Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    39s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/02/2024, 00:16

General

  • Target

    Lunar Client v3.2.1.exe

  • Size

    1.0MB

  • MD5

    3d561bf3b9ecb7eb922b6fbb6ef717b4

  • SHA1

    6b804d38d974b85f7fe708280850c0d10404ef44

  • SHA256

    2cee2d93aa2c8c207d4f75dac4af89cbc88eb503562a346153593d31929d4f97

  • SHA512

    06c5a00de2dc835ecfc2b840e0236d984d149de062bb09226997d13f1b2f263783a2ce094c21aa84025c630103d17fcdeb0cc617d0b9593c6a425a10232333e6

  • SSDEEP

    24576:vWMkRwbMDhozjDu173pG1szLSvJwP7zCIdU05:GeIDhEjK73pfqvCP7zCIf

Score
4/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 9 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.2.1.exe
    "C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.2.1.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3140
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Lunar Client.exe" | %SYSTEMROOT%\System32\find.exe "Lunar Client.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4552
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Lunar Client.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3744
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "Lunar Client.exe"
        3⤵
          PID:3076
    • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
      "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4784
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "chcp"
        2⤵
          PID:2660
          • C:\Windows\system32\chcp.com
            chcp
            3⤵
              PID:4552
          • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
            "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\launcher /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\launcher\Crashpad --url=https://f.a.k/e --annotation=_productName=launcher --annotation=_version=3.2.1 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=25.9.8 --initial-client-data=0x530,0x534,0x538,0x524,0x53c,0x7ff664e6d208,0x7ff664e6d218,0x7ff664e6d228
            2⤵
              PID:1356
            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
              "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\launcher" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1840 --field-trial-handle=1848,i,10621720562507444185,18380422690936748518,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
              2⤵
                PID:4884
              • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\launcher" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=1900 --field-trial-handle=1848,i,10621720562507444185,18380422690936748518,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                2⤵
                  PID:2292

              Network

              MITRE ATT&CK Enterprise v15

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • C:\Users\Admin\.lunarclient\logs\launcher\main.log

                Filesize

                1KB

                MD5

                f6a128bb38de7b9d1b29cab4259a3e49

                SHA1

                5022b57d8dc6d7bde84f0fe64db39c715182d297

                SHA256

                7d9fbf228b5350f79976a2106c6de339af6fb4683222f38973033691a7187c34

                SHA512

                4ebb4ee4fbded7e144bd71f00b098f6fafa2054ee9503a9e86da83169483c5d635d3bfa96ec3f28b20467cee07425450e54e9a4f2773b27545a31a013cebc572

              • C:\Users\Admin\.lunarclient\settings\launcher.json

                Filesize

                2B

                MD5

                99914b932bd37a50b983c5e7c90ae93b

                SHA1

                bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                SHA256

                44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                SHA512

                27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

              • C:\Users\Admin\.lunarclient\settings\launcher.json

                Filesize

                306B

                MD5

                15d6ddf978a6b5ec2b9dcac065ce7be8

                SHA1

                b3d2867cd6ffd1808a5117d84bd1a2365af0478a

                SHA256

                a7b7f2886cbb7bdb258982c6e622ef4981a2d43d198572aa6b562a0ddc68d60d

                SHA512

                31cc2f5d2d50cbdda2c940ed7dbf8d7fe1925a00dfa32d08d62c9e95b1af848fb839f27ac72d1e8da24a2a93f9dd5504358de2669d90e02f629e5274fa48bef8

              • C:\Users\Admin\AppData\Local\Programs\launcher\D3DCompiler_47.dll

                Filesize

                1.7MB

                MD5

                21ab77c46b89a4504e0db0e5d250d776

                SHA1

                f6a596aeb8d8ddded7713cc5feba8197b889b1fc

                SHA256

                60632eb7e2086f117f92f2b81f0d0bd4c593846851c936d6c6c5bc7d711805da

                SHA512

                acb1e49202567d19250d313672e5ab04d6192e66554ccbbda0d21aa2f2c0c4ddca4830b51c78f04dcf512aae9171b06da5b4b187c81e641778fe3b42266d5876

              • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                Filesize

                42KB

                MD5

                bf460879030abf685a7308986718e42f

                SHA1

                dcd7e28dd0b032d1cf2cf16ca5313c95027bd359

                SHA256

                7867297837a9add455179230565e70623c89e044e76080bd0a5144ebba3e88da

                SHA512

                f32724cbad582943b47e992b0b1131fe2ab0cc3567caa52098d6031bb16d3101fd1244f69a0852e26eeb7ce85d2fcddc95c1cf269aecd02b3b683a8e14e40626

              • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                Filesize

                1.7MB

                MD5

                428408572f5df2121dd0889db39af095

                SHA1

                d463cc66f683e60b17d2c0cdfe35fcb637bc6aff

                SHA256

                96fcd764055145d2fff4a1b17ff67e1e83cb21b3c91bca08b041f37df9d8b8ea

                SHA512

                2052fa4a9325b4c31fa24608420ea0009f5e10660b3dcde64e8670ca288f235609b75e3bc7b180bdc495e8842765a9ec7bc3c8cc9e89bc3649be57d7dc36a3cb

              • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                Filesize

                241KB

                MD5

                4388d1fdb0e938488f378410d504549c

                SHA1

                a3bcf809b41668ceedf141deab4df2be9251ebce

                SHA256

                821abdc50aa1f391b82d3bf9829213160af21c1cbf35941a934984e6b72d2b40

                SHA512

                d4e563cb2aef1bcfd100687372f5e71c83be81edd14d1a9e8371ed4618d94ab0c456b384dcb6bcaddeb71f59fe7f8569172fc128f9b1f9517f2b90a14d2b0cc0

              • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                Filesize

                452KB

                MD5

                dff779afc3b0215f3343b565b6029d55

                SHA1

                25e24799c9b51a53bb4da1bc61b916ab95ebc3cb

                SHA256

                4d9d08626eb1108b4225c2fb76a818309871b3465df334a4a6657ab1bc432d0c

                SHA512

                095101a8961f2ad06df86230d731637ed408c0ae6610e54293d7773ed9a4af57e6a282bb795630ca112517abaaf8f6eae8da705506c55f0cc806ddca3a2d9083

              • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

                Filesize

                1.5MB

                MD5

                5f46a7d7bb18a25c033c5b81a75ee8b3

                SHA1

                cbf6cd131060a2c1a3fe08a14145f5fe37837715

                SHA256

                880178052997faf536b9adecf932f7aff23a0d489d56c69aa083dde3718f35a0

                SHA512

                9986f6bcfc5d381b2ca92527094fc3414840e40a0d49a121e69e8bdb211fd1da014b736326de2212f51a6c326b13b643d6b80fb848dc0d472c785b0c81658669

              • C:\Users\Admin\AppData\Local\Programs\launcher\chrome_100_percent.pak

                Filesize

                132KB

                MD5

                443c58245eeb233d319abf7150b99c31

                SHA1

                f889ce6302bd8cfbb68ee9a6d8252e58b63e492d

                SHA256

                99ca6947d97df212e45782bbd5d97bfb42112872e1c42bab4209ceedf66dc760

                SHA512

                081f3ee4a5e40fdc8bb6f16f2cfd47edde2bd8f3b5349775526092a770b090c05308d4289ecdda3d541cf7f0579ac64b529930fd128edad9b0991dfa00b0e9bc

              • C:\Users\Admin\AppData\Local\Programs\launcher\d3dcompiler_47.dll

                Filesize

                1.3MB

                MD5

                0032a9d1ede46bb4e173b4f484d84529

                SHA1

                eb0772792bd2ebeb38cb24b8c98cd37f54311869

                SHA256

                feab1f51b607592eb249dc0dd0cc5efa9cce3a833b492a32733c574468ca242c

                SHA512

                9493e72b7aa67e8b16f4f9840daebeae164d699bea0ca4c6e6048d7468b68a48b358f67611a1babc9714cbe8ec525d838b4cea1950c39fe38479a63c09344508

              • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                Filesize

                62KB

                MD5

                b56311cb7b64756cfc59ac6a02e1fe8f

                SHA1

                819f1338e3b2771c4f638252707a3567d09529fc

                SHA256

                e7a55e51f76bb0c7e652bf8bff048d8b6d630d42feba2ad2bb7d36576769dd8c

                SHA512

                e809f56d12924f3810d2ceab840436f19171180281b57a6acba049b8ef360948414885a68f324c3c15966ee72d3fe9d73b178836b00c13cc782e5dcf988c5282

              • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                Filesize

                372KB

                MD5

                5ca9b90a033c0ce63d463ab7e9d1fa5f

                SHA1

                86d01eef542e815121e832e8226a644347a3e772

                SHA256

                98e3cc66cdbf7815884bb8cca85c0c8ed6d942ff4af3983481664f663f17445d

                SHA512

                1ec8f9d4ebeb41e75aa8d8e3dc2879391d2acf3fbe5767ed0126984cb21e2cd90717df062d9551c5186ebd4888bf803433132679bf31d6d8518ed6c7c95c1932

              • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                Filesize

                314KB

                MD5

                9ef100e316e3ec6efefd8f9697940a19

                SHA1

                7356cbb591ddd455e51f63cf93e951d54fdd3ca5

                SHA256

                af7aeda840c9227e606e1cdcfdf068f0fbca239f0b4dbab32ba0487e7868100f

                SHA512

                9e9ff81fc48950f6871fac890ecf2f5c2e643665bf5838693baf7270086e4a20bae8e007452b980eae4db0ac0699aa42f3bcebc94227e6b92a3261ae4f12ea50

              • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

                Filesize

                1.5MB

                MD5

                279b6808db030e0dea53432049a0f078

                SHA1

                3eb0a94586ec391c2e6da9b98af70e3d752c9c8e

                SHA256

                c95e52f26ddef746ecb1c2aa03e18d1ed2df6cc3ab4f91faa14434ecbbfb0e85

                SHA512

                ac9ab7472f3f4da8d74438b833cff3c006672bc43e142ed488cae8901c34610828e2f7a82d8143ba529f794b967399f67d0001a62a48c8014bfee6e17d2695ee

              • C:\Users\Admin\AppData\Local\Programs\launcher\icudtl.dat

                Filesize

                409KB

                MD5

                08255f6cd5381accbb8fdc6e17051c2c

                SHA1

                d9547a06af1e2249180757b648878d967e2c7f2f

                SHA256

                d8b9ad680f936cc5fedf0ed33b5b172e0ac668e2737771441df4e37bdee78d41

                SHA512

                54e5dcd6ea573986c433f1016bd2e86bb9bee0c818fc89cda613d569fc5bf292e38cc686b3d52a2a64cbbe838fc9a5fa150a58ea90779cb38310bf2ad92e7390

              • C:\Users\Admin\AppData\Local\Programs\launcher\libGLESv2.dll

                Filesize

                918KB

                MD5

                ad2f5a9103d7c852fe966bf57a7963d9

                SHA1

                7b0832569fb143ed2718af6b4c69732280e4b1e5

                SHA256

                d7519072077d83b7082b445f8ad53bdb082c0a15331cffe09f02a0d0198d4db6

                SHA512

                b043dae916b23a0d05901e900858f5f0d28fd5c83b74888f243fb63cf643074f65d65d442bc86b9c5f0cf235612baa4b95c9f6ad4e6c89b527e020e6dd8eda2f

              • C:\Users\Admin\AppData\Local\Programs\launcher\libglesv2.dll

                Filesize

                1.6MB

                MD5

                0bd9750d29872d38dde71ffb6be4f9b4

                SHA1

                3e6c4b904c1cff19c972f855e0dc56ee36e23f72

                SHA256

                b06c5002e7f367a6a02c3ca6ca477e4a53002ac8c1fd738a1f58bf8c5a2d238e

                SHA512

                eaf5839f94fe14f0cf65299b06d3169d18e8950296c258b79955b49496f98510ffd93cfbb1f1699e3282499b8349520c00bcf9d039068b23ab95c90e40f51ecb

              • C:\Users\Admin\AppData\Local\Programs\launcher\locales\en-US.pak

                Filesize

                351KB

                MD5

                06d28839ea0b3aab4597ba8646a53a96

                SHA1

                9c6a74aae8c783546d613c6f38cbfc8f5e3736f1

                SHA256

                69c1a2e1b30d83612decf1a8dd7b124a04f58e9f2465876726f02f7f7d5eb54a

                SHA512

                a432542dc98795ce0ea6fa4a6bbcbae8ba126f1fda025a9ad6ff3fa67eee85dcf7afc6678f5100bb1543c4d00ac75043ea92e64b65c9ef6bd946ce3dc4d5ae71

              • C:\Users\Admin\AppData\Local\Programs\launcher\resources.pak

                Filesize

                448KB

                MD5

                b677995d5ad617efc84fce9dcd414f20

                SHA1

                e77a6d606523820090d983df44b1b8fc126c311c

                SHA256

                426f7601f311ea773bf3d7741efbc2c31954fbca7989a029e8ede96258483f40

                SHA512

                b473c73d7931e6be8cc746928ffcd4f4c3cc711ca91aa40a9102a8f1e900b7a515903062fa5542e1f97b5034420be97dc3b1416d6b689bdd49c4aaf9f4dbcd6c

              • C:\Users\Admin\AppData\Local\Programs\launcher\resources\app.asar

                Filesize

                3.3MB

                MD5

                98ecb7451a34494479d38e6776070059

                SHA1

                993aa4e00831f13dca58ce2905fb335a28beb4cc

                SHA256

                cb7fcdc24c343341126ec0140d5d73fde3241de6aae41546873d23a0a72073e1

                SHA512

                0ef638591e643edc5a96ff7fe700aea7e1b7227280e6df8392e73e20c21e587ba3fd228d1c70e8e91f99deb1bef5d69cf7d27f4d3f9d4a476dc54c47f6b4e5b1

              • C:\Users\Admin\AppData\Local\Programs\launcher\v8_context_snapshot.bin

                Filesize

                368KB

                MD5

                8fb21ba0a2873fe831b510499991b390

                SHA1

                c96cb8c9d57ac2aae79ccc40dee59a7eb3c15f03

                SHA256

                8dc25f73fa4440e1c63d4369e6c9dcae703de62474bb619104d6bfd25db5b91a

                SHA512

                abba07f6e01905c8376394d725c211cd5e0d76c3a531bb65a51753f4ccc6c06fed8612d9aa09a0d6f7c1391aab2c8a2e9bb3a401ae90e3b8b3ff5003d0304837

              • C:\Users\Admin\AppData\Local\Programs\launcher\vk_swiftshader.dll

                Filesize

                980KB

                MD5

                3a4d1a154b2045c7232423fc02ff3c91

                SHA1

                b98b79a2d05760713c979948fc0b8b69729f0f7b

                SHA256

                3cdc03749d3b58c13dec5b6980a91ed00424e6a077b0242a81a895432b0e357f

                SHA512

                a8b1fd4d8c96bc0ae02f1569ad5f720e3d985f3e6038f489d4ba0b53d54e284b39f5db6468ea041d4bbcbb7f591d0f06d7b7e18f215acf3f8304d26302937dbd

              • C:\Users\Admin\AppData\Local\Programs\launcher\vk_swiftshader.dll

                Filesize

                1.4MB

                MD5

                3b10167d1704caa081d67ebef5c9e43e

                SHA1

                6750f3fe53e61a7cc25f154ed2bf439a99177471

                SHA256

                6197644271833d6fd57998fcb24f8534a3c59c99aa7e1b25fd18e7f5d8df3ab0

                SHA512

                9fa7024cf8fa0e15506f9b98a3083d34cdcd3fdef2c5438a5c7313aa9a9a7455dc8fce503652f44a2a05b98f368bc2e6ae108d52b03d6d3ac3b9111bb36cbbdd

              • C:\Users\Admin\AppData\Local\Temp\9b892055-d6e9-42fc-a81c-ce231fbad6f9.tmp.node

                Filesize

                259KB

                MD5

                4f4473d15176d4d4c88934e843394180

                SHA1

                075c3c4320a76af25c8aabdd027d531b99f2dc6d

                SHA256

                f1c050da8ea5a9b561e62ebfb43e89ead046e5f0c8b737e3b024c82d0227a96e

                SHA512

                dba1bfdb50e0d06b4eb868196a28b28ef55cdbf04490d9fdc4a3f09dc2bf04cc8c046770ec05f1b4c2715ff525282c17ca9da7b22083fff5bc2df316599df07b

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\LICENSE.electron.txt

                Filesize

                1KB

                MD5

                4d42118d35941e0f664dddbd83f633c5

                SHA1

                2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                SHA256

                5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                SHA512

                3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\LICENSES.chromium.html

                Filesize

                2.5MB

                MD5

                b4d86e4111aef19a5d5f0cc133d57007

                SHA1

                737f7f1399235b8da9487ecb3606d1166d7a7284

                SHA256

                6598324d607a6d1f9f09f3a349b44b431470045c3a49aa77cdb90509912869a7

                SHA512

                fe793aed7327604e9330ed7dcf97d8c1bb8374dcea2bd0721f81b907bfa6c23715d5b749629ed58fecfece2304bc46559f6d5a48c184f55af50cbcfdb920d2b3

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\Lunar Client.exe

                Filesize

                1007KB

                MD5

                7962e6195efb1361f943bb5ae059d568

                SHA1

                cba5cf56cfc7a0a931716bf719d874007e5dacad

                SHA256

                305f03db9c4eafa58ab99b85edbc8e720ca6be8bcf83b117f7470591453a07c7

                SHA512

                98166db8a505d5cd1ff2bdb8c9f041cd7a481fc6a9bf5049f209cb96cefa3c4d6fdaf45a2dc36ca7809077fc2e67c97dce4dca8e37c58bd2a8ed8ee01d7ca497

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\chrome_200_percent.pak

                Filesize

                191KB

                MD5

                81b5b74fe16c7c81870f539d5c263397

                SHA1

                27526cc2b68a6d2b539bd75317a20c9c5e43c889

                SHA256

                cb4fd141a5c4d188a3ecb203e9d41a3afca648724160e212289adcac666fbff4

                SHA512

                b2670e2dfa495ccc7874c21d0413cfbebfd4a2f14fc0217e823ec6a16ac1181f8e06bfe7c2d32543167bc3a2e929c7f0af1a5f90182e95913ba2292fa7cadb80

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\d3dcompiler_47.dll

                Filesize

                3.4MB

                MD5

                ed256004fc4238153755380e90e52b9c

                SHA1

                399d6faf1195e545c638fa033ca5c4e1bbd40c21

                SHA256

                90b2b5edb260e6e2da70b1ae4bd179ab0014c3d5830917e34a632cbf30c36a7d

                SHA512

                2964b3c3b2d5e662173d72ff8bbfafec97d9bd1e97704d7b5ad3369ea551d350e6c45fe209d6b42abce34c9aca79ca73057969d9efa5c2ad6ecbb3bd9082d4ff

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\ffmpeg.dll

                Filesize

                2.7MB

                MD5

                a83623ff5091511d98756fc8063c3eeb

                SHA1

                672d7a72d8af704ae1212e053ea7bee0ca1d9033

                SHA256

                2692d3ee11e0238874b6fc5c0b62c76756ecdccd4a18862ec7b9ea04ca335733

                SHA512

                38881908441000c9db640db4f7c287b59640646d482a71a822d9444c0feabab79a4dfec9d72715108626a0c604017f0896b22d61e9646feac88f04bc8c8f81b4

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\icudtl.dat

                Filesize

                2.4MB

                MD5

                c80e3627ad64ba5876c4b74ef401fd9a

                SHA1

                3e6d54e924129acf8d33328b98b40191ec776b92

                SHA256

                8b423dde158818bab0a399c800a82952c0240d656567cc010d0d84463853e2dc

                SHA512

                ff290a146841f24e525caeed5796c014f5ea8802e767ace316051fe44aebdb7ae1fb1930564212f12fbd4db32d4ebf3ccdc4719d8c86486881a5f3a2fe63944b

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\libEGL.dll

                Filesize

                469KB

                MD5

                dd78b86b3c92d61c37b44ef5b157cfe0

                SHA1

                4dcf9ebc3ff5ca552c0e83469b921153b29aea1f

                SHA256

                e142752e073c0051a0beb963981af70263ed673959515545521a7941d3230838

                SHA512

                9d071568dc56db2ab93d034d07a11a477aab8ac50d9ea3c4db3ac4866fcd3c2f3002ba7a3f2c55589a9d68463181fc7a03327dc164310d7e80e30cc6f6bf2423

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\libGLESv2.dll

                Filesize

                2.8MB

                MD5

                988ca19d6934f1c9c056e67b3f36adec

                SHA1

                fe68bbe5b915b576a916707994ff9d1490593997

                SHA256

                2e424d4eda0bd0db723a0860309dfe49f69e17b0da5990a58a84612e16eadd6d

                SHA512

                d230eff7c42e24bf96fef287994f8817338af946056895a1847442a8f260afd9807470f5a2186a02ba62eee18cd6ea436ecc6cf281ed4b8b78acdf2dac64e36b

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\af.pak

                Filesize

                381KB

                MD5

                b293cc5ea7db02649bd7d386b8fa0624

                SHA1

                32169b9d009b7a0fb7ecdaf650c989e956291772

                SHA256

                7bb75adef02d28819f1bd3b42fa46ed56d6dfbeae072341997b09b8c1f52d8dc

                SHA512

                496bc72e7b798d02e453eb96d20566b91405bab774521527ef882c1fcb58f25e2d0718013ddc0d23f7fad883f4cde93b57c6caaeba8cd18a09665c9f6245f557

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\am.pak

                Filesize

                619KB

                MD5

                4cb4b30911e9fbfe6c1de688cca821ab

                SHA1

                58cc2d8e954b5c74a902f13c522d1f6836769623

                SHA256

                685ecdff01d4ae92be1d900ef00fd8632616bc41f18a56e682528f312d4a5167

                SHA512

                6629af841c52463c46dbeb03e3b4b1cad550c2db790c75365d63512e039b3369cdd9f18316e9c50dcf3aa77aa4d2becb6a87570f3b538b456af3041d60393434

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ar.pak

                Filesize

                306KB

                MD5

                3c97df25b3ae4e0e2ca0a56721c6e985

                SHA1

                4b64e036c3972d841dff4cd1bc70d4d83302d586

                SHA256

                34795dd52491b9201ec3d346badd42cb1b5b1104597d1c10341a1f1422779692

                SHA512

                4721ddde9da843f4a0db77025d0a563ba287c58932a9968499ec27e9657f7ba4dac6743f7e9f7cc92252adfcf3e0866baff1640e63744ade0f93ea51a9cb4e33

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\bg.pak

                Filesize

                409KB

                MD5

                da6193259267876604169e769047d49f

                SHA1

                41e9c1bd720726cf6f36a9213518bc7f53aed0d5

                SHA256

                e1e48b5e94ebf1ca1345cb5037bfcc1266a32c4f3de222047f471f68f00e47e7

                SHA512

                63a6572c80b14778b5568eeaf948fa9d32cb301af893a4604302d63ab4425a24306d31acc62c32f7062022e630cc55dfdbcc7edf16e7903174d8fa5eba661478

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\bn.pak

                Filesize

                273KB

                MD5

                76f254fe12eb1ed92a995d116a13a72d

                SHA1

                77627db1f53ec2f11942927caa3f16bba04d28f6

                SHA256

                b454e322a763f41c5a5dea1a6e2771d15c6449b3791878c2e30da5d21f457083

                SHA512

                bb0948f007f899e1d480dc3cba378bb081fae07f4209e44444c0d0449074b81291253f8b289b13c0292e083b6eba857b3b31b8639a6ede0c762b4dc623ceb034

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ca.pak

                Filesize

                293KB

                MD5

                f841c4005717fc5f4fdf409909ee5721

                SHA1

                0c796d62ad50c9be88a14c855fbf6fe500d4fd6a

                SHA256

                c1bb32c50f7a774b1ce9caf20a07181ad24ca3d90f8b71f7170cc8458b9b08d5

                SHA512

                196ab7ac52a061304448e2fedc84b8a3fe3ca281792e6fccabed03ad4234a73df4c3bb4454272e18f4e18ec4b5491b4f6bfcae1ce172665e0b8e6fc528e8235c

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\cs.pak

                Filesize

                441KB

                MD5

                6d43974c98037eecee8691520de4d63e

                SHA1

                e15672b3ab22a059b976d245ea3f59d35c3387d1

                SHA256

                c1020222b90558a6a8a07f24756b183594641ef77562d35e7899e1489d0ebd8e

                SHA512

                64e76499d56c3e32cc013bd05e2d3eaf5618527b8035bd5a37f5018a1e6072cde4a06f7c66921b9b087e60ff686ed63b7321f0295a34451443797ffa8e5cea35

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\da.pak

                Filesize

                215KB

                MD5

                65f4018b705edd6b3501607b695d1c50

                SHA1

                6862242ce1faea05bc1ae296f5d28d5fcb4a5598

                SHA256

                574b3c467d14c8a0d45be0eb986a2c23f2a9af1e9f07df7717612e0fb0039f04

                SHA512

                5a8b60757b007fa104ba258e3d87c52e6344134e4219d109c029147037a2b4c84e3ef7cf00dc5d7d0e4215fb99a458e3df3db66692eeab61379fc4f82f0c7a40

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\de.pak

                Filesize

                162KB

                MD5

                64aad9349b16ebd0abce6843103777a1

                SHA1

                abfbe420d8e44b605915a83f16da831b0999768d

                SHA256

                ca48584df117ea1d4ba1138002a8cac0e08c250bf1d18e32528ae02bbc08d53d

                SHA512

                34563c42961c98cd0223a9346b4ca52f52f1fea2915fcefd5a1d881c5484e687f5ceb5b38b3d1fb2717c3e20c4a280fa3e1701a29225aac2b52a0a30014ebac9

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\el.pak

                Filesize

                141KB

                MD5

                820a633860838e039be87716036c6962

                SHA1

                11c0bcd264e1465e600a32c77978297d39930125

                SHA256

                dd6a2e70740900629171ac9e88034c8f059407eeb7b3bc24ce3983429168d92f

                SHA512

                fa355c961378252b0e1258e98d28cc72ef3d6ff6f7c5dfee9959824cf570998d326df856c962dee0c9e73593eabfe4a41bbad58bedb8c5134733913720e9d01d

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\en-GB.pak

                Filesize

                186KB

                MD5

                05bdca097f0d96e013c007e38afc69ba

                SHA1

                79b9ee932fc0975b2ad7e5f0a71d78493cfa0e96

                SHA256

                765d688da2bd6f3fed71370267969e4a0f9bb4f1f7e875e6ce2db4f9ac2be8c8

                SHA512

                705e9f2864022abe67912c7f106547d4bb5fdb5f33acd66f48d8b9d20f54778c16de8b11d75e87966b84adf4cb69bd0d72a649f8adae198670caabc3ed9a5cd8

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\en-US.pak

                Filesize

                176KB

                MD5

                351314d7941b4d2cbb2702fc59114612

                SHA1

                7486ac979e9580763cace2e081075eca2c383dfb

                SHA256

                fc0a32cb0ab4107a6dc71580c937e4d4b0aca3725c4bfff7bd023bb3c4dc1ca5

                SHA512

                c72ac4d58839825958a439544192758feafb015dc76cdd8a9aaf6df00afa4f0d27d91eeeaed1afd30f136210141325d22b2fc845881f4fc734af2e8d114b1a95

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\es-419.pak

                Filesize

                222KB

                MD5

                907e4ba8cb056e4431b993baf7aff5e6

                SHA1

                a8b8a7dd8cabb9971eff9a043af84758e3d33c22

                SHA256

                b5f37c2bfc7cd183f1384e38cc4435f3c45ad16bb25ae1b93321d06e670e87f5

                SHA512

                fe8fb46364e4bb4af26e4455e41c688d13c81be497e795f095f066f09905f9efafb3795d798c666a033b2843b2d30975d72a9934e707ca56aa1f937fc8a60b6f

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\es.pak

                Filesize

                425KB

                MD5

                c9e0b58f2d9e087b2e8e92d31be2a3e6

                SHA1

                59a43b7021860db2d2a7fe8ced8fd1a4b0c8322c

                SHA256

                468e0143c978a948c62d4a3dc743099a4147d39773a6112b303692d0e335810e

                SHA512

                16160e6375fdde1ec2e17ba8622c9c953a46372143d0b09a33ee55852b2b9f037c1c16dd5bb6bd1f2454559dcb172c8317aa8b6c6b26d44e8da706eb16ec5f07

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\et.pak

                Filesize

                384KB

                MD5

                ccd361017778964de23bf1d741cb888a

                SHA1

                5b0305538762987901b7a8332635f3d7996c09dd

                SHA256

                41883af1e49cc180fb48e02659e75b0169d974d77373cf7bb2a4ea02dd654e26

                SHA512

                a9d7c99c07229d382e8ba7cc3199bc66fc39df5fd9b58e6a76e423b865f8c05f53398125a17a20c27462b2db595f3d778b4d94b1853121d8447b771f9284e5c5

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\fa.pak

                Filesize

                629KB

                MD5

                87a2305436bad7556fe7abb68767802a

                SHA1

                0edad3677b0872321a1f8f3d391c17ab373aba17

                SHA256

                9068dc6c71fd8bbc1a4f3b2009689472d1fd2c096b7e8afb3e089a46b98d8b38

                SHA512

                6c32b1c83e03b553843faabb5a9c1b63c769b13de60841d2bc81f2c9514b30ebf16551acf33262ef8abaa4a5aa3955600a35a045b0fd446964109c58a2734969

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\fi.pak

                Filesize

                392KB

                MD5

                f87a1ccbcf3db6988e95e94333bc5a4f

                SHA1

                e85f8446eb74d8bd4318354ec98135c17afe3248

                SHA256

                052a72c9d6f2bb55f02fb1c5c4c68525a32b8cc9120c270d07d7b813d604f7dc

                SHA512

                c4a7ee0552b343010fce8ceeef70620acf672c9ab56fc24ccfb88abdbad23aac4cee65c8b241c594b7ec92d0841087485aeda583d2e887cf4c823a10b2e7cd3c

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\fil.pak

                Filesize

                442KB

                MD5

                2e6a6728bd5a09339ac01a38bf686310

                SHA1

                619e27f30c99eff8f2df3ba2287c6f7fe0b5b063

                SHA256

                e8f03c2e9c88adb04648ef93f9ea3cff87641638ac97c9a6752b751e7f7a8a20

                SHA512

                0452ac74eafcf971265de92041659c006b5e559919b895b41795bb1307ee7c302e873440b006485b7cffcdab0f6b908a119683fab40a664d5bf3591239427c00

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\fr.pak

                Filesize

                459KB

                MD5

                8e21cec6cb5732fd2baa28f3e572ef7d

                SHA1

                778228dee97f5475b9982375740d6f90e8e5fe0c

                SHA256

                cd21cae54eb6cb115771d1afe14d17822e13332759f8710d6386a6e4277c11c8

                SHA512

                07726afa312f6104e3d92c6be13fc4b0e728a4a21f643c9552a961784063d3c8a9c52e5649ffaa9fd6a083dc5de37316e0d2cc10cd1a6fbeb83789c385ae990b

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\gu.pak

                Filesize

                27KB

                MD5

                7f93ccdd006ba286574f9df84322da37

                SHA1

                9b8f4122348523721a93dcf8839716c6770212f8

                SHA256

                5a80fca5ec4e948626274f91be38494330b6f67b309e95dab839f16bc758ac4c

                SHA512

                5fdc5399bd1e9486a31e5f39883e5efe0fb330fc94d7dbf8714d5767e77effd21c1a79d678deb8f92237b6e9f9e8797f54bfada2d782f456c8b40243a1644b19

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\he.pak

                Filesize

                549KB

                MD5

                8b3957dda3c9fd903d2c4b8a5f686475

                SHA1

                36e45b4d30fd1e59ecafe095f405e0722a814a17

                SHA256

                ad20b3d634130c247f4ff954f1a5c56687523e5610f2ec6085e257126c4513a4

                SHA512

                1dd54ce0a1f30ba087a9d09b9aa2928dec3070788d7db3dc2bbd27fa6126f70fa1e05106a1503602b203fa76be914210a38d5dc9c6bb56c56857ef08c528c4f2

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\hi.pak

                Filesize

                754KB

                MD5

                76b59cf4e7f62f3fa67c866508df85f5

                SHA1

                4d9837b740eb069532d7b26abd20c2bab494fb5a

                SHA256

                fc8f47c2d113b33c362321762ffb79c3a003b2d1a7c5103d11ea37262c4afbf1

                SHA512

                7005c3e26fa36d7a39c35a2a6f87bbd6926bf1291cb3b8d137f3af43a8fc65327748e36f30ff22fb2e97ec1f3afd898c1bc7719f51e522a757e828c22112c1b8

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\hr.pak

                Filesize

                24KB

                MD5

                b6e18ad1d531d333eb9b651ddab521d9

                SHA1

                68ca42831219d66d8997a3a514cf9aadf49a24d0

                SHA256

                fa6aaf4ebce95f6e03b1c20e4ab75a4b4ed94ea492bd92f399cb00fcee90f5a8

                SHA512

                4916660485bc18441ff788661a66e456facf816fe1375ea8ff7d82a0e3c663f4ef5d8855bfa76adf2afbcb6f41f75e428ab16beba18351dde146a67b57caf9db

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\hu.pak

                Filesize

                460KB

                MD5

                2fef83993a62f73f8e4b40a6e28a085c

                SHA1

                8bae181f3eed8d5ea8fb0f912c679e608ee7c008

                SHA256

                ca4b4c7c7be45ea0871abf7d5668ab948f712a02facdc1d6bbc189b1b3522446

                SHA512

                6eed29acd38b662f62381a5c00ebfb254915a57de6fde8e6da77f60dffd13d4846b26b1897d710ef852bcec5728a4460becaed2367f1a06a066da77521701324

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\id.pak

                Filesize

                377KB

                MD5

                0dcb56f6b196199f7ed802c06b774037

                SHA1

                f62edd5e814d05cc4aeb5574fc63acfdeffb6010

                SHA256

                bd512e36a88f0d7e6fecc0b559adb2761589947fef9c253dc350cd8d6ea889f2

                SHA512

                e03474255bce20004788475ee1f546ee7830e9b9960023b15210d88347032b5376848aeadef3e953ec654d3905baee37279bfaa287af7669ca66e382a4b1344c

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\it.pak

                Filesize

                417KB

                MD5

                47c89f9ba4993e7cb6640c23f444e9cd

                SHA1

                0e3755d2835742b7aa4e1d5245454f7cf22a2d47

                SHA256

                95bbf94625cf0476124763cebedcf5ee46148bb6b5c006f86540a02e8d8c883c

                SHA512

                948e4da235cf7d0272fd7a99e7238596e5d50913886fc73fe35f9af17d1087f550a3cc3251ee6595f9872ef0b88e75725405382e6aea4850088e068d5b80922d

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ja.pak

                Filesize

                510KB

                MD5

                afd423713e28b3980392443f31dbda7b

                SHA1

                926560b21af422f22e1cca1a4a2948ff988bc6d9

                SHA256

                88383ddccacb53f3ce5918cd80b5dafb16b3cf1fab295e230cc15490600615e4

                SHA512

                1544f7a91b4b63bb80f651833a931204e44745bb0bccfb5564ee9af3149218f140b6adfb6d4ebb5ce5e82f5c345c098cae8a0637b274c42f6711aa53877b0bd4

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\kn.pak

                Filesize

                722KB

                MD5

                b32aaf4fc1ef5b4da96272e9222560e3

                SHA1

                a0a21848ecf7d491039893f59c1e24014e069467

                SHA256

                d4b0ebb4d41df6853595f67652926815397e8531cfa01482d4efa74b0384e154

                SHA512

                23fd9e0dce6dc9b259853ab2ca9a48accee83004a0a4d7990f9c3cac407b06e3fcd33a21c28aaef247e045530d761ee0c7407b09ef5abdbbd8551128cae2d60d

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ko.pak

                Filesize

                429KB

                MD5

                c90a42bb27bcbf1bd345dc998f9e410e

                SHA1

                66f8bb72db6b38e2d288959bcee3c43caefdc59a

                SHA256

                56100d20a59fe6cb333f57ffdef90157324ae1b90194e852478daa8c46d29de9

                SHA512

                b5912c895a6a3b391555efc10b15d45fe9a84473c8687327b7d2fa033711e437e2f160345daefd554374357e0afbaeda4a25f4f69ca74e498d7081062f299b46

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\lv.pak

                Filesize

                461KB

                MD5

                f8a5403bd91f231db58e77c9d4514e2f

                SHA1

                7d29e2d8459af6fc3082cec0d9638daf5275bf3d

                SHA256

                dfb9b5ee446977dc0435cff4d66402d3a9426edb106effdbb7d86379527c5956

                SHA512

                f491cffdc5cc588f7ec70f87be84615aaf5b39e9c990cd9c835e65beb27f26334517abac1af7419f2b7b18f94c369037c8df4c1c8e26a5fed4288d477dc0874e

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ml.pak

                Filesize

                538KB

                MD5

                96527498427a7de34fe57dd59cac2e11

                SHA1

                c8f21b13c877eb55155ac18b90b88910f5e79abe

                SHA256

                9a67eb02d3d9d33806acf68e42dc5cd5be25a9b3d05459c0fbdbf4fc3723a061

                SHA512

                724bba527f77ebb6b535fbfaeb54a2ae7ad9d149c84e69f797ceeffcb2a02a0b8460107298bb89538df4ed94c03f4e6c046866b0db11fec3e92bc7bb77de267d

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\mr.pak

                Filesize

                606KB

                MD5

                bf07efbb7878e6557adf2720653f57a7

                SHA1

                571ea598bfc7e2d8bc3594d21d1fa4d039a66969

                SHA256

                9ed6fac8f51046b43a5e67b7b618cf476082b7bb98c4dfc48e1768bb93fbc88a

                SHA512

                380c190ab1ad8f3adb4cf26659c2c43bd7f3b084cf2a056ba827d8f395130c62d3b36c0ff5a8953071ce5adde01a2727138aa582ddaefd274d62aeb713fd90eb

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ms.pak

                Filesize

                395KB

                MD5

                2c4056d84b980267faadd69d52c17086

                SHA1

                3b3c5fcf182d86a170c8f35c041bf3869a82b362

                SHA256

                163eb7ba5f0c61acb6443709c24e38ca6370a33f89a12e13d0a57c258a87ca16

                SHA512

                47285ab42b46cf7d6556eac2a8f7afb9a9c9abe8cb026fe847b2504e4dbddd481a98c1ea959c74e31f195ecdbb618a3d93df8f20b797411a8bf2b3856fc9b963

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\nb.pak

                Filesize

                386KB

                MD5

                23ecce10db7753622fd7cd956aa55212

                SHA1

                52affc68e91448d8aecf2396f02ede77d4ea664f

                SHA256

                29f38d3720c948fd261a2aea7d195e861a73a1313071bd2cbf1ebcbba77c63e6

                SHA512

                553543bef496052995e33e2f3e8bd66ac845351cd292623479a303261900c393cec35af3e0ecd57db84197e6f7653ffa4eeaf4950647ae2d5304f961890deba1

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\nl.pak

                Filesize

                398KB

                MD5

                54817be286dbfd9de461f42304eb72cc

                SHA1

                79386881a11e6c7d49f2d117822c29d7631f3830

                SHA256

                3c682e37df71cc036c2b5e91064407fed8091c0306a856121e28c19e7110e1e4

                SHA512

                d8f922b028b03c6379911308cf240d104b40a9c46f67a6ddbbfcd20110c287e8106376cd6e8295915d054e05b2a8a045b3ab8d98932c1be97b1f258525db1a68

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\pl.pak

                Filesize

                444KB

                MD5

                41cb68de75d011281c7936194ef8457f

                SHA1

                6bd3efbf5142769c6fbe8478185edf89f471716a

                SHA256

                d52358b8fd70f1f18b3f8ecc4aa9c791591dbb698ef8d8670312e50f024db451

                SHA512

                ceb90fa9f723c3d8d522a401cb46545c72a2ddd1d04f091e9d7ca5212cedcc641c54cb8fe19595e9c823b2ed374757e5ba7d1813cd763bbd8d726b1e2ebe0407

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\pt-BR.pak

                Filesize

                419KB

                MD5

                4f3f65f6639ae1905fa37b9b6ee2e4d4

                SHA1

                07553f41c4f8f3d105eb92b65497c4976449a6b4

                SHA256

                b4e0a6064dcfe876c819ec4b00f9857b84ff52cd3e845bd0c48e31ad43a23db9

                SHA512

                85cfcaed8fa2026c13735e7d4b6852bf794dd4a8ac078889d5ef46ec2ff7173ae443addcb0b0c711f6a31f80469fc1df5af1a78da6397d9df5e33cabb354fba2

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\pt-PT.pak

                Filesize

                420KB

                MD5

                7074036013be3839e218ec7b15d49215

                SHA1

                7711ae4e96efd4f4676a3c0281a92af56329deee

                SHA256

                342381f89058bedd809991a0b416f48642df3c71aea10bb13e13bc15eaaf46c8

                SHA512

                8a1e9cefb8a64b3664d9496e2d2f76e2281b3c427fe24ecb70ee74f78778d94def66787a7e35ccde6037ec061e29a6ac7fd8b4010f77b13945780e1316bb16e0

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ro.pak

                Filesize

                434KB

                MD5

                e66343d1af0b8f483116ad7689e7faba

                SHA1

                a245b6aa9309a7c10aca8502cbd10d9dcbd5d8de

                SHA256

                b7b56396806412ac1721d2648fa98a89a069d1f58d359d8e90dd1c6b8473b9a2

                SHA512

                9f6517aae57f3d8a65d4f9b354b7ed9923c1bab8a414b78347f4dc375707907d16d458d9d458d8fbd28f065e268e092770fbc198833315ce14e6eecfc0d3f0aa

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ru.pak

                Filesize

                437KB

                MD5

                ff229d06309808cace4ffc55b3f1d2a7

                SHA1

                2f32e590abd0fdd9f918a8462ccc635676e2846e

                SHA256

                cea51a5043e973e9b48f4a1a84e75f145a5a0e5068d9d6483164092c192d634d

                SHA512

                7ce038b8729ffcea0701869174b36c0af478bfbfabef165e386cd295c6d05189d6682c9e2f8ca132b3d0e238d67a10180e468e2cbdadf56be1a5188780104e1c

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\sk.pak

                Filesize

                448KB

                MD5

                b88ec1f7bbdcf1b6690f2698b3dff738

                SHA1

                c5975de1d66827087bbf8cf0f4b3bda816a723e1

                SHA256

                04b179b5c3a5468f495a0620a2dbc6e312ebd76ba32b98d8cc7daafb46edc21e

                SHA512

                ef30ac14b17b71f5659f33778d8c4b017127c3c5bfb593dca919a80320a66dcf5e0a3f228dcf62b05df5d4d6929eb5401ba9c369affe89cf541633bb743553f0

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\sl.pak

                Filesize

                433KB

                MD5

                1b02b0834b8bbd12a77f7fff09e1d81a

                SHA1

                1898cfedde55aae307f7578b88cb0bcaf61e1d52

                SHA256

                b36e1fe2405cc4b9f34587e30da2feadaa6f03124769b02f79333adacaddb49b

                SHA512

                b1006053ace6f8842e9436c94934b2e7d1b502e3df9ecd1fe59ab39ae35e69e8f0dcff8728aee2c35a3a1eb7a27f0146d6113b4de0632dbab20eb0a37942bc4c

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\sr.pak

                Filesize

                666KB

                MD5

                4d1ee9487f4ddfdc4471366d3965293f

                SHA1

                4e53084fe0d4bf4f46ea980f7423787084152ff2

                SHA256

                b75a222db70c3f5734a75042718da599881d5e84cc52b332e9162f78b32f4819

                SHA512

                a44a448203cc9388d8df4c39be9db5436546fa17add0975c18ce01ea0a5cba142692660ce6efbf00699793ca98af8e392e41a07dcd9c183fe03414574389609c

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\sv.pak

                Filesize

                389KB

                MD5

                094d69544816535e4d040ef0ce923100

                SHA1

                5891cdc73bc4c112855d099ee112da0c3e9cea81

                SHA256

                110112c2f7ff5d3c8599036669d156e96ec19e70515fbba3bbcb2043ab994680

                SHA512

                023037077a3482a3bf2ac076b5c00922d7039bfc2098797275465138142fea0f97c1e003f77de71b9ab88f786b7401182618603610c51f634ad17a123faf5bd4

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\sw.pak

                Filesize

                408KB

                MD5

                bc771a0e8398e14653d9a4373a73496a

                SHA1

                6e844c7daa666640ac3093d5e51276886a0f5a66

                SHA256

                7a5d056fd317b7b60a4fbf0df39dfdd21829f2245393a21e1ddccf1a4e3b61fe

                SHA512

                79b916c737bc44051e6b4c0a9afdfba26928536034c5a5149586594454855b7074f6f8fdaeb98f0b7bde5c3da36d66988f683de8961e13c9c82301676f942998

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ta.pak

                Filesize

                779KB

                MD5

                ca3e0c6154a25cf1d96ad9f6c4b3247e

                SHA1

                fe1fdf253fb94a0604dda99acbe8a5db6016327d

                SHA256

                9206d9b80fed6f89a0041cb7ae7ca45c34a8bb7d965c5e78f14fbe56898b3e45

                SHA512

                73d89ba9c968d8f621dc914d70d4742fbcdc24f0a07a6f9b7a14f37a79565ea4a63a4980dd07a2f9fb96907b60ceece48447e2b08905a8943df4fb78c4fdec11

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\te.pak

                Filesize

                599KB

                MD5

                8c0f903b9f8d1a0d3d5adab2dd5cff2a

                SHA1

                187c8a4980802f89fa8b5d9c5f0ded296cf098d5

                SHA256

                405c5ee00bd2c52c030850f655c1042b78946441b25219c5d9abc2f942a216ee

                SHA512

                a6e0954f628e84c35e1ad631d659dcb94000eb1f0fed7120066bc7013061f483d9d85e17f56d46266046024aa28f38364923d4650520d01a07094b056d017775

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\th.pak

                Filesize

                429KB

                MD5

                46db589c94ff4c56a000564932ca595b

                SHA1

                8128e3106380f1850dc990f6e798a5e9b8f6ccd9

                SHA256

                c2af1e19b7c0e96619a1abd3e7292bf660ba0df1de9710734a5b0e4c94fc4429

                SHA512

                526c1a16386abcfbf0219c8ba497dcfe185623fc642f8e76928c2928a410bdc7e75485a657416120e896827c5b811564bfb9b2b2c4607ff0971f35c6f9102a27

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\tr.pak

                Filesize

                415KB

                MD5

                418dc1cdd7ccc10679523665e1626280

                SHA1

                d4407ba9bc55153963150e6e30f23cc5b2304e30

                SHA256

                26fd3317bedd4080038d7a0003d73923fc0edd40283ef11b5ba80bb27f946c13

                SHA512

                4a907bf14dc9cd8ecb2f17152ff5ea0a6dc37034c95ed31a445395bcb9ad6fc23d4117e81f94ac82d767869b0b828738eacd33b810df87dd41cc3ec2d5b92e94

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\uk.pak

                Filesize

                597KB

                MD5

                8182d1048ac25beef1911fb137eb8660

                SHA1

                51b263a2a539eaa0c83d69e1531e16cfbb58451b

                SHA256

                5eff361cdbcc081cd457ad471027b8d8b41f313924305e5b723dfc1c1fa51a3c

                SHA512

                04ff28e57d33d2d2c31ad9e1b3790465919714f466f9cb81bc898ca97ee6280490c77e320235e904b96b03cc70aaaf39ef50a73cda406f7c48eb137612164dd8

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\ur.pak

                Filesize

                500KB

                MD5

                8ac0b558118c0352661a1e8ac9084c1b

                SHA1

                5ab37c6e9b939edd88df308c8f6e25e62c6c0dfb

                SHA256

                1e1a4c943ff7aebcc8dd289054da4c460a6dc326df76b108f00695619d42b995

                SHA512

                49bb48bdd34bf6c345bd25247cead8b6689b70ef24eb5efb671b82e1c8e38f87206b079cd449fe52db4592eff44cdc93123b60add3e55d53ff34cbdfbe7b1606

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\vi.pak

                Filesize

                492KB

                MD5

                7b2cbb79992021e2fa2714ae9cdf0728

                SHA1

                a543c9b6d4dabd48c6b5d995cfa3c915a2b76433

                SHA256

                326e44c27579796e4b55cc281c3e4c9bf5ad7aa87156530709cd6296350758af

                SHA512

                5c77c2dd9e5ee9d381a2524c733d3ffb55146160393bf919ed8855781d1e8ed0c4d707bd71554d7868ff53bc546344a415e846dc15f68f0e7630d49a94f14049

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\zh-CN.pak

                Filesize

                357KB

                MD5

                d15fa5c75a835983af2663466b5a8494

                SHA1

                6580f7c91e31491a296a039f681c93810281717c

                SHA256

                b33b23552f8f76aa43671556676298c0af54641e9f1de27a8208750148e737ca

                SHA512

                39a63db44e1e2b67b1937af803336b221bbe94d3bb31b2117530886fb9e66131efd0eb3969c251d2ee264a7c07bdaecac330c97b1cbe74b3988cac6ff86f3be5

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\locales\zh-TW.pak

                Filesize

                353KB

                MD5

                c1c8f601f2d0bb06b49d870c80904907

                SHA1

                6237df5d4580afccaa6a07f35729f9e2737c82a8

                SHA256

                69d888be9d5affc6086e901cf52936477101374abd8186f8e8f6cc38af826691

                SHA512

                2d68f116cbfc77a17b9fb550addbde95ca09f10ce1745d5aacbb9e76dd4d041d6de8e423844266711c64fc6733bb805311a5c8838f576d049340f32d4e0eccb2

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\resources.pak

                Filesize

                964KB

                MD5

                f4411e7d9dbadc38ad8436cd81af230d

                SHA1

                524992dfaa901b3593319d3c7582d3f016847686

                SHA256

                2fb128829d7c8a203eefd7e7994568ccdbf762e8a6d38e12bfd58622b0304921

                SHA512

                7cf47ce03800b8c069efba8dd753bf97fca86196bd7f489f25b31002e122dbe32b5ec2292fa41ae637677691426c7cbed8a8f876a8802fa4de91f9015777e271

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\resources\app-update.yml

                Filesize

                175B

                MD5

                9fafe2931214f36d81e3632b0be80774

                SHA1

                cac08ef88b787dfea0acc0d18e559fd9180819ba

                SHA256

                9161bcc9763091ff3670ef98eff99d004c0f67f13b5dd94715c661fae274cf33

                SHA512

                a671cec02c8957864797cad7657b4d2165b40980410db0696cb6dbd05b9485f0491065f1249461fb7777d73cba601f8d1035c9c2718a52a56a217da859c03217

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\resources\app.asar

                Filesize

                273KB

                MD5

                7251867a7174156541bb8bdae0e515f1

                SHA1

                bc0c7167791d6c068a9b2f75f59d210b93ae575d

                SHA256

                1788bd68df9f123418ab288083e04eb9912be84219d5f835c7ac909f530085bf

                SHA512

                fcfdf4254bd7d2f06d933041615dcf8cc321903f699ae1848ebbf4a246bff557af335d7a3d7e4aa6eff9799766c86211f1d0699f4fb5a0a0c3d58b7cdc30dc7a

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\resources\elevate.exe

                Filesize

                115KB

                MD5

                2a6bdc3ca1880177bebc7538312de49f

                SHA1

                1684b924ab2955cd8d3673c1fc8bfe660facf882

                SHA256

                601ed6e94223ca3f491a4c75a05a9bf053e8d4daf109573b35da4b2a581ad360

                SHA512

                bca7ce9964308c23994a1ab0f03ce6d3c2533681b308dfb916f0aecfdca824479faabb9a6c2c9780fee426aab18e5a5002ef90951ef63f573c713647d5810133

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\snapshot_blob.bin

                Filesize

                253KB

                MD5

                3a4095538e021b84396b3ce25affafc3

                SHA1

                cfc20771227b3c1f3197ff6a91cee68555afb247

                SHA256

                c1c9145735032bff20b2fff50a4b92ae9cf47290f433e3f3b32e3b232d610c59

                SHA512

                7b71083180f237f5f37cbe7a9755f6606708b959986562f9c5880cccea17b80a5187649fc0cb6965a8b40526bcb2cb6d980d364be528465290658b4d9084348e

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\v8_context_snapshot.bin

                Filesize

                465KB

                MD5

                b4e6a12f0a784235342ce7ba0b6a54e8

                SHA1

                042c61b1473adecd983701bc51058357219f648c

                SHA256

                18b4804a4f255d76f4d6f6ca998f7c0a8edc18b94b0c04ec51b97b51b9817886

                SHA512

                5c0dbfa34bff80fdb9c67e524d368180d26cd843713630c248f7881a94dd498bcedd4dbe510eea26ce26c67a7c97681329596a86e1c748397f78ba14ffc34aca

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\vk_swiftshader.dll

                Filesize

                780KB

                MD5

                4e3dbf40fa300eeb4831d38ee00381cf

                SHA1

                46799086be08faff5f740aa76036ee67280b3e8c

                SHA256

                9b7682fc4d0a25b118b908bed40b7a2ee11c1d55a24018e05fd02fd6e590c2fd

                SHA512

                80cfdfc5d782a205ffd8226e79314d7424f2d48842d199eb0f9a202f379c712b14753dd159294b16a820c829905a3122514db2a0e1218a464317363d2870428c

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\vk_swiftshader_icd.json

                Filesize

                106B

                MD5

                8642dd3a87e2de6e991fae08458e302b

                SHA1

                9c06735c31cec00600fd763a92f8112d085bd12a

                SHA256

                32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                SHA512

                f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\7z-out\vulkan-1.dll

                Filesize

                560KB

                MD5

                c4800e23dbf03b7c7edf189f465136c4

                SHA1

                35640ff27ee101919921534932841da03866881d

                SHA256

                13799a3652a41eb1d9009738ef834876f93aa1800a21d3f44b31e5274a9eede2

                SHA512

                d9285cae7fe5d32d5f3890cfe119e76d1af2572306f74a1cc312102087dde9d7de73c51bb08815cc095f404af07628b4dc18705052e5eed2528bc012d1c485e7

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\INetC.dll

                Filesize

                238KB

                MD5

                38caa11a462b16538e0a3daeb2fc0eaf

                SHA1

                c22a190b83f4b6dc0d6a44b98eac1a89a78de55c

                SHA256

                ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a

                SHA512

                777135e05e908ac26bfce0a9c425b57f7132c1cdb0969bbb6ef625748c868860602bacc633c61cab36d0375b94b6bcfbd8bd8c7fa781495ef7332e362f8d44d1

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\SpiderBanner.dll

                Filesize

                9KB

                MD5

                17309e33b596ba3a5693b4d3e85cf8d7

                SHA1

                7d361836cf53df42021c7f2b148aec9458818c01

                SHA256

                996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                SHA512

                1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\StdUtils.dll

                Filesize

                100KB

                MD5

                c6a6e03f77c313b267498515488c5740

                SHA1

                3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                SHA256

                b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                SHA512

                9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\System.dll

                Filesize

                12KB

                MD5

                0d7ad4f45dc6f5aa87f606d0331c6901

                SHA1

                48df0911f0484cbe2a8cdd5362140b63c41ee457

                SHA256

                3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                SHA512

                c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\WinShell.dll

                Filesize

                3KB

                MD5

                1cc7c37b7e0c8cd8bf04b6cc283e1e56

                SHA1

                0b9519763be6625bd5abce175dcc59c96d100d4c

                SHA256

                9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                SHA512

                7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\nsExec.dll

                Filesize

                6KB

                MD5

                ec0504e6b8a11d5aad43b296beeb84b2

                SHA1

                91b5ce085130c8c7194d66b2439ec9e1c206497c

                SHA256

                5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                SHA512

                3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\nsis7z.dll

                Filesize

                424KB

                MD5

                80e44ce4895304c6a3a831310fbf8cd0

                SHA1

                36bd49ae21c460be5753a904b4501f1abca53508

                SHA256

                b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                SHA512

                c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

              • C:\Users\Admin\AppData\Local\Temp\nsx59AA.tmp\package.7z

                Filesize

                386KB

                MD5

                e450c62b71b4660942a1ee1a8c2d4763

                SHA1

                36f88b3083108560c179306a82d122276bb089e4

                SHA256

                001c5c1035331bb66300d29f633f4b69d462c640c1bd2557af5f8b76186364c7

                SHA512

                15235aaa1fde1fa39dd3f5acb2f88742b1f51269283042146930b46dd8bca9cb534d1a0773755581a3e1a7c81a4a9d87199ef2596ac44c2b88fbbbd6df45f60a

              • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                Filesize

                2B

                MD5

                f3b25701fe362ec84616a93a45ce9998

                SHA1

                d62636d8caec13f04e28442a0a6fa1afeb024bbb

                SHA256

                b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                SHA512

                98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84