Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    49s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/02/2024, 08:51

General

  • Target

    Nitro-Generator-Set.up.exe

  • Size

    81.1MB

  • MD5

    db733cae17902e56615b96ccb0d78118

  • SHA1

    1fe12c5772e391ae35ceb277c073c9c08a0ec84f

  • SHA256

    20ecc8d6a8738b7dc3bdd19c19c4348cb4206b4e7368d253d5516ccf07e90093

  • SHA512

    54651152b864ea9c0b604e5f0f6358e8e3bbfce98ca3d59e172601ea62f345e85f379959c22f8ea60ff46aad0b8565fd468bf48d2d57778b0bd4bd79ec550933

  • SSDEEP

    1572864:Z8l+n6TlBqUgNAKV+KDf1IYiQSRkEv6LJAWld6CSUc97WrQrOptIoT4pW:ZNn6TlBiAE+y/9GkBNADCS52QrOptGU

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 8 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Nitro-Generator-Set.up.exe
    "C:\Users\Admin\AppData\Local\Temp\Nitro-Generator-Set.up.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4944
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Launcher.exe" | %SYSTEMROOT%\System32\find.exe "Launcher.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4776
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Launcher.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4120
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "Launcher.exe"
        3⤵
          PID:4432
    • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
      "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4316
      • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
        "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1684 --field-trial-handle=1764,i,1491993041337245123,16479519624813225786,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        2⤵
          PID:624
        • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
          "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --mojo-platform-channel-handle=2092 --field-trial-handle=1764,i,1491993041337245123,16479519624813225786,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
          2⤵
            PID:4540
          • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
            "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --app-path="C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2432 --field-trial-handle=1764,i,1491993041337245123,16479519624813225786,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
            2⤵
              PID:2304

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Programs\Launcher\D3DCompiler_47.dll

            Filesize

            768KB

            MD5

            500399d61514588bd13244246068934f

            SHA1

            368a90cef453c36d6450b0937cadc3a0fb64dcc9

            SHA256

            e30740b794342f978f94edc1abfbb0614228c5e0eb13903cb911af36c52e5caa

            SHA512

            053e7a8da18e98722b23f8281b20160b5dd5b5b9f35313ac1180a440e46656b000e8c9aea1ad318cfc8ad07d6976de4bdeec376686aff35e96874770a8a04008

          • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

            Filesize

            2.9MB

            MD5

            b33ab5ddd15253ef8f9eacdad21ce985

            SHA1

            4d41901e6b164477ac09f2a61408559b4cbd6951

            SHA256

            fa8aa6c1923786fe6f3ceb97c457cc26b2cfb93ae28c6da489118e183fbd196f

            SHA512

            01beb00a1a6016775382af0d5635b1d54917e8c8a0d8d49878f68bb99bbeedef7de53b4a7d0e30914243bad66e254e438fb3f5f1586b57dcdf0cd54882464630

          • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

            Filesize

            3.2MB

            MD5

            e4d92d3468b744af36ec79eacb1a3e94

            SHA1

            8c9908061a5e6d531e87ccaecbb132ae02c2bbc2

            SHA256

            03638100f051f030ebca877d7a9e3736161b8afc9bca0771a85025379604df50

            SHA512

            90987f19c92d5b9b215fd81e5095920bb242c8e3b63aba2144e00ac6ace107c8f53c6499051fefcde90006689c8fe442688958805f94050dd8bdf74bcf5c3306

          • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

            Filesize

            1.9MB

            MD5

            e0da5ac64011d1e4a4400b4f9bbdef26

            SHA1

            95b4982ab887dc01020c436f68669a2511e285c8

            SHA256

            697fc74ebc3fc4d6278b259899dd9d11dada33fef737692489031fae08ad6030

            SHA512

            00bfb2c5ff5d1c86ce7899d950f4f5df4d7f680dcb27c97f6e0dce5399c1c11d9a31e0cbfbb0095720fdb819c1681b9a4eef2ef64e7594af9a868b32b9dd6787

          • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

            Filesize

            1.8MB

            MD5

            d890bd521e6ccd513c20996619f174bd

            SHA1

            ac400487d7b40d3fdea7c0aaf9cf6366c11b8794

            SHA256

            6105b9692c5c016d364c8e41fc516b71e90296d688fb7ffb79ba4894e8ba0f9c

            SHA512

            484afdca6138752ad35ad383678530851cd8c9238fa3a4969fe89456f073b58f067c73a1f6196cfe80a51b1e38cd766daf5e4a2cf5c338149c5b1f2aaf748db5

          • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

            Filesize

            1.6MB

            MD5

            1c42f9453c6493e6eb96aa99104f490e

            SHA1

            0e9c36c4b243bb0628510858a341a7afc32c31b6

            SHA256

            bcc7fcbc406559fad731e46f05ecde217a50069af9e014ead6bf74260ba8e5a6

            SHA512

            3a8315df03bdf1a3b2105088579756fc4f8bc89e84effc6e1428aca71aa1eaeec87b480913ddcf50d516a999c2bf3af648b145209bed64046e8252a2f50b56fd

          • C:\Users\Admin\AppData\Local\Programs\Launcher\chrome_100_percent.pak

            Filesize

            126KB

            MD5

            d31f3439e2a3f7bee4ddd26f46a2b83f

            SHA1

            c5a26f86eb119ae364c5bf707bebed7e871fc214

            SHA256

            9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

            SHA512

            aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

          • C:\Users\Admin\AppData\Local\Programs\Launcher\chrome_100_percent.pak

            Filesize

            116KB

            MD5

            c9681fdc499ff4f298607c34107af7df

            SHA1

            9b0fdd2b50d0de46ac85385a52789e034bbe5f64

            SHA256

            fb58d5514e4917a6522599fe1dbf043a4014b46ef0159cec98f292421e332580

            SHA512

            b64d33d2fbe2933077a8160b562ed6dc225bb3bec76af258ab74fe75e9f6fe735c01c304af4b3f810ad1f1b380bf99937975e670fa6959b89ccbe77dc7ccceaf

          • C:\Users\Admin\AppData\Local\Programs\Launcher\chrome_200_percent.pak

            Filesize

            86KB

            MD5

            07a4de02bbde19cad78441026d0ebbaa

            SHA1

            c2dd8e24b5bdd34e679c62d59d5d969c196cb824

            SHA256

            5281c9a45d362962ecdb79583a990338360374d0d30da9cc3745c480f823425e

            SHA512

            0cdef3443929d2720c0d4e7843258829fc6e742940e3799e2d343e2a29fe7da2eaece7b1ddcd913cf75271c3fdf6e32dd2f6fa816973fa0fe7536842de1d7983

          • C:\Users\Admin\AppData\Local\Programs\Launcher\d3dcompiler_47.dll

            Filesize

            704KB

            MD5

            a70fbab88ae39f14be1626956ba432eb

            SHA1

            31e52c380a8b318b9b11e70d369542448fe97395

            SHA256

            10594a4da0f95a5652dd1112518f20765dc2e8300bb7ad502b6c5355228ca437

            SHA512

            705c1628e2ffed78acfa6388523fe76f84b5044fdce34ca2b3917b7acf3fa63dddf858f3289ebe80b5084bf135b29f7ca261c2f025f173127cadda49e95f3d01

          • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

            Filesize

            1.6MB

            MD5

            f0d9bd8deaec74351ac841d9603190de

            SHA1

            f4793e755d9ece6efd7a2eb60d0af203a521e73e

            SHA256

            9afd3dc609ebe43412e73d714fdd5fe4541414ce1b6fc3a8fecb03dcf21a84ff

            SHA512

            639a9b7bb78ae9c0054cf47ddf76df31e5c69c4071052654d9373d8698b9a0eaa0a1258a213f5dd8e1888281384bb39df79270e4b3b8840cd818c6e0a03560d6

          • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

            Filesize

            1.2MB

            MD5

            afc7406a07bbda920d0a9d5e5c46b728

            SHA1

            8048074b82d74d2d6d19860d56e36774dbd8b796

            SHA256

            3fcb01bb5af9bd4259f5b2c4ae78b2706893fac215a3dda31bebedfacc22b695

            SHA512

            b56f808fc1f953a3c19e7e6c4d9716ef6b2aee2fbc1abbae10c112bb88ccacc05b1390afbe20688690f26ccfb8df7175047cb60abdb7ef095972a08f89d4f9ae

          • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

            Filesize

            1.9MB

            MD5

            38a0a5283bd4f02d63d34248cdce852d

            SHA1

            db448bcca3bfa8fe9437ec4b3e91fd81a6a5a60b

            SHA256

            876f86022953ce4a9cc459915662ef463e0a896402cf30163431f84599123e21

            SHA512

            cda10dfe476e633befef3c48bb4d06a0b25f0de62999a211cc2ce1e3458820c2557e45e90339f34c1500754d65985dd3d100da8d55f78a631e630202c518063d

          • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

            Filesize

            1.8MB

            MD5

            d4aecacd7b40b0f5f0992bf7b95d9d75

            SHA1

            82ef8f82cf5725e70fa5f6f11bc6d8a31fe2df43

            SHA256

            2bc1b590c50ade9f7d47621ff1ca07bfd8438604520761e2d6616ebccc805c48

            SHA512

            8074f217d833bcf050640f4ed9ef2ee5cea0a0697d60306126a50dcc98d6fa928f9596149bf17fe74afe77a8a7decf027e9b81995bdc10d0c32a11bb57d9b641

          • C:\Users\Admin\AppData\Local\Programs\Launcher\icudtl.dat

            Filesize

            320KB

            MD5

            ca2f6499de52cf5d44d24f39b5a83698

            SHA1

            f929bc2fb31b96dfe8b4ddfbca0405ea97cf6391

            SHA256

            f5ff7d370c0f4db0f307101efadc540ab7ebfdec9b6ad59bd0b94ef5d31bcc42

            SHA512

            2a5a95ece3335640268a84639aa16134d0711a98755550e1af9dc4f1fd82d046a269331a7ed09023d2eb2eec8781777ba68b7631105de14e4b5c299b80e4c739

          • C:\Users\Admin\AppData\Local\Programs\Launcher\libEGL.dll

            Filesize

            473KB

            MD5

            637eeb39ddbeb3ff518ff1988604505f

            SHA1

            8b3d9a0d542718fb906f8fafb2583d7bb53176ef

            SHA256

            3c51a8e53ef7473e9a335673e909dc9c67bf962997e6e2a319c3bd70fd52b4ed

            SHA512

            3257f9c96665f1bc8bb39acd0d98015b7d5e32f3cf3f84e795df4d19f6bd3bcc14a4e89759cc0de83289b79cd290fd5f4b176c3e9a4cb2eca3acfba0c9e232df

          • C:\Users\Admin\AppData\Local\Programs\Launcher\libGLESv2.dll

            Filesize

            704KB

            MD5

            842f5b1738cc811d783834c61c8c29d4

            SHA1

            5640b3c23195bc328553790e3f999edc0b8c9279

            SHA256

            237da1fd9304595b6c7925d34968bbff053e4666606511dd4de0afd2878c6e17

            SHA512

            dc715c0c089bfaa4519c42b9bf2f09fe2adf3118d360ec6411c8ecd24d34588ac61b2affdd15cffb5562e8cbcc990b1ae62b13fdc4490dc2a3c3323c95cdc842

          • C:\Users\Admin\AppData\Local\Programs\Launcher\locales\en-US.pak

            Filesize

            57KB

            MD5

            6996498a9a9f8b3ec031e15881405500

            SHA1

            62da549380ad232590eceec132b0764429be5038

            SHA256

            72fddb73477b4bcfe72afb71d1f915468d9be4ef118f12836b68d6bbab511eb1

            SHA512

            c3ca0bdeef88eac098c388a2965fcc16fc845fc40d25d26ae56cb490c3448133a22fe434b32f54e06da46697f85817363cf67ebca8f3c5a962f6f9b1306c5253

          • C:\Users\Admin\AppData\Local\Programs\Launcher\resources.pak

            Filesize

            157KB

            MD5

            4267b588636ddb829aba1b5a7db6eaa4

            SHA1

            d658fe753e5c1d3b1ff673387ecf4b28ef2c18cd

            SHA256

            629b7aad8387f0cb16773459a3b77fffa79163e4a6f9da2e4bcc4c1074349fbc

            SHA512

            0e211667841fef70a1f5b71091ee76c062ad3a79c8399b6afacb0286f4c447a9da29946e90428b20307821a1dfaed304a225b0b313e636871642d3ddad846dd0

          • C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar

            Filesize

            1.3MB

            MD5

            c8cb5d9854cd864892c49e35a7c213e1

            SHA1

            eda92b378a972d38198ecd72d603126df5e02ed7

            SHA256

            02d692de110ee1034bc669417e3c57873684f9a9a3073d2e7fb7e8f879ab6e99

            SHA512

            4916401a5dd5e27217ae23f04419a47f42bbbd04e513e27c5fbc6db979071dc3dd652fd546e0f9f41858b14bbe119718f456602443cfdebd7d0c54a76c2fb324

          • C:\Users\Admin\AppData\Local\Programs\Launcher\v8_context_snapshot.bin

            Filesize

            320KB

            MD5

            be673837e79af06aa30d4231666a1c6f

            SHA1

            41ba91de265aa7c51ec4f7d095974b69731dc264

            SHA256

            7f3823415437d8a7b90c9d08c0b9c9a2ed6875a3ea550862eaac8064bad040f1

            SHA512

            8b9afc633eef0fbeac86517280da6d225068dfc4bb1a0bbf7bcd225eb59111e7ab6dd507e82bc5fd297ecbbbb32ec8c81a091dc322a5c79ee0246c54c68cde70

          • C:\Users\Admin\AppData\Local\Programs\Launcher\vk_swiftshader.dll

            Filesize

            576KB

            MD5

            92c52ab8d63d016844899c56af21c7b8

            SHA1

            dce3fc2135c1ac8f4d6923ab49f9299603f738d5

            SHA256

            1e88d49e8b36d7515b77a1b6a15d993bed72becf8eb5b49301cbd78cfd33decb

            SHA512

            5b8164b6c70fe02d3d07de15fb0ec3f3f2d63779386086789341fbb8a52e94340ba81f3d50aa97c5b2d09f8b9f0386c3ddf69abf8f14e28bd1800f09014db524

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\LICENSE.electron.txt

            Filesize

            1KB

            MD5

            4d42118d35941e0f664dddbd83f633c5

            SHA1

            2b21ec5f20fe961d15f2b58efb1368e66d202e5c

            SHA256

            5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

            SHA512

            3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\LICENSES.chromium.html

            Filesize

            378KB

            MD5

            c0cec1a83cd23f2db0cd41a8bd30e29b

            SHA1

            8a9fc8d173165f347c758a861adeceaf9ff757a4

            SHA256

            8ec594d29414c794e9a2cb6ae23b5db6b1a130c180effa66fc61dd0a7409e8bf

            SHA512

            ba0d9ee19501a9931cac77321d6565b8c49d9430d3da7501febe30679fb75482d31bcb028c412c12f16f86d9ee39944a00914a4b025ed7ce8a0d2bf6e3ec3193

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\Launcher.exe

            Filesize

            364KB

            MD5

            17eca999136f288e66dedcb02dfe0989

            SHA1

            522bbd665db235839a2187f59a0dd0d40d45025e

            SHA256

            489c306f2d652bdb82c1448ac7caf38762a662141c77dd99dd99faad993b967a

            SHA512

            effe090e48975cfb8e779af906acead857c60df21bfc50996fb33c111c3d5916d50b543c06d7af6d4b4adfe59b72e699e3c9ecdd753f59ad489d5a1d83a48a46

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\chrome_200_percent.pak

            Filesize

            175KB

            MD5

            5604b67e3f03ab2741f910a250c91137

            SHA1

            a4bb15ac7914c22575f1051a29c448f215fe027f

            SHA256

            1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c

            SHA512

            5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\d3dcompiler_47.dll

            Filesize

            1.9MB

            MD5

            bb9d9b4dd521ed5dc9c465a7e8751396

            SHA1

            3d1ad5a56f9948a74d26f23ec5645e01513d2c49

            SHA256

            92d1362f4324844986dc45bb76eade2370691019d475cec17973b4d0d8faec6c

            SHA512

            d71a8f4a12f7c3bfb6798842dae6fff13d3a7c4e1dd836c1d5d674ca62377b8236169d91a28e92fd7c02bf12b36719865de05bd7c5a9a85e75af10698eb4e429

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\ffmpeg.dll

            Filesize

            1.1MB

            MD5

            bdda7c2e952cb8b6489117bbac4c3611

            SHA1

            e563f8b251d067db19b86510f67be607e5ae40a6

            SHA256

            e3f58a7384d504f95661f15dacef545263a74f1b769b99d20dfa5ea2d92b5d07

            SHA512

            6b01586219fd036c82122148e80347312e86c9b111586414453667737c28ead560ffb12fdba76d2d9cf9317007cfe518b8c8003c63a628063c1541e0dc3473fa

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\icudtl.dat

            Filesize

            1.2MB

            MD5

            0aec72c8c797e082650e003edb551aca

            SHA1

            a63525c4bfc98893a4a86a64abcfddaf1c890e51

            SHA256

            b5c3a107d86e10890a4ac4c0b4587ccb4ce11003865d6a36dbb1f00bb88d529e

            SHA512

            d68819fc872e5fcc28fb9325d5af7b79f05bd544eba5973a1fe6aff072b8769cbd14c9db34252d38da273bbbbbe8a52e67c68dc2e486966a79e86c64b8f418c2

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\libEGL.dll

            Filesize

            357KB

            MD5

            6f896716474404d7bb10de23b81b521f

            SHA1

            59e00eff426fe381ca3d5f09acd719b5ba7d6072

            SHA256

            2b35aa468c60b00b2275565b8eb07839a587de7b966e25b638fd5b81c0eb10bd

            SHA512

            5601343cc5d29b5d1f30134658ad982baeb77b21fdf9da4bb32d447d5f993ca0e88bf0ba97f2ed8f6972ace145ee109f8c42a8ff84a143f7a21d832c99405f78

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\libGLESv2.dll

            Filesize

            347KB

            MD5

            87ab309cb7aa00a7aa695cc20ae1e128

            SHA1

            5684e5e60e6953f20bb0008fdaed60be849a2ce5

            SHA256

            b44aa6081e2566a96b4f103daadb6cf05d2a8bc4d6a2642bfc3c63ba27523c29

            SHA512

            f1be74a553de45afac5d8127d0c9c89451e56e7984e6ac2ddb9cad1996ee3018cbdcaa3b04cc812eb9d83b6766373939bd29c4d85d8cc61ebada0b22def5962a

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\af.pak

            Filesize

            340KB

            MD5

            198092a7a82efced4d59715bd3e41703

            SHA1

            ac3cdfba133330fce825816b2f9579ac240dc176

            SHA256

            d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba

            SHA512

            590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\am.pak

            Filesize

            551KB

            MD5

            a2a17bdd83467a027505bc817d1ac028

            SHA1

            cc1266a22606a1055db9653b82e90c9d1f551d44

            SHA256

            f92b0299185d963337e96df1016e1cf5ca335e22ff86568c1a6507c3fea29094

            SHA512

            193c5db0a30a3c8ef5e8c821cafb9d0b5671b7e7821748c7b432e927bd4638ecf5bfc1d99721ce89fb3df4f6f23b5e55d753430e8ef2bedd1e1633e613321028

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ar.pak

            Filesize

            602KB

            MD5

            b2a23f285858db5e3e53d6a5d5291623

            SHA1

            674adfeb57075f86f40ff4b14916c3af29695813

            SHA256

            7ab39416b60ee342ff2874aaa7b9b95b290828807b1395192cdbd29ee1be15e8

            SHA512

            92c9b31f82f62b15eed3edaf437412cb630e8deb2226ad162d7cb4c252d8cb7f0453b3121a846ffcb1547570e2eadb04cfd3877ab120496a7fefb47a6d96cba0

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\bg.pak

            Filesize

            631KB

            MD5

            9dc95c3b9b47cc9fe5a34b2aab2d4d01

            SHA1

            bc19494d160e4af6abd0a10c5adbc8114d50a714

            SHA256

            fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e

            SHA512

            a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\bn.pak

            Filesize

            722KB

            MD5

            9999fbaa404239dab099039208e434fc

            SHA1

            52589a5dfb7104a9ee0d7154765b5b746605c1c1

            SHA256

            07c9a090cadc90bdac372611e6920df06cf5a7b502065b4b785201578b2e51b3

            SHA512

            8da50a19dcea457c0f7a7cd2992e929470aed995b098075b4fc5e2646ccf1a4556e67be65af14bf7caad2229eaf845455bf9979a9f274d9809bda1a3ae65b84d

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ca.pak

            Filesize

            384KB

            MD5

            0312c87b6436e733a037bfb3084f7550

            SHA1

            e3f30b8f3bfc8ddbf4b8f85f845733ed5ac8c632

            SHA256

            b6c895fbca90c36ae2cfefefda989922162a2cc259603fbca066f0cfbf43c4ff

            SHA512

            24b7780211b9dcaf7cbe3915851c7b873562e0cff022c29ca1b4e159b9da152b517305f81dd33712a0224fc3b77e594405e432fe5eecf29b7a4f83f441d6905e

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\cs.pak

            Filesize

            393KB

            MD5

            ff919631102a3a9ec635b3080b63e305

            SHA1

            e43b117ad5b2d5b373321ab0ae63dd4bc1352a89

            SHA256

            1b8c3add009028eb567b0094759daff29b7861e11d5a9d864071012200e9735a

            SHA512

            21833774413cc71ba9c0c592504ae6288e3c8ac4e5d1d62768f4b3eca09e90009abec5e8fadcb4e7d63b99a522ae48fd608aad432eb4165ec7021c8888ad7df1

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\da.pak

            Filesize

            17KB

            MD5

            715f703a9258dd83fdf4b257c16e560e

            SHA1

            2e076f89f09c3a4006a8943232f25068faf38e26

            SHA256

            498060cd5ba42c6e03ae3143392b6c98fe39bd11a66be0321049e26052164602

            SHA512

            242f99aa8dba7e8748f815115b2cb826740793dcf5d2ae3a0b2e0e204259776a02cd424a4ab31a5ace02e3d38e5e68144dab6bb7b762f2aacd8e63a986d3091f

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\de.pak

            Filesize

            381KB

            MD5

            8569900305a5661573f7766b93909f16

            SHA1

            3529376f54e32c17447b065d08c77314c4db2ec8

            SHA256

            068ba3e34e7f253fad7dc526b1078aaa969bea044d48171925534598aa8becb3

            SHA512

            d544febbe20a9bc5cf31f79f7ef74c1a742cccc99136e9828187c9a643bd0317c7cc48706346ee1a3c9eda8984be9c8606e9dfa7a6ce2cff49db2d785c2aa1c3

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\el.pak

            Filesize

            691KB

            MD5

            8025eb8756d4bf3126d83c9078935520

            SHA1

            78895218a90680fe223af0b003c195da84902e1f

            SHA256

            e42aeaea80dabe82657983a462e4cd3ec74f71d4f08a689f5825f55fc02f3141

            SHA512

            f99f47e54583b60857a31648b985216713725496d8653ca04eb1d6634f2b7f7a1f9f70b8a7938529bfc6c8665360da5e6bfb6b68c314c011fef4a9817010c42b

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\en-GB.pak

            Filesize

            310KB

            MD5

            502260e74b65b96cd93f5e7bf0391157

            SHA1

            b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7

            SHA256

            463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b

            SHA512

            0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\en-US.pak

            Filesize

            313KB

            MD5

            3f6f4b2c2f24e3893882cdaa1ccfe1a3

            SHA1

            b021cca30e774e0b91ee21b5beb030fea646098f

            SHA256

            bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f

            SHA512

            bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\es-419.pak

            Filesize

            380KB

            MD5

            02452424bb0cf6ab832808d04883f147

            SHA1

            a8e97ee52f3d97c1a4c678f7578808416e9fac65

            SHA256

            1b23cda69927c77764bda121ee398ffefcf5edcb5866432aa3526c378553c9b5

            SHA512

            9e750b26ab40b5f1c075acbdeb15a57cda9e6bd8049488cfaf368b5cbe8cd9b6e5dc96130e4137370c90bb0777b97515ea2be0787e255cff750fb7e188e22ab2

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\es.pak

            Filesize

            380KB

            MD5

            4ca91891b2d4670d02931f0ca84e4744

            SHA1

            85f6559b09c80af2575e3b7626842c10081e188e

            SHA256

            85fff1ca6bd2527073de03fa77dd013db2557a57cce1fd370caa2b185abb9336

            SHA512

            83eae7ab2f03598c657786bff6171803b6bbe2128d1a5b8a01d9a13337113632279712dd8ffcd3b707fa6052a936d92a57cb67d848c77ee291e75700e29f2bf8

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\et.pak

            Filesize

            342KB

            MD5

            74eda453b23793ced4480ea7a595fe44

            SHA1

            76964af9c8024bd84fa1d89f60784e7ee6569350

            SHA256

            e2d38131a5ef4b0e8438f45e8c74c56bcf666760d4682120c8071c9220230555

            SHA512

            e9928cfac01f10b040c74e63242ffa1f7f616d8598f49f0aa7ddad063e18666cf5649cc65d00b3526526af8a7b46ee3b3655da22adf46aa44c0c6a1c2ac4dc7b

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\fa.pak

            Filesize

            557KB

            MD5

            99de8cfda36ab9ab3342889fb6da393d

            SHA1

            6bdd3d627d4b6702f43725039089562af58898c0

            SHA256

            b93145f30e25122015373a248d6ea22a539c7d0d58c8aa853ac35cc80dc06bfe

            SHA512

            aa20793f9ece5823cb9e74a4a3ff97d7a1860a593f427fb5eacb0390569a48122589610fe5a02577577f3a30f981c5e3da97cf73bdfe158a6bb845586c5b19d6

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\fi.pak

            Filesize

            351KB

            MD5

            fa7dbd2ee35587ff31fde3c7107e4603

            SHA1

            baaa093dcb7eccf77ce599c8ff09df203e434b60

            SHA256

            5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c

            SHA512

            587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\fil.pak

            Filesize

            394KB

            MD5

            0b7d25d70a2d94a032b7ff7faea45a75

            SHA1

            d9d473b2ea936ffea4f751d8716cb03407a95785

            SHA256

            a737a14f84b10b2e3c9ad4d147b430fd30c5ac0e125d5aaaf1ea19b0507de5af

            SHA512

            e4dbef6fae4cb56c3cd7bd5dbb239b5136eb2534a17cacbf628f5e5d77bfca924580ad4e4d0ec580ffaf94d6e1fafad58e9c5f472c3a3ff782702ea5eae2aea3

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\fr.pak

            Filesize

            410KB

            MD5

            a7c88eda9e12b6dbd432c544767acbe2

            SHA1

            81f1abe537870f7888431e820b636b17b5213835

            SHA256

            a4d0e5a39241a6326143afa4c8ec881d6edb0382c66425411881946f98e053e0

            SHA512

            88ca203256aaaaa26afd4a0aacb6fba2eb41618d09df6fc6aaa80ab8d699b30e73c373fa75098b1ec4912c042341dd1c79ee3d04f98b4bd59a44481d350a7988

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\gu.pak

            Filesize

            787KB

            MD5

            3268b8d9b4d4db87ec627b09f1c55a6d

            SHA1

            683ba367e40abb2fefd4548805e845fc1b452855

            SHA256

            dee5ef4f4b36fc5fe0f3b5e10c7cc3a7edc14bf948317b31a3287a95bfe0afa4

            SHA512

            59cff62843d35f790092f42b611e9bcd80d948c0ef27a770b2d7af859997f40c320d67df3c5a9420d28d5c8f1678df4677e01cb99b729664d198b3b95b5fbd20

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\he.pak

            Filesize

            488KB

            MD5

            6376d0a5f4273b76b1f4aabade194e0c

            SHA1

            337ba39f09454c0779ab64872b9fa11f866d6adc

            SHA256

            875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45

            SHA512

            00347f16b5abbaf47fb08663d5efde26ab7de0c7a2fa42e6b5f03c41a83cecbd8e78cc3aef41d5f08658cf346e0ade732774485e8a10008a43fa41ffaf73b2be

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\hi.pak

            Filesize

            821KB

            MD5

            9b5d94450fb03c34759653deb0551441

            SHA1

            b9134fbc75304ca73b156e77425505ed6dc6d629

            SHA256

            5e8f2593dbea5a57c3a974558a3fc91b6087329a1e7b11622a6eac120a973718

            SHA512

            caed9535d487833bdde51e82b76d3b8d2e6ea18ec0b4b7a98552be9266ff0728bb1133d8f9cbd169345aa08b0073f04d649baa71bb487483951cfa1a92080d63

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\hr.pak

            Filesize

            381KB

            MD5

            7dbd4a9de6e30de028c97a7d39f8038a

            SHA1

            18d68f37b3c5eea3a2fe42c4ab1694a439a189c0

            SHA256

            e1c793e08e062043cc65271718d9b21d5742729dfa2e076ab012e8a008d06c04

            SHA512

            a18c43257d26380ec14ae0259cf192257fee0c6895b82240c3b41c5d6e8bd6f8023cb39dc2da0701bbcf05e8eb2cd13c84af971c28c94099a6d0ea02ce745ddd

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\hu.pak

            Filesize

            411KB

            MD5

            d6904e7d1b6750d43a6478877c42618d

            SHA1

            919f090a6a3aa1112916f5bb0d5b73a62be43c1e

            SHA256

            3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f

            SHA512

            d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\id.pak

            Filesize

            336KB

            MD5

            881ff04e220aa8c6ed9d0d76bfa07cb8

            SHA1

            cacf3620d1bf85648329902216e6cdc6f588a5ba

            SHA256

            9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22

            SHA512

            9134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\it.pak

            Filesize

            373KB

            MD5

            6629c344b6e5ee8fb476522627b34221

            SHA1

            28335e3c96a68a560c68756860394a0a86c21870

            SHA256

            e76c3f15529fa7cc088dc32903c6885f4cfa170a1e0144710b05965f3210c31c

            SHA512

            78ca2ebf40d6cc3eb7035cca78364be63b8eb69e27caf2cae57e3489b39a9e443409e800fd95e1b646d37655c37ee8a9ae1ab344b506cf65f8603a6a3ad892ed

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ja.pak

            Filesize

            456KB

            MD5

            c294012268f9e611fdc2904be57e45d8

            SHA1

            9ba4bd190ced7ffe053fa74071fc5836bdebea53

            SHA256

            21cd7ae581f6d0c19e90ac7df03d7dd5305b882776a1f091573f824bd28514da

            SHA512

            d16653f30617e52a040c5e033896a71055fee9992e54ffca5029601bb62a41b9685a68655b9c8bf7a7ba54a914836a0f7a49cccacae0eda180a6b68c0471a268

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\kn.pak

            Filesize

            910KB

            MD5

            01e8dc084d07743fbda50d54d86ee3bd

            SHA1

            e0709217e1a6785706b7d14037b1478ee2a3a59d

            SHA256

            ae4e003458f1a8bd3652e61241e11ff91bd887f6b95c1fe2700e76a117ba2119

            SHA512

            7d8db84f975d778bde21253f43d174921c2c71111644a953ad8671754e5d656f72bcabf62f4b960cbf4ca0ccc5f67d1558ed250b568c1f2308a31970e380654d

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ko.pak

            Filesize

            383KB

            MD5

            ce19dea7b7d0b9472f99427de2b307f0

            SHA1

            9c84dbff9927c052dcb9818ed73bb272abf9054a

            SHA256

            586f34de2c7bb0e92fc376f3ad962bf9bae1a768398459d39f8ed06b59d8ccbb

            SHA512

            9a6c84ef9bb03be9ce96948bea94ec0ba83ecbd06ed648acab9d6fd27c1ab85f011a5670591da6256781dc147fc234d627cfc4bf5eb29bc2c8bfc84aaf89085f

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\lt.pak

            Filesize

            412KB

            MD5

            7b6bf901352885c0699db71239b7cf24

            SHA1

            9e3ec5f327c0d0e54a449332061e60a8c79243cf

            SHA256

            9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350

            SHA512

            79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\lv.pak

            Filesize

            410KB

            MD5

            cccbd7f8a0c34c7094ce4d7b8e7e0588

            SHA1

            1a08401e2dc8c59200c4ecaa1886b43b6faa6979

            SHA256

            7467360f9addd4d8694e1508a6ab3a3e00dce57e5897d5376ad27d8e651b23d4

            SHA512

            2cc43437f1cd8d5fda0e95e7dd117c9b82e90cfed58ad8f492f46b4634aa01cd1b0ebe39377231a0828fc1ccd39641e4efc2f1210d629f9aba12ea9048accd95

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ml.pak

            Filesize

            948KB

            MD5

            00292b0801e0dd0a74091bf53f1574c9

            SHA1

            63a002e7a8796bc4b4459a19c95ce426fbd1ec7f

            SHA256

            61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6

            SHA512

            e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\mr.pak

            Filesize

            772KB

            MD5

            b9a2aa88c69c42ebcc41fef00c980a38

            SHA1

            9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8

            SHA256

            481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09

            SHA512

            5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ms.pak

            Filesize

            351KB

            MD5

            6de7b004a86967a3433545b3b38bf89d

            SHA1

            113bd5b28dda669b27c798e0b46fd680f3a04956

            SHA256

            ead5a37549b98d55839ffcf0dc8f8201d37d71968ec9138fdea79d7c9b79549d

            SHA512

            239c4acd2c0b6c08fb92fd95b89a302ddefc01ea843950a0247b7310c2b024383ae98286c2d4b83b99833452c41b386e047b2ef33610ef122fcf2f439ef43726

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\nb.pak

            Filesize

            344KB

            MD5

            bbae0915edec081b04bb903b689bc40b

            SHA1

            6a0fc635ce1c431e512b8b3b8448176aa4025556

            SHA256

            d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8

            SHA512

            573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\nl.pak

            Filesize

            356KB

            MD5

            9fdf47fef5b549497005ef8efd2a2c59

            SHA1

            3449de72bfc2be537f4b007c81e5bc5de6ff3d0a

            SHA256

            65a9c1efcdd451504e2e9b44b0c8fafd2c3c1445d760fd6c435305e2f8534f59

            SHA512

            3e77178dcd9e8894847039a997c87d5d04eef8a1ace1846132fde229285da08ffc8d3ba697226130bd07ab122a868cc53693981a21f8211c839ccdaba77207cd

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\pl.pak

            Filesize

            396KB

            MD5

            c9da926441d438b952149650c86a033e

            SHA1

            74ee60342bda33048570dd3c03f897668cdfc971

            SHA256

            ce96fd415ffcda01345146faac716e2d45e2c556e5c6c38e9a1ea5ac19dafe84

            SHA512

            3e718e8df695cbd80146c3e911de9b235ccc06f574739e5720d47952f69eab089b56451cdc321174da9b239c0a71a720baf9d68b46046efa0edcb2a3f1804ea0

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\pt-BR.pak

            Filesize

            374KB

            MD5

            c68170e4948cf3ae6910364c1e68ce90

            SHA1

            420f3a392db28b6fd6be44fd702b455518b67bbd

            SHA256

            b26499a256d66feed42b372ea2eaceb75c279694b40a7b5d0f8c1a5c24cf381c

            SHA512

            29482ced2091873a8c6242a608ed641b3a4d72fb93ccc2eb58d2769c446195f717b438d5633522f457234f3d209029936e9ea4ccd65d45ba8ae0c2df71043797

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\pt-PT.pak

            Filesize

            376KB

            MD5

            9b04c89c2d17c7c00a6a4342f0771fec

            SHA1

            a0886040fd5f870023cc3038f5722f4ba6d7c8b6

            SHA256

            abb012215610178b7f8203f61f41103546d3949ac3df4acb3a622b01663f39cc

            SHA512

            7c4cf5e7bfad4709db49779c1e3e762b8d0bac6cd736c511711ddca7682e08bc6b3274c9872d88db78bc36b0456b29680d3c4e518d4a401830cfb37b48567bb8

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ro.pak

            Filesize

            387KB

            MD5

            9b9c22a12ddce43a4a3c0c047a16a5c3

            SHA1

            901e072d644a79e0b18be2f4a81e6842b070485d

            SHA256

            3e89d43b86b2582fd7db236659af47ff459a44c5b5ebcbb0bcc9eda244c8e501

            SHA512

            196a5bb1b0b5093d4a18279037ef7993525c36c136d4560b7e902c815687f7992ecd2b64d96422911a3468cf3f1478b21df6465d3b31486466cbb5573ff0e7e0

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ru.pak

            Filesize

            634KB

            MD5

            aa75c21bfe54bb70e7abd9fce1347a8f

            SHA1

            3492307cec15b367274c948beb76598f72347846

            SHA256

            bd981aa65536b544228ed1d60a552ff4c7800b46f815177b33b3e628b97d77e4

            SHA512

            0e77f1c7e4b5410e9eaed875f5dae6485d8de5b650ec44133b1634645cc3055fa7bea316e843b491f29d9c137b20623b120e014b1c74bbf4e8d1f08dbeaf5bb2

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\sk.pak

            Filesize

            399KB

            MD5

            72946b939f7bcaa98ab314cfba634e0b

            SHA1

            71c79a61712c8c5d3dac07a65d4c727e3b80ab17

            SHA256

            75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7

            SHA512

            2a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\sl.pak

            Filesize

            385KB

            MD5

            6a2efcb886dd33a5d05a112c141c520d

            SHA1

            ba89d9ef7ce1862d1e9933e910529ec5a3e2a933

            SHA256

            4fa004d80c7e89e38cdfed3a652003787fa810256d294c16aab0bca815eb7c02

            SHA512

            0475df28a602ec90c4331da4e7d742eded2cb3264b41924628bfc45e2662f2ceb7b9518ac88a231da1c3caf18d176ff3a4931c2b1751f3b74bce3af73d0088cc

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\sr.pak

            Filesize

            64KB

            MD5

            0f025fc3d49ee9fcf17dce5916da0b6f

            SHA1

            f84002429963523c7c43ee4ed2628b15f793e255

            SHA256

            5017788d3f4affadb72a585902512d23c2b41ad72ba95e4d121753e1f3fbcc06

            SHA512

            73c757fc0ebac3bce39a7e10df1999ff7ae7cbe13012461cf8822f235c844abcc05d9db005f6eacb8c513c4bb245a86e28a7d97e3b025d638e144a55be88e820

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\sv.pak

            Filesize

            347KB

            MD5

            14ecf7684d7987950a9655258d3a72be

            SHA1

            b1506b3b4be332081dde72bf54a197b1ee0bde66

            SHA256

            690a83bbefe1e97de5d2c1c0791707e8ddc3414a12cf30b79329fa5d21840d6e

            SHA512

            fd9d36c63b00bb1caf6a25f2c797f3a844395f16016a9010819462d647e8e759fd8887e5eae3ef300871f4abef05f4ceca9edb5b30ffdd56efeede9c75f56e30

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\sw.pak

            Filesize

            365KB

            MD5

            9632dd7d883fa4deb3963ea663e0ffd4

            SHA1

            0db135be4b3a7c54c39e9df5034d5576b68ea92e

            SHA256

            690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e

            SHA512

            3aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ta.pak

            Filesize

            398KB

            MD5

            932200abb4697cc2c9220c762f693f38

            SHA1

            58a97056b6729b4b2eac39f012b060d1df462810

            SHA256

            2cc82baab5481466ff101419d086074e9fb213cc04656d15cc3d3788641b4992

            SHA512

            c1750632f693c517ba1a17b8d8ca94cfde8a2608944949113a3fedf892d066f540cca25a4a5fc51f9f1dc51be191cfa61a9388e24ffe9497f85a55fa722b52fb

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\te.pak

            Filesize

            869KB

            MD5

            28f500e12a7b91d91d8f99395fce8332

            SHA1

            885fd6c78259ae38f7dba3887f7fee783c1766bc

            SHA256

            06dd7ae122d6f1f394aeb85089a9c837ec05dad627b0bcc92863ab2830e971c9

            SHA512

            6f0fe4a527e9c53a41d20f95cafda7a2488bab310eecf68c98271a2db6f3efe5d2180e158b5018a9c56a0580b0735146f0ae07d884f564de1e8780956a10d190

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\th.pak

            Filesize

            731KB

            MD5

            d34a2993eaf0ee6bf65c3729baee426d

            SHA1

            d796911e57c89b11a603c645dd0e32aad7819d75

            SHA256

            7870b92c64f7776c469b4d19be8881ce30a5263cc8287c3d7de573aed43c7dba

            SHA512

            eb2f4b3cb7741c996acbd121d0c69eda6cfac6bdbd7b8036dc6394ed7e49c9a45641c7983431b5f8c5db685fc7ce958e7c9f5e79837b381caeecf009f79ca4c2

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\tr.pak

            Filesize

            371KB

            MD5

            0662e2b67524444e843d0104adab0b7e

            SHA1

            ec39112f57e28010295398c24c6a17e60a88fd47

            SHA256

            e8f86dc87dbf11935863efb3a5af8213a97123889019e98a7ef313b488088790

            SHA512

            6529083d04e777be3cdaa14f06bb6b3a3d26006ed9d067f7a1bdfcf669856cc6340bf0caf90bbceb75666062fac1bc02ca2d2cff94c6ca5627ccaece6f973a65

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\uk.pak

            Filesize

            634KB

            MD5

            0d9b7f3ce815f7bcfd63ee3492350d52

            SHA1

            6138b5dc296cf406b2314b8b797f9f96de2b40fb

            SHA256

            b86358579a9cec015c996c6ae862ddcb8cb558f30eedd0d0b9ef3cb18c3cc130

            SHA512

            17d874849e5eb17bff2ac98c8191f9f38a07a66eccc502122c0ed2bdd6af94eb17db1b0a2477a75c1fd4f3ed00c76b1818eac5bc4093d92eca0d0a5323718cc0

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\ur.pak

            Filesize

            552KB

            MD5

            6733dba4f3f0afeffc40bd87300b9d6e

            SHA1

            610aab026d25f2cec6c636fbaee922c099d26ef2

            SHA256

            d0c8ae8f4f60f04d4eee8cc639ee3b52ad073f5c9ee6fb84c774eb855fd51e9c

            SHA512

            40c1cb7be3709bb6ef01a4e66bfd85e20641020a800292a2a14f4cf188242aa0b8d42cabd0f323acd3d2f257243c7dc04b346a39475343c761af7a1833c3366a

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\vi.pak

            Filesize

            439KB

            MD5

            5b8fc875f0b57ac7793e19e0ac6f4899

            SHA1

            b8ec064365fc29a70bc3a8d3df0ef222ed244fa8

            SHA256

            ff3cdd834569cf9f957a444ab8a51ebe673bd26d7c907a907aedfeed248d4890

            SHA512

            f3a9ad912823aaae0d089cf53151cfba0b6fbc2cebf826b1b7c70fec03bf3f967e440558fef94c990c87349b82c36379bf645b828ab6b69eb9f396165dd6178d

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\zh-CN.pak

            Filesize

            319KB

            MD5

            37b051269289e0eaafd411d374663135

            SHA1

            fa94bc7fe89475f1d5e1c9a2d88161cc992a638b

            SHA256

            4ff334da089d2ffb9c6173de7c918b74c9326ed7bd76317b2696d57861871488

            SHA512

            357350ec552765df460cd66ae59ebcc771df72431baa380247750627ee974f1859bfa423461a2197d4e608063d021faa7fc94bd30c6fe2b1a0cf9b9f7e64ea73

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\locales\zh-TW.pak

            Filesize

            316KB

            MD5

            032c4f24764d531d0de876f1e9d51dc9

            SHA1

            6662a5e3466c1ca415e219634cd67863ff830b32

            SHA256

            a0a715a3ef1ead036f0f03d02a8252fbdbd52ce6f8cc5b9298fc1c4494d4e508

            SHA512

            3cf212a638cfe9d08e625f7f70d453263e44721be9550c2aebfb67462666a8d67b87cd2ed613cc12c7d1fc7d1c1368c7d198a6669fa3a10c2c2bf61966c46aff

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\resources.pak

            Filesize

            1.8MB

            MD5

            6d0b23f639b699be6a6b5c9ce3341fc7

            SHA1

            2697b1bde45891008def3e9a5e385a653d603b9e

            SHA256

            00dc8c0c8c3e1700add349ee0fc1ab699f49f6cb7b17d612f1e7698b2cc08652

            SHA512

            dd4ec4becad899b4a22b02e50d985a97f6fb2fafa1fd1ca51f428de4bdcde2b47806bc8e88cd95620262c6348c96b21492266cc7b06e2bd6e3ac6bbc0aefdbec

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\resources\app.asar

            Filesize

            1.3MB

            MD5

            d71fdfefcf160ca31aecb97745c43c20

            SHA1

            7aebee1e18b413525e8c8b2674078f14edf92919

            SHA256

            e0792b548b10d74a0166985939c813c65e5e7b45e2e22933f76b00e03f630de9

            SHA512

            c1cecddc1625b6e013103c16dcffa33cbbb9c2ebad26013d4c1a4871fb7f15a1425624b3d45e751699144375f25ab8bec0b4c39818a7582c3d8af8a57d1ec699

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\resources\elevate.exe

            Filesize

            105KB

            MD5

            792b92c8ad13c46f27c7ced0810694df

            SHA1

            d8d449b92de20a57df722df46435ba4553ecc802

            SHA256

            9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

            SHA512

            6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\snapshot_blob.bin

            Filesize

            168KB

            MD5

            b82ff216a0babf602940759b9a3af870

            SHA1

            07e8a22dcf8d7be04a6ddbcab3098e040494bb0e

            SHA256

            943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5

            SHA512

            da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\v8_context_snapshot.bin

            Filesize

            471KB

            MD5

            031ea03da08fe1247280cfe781658791

            SHA1

            e91db50ad16b5a5fbbaf4118672d60b347ea6161

            SHA256

            c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c

            SHA512

            b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\vk_swiftshader.dll

            Filesize

            928KB

            MD5

            8382ae2dcf2fb4cce452ef56515e5341

            SHA1

            d1840e551bbb27926713c40456895512d9dbb6cc

            SHA256

            553c2a0608bef7fc0ed3a77c778c9e34b487b97ef2cf68f3f8d105b84277efee

            SHA512

            f932159b7ff94167d1e0388fd742766ad0aeb741c91c32452d5305a67ba5d2b3a686ebe8c94461e3d3ff50d177f96a6a92d4be34012146e08fa0e6839eb9f483

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\vk_swiftshader_icd.json

            Filesize

            106B

            MD5

            8642dd3a87e2de6e991fae08458e302b

            SHA1

            9c06735c31cec00600fd763a92f8112d085bd12a

            SHA256

            32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

            SHA512

            f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\7z-out\vulkan-1.dll

            Filesize

            894KB

            MD5

            c286e1191c5b91130b6d16e23cbd44f3

            SHA1

            8231664efdf30b07ff0dbc6b6f4e4d46ec574de0

            SHA256

            8d4b92d08f42bfe9d30362b9cf671fd6ae3166ade44f94de17dfc531393b66cd

            SHA512

            5cd07f2edec7bbe8684ea291a9d1dd3709f6a25c55fda3d92938eaf9c3b047ec481e3e7f3fc64973f6833422ab5880f1318a15afa666e2dd207763c7d3822bbd

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\SpiderBanner.dll

            Filesize

            9KB

            MD5

            17309e33b596ba3a5693b4d3e85cf8d7

            SHA1

            7d361836cf53df42021c7f2b148aec9458818c01

            SHA256

            996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

            SHA512

            1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\StdUtils.dll

            Filesize

            100KB

            MD5

            c6a6e03f77c313b267498515488c5740

            SHA1

            3d49fc2784b9450962ed6b82b46e9c3c957d7c15

            SHA256

            b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

            SHA512

            9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\System.dll

            Filesize

            12KB

            MD5

            0d7ad4f45dc6f5aa87f606d0331c6901

            SHA1

            48df0911f0484cbe2a8cdd5362140b63c41ee457

            SHA256

            3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

            SHA512

            c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\WinShell.dll

            Filesize

            3KB

            MD5

            1cc7c37b7e0c8cd8bf04b6cc283e1e56

            SHA1

            0b9519763be6625bd5abce175dcc59c96d100d4c

            SHA256

            9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

            SHA512

            7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\nsExec.dll

            Filesize

            6KB

            MD5

            ec0504e6b8a11d5aad43b296beeb84b2

            SHA1

            91b5ce085130c8c7194d66b2439ec9e1c206497c

            SHA256

            5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

            SHA512

            3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

          • C:\Users\Admin\AppData\Local\Temp\nsc3072.tmp\nsis7z.dll

            Filesize

            424KB

            MD5

            80e44ce4895304c6a3a831310fbf8cd0

            SHA1

            36bd49ae21c460be5753a904b4501f1abca53508

            SHA256

            b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

            SHA512

            c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

          • C:\Users\Admin\AppData\Roaming\Launcher\Network\Network Persistent State

            Filesize

            586B

            MD5

            6404c6d092f616d3518cd0ae79d35e6f

            SHA1

            30fe7596ae4ff2abd991cf4764690720eb84ac29

            SHA256

            f6de90ce84765ae53fcb8923a9cd3a091dedf4f03a30e259cf98e37b9c97fe63

            SHA512

            50f03df11c6801828977984ba66304b7031eb96de065a75228b5c5a13375bd669a99dae994aca07fb4f078cb0d8f4a3ce07b3f638cfda29727b6b61561d260bb

          • C:\Users\Admin\AppData\Roaming\Launcher\Network\Network Persistent State~RFe5a13c8.TMP

            Filesize

            59B

            MD5

            2800881c775077e1c4b6e06bf4676de4

            SHA1

            2873631068c8b3b9495638c865915be822442c8b

            SHA256

            226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

            SHA512

            e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

          • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

            Filesize

            2B

            MD5

            f3b25701fe362ec84616a93a45ce9998

            SHA1

            d62636d8caec13f04e28442a0a6fa1afeb024bbb

            SHA256

            b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

            SHA512

            98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

          • memory/624-731-0x00007FFBF89F0000-0x00007FFBF89F1000-memory.dmp

            Filesize

            4KB