93bc00efa83d62565ddff22e70a79adb834af2208ef03481947d75ebc801b892

Analysis

max time kernel
152s
max time network
157s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
23/02/2024, 08:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Era Setup 1.0.60.exe
Size

81.1MB
MD5

7f818ce3f7b5ed1eb10a9ad8b5f1b066
SHA1

7e734de5ecb14de84b80ce87a8763870f4618905
SHA256

93bc00efa83d62565ddff22e70a79adb834af2208ef03481947d75ebc801b892
SHA512

36e7641e61183ddc4bab8a73018b536556d6744f717f8e42d0a122609765ae8775fc46c8114140f03c6b27e05642bb6c3506a87c1d07650f82c32fee71d0667d
SSDEEP

1572864:xWrkJoO84iPbhtMNYW4poGQ6abFpPAQEJbnqrIlSHmulF1/iTmuuOXfo6l:xeOEPbbiV4pTTApPAQEwqAFF09Qg

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 5 IoCs

pid	Process
1464	Era.exe
4868	FortniteLauncher.exe
3520	Era.exe
4876	Era.exe
1844	Era.exe

Loads dropped DLL 19 IoCs

pid	Process
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
1464	Era.exe
1464	Era.exe
1464	Era.exe
4876	Era.exe
3520	Era.exe
3520	Era.exe
3520	Era.exe
3520	Era.exe
3520	Era.exe
1844	Era.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Era\locales\gu.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\ffmpeg.dll	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\LICENSE.electron.txt	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\ko.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\Era.exe	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\uk.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\hu.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\et.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\he.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\ur.pak	Era Setup 1.0.60.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\scripts\build-in-docker.sh	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\cs.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\js\helper.js	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\ml.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\js\releases\options\uploadSourcemaps.js	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\vulkan-1.dll	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\pt-PT.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\sr.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\zh-CN.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\elevate.exe	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\package.json	Era Setup 1.0.60.exe
File opened for modification	C:\Program Files\Era\chrome_100_percent.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\am.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\el.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\fa.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\ta.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\sentry-cli.exe	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\js\releases\options\deploys.js	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\d3dcompiler_47.dll	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\ms.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\pt-BR.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\kn.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\libGLESv2.dll	Era Setup 1.0.60.exe
File opened for modification	C:\Program Files\Era\resources	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app-update.yml	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\nl.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\v8_context_snapshot.bin	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\en-GB.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\ja.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\lv.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\checksums.txt	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\icudtl.dat	Era Setup 1.0.60.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\js\releases	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\fi.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\mr.pak	Era Setup 1.0.60.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\scripts\wheels	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\chrome_100_percent.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\LICENSE	Era Setup 1.0.60.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\js\releases\options	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\it.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\sk.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\sv.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\sw.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\tr.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\vk_swiftshader.dll	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\en-US.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\lt.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\zh-TW.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\js\releases\index.js	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\af.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\locales\sl.pak	Era Setup 1.0.60.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\scripts\install.js	Era Setup 1.0.60.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 7 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	Era.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Era.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Era.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Era.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Era.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	Era.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	Era.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3852399462-405385529-394778097-1000_Classes\era	Era.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3852399462-405385529-394778097-1000_Classes\era\URL Protocol	Era.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3852399462-405385529-394778097-1000_Classes\era\ = "URL:era"	Era.exe
Key created	\REGISTRY\USER\S-1-5-21-3852399462-405385529-394778097-1000_Classes\era\shell\open\command	Era.exe
Key created	\REGISTRY\USER\S-1-5-21-3852399462-405385529-394778097-1000_Classes\era\shell	Era.exe
Key created	\REGISTRY\USER\S-1-5-21-3852399462-405385529-394778097-1000_Classes\era\shell\open	Era.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3852399462-405385529-394778097-1000_Classes\era\shell\open\command\ = "\"C:\\Program Files\\Era\\Era.exe\" \"%1\""	Era.exe

Modifies system certificate store 2 TTPs 6 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	Era.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	Era.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	Era.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 0400000001000000100000000cd2f9e0da1773e9ed864da5e370e74e14000000010000001400000079b459e67bb6e5e40173800888c81a58f6e99b6e030000000100000014000000cabd2a79a1076a31f21d253635cb039d4329a5e80f00000001000000200000003f0411ede9c4477057d57e57883b1f205b20cdc0f3263129b1ee0269a2678f631900000001000000100000002fe1f70bb05d7c92335bc5e05b984da620000000010000006f0500003082056b30820353a0030201020211008210cfb0d240e3594463e0bb63828b00300d06092a864886f70d01010b0500304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f74205831301e170d3135303630343131303433385a170d3335303630343131303433385a304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f7420583130820222300d06092a864886f70d01010105000382020f003082020a0282020100ade82473f41437f39b9e2b57281c87bedcb7df38908c6e3ce657a078f775c2a2fef56a6ef6004f28dbde68866c4493b6b163fd14126bbf1fd2ea319b217ed1333cba48f5dd79dfb3b8ff12f1219a4bc18a8671694a66666c8f7e3c70bfad292206f3e4c0e680aee24b8fb7997e94039fd347977c99482353e838ae4f0a6f832ed149578c8074b6da2fd0388d7b0370211b75f2303cfa8faeddda63abeb164fc28e114b7ecf0be8ffb5772ef4b27b4ae04c12250c708d0329a0e15324ec13d9ee19bf10b34a8c3f89a36151deac870794f46371ec2ee26f5b9881e1895c34796c76ef3b906279e6dba49a2f26c5d010e10eded9108e16fbb7f7a8f7c7e50207988f360895e7e237960d36759efb0e72b11d9bbc03f94905d881dd05b42ad641e9ac0176950a0fd8dfd5bd121f352f28176cd298c1a80964776e4737baceac595e689d7f72d689c50641293e593edd26f524c911a75aa34c401f46a199b5a73a516e863b9e7d72a712057859ed3e5178150b038f8dd02f05b23e7b4a1c4b730512fcc6eae050137c439374b3ca74e78e1f0108d030d45b7136b407bac130305c48b7823b98a67d608aa2a32982ccbabd83041ba2830341a1d605f11bc2b6f0a87c863b46a8482a88dc769a76bf1f6aa53d198feb38f364dec82b0d0a28fff7dbe21542d422d0275de179fe18e77088ad4ee6d98b3ac6dd27516effbc64f533434f0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041479b459e67bb6e5e40173800888c81a58f6e99b6e300d06092a864886f70d01010b05000382020100551f58a9bcb2a850d00cb1d81a6920272908ac61755c8a6ef882e5692fd5f6564bb9b8731059d321977ee74c71fbb2d260ad39a80bea17215685f1500e59ebcee059e9bac915ef869d8f8480f6e4e99190dc179b621b45f06695d27c6fc2ea3bef1fcfcbd6ae27f1a9b0c8aefd7d7e9afa2204ebffd97fea912b22b1170e8ff28a345b58d8fc01c954b9b826cc8a8833894c2d843c82dfee965705ba2cbbf7c4b7c74e3b82be31c822737392d1c280a43939103323824c3c9f86b255981dbe29868c229b9ee26b3b573a82704ddc09c789cb0a074d6ce85d8ec9efceabc7bbb52b4e45d64ad026cce572ca086aa595e315a1f7a4edc92c5fa5fbffac28022ebed77bbbe3717b9016d3075e46537c3707428cd3c4969cd599b52ae0951a8048ae4c3907cecc47a452952bbab8fbadd233537de51d4d6dd5a1b1c7426fe64027355ca328b7078de78d3390e7239ffb509c796c46d5b415b3966e7e9b0c963ab8522d3fd65be1fb08c284fe24a8a389daac6ae1182ab1a843615bd31fdc3b8d76f22de88d75df17336c3d53fb7bcb415fffdca2d06138e196b8ac5d8b37d775d533c09911ae9d41c1727584be0241425f67244894d19b27be073fb9b84f817451e17ab7ed9d23e2bee0d52804133c31039edd7a6c8fc60718c67fde478e3f289e0406cfa5543477bdec899be91743df5bdb5ffe8e1e57a2cd409d7e6222dade1827	Era.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Era.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13	Era.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
2176	Era Setup 1.0.60.exe
1464	Era.exe
1464	Era.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeSecurityPrivilege	2176	Era Setup 1.0.60.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe
Token: SeCreatePagefilePrivilege	1464	Era.exe
Token: SeShutdownPrivilege	1464	Era.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1464 wrote to memory of 4868	1464	Era.exe	86
PID 1464 wrote to memory of 4868	1464	Era.exe	86
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 3520	1464	Era.exe	88
PID 1464 wrote to memory of 4876	1464	Era.exe	89
PID 1464 wrote to memory of 4876	1464	Era.exe	89
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90
PID 1464 wrote to memory of 1844	1464	Era.exe	90

C:\Users\Admin\AppData\Local\Temp\Era Setup 1.0.60.exe
"C:\Users\Admin\AppData\Local\Temp\Era Setup 1.0.60.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2176

C:\Program Files\Era\Era.exe
"C:\Program Files\Era\Era.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1464
- C:\Program Files\Era\binaries\FortniteLauncher.exe
  "C:\Program Files\Era\binaries\FortniteLauncher.exe"
  2⤵
  - Executes dropped EXE
  PID:4868
- C:\Program Files\Era\Era.exe
  "C:\Program Files\Era\Era.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Era" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1696 --field-trial-handle=1736,i,8916939794042534542,14909381218560073735,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3520
- C:\Program Files\Era\Era.exe
  "C:\Program Files\Era\Era.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Era" --mojo-platform-channel-handle=1844 --field-trial-handle=1736,i,8916939794042534542,14909381218560073735,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4876
- C:\Program Files\Era\Era.exe
  "C:\Program Files\Era\Era.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Era" --app-user-model-id="Project Era" --app-path="C:\Program Files\Era\resources\app.asar" --enable-sandbox --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2392 --field-trial-handle=1736,i,8916939794042534542,14909381218560073735,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1844
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64" /v "Installed""
  2⤵
  PID:1908
- - C:\Windows\system32\reg.exe
    reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64" /v "Installed"
    3⤵
    PID:1512

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Era\D3DCompiler_47.dll

Filesize
896KB

MD5
53aed96f53a99493a70d7e74bd720f72

SHA1
575abb510f4b82cd8d37fe8e3fb81c662e05b013

SHA256
2143fc35336e75498574b1e2514a0e844608af983ec15093211d9975fb0f2f10

SHA512
fd8904bce04332f93859b330875ac53a5c7e3d44bd0793728baeb7ce1f8b98c8b882290d690c5c212eae3f7760e94f515a97307a6e5ca1a30b2f544e40616dce

Download Submit
C:\Program Files\Era\Era.exe

Filesize
2.2MB

MD5
50ad0401cb8f4fbafcfa902e7680d3de

SHA1
9ce3ccee24fd4c1f05baf987fd7f2e71ec1b8636

SHA256
2009cff4eab62c111d10a3a2f0d75f3a6d4d72bfc39cf9d30359095f2ae59920

SHA512
fca70577c29d4d0bad982b55835adca309f6e6b7ab347a9a1f308a0cf493e310efd9de10efdf431a16fedca0195086dfd8deb9604237237c9c26141c19f584ca

Download Submit
C:\Program Files\Era\Era.exe

Filesize
1.8MB

MD5
519a06c88c50d1dce517d2006b5f9dbd

SHA1
574f8ef3391ca39f95c147ab13ddfc328f5a8e6c

SHA256
00effa0564824ba19616210ec8cb91867c1b107f48e188a1b26596757b59211f

SHA512
5d7a061738cc67f76500eb3084e68a5dcda1d699697e753a508b0bd8acdc1414965bf326df6049c2ab26fb967dfc9744920713115c11fa1f78d3fd75343bd645

Download Submit
C:\Program Files\Era\Era.exe

Filesize
2.5MB

MD5
88e019efe563d96942f42d3271e2eb4c

SHA1
377e7a83c0f0a648ff3e43f34765ac4e6823949c

SHA256
7ffcec34942beaa170ba3eb1552bdd19f52a892c092a99ba361337db56fad09a

SHA512
91faf2f7eed3cec1fc027766250e686320dfe2201df313700ffc44f2351cc6025652ce2e3ab02b2ab1bc49649bc750b5c854501dd88786602645feac8a932ed1

Download Submit
C:\Program Files\Era\Era.exe

Filesize
2.6MB

MD5
58b4e7eb1c69e838a2a90aa35bdd8075

SHA1
4da0691811f5fcada4071a2c7c31885f89c4f06c

SHA256
01a2a879170a2bea47f561f980afce04cfba9f221b08bc12820112e3f8227a10

SHA512
ee3519a9e9b89a293c09756ae89305259c1c596b7e85b052ce9123b3dcfe4ad0dc33976c4253240480d34c0116a41296152082611b2d3bd2582696fc05c7e990

Download Submit
C:\Program Files\Era\Era.exe

Filesize
6.9MB

MD5
c04475b9c36d9a11da704ed83aa19bfc

SHA1
24e5fc275061663cf6bc12b00643f34e01a10819

SHA256
72406ed37138efae69ec87feebe61ab80c8227950ac5f13fefc589461977fa13

SHA512
89c4f7a8c90bdc760a52da2152453854342be24ce12f90e1b41dc2af7ec2bc857f052aec7d119f470b31e6c9408e8d754ace5b1e42a326a8151ac69a4b2adcc0

Download Submit
C:\Program Files\Era\chrome_100_percent.pak

Filesize
126KB

MD5
d31f3439e2a3f7bee4ddd26f46a2b83f

SHA1
c5a26f86eb119ae364c5bf707bebed7e871fc214

SHA256
9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

SHA512
aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

Download Submit
C:\Program Files\Era\d3dcompiler_47.dll

Filesize
832KB

MD5
3fa568fb8420aa4d5ad3d8bfbc8cde2f

SHA1
a3ce7c9106b36933da4a92360c663601af45aa9e

SHA256
99998889fd6843a4fd0ed960a54e38f2b31a983753cdbae774ce1929ca2c68dc

SHA512
94e00d43228f8aaeea2b93212b6093f2987ec960fae5a410ec8c8b42e1dd1285e8e9e8794548d2dad7f5742f53c276977ef09e1c33feb07da4f06d21b6ddf197

Download Submit
C:\Program Files\Era\ffmpeg.dll

Filesize
2.6MB

MD5
bd46f051b6d37a85f1356a64549f1223

SHA1
8bfd56df56e51f6a78d576e5b421772fa4fe0e94

SHA256
2042feb820175c5b464da2e92a8b01e166ef2539492f5692104779972630f3fa

SHA512
d59a68be7ed740e064f16ddbeb6bff2ab75675ce467e87e65b9581fe04a2080fe73b4f14c1806159d3f0422809e48c96e370c3c6cde376e94bc5505317e96319

Download Submit
C:\Program Files\Era\ffmpeg.dll

Filesize
1.2MB

MD5
4e363eb601ef318cddc2f171c8e53346

SHA1
a4f7402aa7936c8c709e393282babf72ff65ec78

SHA256
2de286ec08975252ce445c28a7ee024a06a6a4a5e4962745c4844a41cb53c3ff

SHA512
bc7bf4ff95f3854c5bd8915fd1acf03ded9c5b7b78b501d5517ab08e936a482adeb91bfa93f28e80f9d471b4fd45b32506cd29aaf4f4b434e3386f1274ff3ba3

Download Submit
C:\Program Files\Era\ffmpeg.dll

Filesize
2.4MB

MD5
840765f920f819658ccf703fe0ff8db7

SHA1
aecd19bbec7b194b52d355eca8dbd5749a42d2db

SHA256
c3ed85083a8c50e4f6e2c9a1432bfeb3697b6548d3d724f926d8ca4c7a64be0d

SHA512
f045a32337f99bb79c8a4acda1a757307d6764e9c37902f2a9ef7dc1ab0787a17467b85f448a94eb4d2ccee29e7fed7011bd30b2658bcf9f06fab1a196035085

Download Submit
C:\Program Files\Era\icudtl.dat

Filesize
2.7MB

MD5
a43f17400dae35438d10ba8129531794

SHA1
271f6f0118f88c75cb64a84b0f1f5d8da2ae01f9

SHA256
cd0afeda46195cf4e7bc9f0c90b8da791568169442346862dfa61c55bb8c7676

SHA512
b740ab805e66460c313e0530048138fe6be53c26bc67814323a4752682cc6e6a75d1ce2d4735ccba1349da9bf6e15736fd84fe8b1bb7c659d49d93e2f0bc82ca

Download Submit
C:\Program Files\Era\libGLESv2.dll

Filesize
832KB

MD5
de33e46a0dc3eb7be6e368039c996d4f

SHA1
6b900dcdc7468a4134f25b213ec997179a3c9f55

SHA256
6731612b85ccf6181a58cb742c12fecaf69fd6114258cfef16a1613a09a2b1d2

SHA512
4e59ae9288edbd8ab0600978a63e4b6596f632e723f3af5c3cc056946584a8395a063274a0cd36d7f02bd10cdc720a913f1d397b6d68af386d3d2c1e20cf20a2

Download Submit
C:\Program Files\Era\libglesv2.dll

Filesize
896KB

MD5
5dea0ae6e907269f3d7f00e5ffef5e50

SHA1
6338cb5f5c546d2dc786972c5b330d5c35162877

SHA256
25ac1add485a3658edbd47d36d83084ef4f74e608cf53dd6886acea122516be7

SHA512
0d26276892229aa717f4864e6f50e8ec114b0b9b5865712f0d6afb6d6569a8cae788c372614dd8fa14052a7674dca14f17b4122db3efafd0d7b6a518f8c911b2

Download Submit
C:\Program Files\Era\locales\ar.pak

Filesize
602KB

MD5
98f8a48892b41e64bef135b86f3d4a6c

SHA1
32f8d57ec505332f711b9203aed969704bd97bc9

SHA256
e34d5cabaed4634c672591074057c12947bc9e728004228a9e75f87829f4a48a

SHA512
6ed3fe415b2f6de24136917da870b47c653d15c7a561baae55a285946a6f75e5141aba3bc064982f99baef0a893266693864c2d603c5c22c2b95627b2035f7a4

Download Submit
C:\Program Files\Era\resources.pak

Filesize
5.1MB

MD5
fb620332959ee6e46ac1c2a2f0e1b2d1

SHA1
eb18c735d187647c3c529932b8b80d9c9af09286

SHA256
66153f7b388503a9bab9df1fa157d3af88548bee264525694bca9a61ce3495e7

SHA512
1e5bfcac24a76ca8fae7b7fa5407f4eafeecfcda54726d66586f1171a7ba30cf76544d75aa44f1eb64b202e686ccd2c00c8cc0b24b249fc5c6c28c156cd03775

Download Submit
C:\Program Files\Era\resources\app.asar

Filesize
2.1MB

MD5
10837b6b6800b5d3f723d35c4d3c022e

SHA1
4702711d701ff1a66c69c889776340427a8f36ba

SHA256
03f4ae8267bba999f51d5162345bc9c8157ff135dd0e6d77fcdea65254726bc2

SHA512
92dbf9975f269cf52ef58b950ed38d5ede1079b601ed8f76df577647256ebb197fcc5327df81aec009b0a67275cda3541ed1a9cbbb058cd4b38d56e261bacf0e

Download Submit
C:\Program Files\Era\vk_swiftshader.dll

Filesize
768KB

MD5
172a1e17f8784ad47318c29ef2c87e9a

SHA1
0995a8a4164daf59a0707e400a49aca3a1ae2163

SHA256
0a34f1012747904449a4bb1c66a55f102ccf27a143aca1d00eb07a6b569edd03

SHA512
f451d7162435ad6dd011dfd2747038e2945a0a237cec7a6d89cab1164e6b90c8cd61d0d9ebfd7b06da324f5092c4a0af7b476daf6bdc897e2b02016947b4bb3d

Download Submit
C:\Program Files\Era\vk_swiftshader.dll

Filesize
733KB

MD5
54640148642f1df1cfea71a8666c2a8f

SHA1
4bef6cf674c73c9350c061e4617529e43dbc3aff

SHA256
008d1ae575c90732e952e76fbc55c3353f0a3c3e4ce1ffb820e7cf528bf8e76d

SHA512
65a1482c44bcadd0f0523df2a5befa52f0a4d5f5c12484af9eb17b81d1e34099a765b20b47feec35fad4ac5b7faae7f184d5f5c98a2e43ebc796294b5fdda1a6

Download Submit
C:\Users\Admin\AppData\Local\Temp\8161debf-9d25-4941-965e-92f7d9adc42d.tmp.node

Filesize
3.6MB

MD5
1a190c5bbed9bfb83ad0317edec568f6

SHA1
0b291a5e820b21503ed5f7a727cc14173a2b4644

SHA256
d30fd62696d8c7e912a576f62f1f82302f2bfc431ed21736dc6912d50f124f1c

SHA512
96fb669ebb840851f7c7104ae2e5aa851cc908553c3c0f30c64b87b07ece79b4b09d2e20509549c9d0fe3ecdb08e059285038b597edb22b6e80d8ee8dbffe9d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\d375f3ea-3b54-487a-8beb-0b60772394eb.tmp.node

Filesize
261KB

MD5
0e722fcb4bfd093b7ac4be9a64ddc814

SHA1
71483f150d2524b1432f1c2213651194e5976122

SHA256
30cc2da146f0d67386bc8a8a6074055bcdb31b8370784a2b559f847d44cbfca5

SHA512
047b8ef568bfe6c1e6557e7f208be0fe81dff9cdf792d77fbb375bce24c9c15a1167414f79e09a92ef24811a277a516f092bd4d2939e505474725753da638b87

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\Era.exe

Filesize
22.3MB

MD5
d353540a01c89d2c935fca5e6f468ef7

SHA1
f070516a6bb8e7170c78fe96b37e435995edc9ce

SHA256
3a65fd484c6b481907c7d275132bea1c71ff53e3cd669a59f63d47f41724415b

SHA512
990b0d835de907a2c2aac4acdcc600b2c4e9e3429ccf838de8a7173382f160e8ad813b9c09fbc8d0f23744697d15178568d8ffc4bc636f05a3b9e0f23a2e5ca5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\LICENSES.chromium.html

Filesize
768KB

MD5
8b54b2eadd6977753761b100829c0ca7

SHA1
1360346282d1a260db2c7a2de9e979219152e3f7

SHA256
75cda26ccf39b6a03319be8c7850b37cb25719fab27db4f724a4ca8144542c89

SHA512
3bc68da92a7ccd7a631d8e2effbc10a74acef06b7c39bee71b4a217c003883dac6926dc249a31d55da235ece4689e05065be659249b7a16e99c01c86b20901cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\binaries\FortniteLauncher.exe

Filesize
52KB

MD5
aeaa6f47b71614437c0d47828da005ca

SHA1
f9d016d3817ebbc28556967b8b8c05d120acbc58

SHA256
31eb3c804c7a248fe505d948ad9b3891b6b6f9210bd84aaf0eb716478c490b66

SHA512
6785eb5ae5d6d78a9c2f004ba5c91dd6603fd8efb39cb50f4bc3ac16d7377fb1317ba12658b63d575c17de04696b88c09c8a812340c4c40394196dab99d41a60

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\binaries\go_build_gemd_src.exe

Filesize
192KB

MD5
5fe79e5435bee24b941a7418717aac90

SHA1
72a26b1fbd130c6d68c6fceab4d1bc84d708244b

SHA256
e0006d67b2f1d806d204b0914fdd0ef426172b0be809c112952e174868492775

SHA512
d86228626fde39913cec9796096f79e915a75211290c7f337c41ccd44420f4766d220621439d2c32756d3531e75a1034a53d27ed97c6baa1fd699f24fbe35045

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\chrome_200_percent.pak

Filesize
175KB

MD5
5604b67e3f03ab2741f910a250c91137

SHA1
a4bb15ac7914c22575f1051a29c448f215fe027f

SHA256
1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c

SHA512
5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\d3dcompiler_47.dll

Filesize
3.3MB

MD5
51360ac1755661c99fb078715ceff9d8

SHA1
954c5ac1f72a9a0372294f739c632fd964555c03

SHA256
836342326a08d130fc1f88d74f09a5d9ca7ca738d57360c2092f661e60dad4e5

SHA512
1de34e15ede9bd8d2a7a545d881849113537144dc162610668657d58722025b4fe5d42ec385b054a75c75769396ddead1b4b317d52426f8b8d9827fcd340547f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\ffmpeg.dll

Filesize
2.6MB

MD5
c184ad77ac8ce299475c0c85621aa782

SHA1
308c55c03dbb1888fc0d214f5f5315707ec5af49

SHA256
ec8652d431dd41424cbad04957841538fce811898edd158488672df1da2450b9

SHA512
90ab519179e82b158f6a6b44247421e00db4477b4a3ed1135b6bc3af8e16d939aa6286b2781dc02424903f817d5a61b30251b26c9f2335e1ca570d4252c915eb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\icudtl.dat

Filesize
10.0MB

MD5
76bef9b8bb32e1e54fe1054c97b84a10

SHA1
05dfea2a3afeda799ab01bb7fbce628cacd596f4

SHA256
97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3

SHA512
7330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\libEGL.dll

Filesize
473KB

MD5
773bbe681c1fab3d4d9ac505678f49e2

SHA1
6eb8dd50d3674d60ce805f59ed98a5bde42cafd5

SHA256
98a07bfe813d4e0917c82437b9489ab72694a76f71766c9b0cb61daab81ebf74

SHA512
2034ec31a8b71865ba7edf3bbcf5425756c46ffa896909e2c4b423171b205194ddec2933043ee906d8bd01bbfc3a34c2f09ed847aad3c8d5be09a886f19835f2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\libGLESv2.dll

Filesize
3.5MB

MD5
cdfe80a723483aef6900d5413ae19138

SHA1
57293cc889887ea40ebc702508de592fc7c08914

SHA256
d8dd15ee6a3319d2748ea6240002ba75ed5e74060cb5a72f830e1f1ee69433a3

SHA512
67d294c688db43e61c102419d24044b8ecc425abe91389985fc08e7b1db9f8796f52c523ff4b58ddb3423ba71e7c7561bb8608393b825a900655c293484555f2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\af.pak

Filesize
128KB

MD5
64d79c1e84d33d5d6e6dac98c8d83b09

SHA1
7ce7bee5a6f3f42cd8a4f14c90ac9f3949065d08

SHA256
770eda8c4fdfb196143caaacf92ec198060c2fd9fa435a83b6e6f881071d8411

SHA512
4918013ea834c8f1c82fd61a1a7da82ea8e5c07489471cd5ac8af94f22dd479c918c1461c257d9840fae33e90db881bdaa511e35a4963ab2cb70dba1b23e2d94

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\am.pak

Filesize
192KB

MD5
05cd981dcb64b6f149b46c7d2ed079ab

SHA1
5da091ba2c74d6f8456d74ea40ee165457df1026

SHA256
8acedca0b01847b4a0f9502a9bb154863b9af09b4e383aa4758e2b4718822fbf

SHA512
8291d48a8f92c1cabe1a7fd386a6504aee8e1bda32711b5dce488d9bdf49138ab43b75b5e71b297d13fc7cc11c1e51537fd53c65a47af987f7dbed88d8718224

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\bg.pak

Filesize
631KB

MD5
9dc95c3b9b47cc9fe5a34b2aab2d4d01

SHA1
bc19494d160e4af6abd0a10c5adbc8114d50a714

SHA256
fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e

SHA512
a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\bn.pak

Filesize
812KB

MD5
d6ccc9689654b84bc095cec4f1952cca

SHA1
286130971826b0af1b6d29c5283dfa71af7cd7b0

SHA256
e325d936cd97c3f9ddfca2d87caefb8b6e7465ffa31d0386ae2456b18f7a92da

SHA512
db0400820c5cd1100337c955084eac3036b55bbf66b403337bec2079bc47696e2e48a771214662b286f4f45f763d2ad423aeccbd0f06cf0bc11038662558f4a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\ca.pak

Filesize
384KB

MD5
2f8d050c228583559cda181291b76e5a

SHA1
b047f1cfb30b1162b1dd79f7e424a83fd807eec7

SHA256
e1d6b5fd0bc411f2895eaaa1409916f5ffe39a5c6bd1bafe8af7ce33da5be17d

SHA512
e4f150cd9942ef5105e72376835da6edc31ef91783e41cd2fc04600c04f342bbc96e08e23c8af1c0c1e563bb8a7d3840a2289767525c30d08c2f23d0e837801f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\cs.pak

Filesize
393KB

MD5
26765c7be201444f0238962bb16a506b

SHA1
f9d4a33795e45127c14bcf35cc770845627e15e8

SHA256
936466784a55b965d23b016bc49377655bc5d281d012c8369c0809c961e05c74

SHA512
577d52d2d5048cd952aff1e76121a495328c1978cdea2eaa4f85812cc513917f69510e135e96f7967f4ed43cf88e180cb1d9059e17c855c8d4f94ca036730214

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\da.pak

Filesize
356KB

MD5
fecabf71853bab84eacdd95699c49f69

SHA1
8519afc13e100a550ca3d756518a0bc33674e0d3

SHA256
1b0793b1cbeb6a56ff1e64523c37ba753457320aa29f9718022caa07b4981d8f

SHA512
e932d382d41a79ece172349e916221a67d97f5fd4b2dc1325d6bd2f7c6757cbc01d6fbc8d9846f6ec462eb637210f7c650f6944418edbd3f8614ef99030d9392

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\de.pak

Filesize
381KB

MD5
ec069f60c9825080b9d18ff6492e816d

SHA1
34ce5101c9646f9c2deb9820a3b26eb91c525ebc

SHA256
e0f632ce324951002c80e019dd0169be9f6b0640533fa434cd6ca80f28a1d3f7

SHA512
95a88ac98f0957e5f200af76c1a743b976228f7da1bb6c6b3b88a54adcff05e1172d7cf2e6f0a82cbc8ad0aa79974a1bc046516250a3a5889fd7b2e4d7c0b804

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\el.pak

Filesize
691KB

MD5
306a80dadadb1f9182810733269537fd

SHA1
bc01a65a9d024ec72e613aedc60f4838be798040

SHA256
92403b6160e38746597d4dd7f64d64cf19e30b5e7862901263c39679187b2c91

SHA512
491016b8fcca59a7dc9523358c4a7b56c55360f424e8fe9330d6f01480835805e961f1e48f8777660510d9af9a66961c639df162190dec595a867d54150eecfc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\en-GB.pak

Filesize
310KB

MD5
502260e74b65b96cd93f5e7bf0391157

SHA1
b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7

SHA256
463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b

SHA512
0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\en-US.pak

Filesize
313KB

MD5
3f6f4b2c2f24e3893882cdaa1ccfe1a3

SHA1
b021cca30e774e0b91ee21b5beb030fea646098f

SHA256
bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f

SHA512
bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\es-419.pak

Filesize
380KB

MD5
774ced79da2fd32bd1ba52a0f16e0a19

SHA1
ff36dcf8b62046871f441f301dd7af51cb9ce7ee

SHA256
5aff3762747a6e8c6df9f2a3b470bf231b44163006b17ce87e2a03694be27b81

SHA512
7763c15fa97efa9a5af73dcdedd4fe260139bd8ff782ca3aa0937d9355b2d14c3e482e570844ac33d22d7b016c7b9097d727c1dd585f421dccd59ca7bbc24269

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\es.pak

Filesize
380KB

MD5
ba80f46ef6e141cef4085273a966fd91

SHA1
878f35e15b02558f75f68ec42a5cc839368c6d61

SHA256
267e7b6376e7e5ab806b16fde93bbbcd961bf0c3a7b3a2cabccab37faa9a1d16

SHA512
8a8b4f7db23d4c93756b6dc4219f00c77358a8fe992da1f51431597b82c3aa87abf3a98d79e13e7b4a14a1a9e94d388760fb6abf3a744406dee951c8e78cf361

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\et.pak

Filesize
342KB

MD5
e97fe1e6d06a2275a20d158dc4e3b892

SHA1
1575b9b1fc331a70bbe4ca7d1095d4ed6777ecc1

SHA256
d984aee4d18ca24a88846b1b6e0294d373733430f30bb4f1b97bc7d50d512c2e

SHA512
77879a4d1062671b616ba9b2ce0b6f69a5dbed6bd56b73ded902d1f9f44ecd96a2212690b3568c0ba273c73d91589ff2bf18c7ef9b66e0630fbaafde2a61b1b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\fa.pak

Filesize
557KB

MD5
d55f65c6fda6ed6f549d2c9f0a4ce874

SHA1
952792f2da5ed9cb1cfed14e5afb8abf5cf29cb3

SHA256
221bbbde078d135f6daca4978a31cc6a82f8f46536467ebc9a0cd322c58a7785

SHA512
d0bb83467182d8b3a8f8371d749e682cf05f89daefe28764f2c263e7cfbfc3f86cb388061b48dadda26c3dd246dd6f7a57af58ca9344c2f6b90de87af1e91c69

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\fi.pak

Filesize
351KB

MD5
fa7dbd2ee35587ff31fde3c7107e4603

SHA1
baaa093dcb7eccf77ce599c8ff09df203e434b60

SHA256
5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c

SHA512
587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\fil.pak

Filesize
394KB

MD5
3126f74d021e9423d71913bb45a62935

SHA1
c9a80c8585aabbfec34ae891416794b1b3e29a11

SHA256
4cd3fa70487e894400ad29e3bfbfba3e1c5edd799aab12c62c3aff3c2580ce5e

SHA512
fb360723ee53b3f7038eebd1b919a36784a0e3dc878e810bc905c4297379dade6006c8872ed68412b06161cacb0d6e32a7157ecf97d9e103a4ca3b2b71db8765

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\fr.pak

Filesize
410KB

MD5
51ee1ed54fec49effd103c29677885b5

SHA1
ced6fd3354007d1ef3ea7b6689aae5213c20cc69

SHA256
1f6bc09499ee37456968a28b67b81bbf5b9df4f0c6035a388242d2037a3b65a1

SHA512
dfd50ad99b89345940afead11c3a6940d4408a0e6265cddda1d71ad92527ea00d8057ac77ceb2ffe137a3f0d2f321c210bc7cf97ed821f01e538dc08d07149a4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\gu.pak

Filesize
787KB

MD5
b7f4c73d56be31042d8edd7e8ea080f3

SHA1
c0c3595701c0a75c14931ed65958d36df0d925c5

SHA256
c36a20730d5f2b91cb61b5b2a5912db2ea5a328a9b8abe0fca0af300446d3c20

SHA512
ea0d766a754604cad4d5f3180c30f7dfdc3e1cfe79d67365b72adc0d7574851f21bdd5b748b16e8b4a95ade40c8ed0442bcefd511a2934cc9c701e379c955d60

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\he.pak

Filesize
488KB

MD5
6376d0a5f4273b76b1f4aabade194e0c

SHA1
337ba39f09454c0779ab64872b9fa11f866d6adc

SHA256
875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45

SHA512
00347f16b5abbaf47fb08663d5efde26ab7de0c7a2fa42e6b5f03c41a83cecbd8e78cc3aef41d5f08658cf346e0ade732774485e8a10008a43fa41ffaf73b2be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\hi.pak

Filesize
821KB

MD5
ede7fa471c5eebc1fa55b9b3b6f92d00

SHA1
1d1f529c615799bb3a3319ddd1357cb5dc71464e

SHA256
1e9623c7407ae8b8a88df3f69a47ae8117f74c4dcb56897bb794a9c38ee5805b

SHA512
0f51ea54e828700080effa6c728230c523ff8e26fb350e6f337028d18614d5dfc4a2792cb92b5e606bd0702067f55fea546029cddd1ebf7fa74ef5521ff08338

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\hr.pak

Filesize
381KB

MD5
7095ef4caf6bd39174487002a4e09300

SHA1
1efe686bd0b7f035aee7ab4c52be6133121cd0f3

SHA256
3d7685163c5eb6a11e745ff934312b8681c5f85dfa8d9ea701e9dcaee1e7a285

SHA512
45488d46dfe7a31a007932917f7baf4c195da899de5dc56d98e555336668af3edb77996487649b86f56beac688374ce77f8feadc01e3f84d30d83bd67631f9c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\hu.pak

Filesize
411KB

MD5
d6904e7d1b6750d43a6478877c42618d

SHA1
919f090a6a3aa1112916f5bb0d5b73a62be43c1e

SHA256
3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f

SHA512
d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\id.pak

Filesize
336KB

MD5
881ff04e220aa8c6ed9d0d76bfa07cb8

SHA1
cacf3620d1bf85648329902216e6cdc6f588a5ba

SHA256
9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22

SHA512
9134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\it.pak

Filesize
373KB

MD5
91391f388b4b6c12a72710c35f4c355d

SHA1
f89e6ea977a10a9f050395489285ce8c041c2c05

SHA256
c0dc0a4a87f7bb054a30eb1174c3228ea2014bd94668a7d22995b99c4937d817

SHA512
8796d69d1a8bdbc7690ded45404174b7fa0b5bec8453d79a3c85bf4707c3f32caf634c792c72ce7bda3522eceb5fc6761b696471586397064d9f1f1988ceee88

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\ja.pak

Filesize
456KB

MD5
8209dd8cf4e416416e015ff239b7c483

SHA1
7affd1707b9eec52c26a4c17708c8471c369e2f6

SHA256
3accfd9a1833ddeedb2082fb94101beb59b555c60f42e3070e9e04a372eba84a

SHA512
6a58a1ea8a46c325cac0629f2e3b571532a9a2a342ed61ca47bd1dcee20ce0b0350e4f6d3e8e4c6903c7ba4a4592a6382bf0fcb5437febd1673b3c2ce8cd7499

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\kn.pak

Filesize
910KB

MD5
d3d6bc60bead608e68e776e07d21ad30

SHA1
e40e38ca99026056c127e9e1a1ff821a50310887

SHA256
90b2df3338468e84e2cf2f2f67597cba5c3ceb5dba9c59ebd072ec15a70ce741

SHA512
05421db2f1202573a34de1e722c6bdb55a35821c4aebd54c80e6594fc92075cd9b97e5bfdfe93b4228c3a2646b92a27da4722ef3826e2807238dcc56ba273706

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\ko.pak

Filesize
383KB

MD5
b31780fff9541290c1d9f5b76141430d

SHA1
8b0fbdccd0a7f8141846763a0d27e4e0da0552dc

SHA256
b04c1b91cab31054be70cb851dc6716065545445801045daceb96eeee4d2334a

SHA512
a573dd09520059832e7f53386a64dcdde47452b02ce1e5d7e11385abbc8b734dcee0065b4ca351591bf9cc2f66fae204b9300702246d20265e8ddff4f7c1e6d8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\lt.pak

Filesize
412KB

MD5
7b6bf901352885c0699db71239b7cf24

SHA1
9e3ec5f327c0d0e54a449332061e60a8c79243cf

SHA256
9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350

SHA512
79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\lv.pak

Filesize
410KB

MD5
e664eb35f1284e9fc615e1bb4fab892b

SHA1
e777653abec377a394170b04f79e78acbe4b6a3b

SHA256
b5a31cbfcb40ad8d911de1618c4eb7e8cc67b97eb8878220f15d40eb014d8ac8

SHA512
c3232997e8d306e91ded72e9d81ffae2018af3e6c32fe620532e03bccd2883fce59b2a2290a1580d7080c468c02bcd24c1bc90051f06bfa9a4e17857d4aa583f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\ml.pak

Filesize
948KB

MD5
00292b0801e0dd0a74091bf53f1574c9

SHA1
63a002e7a8796bc4b4459a19c95ce426fbd1ec7f

SHA256
61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6

SHA512
e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\mr.pak

Filesize
772KB

MD5
b9a2aa88c69c42ebcc41fef00c980a38

SHA1
9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8

SHA256
481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09

SHA512
5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\ms.pak

Filesize
351KB

MD5
d5da199f347452c5904bff9332a08f84

SHA1
b5fb8c22708a7e3130684f1a9923b6dab10c3ae5

SHA256
fe58cc4f62fc31e32c1fb9a0893a5483391ab6a91b1c92ed4a5e3103a962da7a

SHA512
9fddeb376bececc51dec997b3ed1e22821340fa172636f641af774dae8bc9b5c0780757380bf3fa8df0f9682a555ede81c449ae9468f63215c17123d13ee9f35

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\nb.pak

Filesize
344KB

MD5
bbae0915edec081b04bb903b689bc40b

SHA1
6a0fc635ce1c431e512b8b3b8448176aa4025556

SHA256
d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8

SHA512
573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\nl.pak

Filesize
356KB

MD5
9f547a24e2840d77339ca20625125b4c

SHA1
23366411b334f990a0328a032b80b2667fda2fcd

SHA256
55413d5eddb3300e0ae0fa5d79d26fdf1e5a12922d7018c8054b1faa9d660301

SHA512
34da7a0b58ee3904d00cf02d16d5a3ef508fb708d7c0a887286fc32cd6145b2bd857d317c784d1d1b17662041eadcf7e225908980eb93f2b81161d845c0bb67f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\pl.pak

Filesize
396KB

MD5
0dc77139d3530695cb4e85b708bc0bf6

SHA1
6915655afd1e37361c011f5c2113d72c7a0e85bc

SHA256
53b59486361b11512fb90f15065104b15ee2322bb7804f859cde2f2ecf9581fb

SHA512
ee1ca1d99ac279df4cc0e532aef2fc531061736b636a84310bdbd627e0f2435eac1a386ebb19aa901b6eae3929bda1c5da4f41b73a25a1b20137522e34547600

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\pt-BR.pak

Filesize
374KB

MD5
a064cb9d7cf18936600e9ccc03297006

SHA1
eb436a0c584ba91acb05dfccde139afbe26fe9f4

SHA256
c9ec3822044365457b8736348cf95a8e39bdfe3ed36267449bf3ed739accef2e

SHA512
95af684abf9d24cfc4d0668a02da1e2e69f5e671d671d8cdfadc22ec991908c6aa5663fe1fa88ca8e85c0508f409fa6c2bbc174c53674270f2b188018d358415

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\pt-PT.pak

Filesize
376KB

MD5
3f367760b57a5e4360dabcd4a650bc5f

SHA1
8d7cd6b0eb42361ee862455ecfa475d28f5aa934

SHA256
c89170385b3afb2ec89fbd61b8470ac718713c7296441c8430f173dac218e74b

SHA512
3dc30780d57dee91215a716dc6b4cb432838aa0161af4371f49f70db2076bd155b170fd2c1617f59e1b572144a2e150a34143eda82d9f2227d24d2281d5aba60

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\ro.pak

Filesize
387KB

MD5
745a9b8c6422682f2cfa5561cc1f4022

SHA1
31e3616ef09f9b1fd1c41cf8f43e504a6f90276f

SHA256
7247470057a936d03bfa2a8776508ab66aa1040c41a4eb8f79c1e93551c74bb8

SHA512
8e0b7f98cb842a862ceca65e0166462275feed26c32c9c299aba9986d36b716a90d4a8db5ccef355ac266b7e969071014cc7ab6439778e77c52754bc23b4c575

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\ru.pak

Filesize
634KB

MD5
5cc0f54e022a9996773dbd64906d5580

SHA1
87c103bd69724579b478f904235e03caf61d5d79

SHA256
b4223b56ec88235819a427d60bb937eb3984076523f02a018f57819e0429bea9

SHA512
b3365fedcba50643cecf1a70297e1e67990d63ae05caa87de01a70ef6f28e0f73a9a0edb0ff80b4138c624e51aa2dac065a2d40877fc92137714ae07734c2f4a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\sk.pak

Filesize
399KB

MD5
72946b939f7bcaa98ab314cfba634e0b

SHA1
71c79a61712c8c5d3dac07a65d4c727e3b80ab17

SHA256
75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7

SHA512
2a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\sl.pak

Filesize
385KB

MD5
4ad22c6c64dbe0fc432afaa28090c4d9

SHA1
19eb65ae52a585dbd9c25c32f22b099020c43091

SHA256
6002c129a56558832e9bd260c427c0bd2e1566e0aea3ad999f89c8e479534f9b

SHA512
94f9d34e76560059ef80fc04be4d54e52a7d934dd28747db7f0f6684243b841087245699a471a55d667623d2ce5e597a3d2c6bc37cfd7ebd2f5b8fb40e6207e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\sr.pak

Filesize
595KB

MD5
fca817ed4b839b976ebcbf59cac66d68

SHA1
413efa65470319999032b6a25b3b2ee33b8cd047

SHA256
524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb

SHA512
cb246d5c5cea30d6e7514841ab93803984cda37461a09b6c340ca64f7cbce4e1212951a4de421d928d433a619dac18454fb403b42581757b76c7eb124ce70cf2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\sv.pak

Filesize
347KB

MD5
5130a033016b45ae2c3363edb3df7324

SHA1
9f696d78b1b9efec180dc89ee0defc3ba23e6677

SHA256
3420a1fbcca5bf8c2d65d6dcb0db78b03f95f7f2fc56479a0de6e3312333ce6f

SHA512
401b71360dcacf3b1fdc411c92195051370db110863cbed37143263e7804cb24b75ff1908ee39ee848c28776df00d6edd8cc748acf3725668af7815929e8066b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\sw.pak

Filesize
365KB

MD5
9632dd7d883fa4deb3963ea663e0ffd4

SHA1
0db135be4b3a7c54c39e9df5034d5576b68ea92e

SHA256
690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e

SHA512
3aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\ta.pak

Filesize
936KB

MD5
f100566697a96ce1f0a0c7e0bbfbe36d

SHA1
4c80a4930ba7d174c4203c199492463242bddf62

SHA256
7e818deedd50a533851bbf08e056bf2ad8d45f442a1a61d9b48e66804ea848db

SHA512
dfa6132a5b7e819e8d326bf5ee539d9ecb2dcd7fea429c75afec2291df9eeead6fa347b01f9feaf2235bce627fd39116176195f7a3d7d74de28951f939db1645

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\te.pak

Filesize
869KB

MD5
b1b6a9e3a04be79080ebbfacc1a0eb2d

SHA1
a5c8eb6a930062f6021d073d5f74ae146dc7fbc8

SHA256
d839531c4ff4a2885c993e0d358f78667215b0950c77a06ef01a6acff9221c5b

SHA512
bf0b163c8fc3988bfeb3cbb4b981596ce5afdf7e40149622fc3b60994e7d8efa5bb24c830036d168a6638feca48b8755aefa8640faae37055cae8fffb6a85568

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\th.pak

Filesize
731KB

MD5
a970b7e9d3aec2cd1b8ab798b3179f07

SHA1
bf17a7e80e01ac1704a1efdf27baf271b4c21e36

SHA256
cd80bf232f2f128a3d411f52c8039987559dbc1055f746eed6e0e8478b116dc1

SHA512
880555a2ac2f278aecb8794d8cc51f0833052e9f4ca187ed91fa35bb475e68ae3255cfe1dc074eac960c73c203e62c6b38077b266f5fab66ccc3ca73e94d4d60

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\tr.pak

Filesize
371KB

MD5
46f9b2a35efdf1120a8a946e4f1d0115

SHA1
af7bec1fba32d912b50288a7d988440627e4ee85

SHA256
b22fc7b75c52cc142f201d5cf107d17c1b173a494a6add022127f559fb46bcb0

SHA512
cd67f9c328408a8295f224aec190c7c411a868755fc5c9e90b4985b3c41a05d6d34dd30d4a3866f6c24e1d640f4c324bfba8c7ab806a6b216151cf0a504a03d7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\uk.pak

Filesize
634KB

MD5
3b2a976a25dca963e91df3695c502d8c

SHA1
ce7ae51211f512c3723bb43ea0de9e6debb70597

SHA256
28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37

SHA512
ba41ee074239afdf8f194b4ccb33060fa9655e3ccdac6a16090959d3214f8db15396b3e038d7de26c478fdd003472f680d2b6ac9a92acaf6ebf8aa258747ecc6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\ur.pak

Filesize
552KB

MD5
ba86f1f13fdc37a2c48c1da34c84f4c4

SHA1
2f1578d0eee76e60effb63967712b15c0d56829e

SHA256
4c7affdcc324cd791d10e235da809ce7501e8005be64340b6e8bf5595647a707

SHA512
fb2fe1548574da860bf27408a4f29d781fcefc300f744f4214843f343e343ad8bae29cb7047f87f5c3277641f561c6a30e5bc9d6490afbefc7af36974305a688

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\vi.pak

Filesize
439KB

MD5
065179c466c5b7457e249f11d152b99f

SHA1
cfc05e9dfb91b2af2944aed4718fa05b43844914

SHA256
b75694e390bd2e20780b3bc72f6e1473ba45d7537c27642a7d888dfd3bb6c3bb

SHA512
fb598391a028b7d3c7e25cae21ccfde655e6f871e498767a54f7cf0d5d4e48207213cd2598ca88e4f46c303cd2d8175238a5a5b720ab37beec1873d681165a8d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\zh-CN.pak

Filesize
319KB

MD5
2febe4ef32e1a3884089908f402ad62f

SHA1
e65c54adc127b78494dd6189cca71f1c7bd2a5b0

SHA256
a7ac9fda6f4cd189b75fdadc4b70cd0d369a09b66eaeb5d032678cb97ffc98f6

SHA512
8e8b030af4c952c32ec277850d5573414630ff5196eaed52820f44e9c5bd03ab6f71a8add19215b0456eed859be0d5a6f28d48e12f1677d39842f35feffd5e57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\locales\zh-TW.pak

Filesize
316KB

MD5
02e9e0bc5c30ca60a869ea761fb662eb

SHA1
c5200f692544b681af8757627da430aeea4283ee

SHA256
c5061ec00bd969f76f3c0c6ff15ddacafed7491260bd8ced78118691ba57bdff

SHA512
07b5f401f89dfc36499a3e74318b471d9b2e795dc363dfd5a9394089d4783a4b51fd78e2092701b6974f1c51020f3b5f81171ce21690f8547ff3c8f3d54ce781

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources.pak

Filesize
768KB

MD5
35d56d0f0586287ecbfb085f55f4dcbc

SHA1
8e78e73d2e73a1c67a9fbf1b5135836564acf235

SHA256
0dc03a493b57f0d6c5b78ed828060c191db309b0aa89ce972a4354a70bbf244a

SHA512
52426698c645527d5b4ad252703f3590a4b71b90e73e74322467b9e7bf68ad9eb67c08291dbd8882a0bbb81b3f82afeb9853ab22ba2216a107f245763a7556a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app-update.yml

Filesize
172B

MD5
d729a1d49bd7106abafb63e5c670c9aa

SHA1
1c92cffc2f1fb30f2c8281a135a6ad2b68f09b81

SHA256
ca4f2f0ef3f3a4d3ffdd5389d16f8562bcc1290d69a6e2245d0de621854b8244

SHA512
5ec24113065db1b14341b53079fff79f149bceeb9d850b42b8a2c28c54529430249e406da77650e83bbf20f9289dd4c7541aa434a538d5cb12d0821df77e8794

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar

Filesize
8.8MB

MD5
dc2f602fa0374cfb6c62aa3dcc2f6222

SHA1
91fead0eae45f951480c516a8710bf33ce81cefe

SHA256
860f39d9374aee2c6ba89b326d0211942f4c448577ea95ceb5040d9a397868ba

SHA512
221030fdeb92296b705b826fa24aa883e999387744f47f99f0b4bdec8d875825b1f5238dab1f8e31d85ec68631028814e21ff511f9c8edc8f956cad9c2a53a97

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\LICENSE

Filesize
1KB

MD5
c2710cd00242ca7d7bef0fc98dbbc7f8

SHA1
ba49c34590b171487fd5e383ca28632f551865e5

SHA256
9503def7b54ceb6e3cd182fd59bc05d3a30d7eae481e65aaba4b495133c83c14

SHA512
1b8fed37b379cfaac4e67e4ae0d0ae1c7e8fdd5178f1e9a289b646c5adb016c68cdcd743266fca87bd37bffc0951e0b9ecba8a57f0600a7dcd5cb52cd783637f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\bin\sentry-cli

Filesize
487B

MD5
b7c89ec5dfb8b15555f32a3bef6c3103

SHA1
a92048052f5fc0af532cd97ebf82c1a9fbf12342

SHA256
7c5c97aaee075241bdc4fbc610b356445747e962ac3d986c5016acefd66a6ea0

SHA512
c47baa0e0896684403760a13cfa6dd5826152ec7ae83f783040d186eaca8af70bc97530bbb22b720d7482a4ad18c3959ab1af8ccfe3689b19a51955e777884e8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\checksums.txt

Filesize
814B

MD5
1dcfcfdd8cce3e3b0fa697af106e4075

SHA1
f9261519f777790f7cd50c91e389d0e6589bd92a

SHA256
1357dc0a2f6ae355ab59b409c94cf635b7ed849a3bcb60e95b7132cbfd297324

SHA512
751ac3545299650e783daf0a45823660ce0b3f6dd7d722d303b9a801b02db61f7bb3a5129f4481294f2201fb5ad4e7bb1b2ab9a2d993ebde8a0d985f08ce34a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\js\helper.js

Filesize
6KB

MD5
c29ad60a23d5406728a51afa4352b4c7

SHA1
2be817215890f5868717765570ce9f7422735c4e

SHA256
faa867204c92db252271c9d850962ae1ff5c9448444ca907af483a6c874a6eb0

SHA512
e1784b8bf7119bf3380b192f1597cb3179425ff7ab347b144011fd17b62794760e6e092a0a1dae99302eb6c333f1638440df4e4e0eaf64f26d4f3cc46a74d04a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\js\index.js

Filesize
1KB

MD5
50c3a734036b84685a15d56217207d67

SHA1
1893de2684072a3a2961337fa9a9b45a52c52c0a

SHA256
171990f108cd5582f83432c1569f2c3e1aebfbfb159599f4ff2ab693c20a8f78

SHA512
3aa037d12cee7cbf51826fb3e2aa87b4543dd62f5ff5f2f8915128061c07472304601766bddf949647c5ca92e8ee768a77139bbe91bdfaaae99dea4405168ea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\js\logger.js

Filesize
253B

MD5
1d26f69361e75ca5cd2eac5f99249c72

SHA1
787d51c708ce15b2c533a180a2bf639648bc40eb

SHA256
d7d63601d3347efc93425f4f93049cfb9ed2b9ead1dce662c9c1bed3cba302e0

SHA512
7350774074462d33ac9f2e130829306af08a6693fd597f40c39bfb194684f66d965cd23c10de5fc4389e4a2ffe84db727aad23dd683a805ae4825f10026cb040

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\js\releases\index.js

Filesize
10KB

MD5
e8282413c1895eaff49de6dd9b71ab13

SHA1
4e058f522a46e20bbd26f15a6922390ec2c1da36

SHA256
d6a28994173c1c36476121f8b0e3633e01ecd0589289901fba34fe218293443d

SHA512
301d2a6ae958e1ba936cae6f555a587ad87567055f4709d4676a3ef5b1a3112cb338b8a9e744c24cbfa784f00f13a1118ad48fd4f6bb060c5608e4ddc8779389

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\js\releases\options\deploys.js

Filesize
368B

MD5
f42c24cde0162b93624df51f4e2abfab

SHA1
f819638944878ac4cb49438d8599d3fbd9081949

SHA256
3f2316e7fb20e82df9a8b08d6169a622a89808742806adee2e4d89885962357d

SHA512
67258cbaf9f46f1609cec9b87b7a577f855cde9c8efafa3d835a0d18fb3903fcc4733489bf81447cdf2c0a55701d569a75f11a81865dab8f624b722e76b7c674

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\js\releases\options\uploadSourcemaps.js

Filesize
1KB

MD5
d060ac623857ad5ca08e3a944768925a

SHA1
26fe78c92f55f9529ffa2b71da403873da29313f

SHA256
8d4bd4c779e177724aa7bf98e768e50ce8b2950ef5bf39fa08033057b400888b

SHA512
ae1b42d7e5c5d60f935bcd08417d4d9055d71bfb80653281e990a687353592731a7c4423655fbb988728152846aa56a5f180335d254885338bf6c96ef2a8357a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\package.json

Filesize
1KB

MD5
49f7deab5d526f6f79d8fd80be29c97e

SHA1
e6ef40032a68a979454d30e9a483a1043367a90e

SHA256
3fe1b2bd4e7ed12e73c5717dc162f9086a4b349528042c4313610573530c6992

SHA512
053d4996c3376aa0fbee16be84d0a7f86b043ee1928dfe81e5b8db1686ac5e42db26b13ecd168a86f7315e8c208549b68f1ee3b64df3c12426eeda73c4efcdbe

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\scripts\build-in-docker.sh

Filesize
931B

MD5
94b0fc212af523b8bfcd6c2aa5a5ab2a

SHA1
cc0cb35f7ce729f7affe6b2c463e57966515e476

SHA256
abaa92d196f6752f184b83b19aedd9b1e28d328e6817de213f61fbd108351e16

SHA512
af0a2174e0304fdaa56ddae249049c142450ad4a0a9c8975548f61aa2bc356837b1d7ed441108156af32c979da5647bd0233a49db700ff0bbf528f9fa2c862e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\scripts\bump-version.sh

Filesize
567B

MD5
2ff8e17ece2c70eff9efdb2b1a524555

SHA1
d61c93df38f70f2244817c688a140224c9a99af9

SHA256
f07b481f34e732e74abe6402023f8b84f61281626ad6e25062a20fa8fd80ece4

SHA512
0f847fd2b05bd4627a56b452f065e878005b6307bc101663297afb5f45c24d965ddc48ea4818c34ab35bde06f5a7711cf29fb9182c8ed9cf34e17d6434c487ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\scripts\install.js

Filesize
9KB

MD5
1ffedd383c8097dd628411836505787e

SHA1
969306e8127b354f35f4c870f2da7b4034d4197b

SHA256
df3b6ca3fff442454ffee98e8e4db5e3fe0d82ff19a49216cd238fa9282cb30a

SHA512
1392958e5a9c2e0c6df617c48547f5fdae32960bfb55953528ee345e06e1ae191ca4001a618233adeab27e16de5ecd203c405e8b4fa7f3a739cd3d2c4a1e9ed2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\scripts\test-vercel-nft.js

Filesize
586B

MD5
c63a1659a645a5095524923081813d51

SHA1
1d97d7ccb0804b7a15f0593c87990ab0da4b6887

SHA256
644476fd66a507adc49582e7371c87e4cacc3c7840c23fe920da2a09f05db08a

SHA512
ae452613a1dc728428ed2e596d7fbb041e00a8aa300aaada289fd454f71267569fa548fa7c7217134572decab12e56f4aadd4853c96ef705ccba2dcb377018cb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\scripts\wheels

Filesize
5KB

MD5
6fec563925ecab8b6a98c3f38655236d

SHA1
9ad08eb80167574de6373d871cfff5511d2554cf

SHA256
6fa0613c1edb0c6b26baac0b759bf756f389a11e0ec0e64904cffb26ef8dc016

SHA512
850a5285519965fe26ab0da2ae62d380648acb723d879e2ab770124e4146ce0a6d03f089e28af20604dd3e00913169f82ac568a1741014e0bc5ee7b2c583888d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\sentry-cli.exe

Filesize
10.4MB

MD5
4c1bbccaec3f88e00c176e49b3ea9742

SHA1
eea00e776e5979ae8e650ee9ddf3d4d4e93ff2ef

SHA256
299e9f3632bd8278384e60f7384279ccb394ca532515448f44e089a3fb119f1c

SHA512
3c82f9f06be9bdbdb6fc94709d6c582641b2bd1ba1987c0b42a8d5c653fc32c006873c8f236b45c62970b3abe6a8b5f9faa1a57c0c85d52fdc94ecf1bd21abd6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\resources\elevate.exe

Filesize
105KB

MD5
792b92c8ad13c46f27c7ced0810694df

SHA1
d8d449b92de20a57df722df46435ba4553ecc802

SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\snapshot_blob.bin

Filesize
168KB

MD5
b82ff216a0babf602940759b9a3af870

SHA1
07e8a22dcf8d7be04a6ddbcab3098e040494bb0e

SHA256
943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5

SHA512
da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\v8_context_snapshot.bin

Filesize
471KB

MD5
031ea03da08fe1247280cfe781658791

SHA1
e91db50ad16b5a5fbbaf4118672d60b347ea6161

SHA256
c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c

SHA512
b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\vk_swiftshader.dll

Filesize
704KB

MD5
d8a6b9e3b8993fdf88e4c2a4ea769188

SHA1
7b67417ad8e494eadd42188cebb25f5274b54e10

SHA256
7f60e3197ac4d2fcdcf72f6ef14aa7e80dd74059c94db98ad1eef01b89418c0e

SHA512
293a86dcbfb929b1dcfcc06d59523789452f09824adbd005ce98325c110def2025bd0532913eee82459972177055fb20769826fb3f60a9f5e31475ec71a60b27

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\7z-out\vulkan-1.dll

Filesize
576KB

MD5
178dab2186eca348bcafc58284085eb7

SHA1
5e4ae6b7474fe80ef3d4c876d6df1381e98e224b

SHA256
774fc588dd62bec8553338a8769d5e0d63f86856c4a1217aa87507a03aa910d2

SHA512
d464f75963184f2f7fde88d24c34a70e29b287433e6d64b6749d636f5c27d53557e4fb8f334e696ba192971b693980d488064d92f779e06a60886e73d07b7de5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\StdUtils.dll

Filesize
17KB

MD5
61965105b2236e453c7c1a25b60b2f10

SHA1
1e118dbdbae33650485875e5828f143d2ec995e8

SHA256
5c80b27de4d294d1a623244e0f057e013f9302f492f9dfaddb288cff891677fe

SHA512
b28c233fbefd420a7495b4fb8817ecda12ad8d9cb4ca6a10012a33da8d7cf06322f8addfaa85102976f7cac6235a477cb5e30ec51df5dccede322a299f639676

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\nsProcess.dll

Filesize
4KB

MD5
f0438a894f3a7e01a4aae8d1b5dd0289

SHA1
b058e3fcfb7b550041da16bf10d8837024c38bf6

SHA256
30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

SHA512
f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsvC7A6.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\Era\Network\Network Persistent State

Filesize
874B

MD5
b64fcda4b8613a7f51b1671fd44ac023

SHA1
122e931afb5214cd6cec74192da057c7e9175b2e

SHA256
9822aa8135e460aed1ba8632191d4537d94ffbad87400c080d7e87e838028888

SHA512
a6bc80b423bd0632e33706c74c8dc85e84e90e7955343ffb2425db88d6823b2294573532613d036e875faa51b8b9e5896a3663a2e7c3031cc601acf23ccefd33

Download Submit
C:\Users\Admin\AppData\Roaming\Era\Network\Network Persistent State~RFe59b2db.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\Era\Network\TransportSecurity

Filesize
371B

MD5
c0c5bfb4f632b9bf52bea09810c1da23

SHA1
5b9b12100c816e64beada6d91e8fed1274b4d57d

SHA256
ae33ae293a8ad3bb69394c821107e417e6137867b8d9f0657e235d2debd25c08

SHA512
6967d3c2ff58802a7fc3bda180218d9f20e008374b58c45151b073f39b5675a323cc8dd72bbe17d1066e161b05eb7da3960dcedaf4087d6bc9f9b1734ed3558c

Download Submit
C:\Users\Admin\AppData\Roaming\Era\Network\TransportSecurity~RFe5908e0.TMP

Filesize
371B

MD5
ec150b04839fe1cda7c01f0cb55022e9

SHA1
80c9d91560a4217abd27a59b84a1e3138eab2585

SHA256
d547e55b663354b38ec9d6a59ac81acdb45497951076fc355926f3ad53f39cc2

SHA512
ad2ea90cec28af1487f33852fdee046a43366b7304132faef53ddf2951614cfa9f1b891760d58bf7e629ed3dd1c24516abfe67143f87b6dd4e4086319c600fb5

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
memory/1844-959-0x00007FF8A31C0000-0x00007FF8A31C1000-memory.dmp

Filesize
4KB

Download
memory/1844-960-0x00007FF8A3520000-0x00007FF8A3521000-memory.dmp

Filesize
4KB

Download
memory/3520-921-0x00007FF8A2EF0000-0x00007FF8A2EF1000-memory.dmp

Filesize
4KB

Download
memory/4868-997-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download