c7287f1c6a5e0a5b8f2ef5148b869cb18a5c088c4e900277b76684f133861741940

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\hi.pak

              Filesize

              104KB

              MD5

              5b666d1976420378bc88f9cd9a78ec6a

              SHA1

              4e98289f07d1bbdbe75eebf085f54d7b4f5e7690

              SHA256

              b4f6f1462a122b978aabd7cc6511e21ee901532ee7a0e8021799791b114e6e32

              SHA512

              18260c30fbae08825e187cc9e645e2dcb17fc5b119b4fa6a3c8098b8c0b514bc9aa3f93782c96ec7c7b8282df9aa7524d9cf3d9509fd5894333c29afaa9a5bf4

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\hr.pak

              Filesize

              52KB

              MD5

              87e0d45383468c5b397821c87dc68689

              SHA1

              c3dd80f7b421ec09edd38368a939ebf1f67cf858

              SHA256

              e5214fb912605cc8f6fe42a272e5b353aff76ae666937a8c47ee86b4fedf4b91

              SHA512

              406b3a2406c1d58a1318938a5c9780db9f8fe4dbe29072d9ebe6cfcfcf1fd2098e2da2b1b294ca6459efd44272f32a56b2ac54b109bb7c6f6f24e52bc56a11ef

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\hu.pak

              Filesize

              167KB

              MD5

              3860d6936d15063af666c46512a3bdb2

              SHA1

              d72f6c8b08abf0006a6512d28c5684e981bfc0d7

              SHA256

              6f598e1611ecc19c8477cc2b798ebab590619de5696d399f2a35fe9fb52cf985

              SHA512

              61169b4356cb10102cae76356c771131fa0c72097f53a2d159749942da7dfaa7620d2b5e55551e9de5b15646b03badf53a8e9360de3c16cd6ff6c5e1c9cf615a

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\id.pak

              Filesize

              117KB

              MD5

              a67ccd21d38349e637db4f1c906487c7

              SHA1

              5549e22e38c1c61fa1fcd7e916558c0ee29fccb1

              SHA256

              01a534784def6e8b2aa274d3af9632ac070b117904b8c7639a771513f0ae4f51

              SHA512

              8a6764889ca1f14be0247355f2f103e37a603a538ed42781edf3dae8d8d8ae6ca9f2a7ec5f7cad77a49a6615463323c00afb74e370db2f71c11561853d197841

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\it.pak

              Filesize

              185KB

              MD5

              0a4cd1ff4127d48f442937d75571a706

              SHA1

              3cacbbba349eaf9a94e31bb1d14478ad8718020c

              SHA256

              af73863264ac160af76bd31e8522d67a2e3a5c0831e66a3a09bc8f02e0fca6f1

              SHA512

              45411af94f7bd12e1c30faf6896a89f263efa2e96e7d19d0c3c2b14100987b9ba337d77da70708dbeb6e2cd5e5a6e8f60d4f070fd90ab5242f672fe4c9a8c236

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\ja.pak

              Filesize

              146KB

              MD5

              73cb57ce42346a8c660b6632336be5e0

              SHA1

              5e1752bd20bd64a9100c4fe53c9619ccc8108ab0

              SHA256

              c2f865dd6b7bd92bdbe86e8fc0737cbd546e9c725dd1c000562424c34a9254bc

              SHA512

              0d58f710039c0fd0265ea3bfa8fdf5ee4b5a8cbce1cd53929daffd817c2836cf6036f3f808e5df2da5555954e5691169aa7fdbba243c5fff28b0a8524f243415

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\kn.pak

              Filesize

              150KB

              MD5

              90d354897f3bdc1beaf688e0f94cf531

              SHA1

              9f4d0b8ef933912b47a6023c237aa4744fca7653

              SHA256

              672ee05b86be456c47a1bb42baf39adbe907e580b7274dc82a3b498960fd2273

              SHA512

              20973676e11429a0f1d6a1aa1efe1c1f8837b8938230fb0a1cd0a186670b2688a4af8202b840d3747821c74080d03fac8234aa77555222880fc012e7fbef5723

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\ko.pak

              Filesize

              99KB

              MD5

              7bd16770561516b0e3ea822268e137ca

              SHA1

              f7fb3bc53c297928954632993387af6173444d43

              SHA256

              c512971d1f7f2aaa95d6faaa988ffca0a115b281eeaa684e3e6f8d61e3dea376

              SHA512

              1dc96ae32d36950dd48bb446aebeb8db5b1bce04c6f51ad7d8216f96016ecb21920c6d37c981fdc0dd17b5e050430da8d0ff8188a4d759bada2857ad9809dcba

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\lt.pak

              Filesize

              138KB

              MD5

              5a0ebeb7ca89767ed8269cdd846b977b

              SHA1

              1aa9a0b689e3521c79fa89a44a3f700de4ad680e

              SHA256

              aac23b456cf2e7f4c5302c85408a101c63d6211b4d246b4b757e643259d5cd18

              SHA512

              f1478cd396c8879c3dc4e7d02804c20068ae2623ffdb56f08c7261c58fd16b4c3c4e24c14ce41e2a0a6c1f49431aeada3ebe259386a3abe535bcc9ef97de134b

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\lv.pak

              Filesize

              109KB

              MD5

              d870a923dd83a0f4085ce8cbaebdc797

              SHA1

              bb7dffc03bccdb83a15c189d4a4c3f8152f854eb

              SHA256

              b7765f7793ecf32bbe7521ee73ad3a866054d0f6b47eb0aef4e405b747469d84

              SHA512

              6f43b10bb95958170a291b5a4612b4b15e4320db768161c0bd849c54522a989aec3296f0007d3f2bc1ab0760d7f214adc0e0e0d707f36dbc6c743558829af66b

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\ml.pak

              Filesize

              161KB

              MD5

              c2e3c54f542217ba6e06306b233edbd8

              SHA1

              48e0b4f3edc0ee55059e8ebd7ce51d05a9766d25

              SHA256

              c1bede9463b263887777cc9e830418598e930ffdf56acc4d3b5d5da2bdfc1a49

              SHA512

              23a460e3d331e3a8d29aa9ba5332cc7e6b91404d9a3d34ef1f039dfd038b085727aa0b2c3960c18515c8a87572c635aeee8b269d44f4ec3c77dc218a887d9199

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\mr.pak

              Filesize

              85KB

              MD5

              e322402f37043836fd3802b6d18eac00

              SHA1

              51ce4c15a80f8cbeca13c9478304f3c645bbb233

              SHA256

              e15f18437102a0e01e4dfae65f24e91c96dd7a037f678306c03adff026a12ef5

              SHA512

              118097d377cc524cffce69e05c0a08da202fe33b17200b8ff6f14997a7d44878f6458858adeb3c7431328e0327e0043bf4d5eefcb1ab31e244cdda5270dff775

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\ms.pak

              Filesize

              91KB

              MD5

              37b23341cfa46893e5503957d677ec41

              SHA1

              2f490e568e5ec1489d35483ff480c39291d75641

              SHA256

              24ca490433b4166acd10e4a4d062d2376e721c31922d17f947e916beefc58a97

              SHA512

              2f560830f23cf9250d70806b089404d3fa82573618ab1becd3ba7c54f640801ac7944b6628c2e7bb05515945d83924960fb4c7c6f719ff09995bdc5dadf04035

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\nb.pak

              Filesize

              62KB

              MD5

              0ac264cf7097ed5d6cbf5f07c78a6dc1

              SHA1

              5b312180de2a100e438acceb426005a10bd2a27a

              SHA256

              63ccbfc5bec53894d00ad6b8fab77a60b82dbd6c9d640582bf37eb2aea41323d

              SHA512

              c9104f54070dc6e243bd00969b028465d78fa118c143c5d6fcdaed3574559a977b55e1b1946dd9e0e71de0804040f41b7037315317a13c70b9daef586e95f8ea

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\nl.pak

              Filesize

              143KB

              MD5

              8ddca239ac6ff21b1fd1028302bc5c5f

              SHA1

              b3593d0bbe5d1a430a8df98fd627fea1093c4075

              SHA256

              4ee50414e2d2b26e2fb59ae68dca97bc6d67788c77bb73b2e1227e049370610e

              SHA512

              a11a70f81d26934f0d035b40030a230e455cb904b4e2e4c3d77a46b2ddf1054b2bfc2433df1c1618871c5058e1303f27a7e992c8d24cb0547252e8ac3868cd66

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\pl.pak

              Filesize

              7KB

              MD5

              f808ed1f2b8d0dbd6b0ae1c329f2b582

              SHA1

              12b04e9528bef9cd525fa0413cd683143ea43e12

              SHA256

              9257fca866537dac920dfec51b05241c3ef00fe04b244552acac6a046401b8c3

              SHA512

              268ebbacb9bd8ef2981a58173b536ad58cfa4cc1bf75a7b3c047d2d0d7f446adec3f6a73d0e8ab1601b0ce0439a224f4c59020aac33aa5e1f89ae4d6038a2331

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\pt-BR.pak

              Filesize

              19KB

              MD5

              34e9c42ea812614732083ed42c1d0964

              SHA1

              0c2a84d21f2acff6ff497eb4041e97cf759c2c9d

              SHA256

              ca9017ed643373aee1e5858beea356cc8aede37034fe22d3b865e6ab845c07ea

              SHA512

              1a543b1d0d3b680f880c0e3ae55aad5d2071a0b1940d801d187db20c6575794bf06c850d39fb5966b659987d0a65ca4d6884e78772bd530a920d848be460ed2e

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\pt-PT.pak

              Filesize

              82KB

              MD5

              2d72eb2b5f34803e9563bb492182b353

              SHA1

              1d5bd5bf3da15f035a82e894d4ab33f85b9f455a

              SHA256

              8b3675337812298a34d782ba2d9958efcf271a18aa46e4b53b827d393f6d59d8

              SHA512

              32ac27ceee62d45afa53602f8565f9b46983449c8e457cbc909ac9617cbf75e602433648672e1bb5504e57d9e406cbaf3a9717611b56f4538ce6f3011e433a85

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\ro.pak

              Filesize

              36KB

              MD5

              f82e345cae4fbcc3cdd07c71f14c0a03

              SHA1

              7425d4fce8b373f48fe15036a1a58e89a6d64887

              SHA256

              c93745273d2c3884d856d58d46710a59cd0d4fb2d3c8cdb5e20b8fbc73d2cf84

              SHA512

              6114b49ed56990a36dd4fcf0c77f2044392549f82dbdbefe36716b0162fc37b9478e2635e52c5b8f1c9983ad6eef6523d32148504ab720e6dde7339d0c7aad92

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\ru.pak

              Filesize

              42KB

              MD5

              9458f37cb630a22d1afc2c153baed3c4

              SHA1

              2f79dd45620f89c8b48aa36c078d3ab0950dc326

              SHA256

              64f26a3dececaf7854451bac064b1285ea32a4649caa1879673c4997e0d0fb2c

              SHA512

              6e4c8e04000ecf88f79c0552a2f5fc95ededffbae05089c01df001ab65aa9ce6c36c9077ae0337d283b65fba56cf9e9c54c3ffa14a932f32b3a8d994135d41c1

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\sk.pak

              Filesize

              63KB

              MD5

              82743ad6e5be72f9eb2b1c3fce22a15b

              SHA1

              2356b19cfcfd663864f3b801b771a340913fdda2

              SHA256

              93658c1126040fed5ca54684786a3a84a846b6f724993d7b9603208f0357764e

              SHA512

              42967a65cbdaa7f15b8d949686544118cbeddddaf08d4a882cbd55aa74739c6072346f08c02312d7a7f7d99fb1fc556b82b5b697a542e1d6d767739ff9470653

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\sl.pak

              Filesize

              42KB

              MD5

              3204d643dd0420f5d3bf6d6f6a1d4703

              SHA1

              b659409c3611834c05776d12cc6f13e7f6a038d6

              SHA256

              2de7c04d0af67bb3ca8e2d1510f29ff6f3d0c85c776a1cd01a74e6b38e6c35d1

              SHA512

              789b36f6b73ea55ad0d6a9741d618c12103763bef99e869b308333772bfd6d221a10614af00a11c6bbf23f85bf188e8f13a7c2baf1bfc076a7719206db4b3135

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\sr.pak

              Filesize

              14KB

              MD5

              cb3265c3564bb71bdc102613fc28b115

              SHA1

              dd01850b7752cc27a56ae26dcc3f89906d0dc4e6

              SHA256

              eefd4126ddce4b0c15bebcffcb499f9a5ac4dccc57db20fe434aa74ebd1aced7

              SHA512

              1f147db19bc81d092223f9162d7ab69352aa7d232144b68b0feda2116f03900a80075acc0664932291402307ee61e60bf8a9993f1750c08fd41fa4345e34b3bb

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\sw.pak

              Filesize

              16KB

              MD5

              c2aa6d71182240570ed8dfa165e04024

              SHA1

              2655411c11f7e51f2374252e61928a13552ad3bc

              SHA256

              5ccea612645919d6dc0d4bdd398fc6ed924c854ac72225b999fc060f5bf683d2

              SHA512

              8a67debf35ac056b276d380f3b5e27346d25165ff48d2920629df433f055f307dcba2a6b2966c77a029618bcf59432600a4131e5b68339101b6646b0d4934ddc

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\ta.pak

              Filesize

              14KB

              MD5

              5ea7f0ef93bc3a4688cd8fa44ac19eb6

              SHA1

              c9637e1a0a1699450c417f4ac5b8e928d5fcd170

              SHA256

              1786ffdcee99b3f65b5b73d43b20f8a21a124dad5e10d98572a6497582526df0

              SHA512

              fbc4de4f87b7177bc9eb1e44c37707867d850d934a18146b65d6e3bfc02363958d8c2f7ea9304dea554bdd4210db990c933839587854aaa3e5bccdd889fef717

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\te.pak

              Filesize

              13KB

              MD5

              68af7bf636f81062a4b50a1fd76b5383

              SHA1

              d9d1f69d4811d154b0ff5ceb175abfd91f4ef5d8

              SHA256

              92dcecac79620b052f56df7b36723cd28624eada8ad6530c219ed54505e7d0cc

              SHA512

              aec25df12f1a7fd1be8bdbecc1184cf2353ec49e82725eb364a23c2dda6173f920b14d61addf472bfa85d0af2bb5f0a4c618443ef31f81d7c32a09c34bfc17e3

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\th.pak

              Filesize

              1KB

              MD5

              531c09ca1fdb716556dddab2816ade3b

              SHA1

              6572408e9b750e57f7f3e661c1f25f7caff7a1df

              SHA256

              79b277c2cef199ce0297c7fae9c57e477bc0e76dd8a2655f397596dc57fbd7a4

              SHA512

              0e882a55571fb9eec35331fda58408b8dda83895038380a3178a0e716776485fc1fedcf36a9ea59866fb940f836769a5323bc04e60b169e8b2c02070d5e340b9

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\uk.pak

              Filesize

              7KB

              MD5

              81e4dbd70d23ae9bfc31e2b603caa235

              SHA1

              867454cfa69575942d73351ce71b2301b9339763

              SHA256

              bc8e3407ee14d24ae56c9e8b18ec7e565d1d5b5f604f32ae25c6f8385f79d44e

              SHA512

              813335927693f6e1bbabc113db484a8ca5f976fc9b156ae08eed83a6306865060e3fe30a794bb2e880bef646c869d5eba5968280ac11a9c60ae46451e583bb60

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\zh-CN.pak

              Filesize

              16KB

              MD5

              2581184f45e2f022ac390462bb518894

              SHA1

              2fa90a1f01d18888fb95e916bba01e83612e9915

              SHA256

              7f80f2f08ed750f694817543a734186524117891df4194fd355a52256c334163

              SHA512

              71112280aa13528eb5ac1403112db198a476ca5b5c1382f379362477a8ca3ae208886baed92105194863ecd674f579b31297c4b660abc4db643a8a03d7539f8a

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\locales\zh-TW.pak

              Filesize

              8KB

              MD5

              afb212b4ad96ff0bb77a6bbf282a30ed

              SHA1

              f2ec89ff6696e762c37eb5d5d209ccd765750589

              SHA256

              4cc407ee3d257670f021b11caa54886393d597534104f17e3f499c48f6880743

              SHA512

              f390c6e310ff4af8ba7673767e8141ea0ff14ea05151480bafd9fb18e5ccf0e70acdb0cf74f9734747dae5a652270209e34eaabdb0e8a7ac61b6f09b9af2873c

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\resources.pak

              Filesize

              1.2MB

              MD5

              48f3bdfb3e7bf77fbab4bab83bedc28e

              SHA1

              4d24283c808a620615f2300632fdacee477debad

              SHA256

              a7653afe4d322732d6cae823950e4594ad2cf1b56d2c7626c40b272eadeb449f

              SHA512

              dbc06eedf3523e5dc804598baba2b11b3730a85a6b1e6a5797ff96ebf074f75d3517534dac4d37716549d9bacb32d20814906d1003fa3e995fe2f0bf782200da

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\resources\app.asar

              Filesize

              128KB

              MD5

              b154322cd4b9c87b60ab42a43aea99b5

              SHA1

              40a3a0466c0bb97290fbf2806abad3a0751189ac

              SHA256

              f25d71340fc11a51828037a22ae526aa53dfbc8bbdb5751168580b415f1c2fa5

              SHA512

              b1002aa190136890698f7c151a3fcee368a395db7943d2036ea2394202b2914699a86894d0f7725f1ac187d0d9b995343dc75af8298dc97fd8060215688ab26c

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\resources\elevate.exe

              Filesize

              105KB

              MD5

              792b92c8ad13c46f27c7ced0810694df

              SHA1

              d8d449b92de20a57df722df46435ba4553ecc802

              SHA256

              9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

              SHA512

              6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\snapshot_blob.bin

              Filesize

              168KB

              MD5

              b82ff216a0babf602940759b9a3af870

              SHA1

              07e8a22dcf8d7be04a6ddbcab3098e040494bb0e

              SHA256

              943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5

              SHA512

              da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\v8_context_snapshot.bin

              Filesize

              471KB

              MD5

              031ea03da08fe1247280cfe781658791

              SHA1

              e91db50ad16b5a5fbbaf4118672d60b347ea6161

              SHA256

              c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c

              SHA512

              b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\vk_swiftshader.dll

              Filesize

              580KB

              MD5

              516739b5fc9a92aaafb01dde481ed752

              SHA1

              066463d7f59ce9c21510f964c922b6a511e1b889

              SHA256

              809e3a718398590b1357e1de7766c38d19b3fa271eecc7bde28ac6d23140ca3d

              SHA512

              83d24237573a542be5abd47042140844f3909da45057b2ef3d22cb36351c5dae6fecc7b1a103f938d79f926955ad45710db8e280c2536039587be8202e00a802

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\vk_swiftshader_icd.json

              Filesize

              106B

              MD5

              8642dd3a87e2de6e991fae08458e302b

              SHA1

              9c06735c31cec00600fd763a92f8112d085bd12a

              SHA256

              32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

              SHA512

              f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\7z-out\vulkan-1.dll

              Filesize

              534KB

              MD5

              f1a889ca2d58a04dbbac3ad3f5a7f71d

              SHA1

              8ca9112dddb2b8eb3f8d2b3c022a9d782fc6ec6c

              SHA256

              abd1e9ed9df1d0c780f8844e03fbeb4430438cc2f45838a1c463371691a3033e

              SHA512

              e45e01f36ecf2630b61db390d010697287325534493f3267aae97d4bd93e63ec2e2d09f7ae51ee5e7a4a0828be0470a251bb274673f179022e1ad3b99e78da39

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\SpiderBanner.dll

              Filesize

              9KB

              MD5

              17309e33b596ba3a5693b4d3e85cf8d7

              SHA1

              7d361836cf53df42021c7f2b148aec9458818c01

              SHA256

              996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

              SHA512

              1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\StdUtils.dll

              Filesize

              100KB

              MD5

              c6a6e03f77c313b267498515488c5740

              SHA1

              3d49fc2784b9450962ed6b82b46e9c3c957d7c15

              SHA256

              b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

              SHA512

              9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\System.dll

              Filesize

              12KB

              MD5

              0d7ad4f45dc6f5aa87f606d0331c6901

              SHA1

              48df0911f0484cbe2a8cdd5362140b63c41ee457

              SHA256

              3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

              SHA512

              c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\WinShell.dll

              Filesize

              3KB

              MD5

              1cc7c37b7e0c8cd8bf04b6cc283e1e56

              SHA1

              0b9519763be6625bd5abce175dcc59c96d100d4c

              SHA256

              9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

              SHA512

              7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\nsExec.dll

              Filesize

              6KB

              MD5

              ec0504e6b8a11d5aad43b296beeb84b2

              SHA1

              91b5ce085130c8c7194d66b2439ec9e1c206497c

              SHA256

              5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

              SHA512

              3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\nsis7z.dll

              Filesize

              424KB

              MD5

              80e44ce4895304c6a3a831310fbf8cd0

              SHA1

              36bd49ae21c460be5753a904b4501f1abca53508

              SHA256

              b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

              SHA512

              c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

            • C:\Users\Admin\AppData\Local\Temp\nsbD571.tmp\nsis7z.dll

              Filesize

              390KB

              MD5

              2608914290a8baa9e204fd0400dfce2a

              SHA1

              e1578df7a416ecc59a01a498550a623e982fb463

              SHA256

              14b01d1a167281ce3c9f6281b74ace8fec771dfd02ef2ef7505ec1fd1032373d

              SHA512

              f97f327ecd86256f290a80969f8337643f90b6c696cf9494150e15dd4c1de481da628f1047e78a84794e2e20f90828319a1cd97795ee8bf172a7966ad0242396

            • C:\Users\Admin\AppData\Roaming\Launcher\Network\9a41a3c9-e242-4ae8-bc6e-aba2c1ede869.tmp

              Filesize

              495B

              MD5

              dd0ee15b31d25a75dfadeb6a5fa39a1d

              SHA1

              d36007e5311e5a98ff67bd5149d9276fde91ce95

              SHA256

              9db220d76c4487f7f276a0a7ca4495a5df1e95cd489cc073347db2d5758e48b9

              SHA512

              d998ce89793c21554a84085865cc1a429ecdf986e08fad1350d1947cde9ed5a17a29f3c518e10209cf17c409a0f17848a808575ec2c8e71396d08ef6e3c1f614

            • C:\Users\Admin\AppData\Roaming\Launcher\Network\Network Persistent State

              Filesize

              59B

              MD5

              2800881c775077e1c4b6e06bf4676de4

              SHA1

              2873631068c8b3b9495638c865915be822442c8b

              SHA256

              226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

              SHA512

              e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

            • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

              Filesize

              2B

              MD5

              f3b25701fe362ec84616a93a45ce9998

              SHA1

              d62636d8caec13f04e28442a0a6fa1afeb024bbb

              SHA256

              b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

              SHA512

              98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

            • memory/780-744-0x00007FFA400C0000-0x00007FFA400C1000-memory.dmp

              Filesize

              4KB