Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    75s
  • max time network
    64s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/02/2024, 11:15

General

  • Target

    Shaderium 1.4.0.exe

  • Size

    66.8MB

  • MD5

    d02fb2f5aed16ab1f64dc6817794ba08

  • SHA1

    f9d391fc41a20f22f70a36bc7663a8ffc3c31cdc

  • SHA256

    541e799e81ce35d480d2d1cf1fdb11854bcd0bef29156b831c72e0a325d6dd0b

  • SHA512

    93a74432c8f363671d1cb42b0692168c161d20d2ab904ca6a6c5d7d2738f058caa3dff7e6367759897b115c764f523e557e48251f9f1acb4096596ffc76ed1fb

  • SSDEEP

    1572864:brziNx5qJRvEC8AA7qIsklM6uECzJRFnc35lkFcF7vz1Pz7:ex5qJRvtA7vM6HwJRFn8mqz7

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: AddClipboardFormatListener 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 51 IoCs
  • Suspicious use of SendNotifyMessage 47 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Shaderium 1.4.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Shaderium 1.4.0.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Users\Admin\AppData\Local\Temp\2ch1J1q1yf3pFdsePZl8xdeR3TM\Shaderium.exe
      C:\Users\Admin\AppData\Local\Temp\2ch1J1q1yf3pFdsePZl8xdeR3TM\Shaderium.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1812
  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\FormatComplete.mpe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3028
  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\UndoWait.MTS"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2000
  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\NewWrite.mpeg2"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1780
  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\AddSkip.3gpp"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\2ch1J1q1yf3pFdsePZl8xdeR3TM\Shaderium.exe

    Filesize

    312KB

    MD5

    1377d817724eb490761e3685334e65a3

    SHA1

    110e9cb600168297018357a2a071c8691e7b44b3

    SHA256

    2ca2d387fb8f7b224c300db73f030982c9f23cd31f3b529cef13f69f93b108a6

    SHA512

    e01e8ea522ab0366385478aa9da1508b4b88ff07f14aed10de890486d77f7aed5bca17c30dbea4f2e03558226deea1c1e9f80fb47a6c91c819fd415f81ad57e8

  • C:\Users\Admin\AppData\Local\Temp\2ch1J1q1yf3pFdsePZl8xdeR3TM\ffmpeg.dll

    Filesize

    337KB

    MD5

    9bd347b2ebc7f315316a64445f697316

    SHA1

    f75e0189f893956299a9fd27e02560311b40e274

    SHA256

    c9dfda0286e056cfe862fa20061a59eb32d1bcd1c6dee01987c141c96d772099

    SHA512

    79a86d79b681e365a3a7aa74b980c298ccd6a8beba279e61bccdec721d053880917eaa7c735cd4b98fa49a90aa2e7b87b59a006f2ba155b2834ada35316b9fb8

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\LICENSE.electron.txt

    Filesize

    1KB

    MD5

    4d42118d35941e0f664dddbd83f633c5

    SHA1

    2b21ec5f20fe961d15f2b58efb1368e66d202e5c

    SHA256

    5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

    SHA512

    3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\LICENSES.chromium.html

    Filesize

    2.7MB

    MD5

    9493dcd8629ca08e9f81ded3f1a90cbd

    SHA1

    794bd191e9198d2fcc7c0c51a20965b5dd5f4912

    SHA256

    fe9e3bff618c7c875a7b51eede49feee19d11b8804cf31979ef97cce2bdf601c

    SHA512

    cbd9a28600db89712b6f546f27b37a881e3fea311269e027e69fa697335406be99a671ce811a5055a0963119f19cf257d2dfbb8d9db35fe25ea5b979ce014f9c

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\Shaderium.exe

    Filesize

    1.2MB

    MD5

    96d153db460751dc6b5d2920176779b7

    SHA1

    fc748a5d651e6c4cdbeb156151b700253a854504

    SHA256

    581d8c6df2eea25a698a3cceb02f71fe9bf439468281e1f0b4bd32b6d9903971

    SHA512

    c0c75a0e02ef76ef89fd702da53dc875f92d8eeebe2f882de5448c75454228a7288173099b7ec5e6d482c66cb5d87df3af2a59d8fd18e59f6f69cd8ff9b500f7

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\chrome_100_percent.pak

    Filesize

    126KB

    MD5

    8626e1d68e87f86c5b4dabdf66591913

    SHA1

    4cd7b0ac0d3f72587708064a7b0a3beca3f7b81c

    SHA256

    2caa1da9b6a6e87bdb673977fee5dd771591a1b6ed5d3c5f14b024130a5d1a59

    SHA512

    03bcd8562482009060f249d6a0dd7382fc94d669a2094dec08e8d119be51bef2c3b7b484bb5b7f805ae98e372dab9383a2c11a63ab0f5644146556b1bb9a4c99

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\chrome_200_percent.pak

    Filesize

    175KB

    MD5

    48515d600258d60019c6b9c6421f79f6

    SHA1

    0ef0b44641d38327a360aa6954b3b6e5aab2af16

    SHA256

    07bee34e189fe9a8789aed78ea59ad41414b6e611e7d74da62f8e6ca36af01ce

    SHA512

    b7266bc8abc55bd389f594dac0c0641ecf07703f35d769b87e731b5fdf4353316d44f3782a4329b3f0e260dead6b114426ddb1b0fb8cd4a51e0b90635f1191d9

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\d3dcompiler_47.dll

    Filesize

    3.6MB

    MD5

    f75df0e30f00bf57065059f47ae5d29a

    SHA1

    6a7c74eb18606b07a39069c57d94e53f09215aaf

    SHA256

    832049e287ce08f37a54fbe54f5f22bc129911e868cb884f05641bab83d7a037

    SHA512

    3a7b039128025539a65951e357ea3f4284b96b685cc397ad3a8f809b1fea3c7a1582c524f5c900b50110d7ded81bf9ec02cd2bf627d4936241821327795663dd

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\ffmpeg.dll

    Filesize

    1.5MB

    MD5

    cfe6e1452f36ca6473e3378e361e95a1

    SHA1

    8134c6ae9f8d932d80e7ae5e0a1cf293495bc3ad

    SHA256

    75b81ee6e627ddb61ca5f7f673b69a03011bf0c60079734fb88ad0c1412edbe2

    SHA512

    e0ef29a736e2414acdd1a0b8804399c576dfaad603fd148caca9e66a013a70780258fb50937265f1d55c70ede2d47a4c7d210f7bf9198511bf80509d5c592dc1

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\icudtl.dat

    Filesize

    3.1MB

    MD5

    4bcc66a42fa23e1a52755e111995a688

    SHA1

    691cca7e74117b7cd64ebed66f5e0f21d48864f3

    SHA256

    6ba0a7536e3776306a7da2e33ddbeb8f950f9871fea107fe85e71168a825940a

    SHA512

    74e6d41806fa7ec020c6aff0147db206c05ad5e54c99be9133dff0e2df0bbcb3592fd865f492f1b3aadf1c1c3552849e9a8c021a595803ac55760a8585f9a834

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\libEGL.dll

    Filesize

    468KB

    MD5

    09134e6b407083baaedf9a8c0bce68f2

    SHA1

    8847344cceeab35c1cdf8637af9bd59671b4e97d

    SHA256

    d2107ba0f4e28e35b22837c3982e53784d15348795b399ad6292d0f727986577

    SHA512

    6ff3adcb8be48d0b505a3c44e6550d30a8feaf4aa108982a7992ed1820c06f49e0ad48d9bd92685fb82783dfd643629bd1fe4073300b61346b63320cbdb051ba

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\libGLESv2.dll

    Filesize

    2.5MB

    MD5

    a6dc684aad51d776a07dc28f38abb7ca

    SHA1

    c7f99b2ee659830c5e6db2e5f6a3d1a1545d5988

    SHA256

    68868bb5bd4f6542922dd88987e6e50ae6b5932a3f6a2b2c0a73f44f7b725071

    SHA512

    e32bff9475640f0f32e211ec831360b8f103502f143ea701b3fb2e467bf1269fae5238c48d8d2c420116fe8391f9062b42cc771eaa6480bb33c64cf95eab2fd6

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\af.pak

    Filesize

    353KB

    MD5

    464e5eeaba5eff8bc93995ba2cb2d73f

    SHA1

    3b216e0c5246c874ad0ad7d3e1636384dad2255d

    SHA256

    0ad547bb1dc57907adeb02e1be3017cce78f6e60b8b39395fe0e8b62285797a1

    SHA512

    726d6c41a9dbf1f5f2eff5b503ab68d879b088b801832c13fba7eb853302b16118cacda4748a4144af0f396074449245a42b2fe240429b1afcb7197fa0cb6d41

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\am.pak

    Filesize

    569KB

    MD5

    2c933f084d960f8094e24bee73fa826c

    SHA1

    91dfddc2cff764275872149d454a8397a1a20ab1

    SHA256

    fa1e44215bd5acc7342c431a3b1fddb6e8b6b02220b4599167f7d77a29f54450

    SHA512

    3c9ecfb0407de2aa6585f4865ad54eeb2ec6519c9d346e2d33ed0e30be6cc3ebfed676a08637d42c2ca8fa6cfefb4091feb0c922ff71f09a2b89cdd488789774

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ar.pak

    Filesize

    624KB

    MD5

    fdbad4c84ac66ee78a5c8dd16d259c43

    SHA1

    3ce3cd751bb947b19d004bd6916b67e8db5017ac

    SHA256

    a62b848a002474a8ea37891e148cbaf4af09bdba7dafebdc0770c9a9651f7e3b

    SHA512

    376519c5c2e42d21acedb1ef47184691a2f286332451d5b8d6aac45713861f07c852fb93bd9470ff5ee017d6004aba097020580f1ba253a5295ac1851f281e13

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\bg.pak

    Filesize

    652KB

    MD5

    38bcabb6a0072b3a5f8b86b693eb545d

    SHA1

    d36c8549fe0f69d05ffdaffa427d3ddf68dd6d89

    SHA256

    898621731ac3471a41f8b3a7bf52e7f776e8928652b37154bc7c1299f1fd92e1

    SHA512

    002adbdc17b6013becc4909daf2febb74ce88733c78e968938b792a52c9c5a62834617f606e4cb3774ae2dad9758d2b8678d7764bb6dcfe468881f1107db13ef

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\bn.pak

    Filesize

    838KB

    MD5

    9340520696e7cb3c2495a78893e50add

    SHA1

    eed5aeef46131e4c70cd578177c527b656d08586

    SHA256

    1ea245646a4b4386606f03c8a3916a3607e2adbbc88f000976be36db410a1e39

    SHA512

    62507685d5542cfcd394080917b3a92ca197112feea9c2ddc1dfc77382a174c7ddf758d85af66cd322692215cb0402865b2a2b212694a36da6b592028caafcdf

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ca.pak

    Filesize

    400KB

    MD5

    4cd6b3a91669ddcfcc9eef9b679ab65c

    SHA1

    43c41cb00067de68d24f72e0f5c77d3b50b71f83

    SHA256

    56efff228ee3e112357d6121b2256a2c3acd718769c89413de82c9d4305459c6

    SHA512

    699be9962d8aae241abd1d1f35cd8468ffbd6157bcd6bdf2c599d902768351b247baad6145b9826d87271fd4a19744eb11bf7065db7fefb01d66d2f1f39015a9

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\cs.pak

    Filesize

    409KB

    MD5

    eeee212072ea6589660c9eb216855318

    SHA1

    d50f9e6ca528725ced8ac186072174b99b48ea05

    SHA256

    de92f14480770401e39e22dcf3dd36de5ad3ed22e44584c31c37cd99e71c4a43

    SHA512

    ea068186a2e611fb98b9580f2c5ba6fd1f31b532e021ef9669e068150c27deee3d60fd9ff7567b9eb5d0f98926b24defabc9b64675b49e02a6f10e71bb714ac8

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\da.pak

    Filesize

    371KB

    MD5

    e7ba94c827c2b04e925a76cb5bdd262c

    SHA1

    abba6c7fcec8b6c396a6374331993c8502c80f91

    SHA256

    d8da7ab28992c8299484bc116641e19b448c20adf6a8b187383e2dba5cd29a0b

    SHA512

    1f44fce789cf41fd62f4d387b7b8c9d80f1e391edd2c8c901714dd0a6e3af32266e9d3c915c15ad47c95ece4c7d627aa7339f33eea838d1af9901e48edb0187e

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\de.pak

    Filesize

    397KB

    MD5

    cf22ec11a33be744a61f7de1a1e4514f

    SHA1

    73e84848c6d9f1a2abe62020eb8c6797e4c49b36

    SHA256

    7cc213e2c9a2d2e2e463083dd030b86da6bba545d5cee4c04df8f80f9a01a641

    SHA512

    c10c8446e3041d7c0195da184a53cfbd58288c06eaf8885546d2d188b59667c270d647fa7259f5ce140ec6400031a7fc060d0f2348ab627485e2207569154495

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\el.pak

    Filesize

    643KB

    MD5

    0e73c13ca9090ce7b09417f76aeef9b1

    SHA1

    e3278c7e472a91a4a4423f87fdfd3cff568c9037

    SHA256

    3feaef1e8312b3eae4d653c1a0a04b051c6c7c318b282b57717758899f75c8cc

    SHA512

    85724621879191ad535c93bb8766aae392c9a14818608ef904dd734aa2923a0b69bc5cf3c248a34aaa6a602a343ca48b218333c24cfa96b03ac409ac55a91b91

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\en-GB.pak

    Filesize

    324KB

    MD5

    825ed4c70c942939ffb94e77a4593903

    SHA1

    7a3faee9bf4c915b0f116cb90cec961dda770468

    SHA256

    e11e8db78ae12f8d735632ba9fd078ec66c83529cb1fd86a31ab401f6f833c16

    SHA512

    41325bec22af2e5ef8e9b26c48f2dfc95763a249ccb00e608b7096ec6236ab9a955de7e2340fd9379d09ac2234aee69aed2a24fe49382ffd48742d72a929c56a

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\en-US.pak

    Filesize

    326KB

    MD5

    19d18f8181a4201d542c7195b1e9ff81

    SHA1

    7debd3cf27bbe200c6a90b34adacb7394cb5929c

    SHA256

    1d20e626444759c2b72aa6e998f14a032408d2b32f957c12ec3abd52831338fb

    SHA512

    af07e1b08bbf2dd032a5a51a88ee2923650955873753629a086cad3b1600ce66ca7f9ed31b8ca901c126c10216877b24e123144bb0048f2a1e7757719aae73f2

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\es-419.pak

    Filesize

    234KB

    MD5

    325623e2ed6051f67b305e3dc4f15170

    SHA1

    5372e6089a6389630bd05431a16480743574a158

    SHA256

    ed7ef2a1a0000719a66aa1e75c87022f6458bdf4ce819349fbec67cd85fd2522

    SHA512

    dd19d6d39989c6d1f3faf1d8e7615fb776c2364546a792ac4f8a4af418e08f644dbb0f8ce61a82a05116d162e99c0bc77c919e810b00bda531f9bcb6c1d39e6f

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\es.pak

    Filesize

    383KB

    MD5

    83e918b3d4c1ef52f0901a8e952d71fb

    SHA1

    22bc2ae8315255eece5b3a9e74bbbae6b81042fd

    SHA256

    72ee4529f46d8693f173092f0ebaf903cffd6a65822e015e937572ac48a47788

    SHA512

    c1aff411aab32c781b7abf24d90e979927f6a452bcdd60c0e78a85734d6ea8a9f63b90a94d788ebb32c6a0a41288ce98ab42fec6fbc92b436bb62b4ac2f6b24a

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\et.pak

    Filesize

    356KB

    MD5

    ccc71f88984a7788c8d01add2252d019

    SHA1

    6a87752eac3044792a93599428f31d25debea369

    SHA256

    d69489a723b304e305cb1767e6c8da5d5d1d237e50f6ddc76e941dcb01684944

    SHA512

    d35ccd639f2c199862e178a9fab768d7db10d5a654bc3bc1fab45d00ceb35a01119a5b4d199e2db3c3576f512b108f4a1df7faf6624d961c0fc4bca5af5f0e07

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\fa.pak

    Filesize

    219KB

    MD5

    674b685c742c6ed05ad4ce6cadf98794

    SHA1

    d1526fcfbe0dbf48f93531293d41ba7674b9ce91

    SHA256

    bb5bef83269bf1dac13c43daddbc1354b8cd9900bfd59eeb452403af208077eb

    SHA512

    db76f6fee146398f73e62ef54ed803a4eae5916e2685ea2ba2b99e1bbaf2d49d8a06a7b16c53d02911de546d8a2fc9816291227838a24d31ef1886de66a988c3

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\fi.pak

    Filesize

    207KB

    MD5

    3d27385d37591b580f62d92243cf34e0

    SHA1

    6b7b262ad187cc24b6e3845774e06bf6d0ce6015

    SHA256

    fd43820a8b33a33db60893222bb3d4847363eef53f05b765edeb70b903686e03

    SHA512

    bec1de0fad389043ba53f1bb9e9308f0ec3691151e96f5db306137d92b9b5f7695dd55998448999d86f2a8d0094be3c15f6daf85b86f5eb776856a4ea780ea4e

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\fil.pak

    Filesize

    204KB

    MD5

    d59e5f869073eee9387e654107f53117

    SHA1

    f8d972275c5395c16c7695fd41489856c76fef86

    SHA256

    d8aff6dfd5dbc912d9644ee254994fa6f6d97137f034ebaf7b5cddf238c6d2f4

    SHA512

    6cbdd1ba6efb2f8509e219e06621acea0797394519f4d72ba488065331879d1defa9dd260f8820bbaa9fc79f54741c7b278667663c0c3d363327be5d86ccb664

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\fr.pak

    Filesize

    426KB

    MD5

    3ee48a860ecf45bafa63c9284dfd63e2

    SHA1

    1cb51d14964f4dced8dea883bf9c4b84a78f8eb6

    SHA256

    1923e0edf1ef6935a4a718e3e2fc9a0a541ea0b4f3b27553802308f9fd4fc807

    SHA512

    eb6105faca13c191fef0c51c651a406b1da66326bb5705615770135d834e58dee9bed82aa36f2dfb0fe020e695c192c224ec76bb5c21a1c716e5f26dfe02f763

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\gu.pak

    Filesize

    98KB

    MD5

    bdbd645fc09185fb2c17a0220a78f749

    SHA1

    6582ea90fbf5ecf4726dae9f3a4520cb3f963aa1

    SHA256

    4e0fae51bb08b2414d4989e2647cca163cd0314ae665753efe9a5ed3e2c391a7

    SHA512

    59854393b07514a0f66632a51ba51112c8ed472952b55a9af9b7cd79d99a4a5de42e343fa8c25b03ee8d70b1766c1964b41f6639a41ef47c356bc43158051ad9

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\he.pak

    Filesize

    82KB

    MD5

    fbd6442063eb684967d79511c49cc6cd

    SHA1

    985150f7c9754d2cc297e66d0e1adde04aac29de

    SHA256

    1907b0d885ce0847c81254c9ea58260beefa08117ee4ca74c65885e199b1b1e5

    SHA512

    d6da6353e2da4a41b4e40d010d26e2d66fefb343ebda0900a55daacb756def746509d5680870dc36bad3024e1ca986d3e217557c384d5cbe496901504856e17a

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\hi.pak

    Filesize

    256KB

    MD5

    5a9c51748150c331ad05f1c44cfe4436

    SHA1

    006b52dc656c0f3f26ce52b6c030c1feb94eb168

    SHA256

    b9281c69b040dbb44dd1089699688b4bbdfbf93d504ab86399b82de83b8cc066

    SHA512

    c603d9af86ded697cd0cf09db21efdd78d5122cf9db0894584bfee5b91ca64811b4ae4b9df72043992b5224a8210f85006893e3299aca0a049665cab6fc15fd6

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\hr.pak

    Filesize

    397KB

    MD5

    255f808210dbf995446d10ff436e0946

    SHA1

    1785d3293595f0b13648fb28aec6936c48ea3111

    SHA256

    4df972b7f6d81aa7bdc39e2441310a37f746ae5015146b4e434a878d1244375b

    SHA512

    8b1a4d487b0782055717b718d58cd21e815b874e2686cdfd2087876b70ae75f9182f783c70bf747cf4ca17a3afc68517a9db4c99449fa09bef658b5e68087f2a

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\hu.pak

    Filesize

    381KB

    MD5

    b15eef7175df6ae2dcddbee0bff39209

    SHA1

    21b3cc89191244f4e8a5ae7fd6340f7ac9d94c20

    SHA256

    ddede5ebeaff62846c81a456ee2cf571b77b119ad4c5539e3e2315db68daf8fc

    SHA512

    4a941442a4b8bce80b39f821122c404fa83e6a2031ab7d877adefb3879f63bc7cc8fac2662a92c38bb08a2c0d2a775a0f998655bb1ad40826a71f5601e315b5f

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\id.pak

    Filesize

    301KB

    MD5

    f31996acbc806b4fab43a419e22c242d

    SHA1

    b3a1f235c37c4b55af02ee86df6c815667fc7757

    SHA256

    c311055a7bcd1f6f254b8e0abe09ed91e77439e03dc039fae8306450d46849d7

    SHA512

    290404ce159f413eb286b393c86c99eef7f066c37168cb670541b0e907c64e09e45cb29862e543ff9268ec025ade21fc338f891f42c90ab83eb1cf9f6a059f5e

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\it.pak

    Filesize

    234KB

    MD5

    f8fd24798c9c0aaa6107fce5ef14e35a

    SHA1

    fbd387323fe16ecfbee084f15b8890ace895307c

    SHA256

    c8cd76581d945fd5ddca6ef997a6d7f0a43b7126c4d44d727cd5500b8851be10

    SHA512

    edec1944709a370221e28c2bfcc8dbbbd8a5ce4e06f11575e9f1ea942d0450ca7132549b7806d675f78458005b0fa89b69276b8eadc26aadbcc7afec534067ff

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ja.pak

    Filesize

    411KB

    MD5

    4a42d1617bb36993c74d617a5a236f1a

    SHA1

    bf243ba563d1d8d099486c03087dd0f76bc50425

    SHA256

    3bb59b0bc738b94b8b9f1869ca679ecd8999f4470ca84c7e63c2403e41c4047c

    SHA512

    1b4ead41ff9498930a7b1f8449e52da94ece95af6d014db32c8a03c1a01d83baf7ee76ff822059f300240858ef11cbfe09bcc4fc5fa99072e892488fa297545f

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\kn.pak

    Filesize

    490KB

    MD5

    c1a2da946601a3c2d2ef385f66a3b5f3

    SHA1

    a8f3f02fc9010023abb4405652493c87f56b8ed5

    SHA256

    585b74b664f93c58883c91ef320d336e30cc4e802d8bc47f80af35902bc5582a

    SHA512

    2c3dda02ca83100e7f8ebf96a5fffd48c854c6a9c1263ae00b4bcefba45c9eae94875f8815cc06b4a39bd71a2795296dfcc01770600fcf5d5e96f382cd83c92a

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ko.pak

    Filesize

    153KB

    MD5

    4f7c7a82045f17f62b150fe4fd5aeb02

    SHA1

    7fe41e35e875dc776337d910989898c311e4678e

    SHA256

    83a6e2b7619c29071db5d3141bb9dad918885bbdc42cfdd977fc66f276e04c06

    SHA512

    cdc34deba89d5c2e2d342f2610ab18f9f6d674d7828dee6eec6801acb67c4193d60285cc7ffb112ebc4e2deb3315b93ec804fdc6db4facf232e2c70d37926aa9

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\lt.pak

    Filesize

    429KB

    MD5

    64b08ffc40a605fe74ecc24c3024ee3b

    SHA1

    516296e8a3114ddbf77601a11faf4326a47975ab

    SHA256

    8a5d6e29833374e0f74fd7070c1b20856cb6b42ed30d18a5f17e6c2e4a8d783e

    SHA512

    05d207413186ac2b87a59681efe4fdf9dc600d0f3e8327e7b9802a42306d80d0ddd9ee07d103b17caf0518e42ab25b7ca9da4713941abc7bced65961671164ac

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\lv.pak

    Filesize

    427KB

    MD5

    a8cbd741a764f40b16afea275f240e7e

    SHA1

    317d30bbad8fd0c30de383998ea5be4eec0bb246

    SHA256

    a1a9d84fd3af571a57be8b1a9189d40b836808998e00ec9bd15557b83d0e3086

    SHA512

    3da91c0ca20165445a2d283db7dc749fcf73e049bfff346b1d79b03391aefc7f1310d3ac2c42109044cfb50afcf178dcf3a34b4823626228e591f328dd7afe95

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ml.pak

    Filesize

    128KB

    MD5

    d68f12c3960fc9d8b1714297931d24da

    SHA1

    e9dc81815f92b5459b0311cdff07be0642d5434c

    SHA256

    02336dc0392540dffcde6e21fda40e03c7d571ef385c058cd8f538ec9e486a79

    SHA512

    28dc988928befe91c83cb3fb18a0f1f695a48c4bcce05ee3e46e573ddb3d77892e4f0a15ea874a22217715443eb35e59f8779381bc9c05e8e05fd8081040cdc9

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\mr.pak

    Filesize

    352KB

    MD5

    bebc7870c46d656256e589fc34b93ded

    SHA1

    543bf05df9ad6c7a94b643c83a91e861ed7619e8

    SHA256

    663e8991f4bc805b39b9984d9dc4797b71d843a9d9e91333a7f25c4942438b26

    SHA512

    f694f4c260e1178fc481687f98715d67629b63b1c2d67e0240c15b7b278a3e1c07ed5d4b4e32e1fc396b82004b282fded6b5d6e164ce4e5166a595e7bd567a79

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ms.pak

    Filesize

    365KB

    MD5

    aee105366a1870b9d10f0f897e9295db

    SHA1

    eee9d789a8eeafe593ce77a7c554f92a26a2296f

    SHA256

    c6471aee5f34f31477d57f593b09cb1de87f5fd0f9b5e63d8bab4986cf10d939

    SHA512

    240688a0054bfebe36ea2b056194ee07e87bbbeb7e385131c73a64aa7967984610fcb80638dd883837014f9bc920037069d0655e3e92a5922f76813aedb185fa

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\nb.pak

    Filesize

    197KB

    MD5

    db655d6385797cbf03abc7c643ebbf64

    SHA1

    26cda24ab322bd775108804ec7e54de61603e672

    SHA256

    ec11f2ae10b0016b141345efa006632d3a6fa4bd313119d8d403931d8ff03bc4

    SHA512

    97bc2fca1b8ce8e624bd66b268488a2227130331759c8f1976e6c6d3e38d56f72091726276eeeca19aaa58969fe2c8588a335590a89e6238b250e4f378992373

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\nl.pak

    Filesize

    93KB

    MD5

    126128f067e01bc188e2cedb85bd89ad

    SHA1

    be503804be9a2a4bdf70e9a85436c9688da4fadc

    SHA256

    6e84e068feb878fb4f6eef97b53e5cf3c2893e117bc1b0d68214280e4ee445de

    SHA512

    26377ea524f469c32e8df4cd027a875cf5724a5ca72a4239aa5e4f1e6cae7b93e528071869b032d065fe1943c83d3a9c440d35e9d697069d90901fe94ff37d65

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\pl.pak

    Filesize

    412KB

    MD5

    f1d48a7dcd4880a27e39b7561b6eb0ab

    SHA1

    353c3ba213cd2e1f7423c6ba857a8d8be40d8302

    SHA256

    2593c8b59849fbc690cbd513f06685ea3292cd0187fcf6b9069cbf3c9b0e8a85

    SHA512

    132da2d3c1a4dad5ccb399b107d7b6d9203a4b264ef8a65add11c5e8c75859115443e1c65ece2e690c046a82687829f54ec855f99d4843f859ab1dd7c71f35a5

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\pt-BR.pak

    Filesize

    127KB

    MD5

    9bdc5e978f7f6464ca413303a2149564

    SHA1

    14564ede030a46b0c19ae6d21a42a1913b45f8c9

    SHA256

    d2a0233b8c2e66ae73ae7bc0da8d6c7a400f0a3a40942b48af7a6e5df5704881

    SHA512

    da44965c05af01c0737ffa2dce6a8d08242a4c852ef9fa5e8658c0b26bf32edbfdcaeb365ab071f8bbb37fa8278e51f2e04920108737d15e139185e45b439af3

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\pt-PT.pak

    Filesize

    390KB

    MD5

    b4954b064e3f6a9ba546dda5fa625927

    SHA1

    584686c6026518932991f7de611e2266d8523f9d

    SHA256

    ee1e014550b85e3d18fb5128984a713d9f6de2258001b50ddd18391e7307b4a1

    SHA512

    cb3b465b311f83b972eca1c66862b2c5d6ea6ac15282e0094aea455123ddf32e85df24a94a0aedbe1b925ff3ed005ba1e00d5ee820676d7a5a366153ade90ef7

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ro.pak

    Filesize

    403KB

    MD5

    d2758f6adbaeea7cd5d95f4ad6dde954

    SHA1

    d7476db23d8b0e11bbabf6a59fde7609586bdc8a

    SHA256

    2b7906f33bfbe8e9968bcd65366e2e996cdf2f3e1a1fc56ad54baf261c66954c

    SHA512

    8378032d6febea8b5047ada667cb19e6a41f890cb36305acc2500662b4377caef3dc50987c925e05f21c12e32c3920188a58ee59d687266d70b8bfb1b0169a6e

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ru.pak

    Filesize

    298KB

    MD5

    135980bc7c74088ac44ee2bf2f3d0178

    SHA1

    7391ad83a3467c602c3dd1833f603aa6058933c4

    SHA256

    c17393ca948d87cf0d7abd3ee5c6957c3b040c286e004c80be04caa5a73a91f8

    SHA512

    e1203c2bacf76c7712052694b4f962dfa5705e7c24181b112907a326c3b7011462f9436b6646725916355607185bf4d3a213915e5beda215ed76eeb733fe2759

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\sk.pak

    Filesize

    169KB

    MD5

    8aacdd96a08b9a0628af95407c00e4cc

    SHA1

    57120ffadf6ba793f3e57279473e6135519f9eee

    SHA256

    f8e421cb4b0e40cbbe5b93c44db53ee108eb03d2ec389f26dc8194bfc3e700a9

    SHA512

    32f9fac2d317e0a60dd2ffd4f144425dc5fcd12599b278b59a5a37b44ff4c6b088814cf331a05c14a415e63fa2008acad0ad0fbf01295fd26231925e549088f3

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\sl.pak

    Filesize

    310KB

    MD5

    edf644b7a8ef84f8ca5314f0f0fd7b0e

    SHA1

    1495ed2b1f6232b674aa841226fab79787418b1e

    SHA256

    19d16a0ab347e3ff833d33c7c77b7899095a53702c0cc2f15dcac2fb9dbc7abb

    SHA512

    99dfc3576afd7bfdaec93994c7bfd3f0f986577d4e93064ab90519ff21945f61a1541a8ee7ab82f391890139b20b5891b0ee1281ebe0ef1c675ee8c4ba8fbd0f

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\sr.pak

    Filesize

    616KB

    MD5

    c68c235d8e696c098cf66191e648196b

    SHA1

    5c967fbbd90403a755d6c4b2411e359884dc8317

    SHA256

    ab96a18177af90495e2e3c96292638a775aa75c1d210ca6a6c18fbc284cd815b

    SHA512

    34d14d8cb851df1ea8cd3cc7e9690eaf965d8941cfcac1c946606115ad889630156c5ff47011b27c1288f8df70e8a7dc41909a9fa98d75b691742ec1d1a5e653

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\sv.pak

    Filesize

    361KB

    MD5

    272f8a8b517c7283eab83ba6993eea63

    SHA1

    ad4175331b948bd4f1f323a4938863472d9b700c

    SHA256

    d15b46bc9b5e31449b11251df19cd2ba4920c759bd6d4fa8ca93fd3361fdd968

    SHA512

    3a0930b7f228a779f727ebfb6ae8820ab5cc2c9e04c986bce7b0f49f9bf124f349248ecdf108edf8870f96b06d58dea93a3e0e2f2da90537632f2109e1aa65f0

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\sw.pak

    Filesize

    379KB

    MD5

    67a443a5c2eaad32625edb5f8deb7852

    SHA1

    a6137841e8e7736c5ede1d0dc0ce3a44dc41013f

    SHA256

    41dfb772ae4c6f9e879bf7b4fa776b2877a2f8740fa747031b3d6f57f34d81dd

    SHA512

    e0fdff1c3c834d8af8634f43c2f16ba5b883a8d88dfd322593a13830047568faf9f41d0bf73cd59e2e33c38fa58998d4702d2b0c21666717a86945d18b3f29e5

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ta.pak

    Filesize

    624KB

    MD5

    b0f4237b0b03b4ab7c3aaeceecca49bb

    SHA1

    55f7bd115a612ab59a9a2742402e94f3aea37b04

    SHA256

    63bdedd052f5ee49b2b02b3ca64eadcc09516c2d84272691fbb68cc82f6a7889

    SHA512

    5ac0747ae426b5c33205dc2746d1f46c454119a8e1b0501a840302fc539def6990a419c06222927ce28b3cf9675d9d7a5e15b813ec2cc54569c853242ae3d6a1

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\te.pak

    Filesize

    92KB

    MD5

    6a1dbd567d25771302de43cdfd767640

    SHA1

    e87987020b82d09b236323b438a12131317fed01

    SHA256

    2e68e1ed86ff8948f1b05be3d743ed3eaf95b53d7048edc96e299fdee4252eb8

    SHA512

    c215b0dedd6df09be446c299471986c00f8c8727d6f470f09e82a5d5c6131674554a275b1dfe83c6d949e79660e46079837ad54a9d4935db11e71da108f9f275

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\th.pak

    Filesize

    753KB

    MD5

    a32ba63feeed9b91f6d6800b51e5aeae

    SHA1

    2fbf6783996e8315a4fb94b7d859564350ee5918

    SHA256

    e32e37ca0ab30f1816fe6df37e3168e1022f1d3737c94f5472ab6600d97a45f6

    SHA512

    adebde0f929820d8368096a9c30961ba7b33815b0f124ca56ca05767ba6d081adf964088cb2b9fcaa07f756b946fffa701f0b64b07d457c99fd2b498cbd1e8a5

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\tr.pak

    Filesize

    192KB

    MD5

    f77b848198f282e4b9b4647fa6279e6f

    SHA1

    feea10d61e3a8341ee8f9947a9cae289979698f8

    SHA256

    320ebc1aaa93c67bc8879531710044dd0527cb84a2b98528bee0d3f0d89ed160

    SHA512

    8feb4de6b9951538611d730384dff964c04a9425c0bcd2b80cf4fe09c3ed7ed9de77b6b37639fa82343f96c11332af786c2a97e9facbf90e97ae3c5a24aeebfc

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\uk.pak

    Filesize

    321KB

    MD5

    cb38bf29589a7189ac6f007fb5c73a82

    SHA1

    2b47b38e1f3c98a5772cb50940615e21ecf60b93

    SHA256

    c275e822b1715fab577af01d05c4917ff292721fb16327409a66cbb2d1416e65

    SHA512

    58b3d89270bc198293bd7647ce1fba15a4bb838b724dac34dcb87b85498988af6df9ff11df3ca26def98fcdbf6075f0ea20886e6d60b8cc15ecd6e4a05cf2307

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\ur.pak

    Filesize

    571KB

    MD5

    1ca4fa13bd0089d65da7cd2376feb4c6

    SHA1

    b1ba777e635d78d1e98e43e82d0f7a3dd7e97f9c

    SHA256

    3941364d0278e2c4d686faa4a135d16a457b4bc98c5a08e62aa12f3adc09aa7f

    SHA512

    d0d9eb1aa029bd4c34953ee5f4b60c09cf1d4f0b21c061db4ede1b5ec65d7a07fc2f780ade5ce51f2f781d272ac32257b95eedf471f7295ba70b5ba51db6c51d

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\vi.pak

    Filesize

    455KB

    MD5

    db0eb3183007de5aae10f934fffacc59

    SHA1

    e9ea7aeffe2b3f5cf75ab78630da342c6f8b7fd9

    SHA256

    ddabb225b671b989789e9c2ccd1b5a8f22141a7d9364d4e6ee9b8648305e7897

    SHA512

    703efd12fcace8172c873006161712de1919572c58d98b11de7834c5628444229f5143d231c41da5b9cf729e32de58dee3603cb3d18c6cdd94aa9aa36fbf5de0

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\zh-CN.pak

    Filesize

    150KB

    MD5

    320a4b4e5582c616feb87039d305b080

    SHA1

    99a28893e54e806f0ef7ae346c8d6ee12376a995

    SHA256

    f1d661af683e6bb3977dddab6f5d8a2068736e999e9aac12c6cfd05c35f859f9

    SHA512

    5c1cc426a0f7aa7c729653fa688516c5190dcb80a0b956c9f977d2132804442cdc0da9b9a7ccc5754751cabec09d37a0301836d0476c07b55d9b865169eb60a5

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\locales\zh-TW.pak

    Filesize

    330KB

    MD5

    2456bf42275f15e016689da166df9008

    SHA1

    70f7de47e585dfea3f5597b5bba1f436510decd7

    SHA256

    adf8df051b55507e5a79fa47ae88c7f38707d02dfac0cc4a3a7e8e17b58c6479

    SHA512

    7e622afa15c70785aaf7c19604d281efe0984f621d6599058c97c19d3c0379b2ee2e03b3a7ec597040a4eee250a782d7ec55c335274dd7db7c7ca97ddcfd378a

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\resources.pak

    Filesize

    2.3MB

    MD5

    dbca51272b9012f072fdf3525f6560dc

    SHA1

    8a9a352c4991359192026730d130e106246035fa

    SHA256

    dbd982df48a3fd02aa30c04b02410137e1638da1aecfb25d785d4ade621074c7

    SHA512

    84906cb1cbe200ff58f91f3b01a0c75c572f91224911efe41c6c77e8246476854fb7229b96f806289e5736e87f63b5f88186bc15a230c10fb9cd90da7fffb568

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\resources\app.asar

    Filesize

    188KB

    MD5

    2931cf8ef34dc77a46b34e0df34f4303

    SHA1

    a20624de32f7b2d461a4cfdafa58533b2b38f0aa

    SHA256

    9e4efa6c4d79a1e6bc5a2e82102660011d7daf3fec67abd4a801d608d31df165

    SHA512

    fed31a12bb6d244cc08764e9b7a94217209de7ed3403487179e03df152c9b52cf599ae2a29660744889f02437b239e72dc444a2c7a176be5fed06e02c691470f

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\resources\elevate.exe

    Filesize

    105KB

    MD5

    792b92c8ad13c46f27c7ced0810694df

    SHA1

    d8d449b92de20a57df722df46435ba4553ecc802

    SHA256

    9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

    SHA512

    6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\snapshot_blob.bin

    Filesize

    158KB

    MD5

    8fef5a96dbcc46887c3ff392cbdb1b48

    SHA1

    ed592d75222b7828b7b7aab97b83516f60772351

    SHA256

    4de0f720c416776423add7ada621da95d0d188d574f08e36e822ad10d85c3ece

    SHA512

    e52c7820c69863ecc1e3b552b7f20da2ad5492b52cac97502152ebff45e7a45b00e6925679fd7477cdc79c68b081d6572eeed7aed773416d42c9200accc7230e

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\v8_context_snapshot.bin

    Filesize

    465KB

    MD5

    a373d83d4c43ba957693ad57172a251b

    SHA1

    8e0fdb714df2f4cb058beb46c06aa78f77e5ff86

    SHA256

    43b58ca4057cf75063d3b4a8e67aa9780d9a81d3a21f13c64b498be8b3ba6e0c

    SHA512

    07fbd84dc3e0ec1536ccb54d5799d5ed61b962251ece0d48e18b20b0fc9dd92de06e93957f3efc7d9bed88db7794fe4f2bec1e9b081825e41c6ac3b4f41eab18

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\vk_swiftshader.dll

    Filesize

    1.7MB

    MD5

    8ec3b51a17770934c3bf05a23581ec19

    SHA1

    999c14b0f7186a1284e0b0a5ba4e0d3e46072007

    SHA256

    e208fbd71ba63f6c0d028ead51526b9453fe6a7c0af3af2d8f7dfb658bccb95d

    SHA512

    57b36ed0557ac5ab1a3a4c1ca4fafbd7dec7967b39a344bee747bd6f933571335647a6911ac49772688cbafc581ba4f8d67bcab9c23ece6d886a18379a37db0c

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\vk_swiftshader_icd.json

    Filesize

    106B

    MD5

    8642dd3a87e2de6e991fae08458e302b

    SHA1

    9c06735c31cec00600fd763a92f8112d085bd12a

    SHA256

    32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

    SHA512

    f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\7z-out\vulkan-1.dll

    Filesize

    899KB

    MD5

    0e4e0f481b261ea59f196e5076025f77

    SHA1

    c73c1f33b5b42e9d67d819226db69e60d2262d7b

    SHA256

    f681844896c084d2140ac210a974d8db099138fe75edb4df80e233d4b287196a

    SHA512

    e6127d778ec73acbeb182d42e5cf36c8da76448fbdab49971de88ec4eb13ce63140a2a83fc3a1b116e41f87508ff546c0d7c042b8f4cdd9e07963801f3156ba2

  • C:\Users\Admin\AppData\Local\Temp\nsy1A55.tmp\StdUtils.dll

    Filesize

    100KB

    MD5

    c6a6e03f77c313b267498515488c5740

    SHA1

    3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    SHA256

    b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    SHA512

    9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

  • C:\Users\Admin\AppData\Roaming\vlc\ml.xspf

    Filesize

    304B

    MD5

    781602441469750c3219c8c38b515ed4

    SHA1

    e885acd1cbd0b897ebcedbb145bef1c330f80595

    SHA256

    81970dbe581373d14fbd451ac4b3f96e5f69b79645f1ee1ca715cff3af0bf20d

    SHA512

    2b0a1717d96edb47bdf0ffeb250a5ec11f7d0638d3e0a62fbe48c064379b473ca88ffbececb32a72129d06c040b107834f1004ccda5f0f35b8c3588034786461

  • C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini

    Filesize

    534B

    MD5

    fed93f95181537bb951d013804a4c0af

    SHA1

    4061e70eee656d35ad7ce4fa578bb767d8d0a56e

    SHA256

    455d6cba9f8751fd2aa74e15095e9b8ef3774507b880b47fabf9bc72abc631e1

    SHA512

    fd004867710d7e61f318ea7fef5b4b6f6f91f4f68c12d0d532eeec7c33552a2f8dd4230a2e0ac28878a501eaf082c8fd4214a7a6b1888193a0eeff838eb02f3c

  • C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini

    Filesize

    785B

    MD5

    5156e5b807a122cde0d02f9fe1f80f7c

    SHA1

    c3f66e819b55e2e3bb89c7c8ee13308156f2cd05

    SHA256

    4123e622e74bc681318fdb6cbd1b9d723b9fd3322e97385592940f55c8272ce1

    SHA512

    835f20b8830729c20ff65c9444caa69792bbf4ba154c70761390b144f6976490a6270ab3b2ad345db16bb3a46cda46e1a20d548f728de9e21c316c144d373a4b

  • C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini

    Filesize

    835B

    MD5

    04b1fea2afabd770e5e69bc8c6cf63ee

    SHA1

    5466b63bea481a648b3e7a9dd245c609c95d270b

    SHA256

    a6a0e634394ec70c9efbebbf0bbd245d31c5287fe84b6b89c8c8bed1b7c20827

    SHA512

    7cd378316b70f3ff9b5e1926d52295aad57b60f18eb9af06fca99df03ba1bff436c923f9d73d8bbcd9047d15edc4fbef371e0da5beb50af04f652adae09566e1

  • C:\Users\Admin\AppData\Roaming\vlc\vlcrc

    Filesize

    93KB

    MD5

    478a4a09f4f74e97335cd4d5e9da7ab5

    SHA1

    3c4f1dc52a293f079095d0b0370428ec8e8f9315

    SHA256

    884b59950669842f3c45e6da3480cd9a553538b951fb155b435b48ff38683974

    SHA512

    e96719663cd264132a8e1ea8c3f8a148c778a0c68caa2468ba47629393605b197dd9e00efad91f389de9fcc77b04981a0cf87f785f3c645cdc9e4ebd98060ca1

  • \Users\Admin\AppData\Local\Temp\2ch1J1q1yf3pFdsePZl8xdeR3TM\Shaderium.exe

    Filesize

    668KB

    MD5

    2df30db62db9427be678e1e5fa055ff0

    SHA1

    284cacf40afc646aaa43f711384561f19af0aba0

    SHA256

    a5de8a296a31c3596912ba303fd145caf1d96ef48ddce8ef21545fdeee092ee4

    SHA512

    9d0c57c00b65f2f7ef32011a5621ca15b97353d485a9f6032d3fece584a8e95cb403421476567874a6fbd9271e864b6f1bdaef1c947f60533d3f8f111c398d2f

  • \Users\Admin\AppData\Local\Temp\2ch1J1q1yf3pFdsePZl8xdeR3TM\ffmpeg.dll

    Filesize

    416KB

    MD5

    f08bde9793af75aad632a304ba53a241

    SHA1

    b3fcac852380fc3ba97fe91b32e28952366c6e50

    SHA256

    cb0435b7f9b84ed373d0ec93cac1a89e9169c54e6c9ee794130335254f3428a0

    SHA512

    f283879ea7e79a2d4c40bdc0bd2324d32c6824e26c6ae71c5c51ac43c2ee752a2c0d786d6a7f61481e931bdea2549559690ca1169b1bf9d24348bb19bdeffaba

  • \Users\Admin\AppData\Local\Temp\nsy1A55.tmp\System.dll

    Filesize

    12KB

    MD5

    0d7ad4f45dc6f5aa87f606d0331c6901

    SHA1

    48df0911f0484cbe2a8cdd5362140b63c41ee457

    SHA256

    3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    SHA512

    c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

  • \Users\Admin\AppData\Local\Temp\nsy1A55.tmp\nsis7z.dll

    Filesize

    424KB

    MD5

    80e44ce4895304c6a3a831310fbf8cd0

    SHA1

    36bd49ae21c460be5753a904b4501f1abca53508

    SHA256

    b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    SHA512

    c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

  • memory/1032-928-0x000007FEF5AF0000-0x000007FEF5DA4000-memory.dmp

    Filesize

    2.7MB

  • memory/1032-930-0x000007FEF45A0000-0x000007FEF564B000-memory.dmp

    Filesize

    16.7MB

  • memory/1032-929-0x000007FEF5650000-0x000007FEF5762000-memory.dmp

    Filesize

    1.1MB

  • memory/1032-927-0x000007FEF6A00000-0x000007FEF6A34000-memory.dmp

    Filesize

    208KB

  • memory/1032-926-0x000000013F370000-0x000000013F468000-memory.dmp

    Filesize

    992KB

  • memory/1780-910-0x000007FEF2170000-0x000007FEF321B000-memory.dmp

    Filesize

    16.7MB

  • memory/1780-909-0x000007FEF5760000-0x000007FEF5872000-memory.dmp

    Filesize

    1.1MB

  • memory/1780-906-0x000000013F3E0000-0x000000013F4D8000-memory.dmp

    Filesize

    992KB

  • memory/1780-907-0x000007FEF74E0000-0x000007FEF7514000-memory.dmp

    Filesize

    208KB

  • memory/1780-908-0x000007FEF5DB0000-0x000007FEF6064000-memory.dmp

    Filesize

    2.7MB

  • memory/2000-889-0x000007FEF5650000-0x000007FEF5762000-memory.dmp

    Filesize

    1.1MB

  • memory/2000-888-0x000007FEF5AF0000-0x000007FEF5DA4000-memory.dmp

    Filesize

    2.7MB

  • memory/2000-890-0x000007FEF45A0000-0x000007FEF564B000-memory.dmp

    Filesize

    16.7MB

  • memory/2000-887-0x000007FEF6A00000-0x000007FEF6A34000-memory.dmp

    Filesize

    208KB

  • memory/2000-886-0x000000013F9D0000-0x000000013FAC8000-memory.dmp

    Filesize

    992KB

  • memory/3028-857-0x000007FEF4B00000-0x000007FEF5BAB000-memory.dmp

    Filesize

    16.7MB

  • memory/3028-854-0x000000013F400000-0x000000013F4F8000-memory.dmp

    Filesize

    992KB

  • memory/3028-855-0x000007FEF74E0000-0x000007FEF7514000-memory.dmp

    Filesize

    208KB

  • memory/3028-856-0x000007FEF5DB0000-0x000007FEF6064000-memory.dmp

    Filesize

    2.7MB

  • memory/3028-858-0x000007FEF3F60000-0x000007FEF4072000-memory.dmp

    Filesize

    1.1MB