Resubmissions

06-03-2024 17:26

240306-vz7bjadf24 7

06-03-2024 17:02

240306-vj468sdh7s 10

Analysis

  • max time kernel
    46s
  • max time network
    142s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240221-en
  • resource tags

    arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    06-03-2024 17:26

General

  • Target

    Manorlords.exe

  • Size

    72.0MB

  • MD5

    434b07fa8bdc314e819a76114ecf5804

  • SHA1

    75dfbeb5dcfc032cb989d531f65c2f4fb4a97118

  • SHA256

    c86e4011a355c8e95996f67be63306afc0d6cb29de37f29bbb610fccda7d4a55

  • SHA512

    ff4b92648c2957f0664b86830d97b424b31d69b2600f1988eddfeef9f07c581afcddad927d1cd2c414b025bb79dc5e7b0b4f9519022fd22a79205613fe5a5fa9

  • SSDEEP

    1572864:zejOS3UMKaWTqEUBypdsF9y7+MRl0+MdNks7unTv1k+lGSfhkb4cfN:zzuEAySK+Mn0+oND7qtGS0fN

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 13 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Detects videocard installed 1 TTPs 1 IoCs

    Uses WMIC.exe to determine videocard installed.

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Kills process with taskkill 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Manorlords.exe
    "C:\Users\Admin\AppData\Local\Temp\Manorlords.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3056
    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe
      C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4972
      • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe
        "C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Manorlords" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1820 --field-trial-handle=1824,i,8279434882308385999,4248058886817251500,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3640
      • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe
        "C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Manorlords" --mojo-platform-channel-handle=2256 --field-trial-handle=1824,i,8279434882308385999,4248058886817251500,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2120
      • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe
        "C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Manorlords" --app-path="C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2496 --field-trial-handle=1824,i,8279434882308385999,4248058886817251500,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3520
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKCU\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions""
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:4676
        • C:\Windows\system32\reg.exe
          C:\Windows\system32\reg.exe QUERY "HKCU\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions"
          4⤵
            PID:3868
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKCU\Software\Valve\Steam" /v SteamPath"
          3⤵
          • Suspicious use of WriteProcessMemory
          PID:3024
          • C:\Windows\system32\reg.exe
            C:\Windows\system32\reg.exe QUERY "HKCU\Software\Valve\Steam" /v SteamPath
            4⤵
              PID:2780
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
            3⤵
            • Suspicious use of WriteProcessMemory
            PID:4568
            • C:\Windows\system32\tasklist.exe
              tasklist
              4⤵
              • Enumerates processes with tasklist
              • Suspicious use of AdjustPrivilegeToken
              PID:3012
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName /Format:List"
            3⤵
            • Suspicious use of WriteProcessMemory
            PID:5100
            • C:\Windows\System32\Wbem\WMIC.exe
              wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName /Format:List
              4⤵
              • Suspicious use of AdjustPrivilegeToken
              PID:4808
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "wmic path win32_VideoController get name"
            3⤵
            • Suspicious use of WriteProcessMemory
            PID:652
            • C:\Windows\System32\Wbem\WMIC.exe
              wmic path win32_VideoController get name
              4⤵
              • Detects videocard installed
              • Suspicious use of AdjustPrivilegeToken
              PID:3048
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "cmd /c chcp 65001>nul && netsh wlan show profiles"
            3⤵
            • Suspicious use of WriteProcessMemory
            PID:3280
            • C:\Windows\system32\cmd.exe
              cmd /c chcp 65001
              4⤵
              • Suspicious use of WriteProcessMemory
              PID:4464
              • C:\Windows\system32\chcp.com
                chcp 65001
                5⤵
                  PID:3960
              • C:\Windows\system32\netsh.exe
                netsh wlan show profiles
                4⤵
                  PID:4092
              • C:\Windows\system32\cmd.exe
                C:\Windows\system32\cmd.exe /d /s /c "taskkill /IM chrome.exe /F"
                3⤵
                  PID:464
                  • C:\Windows\system32\taskkill.exe
                    taskkill /IM chrome.exe /F
                    4⤵
                    • Kills process with taskkill
                    PID:3688
                • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe
                  "C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Manorlords" --mojo-platform-channel-handle=2284 --field-trial-handle=1824,i,8279434882308385999,4248058886817251500,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
                  3⤵
                    PID:4824
              • C:\Windows\System32\rundll32.exe
                C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                1⤵
                  PID:1800
                • C:\Windows\System32\cmd.exe
                  "C:\Windows\System32\cmd.exe"
                  1⤵
                    PID:2784
                    • C:\Windows\system32\Taskmgr.exe
                      taskmgr
                      2⤵
                        PID:2416

                    Network

                    MITRE ATT&CK Enterprise v15

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • C:\Users\Admin\AppData\Local\Temp\2889532f-50d1-4eba-9daa-e93d620bbd98.tmp.node

                      Filesize

                      122KB

                      MD5

                      4c2c630d6cc4947922d9a3a1470dae12

                      SHA1

                      90b041de96210f37521d83db977f243629dca135

                      SHA256

                      8a42e10d8b171ade82cf66697506e27cf000524448799166e097dc3cad45dd3e

                      SHA512

                      e7f38e792e9c3ff43b69bf113a3c9720ed6ae18f98be2be0bbb5508f70f8fb2c62da744ca5de3f32ace6b9f6fe26da966394c28b8efbb2d7803ea22f84649b9f

                    • C:\Users\Admin\AppData\Local\Temp\2bb7ae37-f54b-4b79-9a2c-d0a701962bbc.tmp.node

                      Filesize

                      192KB

                      MD5

                      12b7a0c5b5dd8d33851344aac95ef5f5

                      SHA1

                      4a190d05540489cf8ea9948fdcced6bc831cc0b5

                      SHA256

                      95cfcdd3edd762fe14b0430e4f2173bc70ae3f45035105b9ec62d9ee984fd449

                      SHA512

                      31682f08199e7dec8ba97497fa7effb80d56b015083a81f87b4370c780ae17371f14739e07ba6841003404983565121e4c2bf7e376ba5765b9dd781f3c687dcf

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe

                      Filesize

                      64KB

                      MD5

                      548f2d5c20ae1d954c71b0f2117be369

                      SHA1

                      8be697e0cc19f071e716057c859110b6741328d8

                      SHA256

                      f68018815d8d85341f6f94916a40bdc29ed83170db8c634283cbde96fd493ab9

                      SHA512

                      b02dc21fbd7926ebba9c64f75924b8db228b57d5cf7257eedc83e1590b9f5241bc8b2409f60bcc35e669b445c5b44b0d002096a592a7b46a2390f32e3abb053f

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe

                      Filesize

                      5.8MB

                      MD5

                      77ec75262c6071df2d33b2001550f843

                      SHA1

                      682ec5cf7414f419e118d57bfdfc25e83f8d8390

                      SHA256

                      c179c668855885b1328f8ff6c20d548ee01a776f176cf2eedba000728e3226ea

                      SHA512

                      32d95687c8a07705da3826b97383980faff29ac93480b191b1a804d879ddbffc4c895bdc89d60398e0a49c71372c2970402833456891d90642cd6f0b6756f5fe

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe

                      Filesize

                      5.6MB

                      MD5

                      25d33de2f86951eebbdae39bb27dcf17

                      SHA1

                      a8ef0cca52c341e3bd1d75cf4b1173c612b8be90

                      SHA256

                      1a9cff1e64cd6b5427214217e9e3b2fb169a364a6328e37adf62ac2d026fb48b

                      SHA512

                      44a2dc321a60a1188170b419ea182656703d69194cdbc6f4c0bae478892ca680d2f9902a366604009dd7a45b329af993dac2b82d5bc3c4daa3ec618eefc26aa9

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe

                      Filesize

                      5.2MB

                      MD5

                      a6bf799a2adb6b91734ffcfb54a1585e

                      SHA1

                      58287168503edc6ad24b2ed6908579dac551d769

                      SHA256

                      ead4c5981ce3de2edcf0f9232d873c1b8149bb5c5b581d0e8f1ca103a07b450d

                      SHA512

                      fc76cd9f7c295f9398519b2164d96213e08506f5950e3939445a56a463174e82cdb2b748264b9f27f7b1d9687b77ce7ec635efc88bde76d72118e173f1ef302f

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe

                      Filesize

                      512KB

                      MD5

                      6387c927011b9676cc19cd50ab14c00d

                      SHA1

                      8a8e95ed1f6c0eeb4751077579c715f423089b62

                      SHA256

                      9842e852e58918dfdfed6a5be6b6dc0cdd5e2bd0a1feb861cb003f13a7db14ba

                      SHA512

                      717625d4661daf22771f2736c93edaa8d96c79f5b66de72a027b4badecf73d4eec257bd0e109dc895a61f08b7faf553b676f0ac1883895f52320df0766e9024c

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe

                      Filesize

                      1.1MB

                      MD5

                      d27774879320d13ec13c4ec5093fc857

                      SHA1

                      0b95561af1969078d94491e3ee5296400aba63d7

                      SHA256

                      e580dbda5749389d40e367838864b56ae5173b5d9a92a70e1ee2089f98572c7e

                      SHA512

                      123a18fe2982bafc78f10c3cabbe0241ae70f32b90a39a1cf17169ff60c2ff2e9f3a9b070cba1ddcedc1023bba4e53cf8babe6b251a4528d500ad445d0fea630

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\Manorlords.exe

                      Filesize

                      155KB

                      MD5

                      260f99f0bd708f802d7b9cce603fa89f

                      SHA1

                      e79979e8437506d61f56d4818ad282854806e968

                      SHA256

                      dd84218df845e92129b6974c95f7bf26710bfcbd68be62929af6024385fd8d64

                      SHA512

                      feb43be07ce668a0d7d9ec51e6ca95667b2e9b9a6e93f038d9f60a4f692208bd284062dad24358fc1eeca510fcc6c5d51d682f74e7945a23cdd8e3d637687869

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\chrome_100_percent.pak

                      Filesize

                      163KB

                      MD5

                      4fc6564b727baa5fecf6bf3f6116cc64

                      SHA1

                      6ced7b16dc1abe862820dfe25f4fe7ead1d3f518

                      SHA256

                      b7805392bfce11118165e3a4e747ac0ca515e4e0ceadab356d685575f6aa45fb

                      SHA512

                      fa7eab7c9b67208bd076b2cbda575b5cc16a81f59cc9bba9512a0e85af97e2f3adebc543d0d847d348d513b9c7e8bef375ab2fef662387d87c82b296d76dffa2

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\ffmpeg.dll

                      Filesize

                      64KB

                      MD5

                      fb655a83e8b93b0a3cab7d9e72e21fb3

                      SHA1

                      d48f515a0bc32fc42b85cbd6993ac3d608fabda8

                      SHA256

                      bc83e523e26a7c6154489447732119b689e1e8684cea76da8f758831c40e0aef

                      SHA512

                      881164fe2a0320ed34767b9fe6df99a3279b6be816bc749229d90674bc59bd9d62b8fa2156f7b074154d60e5756e07d12f9d807d865c87d415cc64821f1718d1

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\ffmpeg.dll

                      Filesize

                      768KB

                      MD5

                      061e2d6e80ab3a9030cffb530e4ca978

                      SHA1

                      a0b0d65856a703e67dc54e419286bbbef438e6d2

                      SHA256

                      9456447a3f953c76ffce40589a71e43cda604864087e7fde254c427327de6510

                      SHA512

                      fdb3c51c598344a2405f0b3ee201e047d3f72984a1139bd9729acdd7340f8d7094b88869370af5df8a878349089ea67fb095d49ffa3825a97581906a5b701c92

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\ffmpeg.dll

                      Filesize

                      576KB

                      MD5

                      39873f4dbf996121849fd316b7b9d3a5

                      SHA1

                      c47de603dad912becb4d900c0aa46d23feefe827

                      SHA256

                      e286f040644e3628b8717b970441a7c8ac68fb89d4f8aec600295ce6889b53d2

                      SHA512

                      ee5d348cb4b8cde461f241aad97ca130e869e15bda00eb37f79e5c1e63d43c74b752d7c4aa2048984e34784e0d3ae15e916475685b3e758e442052739fc6f38e

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\ffmpeg.dll

                      Filesize

                      448KB

                      MD5

                      20ab861dd089eb597b7f4e58df68a047

                      SHA1

                      d7679399c36921ba489c1f8e52c7749f95c20dc5

                      SHA256

                      be72d01c6b58dd407bffb49752a261474fdb7af796389950f5a2063e2884ac2d

                      SHA512

                      f1b885708c86910c6796ae31c7bb6341e02595d7903ad8bf8562c90de479b98ad5d8f49f72bed39b579409bedbbb59a15b9cfac8397fb7997a8dab3d9f4d624c

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\icudtl.dat

                      Filesize

                      64KB

                      MD5

                      0c28e30344b1ad8f0e74e6a0774cefa1

                      SHA1

                      cfc024311fa4d0c2ba918540c8b0afc549e349f0

                      SHA256

                      d3f424240710c432ad188f85f8bc3e2f4322e5ae807bab20f2b54591344e87c0

                      SHA512

                      963ce165aa6578bd8221bdd720cf14d7d91f4e527b498277f3031e5a919a9b7956197c2b35c9b2968600a7dbe4015b2b9c7ffb4ab7e9ac4703c4770fd789ba27

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\libGLESv2.dll

                      Filesize

                      4.7MB

                      MD5

                      0e2d20c9376aa9a34fc61b3370232230

                      SHA1

                      6cecb4a81047f7874b6361f49823f303c334abb5

                      SHA256

                      b7fff0ae1767b97c7b882c5c7a478f2a501dc59ad282d12005c636c0aaa3e71b

                      SHA512

                      94498b9c186b67b255cb70d5737f61aeb367bd04ca56c32c65faed1dbd11fd5a12879914b5f8091e991ff9a745c953fc55e414b6b018df8a2586f79bf8297923

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\libglesv2.dll

                      Filesize

                      4.8MB

                      MD5

                      0c7fee2ff6f0c232426f872498540f6f

                      SHA1

                      77e95e0741ada285efa03550e8b79935d9856513

                      SHA256

                      64b7d073f74f2ede96b74313294548a7f354ea0d644d5a71d7ef4a0d8d57ca4a

                      SHA512

                      464292c0012c8023bd077281a46cc2c284adb054e56671a9474ce7e311688d9e33f3d896aac0f07055588540e3193ec8800ce51bbcb91caf02e71ae49d5adfe1

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\resources.pak

                      Filesize

                      832KB

                      MD5

                      70c11c5da50642c51b7cba793f664600

                      SHA1

                      567312af253d63341f103a6244fc5318b8ac518f

                      SHA256

                      cb72e739e696668f0e78d1e23b396e479a6a96fb6fdb9a965b04e717dc8d347c

                      SHA512

                      5d1b2777ec208482b9b043fb7dec44cbf8baccca6dcc0d9bbeec5f5ba0257e5b9dc822eb4bf05f8bc8f6e05796e3b81ca6bfbd9e2930551bfd674e2daac7aab4

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\resources\app.asar

                      Filesize

                      192KB

                      MD5

                      bf2a7039e7ba3db62161b27105efe20d

                      SHA1

                      64e084d794633a9241a1848d65f8a928287c1d00

                      SHA256

                      3e5a881697fd283bc3413ed557850e253539cd74bc1c9fbeb0191b2c007889e5

                      SHA512

                      561e82eb45f5529b9ee97301e7c651085b08691684cf5ea63d90f8e74dbbb5ca8eb3715864d59ddf95ed04093fc9c05d2a3ab747b2481354dc132270e3336d3b

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\v8_context_snapshot.bin

                      Filesize

                      64KB

                      MD5

                      90e3f284ae83b78760de5ec651c0bfaa

                      SHA1

                      d0fd316db8ef0b5f2fa362b50e702b2c50a6f0b0

                      SHA256

                      c19a8b5e8a72ce87983bc91daf494d54f51b2802865c9eb20910f47136f23c5b

                      SHA512

                      5a593f89d42bd858d2726022ae8d9d038f5f6d9713b6cb16e5339d018a9e4d1237c65cf032b78be2df0028b2d7f2a0c94767e325e6bb956b942f5bf33cbb1d0b

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\vk_swiftshader.dll

                      Filesize

                      4.6MB

                      MD5

                      83b7eb3291ec6bba42dc4213b584b9ce

                      SHA1

                      bea1404cb9f411c5f15300c7451ca75291bff5f2

                      SHA256

                      6e20aecaac139a2301963d2de54bfd7134a13bccee1b7bc5f6a450c6d537d8c2

                      SHA512

                      75e142a7b570571912b9d5025d2eb9d78bb8a058f169dd4114277a066ef1d58d23775952ea58565d1e87532f48b298ffb211946de129316f87044704173cf9b1

                    • C:\Users\Admin\AppData\Local\Temp\2dI16BmO84Kd3BTfTPacLWVZ12N\vk_swiftshader.dll

                      Filesize

                      1.5MB

                      MD5

                      675f3f5796106c3e8f706f5d00f1cbbb

                      SHA1

                      068203124bc9ba5a64c7b05cd2d189651311d9d4

                      SHA256

                      127cbe9d3fc05fb072d50670aac26070dc5b8d99698588c5d8c855a114a26702

                      SHA512

                      1422594d8c2e66727c73512d3df42a25d35bdf40e66b140e89d2b328f38bcf374296ee830c4a73e33d4ddb8fe497ac55719a87aa9d2510eeefcee4183dbb1afd

                    • C:\Users\Admin\AppData\Local\Temp\epsilon-Admin\AutoFill Data\All Autofill Data.txt

                      Filesize

                      249B

                      MD5

                      cf7e4a12f932a3fddddacc8b10e1f1b0

                      SHA1

                      db6f9bc2be5e0905086b7b7b07109ef8d67b24ee

                      SHA256

                      1b6d3f6ad849e115bf20175985bed9bcfc6ec206e288b97ac14c3a23b5d28a4b

                      SHA512

                      fab79f26c1841310cc61e2f8336ca05281a9252a34a3c240e500c8775840374edb0a42094c64aa38a29ca79e1cafa114d6f1bbe3009060d32f8c1df9f088c12c

                    • C:\Users\Admin\AppData\Local\Temp\epsilon-Admin\Passwords\All Passwords.txt

                      Filesize

                      231B

                      MD5

                      dec2be4f1ec3592cea668aa279e7cc9b

                      SHA1

                      327cf8ab0c895e10674e00ea7f437784bb11d718

                      SHA256

                      753b99d2b4e8c58bfd10995d0c2c19255fe9c8f53703bb27d1b6f76f1f4e83cc

                      SHA512

                      81728e3d31b72905b3a09c79d1e307c4e8e79d436fcfe7560a8046b46ca4ae994fdfaeb1bc2328e35f418b8128f2e7239289e84350e142146df9cde86b20bb66

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\LICENSE.electron.txt

                      Filesize

                      1KB

                      MD5

                      4d42118d35941e0f664dddbd83f633c5

                      SHA1

                      2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                      SHA256

                      5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                      SHA512

                      3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\LICENSES.chromium.html

                      Filesize

                      3.1MB

                      MD5

                      1051810d15325e10a4accd5e9193dcb4

                      SHA1

                      e75d5e9d65201fb3cc084736ac4b0b76d3d39071

                      SHA256

                      c812bec50ee98d20a81bff0bc3125b6569f66db34f14a0e8ac3139401a542935

                      SHA512

                      de20845718fffd512ea1c5cacb3ed2e410d1a4e10f8f4395d6f1f23c9c7397727c54826eefaca2c6763f963f46273f531b6ff86c50f96161e916b97747a38096

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\Manorlords.exe

                      Filesize

                      1.5MB

                      MD5

                      d5af672eacfc434e5956071fa81f9620

                      SHA1

                      eb9da0757db6c2753fcbec409b5c6dc56a8cd083

                      SHA256

                      16f72a061a746ebbf8857ed7bfddb6f55dd4b725e04a21339cd8c7dddc1a4ad6

                      SHA512

                      bb540103c948adaa9e95e04293ea5360e46e968873726656c65c52c75c861f6a60d561408574b4449e77050cfa6945b3ca83e9286aa0f7804b62bc21202b3f1f

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\chrome_200_percent.pak

                      Filesize

                      222KB

                      MD5

                      47668ac5038e68a565e0a9243df3c9e5

                      SHA1

                      38408f73501162d96757a72c63e41e78541c8e8e

                      SHA256

                      fac820a98b746a04ce14ec40c7268d6a58819133972b538f9720a5363c862e32

                      SHA512

                      5412041c923057ff320aba09674b309b7fd71ede7e467f47df54f92b7c124e3040914d6b8083272ef9f985eef1626eaf4606b17a3cae97cfe507fb74bc6f0f89

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\d3dcompiler_47.dll

                      Filesize

                      4.7MB

                      MD5

                      2191e768cc2e19009dad20dc999135a3

                      SHA1

                      f49a46ba0e954e657aaed1c9019a53d194272b6a

                      SHA256

                      7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

                      SHA512

                      5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      ba0f13758adb6aec4c6d87749af59467

                      SHA1

                      0b3c725fd344f38f3a62e17372219e3fd62a1020

                      SHA256

                      d25b0f4eabcd8b3dc0e0af492fb1c4870cbbd30f59cd5259e53fe010a2710af2

                      SHA512

                      ef0fd5da19e764cba8e7525f58f543b2a25e49ff84a40f9f09779e20c45fd9aa596cec18916cd4967873ef9c877d30a983c91b06a6cf2b77b16736365498ee50

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\icudtl.dat

                      Filesize

                      3.7MB

                      MD5

                      727b507ed2ad0a0a593bc4bb83dd356a

                      SHA1

                      78e88a3b7431b31de0bd9044e8f3119e56634cb8

                      SHA256

                      c6768813b84cdcb2b7b3a137eaaf94c8f811efdef062e02ba48fccba54add4ac

                      SHA512

                      efb93ebb8573daa0ebd544d0bf079843e4415fb07b847a115f48a9e4396103bcc858fbfd2b7aabea59f6667c8b79ed22d4ea7f0ed311e5ebfcbf6bb9da56e815

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\libEGL.dll

                      Filesize

                      467KB

                      MD5

                      7906d51818c053d8c99a8491936bc7c4

                      SHA1

                      2e7790d61a8aa639c6a02be0724715302171d14c

                      SHA256

                      66e424b122d13d4be5728215200d3b219fc4cecaa0e6128518d7f8e5600dd58b

                      SHA512

                      23de1a5718949b9c624e8a208aeb92596380ebdc2675c3286163e464f8f334baaf3bc5bec529a7022241884ed6b9c9061036106c972acd621f05385703b628a0

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\libGLESv2.dll

                      Filesize

                      3.2MB

                      MD5

                      a041a12dd1f470111b08a3d79554a24c

                      SHA1

                      ee72bba270b84a99705592a8b2feab00001901c0

                      SHA256

                      cf7cb86b1f8d48996b5f4f7dfb0b8f87831c72cb3e23a1ce4e04734b563ba7bb

                      SHA512

                      d0e44b15d07b1c099eeddc6d7431360cbae33a78767b7ca83fc8e7c44bbb6a94e455738936d4568d2ad099fe12ac11f2d4be4556f0bb2ac3543cc9aff9c4a5d9

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\af.pak

                      Filesize

                      464KB

                      MD5

                      862a2262d0e36414abbae1d9df0c7335

                      SHA1

                      605438a96645b9771a6550a649cddbb216a3a5b1

                      SHA256

                      57670eae6d1871e648ad6148125ee82d08575bec5b323459fc14c3831570774a

                      SHA512

                      a789a4cad72106a5c64d27709b129c4ae6284076f147b7c3fcb808b557a3468b4efe3ede28033f981335d5eab986532c0497ddd6ed24b76189fe49366692ee73

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\am.pak

                      Filesize

                      756KB

                      MD5

                      4eaa15771058480f5c574730c6bf4090

                      SHA1

                      2b0322aae5a0927935062ea89bd8bd129fa77961

                      SHA256

                      b05dcb8136751aee5eced680a5bad935e386bfce657dd283d3ec00ee722fd740

                      SHA512

                      b67e7dd24eadc91d4cd920f8864cfb23a9c67b2cecd54ec97e01705636604ce504dc417d6af1c53f374b58eddf71a12bb82248bd8fd68307161d4833342681a9

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ar.pak

                      Filesize

                      829KB

                      MD5

                      a7c00155a208816cf40b534856f2c5ff

                      SHA1

                      de423dd50b1cfb4c4981c567d9d2d0d7344c149c

                      SHA256

                      c931a2aba3341ca32b8fe9cb0cf9ed109ac6aa7bdb2368c465c3f8e2c25d94de

                      SHA512

                      554ac18de640b583422e2d3c20e247491fe738b1c24647e078abc96c24742ecf1d8f0f38260827152972c625cf36e86d6f6d35a92bbef47eb0c3645f7690686d

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\bg.pak

                      Filesize

                      768KB

                      MD5

                      e33b3fedc928f5749f40143440cb2c74

                      SHA1

                      9af894c6db5061369faf05c242778c5362b8195c

                      SHA256

                      cdb4e425189e147031dfc3933773b369d8439beafa46a463e0c3b572f7400de2

                      SHA512

                      99bb1dca0f005a46780ee3e7c9f8fcfbdb06cc26f426e5a7c649b533894d62107c2ab3ac353798e46b7718d589894ee3006c0ae25d69aa672708127242ea8abe

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\bn.pak

                      Filesize

                      768KB

                      MD5

                      41000a4adabdd730196a546dde4ea155

                      SHA1

                      222180b1c26a1ef37db642a7b98f3b3b8a373d5a

                      SHA256

                      b94833a5723278de0f163be164f66096ad00b2aef1e7c871bd2ce19a1e67a733

                      SHA512

                      f8d18034a0b20371ca9e65fa3b8ba8baa08af1d173dd817cbde4ccf644c13234e6e18d3611645ffaf91c24dc37c52ef016f18b94d25afe4d32db7433f1607499

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ca.pak

                      Filesize

                      524KB

                      MD5

                      a96207d66f2a66bd9716a80ccaeb6106

                      SHA1

                      e7fe4a3cf0d681eb9fc6aa8707bda5e41d0be9d0

                      SHA256

                      61c1c2a1aad4d38538ac51f8dff57f3319baa9c5287ea5113ae6fc486cf8af3e

                      SHA512

                      c03b97c29ad57f54d3cfdcc3ae0e22e0042bbb792f442dc6ae3f29d202e7afdabf6b2f17925a5944fbb1b39da4f0ae181c5bc14e175ae2b3cb8499b318cad15b

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\cs.pak

                      Filesize

                      128KB

                      MD5

                      2926d8217e5bdf620e0acc5fe1a8b8d4

                      SHA1

                      a060367469671ed8cfb374c8e526588b70cd1221

                      SHA256

                      62bca1c078936043364783b6f73e34b61cb093344d8a72bf280938150ca1bee4

                      SHA512

                      e3724b8b6434c431c1eae0a904ce9a0eb5f045771f3eff8f56d8e23164790db29fbba0beaab78aa1fda6a498c37bbebb07180b7c2d58a02275a8e6e44f238bc9

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\da.pak

                      Filesize

                      487KB

                      MD5

                      426c1035169c079400d71e700cb7aa12

                      SHA1

                      90fd4c7c1ec66cf7a4fbf528b0522c3670c5a99f

                      SHA256

                      bbd28bfcfb94631347d4aa0ce0a0a756b7003fc486dc3360e0e7ecfc8fe1ee63

                      SHA512

                      5290cd34d7022ad6048dae6e02f5c793cde949187cd5527c090be7818a2f2eb71602ee3ceb184a6abef325bfd33ef72ea582a85ab989c2efaad10eadebebaee3

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\de.pak

                      Filesize

                      521KB

                      MD5

                      63c6caba86699e3a5dcef5bd821d2091

                      SHA1

                      3a4d1652eabb943a94ee40b9e3f0aab465625fe5

                      SHA256

                      7c3c570580bdaf4224f9fa734efee79f913bdb3d63f28af56bfb96b18941a57f

                      SHA512

                      14fab1f4e718d5626302b672d3a76919a859bc3e9d8bc9728cebba55c530b7c18df1e181d26284dd18d067c83e50312b61e92803ef47d28943eaa44e32f662f2

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\el.pak

                      Filesize

                      832KB

                      MD5

                      0467d2bfde737be0676484538b3df9a3

                      SHA1

                      f3c40ac6a82e0725f074d95a79247706a5f86d90

                      SHA256

                      e6765329f566be267d2d48c24f19126efafea4c16918dadafd02967b670b88a5

                      SHA512

                      22ae64dff7041dfa4928118d227b08fe4809986149b2020a6a256de4cc231893feb4cea45f5da7e757fd99a3dc30981b2e533b83a69b89511a7f0d5218086ee8

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\en-GB.pak

                      Filesize

                      64KB

                      MD5

                      6a0a83d244380614b7b0b0195ad28bb0

                      SHA1

                      db3c13463a11325ce11923b15546cb00f9fe6832

                      SHA256

                      bda74d4bbf2e57abfaf2be8cdf8048cd18ccf0c7f7f4faac4ecfd20be132b701

                      SHA512

                      c3a6db464515e43246caf0beac0db26614ab9e9c3efd72951b3b6db43a9a3e7553f9f3d948a5382fef1a74d27c8f07c40b1e8f562f2d377aea4fa9c15d7dd8e5

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\en-US.pak

                      Filesize

                      428KB

                      MD5

                      809b600d2ee9e32b0b9b586a74683e39

                      SHA1

                      99d670c66d1f4d17a636f6d4edc54ad82f551e53

                      SHA256

                      0db4f65e527553b9e7bee395f774cc9447971bf0b86d1728856b6c15b88207bb

                      SHA512

                      9dfbe9fe0cfa3fcb5ce215ad8ab98e042760f4c1ff6247a6a32b18dd12617fc033a3bbf0a4667321a46a372fc26090e4d67581eaab615bf73cc96cb90e194431

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\es-419.pak

                      Filesize

                      515KB

                      MD5

                      5abcb35738fcb4217888925eaa8f943b

                      SHA1

                      a195fb95343d2fad6ec79a80efc848497f2b0083

                      SHA256

                      51ff321a6612d56daabc7874ec306680f610c391ff4392c61a59d3ac2a3380b5

                      SHA512

                      1272ddc6310fa9135e327111c6426fff39187df07d770b9fb366d6a87922e5ee1dd81cc676b17f8ed6370b786badf92c850910674ef5dadcef3bc7987ea62d3c

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\es.pak

                      Filesize

                      515KB

                      MD5

                      31936c5b039863804c46145a27fc615d

                      SHA1

                      0d20953ab0ed681e7b7f44b5b75cceecb849f4a4

                      SHA256

                      d2f4bc89eae5bf98de0babc85f63ff9f801fbe388ad6534adb3582e5e0d320f8

                      SHA512

                      66e15c3585eee7bf5a8e7a7e796718e1a525155d12e9264798e52fbaebb5a8d83387a01ac831dd0eb570d5e5f559dd8d3de1b2b2d340ce22bec15c695ceaf052

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\et.pak

                      Filesize

                      468KB

                      MD5

                      e7ea23d6304d5d600d884f4e3b3cb2d7

                      SHA1

                      99fbef7eb1bde7df398cce9faf6c7c357769334a

                      SHA256

                      292eb18ec61502b0e952b447f73a66143c56dd95f170981945e5aab53a6b32b3

                      SHA512

                      23dfa1161d11faf440241b1f48f2ddbc8ec086a8e18da351734656551f0f54fe4c94b490c0d3ecc378a3de7f7713a1626a7a6c21da2500b9597b44fd08197d50

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\fa.pak

                      Filesize

                      576KB

                      MD5

                      d0dfdaded1d439dd112c85366cfaa6a6

                      SHA1

                      90b232fd3e00367f7449f5197555a859c4ff2940

                      SHA256

                      535f5d5ac339fcf51a5ef18e6e11ce27b92022a7eddd89fe6303910b80f255d4

                      SHA512

                      1ddb5ca6fbc3e8e992599f9126ff8df6bf6a97bce89c02e72ecb3c41c2ca282937171f677de51dede101b2a76c91bbcf297517b7142e0a186a73e560109629c2

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\fi.pak

                      Filesize

                      448KB

                      MD5

                      5a18a3ec0178f793ff2cbb26256c2389

                      SHA1

                      95a49ec1b0c31b3dace9ce9288f8821febbf5807

                      SHA256

                      5b089a90121e94c05cebe9624655b12c8d4d7af56ba22de5c49e439c6dfcf2af

                      SHA512

                      4dad93033bed318ff5abf9c7985a0665f72bc5c2e88ccaf223e3ab483698b4613645292b5cd82f82718c41cc2be74aebdedf54f55f357ab98a9de27145a4f90d

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\fil.pak

                      Filesize

                      448KB

                      MD5

                      7f7b3955398d3b57a45bd879b477f07e

                      SHA1

                      ec125e6801156ec161c53713064d09aa1c2d46ea

                      SHA256

                      29cab84d4eed3ef28259c4389f565e30e974a85a9de6636ca4b9fb6d1baee097

                      SHA512

                      fc8b092a42639e6cad6e8a278bfe5d0469c7f0fa9b9bb2e5247c22257886929c5ce45e6a29e1ef95eff0dfc712e4bb89703246fb0f2812a0d7cfe74709d8421f

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\fr.pak

                      Filesize

                      512KB

                      MD5

                      9d7a9fcf2bdad8a69a00e2b4e369c9f3

                      SHA1

                      3da3edc9145beb52843d99deeaf09eb699a67420

                      SHA256

                      efa01570284442d203623a0ddb0c11ebb5241d665dfd5aa4c7f441644ca17985

                      SHA512

                      96401a36b75e136e86d281e74fa2c450376fd7ed4e2cf6ee986fef5f16f5a11676a69186f90f824fc326392db2b9938e5964b4e65ea9b3fdd4953c2503528c92

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\gu.pak

                      Filesize

                      448KB

                      MD5

                      d62f2dfbcc6478c6b4a215b825582e92

                      SHA1

                      7b7fdee6b5094fad8eecd9f946978ea4ca8b0f9b

                      SHA256

                      ee4ef9a38d08aaa188eebc0e68cf51bf22b7b99ed0b59c0560ac6e5fd4dc1243

                      SHA512

                      607e6b4aff257453364ee3611287108ad46d50f83c9d100475aa69dc2bc782f9b67249d82a0a2063f890fdfab5ebc1ee6c6cf121068d700757e755d247116dff

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\he.pak

                      Filesize

                      384KB

                      MD5

                      36c7fcda097c819e9c8f7b8b029822b0

                      SHA1

                      c724da1f584f4304bdf303563136bb7b35168b11

                      SHA256

                      94a1e7c20faa3422f1bae5313bf2434abb13a6496e66579658f113e6cdf715d7

                      SHA512

                      ab6b9cc11f5098920af8cb62bf4048956441749131fe6d560fa13044151500dbc73c31f1abbea56cb59a74894f5b7863a3194ab69d011c4ba552bfbb5fbf3221

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\hi.pak

                      Filesize

                      384KB

                      MD5

                      22c813c19ab9282bc8f272f652774f86

                      SHA1

                      12b180db0a40e8bf6c94162e879a37f7744955de

                      SHA256

                      8772488ce5f8dd69de511e09596f23bf30d33a950a227f99344401609c2efcd0

                      SHA512

                      19d8debdd405be271d74ada5f522f5700f15dfa3abee62b78ae09ce353e4aca00177aa06b60ad53e8394cbfb2fc59bd1be2ed8ccf3aae8064703382a08cb7dd9

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\hr.pak

                      Filesize

                      384KB

                      MD5

                      36dae2e5267e85eae300543033977938

                      SHA1

                      395489c16dd15b39ada7ba3df2f3bb2ff8ed27a5

                      SHA256

                      8093bb6ff58e46e66b189cd957c6a9006bc861759d8fed383b70183d61cacfff

                      SHA512

                      126def9e4520c639668e1314e1f86f6b32c1e75e9ccf5f06960ef08f5c65228e818d50c365dc4888003877062b5a9fd13738fb30cb76fc04c5bd23e948997e98

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\hu.pak

                      Filesize

                      384KB

                      MD5

                      6c7cab266580535f9f83b315c2471ceb

                      SHA1

                      911c4d4cfde898e920cc62c0f27b6adacc9991ba

                      SHA256

                      b8d86f7fbe446ce813df41d10af17deebf1dc680a4b67f764fee1da354517a6c

                      SHA512

                      97db9d3dcd26f162d17ce56fd48031d5f2ca7d2d48421d31aa6e89b9e30bd3cdbd4106aaca06d6b86b55fb5666d43ee9c2ab05e29618bde72c7155210886b208

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\id.pak

                      Filesize

                      384KB

                      MD5

                      b2077b36544e628038795f5da7017e6a

                      SHA1

                      4c9365e46c61ba846a852e02e5925c986faa2f1d

                      SHA256

                      760f8e0d22a4f53692eeabe03fdfef59a90afe3a507fe1571e9e77d0163ff46b

                      SHA512

                      7a5b0712fa1c5414c5f831af928e8182a3d5b3387d5ed0b5facd588444779d5aa1205dacff9ae76545cb848ccb9694b9921533c9e532e09000ade4531410b923

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\it.pak

                      Filesize

                      384KB

                      MD5

                      76e138e63cd874efa2c8145ef6a0e0ce

                      SHA1

                      40db7696cddf81a76f42115dd4d84914032f6b82

                      SHA256

                      55d7093ef62859d830c52b80655648d953ca1db83c2df9ce51b6eea3666867d5

                      SHA512

                      a160d93b31e65d3cd7abf7664dfcd6f67e7de6de428bbda40bbde209d92f1c65d241b446cbb188c3c81f07cfdca1f74f3310f54b5d0da43df3d138d0c702cd04

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ja.pak

                      Filesize

                      384KB

                      MD5

                      6fcf833e0d74b13bae6aa82bc7af8692

                      SHA1

                      0860447fc8127711b0fe7880510d0ca51a20d06f

                      SHA256

                      1fd51e492e7382a780f09496694b754d04b92657b27e1942fb5f13524776aad5

                      SHA512

                      bfc877b54ea9d42295d0eb6c97a5db7c06bd3b5d872ba895805fe5edf8667c236cf08fc85bc5c09da879c02e726cbfedb923a6d1fd50f0caea846808f84e44db

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\kn.pak

                      Filesize

                      384KB

                      MD5

                      1337fbd7ae562f3900f1ffa653509c61

                      SHA1

                      30e0a40801f20b4b571c8d9da24b6c7bc3c8e957

                      SHA256

                      d54ac6d74a13cbe91ed5758f9c9d4b590a6151a8100db46abb4eb20dff55c311

                      SHA512

                      d3031327756b09319db3b09256e5bd57a642ced9f70c362d84c392456829c85e88396f8369df4daa557eef00db5391b0e7869aeafd62d27fd0dc9d62df50d8ff

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ko.pak

                      Filesize

                      384KB

                      MD5

                      81e75c8daf0610045830876695641db6

                      SHA1

                      cdf5dc2c298010bc9096c775ae5a4d8fde48b9fc

                      SHA256

                      f8c47a1e68e2b052c3180e1a722247b1cb1e4719d6ad89e520b40b36b5f215e0

                      SHA512

                      6e5c35fd7b692026b469455a67562d7b879335913ba4d397ae59c3207d18da423d5ca26aca0bedc2f1027e2f01d5861165dba64a4416d8bebab5809d17b3b0b9

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\lt.pak

                      Filesize

                      384KB

                      MD5

                      432a490fcbe499622fd0f541bc4464bd

                      SHA1

                      f5e08270b254a553d41950af99329d394f23f3e3

                      SHA256

                      c84990536d8fc431c7ddfd2e991810da786b22d433786fd19e4fb4b5d705a1e1

                      SHA512

                      8070f5f2d6862758ece65dd64b5e9fdd302a8cf8cdf0047e9ac234e8f7bfc84d18815a826dab0a88e8f3de051ed34b253d386bac9fe345616c3ef237bf0f6c33

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\lv.pak

                      Filesize

                      320KB

                      MD5

                      9de0b97d23b4bc3449b9bc3db931deca

                      SHA1

                      1008f2a3cd94f6b2a0e140c53c0276b9094bd6d4

                      SHA256

                      d4d8819334269418c13a4f5ac05426a0b9ecf2bfe36efb41033b2619aabcf1da

                      SHA512

                      afa74c90b86e36abf80eabf5e8ee0fd4f57a9dca9da3113cacf3b48a8eceaeeb96bff4629a72efb9f6ecb4ea4fdd7e2dbdbfc7ebfbafbd4b154e8076d3284dad

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ml.pak

                      Filesize

                      320KB

                      MD5

                      fe0ff927384a9b61055640521e71b970

                      SHA1

                      5c578ba2c6f9ff4929bbc6d63da7f231452129db

                      SHA256

                      5f3f0be4536111c8042817c646ab49472ba64c9ce60eb606b98f65bbbd5b3757

                      SHA512

                      5a80830001d9ee69ea697fb804a4e2c85f84aaf76614ebdd958fcd93d27358711d6d76e1fe2436c5d4f2efa245bb58716975482cf1a2766d2ac4e5408cc497e0

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\mr.pak

                      Filesize

                      320KB

                      MD5

                      295e43b8694cb84117093e10d2ad5e0d

                      SHA1

                      44660d79b19e63c0ebbc961eb710bdd1139f5279

                      SHA256

                      e2b13c623200afcc252054183f6fb90f400861d7632b392eb7040602606a9b70

                      SHA512

                      c2bda22199d03f27a74e7bc63b7052d39a47ceb72c368b13737b91df5c48f8619ef0e553f6409d18cf812a339120b22c79226b5bed76474a0b9ce2b928ca3d8c

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ms.pak

                      Filesize

                      320KB

                      MD5

                      2073e0d056d72d66ae179811f40fd668

                      SHA1

                      c13aa69a8ec1e5d5d692c72a0c330de84b64b5e4

                      SHA256

                      9162e5eaafb338d0ff48e78dbcaa571843acbaad45c8822907c981f9c0dd6674

                      SHA512

                      7c106bbe7013dd5ad6e59f1900fed329483bd1d2309a40e02c26f22b85ff15fb2575e86855bcbf60920a3136c20ca29e8568f4c1216f71617eba5c9d60b5a26f

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\nb.pak

                      Filesize

                      320KB

                      MD5

                      64d419dcfd95091657bc2645bc76d270

                      SHA1

                      6eccb0703d432a653b1a012300ddf9ed005664d9

                      SHA256

                      ffe0c277623e682ef72e6e0f096d4e3b7142da20879464ebea5b4add9bce585e

                      SHA512

                      105615e038e633147814124ad28d1a9a439084a707676e07c02964103c17aa053e723907eab231f554e8a2419b156a2d350346028dc69f9b6b91d444140f294c

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\nl.pak

                      Filesize

                      384KB

                      MD5

                      646fff718a81af53078f6588251fd8bb

                      SHA1

                      2ae73f0ba2ac9553451fc80d96fb8bfdd7ac36f4

                      SHA256

                      b44285665ad729a47a7ce7c949ee7461c6ef38b469ecb029089cd30a2a7bc237

                      SHA512

                      a2c6a0702dfbdfc14f7cfedb487f1a61304f448d05f8c84d179e2fe56495eca270fbe2140ee36bafacd629742b9ac7ebe33bb04ad7d9abbc371a4aac8342cdd4

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\pl.pak

                      Filesize

                      384KB

                      MD5

                      c81f94a8356b2691e8e7a3ff50e109f3

                      SHA1

                      e09577fc869e531aaaaa36db0acb48da1eba569a

                      SHA256

                      1925369c395d6fd1b1348731a36b5dc8eb3ddcfaac34ccd39aa7b18c7b1a549e

                      SHA512

                      7bd22d5bf2d4f6a5235999b2e5fe7b27c174ecc2aadf6d4af14f098defd667abd31cd847358bee56d0052cd159566a85a0f109c8496f59e351d71ad757623c72

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\pt-BR.pak

                      Filesize

                      320KB

                      MD5

                      926c3999151c41be8d23f1f9b8993480

                      SHA1

                      8d0730e74c479c2033d3d1a4ef02c06fe6cf0a53

                      SHA256

                      97f16aa1d8d2197bd0d7ef35e8726a7a380aa2a2385c99ede87928b0daa49002

                      SHA512

                      a597d1b302346a2f5888a5091446775977596050eedf1494b1ecd4a238a9764eb324066e2a4ddc666dd798b057f99e5d5548632586907b061129eeee934c2f77

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\pt-PT.pak

                      Filesize

                      320KB

                      MD5

                      f6f346d4f098c261e1b816f8fd6f7488

                      SHA1

                      e8a0c6d20e9d499519cac19830da46b5f56ab164

                      SHA256

                      c36a27f0adaf8794acc7b1bb5b2888576a442d471ff9f79bcf7afc35aa0a617f

                      SHA512

                      e2bc4163ea7e9a90360b4fcb84738f70acf9876bc50555eeb8a00436cb2b57b2d427beb00fdd5ce443d8407e923d63b0d72da90bdd759c30abc40a25a8a5a61d

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ro.pak

                      Filesize

                      531KB

                      MD5

                      938e62fca60d7b54e9c54cdd1f745f06

                      SHA1

                      5a61a1ef3ae855ff436c5d7f45b6ec271a5228aa

                      SHA256

                      82e69f505222125ea62f8e90d8030d82a1bd49871192cb4274a8fd9d0e03d577

                      SHA512

                      d3f43881fc951c961cfb34babaa6eba2aa9175865dc07542dc529ab1c11d15703c03a7e8193c004b004d13f0a0672bccb2fcdd1cd88f32add159c337281d6d5f

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ru.pak

                      Filesize

                      42KB

                      MD5

                      75a784839b4abd7c04eb223105a8e060

                      SHA1

                      54a60863efd3feaf00af16de9597e06f191984be

                      SHA256

                      e574927e880b2514fd0091db4b31f9ebeec2b2431f38855f7ab48d71017f9844

                      SHA512

                      2217025d87742b2cb1f94277ee8c37229eb94cd39961ab4bde4c3327514286e0ded6863a26989e52217d26a56b4094ad926559076702ccc0efa9f54054c1f917

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\sk.pak

                      Filesize

                      548KB

                      MD5

                      fd001b1b02597bbf16baf3f0baf3c6e4

                      SHA1

                      e4c703fc115e02833fe08caab1e62775b5812473

                      SHA256

                      f9cd222838721a618c23c8f6493bc9699c795c0063998f1a8d506b4b7a297cdc

                      SHA512

                      0ee991da6b8ba1bcc3cc27abc645af43bb93edddbf182496aafeeb401d71ae10716335ee0197f1987c21b3abb441aaac968b9a76e75ae77fcba4cc48847f5b1d

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\sl.pak

                      Filesize

                      526KB

                      MD5

                      ff14d5f9484350396780bea7f3bc64ec

                      SHA1

                      de097f12b70b552824de69141d6ee1969275eca4

                      SHA256

                      b174c4c49654f7d65d223568c700bfaace74238447ae63171787236ce2aab00e

                      SHA512

                      011bcc3980d21e0900d1da334a28b72623b22b527a4fc3d96a8f78fb055dc87cd1433a63d8b4414a0a86cf2ded5833a395214910b17433a0545e04d1ce4875b8

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\sr.pak

                      Filesize

                      811KB

                      MD5

                      5d70a218b7dcccab0406fa9239ef800b

                      SHA1

                      cd231758f84a0d56545d0a234a58757a18a58d0c

                      SHA256

                      a2bc6b064ff1f7b15707f61bd76ddd9d889bd982c4182e9e74272d39c6235c85

                      SHA512

                      ef6f71e0d9782b5ed6706d9226c1a7fb5a4323b8dc8de25737c7dcca87d04c16b545372127670de312079be993823f565de1aaaf5ad833bec5baa0856c19b0f3

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\sv.pak

                      Filesize

                      473KB

                      MD5

                      a813b566c9e630910e6ca946defb7202

                      SHA1

                      2e25d2479715a572c096ce19b8dfd7a6da5339eb

                      SHA256

                      48a71912e4843b03358fede7176b2e57ced83d3a1344a92b989886374dbded62

                      SHA512

                      b348404135e147cef93c246c826107f9df170b294e9d0cbf576d2812d0ff3d2b7794ab5aba55cf729fcf7135a495d2ff591db62fa61e2998290ff02538a0e48c

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\sw.pak

                      Filesize

                      498KB

                      MD5

                      9808a9df2da0844b1ce1a2a4213c48d0

                      SHA1

                      541f24f006ddb3361ff1e5015f097ab799120fc4

                      SHA256

                      1949953d638f266ce74d84c020174c074780166b880e7c2ec38bc6047bbb8ecc

                      SHA512

                      66b256e02ce11ea0273cc5bfa78e56faf8b250208d1e868bf4af77cbefd1c891708573d63873a5d02436f884544a6550176afcd3a8220cd35d64b88987e94404

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ta.pak

                      Filesize

                      768KB

                      MD5

                      0e6909261711a25356a60e810250f6fd

                      SHA1

                      783b88f35d34954ac3e2a739b447f5af25422457

                      SHA256

                      99b529720fbec2318fe6e18a74ea1ae51a150fa5739a15fcadba18c582be4c6a

                      SHA512

                      a8a4bdb6dfcf84a5aa2c76ceddf62662577803f1df001d4f204fc8998857c7687ad9b31ceb59caaa2b1444286585764c3fe95147c53bdffab992ef6acfa0d2d9

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\te.pak

                      Filesize

                      768KB

                      MD5

                      ffb0d7978cc4c23161263e9d9fe4a189

                      SHA1

                      059b4ab2512a0490a10c1a3f368825b3fba08568

                      SHA256

                      ff4a2e12e9cc7fc4b96b78c2cf7dc8695cef8b6dcf191a3fff03ab844db0b4b6

                      SHA512

                      a4c7fc1eeed621e8ba6e3b7e58c4456803766a2236132c65d6872a14b4e8cacfee0f022cfd2d3c57919111847ea268aa5d4c0d39bdcae0690a69b96fe5ca4e5f

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\th.pak

                      Filesize

                      832KB

                      MD5

                      8725e7d73f55a9e3e0c4c568117141c6

                      SHA1

                      b79d9c56709c01ae6c26bd7ccb14aca22ce6f2bd

                      SHA256

                      66b1654bb3751361b9aa879c1cc6e33ca9a1ba339b662716adee72c18c429991

                      SHA512

                      774dfda4172e5e2114ae0d5d2b705b48cd9ab3748213b15a3cb512e0c48c1390889ee1358e19ea21785b366ff2809bc450cae9e9a3f1251a9f4f73bdcf42329e

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\tr.pak

                      Filesize

                      509KB

                      MD5

                      eef8a7a7d0bbeb6f92f7ddd0aa762921

                      SHA1

                      480ed148352df1785963a928e0fc2b06aca05fab

                      SHA256

                      de0a5ddb2126d8c7a2a7810cad447226805794eb74cc8ee7df40078cb0a66c96

                      SHA512

                      f6e8c848221193eba2dad7b37101ac656356382f6933271292348f78f734289206bd1883b0500106ba15c9d1bb044568bc18738ff2d0e8797d30c373fe2fa85a

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\uk.pak

                      Filesize

                      832KB

                      MD5

                      05bc5a0fd5d8a40879e71d0827f1e93a

                      SHA1

                      6257cdc3f94665e14ba4a676c89efb340fc2cef6

                      SHA256

                      4247322b7a80e1b05cb91b529f25f5a50633e55ecec02c08a6b9dd735040b8c4

                      SHA512

                      a0ce40c7a2bab99774516d26373eb90942d1a1fb0a097e49161f64bc927fcfe61d6f8da2cee57577f809694f40c8ce285ede20a08b623c3ed1da8f0bb40549d4

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\ur.pak

                      Filesize

                      704KB

                      MD5

                      1e573dc16a67cbaf7156bc2794835ad4

                      SHA1

                      5df1709cbc882b7042132bd2721e5b91100aa337

                      SHA256

                      f5f3ffc9ed67fb454d856c8375d16debb8f83b7e8ce5ebf4f41504e351b64b40

                      SHA512

                      2513451f650b750aecf3e93d28934e249af3221f13695a2a410c9382927b78eea1733d186be198d5cc943fdc74162e517a7fe24c6faec17e411d47c6f3b7cfa7

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\vi.pak

                      Filesize

                      602KB

                      MD5

                      357b0c8d9ec9d4f1ddb9a2c217a1bffa

                      SHA1

                      dd1d9dddbea33fa8a997d746b7fc262b00cfbaf5

                      SHA256

                      6acee04c81562bb9672a5df2dc020ea32cea7efb359f490f7afb61ef534a4b9f

                      SHA512

                      dbcbb2a6aff36f416aaa5eca8561ab93424e808751c92d4e672e1639299d40cd536c9f50810888802a18f1ec7bd6699c0b3195e4d9f12df0aa629f3bd257c257

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\zh-CN.pak

                      Filesize

                      14KB

                      MD5

                      a3c74b9da04d9c7cd2e27a6c704b82e5

                      SHA1

                      3c42996177cca24543c2c13fbd9cd06975ea4e25

                      SHA256

                      851f5a760f2c6961f3340c53324161764404a5845788a2d99b6d3a0b5bd3eae0

                      SHA512

                      7f20bde629ef4c7f32b17ee73e2cb09b296e987e4ea297bb8747b70bddd5b9f8a08102a683ec95c5b8d8a78990f7d6a98d5480b151a333990e6b815e3b855ce7

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\locales\zh-TW.pak

                      Filesize

                      14KB

                      MD5

                      8b6770516646098603f43854f6fafaaf

                      SHA1

                      6fed4c957a611c8b6e2664b245c2d6c8e5f0bab0

                      SHA256

                      28d9121825a2f5caa4be16a815e63a1ca92efbba140f9bcab0f9575220a7e30f

                      SHA512

                      e549758f5a666022e510bcb1019d86a0514a4656f0951421dd7353651714395984da49f881b27bf3f9ee5f3c46de8aa725d321e4fc93387357df9888aa85cca8

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\resources.pak

                      Filesize

                      768KB

                      MD5

                      7dcbe6302dfc3831cb283f3cae5312ed

                      SHA1

                      a5ae6ac5d0961c2c2e3bf60262f2375a763a429f

                      SHA256

                      d387c4b9225e4b44f39182c342bcaa112fdc17c020c5986653e6344a58fa3880

                      SHA512

                      591cb0d9a4a0001ac7d4c0fc4ef8fb97327072ff970313c720f599da72fea24414591670b4f2afa488a42269718609de86a77c8e659003b56f4cf9353734b156

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\resources\app.asar

                      Filesize

                      768KB

                      MD5

                      1728733024b73ac7bd2e2d0b679e2693

                      SHA1

                      994baa76e8b5f09adaae23d94c97236f809e9a7c

                      SHA256

                      29fd72f69a3a0bff8af47a3d1dae4517daae0bcba94e43bf587682df097ad3ba

                      SHA512

                      2a212d966d809188493c9def1e6c8f4fa5c350eb4a1fa24287c08a9aa1b4ffdc24536f99a55a758f6905e4d762c9773cccd967e52505b40c427fd901e7aea2fb

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\app.manifest

                      Filesize

                      350B

                      MD5

                      8951565428aa6644f1505edb592ab38f

                      SHA1

                      9c4bee78e7338f4f8b2c8b6c0e187f43cfe88bf2

                      SHA256

                      8814db9e125d0c2b7489f8c7c3e95adf41f992d4397ed718bda8573cb8fb0e83

                      SHA512

                      7577bad37b67bf13a0d7f9b8b7d6c077ecdfb81a5bee94e06dc99e84cb20db2d568f74d1bb2cef906470b4f6859e00214beacca7d82e2b99126d27820bf3b8f5

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\index.js

                      Filesize

                      3KB

                      MD5

                      d226502c9bf2ae0a7f029bd7930be88e

                      SHA1

                      6be773fb30c7693b338f7c911b253e4f430c2f9b

                      SHA256

                      77a3965315946a325ddcf0709d927ba72aa47f889976cbccf567c76cc545159f

                      SHA512

                      93f3d885dad1540b1f721894209cb7f164f0f6f92857d713438e0ce685fc5ee1fc94eb27296462cdeede49b30af8bf089a1fc2a34f8577479645d556aaac2f8e

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\screenCapture_1.3.2.bat

                      Filesize

                      13KB

                      MD5

                      da0f40d84d72ae3e9324ad9a040a2e58

                      SHA1

                      4ca7f6f90fb67dce8470b67010aa19aa0fd6253f

                      SHA256

                      818350a4fb4146072a25f0467c5c99571c854d58bec30330e7db343bceca008b

                      SHA512

                      30b7d4921f39c2601d94a3e3bb0e3be79b4b7b505e52523d2562f2e2f32154d555a593df87a71cddb61b98403265f42e0d6705950b37a155dc1d64113c719fd9

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\resources\elevate.exe

                      Filesize

                      105KB

                      MD5

                      792b92c8ad13c46f27c7ced0810694df

                      SHA1

                      d8d449b92de20a57df722df46435ba4553ecc802

                      SHA256

                      9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

                      SHA512

                      6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\snapshot_blob.bin

                      Filesize

                      270KB

                      MD5

                      d20922aefcad14dc658a3c6fd5ff6529

                      SHA1

                      75ce20814bdbe71cfa6fab03556c1711e78ca706

                      SHA256

                      b6bea91727efb8c88e7c059856553d3a47abd883e60dd60efc01b04dc6eec621

                      SHA512

                      dbd63a9f01feb3c389c11b55d720b5d689558626041fb1dd27ded2be602e5e2a8d210f785fde025d7b9959f81de3df7fef06981269b58be564df05aec190dd1c

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\v8_context_snapshot.bin

                      Filesize

                      627KB

                      MD5

                      1e4da0bc6404552f9a80ccde89fdef2b

                      SHA1

                      838481b9e4f1d694c948c0082e9697a5ed443ee2

                      SHA256

                      2db4a98abe705ef9bc18e69d17f91bc3f4c0f5703f9f57b41acb877100718918

                      SHA512

                      054917652829af01977e278cd0201c715b3a1280d7e43035507e4fa61c1c00c4cd7ed521c762aebd2ea2388d33c3d4d4b16cee5072d41e960021b6f38745a417

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\vk_swiftshader.dll

                      Filesize

                      1024KB

                      MD5

                      b9dde26cb1033fd976dec48ddb3d7c74

                      SHA1

                      b35e2fc207f4a303a7b3e412c3a55789c19f2f70

                      SHA256

                      a5d5c03300c66595f493cedb53f848bc10ced501dbfc3bf3de0d582851d1536c

                      SHA512

                      7b390e6faf999efb41ff1fb6eb968153bb1987d1626d3a9d56e2253fc143f81703dbe30c2aa76f3418b564d5df0d3836dd7208c6561245ceccf39c872a749d70

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\vk_swiftshader_icd.json

                      Filesize

                      106B

                      MD5

                      8642dd3a87e2de6e991fae08458e302b

                      SHA1

                      9c06735c31cec00600fd763a92f8112d085bd12a

                      SHA256

                      32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                      SHA512

                      f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\7z-out\vulkan-1.dll

                      Filesize

                      897KB

                      MD5

                      fc1a257ecac32d97d49455973d8c4b0d

                      SHA1

                      4a0b00b56386601a1f9d4f944da5bad43f9a769f

                      SHA256

                      d47564822c6aa3c1cf6eb2550c33087f3d4019020a726857bb06d1cd8d2419af

                      SHA512

                      30a8d084b5eece33a18524b65ef6f2d6fa9771bb64b6a4ed0b5ecd894f1b6bc5d276d4871815e87c433b6179b1e8edeb256a0a2792f35e454b8547f253bea7d0

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\StdUtils.dll

                      Filesize

                      100KB

                      MD5

                      c6a6e03f77c313b267498515488c5740

                      SHA1

                      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                      SHA256

                      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                      SHA512

                      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\System.dll

                      Filesize

                      12KB

                      MD5

                      0d7ad4f45dc6f5aa87f606d0331c6901

                      SHA1

                      48df0911f0484cbe2a8cdd5362140b63c41ee457

                      SHA256

                      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                      SHA512

                      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                    • C:\Users\Admin\AppData\Local\Temp\nswD62D.tmp\nsis7z.dll

                      Filesize

                      424KB

                      MD5

                      80e44ce4895304c6a3a831310fbf8cd0

                      SHA1

                      36bd49ae21c460be5753a904b4501f1abca53508

                      SHA256

                      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                      SHA512

                      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Cache\Cache_Data\data_0

                      Filesize

                      8KB

                      MD5

                      cf89d16bb9107c631daabf0c0ee58efb

                      SHA1

                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                      SHA256

                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                      SHA512

                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Cache\Cache_Data\data_1

                      Filesize

                      264KB

                      MD5

                      d0d388f3865d0523e451d6ba0be34cc4

                      SHA1

                      8571c6a52aacc2747c048e3419e5657b74612995

                      SHA256

                      902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

                      SHA512

                      376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Cache\Cache_Data\data_2

                      Filesize

                      8KB

                      MD5

                      0962291d6d367570bee5454721c17e11

                      SHA1

                      59d10a893ef321a706a9255176761366115bedcb

                      SHA256

                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                      SHA512

                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Cache\Cache_Data\data_3

                      Filesize

                      8KB

                      MD5

                      41876349cb12d6db992f1309f22df3f0

                      SHA1

                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                      SHA256

                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                      SHA512

                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Cache\Cache_Data\index

                      Filesize

                      256KB

                      MD5

                      b83301ae1a70ddfd70436ac55dd84a1b

                      SHA1

                      5b9a7e361f8e454a5695520a52ba0a189eb65da0

                      SHA256

                      87b3919996e6d5c571adb703cd1e46b607b0715b046bc72fafdfd371be4d87a4

                      SHA512

                      1922f61e88823f290f3ac023e48d3fc0199e3809aae066ced9d0dc0c78686a800068f2a7b4d8136596b314902042d83c6d64b6acf76d3ffbe73e3e0a8f39bd1f

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Network\Network Persistent State

                      Filesize

                      59B

                      MD5

                      2800881c775077e1c4b6e06bf4676de4

                      SHA1

                      2873631068c8b3b9495638c865915be822442c8b

                      SHA256

                      226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                      SHA512

                      e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Network\TransportSecurity

                      Filesize

                      188B

                      MD5

                      3089e4fdffad7c9b20d8d80fb31fcbb4

                      SHA1

                      60190e6e40956593ada7f19986f5a3d027b12087

                      SHA256

                      3b8d4f62794e1ff9871f9218055f7e4c9c55b936f49a14ec07262ed2ae8f04b1

                      SHA512

                      f85753e5d9ab0401e9d12700bd728d3f3143f0433b14115c9c24f980e8dbb5e6834f380d92311a958ecd9060ff3769fe8cfb971244441f67af90630d88d82acc

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Network\Trust Tokens

                      Filesize

                      36KB

                      MD5

                      7cd8862624e6351a668a8eb081771936

                      SHA1

                      52954f29c41d097829692a34fd7dbe0d19817ad2

                      SHA256

                      392896d3b54a13cd2c53da93c3c798c2434a02addd5ab916f156d2fb196e689f

                      SHA512

                      fe2e5f59b46ae25f1d5f88a87ec4a0c12fa46ecaf3c4805b6b4abb195594b7ae70c919490f684bd711330c8643c9160688bfa9ddbd44ee1592fe63212e2ab0ad

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Shared Dictionary\cache\index

                      Filesize

                      24B

                      MD5

                      54cb446f628b2ea4a5bce5769910512e

                      SHA1

                      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                      SHA256

                      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                      SHA512

                      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Shared Dictionary\cache\index-dir\the-real-index

                      Filesize

                      48B

                      MD5

                      516f2d51c9c5f320a9c2ccbc37fd16c8

                      SHA1

                      f19258b13af31ffe534dec66b45344a5f270a196

                      SHA256

                      35843ba7d2a959dbf0d1284a3bd5ca0e7b58175141cee221cb4b3cecb3424c3d

                      SHA512

                      b276cd6061c475a389c1466a4369ccb07ce2f8174721bd5f17853c04a96c696b47c87732fa3b0d484daa34c1263f98c193328cc62ff84c3cced62dc6d0ccc3c1

                    • C:\Users\Admin\AppData\Roaming\Manorlords\Shared Dictionary\db

                      Filesize

                      44KB

                      MD5

                      4d4863ce15ec9c7dfdc50c288a2d2d1a

                      SHA1

                      4494a5c4eab04af1efc9a2d7e1d996064d489512

                      SHA256

                      2ef9ab8ec9e6b879a77d1d9dbe7d18a2171f50ff37e803bbd0243af1b87dcb15

                      SHA512

                      d34f62eac5f9f0540ed0c6f3c6fcf6713c4546a5625eedc43ecb2cead6af30b387764703637fdaa4ae69d0b6cd31b2e47d6639c41b841d46327886c7a5741247

                    • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                      Filesize

                      2B

                      MD5

                      f3b25701fe362ec84616a93a45ce9998

                      SHA1

                      d62636d8caec13f04e28442a0a6fa1afeb024bbb

                      SHA256

                      b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                      SHA512

                      98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                    • memory/2416-700-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB

                    • memory/2416-706-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB

                    • memory/2416-707-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB

                    • memory/2416-709-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB

                    • memory/2416-711-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB

                    • memory/2416-710-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB

                    • memory/2416-708-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB

                    • memory/2416-705-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB

                    • memory/2416-701-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB

                    • memory/2416-699-0x0000024AB8A10000-0x0000024AB8A11000-memory.dmp

                      Filesize

                      4KB