hxxps://github[.]com/darkness337/Discord-Account-Generator/releases/download/V1[.]0/DiscordLauncher[.]rar

Resubmissions

19/02/2024, 16:33

240219-t2mt8sgg37 1

19/02/2024, 16:28

240219-tys7vagf22 1

Analysis

max time kernel
91s
max time network
106s
platform
windows11-21h2_x64
resource
win11-20240214-en
resource tags

arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
submitted
19/02/2024, 16:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/darkness337/Discord-Account-Generator/releases/download/V1.0/DiscordLauncher.rar

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
5892	tasklist.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-751003968-2436847326-2055497515-1000_Classes\Local Settings	msedge.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\DiscordLauncher.rar:Zone.Identifier	msedge.exe
File created	C:\Users\Admin\AppData\Local\Temp\7zO025D83D8\Launcher Setup V9.8.0.exe:Zone.Identifier	7zFM.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
792	msedge.exe
792	msedge.exe
3568	msedge.exe
3568	msedge.exe
5324	identity_helper.exe
5324	identity_helper.exe
3568	msedge.exe
3568	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeRestorePrivilege	5408	7zFM.exe
Token: 35	5408	7zFM.exe
Token: SeSecurityPrivilege	5408	7zFM.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
2060	firefox.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
2060	firefox.exe
2060	firefox.exe
792	msedge.exe
2060	firefox.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe

Suspicious use of SendNotifyMessage 15 IoCs

pid	Process
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
2060	firefox.exe
2060	firefox.exe
2060	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2060	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 792 wrote to memory of 4408	792	msedge.exe	29
PID 792 wrote to memory of 4408	792	msedge.exe	29
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 2020	792	msedge.exe	82
PID 792 wrote to memory of 920	792	msedge.exe	81
PID 792 wrote to memory of 920	792	msedge.exe	81
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83
PID 792 wrote to memory of 3764	792	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/darkness337/Discord-Account-Generator/releases/download/V1.0/DiscordLauncher.rar
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff990bd3cb8,0x7ff990bd3cc8,0x7ff990bd3cd8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1832 /prefetch:2
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,7071153273538140014,208950591661012801,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:3568
- C:\Program Files\7-Zip\7zFM.exe
  "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\DiscordLauncher.rar"
  2⤵
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  PID:5408
- - C:\Users\Admin\AppData\Local\Temp\7zO025D83D8\Launcher Setup V9.8.0.exe
    "C:\Users\Admin\AppData\Local\Temp\7zO025D83D8\Launcher Setup V9.8.0.exe"
    3⤵
    PID:5560
  - - C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Launcher.exe" | %SYSTEMROOT%\System32\find.exe "Launcher.exe"
      4⤵
      PID:5856
    - - C:\Windows\SysWOW64\find.exe
        
        C:\Windows\System32\find.exe "Launcher.exe"
        5⤵
        
        PID:5884
    - - C:\Windows\SysWOW64\tasklist.exe
        
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Launcher.exe"
        5⤵
        Enumerates processes with tasklist
        
        PID:5892

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5024

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2160

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:2932
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:2060
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2060.0.1021647019\89284163" -parentBuildID 20221007134813 -prefsHandle 1784 -prefMapHandle 1776 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3f763ea1-9f9f-4dc1-8e9d-f19bf09e4ed2} 2060 "\\.\pipe\gecko-crash-server-pipe.2060" 1888 144dcdd7458 gpu
    3⤵
    PID:1864
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2060.1.2017692862\870939095" -parentBuildID 20221007134813 -prefsHandle 2244 -prefMapHandle 2240 -prefsLen 20783 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec392025-5488-4a14-b922-4cfb3553371a} 2060 "\\.\pipe\gecko-crash-server-pipe.2060" 2280 144dc8e5a58 socket
    3⤵
    PID:4252
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2060.2.1937978354\1041548005" -childID 1 -isForBrowser -prefsHandle 2784 -prefMapHandle 1532 -prefsLen 20821 -prefMapSize 233444 -jsInitHandle 1100 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5903abe8-737c-4a26-b995-2940ebfd7940} 2060 "\\.\pipe\gecko-crash-server-pipe.2060" 3156 144e18f2458 tab
    3⤵
    PID:836
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2060.3.1555655375\452116886" -childID 2 -isForBrowser -prefsHandle 3364 -prefMapHandle 3360 -prefsLen 20927 -prefMapSize 233444 -jsInitHandle 1100 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc4a2b20-5604-4ac1-b68b-ea13b7992838} 2060 "\\.\pipe\gecko-crash-server-pipe.2060" 3376 144e2350558 tab
    3⤵
    PID:916
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2060.4.1039887617\176093467" -childID 3 -isForBrowser -prefsHandle 3512 -prefMapHandle 3516 -prefsLen 20927 -prefMapSize 233444 -jsInitHandle 1100 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6eb08436-363b-45ef-8e27-168d465c9eed} 2060 "\\.\pipe\gecko-crash-server-pipe.2060" 3400 144e2350e58 tab
    3⤵
    PID:1828
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2060.5.1242817339\52897884" -childID 4 -isForBrowser -prefsHandle 3732 -prefMapHandle 3736 -prefsLen 20927 -prefMapSize 233444 -jsInitHandle 1100 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a7184ec1-333c-4c17-9ff1-f85cb22f4195} 2060 "\\.\pipe\gecko-crash-server-pipe.2060" 3728 144e234e458 tab
    3⤵
    PID:2128

C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
"C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe"
1⤵
PID:2652
- C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1476 --field-trial-handle=1632,i,6037822234453127517,12987227832300380918,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  PID:4200
- C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --mojo-platform-channel-handle=2044 --field-trial-handle=1632,i,6037822234453127517,12987227832300380918,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
  2⤵
  PID:3144

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
cd0e8690afb6cc94da2feb0e0443dc81

SHA1
ece9da10c445c54071e1224bb1dc25e8a15b089f

SHA256
14d81c4f4672dd9503f4d137a36a107f1b662cff748a1edb15b53aabcec2074e

SHA512
c04a5aa810668fc5549961c866e18ad6d3e7bc7cd252239713cc0dda77266267f008d3b452d4afb91695a2ff44c30eb727a8ffcbb38ce7e75085461f617ddf5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\74916639-3329-4b43-aed3-ad2357a6eb1c.tmp

Filesize
265B

MD5
f5cd008cf465804d0e6f39a8d81f9a2d

SHA1
6b2907356472ed4a719e5675cc08969f30adc855

SHA256
fcea95cc39dc6c2a925f5aed739dbedaa405ee4ce127f535fcf1c751b2b8fb5d

SHA512
dc97034546a4c94bdaa6f644b5cfd1e477209de9a03a5b02a360c254a406c1d647d6f90860f385e27387b35631c41f0886cb543ede9116436941b9af6cd3285d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
3c582291743a789f1f15c9ea1b405904

SHA1
78e44a58f3f94f3d146fed0e7b3b78cde0eb774d

SHA256
3188dc7de076caccd1ba2b434aa8d775e4ce9ff2cf4394cbc7320b6bc8dee523

SHA512
f0bb8794087793a62eeca7adc2e1a4d6ba48d3ac95d6491a8c4c5479afd852da664d3a7e2f410b545c710e0ec90239d9fb7075ab7973038a55d7408254b9d5d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6830281149e9bf3c2f37911752efe68d

SHA1
4fdb105a4c741d95913a2bbc0a9ffd331a9fcdf4

SHA256
f959ddb294a4e587658d7a25cacdaf65fccd7946ba3f3b43ac68ed2c6ac8ccfd

SHA512
dc5eb37d51d62271656a01a95d8fb233c2dd8c7fb59f73d741d783250072a19aaee3dd79d19783a9cca594bb88ade6902cacbfa9ef801313f48aaa8d79276907

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d8579c99cbc496dc4db0c330d12938f8

SHA1
3c6e3fd503a6c559d85049b01451b03f5e580b86

SHA256
d9603e8d40d834b8b7e127add62a04db4e0ed86995f9c7d6527a97988255c83b

SHA512
a592367849f182f65794b251d362f9b1a1bef9d72e30624859a9878a2293118b83f3e6755fe2bec1ad75bc20bf66e96113af6a97a32a1a3486945ffbd60bf8d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
25KB

MD5
ee749e7f1e4889f30e18bcf8097ffcd5

SHA1
85630218fd3fccc00faaa4ad98595cbeefe0c026

SHA256
69279ff724bf5c30735b79d0ed740d89a9fae97514bf98924e258d6bd1b24c12

SHA512
60d13b2dda4d06b5150ccfa41b2b69eceaba6be608068546ac47cfe7e0a701736d097a5ef8b7614800b55efd273fe480f34f43d75e68e83573169b86e3a19284

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
f2d4cfc7287a13dd06227535eb302bc0

SHA1
b6ac884bf3832d0ab261366764e1633fb5c0814f

SHA256
bae43ac14a5ea4138975b2dc368f36971496003efa15203abe0b8b6e8d560b7b

SHA512
046d1f71cbe80cb99754fc0cab7fab637dd76ec3b56cd6f318de164c9524e5e141f0281064eaf7df8929d11f3015daffe9800c38f7cbddf1690812ae7a18a1ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
6e02cdd6464e00aabb1f542b19cf01dc

SHA1
5dfa6168ff940febe59b278e0553001f1508514e

SHA256
15d59d9b4e83249ddc07c125582cbeb57d21f3c6c2e5cc53b0c65a8573a47d0b

SHA512
254c3026bdb8bc07add27ec8319216bbfdbee1c05886a91e7a632a317ed0ab3ee39c32be92c99da2f1ece109e9dc2ef54e1b2af002a5d1d6d54318f3f6359adc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
4d8fb2235a41e369549949bb88a7407b

SHA1
b174f6a82fbefbc366cf3d1988dfebf4250d8aa8

SHA256
c373d0ea7389ba1de47cbdd2ef14312b9772bf88d415afb6c168095635a49953

SHA512
0cc77bc14596fdaa727972c4f72996aef8f3e92c6d38987ee027a42a0453a36c58e83372cd7377883fc30449f979cc24723edba772dcbbba00368f7ba068d32d

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

Filesize
694KB

MD5
1690d85a7bfc91376087df3c89371c3b

SHA1
2e4db0bbc5277d02499558edb24db05b0c660bc5

SHA256
afc2e7cddfba35b9c0946a3b7393d9d28b0894235739cf1fcd5b0ba9b5a7f14a

SHA512
65258a65f707ebdc31e1b0969aebe004ea6b92032d7a6c7e9d4546e24cd90e1e209b7467f2ff18872389d4f266d8c5f38a0ed70c5f5d398c7d88b0c803207cb8

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

Filesize
320KB

MD5
cb4e20743bc8cef32e3bed956c147ae6

SHA1
01c998bd3d3baf16f91e959d317e31ffb30bcab0

SHA256
b14a03207560e07bb615f0eff9652dc9ba4520c9532dea47cc0920a9dd38cb55

SHA512
a76c2364df38e06b79de4a57472d7e296cab51d4a65d976bae66b1a60492d7bb183f25bb7e5d5cbc84585e9fb491062987a5e29d0dd8e090fd06e749fe44a04b

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\chrome_100_percent.pak

Filesize
126KB

MD5
d31f3439e2a3f7bee4ddd26f46a2b83f

SHA1
c5a26f86eb119ae364c5bf707bebed7e871fc214

SHA256
9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

SHA512
aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

Filesize
177KB

MD5
fcfc02372ebf4ba0f6c9156d93dadc53

SHA1
9dd6ce848c44bdc605f458e760a50212f41bf64c

SHA256
829963004179bf8b761573fc27895435144d59a4a23874227a670c0f02ad552a

SHA512
f0d9fd04cdddba94fc568e1201b3454cab57e429e00d6541afa56f912ab93d4e130e5e8bbdd3cb05957a58d76a1ce0b12ee0608df2fb3002d2dfa494f10b17e0

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

Filesize
128KB

MD5
01d7aa29cec61ae29d16a651f627a502

SHA1
6c1950805304b7287c48adc8f24065c25da4b580

SHA256
de5dfe9e2e0d0df45b1e8c5c48dc70e44f045863af60a21808e0545edf6b4f65

SHA512
e90b2ec96390e2bde2f2e96cd3d102e470b5fb871a31e0395db50b50e8cba6d7addc48e250cb758ad49de33602ff024ebcd56e52710e21ba5cb39a1839159b03

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

Filesize
333KB

MD5
853711a09be6230b015af4209fdce123

SHA1
fcb30a6a17106f1060c54dbaa0cca204e2399132

SHA256
fde4d98ee00c216fc4067669072987d310336a60c6d25a77a89f69f7e64accca

SHA512
6b1e6ad3286a7e8de5bbdc841b21244fedc5bcbb513213dc21a789d8fba3833b29430a82db46ac44a1f13dc1c0f5c6fa5e5013ddb7d102b4741cf0c1d51e76b3

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

Filesize
189KB

MD5
18abf31cee10150329bb2145153f64e0

SHA1
b95227970243405d269cabe2e5d8197101f0aa0a

SHA256
0136f3c54d58ffef947c93f18b0f68b711b20031506ca22318823066f4f8b8c8

SHA512
76730d0c1c5893f05a925a69c3603db3deb6faf75a37c90ac522c4aa86b977b766f03821250b3ae9da839265ee363943ebdbac0b3c609583fc3cb705ac246ee3

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

Filesize
85KB

MD5
2c589aa619b1d9183871fadacc591f07

SHA1
899fe7fdef87a5ab9b3c323c515a02d2c3d4c3b9

SHA256
a0add7bc514cb8887c7f52736d36aeb8cba9841bc6709b9373d9047a7f5b7ce2

SHA512
b7dd56cc7e884349ecc6bb94c5f35a05944ec4537ee0a6bc0e2f979ebe0a923fd04eae281ebde82e0597caaa39a1cde96b42814269d638fe379f944986b9608a

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\icudtl.dat

Filesize
143KB

MD5
6ddd91f39658c93112c39a68806515eb

SHA1
db2c9ea392b55a045e093adec1e5e0d363143328

SHA256
36789d283870db6b7480cde09ddbe99227fa23dc65b9616dfebbb6c3b556272b

SHA512
ba5bcb9d60f83875f5c31ee43c7ddf1029221749a763b609e266733f51edb0f48596c9b02eb3cfc0339ab9cf8f60b73ccbd40efc2d7f38a24789f5240ef1b653

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\resources.pak

Filesize
256KB

MD5
5050260a2e8342ef82244449f4c89454

SHA1
f158534631860dccf5949a9ae10ae5e2bd24f09f

SHA256
30c4b408149a8321b19ab85e02d38269371c75b7b45cc77960898c1e1cfc7fe6

SHA512
b266d02362489faf650afcbd3f132902ec3814db9379e8a31c571a19777992f212fd3525484af4d947b4f0fbf69a374b1dd2e1125ad53fdcf0f09947f5205e81

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar

Filesize
320KB

MD5
b412eeff9c37619c04b01f9d66486056

SHA1
8286cf8db0e5a5d590a4514b7cbd9ef536feadda

SHA256
33bb453b2cda626f6215d88f32e605db7c97ed2ce4db5da6eda7b741ac448c9b

SHA512
c7d29455b72ddfb0d70ed2bf441b52404f615303f06140b851f73e307ebee245968cb17ed09fbd46c4ed9f8bd1c5482fdb52061d89279e605b02277c4301e40e

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\v8_context_snapshot.bin

Filesize
384KB

MD5
ffdabea6edb478131b5924fd10dac8b9

SHA1
127508d0c3e29d97b362a6d05e7ca0a7b2f8f6e1

SHA256
ca75c53c20c204788a844dfbbe1fb86cf6c121ff931d7fd695ccf5c57acc3b9a

SHA512
a72ef4d0f35fd93ea19b5adf5b26460b1d5c0a62a3b64d62defd5d1e2390480e66fbe15db37188f1160c6ea90c4f120766f3e17622bb5c597e17bf20f1d14c2c

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\vk_swiftshader.dll

Filesize
65KB

MD5
00a09cdf2df86dfe1eddfbe6561725cc

SHA1
d875a442d4cffe2ca155cb9fded41e747d1f045e

SHA256
2907090237c99e3b0a2dc3ab5c8b59e55a615f5913027463c85fece6f913a728

SHA512
51b092f6d098379d44dd908fb0772bb7314afa0b9da7f81bf3dae87eac38a6a44a134c3fd1a01a9b65676073adf4829e6896a4a7f1797153299943f03f4ecfcd

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zO025D83D8\Launcher Setup V9.8.0.exe

Filesize
2.6MB

MD5
de64bf03a93b636afa281ad2b4d9a52a

SHA1
28b6351ebb8bc359f39d667829ea957cbb829f96

SHA256
d323b3d9cc05c64db6a1a97eaf47eb261f71edc7cbd527bdea6fbd165ec65426

SHA512
e2905b104b82b0232956e11de9538113bf8ef0064e7a2bf93047d9f6da0d1cfb0988f9d6169d1f938a280ac1cea5ce077c627d3ca98586006fb1a7861ecdc08c

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zO025D83D8\Launcher Setup V9.8.0.exe

Filesize
38KB

MD5
127b3e8971bff4a2df180263e3b25d0b

SHA1
a8024ddcc9f6cd7fbc73c89ff64998f34df89e69

SHA256
a2eda6a9550e9577e0bf0f90635d890212b8720739fb6eff71007fb4edcc5a0d

SHA512
4ec0e346219e954df458785b9c654d3025b215440213c2cee837f21ec58dcea3072ec45de1538204d0b2f292b5186882e75f5195fa954193ecf06fdbecb64835

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zO025D83D8\Launcher Setup V9.8.0.exe

Filesize
282KB

MD5
a39e783c2d2679e0cf3adb9850f74e4e

SHA1
4635650aab59976226df330699c2f53c9a83bfbe

SHA256
804b52a0e0ed389bec4d4e76f089cb850492f45ca20c14a1a6ae1a2588f994ee

SHA512
37402db715645893ba1c332bbc4cdabe1e3cd91128076fc83d323bd0a592d26be271d3b15bd40942b23cc2fddcb9173043ddefecb532947a0f532788feb2b0e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zO025D83D8\Launcher Setup V9.8.0.exe:Zone.Identifier

Filesize
588B

MD5
24913be282dd7ef46a826bcc3e26f3a1

SHA1
07f11ed01368d61453e7bab405ecfd0e54bd3d48

SHA256
75fbdc01961c8c9c8601a022cecbfdd6b6920434545428ff332a61bea26a2eec

SHA512
7d18442519d2acafc927f203f7d0f073c2518c758f49397641f7b73e70c6ba789cc40a2b463aa62a4b682d9a5919b4a17b94b2991c5baa4ab686c2d71b8d825f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\LICENSES.chromium.html

Filesize
157KB

MD5
b64195c8eeeea513e377d1518ba32e3f

SHA1
007ae7b607ad23d8e8f17660a18e437adb2a0d28

SHA256
3bd8f9d8aedeb064f56f4214ed6304300d97dad414f1c76101c7e3883c90b216

SHA512
b2a86c56603feb2c0217d81f99bf3aa74cc6a62bd61edcc0350c45e47cf4f01da26cf1a0ae5d518a9dcf07a6c57e9601dd16c35d0437518f1c51312455757d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\Launcher.exe

Filesize
221KB

MD5
09c7b4967feaafd2df57f7b2b8e03285

SHA1
be0ae9f116511c90e1b3d90a47511e971021e699

SHA256
54ed9eaaea7c690d1f7ea677d9004122a5fdba5b95ad13e872ae9ecb0a1914b8

SHA512
2a27c6d870e8306e161bfdae317624682da2b32901688ee627b9aa6d7213cde66536d69cf4f2533e6d8b8b5b8890410fdfa3ee5e4a70ea09261b27c94207715a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\chrome_200_percent.pak

Filesize
175KB

MD5
5604b67e3f03ab2741f910a250c91137

SHA1
a4bb15ac7914c22575f1051a29c448f215fe027f

SHA256
1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c

SHA512
5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\d3dcompiler_47.dll

Filesize
83KB

MD5
3fdfb3268c329c352cfb6fdc80cb847d

SHA1
b6a5d38a2494ff2050cf2a93c0524fb72dbb2ec8

SHA256
ad31afa02cd203b4187e6442710a36678d52a704af4cd47aece2a2802d101d53

SHA512
8ca1507c0e30f12433f6d8a0712c86254d4e4fdac997e9595584c2f39b47f1fe5c187253a59d80bae04fa0ffd1926a5a86bfdd902684db3243ae144f9b62b82f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\icudtl.dat

Filesize
357KB

MD5
d639dc6c22af9a61a0ef858637ae07f9

SHA1
920af82f2bd6b49fb9fdb39a3505babd503dcb44

SHA256
7c5d934e0cb45eae66ae2e6ddd0e59d00ab38513e29c24caa0944c6bdfa36911

SHA512
8d2ca057ee6555f8a771b0ed13c0dbb5d4325b08bbe756e6b0973b6e7caad27f5d4f7bdcdb1b1d70a606df5d906b6562876ae28549e6fb66f8123fd1f14b63df

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\libEGL.dll

Filesize
216KB

MD5
595e81c093da97ca6d83c03c41a3166b

SHA1
16de52368b2dd00c5763b95f383551c1d2bada0d

SHA256
136ffeedc6c37216ceecde1b30980645085f40ca92f96b8c0871b03cd2506463

SHA512
a8c08444da54c65dbaeef2ae11b5b4c20ff8d72c8bfc3e1c60e18b4a34abcdee32e98f3ab2bdaf2c4aabe531379cae289680deaf05a1ea328c8e1e42fe9b196c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\libGLESv2.dll

Filesize
1.8MB

MD5
efc7397cdd5d47bb37ea2988c8eaf8ce

SHA1
3c9848bf5860a7c0ba1ed1398a39e622fb2f04a9

SHA256
227683cb49eb83a646602301321cad7744790f8de5a6dcc89802a4ca7a473751

SHA512
a826fadd130d8eb9416f25b76daf3c09e55af6215a25647b6b49a6c1ca54a0418e7b0c3620855d847c5db1bd15ee710ee59a4d93c6fb76518d0acc67e99fb8a6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\af.pak

Filesize
340KB

MD5
198092a7a82efced4d59715bd3e41703

SHA1
ac3cdfba133330fce825816b2f9579ac240dc176

SHA256
d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba

SHA512
590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\am.pak

Filesize
504KB

MD5
ec71f8dd0d1fb5d55d144222c828e93c

SHA1
65cc8fd15ee8b43da489be9273295140d1d5f760

SHA256
fc0c46fd6ee89ef713b0a749ae4122b1acd38ee946934bef4b4823741129a8b7

SHA512
504f31130121ec7a03e257fb4dc396ee444fd26d7550d1c2cdb84b43c5c433129d9156b6c2703a91d4a107886fa822e21bcc11a1dbf38c37d723fb344871c70a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ar.pak

Filesize
602KB

MD5
b2a23f285858db5e3e53d6a5d5291623

SHA1
674adfeb57075f86f40ff4b14916c3af29695813

SHA256
7ab39416b60ee342ff2874aaa7b9b95b290828807b1395192cdbd29ee1be15e8

SHA512
92c9b31f82f62b15eed3edaf437412cb630e8deb2226ad162d7cb4c252d8cb7f0453b3121a846ffcb1547570e2eadb04cfd3877ab120496a7fefb47a6d96cba0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\bg.pak

Filesize
126KB

MD5
c148763e057d45ec7c3fd6d8c757412f

SHA1
64bda5f7337031462558903367ccdc2ab5159ede

SHA256
19ac1c52ff52a2b116a10e29513d036a0e2c046bddd95a6774c39da615f721d8

SHA512
0898ecb8799a80f8e00e56ae2202f190745ddf6317716886879ec5e0bcc98497c13c9e19d3004592a2c44892982c82f2f7716096a9251a97e41b477899dc9016

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\bn.pak

Filesize
768KB

MD5
31491456c52cb0ed4eb12e052728d98c

SHA1
3d11ee53d965f4ee02141d6b17cf31136e45b892

SHA256
3544ccae35dd6e7140766929fbbae30f48afd2e0f19dbbbc8ab939cd31f08e5a

SHA512
e59a736410bb0290efb4eeadc3ecd23015f8c9483dce74dbb6b8c794d7807547942d71a61462c540ec7554cc84eadbc02d1adbc7b612a6a152d965a791356b74

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ca.pak

Filesize
384KB

MD5
0312c87b6436e733a037bfb3084f7550

SHA1
e3f30b8f3bfc8ddbf4b8f85f845733ed5ac8c632

SHA256
b6c895fbca90c36ae2cfefefda989922162a2cc259603fbca066f0cfbf43c4ff

SHA512
24b7780211b9dcaf7cbe3915851c7b873562e0cff022c29ca1b4e159b9da152b517305f81dd33712a0224fc3b77e594405e432fe5eecf29b7a4f83f441d6905e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\cs.pak

Filesize
393KB

MD5
ff919631102a3a9ec635b3080b63e305

SHA1
e43b117ad5b2d5b373321ab0ae63dd4bc1352a89

SHA256
1b8c3add009028eb567b0094759daff29b7861e11d5a9d864071012200e9735a

SHA512
21833774413cc71ba9c0c592504ae6288e3c8ac4e5d1d62768f4b3eca09e90009abec5e8fadcb4e7d63b99a522ae48fd608aad432eb4165ec7021c8888ad7df1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\da.pak

Filesize
356KB

MD5
4bccba46add5ebaf6efd4ade3c42aed9

SHA1
e48dcc2de930bbf0ea8ee7b735ead321dadb5be8

SHA256
2497368658a988e4eb3f64cd17423ea04e7555b104d43c8996c0ecbbfed5f74d

SHA512
e2059e2a7f80353981eef6982a7da006fa3753aeba9aca5279eef71aa2fa4b7adbf9cbb17c85b8060359f9e871b1a5c665226f8d3b8a6fe49f908fd44e1b46bd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\de.pak

Filesize
381KB

MD5
8569900305a5661573f7766b93909f16

SHA1
3529376f54e32c17447b065d08c77314c4db2ec8

SHA256
068ba3e34e7f253fad7dc526b1078aaa969bea044d48171925534598aa8becb3

SHA512
d544febbe20a9bc5cf31f79f7ef74c1a742cccc99136e9828187c9a643bd0317c7cc48706346ee1a3c9eda8984be9c8606e9dfa7a6ce2cff49db2d785c2aa1c3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\el.pak

Filesize
691KB

MD5
8025eb8756d4bf3126d83c9078935520

SHA1
78895218a90680fe223af0b003c195da84902e1f

SHA256
e42aeaea80dabe82657983a462e4cd3ec74f71d4f08a689f5825f55fc02f3141

SHA512
f99f47e54583b60857a31648b985216713725496d8653ca04eb1d6634f2b7f7a1f9f70b8a7938529bfc6c8665360da5e6bfb6b68c314c011fef4a9817010c42b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\en-GB.pak

Filesize
310KB

MD5
502260e74b65b96cd93f5e7bf0391157

SHA1
b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7

SHA256
463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b

SHA512
0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\en-US.pak

Filesize
313KB

MD5
3f6f4b2c2f24e3893882cdaa1ccfe1a3

SHA1
b021cca30e774e0b91ee21b5beb030fea646098f

SHA256
bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f

SHA512
bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\es-419.pak

Filesize
380KB

MD5
02452424bb0cf6ab832808d04883f147

SHA1
a8e97ee52f3d97c1a4c678f7578808416e9fac65

SHA256
1b23cda69927c77764bda121ee398ffefcf5edcb5866432aa3526c378553c9b5

SHA512
9e750b26ab40b5f1c075acbdeb15a57cda9e6bd8049488cfaf368b5cbe8cd9b6e5dc96130e4137370c90bb0777b97515ea2be0787e255cff750fb7e188e22ab2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\es.pak

Filesize
67KB

MD5
d63ce5ae22b4bbb59a2fc3b3d3e0f362

SHA1
b64a7ca13c8e3df75cc4db83379ba0ecaabb50e7

SHA256
a0c26176b02e1848e937fea95bd0ca9f662e2788cfabf97a57c12893824c3931

SHA512
6fad7906bb9da67c563fbc2af26bd23abc7dbfe3a365af972aaab827c1f8c4dc4d99ec410ed57a18fb8b5c446cada6822f1b52908a6b186e9cc83ac8a0d452a8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\et.pak

Filesize
342KB

MD5
74eda453b23793ced4480ea7a595fe44

SHA1
76964af9c8024bd84fa1d89f60784e7ee6569350

SHA256
e2d38131a5ef4b0e8438f45e8c74c56bcf666760d4682120c8071c9220230555

SHA512
e9928cfac01f10b040c74e63242ffa1f7f616d8598f49f0aa7ddad063e18666cf5649cc65d00b3526526af8a7b46ee3b3655da22adf46aa44c0c6a1c2ac4dc7b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\fa.pak

Filesize
557KB

MD5
99de8cfda36ab9ab3342889fb6da393d

SHA1
6bdd3d627d4b6702f43725039089562af58898c0

SHA256
b93145f30e25122015373a248d6ea22a539c7d0d58c8aa853ac35cc80dc06bfe

SHA512
aa20793f9ece5823cb9e74a4a3ff97d7a1860a593f427fb5eacb0390569a48122589610fe5a02577577f3a30f981c5e3da97cf73bdfe158a6bb845586c5b19d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\fi.pak

Filesize
351KB

MD5
fa7dbd2ee35587ff31fde3c7107e4603

SHA1
baaa093dcb7eccf77ce599c8ff09df203e434b60

SHA256
5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c

SHA512
587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\fil.pak

Filesize
394KB

MD5
0b7d25d70a2d94a032b7ff7faea45a75

SHA1
d9d473b2ea936ffea4f751d8716cb03407a95785

SHA256
a737a14f84b10b2e3c9ad4d147b430fd30c5ac0e125d5aaaf1ea19b0507de5af

SHA512
e4dbef6fae4cb56c3cd7bd5dbb239b5136eb2534a17cacbf628f5e5d77bfca924580ad4e4d0ec580ffaf94d6e1fafad58e9c5f472c3a3ff782702ea5eae2aea3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\fr.pak

Filesize
14KB

MD5
3b97d1fb51fe5a20e71c80f0c33bc430

SHA1
182b7cce3fea07689283c9ce6da54458ddcd87cc

SHA256
ee05b5deae32463dafc45823860692b590aa8525e6ed6847feea5d09849079a0

SHA512
3d4532c52fb5a3f537587c9ad7e7154272f4a861f40f04b527868c2fe57ae258db355b194a6c3cbe92dd4661d433e63a8aed906e8d00dbe9809db4a816c528d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\gu.pak

Filesize
683KB

MD5
c4057afa4baec512ced8c51c8d2f922a

SHA1
23cc2c2948f7594d5a1e3a3d6b285c7fab2fa8d2

SHA256
9743c1508ca23317f9c4141c267d8ccf4b0040d56545e99231521021188e6f66

SHA512
768dd8b0c4ece0ddb1c843078488b0ae6922e20fa7db9b6c7b8cc6e510c3aaa98dfaaeeeae052207d6e3aabd7ba8fd2a636c98950e70f6fc7e47b54e8ecde960

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\he.pak

Filesize
390KB

MD5
86f3c7efaad58836b4388fba28c0cfea

SHA1
9b041f5642b00f7e671dce6934be7fa5003435aa

SHA256
c7fe36a47d2fb13f38ee85d1460f4d00b4e19378b2efa466132ddc7f8f56008d

SHA512
5f1ad3f0be442a5be5ed870447f44ac5a8758363b06ed6a25c50a73ce1aef25c8d26790177f9ae4576afb28465729522b89c30b477ba2f8f4e1915b90d5f0f94

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\hi.pak

Filesize
14KB

MD5
6ea846ed15fc3c122577d399acefdb5d

SHA1
3c569b5ae48b1202beb98b9182f342849c37aafa

SHA256
33b8ec190ea9aaa34cdfc7d6f6e1e6c2bca306be1d2c455d0a69a375f63afe61

SHA512
2e1606f2f14a9fe07b5ef4085b12be60dffbd841e775625e5f38f3de9643a9f5850e022b48de6cdb1987725e0082847a3920bc0788cc4892e4762614c38166b0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\hr.pak

Filesize
381KB

MD5
7dbd4a9de6e30de028c97a7d39f8038a

SHA1
18d68f37b3c5eea3a2fe42c4ab1694a439a189c0

SHA256
e1c793e08e062043cc65271718d9b21d5742729dfa2e076ab012e8a008d06c04

SHA512
a18c43257d26380ec14ae0259cf192257fee0c6895b82240c3b41c5d6e8bd6f8023cb39dc2da0701bbcf05e8eb2cd13c84af971c28c94099a6d0ea02ce745ddd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\hu.pak

Filesize
411KB

MD5
d6904e7d1b6750d43a6478877c42618d

SHA1
919f090a6a3aa1112916f5bb0d5b73a62be43c1e

SHA256
3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f

SHA512
d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\id.pak

Filesize
336KB

MD5
881ff04e220aa8c6ed9d0d76bfa07cb8

SHA1
cacf3620d1bf85648329902216e6cdc6f588a5ba

SHA256
9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22

SHA512
9134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\it.pak

Filesize
373KB

MD5
6629c344b6e5ee8fb476522627b34221

SHA1
28335e3c96a68a560c68756860394a0a86c21870

SHA256
e76c3f15529fa7cc088dc32903c6885f4cfa170a1e0144710b05965f3210c31c

SHA512
78ca2ebf40d6cc3eb7035cca78364be63b8eb69e27caf2cae57e3489b39a9e443409e800fd95e1b646d37655c37ee8a9ae1ab344b506cf65f8603a6a3ad892ed

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ja.pak

Filesize
456KB

MD5
c294012268f9e611fdc2904be57e45d8

SHA1
9ba4bd190ced7ffe053fa74071fc5836bdebea53

SHA256
21cd7ae581f6d0c19e90ac7df03d7dd5305b882776a1f091573f824bd28514da

SHA512
d16653f30617e52a040c5e033896a71055fee9992e54ffca5029601bb62a41b9685a68655b9c8bf7a7ba54a914836a0f7a49cccacae0eda180a6b68c0471a268

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\kn.pak

Filesize
461KB

MD5
456a3621771cb50a8970674e94267f79

SHA1
ee9c9f9094e81ce5852f78cef02c87cfd79e841f

SHA256
eed8a06fd02f8538987126666adfff44dae66f596267d3175a8da26bd527a945

SHA512
f5a9692442e486a89d87e74e9b163ba316d94b53e3b39601f49bd7620ff77aca7f9488f9216d4d780c204a5ee84c55aaade116ec4805e5f9d3132c6781ca1c20

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ko.pak

Filesize
383KB

MD5
ce19dea7b7d0b9472f99427de2b307f0

SHA1
9c84dbff9927c052dcb9818ed73bb272abf9054a

SHA256
586f34de2c7bb0e92fc376f3ad962bf9bae1a768398459d39f8ed06b59d8ccbb

SHA512
9a6c84ef9bb03be9ce96948bea94ec0ba83ecbd06ed648acab9d6fd27c1ab85f011a5670591da6256781dc147fc234d627cfc4bf5eb29bc2c8bfc84aaf89085f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\lt.pak

Filesize
412KB

MD5
7b6bf901352885c0699db71239b7cf24

SHA1
9e3ec5f327c0d0e54a449332061e60a8c79243cf

SHA256
9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350

SHA512
79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\lv.pak

Filesize
410KB

MD5
cccbd7f8a0c34c7094ce4d7b8e7e0588

SHA1
1a08401e2dc8c59200c4ecaa1886b43b6faa6979

SHA256
7467360f9addd4d8694e1508a6ab3a3e00dce57e5897d5376ad27d8e651b23d4

SHA512
2cc43437f1cd8d5fda0e95e7dd117c9b82e90cfed58ad8f492f46b4634aa01cd1b0ebe39377231a0828fc1ccd39641e4efc2f1210d629f9aba12ea9048accd95

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ml.pak

Filesize
375KB

MD5
f669c7c96f1516dd8308a551a3227f50

SHA1
6bfbb645e8b3da0ae18066df01840149770a4f41

SHA256
fd8023fa8273901d6db466c44dab166746dc4f93107f08f4349fd8f5e18937aa

SHA512
4e3835045d6c03bfeaa76d109182d73eebb05d62eabe7a0929883773a1cf5592c4889481574cbee6b67043d26d59d2c1471fd8b377ff8348c0d042b7a8ce68d8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\mr.pak

Filesize
772KB

MD5
b9a2aa88c69c42ebcc41fef00c980a38

SHA1
9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8

SHA256
481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09

SHA512
5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ms.pak

Filesize
351KB

MD5
6de7b004a86967a3433545b3b38bf89d

SHA1
113bd5b28dda669b27c798e0b46fd680f3a04956

SHA256
ead5a37549b98d55839ffcf0dc8f8201d37d71968ec9138fdea79d7c9b79549d

SHA512
239c4acd2c0b6c08fb92fd95b89a302ddefc01ea843950a0247b7310c2b024383ae98286c2d4b83b99833452c41b386e047b2ef33610ef122fcf2f439ef43726

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\nb.pak

Filesize
307KB

MD5
53ab7b63b582e1a81d16c77cc58ecf4b

SHA1
dc8cec8fa6e69379ad54c5276a479a9b1d06bbe1

SHA256
82593c6ff5ce1b46e2de82ab4c4cfda0ccb3e81ebad986bb2a88955f2df79979

SHA512
e5a7481855d36308b1b6a49d168bd58e8c986cf92298e947d6fcc7c5b9f048ad0386b7750d8bae0321a552965efd602c5810583e6325b5a3515b03e73b1e5037

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\nl.pak

Filesize
356KB

MD5
9fdf47fef5b549497005ef8efd2a2c59

SHA1
3449de72bfc2be537f4b007c81e5bc5de6ff3d0a

SHA256
65a9c1efcdd451504e2e9b44b0c8fafd2c3c1445d760fd6c435305e2f8534f59

SHA512
3e77178dcd9e8894847039a997c87d5d04eef8a1ace1846132fde229285da08ffc8d3ba697226130bd07ab122a868cc53693981a21f8211c839ccdaba77207cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\pl.pak

Filesize
396KB

MD5
c9da926441d438b952149650c86a033e

SHA1
74ee60342bda33048570dd3c03f897668cdfc971

SHA256
ce96fd415ffcda01345146faac716e2d45e2c556e5c6c38e9a1ea5ac19dafe84

SHA512
3e718e8df695cbd80146c3e911de9b235ccc06f574739e5720d47952f69eab089b56451cdc321174da9b239c0a71a720baf9d68b46046efa0edcb2a3f1804ea0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\pt-BR.pak

Filesize
374KB

MD5
c68170e4948cf3ae6910364c1e68ce90

SHA1
420f3a392db28b6fd6be44fd702b455518b67bbd

SHA256
b26499a256d66feed42b372ea2eaceb75c279694b40a7b5d0f8c1a5c24cf381c

SHA512
29482ced2091873a8c6242a608ed641b3a4d72fb93ccc2eb58d2769c446195f717b438d5633522f457234f3d209029936e9ea4ccd65d45ba8ae0c2df71043797

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\pt-PT.pak

Filesize
376KB

MD5
9b04c89c2d17c7c00a6a4342f0771fec

SHA1
a0886040fd5f870023cc3038f5722f4ba6d7c8b6

SHA256
abb012215610178b7f8203f61f41103546d3949ac3df4acb3a622b01663f39cc

SHA512
7c4cf5e7bfad4709db49779c1e3e762b8d0bac6cd736c511711ddca7682e08bc6b3274c9872d88db78bc36b0456b29680d3c4e518d4a401830cfb37b48567bb8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ro.pak

Filesize
387KB

MD5
9b9c22a12ddce43a4a3c0c047a16a5c3

SHA1
901e072d644a79e0b18be2f4a81e6842b070485d

SHA256
3e89d43b86b2582fd7db236659af47ff459a44c5b5ebcbb0bcc9eda244c8e501

SHA512
196a5bb1b0b5093d4a18279037ef7993525c36c136d4560b7e902c815687f7992ecd2b64d96422911a3468cf3f1478b21df6465d3b31486466cbb5573ff0e7e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ru.pak

Filesize
11KB

MD5
6e31c7c204c1a45fd3de3f1bd8a0f143

SHA1
3c606a067f6e7a0dd26f089194ec2d42c16d3fd3

SHA256
0d90d0536bcf2d9b2feef730db7354d3d176592531e2a2dc4defafe9db911a2d

SHA512
3b9b47d4af5c6e2e870684d60b81480108feda2a5e4d4c510e69804e06d984bb3aa92927c8e03d8df28d2405ac6a7d1917f64b29f0106b472f88c66e6a3d7f0e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\sk.pak

Filesize
399KB

MD5
72946b939f7bcaa98ab314cfba634e0b

SHA1
71c79a61712c8c5d3dac07a65d4c727e3b80ab17

SHA256
75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7

SHA512
2a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\sl.pak

Filesize
385KB

MD5
6a2efcb886dd33a5d05a112c141c520d

SHA1
ba89d9ef7ce1862d1e9933e910529ec5a3e2a933

SHA256
4fa004d80c7e89e38cdfed3a652003787fa810256d294c16aab0bca815eb7c02

SHA512
0475df28a602ec90c4331da4e7d742eded2cb3264b41924628bfc45e2662f2ceb7b9518ac88a231da1c3caf18d176ff3a4931c2b1751f3b74bce3af73d0088cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\sr.pak

Filesize
566KB

MD5
fb38fd1eb8de7586e49000c8690d1849

SHA1
689bd42e549d815d457ef12b7ab062419386f0e3

SHA256
e7f4a52707c3bce831bf4e277289be954df632b02df47bcd28ed28aba4e04933

SHA512
1965ebe61b895e79563853c121094ad9deb2ee2d154e009c482667f61467ea34f8a774f002b3cf292b5c1909cf9ad0880d5c364693d1c1628c86139bdda2f642

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\sv.pak

Filesize
347KB

MD5
14ecf7684d7987950a9655258d3a72be

SHA1
b1506b3b4be332081dde72bf54a197b1ee0bde66

SHA256
690a83bbefe1e97de5d2c1c0791707e8ddc3414a12cf30b79329fa5d21840d6e

SHA512
fd9d36c63b00bb1caf6a25f2c797f3a844395f16016a9010819462d647e8e759fd8887e5eae3ef300871f4abef05f4ceca9edb5b30ffdd56efeede9c75f56e30

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\sw.pak

Filesize
365KB

MD5
9632dd7d883fa4deb3963ea663e0ffd4

SHA1
0db135be4b3a7c54c39e9df5034d5576b68ea92e

SHA256
690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e

SHA512
3aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ta.pak

Filesize
449KB

MD5
b6a3daa49fd751d63cafa575e469ea5e

SHA1
86c9806a878c2d9658c6116251a08f161e088b46

SHA256
7945d0350e7fc66f2f5a10465633a1a533cb5a2474b5c2afd5c10a4b65983111

SHA512
bcdfe76a58ef51f75119bf95a0909c84c5a46a9250158c56da241c1dc45d1406ab6d2e544d4ccaa27e7310b095e8c3852b32cada032233324c9c87617d86e894

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\te.pak

Filesize
546KB

MD5
f0cd777e30b218493b2e7e88ca13228a

SHA1
85cae69365f5354fed88b454bd0e77637cbbd4ee

SHA256
b3496723777609c7e6c3c9d168f6cc6dbe23d1f28d573acb35ac724bc46e7a2e

SHA512
9aa53622aa5e918692e20c15b72d16519bf699d6c4cabb6b472d77670369d8cfecda5c8c0223c6ea54c430d86629de954c578ff5378433c3d8760b375b14b39e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\th.pak

Filesize
534KB

MD5
6d4cdb3cba4cd1e57f8d63e50a435974

SHA1
747cd5db9be7449052b073436ad40742ef84f619

SHA256
8c0ae65c26a84a18816efb7ae82dd4f901f091eb294f1f23a522f11ee28b3069

SHA512
9746131087d32715dc449dbe8cac0edd0508fed08cca16c6961ebe4fb36970b4541afa3692eec44cedee3b0443d9dd7ed32b5644e773d1b64bb16986058be94f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\uk.pak

Filesize
512KB

MD5
8ced8a2392790ecf0c7faf8bfebfecee

SHA1
8e62be6a21538f73841039b0d23904a8c3bda795

SHA256
c6b6b8e959b0e1ea4c3d8b9f8eb30af33443c049869511c16e3916d73c5f067d

SHA512
14c271df43ac88b58c67b7f4fc813ca64c9697d3e774f0a5aeb45b7573d73b197491af58fab79e0974852657f23e91881f482e5bc0f811570a0f05b995b48c4e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\ur.pak

Filesize
201KB

MD5
c66307115762b416ad246b053c843307

SHA1
9d03dba44d98a1c4caeac98617c1caeb2b8823d5

SHA256
f90cacaa6ba7800a73d38ded29491c2c03650540a4be414d4d9ef38d4868cefc

SHA512
4777959bb127d4353e11d7942e19faceade118279a00026e4df542e1f4da15b8575fc30f967d06db753e6c45e2c0b98b13a26561cbf52b1255cebad9b1b83829

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\vi.pak

Filesize
406KB

MD5
8344282d8131f7f1b8a9131ce70c6e76

SHA1
bc0d4879af477942f21a247ca6b24fca30f189f3

SHA256
74c09d1b265e086b79cb75fe0f9707bd5ec2439894e27bb97a5820255cfe0832

SHA512
0d55693ef020ce3653dca87922630a259bb91b47acfddc126fc4d90e23133d1b5920a6efffb82095dbc45ad626dffe755471dddf5d6b4c388c01c4e1a931ee4a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\zh-CN.pak

Filesize
92KB

MD5
cb7d507f99a70b69221a8fd55cb83ae6

SHA1
5025020b2862fbc8c091f94b76dfca5069220129

SHA256
12898af49b3be1abe192e9384cc0f5dd3c15c7b08b0e5042dafec83ce2f80c33

SHA512
0dcaf2483b249644a6e58dbd7c9f057dda672b24c428a464786a633b55e10429cc8f206e4fa798d9c0afad0c58c0539fb8703d10084b8f8f087ece7aa8103f4a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\locales\zh-TW.pak

Filesize
64KB

MD5
9380e432264ae00be2921b6d896d8c74

SHA1
41998290ccc83b2cdee14f5fb4e3cda743ecbb9f

SHA256
e7ba0d1a8b27812b3523723a9f6371bea127c2022775442c369f0cb905338235

SHA512
c7c312c4bf52bad534db8d263dbf7925177a5766488d403d184dd34a721c612c66f9b53b2e9cd46b4b3949eb57cfd98ef8d64e4ad06ac19b3f80216bc13e42a6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\resources.pak

Filesize
1.6MB

MD5
575ffe5c870e6a3505e1c2a6949bf43b

SHA1
a227937b86df295c2942c52026ed338bce7e0d65

SHA256
4ff5bc346b298b0f08763f924dacc0d479c38e71bb3e2f5f05db7e9851a5e6bd

SHA512
704cfdff57057c241a48edf6a328a29ff71fcbc69d240a057e9d8082b60ea603793860c7dea191894f9a6dcbdbec641c9d05a8e896a8da45c0c1d6b6ddf106c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\resources\app.asar

Filesize
86KB

MD5
d9577b0707cb1da96ecf5470d976e904

SHA1
3e14ba0f79df95b9abc52b7008c91aa2993802ff

SHA256
3f64267f50b7781d89ea8401c15987fc864fffea370e062f1d413fbcdc858ead

SHA512
1ba887580c97fad361747a004657f663e917c74f7e286aab43cf249e7ec92b7d2601c0c7419361758bc85ae1908556f7457ab831d188917b926353ac933958c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\resources\elevate.exe

Filesize
89KB

MD5
aff128972fd6e402e3f7234f43f6077e

SHA1
d4856bc397321f492df251330ee3d3ebbb9f05b7

SHA256
8c94571c1b0c34c8d10755ad4270faa4ab505a9e8cfbb81f74ef8c268ff04db9

SHA512
490da228837b6c3ec5f7d02db3d62ab8b48209f39947cbeabf77b2bf132ea7e10ecef0ad837310464eb5f16d58175254b02a9c3b1647bd5d1d1ecbc210c7529e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\snapshot_blob.bin

Filesize
168KB

MD5
b82ff216a0babf602940759b9a3af870

SHA1
07e8a22dcf8d7be04a6ddbcab3098e040494bb0e

SHA256
943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5

SHA512
da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\v8_context_snapshot.bin

Filesize
471KB

MD5
031ea03da08fe1247280cfe781658791

SHA1
e91db50ad16b5a5fbbaf4118672d60b347ea6161

SHA256
c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c

SHA512
b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\vk_swiftshader.dll

Filesize
54KB

MD5
8658046d6b62d40e2965aae68050ef55

SHA1
21acd8618f8c3132d2a27165fc029963f2a55d2b

SHA256
ecefa2e3932ed68dd04f1970a0088a6edb4155171d4d4fad6ce84eb24b3a02be

SHA512
c79aadde10eeff462e576bfd49427bc15d5da9648b9bbf41015ea471b94586def60a1bea3750899b4f0b3e37579d0fecc372a3ed7074bdc1505e1d13ec442e2d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\7z-out\vulkan-1.dll

Filesize
192KB

MD5
315bf37a1804c0ff959a47f0b2bf6c56

SHA1
eebc433bed17b22c0f3c29b80d40494852cc7745

SHA256
d1da5c316a49139d7bcd9cdaf055bc7cfe6094bcbee3149df17c0f379182b663

SHA512
faba4f7932e16d625717670c13a07b42f0f5454f12b1179f42e19ab2f506a2ba917cdb6606831c64bdf20ed469d10fcb7af33324d058dccf1d9ed5ecc6028a3a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk9D17.tmp\nsis7z.dll

Filesize
305KB

MD5
8e547f65962e5e87afe7247c58f557a3

SHA1
9639b3250a7b1074257c57b2e5376d012afa05ed

SHA256
e5785af44d0b5a9efa1c0e0ef29b26570dcb598572db1a8271b5aa45b7770e1c

SHA512
67c720c57cccbc1ba1ce9eec4c97ce31beb8e9cfb34157f35995c9f56e84942ccafd2a9ee2e7d54836d36cf0fd8513c8c7c21ab709817eece08ef162087d45cd

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sxl3jpn4.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
271B

MD5
7516941077b1d436e3974349f871b4fb

SHA1
5359575fd37cf0d03b9a5aaff22b99ebf64e9939

SHA256
259d3075882464f3f401fa5ffc5c98123a5bc5d4df73490fad2b4984b39c0be7

SHA512
b9343ddd01b33f9168fb7e0b99c14bf7380b240f7d17b2a4473433c597a20b2a9e5574fdca7fdcae304881c3e01063517000e545133832dd7cd0ad6e344ae797

Download Submit
C:\Users\Admin\Downloads\DiscordLauncher.rar

Filesize
11.6MB

MD5
196ef43a274a0e9aee8b4cafb6e2d8a2

SHA1
ab0939cc97b8bb820ecd5b74070716436a53e448

SHA256
d426198976a74fec3d321a0d6c0b3e00b3c9b88a4d28dfce8b84131affe8e30e

SHA512
62433267e3a9db6919a3e1cd53e2034ac81608266f0aee3527746c983b127d7f864f69e4b646741d7595b274137740a69fcd2da57584d124ecf6d5b4e5558f9c

Download Submit
C:\Users\Admin\Downloads\DiscordLauncher.rar:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit