Analysis

  • max time kernel
    7s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/02/2024, 17:44

General

  • Target

    GDLauncher-win-setup.exe

  • Size

    73.9MB

  • MD5

    05882ff7f159734468f66e60cb10f316

  • SHA1

    ec0b1d3fd2a67a5f85e2a8b1e04d69f4362b6b4e

  • SHA256

    9a4744a9ea6fa058995157b052e1d96b7063039ab3971ce5660fe9cc29bea7aa

  • SHA512

    70f44f7adf0bda370485ee5c88f58b995d3023d535f9544696c45949b7515879ad8a4c5848e0e82cf8babacc84da6ab73834198a28582ef4870b9e088e433da0

  • SSDEEP

    1572864:wlUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasRl:wmbL9g8Opjvi6WA+kumasRl

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GDLauncher-win-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\GDLauncher-win-setup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1044
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq GDLauncher.exe" | %SYSTEMROOT%\System32\find.exe "GDLauncher.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2992
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq GDLauncher.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4944
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "GDLauncher.exe"
        3⤵
          PID:5116
    • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
      "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe"
      1⤵
        PID:4068
        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
          "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_next" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1568 --field-trial-handle=1780,i,18296855108028806682,12994967130990787039,131072 --disable-features=OutOfBlinkCors,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          2⤵
            PID:3544
          • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
            "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_next" --mojo-platform-channel-handle=2068 --field-trial-handle=1780,i,18296855108028806682,12994967130990787039,131072 --disable-features=OutOfBlinkCors,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
            2⤵
              PID:3460
            • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
              "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_next" --app-path="C:\Users\Admin\AppData\Local\Programs\gdlauncher\resources\app.asar" --enable-experimental-web-platform-features --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2452 --field-trial-handle=1780,i,18296855108028806682,12994967130990787039,131072 --disable-features=OutOfBlinkCors,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
              2⤵
                PID:4904
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
                  3⤵
                    PID:5404
                    • C:\Windows\System32\reg.exe
                      C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
                      4⤵
                        PID:5476
                  • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
                    "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_next" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=844 --field-trial-handle=1780,i,18296855108028806682,12994967130990787039,131072 --disable-features=OutOfBlinkCors,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                    2⤵
                      PID:2636

                  Network

                        MITRE ATT&CK Enterprise v15

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\7za.exe

                          Filesize

                          1.1MB

                          MD5

                          e86eff95691b1c0e7e4f3e9cb1ae2e49

                          SHA1

                          d0acbf9ae29ec74acc67b53b2063bbc9739bc9e8

                          SHA256

                          8117e40ee7f824f63373a4f5625bb62749f69159d0c449b3ce2f35aad3b83549

                          SHA512

                          1c26201f214fc068d2d7f7c812be022dbc102077ef34bc1f231ac118aa04b94139cc2005628491747888faf95863241b3847524db097f4822b75f646f4345ff6

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\D3DCompiler_47.dll

                          Filesize

                          447KB

                          MD5

                          3fc998c5534af9073bdcc64f2785a2a0

                          SHA1

                          4ddcd9eebf8b62749c578af0701f9102f085bafc

                          SHA256

                          2f2e7f37a95248e694262233df5fd150417bf62634368c9b04afe5b8baaa2967

                          SHA512

                          1043d34f5ab9acdf3d99a62eea9838c36a2105203b14e496535b4541c02d1a7012f4576e94406600eafa0b0545b7eb616792eb919f3774c94613873259ebed7f

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe

                          Filesize

                          1.6MB

                          MD5

                          9d3b16e2a2a75d6849ba492903b93a95

                          SHA1

                          9ed1a828ad701e18f06b47517de5f76b3e4956ce

                          SHA256

                          0f5d4ae11a85970eea61ff3aef67412d76efe245d39145898369a4f03507bd54

                          SHA512

                          de17f87b220a88b04081f9b14efcc57b760a8653d2404f64bce8349f6b0aa0ba899e9bee1e80dfd2bd4e036d831ca2f259b625379562225ba2f1e44bd5a3686e

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe

                          Filesize

                          589KB

                          MD5

                          3262e9899967984512cf273a5951271b

                          SHA1

                          6472f47dd10eb7a6a1d5dde90463ea90b468d13b

                          SHA256

                          06f4dc13b6a9498bd1c16f7e4398c67ce8edad6f9e27e0ff84e164829bef8141

                          SHA512

                          74a1be35cfb50d363f0782c159ff0130178907a02c21327ec305a8cddc321f63cce5f5774e6ffaf154847cb75255ffeee273381a52d04488b68f72771ee8b5d0

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe

                          Filesize

                          703KB

                          MD5

                          54edc3e04881aeefe3e6d435c70d2e2a

                          SHA1

                          66852299b03e4a06e0f1e41edf905cceee62ca72

                          SHA256

                          f34c223e50317fd1543bf48f69a46de4d83567a661bac56e8a99ca8316fbc53f

                          SHA512

                          3d09c6a81f7d965200eda0449d87936bbc85a449dcec10c4943b111326b51390d192696a69df6b0a858f1ecba1e02d3b7e7e0de4566b5a790b179cbfe555affd

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe

                          Filesize

                          666KB

                          MD5

                          d7d8462a76f63f746f98d1d2fdc81f0d

                          SHA1

                          316f0f2f3a0e4fc0d01c8e2f7e0ee1ac6321baf8

                          SHA256

                          6339b4036d58f4184db48c684772c2a18f5ff9767c3b97437826b0e82218775e

                          SHA512

                          7062009c90cfec7e26464f87cfbdef61948622f82f4895a217cf310f02f51576703a7af0f4daf956d72dbae6bfd0e9d815559a046f64f7d983580343edaeca20

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe

                          Filesize

                          1.9MB

                          MD5

                          b1d7c4c1a1fa22d9312b567f60cd441b

                          SHA1

                          20ccf0da5cd82c491c121920849fa948d524ccb6

                          SHA256

                          b5db421bdb6b9818e3720e63c1c8b20feba28654e5a28b47a0f10cd5ecc68f17

                          SHA512

                          ec262a4c51cfcb9cf6d4a14baa8e41f324e476df1d693aba3c892a34ca2a2d003cf88f86e79c2b915f843299a0cb5ff7d6bfd0a36fe1c3574e78e35b0fff7daf

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe

                          Filesize

                          242KB

                          MD5

                          8713873e45f96547f9d6775f3efa3687

                          SHA1

                          b91903231562864a8b955b728e755233e811a1d2

                          SHA256

                          2cf876c23bff586953e40eaa7c2357e9712821110b5663e963e4bb0915fdae7d

                          SHA512

                          d93ecf06a28dfce27e855f7c101cf3d7df49bb7ab757c9321b60c7cf1594c705adaf87b423306bd8ac97953fc3004c4e9558f003d387a0ced71b043ec77031bb

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\d3dcompiler_47.dll

                          Filesize

                          314KB

                          MD5

                          ef5e388c75a264dab1679fce49d73d31

                          SHA1

                          a6a3044b6d637fa9f267b2ff0f07b5d29cf3aa2c

                          SHA256

                          7316b2d5fb2de34b0a24de1f112030e1ecd6c3ba686f5cce3d40e6380abb63e3

                          SHA512

                          7ba46050cc1eab0aafb1b4645f9da09391be20df0d85c91f34a1c9adf13942eccb2601134c26f481db5a7e3732c3c008b64d4048f5f273a53a913aabb91ce3ba

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll

                          Filesize

                          1.4MB

                          MD5

                          d9ac034d1594747bad97b2a0e4c9a3ca

                          SHA1

                          dd97a98e73d1115982490123a0428a64f82090fb

                          SHA256

                          02a03e51c92c6bdfa573e90483ef5956f7e7983a9e6cf3c62ae0e31c096307d1

                          SHA512

                          92d097ea96ed8a482dcb02bab2891957ae0b23621697d2015cb25d1d10f0bdd2a745db78800d731734323c5df71c3aed4c96c504b8f6d198b719a4517b76da78

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll

                          Filesize

                          1.1MB

                          MD5

                          f43305559db938e41d7734ff25e503ca

                          SHA1

                          7ca11607eae4b95fb0e04f333b2252bef0573709

                          SHA256

                          eaa90c7f4e372e8d1f06f9ea596d65e476f984c8fae4617fc6ac58e5ef76993a

                          SHA512

                          edc24e4b4234d89a0927b5cdab65847dc06703fa371ab7cfdeb1dba52e37fe5370488fc11888b25c1f81c782951d951d28cebfc70f6794b10814c248e01d9b9b

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll

                          Filesize

                          872KB

                          MD5

                          4c1909ffc09f3f8659d8578d09b41ac6

                          SHA1

                          6ba6ce33c5a1fb92271ed751b71a092f24318cb9

                          SHA256

                          6b8b761a45425318ecfed2757d72fc408f8bdbb6a6254c7bf717b61c44f735e6

                          SHA512

                          9a3adfa0c46b998085ef0850cb1bddb674206395ee39d3fa671a770cc46ee997f0f126b159135b20b00552c1652262adcefe2c45b7c0932a9c694a4b64056976

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll

                          Filesize

                          744KB

                          MD5

                          044759fca9f2f8734c9caeafd03fadfa

                          SHA1

                          bea1d8d4d13e3cde94b695628a0c876fb7aa9f5d

                          SHA256

                          43eac3a975fcaf25eeafb64cc6b27b8394a447fa5b5ba9d5feace42284dd2564

                          SHA512

                          4d6a5bac542e9e1abd94523b1916d9d5edbd3b88d0dcb75ff27e10aca4130959c96ca49ac2d4c534047d928ded88b964f15ccbe1be9b5fd85654e576666b7299

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll

                          Filesize

                          544KB

                          MD5

                          086d392f175085fc79905b8517627ee7

                          SHA1

                          87fbad8ce17559bbb0067be8623b66402f6c2010

                          SHA256

                          4bba3833eed5ca95c93a37c77b7eca3c2ce1c7139435e1a6928b432cc3fc6f8b

                          SHA512

                          804e591ed49df2a7dd2498575a84bad297c5cf312b76d5567f2829788a877f1aeca8ed8f29e7e69af94bff26b210b4c16b5742c2e9c51205af4907c6bf1974c9

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll

                          Filesize

                          262KB

                          MD5

                          4b986e689f81a022337bab1cb40236d0

                          SHA1

                          70361ee1109cd5d2c69d6aae3f8d76ad7dbd13b6

                          SHA256

                          5791762084aab6f6517aa2cbaa95686ef339c31e3671eea0a16b979a9adb4774

                          SHA512

                          de429358a6acd7243e6c5d50f2184f8c7c3860417cfef0f68331f7e823d90b0da43fd5e4776fdb03563c3d481108324ce068036380de8ea66b9eee1ac202b250

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\icudtl.dat

                          Filesize

                          1.4MB

                          MD5

                          4a6fa70842db25df259404f68f5c142a

                          SHA1

                          a28afe056ebd2a8a2d963371f904f617bbb00fcf

                          SHA256

                          c6bcd91547f28675e22ee7db26bfddaed1f4cfc6744f2da89dc8f6e5c50d1c28

                          SHA512

                          1ebdf8ded31a39df08f19f8d82741ee42c78de21190cdf23e6f07d2dfcb52a1b76d35eeee0b6eba975113e54bd777d3f1635d5e011202f3c6e2dca41765ec0e0

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\libGLESv2.dll

                          Filesize

                          413KB

                          MD5

                          9b1196474814fcfaf3b290370fa4f9d1

                          SHA1

                          4ab3b49735c9bbbd53925f7d919fd9020bca6203

                          SHA256

                          d55dab6c8e75e4dd2608fee5111b8b7ee2d3618f44570d38555a62befa014bfd

                          SHA512

                          4014c7e2a074ee9c4147224211d81c594fce347337d0a20d0f0e9119d2ccbabc6ccf82cc9c89bd776850d4fcdfbaa01cd1ea48117b091f3dfffa611da98a06b9

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\libegl.dll

                          Filesize

                          340KB

                          MD5

                          a0df7801247a270d6a5dac203d71e6ef

                          SHA1

                          b18fb7824e7565d2bee7a8db4d9804fcf383a5c1

                          SHA256

                          814269b0038341865287c8c6def33857f8ef18b5e72f41f54f09b3b558241bda

                          SHA512

                          ca0dbd203d7fddf825182843569f8bb8bbba9ceed7a94cba2c56ec38ca261ee3558ceaf86dc5fb718c8174e5e12c50ff6e7c3343b111d16dfb0395df8cf67aa5

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\libglesv2.dll

                          Filesize

                          390KB

                          MD5

                          9dd424283d305bf6ada0a6d5f36b18a2

                          SHA1

                          8d4a3cd2527d774a8d9fbb6aeeb14631cfd6169e

                          SHA256

                          e3a022e1da0595dad85d0d562aa5199d21b26b84e9e2d57811cb97412cc28e73

                          SHA512

                          8e106ff6f80b2a3fb81e07bcfe6a6bb37659b9f5c40e8d27adea2868e2ff307fa84dc022e321d8c90f1223aa3785422df7ba16a6c46efff2d53e98189c0f54b8

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\locales\en-US.pak

                          Filesize

                          115KB

                          MD5

                          f982582f05ea5adf95d9258aa99c2aa5

                          SHA1

                          2f3168b09d812c6b9b6defc54390b7a833009abf

                          SHA256

                          4221cf9bae4ebea0edc1b0872c24ec708492d4fe13f051d1f806a77fe84ca94d

                          SHA512

                          75636f4d6aa1bcf0a573a061a55077106fbde059e293d095557cddfe73522aa5f55fe55a48158bf2cfc74e9edb74cae776369a8ac9123dc6f1f6afa805d0cc78

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\locales\pl.pak

                          Filesize

                          144KB

                          MD5

                          bc72c8e2426765839539a3b8340fe19e

                          SHA1

                          630bd0e844e673454477b819c808b7e18bebe0db

                          SHA256

                          6a97c2ce05545607a59df2f0daef5da71058dc1e1685f26263b7110edc431755

                          SHA512

                          a0f2c68ebb8e5e2ab5ad682b5ce0b1dc955aced7de32001a0decfafb924ca94ef322605ddf69ba74baf18871cfddbad97fc326c43e5b3168019e21912f7da421

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\resources.pak

                          Filesize

                          1001KB

                          MD5

                          b7dbe646f39ee9bc4c186e2e34f023d4

                          SHA1

                          e19b20ef868650085e3ebf4201e6af6dc082b816

                          SHA256

                          06ab121e9802a5d90e49c01d3899ab1d6269c82bd5679b89efbdc0097ff9dd95

                          SHA512

                          60cc5ddc1978438f8a4c6542245f86affa0dfa26480cbf4b8c5f44112b5f0b192153f0e61d1940216025463ccbde343366293d7b9d0a14561b90106bd875392b

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\resources\app.asar

                          Filesize

                          1.1MB

                          MD5

                          0947e7a01966466bf6a1141abd7c6b9c

                          SHA1

                          1fdb1487a9e6ec04ae93fc1bcc1144c20d965e5b

                          SHA256

                          1fc8648c8c848f98964f06576e4269c937120ea27a908d29454bee6ebbf688b9

                          SHA512

                          e523003b98dedc0ecae8a210434ce3c368b4fb5622e51c0ace7de12e9c122f30006954a2ef72ac864c4c59ddbcf86b2c93d01b9c9969b2f173e1bbfaf714cc3f

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\v8_context_snapshot.bin

                          Filesize

                          713KB

                          MD5

                          1270ddd6641f34d158ea05531a319ec9

                          SHA1

                          7d688b21acadb252ad8f175f64f5a3e44b483b0b

                          SHA256

                          47a8d799b55ba4c7a55498e0876521ad11cc2fa349665b11c715334a77f72b29

                          SHA512

                          710c18ef4e21aa6f666fa4f8d123b388c751e061b2197dae0332091fbef5bd216400c0f3bca8622f89e88733f23c66571a431eb3330dba87de1fc16979589e97

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\vk_swiftshader.dll

                          Filesize

                          410KB

                          MD5

                          aaac00dccf30926e83c9d0de631f399b

                          SHA1

                          75418dd068ebc128937594640bcf971b16fa02cc

                          SHA256

                          f7ad496182568a6025d5290eedc6bcb7833f78c212f8eea0503ddbc594ca8c0d

                          SHA512

                          9433a8db4f918cd0d7d357ae515c61f0daf47aa3b41cb064cb10e1200771226a697c9c3ef94e74195fe69031345c72c7c9652bb7d411792a6e5b1e9d20218abd

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\vk_swiftshader.dll

                          Filesize

                          448KB

                          MD5

                          a875c99bb5fc22e476c31da7d84be6ce

                          SHA1

                          34660ca769ee9cfbe9e73ed1a7ccab2a141e1ad5

                          SHA256

                          7e7e215e13dd1c717dbf131da3ba426086a03d8c1d5ed884d0f6c63bef0c7676

                          SHA512

                          f3d11adb8fc028c3065bbaf9695b733ebd6d9177a7015d296148a8f13375aa956f438eeef48c4b05b51138a8f6de4edf37e5dad505cad92cf192e9554ef4a1c5

                        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\vk_swiftshader.dll

                          Filesize

                          768KB

                          MD5

                          a1878f4db51b4037aa2afea973055e16

                          SHA1

                          4b1130f0b972dd0bed983bc872c848804e048cf3

                          SHA256

                          21f440aebfeab21f9b33bd1a7fb185201a9999a71f1c427db1dd5c36e1f527a5

                          SHA512

                          b38367f0fbaf7fc480ff25295aceb434807ff4be9ecd79af4aedfd7f69bd28c712809484381711f0b8062f7e2f3f7bec8817659898281b09c338b1745c0eea5b

                        • C:\Users\Admin\AppData\Local\Temp\f9ba0571-a595-4909-8af0-dddbed0f0b65.tmp.node

                          Filesize

                          495KB

                          MD5

                          be94689f0cf2f4e36ef77fff3b573460

                          SHA1

                          f7187d89237506e6f50db5418c25b79cd1b3d271

                          SHA256

                          a8ae4e1f6ff70c724282b5d468ac463012e9b0fd5b52997116946fdb2e2ac34f

                          SHA512

                          83078c0a3340d912f42b6b67f6dce624e6395fede93043cd4f5b391c2547cc68aa6d147a70b523c9e8d646d4913a92b96d59fda0b28ade83c478693d8a256da5

                        • C:\Users\Admin\AppData\Local\Temp\fc13310b-e4c1-4c66-ac9c-6e5c2337332e.tmp.node

                          Filesize

                          281KB

                          MD5

                          4cef69a682d9b896b4fff99fca80a08a

                          SHA1

                          85fcae77830c3e55badfac97badc97ee53d5ada8

                          SHA256

                          bccc1ea670ddf3560352327eac402e7a99b5a585bd1d2af02bff8111b6ee9738

                          SHA512

                          cccf2aced4edf15a3162cdd867f623c73895b4962910e1d6a57afa17032247becd6378546206dd4705b3ca5f54e6d063a56a5ca54223bc5a67406cfcc27b2587

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\GDLauncher.exe

                          Filesize

                          535KB

                          MD5

                          321813030faee0c08f0770eee5d5a5f7

                          SHA1

                          db8721580f06a388d19ccb5eb2bb4305349ccb91

                          SHA256

                          6899a4603230cad53faec822b471e449fec6551d3d9b2859af1c89734d62d5b2

                          SHA512

                          bf8f2cd9c431a69c39db22ab179947db7c129711bb53f20c4296e3008af7caf249d9f4666e5490d1a94b70137c48fb32bd4e3bcda61d622f95d0c45db9301e0c

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\LICENSE.electron.txt

                          Filesize

                          1KB

                          MD5

                          4d42118d35941e0f664dddbd83f633c5

                          SHA1

                          2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                          SHA256

                          5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                          SHA512

                          3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\LICENSES.chromium.html

                          Filesize

                          413KB

                          MD5

                          a8f806c122539887f8f1123e1201e5e1

                          SHA1

                          510f232598a7696bb68a57b7123aedd2389a9997

                          SHA256

                          0f3e1e080c3040a1f3aa977e2ed71e5837382b401a21978fae3c7c35f2a84f63

                          SHA512

                          b09a6f9ee939c21db45fa99a0176ddb9428b2b98adc2316360fce0ab98a62764912f6d9cafd48f5becdb9431830a8fdeb57a3c18fafb54e5290ef91c92def517

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\chrome_100_percent.pak

                          Filesize

                          125KB

                          MD5

                          0cf9de69dcfd8227665e08c644b9499c

                          SHA1

                          a27941acce0101627304e06533ba24f13e650e43

                          SHA256

                          d2c299095dbbd3a3cb2b4639e5b3bd389c691397ffd1a681e586f2cfe0e2ab88

                          SHA512

                          bb5d340009cef2bcb604ef38fdd7171fed0423c2dc6a01e590f8d15c4f6bc860606547550218db41fba554609e8395c9e3c3508dfa2d8b202e5059e7646bdcef

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\chrome_200_percent.pak

                          Filesize

                          174KB

                          MD5

                          d88936315a5bd83c1550e5b8093eb1e6

                          SHA1

                          6445d97ceb89635f6459bc2fb237324d66e6a4ee

                          SHA256

                          f49abd81e93a05c1e53c1201a5d3a12f2724f52b6971806c8306b512bf66aa25

                          SHA512

                          75142f03df6187fb75f887e4c8b9d5162902ba6aac86351186c85e5f0a2d3825ca312a36cf9f4bd656cdfc23a20cd38d4580ca1b41560d23ebaa0d41e4cf1dd2

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\concrt140.dll

                          Filesize

                          324KB

                          MD5

                          1028995446d0032530461be30ca98f48

                          SHA1

                          18446678152e9997eed9c02995f957d58a8e8f32

                          SHA256

                          d404b49c25cc76dc4c86e1d82fc23799482f6509e85a73ed8177efc320ec0195

                          SHA512

                          adb9ae577f082e0246cae5c804fa4cd08bcf54ce78eaca02d49b9b1b262779667a251e98cae807aff50fdac504b8cd855ce4d786f587d02e0a18f6ac8e0d882e

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\d3dcompiler_47.dll

                          Filesize

                          1.4MB

                          MD5

                          f14a24e7ceb2b4b68e8e2aae77d5a938

                          SHA1

                          711935bdf6ed7f18a89029b77d25ebe89296cafd

                          SHA256

                          b747d77120f112602cc7bbf899197bc21ab6f7d2280fb2e6cfa0c558001bc30c

                          SHA512

                          3828e71f2d9da0033bb71d504e5f3b0d6c73c9ceac2029e03427354826bb0bbcd4e9ceda4766f7efce82a74c3b65b916dad70bcb14215356f3ac0537e1407d49

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\ffmpeg.dll

                          Filesize

                          1.5MB

                          MD5

                          ca983a184e3eb10c77487004babad08f

                          SHA1

                          ff7c66ff7f401fc85624e8f538799f272f216c55

                          SHA256

                          2c2058dd0025458d81ae543b73c331b0b0192cdf7feadb6af6492e1ee9c8d267

                          SHA512

                          d1144526ae4e97ae44b38883d551da4f2cbd8e373a86137f0609631f7402d9893e36c81ca1f3c3dbc8bfaa952c4f051b5f0e5bfe2d0c9633bbbb0251aa858206

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\icudtl.dat

                          Filesize

                          476KB

                          MD5

                          961d5addc8883da455b18f733a517c51

                          SHA1

                          4c7c251133dda763215a2ba9b24b16b2d4442d82

                          SHA256

                          065881dd33f75898e718d481597f2536a9074b546d14a57e2ef82cafaa6579fe

                          SHA512

                          c6910d07408bfdde08b8385c692047ba9f53e2c99881f99d763373780eeddb250f3003ee9aa868c98980a1ba9957400c7a7c4c7446fa80c76db6f7ab2efe1986

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\info-about-msvcredist.txt

                          Filesize

                          393B

                          MD5

                          5869d7303e54026c9adc33e5dc63d70d

                          SHA1

                          484058ada000cdaf04b337ee03445a4989629d7f

                          SHA256

                          9329f7579fd8ce5f0503c2458ec49f1f42cf587559d0902f9954e3cf170f0a34

                          SHA512

                          403e01d01f8eb63e57a1ba7310282858aba499d5243a50ea44829ef8c312dfa1600873a5240e52afac17877512ed05e4f0d89082af92309157bf02cb7fe34b6b

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\libEGL.dll

                          Filesize

                          460KB

                          MD5

                          5de7e395632af0d31d8165ee5e5267dd

                          SHA1

                          740ae64850e72e5ab3d49e3bbc785399a30a933e

                          SHA256

                          44febbc02e69d492d39e2cd5d025bbf0d81b1889b37725bd700cc0c21e5ba22a

                          SHA512

                          788c3fa6d58b8d3ae258628805ed79d612d9e15e92dca39c27cb621a2a9aa42669a20c11b5c9a912a2d8cd68b0a7a53f7689e729067c6d87a8063e5b8b2c265d

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\libGLESv2.dll

                          Filesize

                          399KB

                          MD5

                          13f5b11e5af6a7886568b92cb391517d

                          SHA1

                          7130f2cea805324e5962c3a727c102a445fa1cd7

                          SHA256

                          e43fc8d684550eb13d3278e52531fa962e870fae65e68ca4d6a883f52866376a

                          SHA512

                          c4891bd5b293ac8bd890afaf1fa3b8260ffd8c4141d2911d24ef520ab52cae2adb2b472bc21e1b528a41b39dd13f733f92c5fd93ed525b75d04b2c9cebed9196

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\af.pak

                          Filesize

                          125KB

                          MD5

                          46f982ccd1b8a98de5f4f9f1e8f19fe5

                          SHA1

                          13165653f2336037d4fb42a05a90251d2a4bc5cf

                          SHA256

                          9e0aeb9d58fecc27d43e39c8c433c444b2ce773cc5d510fc676e0ebbcab4bddf

                          SHA512

                          2c40e344194df1ca2d2e88dba0cb6c7ef308dd9c83e10bbc45286b5e3bc1d98a424a60ec28b2700606916105968984809321505765078d7caddbb1c4d3f519de

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\am.pak

                          Filesize

                          105KB

                          MD5

                          89cfd3ec98d027c17029aee51a5bb171

                          SHA1

                          1ba9daf5b66a86d856371b630d1ccc63b92d68af

                          SHA256

                          6076dedfcae1f731f53c1a8982f3f1fdd1a99d2c4fcd22d0b070a64b49ef6304

                          SHA512

                          fb61124fdd0869642a036d0ee52bc60af237bca8ed102cb87f35e24b2a146d36abd041d2da5740f3eb62930127e6688a36458986f0ffe139580c836754a5b76f

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ar.pak

                          Filesize

                          207KB

                          MD5

                          1b55e90455877384795185791bc692c2

                          SHA1

                          3d7c04fc31c26b3ab34bd2d8f4dcfbf4d242bc46

                          SHA256

                          ac44c459f86c577f1f510c0b78a8317127522f0d2f80734b6c9ab338d637d4df

                          SHA512

                          bc3dc023c9af551279a4d22583aedf79e63ada46c79ea54b7da18c12b9acd726e4f534e26789d2583036c382bf6a8862335ca72fc8b510ed065bf895b8d7c3b0

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\bg.pak

                          Filesize

                          114KB

                          MD5

                          b363f27a8336e80c99236b77df9daeb6

                          SHA1

                          09183388ec4b55b69da2794896e60fe887601349

                          SHA256

                          247001d5fa1d561a904d2861d1fbf8af9ee3eef1270337f6af8a80536a1b67ea

                          SHA512

                          27eb34fd787ac8fc6a92acf38bc1cb2418606befdee7ecba6b1cbb4edabf670e7f5b685dc6a941fa0a4e762720f176aba743aea3b3956e2f131f95e2151ea95a

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\bn.pak

                          Filesize

                          206KB

                          MD5

                          3d98c59e26b33ee1b5126a6e88344810

                          SHA1

                          a91c8580a06aa757eba0e6227f07f4c8775daf8e

                          SHA256

                          a27c0a03329e33c4307598d9fd7013300bbc2c787180f30e2923888e8cf16496

                          SHA512

                          73f5513e7fe9960d61b3a32c5dd10c71264a66fd28ffd0cf30e7c42e5c3e6ac224e18101332086ef7653b05088453350e668df8ee1d10632510c1c36d25eb758

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ca.pak

                          Filesize

                          140KB

                          MD5

                          8fc109e240399b85168725bf46d0e512

                          SHA1

                          c42c1fc06b2c0e90d393a8ae9cebcdd0030642e5

                          SHA256

                          799ac8c1fa9cdd6a0c2e95057c3fc6b54112fe2aebbb1a159d9dac9d1583ca62

                          SHA512

                          84a51f291d75b2d60849edbc1958a50cfe2ac288ce716bf4827038b47bd855a65d04ebcef6f92d78e31a27daa63f07772149798740652078e27ec68930ec07dc

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\cs.pak

                          Filesize

                          143KB

                          MD5

                          df23addc3559428776232b1769bf505e

                          SHA1

                          04c45a59b1c7dce4cfabbac1982a0c701f93eed0

                          SHA256

                          c06ac5459d735f7ac7ed352d9f100c17749fa2a277af69c25e7afe0b6954d3c0

                          SHA512

                          fceca397dfc8a3a696a1ba302214ab4c9be910e0d94c5f8824b712ec08ff9491c994f0e6cfa9e8f5516d98c2c539fa141571640b490c8dd28b3a334b0449bdd8

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\da.pak

                          Filesize

                          130KB

                          MD5

                          875c8eaa5f2a5da2d36783024bff40c7

                          SHA1

                          d0cba9cfbb669bbb8117eee8eccf654d37c3d099

                          SHA256

                          6ee55e456d12246a4ea677c30be952adfb3ab57aca428516e35056e41e7828b5

                          SHA512

                          6e17692f6064df4089096aa2726eb609422b077e0feb01baaa53c2938d3526256c28fb79ef112164727202cdd902aae288e35cf894c5ef25fecd7a6efa51a7e5

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\de.pak

                          Filesize

                          30KB

                          MD5

                          11f2e1cf6c1e87e34ea0804284680ec7

                          SHA1

                          d8015bd71b45af07c1980afc464fbbd07d611a8b

                          SHA256

                          b2b42d623db5125ebf94f4a865bbfa236fcde06728bb26f128959b4ac0de528d

                          SHA512

                          e515ef3a8b49e8555de62a9a859d1384af714596a32cd8bfa457f121997c7099e0b1a87e59d0bfb3de7d6d538c9384a88771988aae12be130f0cfbf84a7a7f85

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\el.pak

                          Filesize

                          10KB

                          MD5

                          ec615a6a6397543a90d9c62000aec247

                          SHA1

                          6b89783ac526a3672ec3c599382eb0ef4a35afe9

                          SHA256

                          db62855fa33f216a3f323ef91b2983732c318ebf5b1a63d3c814c6e8efb5fe51

                          SHA512

                          884827ff7ff6b5a137c298db41cf0447d14b68fc2ddc735142aa1121117195be1a0f0684cefd2c1d877a812638fa707ded7adf68e556729d95317c51ef74af40

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\en-GB.pak

                          Filesize

                          81KB

                          MD5

                          80227f98af91d6d807e7e4ef3a10385f

                          SHA1

                          3c0702172adf883aa9a8d2160abf714793283a98

                          SHA256

                          aeb7a61a51c30343ab2ddcb59a99029c48749ecc6fb3fbbcfed61f442eeb8c23

                          SHA512

                          81744a8787e9c22d82e2d479b1b743bc7982b34821844f806f996a56406c3cb061a16dadb476ced8845a4ab2bfbc5925c4822d2bc1b65acbe3d34906965ab001

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\en-US.pak

                          Filesize

                          64KB

                          MD5

                          5ddd57c073c4f4f903ed10ebadb219f0

                          SHA1

                          ae8add5f84181038aab80f1e623d11f4ad850923

                          SHA256

                          6dba7babe2ecb0172e484121097308ad74600f6761ccd9768d88fae8d63c6755

                          SHA512

                          95582ee3fdce7e3c209de3cb4577f095549bbe2da17b7f21b69e1a8978e0c4a0e207852ab53ebf9ba9e5ddcd6a888ee62e4733eb3bbadeb62cc9ea2f4d20e631

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\es-419.pak

                          Filesize

                          139KB

                          MD5

                          d25865c02378b768ef5072eccd8b3bf0

                          SHA1

                          548dbe6e90ece914d4b79c88b26285efc97ed70c

                          SHA256

                          e49a13bee7544583d88301349821d21af779ec2ebfca39ee6a129897b20dbbd0

                          SHA512

                          817a5ed547ef5cca026b1140870754ce25064fca0a9936b4ac58d3b1e654bb49b3ffa8186750b01640ac7d308bf7de2eadc0f34b7df3879c112e517d2faabc94

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\es.pak

                          Filesize

                          57KB

                          MD5

                          8c3407e674be41266ff5a805c911b5d8

                          SHA1

                          c9e0fa7c51d6d946272c3ddb8574b7a5ffc700b8

                          SHA256

                          79b4e8a7dad61be451d79179bd2dbd06a1ef8b1503bbf1251a401a8ae43e1b6a

                          SHA512

                          9681852b2d4042b3a673c53a7e0839d1e77eeaa630009c5f76bd7c2e0e7fb016d193b845fb24f0d3449930947493c39394b91e493f363a092f98149909e81c53

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\et.pak

                          Filesize

                          33KB

                          MD5

                          b3edbbe30b8cbf83589e5333e9502733

                          SHA1

                          286a0f22aad6c59525d1f805993b4c4cf3bd455a

                          SHA256

                          68d6446e5a3840af0da180a4616ae22e1eed8865c470386669d8add2fc63b8c7

                          SHA512

                          a16e7e1e8134fe561dfe72ee9693b527baa11baa6961fb05ee388b1e0753ab3480ccaf9939f34ff7976fb9b8d8174fb99466e6142793cd981827d536ff5aa231

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\fa.pak

                          Filesize

                          64KB

                          MD5

                          bdaaf47ca351ae90e85cd1a198188340

                          SHA1

                          c2f0543842c94bb740cc6d9bd19c02d3fd92a539

                          SHA256

                          708f6d8de065c2bef8952ea7a350724017391b0a399328f5d965828f4c8cb440

                          SHA512

                          2b2d2c7a0612be1e4642393829193c63c65f9050e12c435597d6cd5f451a4b847d6f62a3087b22d5922a11f70f9e21c1e5bc562c509e823bad3c129d0affb088

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\fi.pak

                          Filesize

                          59KB

                          MD5

                          668405e3ae8ec1e5e030ba897f355bf6

                          SHA1

                          888e11b4ea3a30d99463ab21e8143ea31b01ba01

                          SHA256

                          95b2630a5d399437455b3d48a5f909c90be7f486edd2e9280f04fe46b7113e0d

                          SHA512

                          e961e4c4d46e18fc4a8fa997cea6f3680d31f968589aa0fb8d07cc54bbf6db9689a196e909c7e2336ed29bcd4f0c91f56ed1c81bc6c7b1daf5308b563e6bc6ac

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\fil.pak

                          Filesize

                          144KB

                          MD5

                          cb9fb6bc0e1ec2cb3a0c1f9c2dfbc856

                          SHA1

                          c3b5900a38354ea00b63622bb9044ffb4788723b

                          SHA256

                          945c0160938c3bcecda6659a411b33cd55dfac18814bed88575bfd100c53d42e

                          SHA512

                          6ed77d0fbbb1186ccb7493708f55f8a2c3005a1f1da759c16289713a853bcad4a2cc4846874d67f722f461b1950a763508a91a7970bc0eb5da686206aaa8489b

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\fr.pak

                          Filesize

                          149KB

                          MD5

                          bc286000070c9a918a8e674f19a74e12

                          SHA1

                          41221bb668e41c13fbf5f110e7f2c6d900cdffd1

                          SHA256

                          d641d9d73262ca65a613ee0395204435d6830316dd551f8992407ae77ead4b64

                          SHA512

                          553dc84ffd09dd969802fc339ab20f6af3c36442c1ea23e4199519f2c5fb50be79874ae455ce5ff44511a3adcedae7f3030d13e0ecf2b456233d5f4ff186a5dd

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\gu.pak

                          Filesize

                          4KB

                          MD5

                          c2ab06430fa9caa2e5662507b6135c44

                          SHA1

                          1c7b0ae57db6a7df4971d27c945a54f03dfd7ba6

                          SHA256

                          31c3fc79d4f563ac2d91324f185c23325051a4746b99252231656aedb617b2c6

                          SHA512

                          a1dd8cd905930a0317753f654b591f475af2cef606d6efa188e828cad8c0da47fdf185f5089aaffbb3c8ff965d6057b8b1ccf5abc1cd67f733a86a2d61c17daa

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\he.pak

                          Filesize

                          6KB

                          MD5

                          9261d169134adb88f53e876fd9a9852b

                          SHA1

                          af08914985ba12848c2bba95deed26b791defc85

                          SHA256

                          dc810a7101f15e968fcbbba1e2e98f2af2b723fb58ff77641fadaa1caa79349b

                          SHA512

                          c466409c8df73355fa9c0d7eb96f0ae9abe14ba5baa75942dbb96d4292e3dcf7c71f6851b26d32e9bb09487a45cc20f4fcf800f3d13ee0eaead053822ef4c5e3

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\hi.pak

                          Filesize

                          15KB

                          MD5

                          1d54e584312dd357cf3c50afb78b3bc9

                          SHA1

                          bee5c4c2550593e57f0a32b10e5177c7caac0d72

                          SHA256

                          314fb82a2bbb0c3130f64b9e2b34c48f54e4b0140c182dbb7f8978d83c91a8f5

                          SHA512

                          d3d7680b7436dd6cd9c917408570ac9780f4a3ea3d188788ce00289b534893bffbf3c695ebde7852f844f56cba13ecadb91672553ce1e5e336d3202a442dffb3

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\hr.pak

                          Filesize

                          137KB

                          MD5

                          209efaa890532ddbb1673852e42ded7e

                          SHA1

                          8e9a3e643183d4cbdfad9fd2a116e749b5313a95

                          SHA256

                          3d01f9d2c51efa0c0d8d720dd832493b1b87d2429970396c42cee2199e7bef40

                          SHA512

                          5410b31ab46ccfd29b750f39d3796a533ec0c0a7b7b31b70977f59f348dd4190edc00c86db8d5b73df2117f27fd283de2057493c081cef69d04ad9894eb5c05b

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\hu.pak

                          Filesize

                          149KB

                          MD5

                          7317adfcba87621963e9cb2f44600e2f

                          SHA1

                          0398d795f9a3cde03ae85e8cd2c4723e7ef5f7e4

                          SHA256

                          6edcdaf17483c4b7b74d9c728c3f38d9e4704bfbdb618b578c7ccb6bbe6e824f

                          SHA512

                          e8ec0df2ddf67799194e8d3f722b5643553fb05026bd5f8d933d1cc18df6a641eb1b810e22114b44513b57a005d326b91a1fcf1c470a636cd42c5bc5fa0f254f

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\id.pak

                          Filesize

                          124KB

                          MD5

                          f6d153fa3087dab3fcef255b5afe8538

                          SHA1

                          99f123a133d3ce1a70349a7d1948a8d57981e1c4

                          SHA256

                          fa38d911dec71800d33802441412f20133e960bb316c79161bdc7f78ea1af3d7

                          SHA512

                          c092339a2a64dd10a45b516ba19013ad096c4c43d51df33e4c779c9ede6d71bcb59c18d5ba568f4876c0b5454ccdf05a1e632be0f97db5b4eaadf263e7d1967b

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\it.pak

                          Filesize

                          138KB

                          MD5

                          23d70fc1cc74275719c4f882400150e1

                          SHA1

                          e8235d0bd4dbfbd708deb80139f0acb1cc0fbdef

                          SHA256

                          75b37965b88933ba32119ebdd13cb98c54300b1e1e312080947eed6a94fc70b0

                          SHA512

                          ca9a6fc273d5b0b656e902fb87f8792de604a3b6ce598dc577d08541ce9f35256849b1503f15edbe5d1e1d5785cffc38ed12650d1d026aa23b5ce6f9c3ac4cb4

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ja.pak

                          Filesize

                          14KB

                          MD5

                          095a8604627613de6c7c35716fa9cd0a

                          SHA1

                          2869d6f012fe482f96023ddbcf1f17b3aa5bf002

                          SHA256

                          34573289e4027e63bc4091f6c69a2bc8d59922d5991050803779f0b01bc270a5

                          SHA512

                          29fc503341373b966a98e1771dfdbbacdd98a05072f33f9dca6667f3ab8dfd994a99d0c486cd569348d48a4d9ef81c7492c002423ab72e56a00a328a5ce8b97e

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\kn.pak

                          Filesize

                          319KB

                          MD5

                          66867a2133ef0c73f385af7d5d2eed91

                          SHA1

                          8ca6e7e6d679255c2c151d38cf70a5f25cce059f

                          SHA256

                          407599a388bc151ccd2561181ea90ff620f4cb5c767317af8ca4748927ba7f35

                          SHA512

                          482c0b75c921470866b7c6ccf09cddd59ce81507e8df7a2158d3abf08c7201ebeed67c1ecd36f5cb015a8833ae9f1917ab6118f9f0a959364de958729295f37c

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ko.pak

                          Filesize

                          138KB

                          MD5

                          27705557eb4977c33bc69f27c2ee9f96

                          SHA1

                          b0297538c4e68515b8f65d44371cb8f4cdbc489f

                          SHA256

                          de71f906636d2a8f5833a22e92b61161182c53e233b75b302dbe061ed57e9bdc

                          SHA512

                          53c8917049d72a9739bf7f2abdbde3120ed3124967cd9b1b71b172b7b36ed41a1ff970d3841c0f5eb5b53616dd9f8e03f65a79e6a6964b83da2c84174c1dd56f

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\lt.pak

                          Filesize

                          151KB

                          MD5

                          a3e29f4a3ca6f2058a6f464e49f914b6

                          SHA1

                          3fc632eaccf91e86b365d444e7acba6f9302aa5c

                          SHA256

                          ec70edca70373390f028aa751a74057fb1c2c583c310492723a228c863007c47

                          SHA512

                          eec22e3347affc0eb0f9452f3b9b239e8b714148a39be83ebe7979bac706a942da3a17de01e9a1b89dfec9e970692c3e9fe566750092fc139325ae25ed1c3e04

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\lv.pak

                          Filesize

                          149KB

                          MD5

                          28eeee40b2722e1cc42905c70367fbdb

                          SHA1

                          fd82465b1522d314b295207934a7641b3d257d66

                          SHA256

                          026e6a4ea0fd11c07375f0532a0756bffef585889a71f33243a116c462b0c684

                          SHA512

                          a99d203ce67a3e5d4f831064f83c730b045fb1eba47ca804ce6c407e04240f4c51b4114446c3494e2985a1109695533d1b1c5c7594a5555276be366c07d0b855

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ml.pak

                          Filesize

                          337KB

                          MD5

                          a7f6cdc17eddc1550260489d478ec093

                          SHA1

                          3308eb8f7d1958fe6b9f94602599cdc56460aa89

                          SHA256

                          01a0e2f809fed45b9b67831202d297c3221077fa2dd84f3b635ab33016a07577

                          SHA512

                          42132ca4a62bd5de5928f8c313c930c1fab0ad918fe08612ccd118e421eca768956ad42f7551d6ce58d10be6c34cae7a2fef518bde9f0641c339f7af70f42688

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\mr.pak

                          Filesize

                          1KB

                          MD5

                          eac9f1ea9743f92a64e3287e524b77a7

                          SHA1

                          1d193ce01791969d795fc1d810ab055aec4ae2fd

                          SHA256

                          ded40d713fe05aaceec7a880f882de1046ff9708940cff05e1de91be0d6e856e

                          SHA512

                          d70cd5dcc76062802bfd0493d2f308dca7cc6c04ff3c05a6791981d41ba345cdae997b5964d6281118dd8ba79eb3b5cc64edfc67cae0828514bb2b00d00f6675

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ms.pak

                          Filesize

                          21KB

                          MD5

                          de81e3f94b307a3d1dbf579670a9e398

                          SHA1

                          cf7569bfd32001ca98dfa02301a51384f7bc6a41

                          SHA256

                          f6e70fa445f5ba1b967c84f670941620c8919891b6983f6d088b7fd723161d92

                          SHA512

                          93eac6bbde1ff77fe1e1d3b8c06d5c3b9a188179571fbe53d97fa294be9d3506e30fd775adc4233a7fd5c4159aaf13538ccbd56dabccc35fcb43f8c621d145b4

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\nb.pak

                          Filesize

                          44KB

                          MD5

                          ea1240ed6550cce7ce336cc6d79253b6

                          SHA1

                          f545057973c06bc80f6a5c4b0f0983de4aae84f9

                          SHA256

                          27c63c1b34d9333cb700f490a38e1b5bf9ec8b73725b226b6fbed61b1985d410

                          SHA512

                          528fb6de05ded39d05ae77992a9b687b62a2d40fe1aee67dbbd82e798e2583c71d694be0ef376ee93ea3890e02dcd5f99f7f7a85a20beaa81f2e95391175c4b8

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\nl.pak

                          Filesize

                          131KB

                          MD5

                          1e5b9d923d5f8cef49c913badd2784ba

                          SHA1

                          6e42a558a7207b2cee2452263eb661843fe74d0d

                          SHA256

                          7a7be29044bf2fa9459a90dcce12ed531931660ba680dec8f32ad8a3364d973e

                          SHA512

                          e4392f91392b79fa14c3545c9733deb128f399163dcbee698bf51b2218b1abab6aef45c35130545ddc86626012599e4a8bd77205baa735c957258539c9b6d484

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\pt-BR.pak

                          Filesize

                          137KB

                          MD5

                          54efb4172a7110a567ad87f67cfcd551

                          SHA1

                          ea8eac6f2328b8a1b27249fced7c16154060dcf3

                          SHA256

                          c17ed07165ec47de5acdfa7e4783af4b417843e5f232e9f38ce02138c8bd1742

                          SHA512

                          ae8aa02e9bcb3bfd8b39329a2c37f789484661e283dc63297e1ec2dd5d14558b349c312990048dc6a03cc7040a1c6fea2571c6102b1a61a638f9ab615f5fc938

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\pt-PT.pak

                          Filesize

                          138KB

                          MD5

                          f7a822e3dedaa3df046c3172613e275d

                          SHA1

                          14c21d2cc296197a9a618f21dc103f0d6749b77f

                          SHA256

                          e2e84e23275190865c685e0712530245e35dc63ff82c4e854068494192917f3e

                          SHA512

                          0d08fedb423e9ea4f9ca54b55fcb6a88c4f4aa7ed71897b4a7625f093e8dc05733ec52e4577709dd4e4c7be001770e1dc85c0e10e0dad883f3291c515736b7c1

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ro.pak

                          Filesize

                          141KB

                          MD5

                          5f6af740e111066ba5245a7fb58c3d38

                          SHA1

                          bb09d9f89ec6e1db0a45cd15f84930dc34011b16

                          SHA256

                          b9fee8754a5307751f197d1968dd02e163dba30f09a36c72f88b63b4ee5bcd26

                          SHA512

                          d2c74477bfa01e8b5b51fbb4393368dc967be362833cc2ac61fc989f41896f17b957d10c0e03b442fba1f3d6059637f355dd6e537e6e00c382eaacfc1b5d64e2

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ru.pak

                          Filesize

                          225KB

                          MD5

                          822750ab24d9ef1a54f3d987eee1acb5

                          SHA1

                          dc99948cfd029cc9d98c10e487625832db8f1855

                          SHA256

                          3906f069e6e2a3a0235826e9382624e7a4cfba309f00bbd0963ff0c9f2c179fa

                          SHA512

                          b0d9521e088c80470e5d15e310bf7e3e27b16464c5349f2bd6f29a78e7fdc7da36b3b1bee68e4496585b0e2f20098fa6b0b3360c4b43f2ed9718d292755f5be4

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sk.pak

                          Filesize

                          146KB

                          MD5

                          7cedcf98e68f4001cc13f2b761571681

                          SHA1

                          fba32c46564452fee5697777b6d3c60d69589528

                          SHA256

                          e6509f7a6c6b9912f2875c7efa34434ab9562df3cdcaf0546b6370d594ca46fb

                          SHA512

                          c90ca580c5da2fff68b5957940d9b2c377cb07632b1fc0c8a23fef9a076cd05da618890f197f5b2f7314583fba89be083ad180335201d28c27a7c8c21a55c72c

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sl.pak

                          Filesize

                          139KB

                          MD5

                          c08d0d08fd48822c603a27aaad4e9557

                          SHA1

                          8b7d616ef86bd955cbdf68197cdf748aaf99240a

                          SHA256

                          ef205cf8911a96d772711675e75bc8df5866ce0d9d44ebb110bc07e4f340ff65

                          SHA512

                          480a23a25860616be8844ce29042fa15cc7f360e2c53b367f6701926b9a6df72d82ad6c5dc7c0fafd537202d4ea7c44dfe24589fb4a4f52b4440629865f8c19e

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sr.pak

                          Filesize

                          213KB

                          MD5

                          7cfb6dd166594df07bccb7c08774a667

                          SHA1

                          1c06a8adb81c357909ade0307a67a122c94c0cb7

                          SHA256

                          c3b5c6965affb7f30dcdb5fdb485767e83f3b5d694865a677783c64e3b84934d

                          SHA512

                          92febe5a65c90f105bd7609e2eff2626bf0e22b186d73d6c1aeb0497e49d9c34b2bb22d26e0abde4713da2c7cf51296723694ee9bc1decc5071a5225f60e650c

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sv.pak

                          Filesize

                          127KB

                          MD5

                          b4d3ab3791e862711986bb585c1676fc

                          SHA1

                          2123c8879a70728657e72415d7056aac4a1527e2

                          SHA256

                          080ce56662a0a32a4164ba88f9c5081d7c43dc1908412368a70e789e1adcbf66

                          SHA512

                          b904f1741079a8c7ed7647efe42e9d7b9be403079de7e512539b70bc653e55420a3aca4b599e8a9d440245a61f94124476b3a5afa43b39ff1aa48cb48fc5c15d

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sw.pak

                          Filesize

                          133KB

                          MD5

                          a5f4010de863114025b898d78036b336

                          SHA1

                          0fa93fee8f60d1bf2fec4e01c5306404e831e94c

                          SHA256

                          8c58adbff7d672154c6f399ea29b549005460d80679e1f6cf997d95732857c30

                          SHA512

                          7f8b00ae7718f39c0ab91f3f63a3b5062d9878f224417282c3ff43ae9c88562a045c54f7c6f9f7447119a16bfd0ec40b48f762a52b64bc384ec80f53898c53c8

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ta.pak

                          Filesize

                          335KB

                          MD5

                          ab1ece31afe29124d183b3826c7ef291

                          SHA1

                          e707a983f039310b867bf4b502165f1f512b9818

                          SHA256

                          5cabdecd2a89bd97782c13d9f5b24550ea00b28750cdb26a7843af7e75e34b22

                          SHA512

                          6510d54c2dd177be19ca6b250e936fe0e26036aee7bd1d48e141cffde743fe03a02be0cee22642c3e8a702b2277d7bf307bde69a863855bc65a55425a1f2f884

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\te.pak

                          Filesize

                          312KB

                          MD5

                          11c4c1ef8708db1f742333e71e312831

                          SHA1

                          ef432cf1d5df168039cb3d1b5f4d34bab76cd475

                          SHA256

                          9889b8d2e5f5fc5ed199831954af7b05028ec7a68f448b19ba74d91b97c223d6

                          SHA512

                          27c73d81271612bb2e4925d2091db9119859080484f5fa17536291c06bacdffadb1962ce56d0979d4f1f49add14990d73c5bafea45ce48141a36a2e55ade756c

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\th.pak

                          Filesize

                          265KB

                          MD5

                          5abd2a1b2749449a0cbba60e32393f4f

                          SHA1

                          31097bf4728f752508482c298710cffecfb78d60

                          SHA256

                          c666359fc9fa137f6d7f868ccef01dac8701b457bb6bb51fcd581185d4bc8780

                          SHA512

                          094df53f3bac23eb384015e8f2500484556b6ebda0cb62bc12a773dd1d520d82c13cbad25eeb67fa04ceb209d80144fac70fe60eb792cfc1a0c5027513b7448f

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\tr.pak

                          Filesize

                          135KB

                          MD5

                          08b737a1b8ecb81c8ef4d7b8f6b5f503

                          SHA1

                          99d2cdbb720f114051627acbb79475ccc57ce6a6

                          SHA256

                          84f08423fc516988761517511d36bf5d3428866965addbf3ef4399a80f8278e8

                          SHA512

                          142c61f08e56a084f335dcf35c543dab872dee898c719052fb8d42be2050c5fe6d9245180ff9d0d0e07cd884daaaffa6ccb5428fee91ae00413e0ea38a5e8c9c

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\uk.pak

                          Filesize

                          227KB

                          MD5

                          8162ec467ac9a8dac71d22c630a3e6a3

                          SHA1

                          4e9e8f49cbcc5e583b8acc3a65ffd87818c96e2a

                          SHA256

                          d1e07ac8b6a6ce53f06c66241d44407f98a1940259883e143a574f28a2ac170f

                          SHA512

                          e944e3f8f3e9b2c8c6f26e1a7606e441816406afe031bac9a5716ce060a63f03e01a95cc365342518629065b07fc72cf23d65ac84f0b58ef100cf9706a239b58

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ur.pak

                          Filesize

                          199KB

                          MD5

                          30ce113bc3c466751bdf8d50cc568ff8

                          SHA1

                          d0b434b8f196a320995f49845d64054dcaedb97f

                          SHA256

                          34d46d28af3012bb84767a418957f12d877789b88a13ea29b047c7926abafb41

                          SHA512

                          a8139d60e498082c122b068a478038e3d3a7d6fa71bb8cd2b1bd7976827ffc23f7117f989b18d600960b222178351f01dbfa0fcdc3e7f0917cd0d47b5902fb44

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\vi.pak

                          Filesize

                          161KB

                          MD5

                          247e8cfc494fd37d086db9a747991abc

                          SHA1

                          bdc53c042a1c4bc2ebed6781b1b01091c8fb7a92

                          SHA256

                          4c4e69af3d7f7012e3cb19ba386fc69edd0c87ccd9be326dd6db902401d123f3

                          SHA512

                          852ddeb1ce8dbf13280e9dfa72dd10b646f8b06caf88055aeab32009f3fdc397a05764be48a04730e16f23c931d069880574d8bf9c7f4ef151e1d47467a7d60d

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\zh-CN.pak

                          Filesize

                          116KB

                          MD5

                          7507e95fbb433aa97dd9c2e3c2e08d0b

                          SHA1

                          f61227f2173ceece432289b099285d4a9322e2ef

                          SHA256

                          bf3fb791392d8044c2cb3552cc974d95adbfc1548eac617c9d2a981505fb89e1

                          SHA512

                          f8f42e09eb0af51aa48325ec824814e52244201f627734e81c9e84ea319f5c2166c2450e9b89edd3ce84d3959f0c9ba445ba7a32d4164cf730f0949e11dea082

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\zh-TW.pak

                          Filesize

                          115KB

                          MD5

                          96620581f25ac84ddd4b9d0cd29b0749

                          SHA1

                          6413faf7b2e31755674f27de8cdab0788488526c

                          SHA256

                          2a674d423322d1772e97a627f1e291efba5f12b7efd0f174cdc99d1b1b376988

                          SHA512

                          7fd315ca93b431c59f92d31b803571effc5d758a52fc5d2f797a306fa63ea73162ac91805a892479b6940582aadc8903bdea6bb70168d660d58525bca4202520

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\msvcp140.dll

                          Filesize

                          335KB

                          MD5

                          25d41e8774dd8bcb0bde6635dbf693cf

                          SHA1

                          dfc66f96e4169c1b79e9e10565267bcbe3044bfd

                          SHA256

                          f2ad53034e473e7473f31c9e54b4f54d1ad3b3ae02d8afc32eef39f03b03b9cb

                          SHA512

                          836d9ad631fbca1a2d33999aa765f9dfe6e8f79eec0712c7711669574276cb6b302a306dc6b7f02b0b4126a0983d68f9a1cc5dba0e4f2985c933da6731f78ee6

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\msvcp140_1.dll

                          Filesize

                          30KB

                          MD5

                          d281be80d404478ea08651ab0bf071b5

                          SHA1

                          e81dc979d8cf166c961c8e7b26f5667db9557c47

                          SHA256

                          5e627fac479f72363075824423d74d0a5d100bb69377f2a8c0942e12099af700

                          SHA512

                          fda7c43fb6ee71c7ccbad7ad32c1f00e454ccdee3bbc35de4045abbc8998281cdab9c506fea8417df25ff0ef09471eea49f63b2181e160c62bda804fbfd8c376

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\msvcp140_2.dll

                          Filesize

                          201KB

                          MD5

                          210bb45a43b2f8fa7f6cfc31fa4ec6dd

                          SHA1

                          3dacfa339ac11488d52a54806fffaf437bb0caa8

                          SHA256

                          aa965bc8429994c97bc2498ed8051a4101f7987a376924b105de5f7915e42a48

                          SHA512

                          8a0e8863b06b306b11e0abad77b0285dbc17b8a778e241c2ebe0285bbf12c7b7cfdeacd6ed6d2bf71887342a94daceadf8e0aa3164d4492e1cb9d0d1feceab96

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\resources.pak

                          Filesize

                          232KB

                          MD5

                          591074428c91f2e650c1942451122656

                          SHA1

                          433ae7cdb858ba376e5d2326e30ac13fbb060880

                          SHA256

                          6ad9ebae9b81a882bd84a47ded58e2d29ddbbfeb1ef848d2412e52ac24030c9b

                          SHA512

                          e78afed3ac5e5a88e2ed78cb6ab4bcd7e9afd186ad1651a4431aa71bea21154d3ea1a0e38b55292d9c2d9fd33bfb661f0742a89c32d13710459bc1a67e223391

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\resources\app-update.yml

                          Filesize

                          94B

                          MD5

                          3197f1e2ac3bb916d888b1c517788ae1

                          SHA1

                          d1621ef5a59f3cb3af0948c32c6b86a3bc5895b8

                          SHA256

                          54f8faa0210764d255e9e3e812c7eba670e3b4b88892f44719ce76d19c96d728

                          SHA512

                          e7bd76fba533a680008fb9bc1a73b22b4b441d0a1e1d639ae9da0cd75463581b11e6b2741405c88b1b1f702a25107b5b254889395cf1d17ae938612fbaec5cf9

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\resources\app.asar

                          Filesize

                          747KB

                          MD5

                          471cdc896824fd3a5d3e96fddf1d20f8

                          SHA1

                          81b175a13dcf0db5b2fff78e6e67eb17ddbd446a

                          SHA256

                          b00f8077ec00065aa084b06d274583b86c1f0a7a2a046457846fdd890c970b01

                          SHA512

                          f4ae2379baa5d458e21ad799121aa7233533e67864998123a8ab017b9aed42510d66fa0b682d0e9417a853133de6ef95b89b59bce7064182c223e25571ea05e8

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\resources\elevate.exe

                          Filesize

                          105KB

                          MD5

                          792b92c8ad13c46f27c7ced0810694df

                          SHA1

                          d8d449b92de20a57df722df46435ba4553ecc802

                          SHA256

                          9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

                          SHA512

                          6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\snapshot_blob.bin

                          Filesize

                          265KB

                          MD5

                          b3e2e780fc630c4e53e3536ae784439e

                          SHA1

                          63418a5fcc710b77075885e27ecdd008fb4aabb3

                          SHA256

                          9eadd4d59c2b135e32f3e8766d4feda642c903e51aa1ace5e0e5786f2579aa78

                          SHA512

                          4cfb9cceaafd04a63ca814e9eee947d1fb9a37dc6d4bb4ca0348da78eb30e22ee8aa337fc2cfa79d6de226f34e70da4a1c8c7b1be637ea1ff82a3ba27f6333e4

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\v8_context_snapshot.bin

                          Filesize

                          219KB

                          MD5

                          aab34077883477f901c09e7a43ae7ed2

                          SHA1

                          2fd533026e3a68c32fbcb87fd7d879aa4257c69d

                          SHA256

                          f55787d23172bbdd24ffbefb4f70df9105579ff3d84392aeb2dba6feab578fe9

                          SHA512

                          3f5b677e1fbdf02398bba73eb9008a13647a35bfa6a0b6580aa5d9845ecd932670b16886c9179b1a25bf902201144513e939cb6ea96617fb2a06910cdb80ceee

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vccorlib140.dll

                          Filesize

                          316KB

                          MD5

                          621011d8f38e0eb988dca3a94dc6db9a

                          SHA1

                          1f91b9818a4fb8892ee50c1d334294361934e1eb

                          SHA256

                          e1c210936bb4e8328879b7701374e51a05bf76e5dea8f2ddddafa25f03a820f1

                          SHA512

                          4358a6c379d59f9ea1e509922bb58ac76a10f9245e83f824e37fe128b82cf21f8308bdffd9ac93cdf6ab8cce2d1852b7c5181256e0c09da27f0357d0dc89eb77

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vcruntime140.dll

                          Filesize

                          83KB

                          MD5

                          1453290db80241683288f33e6dd5e80e

                          SHA1

                          29fb9af50458df43ef40bfc8f0f516d0c0a106fd

                          SHA256

                          2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c

                          SHA512

                          4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vk_swiftshader.dll

                          Filesize

                          293KB

                          MD5

                          c030ff9bb955c6fac28b61eb8cc63907

                          SHA1

                          51bc1d0cc14a971f11b1f0bb1b29fea76fbde4ee

                          SHA256

                          d43d7e1b3272b5f8389f0640fd82b246af7c2c4b6ec4853862c812309d73e30b

                          SHA512

                          579d42370d5ec8607a1e20d682c0567f8a9b3a0d376f79eb4e543eb8dfa21875d1c1bc89d006d85eb4cbbdfc2e5b18e2d7beb5b8fb8feb39a5553eeec0845d20

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vk_swiftshader_icd.json

                          Filesize

                          106B

                          MD5

                          8642dd3a87e2de6e991fae08458e302b

                          SHA1

                          9c06735c31cec00600fd763a92f8112d085bd12a

                          SHA256

                          32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                          SHA512

                          f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vulkan-1.dll

                          Filesize

                          198KB

                          MD5

                          5cb7232be5f4cfa8f41e630fe71c7105

                          SHA1

                          cf10b59fa19b4a496bd5e0a8d4cb985c133bb89e

                          SHA256

                          85f0a8327bfa1b8ee64fb4b7179c0e49dc8885673619c29fbd8b08f7ccf45e24

                          SHA512

                          e76fd34bbf9d5ad2a190e255a81279a468a7948df43019fa79fee82a6acf2fa0735046dafa1f8b253a8a551ce3cd95e5527e9f0ac12f10a3adeac170f38a647f

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\SpiderBanner.dll

                          Filesize

                          9KB

                          MD5

                          17309e33b596ba3a5693b4d3e85cf8d7

                          SHA1

                          7d361836cf53df42021c7f2b148aec9458818c01

                          SHA256

                          996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                          SHA512

                          1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\StdUtils.dll

                          Filesize

                          100KB

                          MD5

                          c6a6e03f77c313b267498515488c5740

                          SHA1

                          3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                          SHA256

                          b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                          SHA512

                          9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\System.dll

                          Filesize

                          12KB

                          MD5

                          0d7ad4f45dc6f5aa87f606d0331c6901

                          SHA1

                          48df0911f0484cbe2a8cdd5362140b63c41ee457

                          SHA256

                          3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                          SHA512

                          c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\WinShell.dll

                          Filesize

                          3KB

                          MD5

                          1cc7c37b7e0c8cd8bf04b6cc283e1e56

                          SHA1

                          0b9519763be6625bd5abce175dcc59c96d100d4c

                          SHA256

                          9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                          SHA512

                          7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\nsExec.dll

                          Filesize

                          6KB

                          MD5

                          ec0504e6b8a11d5aad43b296beeb84b2

                          SHA1

                          91b5ce085130c8c7194d66b2439ec9e1c206497c

                          SHA256

                          5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                          SHA512

                          3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\nsis7z.dll

                          Filesize

                          424KB

                          MD5

                          80e44ce4895304c6a3a831310fbf8cd0

                          SHA1

                          36bd49ae21c460be5753a904b4501f1abca53508

                          SHA256

                          b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                          SHA512

                          c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                        • C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\nsis7z.dll

                          Filesize

                          161KB

                          MD5

                          f9f065c6eac2266084c7ab1314ca8883

                          SHA1

                          a13f59c93fc6f02752efc50c8bd3169e5c9a156e

                          SHA256

                          4d3445162352bd926d731051d3244e350ea3b30c4bd79e10e37a8174b6e1e026

                          SHA512

                          088239dfff46667904a6b3d7e7e9494c008735867e3b1604c9596716c2f57ac2f1c715114fd558a692e4ecf2e79a5610d834c04cac526bc10e9e03b002572ec8

                        • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                          Filesize

                          2B

                          MD5

                          f3b25701fe362ec84616a93a45ce9998

                          SHA1

                          d62636d8caec13f04e28442a0a6fa1afeb024bbb

                          SHA256

                          b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                          SHA512

                          98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                        • C:\Users\Admin\AppData\Roaming\gdlauncher_next\2223800b-a61b-434a-a673-60b54acbfbbf.tmp

                          Filesize

                          57B

                          MD5

                          58127c59cb9e1da127904c341d15372b

                          SHA1

                          62445484661d8036ce9788baeaba31d204e9a5fc

                          SHA256

                          be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

                          SHA512

                          8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

                        • C:\Users\Admin\AppData\Roaming\gdlauncher_next\IndexedDB\file__0.indexeddb.leveldb\CURRENT

                          Filesize

                          16B

                          MD5

                          46295cac801e5d4857d09837238a6394

                          SHA1

                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                          SHA256

                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                          SHA512

                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                        • C:\Users\Admin\AppData\Roaming\gdlauncher_next\Network\Network Persistent State

                          Filesize

                          1KB

                          MD5

                          65481b3fc4a5cd409fdeda24861d7c5a

                          SHA1

                          982b44c02722f07f2fe8ceedecfae55be2556f0d

                          SHA256

                          1f534933c0dd6c5499fec3c12efa1799a7ef1c571fcfc6015e4063d1ba792e4e

                          SHA512

                          002bbf4fa2fe72a58d32738453c92d3fafaef6607fc92f3365fb2426d9db955802b3bbe238655f74f85856a878e3487c12546425a26ac997ec6f0d09f616bc98

                        • C:\Users\Admin\AppData\Roaming\gdlauncher_next\Network\Network Persistent State~RFe58a5c1.TMP

                          Filesize

                          59B

                          MD5

                          2800881c775077e1c4b6e06bf4676de4

                          SHA1

                          2873631068c8b3b9495638c865915be822442c8b

                          SHA256

                          226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                          SHA512

                          e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                        • memory/2636-953-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/2636-952-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/2636-954-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/2636-964-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/2636-963-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/2636-962-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/2636-961-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/2636-960-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/2636-959-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/2636-958-0x0000019315410000-0x0000019315411000-memory.dmp

                          Filesize

                          4KB

                        • memory/3544-938-0x00000198CC230000-0x00000198CC2DC000-memory.dmp

                          Filesize

                          688KB

                        • memory/3544-937-0x00000198CC230000-0x00000198CC2DC000-memory.dmp

                          Filesize

                          688KB

                        • memory/3544-649-0x00007FFD26BC0000-0x00007FFD26BC1000-memory.dmp

                          Filesize

                          4KB