Analysis

  • max time kernel
    94s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/02/2024, 12:06

General

  • Target

    https://github.com/vluis566/rp-1?tab=readme-ov-file

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/vluis566/rp-1?tab=readme-ov-file
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:648
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcdf5f46f8,0x7ffcdf5f4708,0x7ffcdf5f4718
      2⤵
        PID:1544
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        PID:2688
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
        2⤵
          PID:2592
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2708 /prefetch:8
          2⤵
            PID:452
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
            2⤵
              PID:1660
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
              2⤵
                PID:2164
              • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5632 /prefetch:8
                2⤵
                  PID:3192
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5632 /prefetch:8
                  2⤵
                  • Suspicious behavior: EnumeratesProcesses
                  PID:1056
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
                  2⤵
                    PID:1920
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4892 /prefetch:1
                    2⤵
                      PID:4864
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1
                      2⤵
                        PID:3276
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3456 /prefetch:8
                        2⤵
                          PID:5100
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6300 /prefetch:1
                          2⤵
                            PID:4400
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
                            2⤵
                              PID:3152
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5904 /prefetch:8
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:4804
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,15395745138440999739,11259469139661289326,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5868 /prefetch:2
                              2⤵
                                PID:5996
                            • C:\Windows\System32\CompPkgSrv.exe
                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                              1⤵
                                PID:3016
                              • C:\Windows\System32\CompPkgSrv.exe
                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                1⤵
                                  PID:696
                                • C:\Windows\System32\rundll32.exe
                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                  1⤵
                                    PID:4972
                                  • C:\Users\Admin\Downloads\CheatLoader\CheatLoader\CheatLoader.exe
                                    "C:\Users\Admin\Downloads\CheatLoader\CheatLoader\CheatLoader.exe"
                                    1⤵
                                    • Loads dropped DLL
                                    • Suspicious behavior: EnumeratesProcesses
                                    • Suspicious use of AdjustPrivilegeToken
                                    PID:3312
                                    • C:\Windows\SysWOW64\cmd.exe
                                      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Launcher.exe" | %SYSTEMROOT%\System32\find.exe "Launcher.exe"
                                      2⤵
                                        PID:4736
                                        • C:\Windows\SysWOW64\tasklist.exe
                                          tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Launcher.exe"
                                          3⤵
                                          • Enumerates processes with tasklist
                                          • Suspicious behavior: EnumeratesProcesses
                                          • Suspicious use of AdjustPrivilegeToken
                                          PID:1308
                                        • C:\Windows\SysWOW64\find.exe
                                          C:\Windows\System32\find.exe "Launcher.exe"
                                          3⤵
                                            PID:1124
                                      • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe"
                                        1⤵
                                          PID:3548
                                          • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1584 --field-trial-handle=1776,i,5455842305016538789,16015215143965194824,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                                            2⤵
                                              PID:5280
                                            • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --mojo-platform-channel-handle=2100 --field-trial-handle=1776,i,5455842305016538789,16015215143965194824,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                                              2⤵
                                                PID:5320
                                              • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --app-path="C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2340 --field-trial-handle=1776,i,5455842305016538789,16015215143965194824,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                                2⤵
                                                  PID:5404

                                              Network

                                                    MITRE ATT&CK Enterprise v15

                                                    Replay Monitor

                                                    Loading Replay Monitor...

                                                    Downloads

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                      Filesize

                                                      152B

                                                      MD5

                                                      d5564ccbd62bac229941d2812fc4bfba

                                                      SHA1

                                                      0483f8496225a0f2ca0d2151fab40e8f4f61ab6d

                                                      SHA256

                                                      d259ff04090cbde3b87a54554d6e2b8a33ba81e9483acbbe3e6bad15cbde4921

                                                      SHA512

                                                      300cda7933e8af577bdc1b20e6d4279d1e418cdb0571c928b1568bfea3c231ba632ccb67313ae73ddeae5586d85db95caffaedd23e973d437f8496a8c5a15025

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1a934a1a-516e-42a3-8540-8dac111b8bf7.tmp

                                                      Filesize

                                                      5KB

                                                      MD5

                                                      8cd4419c3c10fe720b9a2aa450338d75

                                                      SHA1

                                                      7bfec6d4621560ff3765ca61d1be8e527acc240c

                                                      SHA256

                                                      889b1bcef09b506e63c4cc71a430f61022569ff275c7a657c497eac6644b75a8

                                                      SHA512

                                                      4f113ceb27c65943372f9f48e1455d85a71dc2808756fa854f5416c0e185f92e68d61171abff3add2474bbebb9f52d06101c048cd34c50129ac74d9758408bfe

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                      Filesize

                                                      1KB

                                                      MD5

                                                      dc171a8a9647a4b4b287cc85ca1ad1b5

                                                      SHA1

                                                      b35ca8c00bfb0a136fbea7020d966c8a6f2dbb89

                                                      SHA256

                                                      a4d3b3c0a85af6eb9fe2270c6547361448e2810d8d87d23e8ae3732b6ad69bfa

                                                      SHA512

                                                      f89ac7098064a1e3855f9fe8e918edc38d00d0e89088b912bd981ba15cd63326f69888d6034f642f4a95a0f161dc70654c56e9ecb0e212775b66ba4cc0587d6f

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                      Filesize

                                                      493B

                                                      MD5

                                                      2612c28a81061c4245eb2c318e6722a2

                                                      SHA1

                                                      9844379dc4c442e2c5bc5eba458a60102de77b3d

                                                      SHA256

                                                      b638da78f360403259af72f897e555271f0e1224d193d50b766baf53f7778f84

                                                      SHA512

                                                      099917e18cfa6f6e13ca950ec7610db4152a17f46a9da9ee584b5f8cbe6731412d995a4aaab3c39e3986c3638cfc1169b1c2bc03d4a332eb73e3e1e2ec75f6c6

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                      Filesize

                                                      111B

                                                      MD5

                                                      285252a2f6327d41eab203dc2f402c67

                                                      SHA1

                                                      acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                                      SHA256

                                                      5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                                      SHA512

                                                      11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                      Filesize

                                                      5KB

                                                      MD5

                                                      248a3a793d878036b1f14a9ea7a42843

                                                      SHA1

                                                      4a416de05c078c641c95a9b3deb3de0e61999cab

                                                      SHA256

                                                      2e5a26c279e9b8b1bb36df00945e9e7e65223c984c47604cb2c8e1214524913c

                                                      SHA512

                                                      e9d686179337a90bdc281cab0cca0bcf4e9ecf2bc7c745d8346815a3a8f8c207ee7ed36e36e12352018bcc68fd733488d2ac690dc3ed86220f0ce600f094d3ac

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                      Filesize

                                                      6KB

                                                      MD5

                                                      6a126b890a3a5099582e0f7ec67fe049

                                                      SHA1

                                                      1a8e253c7aa329225292f2158f388f7d86ad803c

                                                      SHA256

                                                      c02bc80adc5ff9fa879932be852b6d1fa29b4bc99b1f67640978f184fb6b2855

                                                      SHA512

                                                      c12b25529cbacfb71d5fc2a021beb5106ded447f360bffa8e5f2b19f2c61efbdc8f460f8c7b6233a3f4aa7f7df55593296cae1f83751a2681e4ceb849623102d

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                                      Filesize

                                                      24KB

                                                      MD5

                                                      1d1c7c7f0b54eb8ba4177f9e91af9dce

                                                      SHA1

                                                      2b0f0ceb9a374fec8258679c2a039fbce4aff396

                                                      SHA256

                                                      555c13933eae4e0b0e992713ed8118e2980442f89fbdfb06d3914b607edbbb18

                                                      SHA512

                                                      4c8930fe2c805c54c0076408aba3fbfb08c24566fba9f6a409b5b1308d39c7b26c96717d43223632f1f71d2e9e68a01b43a60031be8f1ca7a541fe0f56f4d9f2

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                      Filesize

                                                      16B

                                                      MD5

                                                      6752a1d65b201c13b62ea44016eb221f

                                                      SHA1

                                                      58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                      SHA256

                                                      0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                      SHA512

                                                      9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                      Filesize

                                                      12KB

                                                      MD5

                                                      67bfa6e6abb9bba55073d8199aff850e

                                                      SHA1

                                                      7ac972d9ba0d71a484697a54af18ffc45144dbcd

                                                      SHA256

                                                      d798825773c8cdc734d4478912f32630c8d3fb7b5c6ef88071128d38173d5123

                                                      SHA512

                                                      9452790bb17df294bd300fc72ff4f45b11d552cb1b27b46346f0f28ffa32c72f17813e7b9c1567d06a47723936ff18a8be9fc1d4f12c1a6a26ca3bcd492e328a

                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                      Filesize

                                                      10KB

                                                      MD5

                                                      af2b7d4f05c5775a2741ba140ec73d7a

                                                      SHA1

                                                      9c82535fed672518b549a8ea2f48a214cb88c5ec

                                                      SHA256

                                                      6d5dff73d8f0c8210445b589fa733b6be10bbc961317231b5871970b906a3ad1

                                                      SHA512

                                                      a68740ca96d363402707705fda93e37e1c4fbed759ee151a4bd9015193121f5808bd70f8b04ccd0aab9c10494b65e45e43533ad6ecd9db5ec9b558f38ca2b2b8

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

                                                      Filesize

                                                      2.1MB

                                                      MD5

                                                      072ff23dd36289e1ebed0af8e7fa40b7

                                                      SHA1

                                                      c07b264d54516c18601cc2b8773b5d738419b396

                                                      SHA256

                                                      a82c0bdeed5b46a3fd988ea69b19ff3119d8f01b20dbffdd33d900071053265b

                                                      SHA512

                                                      359da4ba1de8e52ca8bd6e367cb64e398cb3e41cb807a5b3501ed8a4e489ae9f3612e1032a3a6be8ac676c4ecfefe9ed0a02baf5efb28b22841ded22ddc98655

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

                                                      Filesize

                                                      1.7MB

                                                      MD5

                                                      bcc6594f2c5a5c3f8420d13ee21774e2

                                                      SHA1

                                                      9e86872b0f128f62145f5688704c2c41f6e61055

                                                      SHA256

                                                      6174310618269e7ea073d023921733d42677e9d336a8da9f09445130a3c72b64

                                                      SHA512

                                                      206c2f3089dcb3cf3946d18e4df37dfa6e8e251d3c1a567b233364d17847e646257e07ca74274a5201b1ca2a40a1c6dd53a7597539a6d0fe11d2c6c18b57755b

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

                                                      Filesize

                                                      2.1MB

                                                      MD5

                                                      64ea3307bc532b06fd7407397519edb7

                                                      SHA1

                                                      40706799af0d83a39048835dd0a843ae9f2ced12

                                                      SHA256

                                                      a73e6439359018c73de108aa501186fee51a49d2a94f065e29b97f4a2115b93e

                                                      SHA512

                                                      2494932e697a1338f827972e427c09a34eaa71d17c9494de5dfdd306f42b7c9824c6fa395849f505e9c516e41f03e11f95265dca54fcf2e13ad3766fc0fac20f

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

                                                      Filesize

                                                      1.3MB

                                                      MD5

                                                      1dd83ed83a6aa9cfd922d3a3023834ab

                                                      SHA1

                                                      0504a33874d16ed18dbe55cdaaf1e2036ea1a483

                                                      SHA256

                                                      67b14d38bb1d953b770b2e5860c29853fbd5661781ed87ce59c55c9026562edc

                                                      SHA512

                                                      1e1e3255c5d7943d0eb159f2c2b597ad96b35eb0156c8f75210baa301e26cb43fec5083aa3e264bb0d136108ea10dba48ed5e8748db0ac13b9b8fdd0057e047a

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

                                                      Filesize

                                                      3.0MB

                                                      MD5

                                                      0ee3c38a3aa38e066d1fae61065f849a

                                                      SHA1

                                                      1c1a956bbba3c58f512eb9795545c2c31e4b81ee

                                                      SHA256

                                                      7307f5b1f6492f8796bf3117af8341d685d24516d3517c0f07d0ecfa402b2df9

                                                      SHA512

                                                      dc7062058fc4d5c46773ca8216ce425ad772a2961a2420bc716a0cfa15f2a6304b10fba866d5e459ebd90440f31ae701b4c7690b3e24e0cfa4bb7f9fce8c25c4

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\chrome_100_percent.pak

                                                      Filesize

                                                      126KB

                                                      MD5

                                                      d31f3439e2a3f7bee4ddd26f46a2b83f

                                                      SHA1

                                                      c5a26f86eb119ae364c5bf707bebed7e871fc214

                                                      SHA256

                                                      9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

                                                      SHA512

                                                      aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\d3dcompiler_47.dll

                                                      Filesize

                                                      1.9MB

                                                      MD5

                                                      4d04432da6b9404a7cc980ec531b3d4d

                                                      SHA1

                                                      6b583844771e4b01d054e22440566d1c13ccaded

                                                      SHA256

                                                      976c73684bc3884af3b0d2233a0a7cc33c8f9cd1e0898319cc612c5d4e02822d

                                                      SHA512

                                                      2097cee17f6eb6da944947836ed2788cefb5ee414c914d14abb2c20da16492d6f32405026d92a57187e34faa4d06eeb35837647a9cf28776175829e05a9a96e2

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

                                                      Filesize

                                                      1.6MB

                                                      MD5

                                                      f0d9bd8deaec74351ac841d9603190de

                                                      SHA1

                                                      f4793e755d9ece6efd7a2eb60d0af203a521e73e

                                                      SHA256

                                                      9afd3dc609ebe43412e73d714fdd5fe4541414ce1b6fc3a8fecb03dcf21a84ff

                                                      SHA512

                                                      639a9b7bb78ae9c0054cf47ddf76df31e5c69c4071052654d9373d8698b9a0eaa0a1258a213f5dd8e1888281384bb39df79270e4b3b8840cd818c6e0a03560d6

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

                                                      Filesize

                                                      1.5MB

                                                      MD5

                                                      9514ea378094e187c84f3e2de6350697

                                                      SHA1

                                                      a51e0b0ef9cce694ee743ccee5ee2b025c2f50df

                                                      SHA256

                                                      80f6f4367dbbe2432ba3e5f4efecb8d64f2dfd81fcb25ce08a116c493c3840c5

                                                      SHA512

                                                      cc309fbea5ea14111a92284272010c3668829aed0639b20304f5b1e827e04a26fd3ff27fb126af5d66dd3c191d7fbc74f19a9131add27c802ff8f51a15892e64

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

                                                      Filesize

                                                      256KB

                                                      MD5

                                                      f1c5a94c3cdbb60074c3b2ca12136305

                                                      SHA1

                                                      e00a44350b4ab5638e3bfabe157302894869a4f7

                                                      SHA256

                                                      71dadd7ffe020015a1eeafc98307331a71b6a29d8b28f500e248b54169d88876

                                                      SHA512

                                                      c7c32eab6321b38f340560227219f9192f593d6604bb95cc8eeb5216cd4a6d73097b6285fd71080ff2a87e8e400d11fc977f3abfc9066b756f1d2f4519dfed74

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\icudtl.dat

                                                      Filesize

                                                      2.1MB

                                                      MD5

                                                      061b30fd9a18220815d286a2eb2d97cf

                                                      SHA1

                                                      95a63d2b0fa79a8e14e33009da838e655622e608

                                                      SHA256

                                                      f9455f7b11f6c633284ed54c1ffd9fb43f2910b216eada99a4ba596b849e5adb

                                                      SHA512

                                                      9c2340ea2428b3eb32f09ed4b402fbd6cdaba3f3ec7c237a6aed4cedcb83e9d84c2168290dbd3b3da66834646ef742f7f1c86c975f2d704d7f2c809e9cd5ff71

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\libEGL.dll

                                                      Filesize

                                                      256KB

                                                      MD5

                                                      279a347445a69d0c3329883a9b68ce96

                                                      SHA1

                                                      f70f0adbc5be61b60b42c3b1cfadb2e3bccfdebc

                                                      SHA256

                                                      4795f5e7075798cba4e0109039eba9dae58fd019e53076c860ec8f20b5a82d58

                                                      SHA512

                                                      55af4d0a281313494f2557195f0bff6bd42365b882980982d15eedf1496adfd62c5060365d54e069c4f7b6a6e2acc694665cb9a5d62f928817d6fbacd3c7403e

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\libGLESv2.dll

                                                      Filesize

                                                      256KB

                                                      MD5

                                                      41b10e990bee6c4c0fd9553a8bd0d114

                                                      SHA1

                                                      2514e6de3c4b21152d506abb403a9646921e7dfa

                                                      SHA256

                                                      3aa92620b48e5957ed512f9e617a056ad7239b57b7f37b36b881a2bfa4eadccf

                                                      SHA512

                                                      7daa56daa966eaeea3b3b1d31c6dd6432fe40f345261636790cf7fe5d948d3cf39bdb8d1bff36eb7f40cfde671a1bc17f1787027c83c5d4d0b65973b77bab589

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\libglesv2.dll

                                                      Filesize

                                                      320KB

                                                      MD5

                                                      c528b35bf4617f547f7ac5fc1a84a842

                                                      SHA1

                                                      f4ff0552679ac40bf8b0f6bd2ede693f2f54fc39

                                                      SHA256

                                                      001e98415ed2d5fad664f120d4194707510e7ebcaac0f1cf5ec617a7d712f628

                                                      SHA512

                                                      c6dbc9477697aa7d37268125c171df8ffb9e35bdac799c5cdf8dcdc01c1acb42c807cc0e178866ab45eecee56e74bad1885a6bd7e6b064932c320af393ecf8ee

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\resources.pak

                                                      Filesize

                                                      1.9MB

                                                      MD5

                                                      403b4a4ca817a27db25b1fd6e135850c

                                                      SHA1

                                                      7aa10efaff9c5c3e351ddb180b26c25e914f427f

                                                      SHA256

                                                      8b2fe9d8ba1966c2381651a1a7800d3b11e7bae04af9cba564784f6cf5059d06

                                                      SHA512

                                                      865db15de34d856a393bd3021717db2453a64c401aa27293a8d48d7e577a0cd6a932cfe348d372437ee8a0141ef3ee462751a379bb580f8537297fbd4963a4da

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar

                                                      Filesize

                                                      640KB

                                                      MD5

                                                      6faf9c7f6e33b34c5a93843ce75a2885

                                                      SHA1

                                                      d91f87e37e6283d6521bf2368d246e92c0e822f3

                                                      SHA256

                                                      916a7666c6dd2b19521bc28a959b4f4d9728fa5bccea729bd640b7c73c9fa62c

                                                      SHA512

                                                      51b74ac5972aff055cb38499a17d41124e0ef08ddfeae7069c80240d7ba6b6fed69614deb996dfc5369d939521a59a3a481536e1a23753df22127c6a55bc20b1

                                                    • C:\Users\Admin\AppData\Local\Programs\Launcher\vk_swiftshader.dll

                                                      Filesize

                                                      192KB

                                                      MD5

                                                      8bc3721358443766e6530e4b5a856200

                                                      SHA1

                                                      3d2c1fd4f4d5ebe46454e194469ef64758e8cccb

                                                      SHA256

                                                      84b77a7fd47cdd5d091cca84e066a1921827f571f60ec19ea1a0e114fe8e3894

                                                      SHA512

                                                      a99499fd495fd4ae5cd21fc0c1a58cfa3a6024c8237117ea8af8d9c25b7d2e86c3044538184b052717ea1c314ea4554767990036e0ed31bd33b1cbb28b9a8400

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\LICENSE.electron.txt

                                                      Filesize

                                                      1KB

                                                      MD5

                                                      4d42118d35941e0f664dddbd83f633c5

                                                      SHA1

                                                      2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                                                      SHA256

                                                      5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                                                      SHA512

                                                      3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\LICENSES.chromium.html

                                                      Filesize

                                                      2.7MB

                                                      MD5

                                                      d58d0a47a41212fcf975ee2edbed44aa

                                                      SHA1

                                                      45d7d03a6d53e4403a4a9401d897c4b063312b05

                                                      SHA256

                                                      d05783c68055fbe47f7823c065f4e129f2f754226e5df665b9bc6a9d6bd628e1

                                                      SHA512

                                                      3b8ac98db96235d8dd39b63e1f1d93a9682aba38952d8c397b389d18a0be3d59e927bb5d7ce0691265acc7b3a2dfae050107a53c5046e47b3765140eae68d207

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\Launcher.exe

                                                      Filesize

                                                      3.5MB

                                                      MD5

                                                      1fe52df1d888990612d45f0544697fca

                                                      SHA1

                                                      09e050d6155ce016a77063566aa2ebdbd0c65fcd

                                                      SHA256

                                                      469803c876cacca20fdb130a7b25e7168cc64713feb39646d5e0fcf461c7b26e

                                                      SHA512

                                                      aafb79f15764f09cf0fa2904e15ae059abe96473e12b8cdf5337c47a5eeede7c002c90209cf496ee87c58bf25001d0a988d806d43f82dcbc2d38f60b9fe5e9dd

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\chrome_200_percent.pak

                                                      Filesize

                                                      175KB

                                                      MD5

                                                      5604b67e3f03ab2741f910a250c91137

                                                      SHA1

                                                      a4bb15ac7914c22575f1051a29c448f215fe027f

                                                      SHA256

                                                      1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c

                                                      SHA512

                                                      5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\d3dcompiler_47.dll

                                                      Filesize

                                                      4.7MB

                                                      MD5

                                                      cb9807f6cf55ad799e920b7e0f97df99

                                                      SHA1

                                                      bb76012ded5acd103adad49436612d073d159b29

                                                      SHA256

                                                      5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

                                                      SHA512

                                                      f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\ffmpeg.dll

                                                      Filesize

                                                      2.6MB

                                                      MD5

                                                      e3ab6f226a9189a456d53dd700f5d503

                                                      SHA1

                                                      0d3f467e9f36a404eb10b318c758edaf02305e26

                                                      SHA256

                                                      16070fc0fc3ae0d3d5872e5bd2194d883a1d91cf021e1fcb708c785a348c1a80

                                                      SHA512

                                                      b1d5b362489b5d26037c035c8b1e9bac24a4555b64371b41f8549ab70d5d591589ba154e163ec84d4b4b4435903db32f7ffe0f720f5e6d01b7656ed03f6757d0

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\icudtl.dat

                                                      Filesize

                                                      10.0MB

                                                      MD5

                                                      76bef9b8bb32e1e54fe1054c97b84a10

                                                      SHA1

                                                      05dfea2a3afeda799ab01bb7fbce628cacd596f4

                                                      SHA256

                                                      97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3

                                                      SHA512

                                                      7330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\libEGL.dll

                                                      Filesize

                                                      473KB

                                                      MD5

                                                      637eeb39ddbeb3ff518ff1988604505f

                                                      SHA1

                                                      8b3d9a0d542718fb906f8fafb2583d7bb53176ef

                                                      SHA256

                                                      3c51a8e53ef7473e9a335673e909dc9c67bf962997e6e2a319c3bd70fd52b4ed

                                                      SHA512

                                                      3257f9c96665f1bc8bb39acd0d98015b7d5e32f3cf3f84e795df4d19f6bd3bcc14a4e89759cc0de83289b79cd290fd5f4b176c3e9a4cb2eca3acfba0c9e232df

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\libGLESv2.dll

                                                      Filesize

                                                      1.3MB

                                                      MD5

                                                      b255df6cc8fd9f8b6bcebdb78c91a1b0

                                                      SHA1

                                                      6fc22d3539083706740056dcdf49d87b8f885f98

                                                      SHA256

                                                      585fac6d689480290acfd760cdf09bc0c77af6c5baa2459eb8f6f362c07001bc

                                                      SHA512

                                                      7e01697365d318eea1bc5ce26b2ca5c9187afad3915335f6ace54900c369eca34a0411475170204e477c56c066d7077a22987481ca284c186e7e5ce4fceb6098

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\af.pak

                                                      Filesize

                                                      340KB

                                                      MD5

                                                      198092a7a82efced4d59715bd3e41703

                                                      SHA1

                                                      ac3cdfba133330fce825816b2f9579ac240dc176

                                                      SHA256

                                                      d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba

                                                      SHA512

                                                      590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\am.pak

                                                      Filesize

                                                      551KB

                                                      MD5

                                                      a2a17bdd83467a027505bc817d1ac028

                                                      SHA1

                                                      cc1266a22606a1055db9653b82e90c9d1f551d44

                                                      SHA256

                                                      f92b0299185d963337e96df1016e1cf5ca335e22ff86568c1a6507c3fea29094

                                                      SHA512

                                                      193c5db0a30a3c8ef5e8c821cafb9d0b5671b7e7821748c7b432e927bd4638ecf5bfc1d99721ce89fb3df4f6f23b5e55d753430e8ef2bedd1e1633e613321028

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ar.pak

                                                      Filesize

                                                      602KB

                                                      MD5

                                                      b2a23f285858db5e3e53d6a5d5291623

                                                      SHA1

                                                      674adfeb57075f86f40ff4b14916c3af29695813

                                                      SHA256

                                                      7ab39416b60ee342ff2874aaa7b9b95b290828807b1395192cdbd29ee1be15e8

                                                      SHA512

                                                      92c9b31f82f62b15eed3edaf437412cb630e8deb2226ad162d7cb4c252d8cb7f0453b3121a846ffcb1547570e2eadb04cfd3877ab120496a7fefb47a6d96cba0

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\bg.pak

                                                      Filesize

                                                      631KB

                                                      MD5

                                                      9dc95c3b9b47cc9fe5a34b2aab2d4d01

                                                      SHA1

                                                      bc19494d160e4af6abd0a10c5adbc8114d50a714

                                                      SHA256

                                                      fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e

                                                      SHA512

                                                      a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\bn.pak

                                                      Filesize

                                                      812KB

                                                      MD5

                                                      fac2c752c57175a4b1f4630e3667123e

                                                      SHA1

                                                      a2dbcf1dd7b3cac499b9f782c7393ab438039584

                                                      SHA256

                                                      71f99a67bb310fab8068eeed7ce24ea7624a66051ba4e719d051cc7e67e78001

                                                      SHA512

                                                      4820704bd92dfb60736da5b84c8bc9135fca484c678585ec9d26dcb90632e382f354d03b539599f4816feb027dd285ff06ed8a520bede56d7a1c590d942e4250

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ca.pak

                                                      Filesize

                                                      384KB

                                                      MD5

                                                      f061bed8500a86f0ab4b7ed04467e4c7

                                                      SHA1

                                                      e71adc818bdae2b7d309a1d931a37e4e1cbc2fe2

                                                      SHA256

                                                      d7192c52faad48723309ff6d5acefb22edb9eb72342833849427dc11ccadd4e4

                                                      SHA512

                                                      9e133b28cf0813cfcc4225b0f3c3488a8123bad2c16ca574053de70016a9f758fc9ed19c779c12bf1e93ea67c6790e76cf27ede109816f5e90baa589467d803b

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\cs.pak

                                                      Filesize

                                                      393KB

                                                      MD5

                                                      ff919631102a3a9ec635b3080b63e305

                                                      SHA1

                                                      e43b117ad5b2d5b373321ab0ae63dd4bc1352a89

                                                      SHA256

                                                      1b8c3add009028eb567b0094759daff29b7861e11d5a9d864071012200e9735a

                                                      SHA512

                                                      21833774413cc71ba9c0c592504ae6288e3c8ac4e5d1d62768f4b3eca09e90009abec5e8fadcb4e7d63b99a522ae48fd608aad432eb4165ec7021c8888ad7df1

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\da.pak

                                                      Filesize

                                                      356KB

                                                      MD5

                                                      4bccba46add5ebaf6efd4ade3c42aed9

                                                      SHA1

                                                      e48dcc2de930bbf0ea8ee7b735ead321dadb5be8

                                                      SHA256

                                                      2497368658a988e4eb3f64cd17423ea04e7555b104d43c8996c0ecbbfed5f74d

                                                      SHA512

                                                      e2059e2a7f80353981eef6982a7da006fa3753aeba9aca5279eef71aa2fa4b7adbf9cbb17c85b8060359f9e871b1a5c665226f8d3b8a6fe49f908fd44e1b46bd

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\de.pak

                                                      Filesize

                                                      381KB

                                                      MD5

                                                      8569900305a5661573f7766b93909f16

                                                      SHA1

                                                      3529376f54e32c17447b065d08c77314c4db2ec8

                                                      SHA256

                                                      068ba3e34e7f253fad7dc526b1078aaa969bea044d48171925534598aa8becb3

                                                      SHA512

                                                      d544febbe20a9bc5cf31f79f7ef74c1a742cccc99136e9828187c9a643bd0317c7cc48706346ee1a3c9eda8984be9c8606e9dfa7a6ce2cff49db2d785c2aa1c3

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\el.pak

                                                      Filesize

                                                      691KB

                                                      MD5

                                                      8025eb8756d4bf3126d83c9078935520

                                                      SHA1

                                                      78895218a90680fe223af0b003c195da84902e1f

                                                      SHA256

                                                      e42aeaea80dabe82657983a462e4cd3ec74f71d4f08a689f5825f55fc02f3141

                                                      SHA512

                                                      f99f47e54583b60857a31648b985216713725496d8653ca04eb1d6634f2b7f7a1f9f70b8a7938529bfc6c8665360da5e6bfb6b68c314c011fef4a9817010c42b

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\en-GB.pak

                                                      Filesize

                                                      310KB

                                                      MD5

                                                      502260e74b65b96cd93f5e7bf0391157

                                                      SHA1

                                                      b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7

                                                      SHA256

                                                      463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b

                                                      SHA512

                                                      0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\en-US.pak

                                                      Filesize

                                                      313KB

                                                      MD5

                                                      3f6f4b2c2f24e3893882cdaa1ccfe1a3

                                                      SHA1

                                                      b021cca30e774e0b91ee21b5beb030fea646098f

                                                      SHA256

                                                      bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f

                                                      SHA512

                                                      bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\es-419.pak

                                                      Filesize

                                                      380KB

                                                      MD5

                                                      02452424bb0cf6ab832808d04883f147

                                                      SHA1

                                                      a8e97ee52f3d97c1a4c678f7578808416e9fac65

                                                      SHA256

                                                      1b23cda69927c77764bda121ee398ffefcf5edcb5866432aa3526c378553c9b5

                                                      SHA512

                                                      9e750b26ab40b5f1c075acbdeb15a57cda9e6bd8049488cfaf368b5cbe8cd9b6e5dc96130e4137370c90bb0777b97515ea2be0787e255cff750fb7e188e22ab2

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\es.pak

                                                      Filesize

                                                      380KB

                                                      MD5

                                                      4ca91891b2d4670d02931f0ca84e4744

                                                      SHA1

                                                      85f6559b09c80af2575e3b7626842c10081e188e

                                                      SHA256

                                                      85fff1ca6bd2527073de03fa77dd013db2557a57cce1fd370caa2b185abb9336

                                                      SHA512

                                                      83eae7ab2f03598c657786bff6171803b6bbe2128d1a5b8a01d9a13337113632279712dd8ffcd3b707fa6052a936d92a57cb67d848c77ee291e75700e29f2bf8

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\et.pak

                                                      Filesize

                                                      342KB

                                                      MD5

                                                      74eda453b23793ced4480ea7a595fe44

                                                      SHA1

                                                      76964af9c8024bd84fa1d89f60784e7ee6569350

                                                      SHA256

                                                      e2d38131a5ef4b0e8438f45e8c74c56bcf666760d4682120c8071c9220230555

                                                      SHA512

                                                      e9928cfac01f10b040c74e63242ffa1f7f616d8598f49f0aa7ddad063e18666cf5649cc65d00b3526526af8a7b46ee3b3655da22adf46aa44c0c6a1c2ac4dc7b

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\fa.pak

                                                      Filesize

                                                      448KB

                                                      MD5

                                                      301312be3dfbcea418455dbb879fefe4

                                                      SHA1

                                                      6c4c197747fb03b5bdbe58b9560c779f578fd35f

                                                      SHA256

                                                      7bc3c70009e7d1ef0fb7c04390827a3cbc5403466c298002309c098b7207acb1

                                                      SHA512

                                                      e8db5efbfb599ecb1101125d6c1c4e40564f7ac579a96e44f19ecee013289098d8cba5fd8a97df7810003a2ecad383c4f76e46743cea5841dcde9fb2abeeadd9

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\fi.pak

                                                      Filesize

                                                      351KB

                                                      MD5

                                                      fa7dbd2ee35587ff31fde3c7107e4603

                                                      SHA1

                                                      baaa093dcb7eccf77ce599c8ff09df203e434b60

                                                      SHA256

                                                      5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c

                                                      SHA512

                                                      587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\fil.pak

                                                      Filesize

                                                      324KB

                                                      MD5

                                                      93b9a7909e313014877265012345d268

                                                      SHA1

                                                      b9c097870b66824f47e577efac251cd870844860

                                                      SHA256

                                                      3991cce16144e91be11ca889686f92896d2091cebc3365471e4ed7cefda2ef24

                                                      SHA512

                                                      5cb49e605adbe752dc3fdfa5c1c8461d2d7f42f74cded14838e9bdd40687d71ee0d5b7c4f7957b7666426cd90218b574ca16f8262f7d1dbf4ddfaf14283b7919

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\fr.pak

                                                      Filesize

                                                      384KB

                                                      MD5

                                                      8e88213b20e591184dac2fa6d0549f81

                                                      SHA1

                                                      f38b635537da3ff3ab6afa66b32b6f34d35ed3ab

                                                      SHA256

                                                      231864ae00c952f293063e5af146124a95b7239b7b8f9a2a45b2e7faa7a4237a

                                                      SHA512

                                                      6241ad577dde6f571c48b4c10c408c590128effe4bb0d59e9730384206246837107bdcb8acd17802f732c25419816aa5170f39f5621a5a5df77bb82cf3a2d264

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\gu.pak

                                                      Filesize

                                                      320KB

                                                      MD5

                                                      b404516282df90d839a58264bc192111

                                                      SHA1

                                                      6b9a475bedd19e3b5711ef1c1c56a96d69e34d9a

                                                      SHA256

                                                      20335e30776f5b1db2e0d1cf40cdf9290ee8bac3220e87621631ae2d1f59c40d

                                                      SHA512

                                                      2d866036e674c5048c087e67c490f7fcadcc89e01a4bbb94bccaf434d12f7c3945012115c8f0d62ffe1e6b11078e64a2d47b657267dc563f1af61247f0ab92ed

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\he.pak

                                                      Filesize

                                                      320KB

                                                      MD5

                                                      8b70d1b55783739bdbf71a0928d7f8fe

                                                      SHA1

                                                      d337b51d7dc8621ed7b70c563e0e8d7ec80364be

                                                      SHA256

                                                      788d8a64ec5871c07221a4e2e043825a996d04273f21f6a9a2b147597d6655b4

                                                      SHA512

                                                      9271a1ad7e8f706b5c4d1584c6f610a00018b635347703300169cc78b343983866a7775ded1e3fce7378c436dce36117ed03b124b3a355a68cd963c7bcf03cb2

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\hi.pak

                                                      Filesize

                                                      821KB

                                                      MD5

                                                      9b5d94450fb03c34759653deb0551441

                                                      SHA1

                                                      b9134fbc75304ca73b156e77425505ed6dc6d629

                                                      SHA256

                                                      5e8f2593dbea5a57c3a974558a3fc91b6087329a1e7b11622a6eac120a973718

                                                      SHA512

                                                      caed9535d487833bdde51e82b76d3b8d2e6ea18ec0b4b7a98552be9266ff0728bb1133d8f9cbd169345aa08b0073f04d649baa71bb487483951cfa1a92080d63

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\hr.pak

                                                      Filesize

                                                      381KB

                                                      MD5

                                                      7dbd4a9de6e30de028c97a7d39f8038a

                                                      SHA1

                                                      18d68f37b3c5eea3a2fe42c4ab1694a439a189c0

                                                      SHA256

                                                      e1c793e08e062043cc65271718d9b21d5742729dfa2e076ab012e8a008d06c04

                                                      SHA512

                                                      a18c43257d26380ec14ae0259cf192257fee0c6895b82240c3b41c5d6e8bd6f8023cb39dc2da0701bbcf05e8eb2cd13c84af971c28c94099a6d0ea02ce745ddd

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\hu.pak

                                                      Filesize

                                                      411KB

                                                      MD5

                                                      d6904e7d1b6750d43a6478877c42618d

                                                      SHA1

                                                      919f090a6a3aa1112916f5bb0d5b73a62be43c1e

                                                      SHA256

                                                      3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f

                                                      SHA512

                                                      d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\id.pak

                                                      Filesize

                                                      336KB

                                                      MD5

                                                      881ff04e220aa8c6ed9d0d76bfa07cb8

                                                      SHA1

                                                      cacf3620d1bf85648329902216e6cdc6f588a5ba

                                                      SHA256

                                                      9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22

                                                      SHA512

                                                      9134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\it.pak

                                                      Filesize

                                                      373KB

                                                      MD5

                                                      6629c344b6e5ee8fb476522627b34221

                                                      SHA1

                                                      28335e3c96a68a560c68756860394a0a86c21870

                                                      SHA256

                                                      e76c3f15529fa7cc088dc32903c6885f4cfa170a1e0144710b05965f3210c31c

                                                      SHA512

                                                      78ca2ebf40d6cc3eb7035cca78364be63b8eb69e27caf2cae57e3489b39a9e443409e800fd95e1b646d37655c37ee8a9ae1ab344b506cf65f8603a6a3ad892ed

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ja.pak

                                                      Filesize

                                                      456KB

                                                      MD5

                                                      c294012268f9e611fdc2904be57e45d8

                                                      SHA1

                                                      9ba4bd190ced7ffe053fa74071fc5836bdebea53

                                                      SHA256

                                                      21cd7ae581f6d0c19e90ac7df03d7dd5305b882776a1f091573f824bd28514da

                                                      SHA512

                                                      d16653f30617e52a040c5e033896a71055fee9992e54ffca5029601bb62a41b9685a68655b9c8bf7a7ba54a914836a0f7a49cccacae0eda180a6b68c0471a268

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\kn.pak

                                                      Filesize

                                                      910KB

                                                      MD5

                                                      01e8dc084d07743fbda50d54d86ee3bd

                                                      SHA1

                                                      e0709217e1a6785706b7d14037b1478ee2a3a59d

                                                      SHA256

                                                      ae4e003458f1a8bd3652e61241e11ff91bd887f6b95c1fe2700e76a117ba2119

                                                      SHA512

                                                      7d8db84f975d778bde21253f43d174921c2c71111644a953ad8671754e5d656f72bcabf62f4b960cbf4ca0ccc5f67d1558ed250b568c1f2308a31970e380654d

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ko.pak

                                                      Filesize

                                                      383KB

                                                      MD5

                                                      ce19dea7b7d0b9472f99427de2b307f0

                                                      SHA1

                                                      9c84dbff9927c052dcb9818ed73bb272abf9054a

                                                      SHA256

                                                      586f34de2c7bb0e92fc376f3ad962bf9bae1a768398459d39f8ed06b59d8ccbb

                                                      SHA512

                                                      9a6c84ef9bb03be9ce96948bea94ec0ba83ecbd06ed648acab9d6fd27c1ab85f011a5670591da6256781dc147fc234d627cfc4bf5eb29bc2c8bfc84aaf89085f

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\lt.pak

                                                      Filesize

                                                      412KB

                                                      MD5

                                                      7b6bf901352885c0699db71239b7cf24

                                                      SHA1

                                                      9e3ec5f327c0d0e54a449332061e60a8c79243cf

                                                      SHA256

                                                      9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350

                                                      SHA512

                                                      79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\lv.pak

                                                      Filesize

                                                      410KB

                                                      MD5

                                                      cccbd7f8a0c34c7094ce4d7b8e7e0588

                                                      SHA1

                                                      1a08401e2dc8c59200c4ecaa1886b43b6faa6979

                                                      SHA256

                                                      7467360f9addd4d8694e1508a6ab3a3e00dce57e5897d5376ad27d8e651b23d4

                                                      SHA512

                                                      2cc43437f1cd8d5fda0e95e7dd117c9b82e90cfed58ad8f492f46b4634aa01cd1b0ebe39377231a0828fc1ccd39641e4efc2f1210d629f9aba12ea9048accd95

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ml.pak

                                                      Filesize

                                                      948KB

                                                      MD5

                                                      00292b0801e0dd0a74091bf53f1574c9

                                                      SHA1

                                                      63a002e7a8796bc4b4459a19c95ce426fbd1ec7f

                                                      SHA256

                                                      61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6

                                                      SHA512

                                                      e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\mr.pak

                                                      Filesize

                                                      772KB

                                                      MD5

                                                      b9a2aa88c69c42ebcc41fef00c980a38

                                                      SHA1

                                                      9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8

                                                      SHA256

                                                      481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09

                                                      SHA512

                                                      5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ms.pak

                                                      Filesize

                                                      351KB

                                                      MD5

                                                      6de7b004a86967a3433545b3b38bf89d

                                                      SHA1

                                                      113bd5b28dda669b27c798e0b46fd680f3a04956

                                                      SHA256

                                                      ead5a37549b98d55839ffcf0dc8f8201d37d71968ec9138fdea79d7c9b79549d

                                                      SHA512

                                                      239c4acd2c0b6c08fb92fd95b89a302ddefc01ea843950a0247b7310c2b024383ae98286c2d4b83b99833452c41b386e047b2ef33610ef122fcf2f439ef43726

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\nb.pak

                                                      Filesize

                                                      344KB

                                                      MD5

                                                      bbae0915edec081b04bb903b689bc40b

                                                      SHA1

                                                      6a0fc635ce1c431e512b8b3b8448176aa4025556

                                                      SHA256

                                                      d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8

                                                      SHA512

                                                      573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\nl.pak

                                                      Filesize

                                                      356KB

                                                      MD5

                                                      9fdf47fef5b549497005ef8efd2a2c59

                                                      SHA1

                                                      3449de72bfc2be537f4b007c81e5bc5de6ff3d0a

                                                      SHA256

                                                      65a9c1efcdd451504e2e9b44b0c8fafd2c3c1445d760fd6c435305e2f8534f59

                                                      SHA512

                                                      3e77178dcd9e8894847039a997c87d5d04eef8a1ace1846132fde229285da08ffc8d3ba697226130bd07ab122a868cc53693981a21f8211c839ccdaba77207cd

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\pl.pak

                                                      Filesize

                                                      396KB

                                                      MD5

                                                      c9da926441d438b952149650c86a033e

                                                      SHA1

                                                      74ee60342bda33048570dd3c03f897668cdfc971

                                                      SHA256

                                                      ce96fd415ffcda01345146faac716e2d45e2c556e5c6c38e9a1ea5ac19dafe84

                                                      SHA512

                                                      3e718e8df695cbd80146c3e911de9b235ccc06f574739e5720d47952f69eab089b56451cdc321174da9b239c0a71a720baf9d68b46046efa0edcb2a3f1804ea0

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\pt-BR.pak

                                                      Filesize

                                                      374KB

                                                      MD5

                                                      c68170e4948cf3ae6910364c1e68ce90

                                                      SHA1

                                                      420f3a392db28b6fd6be44fd702b455518b67bbd

                                                      SHA256

                                                      b26499a256d66feed42b372ea2eaceb75c279694b40a7b5d0f8c1a5c24cf381c

                                                      SHA512

                                                      29482ced2091873a8c6242a608ed641b3a4d72fb93ccc2eb58d2769c446195f717b438d5633522f457234f3d209029936e9ea4ccd65d45ba8ae0c2df71043797

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\pt-PT.pak

                                                      Filesize

                                                      376KB

                                                      MD5

                                                      9b04c89c2d17c7c00a6a4342f0771fec

                                                      SHA1

                                                      a0886040fd5f870023cc3038f5722f4ba6d7c8b6

                                                      SHA256

                                                      abb012215610178b7f8203f61f41103546d3949ac3df4acb3a622b01663f39cc

                                                      SHA512

                                                      7c4cf5e7bfad4709db49779c1e3e762b8d0bac6cd736c511711ddca7682e08bc6b3274c9872d88db78bc36b0456b29680d3c4e518d4a401830cfb37b48567bb8

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ro.pak

                                                      Filesize

                                                      387KB

                                                      MD5

                                                      9b9c22a12ddce43a4a3c0c047a16a5c3

                                                      SHA1

                                                      901e072d644a79e0b18be2f4a81e6842b070485d

                                                      SHA256

                                                      3e89d43b86b2582fd7db236659af47ff459a44c5b5ebcbb0bcc9eda244c8e501

                                                      SHA512

                                                      196a5bb1b0b5093d4a18279037ef7993525c36c136d4560b7e902c815687f7992ecd2b64d96422911a3468cf3f1478b21df6465d3b31486466cbb5573ff0e7e0

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ru.pak

                                                      Filesize

                                                      634KB

                                                      MD5

                                                      aa75c21bfe54bb70e7abd9fce1347a8f

                                                      SHA1

                                                      3492307cec15b367274c948beb76598f72347846

                                                      SHA256

                                                      bd981aa65536b544228ed1d60a552ff4c7800b46f815177b33b3e628b97d77e4

                                                      SHA512

                                                      0e77f1c7e4b5410e9eaed875f5dae6485d8de5b650ec44133b1634645cc3055fa7bea316e843b491f29d9c137b20623b120e014b1c74bbf4e8d1f08dbeaf5bb2

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\sk.pak

                                                      Filesize

                                                      399KB

                                                      MD5

                                                      72946b939f7bcaa98ab314cfba634e0b

                                                      SHA1

                                                      71c79a61712c8c5d3dac07a65d4c727e3b80ab17

                                                      SHA256

                                                      75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7

                                                      SHA512

                                                      2a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\sl.pak

                                                      Filesize

                                                      385KB

                                                      MD5

                                                      6a2efcb886dd33a5d05a112c141c520d

                                                      SHA1

                                                      ba89d9ef7ce1862d1e9933e910529ec5a3e2a933

                                                      SHA256

                                                      4fa004d80c7e89e38cdfed3a652003787fa810256d294c16aab0bca815eb7c02

                                                      SHA512

                                                      0475df28a602ec90c4331da4e7d742eded2cb3264b41924628bfc45e2662f2ceb7b9518ac88a231da1c3caf18d176ff3a4931c2b1751f3b74bce3af73d0088cc

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\sr.pak

                                                      Filesize

                                                      595KB

                                                      MD5

                                                      fca817ed4b839b976ebcbf59cac66d68

                                                      SHA1

                                                      413efa65470319999032b6a25b3b2ee33b8cd047

                                                      SHA256

                                                      524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb

                                                      SHA512

                                                      cb246d5c5cea30d6e7514841ab93803984cda37461a09b6c340ca64f7cbce4e1212951a4de421d928d433a619dac18454fb403b42581757b76c7eb124ce70cf2

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\sv.pak

                                                      Filesize

                                                      347KB

                                                      MD5

                                                      14ecf7684d7987950a9655258d3a72be

                                                      SHA1

                                                      b1506b3b4be332081dde72bf54a197b1ee0bde66

                                                      SHA256

                                                      690a83bbefe1e97de5d2c1c0791707e8ddc3414a12cf30b79329fa5d21840d6e

                                                      SHA512

                                                      fd9d36c63b00bb1caf6a25f2c797f3a844395f16016a9010819462d647e8e759fd8887e5eae3ef300871f4abef05f4ceca9edb5b30ffdd56efeede9c75f56e30

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\sw.pak

                                                      Filesize

                                                      365KB

                                                      MD5

                                                      9632dd7d883fa4deb3963ea663e0ffd4

                                                      SHA1

                                                      0db135be4b3a7c54c39e9df5034d5576b68ea92e

                                                      SHA256

                                                      690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e

                                                      SHA512

                                                      3aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ta.pak

                                                      Filesize

                                                      936KB

                                                      MD5

                                                      714ef30e819d791b41ab093d515e1704

                                                      SHA1

                                                      5410b58dcaa0bc82146655ed56493581d18d5c04

                                                      SHA256

                                                      9be97a18356b05ac4c3aa2b7e719eb29b47d8ad406aa50cf0f24bdde1d613083

                                                      SHA512

                                                      a35074a54dc12a68301553345c69f02ad31bc010690d5f4c4fad5d65b3fd9c3f7c3ec7e3637673d250cb33496b93a9582e28b5210d11137bc0bd5b2e219c0aab

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\te.pak

                                                      Filesize

                                                      704KB

                                                      MD5

                                                      4ca5d4bab43b79d555b3cc9e2e265b3f

                                                      SHA1

                                                      37eed367492dba0405c679314a934c9c0853ef9e

                                                      SHA256

                                                      f65fb83f8287ff17124f5bccf278ceb62601ddf3e18f407995992f0b8fa61fa9

                                                      SHA512

                                                      933329a63501dfc61909f6a768b58d6e26e10317bfb8e057a2aca9329c83f32608f2fff65f4e03d3eb7f3b94d6ab472bf3c88e0360605278df242449d6dc8b8d

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\th.pak

                                                      Filesize

                                                      256KB

                                                      MD5

                                                      23f2177fe77c590ea911110c31b32e7e

                                                      SHA1

                                                      8d204ea6a50e11c439895b5bb0fd50f66dc531cb

                                                      SHA256

                                                      19b578e989505d9d2ebfe2a0fa9630a08e10910f7e9fa707daad279fc276e12b

                                                      SHA512

                                                      414d909cc1424b269be352971c002e4456ff4c1ef904c5ed2dbbda64020ef1b2f2d78048277ea92171654f7abbe2706fad74f4af1b11a1a256da642d2212677f

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\tr.pak

                                                      Filesize

                                                      256KB

                                                      MD5

                                                      8858cf52a28c2af8377a9fab1c06ab33

                                                      SHA1

                                                      4a7b7823085cf6db319d7a3d2c24e251e0ff7d6d

                                                      SHA256

                                                      a23b35fd924e4ff595278a98cf619ee56360f101a9d2c406be4492c5d3ffe7f1

                                                      SHA512

                                                      467a3b6c32c07e4225c1ad2703ed554280c70c3eff7b7dbef2c5c69446c3973c8fdbba8bf9b025c7bb56b3b194416a6d1293f0c46e7dab61cb00bfbd19fa056c

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\uk.pak

                                                      Filesize

                                                      256KB

                                                      MD5

                                                      afd74fe11f04c06fc5cbf98120a134fd

                                                      SHA1

                                                      458515c7175434c503a82fcddf03c818bd5f6c66

                                                      SHA256

                                                      18fa99a95d7c190605da5615b4819e14d7a3fbffe8273384c55a2ca7b08241a5

                                                      SHA512

                                                      e0943cddd6ef46312bca7a106223b9655df694cd7ca921b0f9630836a5fbca4153a72f3e0915d34a46f2db1c110e66cf50aae3a28e3bc24f863290266ada6a87

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\ur.pak

                                                      Filesize

                                                      448KB

                                                      MD5

                                                      578401fd0b43dba90d84a30a0352ec82

                                                      SHA1

                                                      4a50b96c4a8dd8dffb0c513e1d36039ee4950745

                                                      SHA256

                                                      9f99f8c968ac100716c680b81a7f7bf0a7b7fd40d8ea7212e207f20288fae291

                                                      SHA512

                                                      eb3ae8c5a67ac32d3ed7ea1be81518522353d13889e12f9f61dfb1cbbefa686ee69790b4bf54c6be9562f47522923ae9dffe441fed8c3c84f10a0e6e3b6cfedf

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\vi.pak

                                                      Filesize

                                                      64KB

                                                      MD5

                                                      5449285b14277dd656f61657b7bf704d

                                                      SHA1

                                                      bf1181f39fc9112a66e233b2a6d7c2e9f232445d

                                                      SHA256

                                                      9157f20e1beef481bd49ae754b9f5ffc27cf0a894a464c4f5301360282b79ba8

                                                      SHA512

                                                      1b882a44b6893c128f13f28a8ea860e3a1a438f79f5bf3e4d75219341b9307b056045c87ab341173f1424358887c3c832c93b653973fabe39405e7067f4af5ad

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\zh-CN.pak

                                                      Filesize

                                                      192KB

                                                      MD5

                                                      c5dde0e6375fa0cf79de30ca37ab6e97

                                                      SHA1

                                                      ea3420e7dc9c7de5ff20699269dd3fb18d561606

                                                      SHA256

                                                      282877d581f1c0ecb09af41736db83fd451b91bb538582a8026b3cd58da5732e

                                                      SHA512

                                                      48b533c7c0a0c5f5f15b935387be8c1d3b37d20249e1870ea259fded911b6da7d1dd1d99d9aba70e724a0973acb915b9cda17c92ccc996fadf6adc6ed8605d39

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\locales\zh-TW.pak

                                                      Filesize

                                                      256KB

                                                      MD5

                                                      21d8d9e8e11a079dd9b08808a9837585

                                                      SHA1

                                                      5e123f289ec39906f3f83e23fce06a436d115473

                                                      SHA256

                                                      45f892590f85cd183968e0e145bdd62d2520ad0e501554704d273cdd01d2f18b

                                                      SHA512

                                                      f97e4cbeb9e2ef8af161be55a256c5af811594261e2f173420fb8f9f1fec973ca5a9c77fc1c03cd340173e7a5eae7ab63ce37d1a025128a4deef97cb3110c39e

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\resources.pak

                                                      Filesize

                                                      2.2MB

                                                      MD5

                                                      d6bd92c034dbc387fd35755eea0fee0f

                                                      SHA1

                                                      a2080298a9c82fa739ab2f5d5dceaa504db8512e

                                                      SHA256

                                                      5f53ef3cf05dcce3560d6cc0b84d9ad18aeb5f64df1a4e412e9cfd65419c5b74

                                                      SHA512

                                                      9900232a1a99584caca092f899684cf2190bc65ea50427f366c27ea2c998a3d76bc914d687db6883378fee32d3b0d593b43ee5360c63d364bc1c2184bf273b26

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\resources\app.asar

                                                      Filesize

                                                      8.4MB

                                                      MD5

                                                      4d283f80ef7ee5e3857b393a1a6dfefe

                                                      SHA1

                                                      56c610d71a00376409f3e313664d44f17b4c1f0a

                                                      SHA256

                                                      246daa6e31a5d4cc9f059dc94c1b762fc29cdee67651c4ba9907f709af24824f

                                                      SHA512

                                                      5b79d5199a628eb91a47b1ce7e322832c16542a708af016a91d8cd90f3c7c3df0029014a0858359df1c9ff354ec4424e7811acbfddb6f7b862b53417f703ab9e

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\resources\elevate.exe

                                                      Filesize

                                                      105KB

                                                      MD5

                                                      792b92c8ad13c46f27c7ced0810694df

                                                      SHA1

                                                      d8d449b92de20a57df722df46435ba4553ecc802

                                                      SHA256

                                                      9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

                                                      SHA512

                                                      6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\snapshot_blob.bin

                                                      Filesize

                                                      168KB

                                                      MD5

                                                      b82ff216a0babf602940759b9a3af870

                                                      SHA1

                                                      07e8a22dcf8d7be04a6ddbcab3098e040494bb0e

                                                      SHA256

                                                      943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5

                                                      SHA512

                                                      da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\v8_context_snapshot.bin

                                                      Filesize

                                                      471KB

                                                      MD5

                                                      031ea03da08fe1247280cfe781658791

                                                      SHA1

                                                      e91db50ad16b5a5fbbaf4118672d60b347ea6161

                                                      SHA256

                                                      c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c

                                                      SHA512

                                                      b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\vk_swiftshader.dll

                                                      Filesize

                                                      2.2MB

                                                      MD5

                                                      891c7004f7c431da04fdf02a3271d458

                                                      SHA1

                                                      8a3ff694a209bde8e6d87dfe4996de4b5b6a6309

                                                      SHA256

                                                      8ead17a4ca467accd9508b6544299d91b7c3534878ac517685a910540a02d447

                                                      SHA512

                                                      38c0c932d5b39ba11f165f08d473e34d699f6fe23e5aed40d3754696eb4878028259fdb19c243936affec11129230e2f2f05f760f0c15513fa2feadb7b18c60b

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\vk_swiftshader_icd.json

                                                      Filesize

                                                      106B

                                                      MD5

                                                      8642dd3a87e2de6e991fae08458e302b

                                                      SHA1

                                                      9c06735c31cec00600fd763a92f8112d085bd12a

                                                      SHA256

                                                      32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                                                      SHA512

                                                      f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\7z-out\vulkan-1.dll

                                                      Filesize

                                                      894KB

                                                      MD5

                                                      c286e1191c5b91130b6d16e23cbd44f3

                                                      SHA1

                                                      8231664efdf30b07ff0dbc6b6f4e4d46ec574de0

                                                      SHA256

                                                      8d4b92d08f42bfe9d30362b9cf671fd6ae3166ade44f94de17dfc531393b66cd

                                                      SHA512

                                                      5cd07f2edec7bbe8684ea291a9d1dd3709f6a25c55fda3d92938eaf9c3b047ec481e3e7f3fc64973f6833422ab5880f1318a15afa666e2dd207763c7d3822bbd

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\SpiderBanner.dll

                                                      Filesize

                                                      9KB

                                                      MD5

                                                      17309e33b596ba3a5693b4d3e85cf8d7

                                                      SHA1

                                                      7d361836cf53df42021c7f2b148aec9458818c01

                                                      SHA256

                                                      996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                                                      SHA512

                                                      1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\StdUtils.dll

                                                      Filesize

                                                      100KB

                                                      MD5

                                                      c6a6e03f77c313b267498515488c5740

                                                      SHA1

                                                      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                                                      SHA256

                                                      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                                                      SHA512

                                                      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\System.dll

                                                      Filesize

                                                      12KB

                                                      MD5

                                                      0d7ad4f45dc6f5aa87f606d0331c6901

                                                      SHA1

                                                      48df0911f0484cbe2a8cdd5362140b63c41ee457

                                                      SHA256

                                                      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                                                      SHA512

                                                      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\WinShell.dll

                                                      Filesize

                                                      3KB

                                                      MD5

                                                      1cc7c37b7e0c8cd8bf04b6cc283e1e56

                                                      SHA1

                                                      0b9519763be6625bd5abce175dcc59c96d100d4c

                                                      SHA256

                                                      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                                                      SHA512

                                                      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\nsExec.dll

                                                      Filesize

                                                      6KB

                                                      MD5

                                                      ec0504e6b8a11d5aad43b296beeb84b2

                                                      SHA1

                                                      91b5ce085130c8c7194d66b2439ec9e1c206497c

                                                      SHA256

                                                      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                                                      SHA512

                                                      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

                                                    • C:\Users\Admin\AppData\Local\Temp\nsfA9AA.tmp\nsis7z.dll

                                                      Filesize

                                                      424KB

                                                      MD5

                                                      80e44ce4895304c6a3a831310fbf8cd0

                                                      SHA1

                                                      36bd49ae21c460be5753a904b4501f1abca53508

                                                      SHA256

                                                      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                                                      SHA512

                                                      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                                      Filesize

                                                      2B

                                                      MD5

                                                      f3b25701fe362ec84616a93a45ce9998

                                                      SHA1

                                                      d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                                      SHA256

                                                      b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                                      SHA512

                                                      98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                                                    • C:\Windows\system32\drivers\etc\hosts

                                                      Filesize

                                                      1KB

                                                      MD5

                                                      008fba141529811128b8cd5f52300f6e

                                                      SHA1

                                                      1a350b35d82cb4bd7a924b6840c36a678105f793

                                                      SHA256

                                                      ab0e454a786ef19a3ae1337f10f47354ffa9521ea5026e9e11174eca22d86e84

                                                      SHA512

                                                      80189560b6cf180a9c1ecafc90018b48541687f52f5d49b54ca25e040b3264da053e3d4dbb0cd38caaf496e23e516de18f500b333e3cda1fd1b25c6e9632defc

                                                    • memory/5280-1005-0x00007FFCEC3D0000-0x00007FFCEC3D1000-memory.dmp

                                                      Filesize

                                                      4KB