Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    114s
  • max time network
    155s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240221-en
  • resource tags

    arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    10/03/2024, 06:49

General

  • Target

    https://github.com/wsidewalk/fn1/releases/download/v1.0/Launcher.zip

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 32 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 14 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/wsidewalk/fn1/releases/download/v1.0/Launcher.zip
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2260
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff83a213cb8,0x7ff83a213cc8,0x7ff83a213cd8
      2⤵
        PID:1804
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1944 /prefetch:2
        2⤵
          PID:4312
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2004 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:2072
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
          2⤵
            PID:2276
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
            2⤵
              PID:2424
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
              2⤵
                PID:132
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4916 /prefetch:8
                2⤵
                • Suspicious behavior: EnumeratesProcesses
                PID:3536
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3676 /prefetch:1
                2⤵
                  PID:1628
                • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5820 /prefetch:8
                  2⤵
                  • Suspicious behavior: EnumeratesProcesses
                  PID:4460
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
                  2⤵
                    PID:3340
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4592 /prefetch:1
                    2⤵
                      PID:3252
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
                      2⤵
                        PID:4840
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
                        2⤵
                          PID:2592
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
                          2⤵
                            PID:1868
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
                            2⤵
                              PID:32
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
                              2⤵
                                PID:1032
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
                                2⤵
                                  PID:580
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
                                  2⤵
                                    PID:4988
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1
                                    2⤵
                                      PID:4752
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1
                                      2⤵
                                        PID:3588
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6092 /prefetch:1
                                        2⤵
                                          PID:3948
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6664 /prefetch:1
                                          2⤵
                                            PID:4364
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1
                                            2⤵
                                              PID:3772
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6896 /prefetch:1
                                              2⤵
                                                PID:2752
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7064 /prefetch:1
                                                2⤵
                                                  PID:2120
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7340 /prefetch:1
                                                  2⤵
                                                    PID:3252
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7324 /prefetch:1
                                                    2⤵
                                                      PID:4080
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7692 /prefetch:1
                                                      2⤵
                                                        PID:1868
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7632 /prefetch:1
                                                        2⤵
                                                          PID:5532
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7824 /prefetch:8
                                                          2⤵
                                                          • NTFS ADS
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:5728
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8044 /prefetch:1
                                                          2⤵
                                                            PID:5848
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8100 /prefetch:1
                                                            2⤵
                                                              PID:5856
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8480 /prefetch:1
                                                              2⤵
                                                                PID:5968
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8552 /prefetch:1
                                                                2⤵
                                                                  PID:5980
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7620 /prefetch:1
                                                                  2⤵
                                                                    PID:5596
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=9492 /prefetch:8
                                                                    2⤵
                                                                      PID:4492
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=8220 /prefetch:8
                                                                      2⤵
                                                                      • Modifies registry class
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:1656
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8568 /prefetch:1
                                                                      2⤵
                                                                        PID:6324
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1
                                                                        2⤵
                                                                          PID:6956
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9424 /prefetch:1
                                                                          2⤵
                                                                            PID:7048
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8416 /prefetch:1
                                                                            2⤵
                                                                              PID:6432
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6448 /prefetch:2
                                                                              2⤵
                                                                                PID:5420
                                                                            • C:\Windows\System32\CompPkgSrv.exe
                                                                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                              1⤵
                                                                                PID:1188
                                                                              • C:\Windows\System32\CompPkgSrv.exe
                                                                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                1⤵
                                                                                  PID:4100
                                                                                • C:\Windows\System32\rundll32.exe
                                                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                  1⤵
                                                                                    PID:5116
                                                                                  • C:\Windows\System32\DataExchangeHost.exe
                                                                                    C:\Windows\System32\DataExchangeHost.exe -Embedding
                                                                                    1⤵
                                                                                      PID:5756
                                                                                    • C:\Users\Admin\Desktop\Launcher\Injector.exe
                                                                                      "C:\Users\Admin\Desktop\Launcher\Injector.exe"
                                                                                      1⤵
                                                                                      • Loads dropped DLL
                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                      PID:6924
                                                                                      • C:\Windows\SysWOW64\cmd.exe
                                                                                        cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Launcher.exe" | %SYSTEMROOT%\System32\find.exe "Launcher.exe"
                                                                                        2⤵
                                                                                          PID:1136
                                                                                          • C:\Windows\SysWOW64\tasklist.exe
                                                                                            tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Launcher.exe"
                                                                                            3⤵
                                                                                            • Enumerates processes with tasklist
                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                            PID:2520
                                                                                          • C:\Windows\SysWOW64\find.exe
                                                                                            C:\Windows\System32\find.exe "Launcher.exe"
                                                                                            3⤵
                                                                                              PID:2216
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe"
                                                                                          1⤵
                                                                                            PID:5948
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1476 --field-trial-handle=1664,i,9028771190878043050,17349349446488968871,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                                                                                              2⤵
                                                                                                PID:5440
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --mojo-platform-channel-handle=1920 --field-trial-handle=1664,i,9028771190878043050,17349349446488968871,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                                                                                                2⤵
                                                                                                  PID:6528
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --app-path="C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2244 --field-trial-handle=1664,i,9028771190878043050,17349349446488968871,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:6880

                                                                                                Network

                                                                                                MITRE ATT&CK Enterprise v15

                                                                                                Replay Monitor

                                                                                                Loading Replay Monitor...

                                                                                                Downloads

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                  Filesize

                                                                                                  152B

                                                                                                  MD5

                                                                                                  d4604cbec2768d84c36d8ab35dfed413

                                                                                                  SHA1

                                                                                                  a5b3db6d2a1fa5a8de9999966172239a9b1340c2

                                                                                                  SHA256

                                                                                                  4ea5e5f1ba02111bc2bc9320ae9a1ca7294d6b3afedc128717b4c6c9df70bde2

                                                                                                  SHA512

                                                                                                  c8004e23dc8a51948a2a582a8ce6ebe1d2546e4c1c60e40c6583f5de1e29c0df20650d5cb36e5d2db3fa6b29b958acc3afd307c66f48c168e68cbb6bcfc52855

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                  Filesize

                                                                                                  152B

                                                                                                  MD5

                                                                                                  577e1c0c1d7ab0053d280fcc67377478

                                                                                                  SHA1

                                                                                                  60032085bb950466bba9185ba965e228ec8915e5

                                                                                                  SHA256

                                                                                                  1d2022a0870c1a97ae10e8df444b8ba182536ed838a749ad1e972c0ded85e158

                                                                                                  SHA512

                                                                                                  39d3fd2d96aee014068f3fda389a40e3173c6ce5b200724c433c48ddffe864edfc6207bb0612b8a811ce41746b7771b81bce1b9cb71a28f07a251a607ce51ef5

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

                                                                                                  Filesize

                                                                                                  19KB

                                                                                                  MD5

                                                                                                  3063a7e62c0b62d1df750848304a77c0

                                                                                                  SHA1

                                                                                                  2e93091ad21938d525b69cbacb1072cab03281e8

                                                                                                  SHA256

                                                                                                  bafc3557a30f9a45ae9feef34f3bf71d46d5c23c462ea584b131384adb712d35

                                                                                                  SHA512

                                                                                                  359be0ff7f43d7a2d21dbb49c58734e8c2d659c29b1e45b8392fe1adecd2c26e6b49e8783cf0449cb802dc5ec68ee3d3d822fa57c8f078df2b49a3bcb4e29475

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033

                                                                                                  Filesize

                                                                                                  62KB

                                                                                                  MD5

                                                                                                  daa01cc5a9b8b3a7730d8c940015554c

                                                                                                  SHA1

                                                                                                  6d3091870737fffb408000a4664c8a6f088b5cf7

                                                                                                  SHA256

                                                                                                  60dfc7c4f1adc5282ff9d3a0bd9445b59874ce5e123226d3d6f5339d1b998a6d

                                                                                                  SHA512

                                                                                                  7de57bc1ef544432cd0cf5e27b87fd19af248d2adde11b9b0b7f1cd5e762fe8ab08954344027b7fe32a62c142ba8411e3db42df87ed47a009437aaa511d6246e

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                  Filesize

                                                                                                  3KB

                                                                                                  MD5

                                                                                                  afcc7934062050e2754263bf1ce0954d

                                                                                                  SHA1

                                                                                                  db915b5d3dffa18fb3b61bbbab902f8b9c92b096

                                                                                                  SHA256

                                                                                                  5c2d142d67568fa5e8c0b6ab76352e7028b0939bbe88c54ff5e51b596cd5270c

                                                                                                  SHA512

                                                                                                  9c4fdc25d82af4cdc1e64d3a3b6a02880e5e79c6dc2c789321ff0a42ce3501c59f432a1d3d4c3e1afde399b3401f7ffc54bb77d6f4186fe465b9f70e9cb3e688

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                  Filesize

                                                                                                  111B

                                                                                                  MD5

                                                                                                  807419ca9a4734feaf8d8563a003b048

                                                                                                  SHA1

                                                                                                  a723c7d60a65886ffa068711f1e900ccc85922a6

                                                                                                  SHA256

                                                                                                  aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

                                                                                                  SHA512

                                                                                                  f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                  Filesize

                                                                                                  111B

                                                                                                  MD5

                                                                                                  285252a2f6327d41eab203dc2f402c67

                                                                                                  SHA1

                                                                                                  acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                                                                                  SHA256

                                                                                                  5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                                                                                  SHA512

                                                                                                  11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                  Filesize

                                                                                                  7KB

                                                                                                  MD5

                                                                                                  0740460d71f2835575dfa7b720d21778

                                                                                                  SHA1

                                                                                                  5f18e6a1cfe05b7c27811ffb4db2271ff927123d

                                                                                                  SHA256

                                                                                                  5f10df2581a2e02e102acffecbfd96ce7534f16814134b27c7068afeb163c72d

                                                                                                  SHA512

                                                                                                  61daeb1ea0a75c90275bd94135eecf3b4a53477344fcf892f9e6bc7b3c609dafb7f1fbf4a7147306bffd9025f6dd67724c2f7c296de120d322d51528a062354a

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                  Filesize

                                                                                                  9KB

                                                                                                  MD5

                                                                                                  4cbbba3579e70dd1ba07bf43ce9e47fb

                                                                                                  SHA1

                                                                                                  8f3254354289abd349a8d937d3370da46bc7d1fb

                                                                                                  SHA256

                                                                                                  65957e67146ba1bac5051cc92c99ee824e10efc316bc9c3f1689cb3935a0bd55

                                                                                                  SHA512

                                                                                                  38b934bb21cb15f18f5858f9deff5b17940a4be21d9738c762a3e2977d67ad2886f8204dff3a781f2e78325e786543dd7eb32089da690a5df5359606e9fae9e2

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                  Filesize

                                                                                                  5KB

                                                                                                  MD5

                                                                                                  7b3c5b90d654b6165631aa3b2799d933

                                                                                                  SHA1

                                                                                                  83bd609e0410c4f07ca8a6a00b48fc72d57c440a

                                                                                                  SHA256

                                                                                                  b3f65080f52dd465ae651cf66a8e9d49d3d304cf9ae618bccf4f07b3f6c78a2f

                                                                                                  SHA512

                                                                                                  d470145b2c433e7b8a16a4999364c67365b15ffab61f0af340e315f2226c0b15ff821477bd034a77e4c0175f745d71156ab195860e4458f7bba7f986091dd49f

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                  Filesize

                                                                                                  6KB

                                                                                                  MD5

                                                                                                  6300ca7e50a0941dbe56fc761f3258a5

                                                                                                  SHA1

                                                                                                  05f188886524e0f7a9d4a139d65a1cbe616c00f7

                                                                                                  SHA256

                                                                                                  2be38c908e9ab5373615964b9c46afe5fa6b396821ce7cba3bbf062473157774

                                                                                                  SHA512

                                                                                                  afac08e87da10486de7000bbbe3ebaea4f2077e6c1e71a82f44f0243ad2a8c202aef11153796e91f9a290e10f6805e203b5c930b7f8723605724c88a3ca4eeb5

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                  Filesize

                                                                                                  9KB

                                                                                                  MD5

                                                                                                  5626eb04bde63bca304708c874021c78

                                                                                                  SHA1

                                                                                                  aaeecbebb8a23502f90a08f27210b438dff48843

                                                                                                  SHA256

                                                                                                  cba7367284a33fd5cbeb29cd699eaa4464911144d98a9a3fb0e8cd19b03604c4

                                                                                                  SHA512

                                                                                                  2d56c54eae98cbd7c39de799fac80f6bd9ba451ff92c2caa3c24cb44b8566d41358c8cfab18fd8734f6c9e2f7d4aa7f0ad6f13eb510914007987080238bad716

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                  Filesize

                                                                                                  12KB

                                                                                                  MD5

                                                                                                  17361b8c6328d2aff92c1af0b1fafbb6

                                                                                                  SHA1

                                                                                                  28a8c01e024c79697ffcdbfbf36e567c7023bd25

                                                                                                  SHA256

                                                                                                  826fe87927030d3b0fa5f545219b122ec33cfeae1bec162e010a5d5790324938

                                                                                                  SHA512

                                                                                                  7e5c12746f0ec13fd0500e92834b861c34cb6da66897facd352b55f338d820782a9d22c0a0f2049442467c50d62d82c6fa8cef44084f36914010a5a573819a0a

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                  Filesize

                                                                                                  5KB

                                                                                                  MD5

                                                                                                  75513e7d12c746b2b0d4ab00a6bf4c29

                                                                                                  SHA1

                                                                                                  c32f89887372f8745b91be2afb9b9bf46e75aa1c

                                                                                                  SHA256

                                                                                                  9a82167d45e2a63ea829014fe56f3893417f1debd65522f83372070a58f16ce9

                                                                                                  SHA512

                                                                                                  b877f93c5909cca133728b292c2447afd1b59057ea3905f921b617656cbd757f7b92b45c447e5066b6f740c84753fa9ea239ed633a0ab87cbbb3fac3754dd755

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                  Filesize

                                                                                                  1KB

                                                                                                  MD5

                                                                                                  49109b6630ac6c8f3ca329510a16642c

                                                                                                  SHA1

                                                                                                  958a02783d27eaa70639dae833076ff3879d2d16

                                                                                                  SHA256

                                                                                                  a35ad5afa7fd8dfdb99f0da6d6c04770cb4baf73a995dd1ba559ade0f07b27d5

                                                                                                  SHA512

                                                                                                  9edc8ed1f2f51997f990adb73fe6cc87a6606d8795b4fd28fa64e88c0afe3b11f8110f7f192ef45f93443f6cc1dbfb01b6b3900c54e5997ea3065a114b5ec4c8

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                  Filesize

                                                                                                  2KB

                                                                                                  MD5

                                                                                                  80fdb7de4f667a1901f45648dc23b055

                                                                                                  SHA1

                                                                                                  602bb170876a20f59bfd73ce075a41162bcfb029

                                                                                                  SHA256

                                                                                                  629e7a81fd37eee9885e941a464ed168bc6bd660432fdf98adc813cba95af184

                                                                                                  SHA512

                                                                                                  698bb58740d8c297a84b873212c42e19f8d0cf78ed9953f846819a2800f47208989a32fa499e79aa0425041702c83b1dee76fb4c7c8e2098a451105cb7297de7

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                  Filesize

                                                                                                  4KB

                                                                                                  MD5

                                                                                                  c153ae0ff17ddd9c5bf8f262d172a457

                                                                                                  SHA1

                                                                                                  47d4a38eb09f8bf34aae34c2435c34db43c6a492

                                                                                                  SHA256

                                                                                                  33dd5340c0f8e53a9325be1008a537a8698b47ef7d3d1e53a8f437f3e74ffbca

                                                                                                  SHA512

                                                                                                  b8938346f51007823b9a98d2612d90e395fd79ed855a32d8308831027aee8875d8e643b7f790a11cb4ba205364467a75bd503ce6b270ab6ce924a8c554774d62

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                  Filesize

                                                                                                  4KB

                                                                                                  MD5

                                                                                                  4801750d41fe84e7e3bbef20106530ad

                                                                                                  SHA1

                                                                                                  c9ac8b8df02d39fe98783bb6d73813175d3369a8

                                                                                                  SHA256

                                                                                                  39ab1ed90f6d083b3f538cc67aab0fd3dec15297eacb30f8c1f30761849c0f7f

                                                                                                  SHA512

                                                                                                  985636102644c29e7f9d677429ebdb2bd3620fb93f24e663f3f3c3a47ccea34c3032983dc9d7bb1e8c54c73db3136cf80b9fcf7524dc27afe59d4bcaf38dbd39

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                  Filesize

                                                                                                  4KB

                                                                                                  MD5

                                                                                                  4ccf4b19200f444e2d10358041aa5b51

                                                                                                  SHA1

                                                                                                  7e8ea9bea1a55c9c853f7deecad85d4d0fc14f08

                                                                                                  SHA256

                                                                                                  580c715b0a2da887a2ff6714e6262c40712db75cc29298ae47e12cc463401c72

                                                                                                  SHA512

                                                                                                  2e588874605a46c9f6abfdab8ef2b2fcbd2d227b2832a1904d1e30ac0a5860204e7bf4c729b03cc032d8d7ca34655a7444e3ff208ff39314ad11bcd474571d87

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                  Filesize

                                                                                                  5KB

                                                                                                  MD5

                                                                                                  b5eb95325aeb92148a27b24750ceb823

                                                                                                  SHA1

                                                                                                  1ea8ff327db203ace719da5ff3f585f882727ae4

                                                                                                  SHA256

                                                                                                  dea054655910c001f81eb84b92f6605ee5407b925dabe8915471aec804fb3d4c

                                                                                                  SHA512

                                                                                                  b9ec320dd4447f72a9ecd8aafbe224ff3bd1b04d8651d060ea442227b4cc2d0c308f3a783c1d48bf55e39bdc427d918d505434ebb7b35e305d9c50d7c083527c

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581613.TMP

                                                                                                  Filesize

                                                                                                  203B

                                                                                                  MD5

                                                                                                  32940483616cf8ad10cce0030edc2085

                                                                                                  SHA1

                                                                                                  2c338b0b13707291246a467e4a038d6e5d110644

                                                                                                  SHA256

                                                                                                  ae60214d06766878462ca7d345c4898bfb3f6ccfdf21458a751ea870630c52ed

                                                                                                  SHA512

                                                                                                  4d70af3e96e8ed469cab2a0329c89d53690295df9caccdaa273de51bc6749f76d92ab17bfc9ba6a232d0cb57d2dc088477303ebb006651a12bb678a5f69c5183

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                  Filesize

                                                                                                  16B

                                                                                                  MD5

                                                                                                  46295cac801e5d4857d09837238a6394

                                                                                                  SHA1

                                                                                                  44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                                  SHA256

                                                                                                  0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                                  SHA512

                                                                                                  8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                  Filesize

                                                                                                  16B

                                                                                                  MD5

                                                                                                  206702161f94c5cd39fadd03f4014d98

                                                                                                  SHA1

                                                                                                  bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                                                                                  SHA256

                                                                                                  1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                                                                                  SHA512

                                                                                                  0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                  Filesize

                                                                                                  12KB

                                                                                                  MD5

                                                                                                  5abbb7a744d769ac913de98553f6be65

                                                                                                  SHA1

                                                                                                  ee79568ff223ccac8f380e5e55a0ae7bd805629f

                                                                                                  SHA256

                                                                                                  bee86f3d00be3401a0b50615722ec1d3c098f6ac08fa91c13bfd8db8cbd8f4a9

                                                                                                  SHA512

                                                                                                  97b28cfe8f2d868f298ffbda4f70a14f2dbf651505bb7057f9aadcc9f612cdd9851f349b2d86f7c64bf298dbdc4b04d73b31c24794a36b671e4c72104e2fde4d

                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                  Filesize

                                                                                                  11KB

                                                                                                  MD5

                                                                                                  552ac900f868c1bf23eb7441ce954c4e

                                                                                                  SHA1

                                                                                                  4bea0aab789440188754481e97e871f51d9e3835

                                                                                                  SHA256

                                                                                                  4ec5142730a768391128c4112aec3abc9cfd5973f52e012927ffdd32c6d5214d

                                                                                                  SHA512

                                                                                                  31e3dc3704327cb6894e062f799c4002642d03f2ab8e0fca3244f68825f07664357ef4e987473b28ffbcd3982cf5151b339d7336c33ff8c5b3cdd99db1cf29ae

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\D3DCompiler_47.dll

                                                                                                  Filesize

                                                                                                  2.0MB

                                                                                                  MD5

                                                                                                  2ee5ae604cfc42e4cd962166b3e129d8

                                                                                                  SHA1

                                                                                                  943a089582a07428d9f286c0a539c1e989680b01

                                                                                                  SHA256

                                                                                                  16f4cb586d1bc7d4ed94e967af28975527d6927ca09d9180c3e000b3c56c958e

                                                                                                  SHA512

                                                                                                  3b2c0a59d508057869493dcde4ead3c1f0b663d220fac9d4da07448ff2ec8d7df53b528e560151898784016dc04931e776cef1103e80520b77343270c959f27a

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

                                                                                                  Filesize

                                                                                                  3.1MB

                                                                                                  MD5

                                                                                                  174f39f47ce2ce123bbb4eda96df27d9

                                                                                                  SHA1

                                                                                                  dbb33310eec5975bbff3aea5fdd8c4dce0627ed7

                                                                                                  SHA256

                                                                                                  69e749e73aa810b0723905026049179128ed603218e8f68e3aea9acd7e54624e

                                                                                                  SHA512

                                                                                                  b4f7c07d8357daf7101c985870865000f4fa4ce3c021b9402d10912148b7eaf2840a7a0dc8d00bc870a42bf63198176ce13b0ae8ea58446738a2ee35c6c9e728

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

                                                                                                  Filesize

                                                                                                  3.2MB

                                                                                                  MD5

                                                                                                  7e566b950ff4c22a40b108189f6b7b2e

                                                                                                  SHA1

                                                                                                  b02f420a6ef3f17e3222ac62471d490d8915ebc7

                                                                                                  SHA256

                                                                                                  6081e6092b72ed813f8d1b4c9e9e64806adc81c79c301e0e489d7c7a09f9cbde

                                                                                                  SHA512

                                                                                                  358075d1d2a67465ec3462486d8baa4a3fc8534fec21d8015880278e3635e03ff1ec4c7402e6121cd645ea81b1079df11cf2ed56d5db210570f8119f6b931833

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

                                                                                                  Filesize

                                                                                                  1.6MB

                                                                                                  MD5

                                                                                                  8a89d650e07c78a89972a14e994082d7

                                                                                                  SHA1

                                                                                                  4a747a3ed6828384a4fd538cc8ef1e6ce7525706

                                                                                                  SHA256

                                                                                                  d049c99d34a92a574335402bffd0eb27c11c4263a397caf890ecf79e90015705

                                                                                                  SHA512

                                                                                                  a7548676a897913ccc0847950107998d259d26602668af0e0a8a5edd60461e460c17edcaca75fea12aeed339e1f6637e66cbc1e173155057f3338094e00ab284

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

                                                                                                  Filesize

                                                                                                  1.4MB

                                                                                                  MD5

                                                                                                  b070c4f9d39aeb78acc9a8dbee6f5555

                                                                                                  SHA1

                                                                                                  28f50c26cb82c632fae425757e92be2bfa181519

                                                                                                  SHA256

                                                                                                  1aa97792b662382aa3e511ee2ff942d638f06ccb2747a47ed87c792d0e929b8d

                                                                                                  SHA512

                                                                                                  0373917cce8aa9d836d4ad04bb53acd3bdaa53adbe1311ac6ffa48a434f10c0b5bbd431cdfa9f34ea5c036e5ed9b2fca73435247610e8e1e6ec208f5f1d72bde

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

                                                                                                  Filesize

                                                                                                  2.5MB

                                                                                                  MD5

                                                                                                  164643712e4e9f766a318c5f47055b04

                                                                                                  SHA1

                                                                                                  7114c35c3d3f25a98906e85dd2ca91cab1de91d3

                                                                                                  SHA256

                                                                                                  c0c6abdc4c1695f96fcf7df583378b969450a1ee335ebdceaaee3927f6112d80

                                                                                                  SHA512

                                                                                                  68fe3c4adfd9a9f86e976352f735f569a7aa05a47374886c54d08523e2d67bc0c76be69dfc9f020e6b3a07b1c395a468b00e16a604660721a08c88da24bde91c

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

                                                                                                  Filesize

                                                                                                  1.7MB

                                                                                                  MD5

                                                                                                  d40f541bd47e21c03ae3d2c5c8ac0fde

                                                                                                  SHA1

                                                                                                  6affa1cc19823556e0adab32d8e7123642b2a783

                                                                                                  SHA256

                                                                                                  b80d72cb0f841ee2a4d3e0ade24e52a4c31a8eff08964609977fb5c67c2a611f

                                                                                                  SHA512

                                                                                                  7382ee496e232feeae9dac5f9789bb7aa1bffaa3abcc98188c76a8b21a97a2d59fa2dfe9f6f7212d9d27cba58a06542421156111b137219eeaaebd265a8b49cb

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

                                                                                                  Filesize

                                                                                                  1.4MB

                                                                                                  MD5

                                                                                                  27507c2961d86445d9c45825685cd4ef

                                                                                                  SHA1

                                                                                                  e4250c154d4ee4579b9cc7130dfd7e794188dbf5

                                                                                                  SHA256

                                                                                                  f9427081e7d349ecea406ccd7a4a87ecff5e5c4676944e857efb93bae4faa630

                                                                                                  SHA512

                                                                                                  00c1d19fc54e62e73fbc044c7756679b5b34358832458de8ce2178c631014e3cd38de49579f8f1cb0b85e76b765600ea3c288820fa652801c320dddf9fecbd17

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\icudtl.dat

                                                                                                  Filesize

                                                                                                  2.0MB

                                                                                                  MD5

                                                                                                  3dae90f0872a7f313ad932dd16b91e03

                                                                                                  SHA1

                                                                                                  b98dd75a9cc9d4f45fedcb88b37bfd4fda3b835d

                                                                                                  SHA256

                                                                                                  1e1c5baf359daaacc6a115e6dad64e10412b4641e9e63da25955bd2f84a8eb0e

                                                                                                  SHA512

                                                                                                  137b21f7755fb6f9f1dd48c31a562a46dc9db1c604c593609c08c37bef1a81c4ad8e42761d8ed650047d1a9837c04bc15f75f6b1ad03fb3cb8f26392a0fbf77f

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\resources.pak

                                                                                                  Filesize

                                                                                                  1.9MB

                                                                                                  MD5

                                                                                                  403b4a4ca817a27db25b1fd6e135850c

                                                                                                  SHA1

                                                                                                  7aa10efaff9c5c3e351ddb180b26c25e914f427f

                                                                                                  SHA256

                                                                                                  8b2fe9d8ba1966c2381651a1a7800d3b11e7bae04af9cba564784f6cf5059d06

                                                                                                  SHA512

                                                                                                  865db15de34d856a393bd3021717db2453a64c401aa27293a8d48d7e577a0cd6a932cfe348d372437ee8a0141ef3ee462751a379bb580f8537297fbd4963a4da

                                                                                                • C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar

                                                                                                  Filesize

                                                                                                  256KB

                                                                                                  MD5

                                                                                                  90fec8ae6d7679008887ef68e60d130d

                                                                                                  SHA1

                                                                                                  873db456aee70e571f7ca9a9b361b25c4c234073

                                                                                                  SHA256

                                                                                                  a7193bb320e23b89f4a3d6fa1217c0d9ca7811da45917bef7ac0469cfe158085

                                                                                                  SHA512

                                                                                                  2e9c312905fb5f4fee38cb1724e9fa0789a40245f8756b89be7a15145f99093a8c998fcd9cc4441e7e316cfdcba3b32e3257b356a2c3a9a231c41e3c3ec64cc7

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\LICENSE.electron.txt

                                                                                                  Filesize

                                                                                                  1KB

                                                                                                  MD5

                                                                                                  4d42118d35941e0f664dddbd83f633c5

                                                                                                  SHA1

                                                                                                  2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                                                                                                  SHA256

                                                                                                  5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                                                                                                  SHA512

                                                                                                  3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\LICENSES.chromium.html

                                                                                                  Filesize

                                                                                                  2.6MB

                                                                                                  MD5

                                                                                                  85c99abff5774db44ab4dbb9e9411c58

                                                                                                  SHA1

                                                                                                  c5494d4558f2187cc1930a63ea6a4bee4977c222

                                                                                                  SHA256

                                                                                                  2acc03c5fc53760803473694b73ce61ab41f1c7c7f26d6f212e336f5781d4601

                                                                                                  SHA512

                                                                                                  1cc62e55b88ef976b069cc4e1a3815905b0596ff31742343c8e3d2bd11be16870ac6f0e7cb3c809861035f2ad3e475991d014ae559e475557efaf195ae88bd6f

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\Launcher.exe

                                                                                                  Filesize

                                                                                                  6.1MB

                                                                                                  MD5

                                                                                                  0d7cc33b52a453cf542d2065d43d5895

                                                                                                  SHA1

                                                                                                  cb866ff3ae6e2a226f2be84c7193ed76c105778b

                                                                                                  SHA256

                                                                                                  70ca29a376c859bafaa0c2f8f5492bf9f34e67a63b631e01690cf636042d24fd

                                                                                                  SHA512

                                                                                                  b8e2e9df1f11881f49bd0e57f6b3e00113957d04071a7207e860552c1c46b851c715c534566cc27a0e8c6a0f231afe35acd5a684c6083470017ee66493a449b0

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\chrome_100_percent.pak

                                                                                                  Filesize

                                                                                                  126KB

                                                                                                  MD5

                                                                                                  d31f3439e2a3f7bee4ddd26f46a2b83f

                                                                                                  SHA1

                                                                                                  c5a26f86eb119ae364c5bf707bebed7e871fc214

                                                                                                  SHA256

                                                                                                  9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

                                                                                                  SHA512

                                                                                                  aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\chrome_200_percent.pak

                                                                                                  Filesize

                                                                                                  175KB

                                                                                                  MD5

                                                                                                  5604b67e3f03ab2741f910a250c91137

                                                                                                  SHA1

                                                                                                  a4bb15ac7914c22575f1051a29c448f215fe027f

                                                                                                  SHA256

                                                                                                  1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c

                                                                                                  SHA512

                                                                                                  5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\d3dcompiler_47.dll

                                                                                                  Filesize

                                                                                                  4.7MB

                                                                                                  MD5

                                                                                                  cb9807f6cf55ad799e920b7e0f97df99

                                                                                                  SHA1

                                                                                                  bb76012ded5acd103adad49436612d073d159b29

                                                                                                  SHA256

                                                                                                  5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

                                                                                                  SHA512

                                                                                                  f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\ffmpeg.dll

                                                                                                  Filesize

                                                                                                  2.6MB

                                                                                                  MD5

                                                                                                  e3ab6f226a9189a456d53dd700f5d503

                                                                                                  SHA1

                                                                                                  0d3f467e9f36a404eb10b318c758edaf02305e26

                                                                                                  SHA256

                                                                                                  16070fc0fc3ae0d3d5872e5bd2194d883a1d91cf021e1fcb708c785a348c1a80

                                                                                                  SHA512

                                                                                                  b1d5b362489b5d26037c035c8b1e9bac24a4555b64371b41f8549ab70d5d591589ba154e163ec84d4b4b4435903db32f7ffe0f720f5e6d01b7656ed03f6757d0

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\icudtl.dat

                                                                                                  Filesize

                                                                                                  6.8MB

                                                                                                  MD5

                                                                                                  2546aa76f052eca050926eb7b15db275

                                                                                                  SHA1

                                                                                                  195c0bdc2d47caa2dc7c1166bd127010daeb1a44

                                                                                                  SHA256

                                                                                                  56c9e7c869a6e835ba27c063ae6098c67625363e1d41991de5dc9883bc375a87

                                                                                                  SHA512

                                                                                                  27c2fdbbe4c68514fadf767796f48b4527a6cc90259432cfca9c92fa94eeabadb0ae09d196354809bf0bc4073269e6d6c737d08ce0db1cbbe802b96ea24f10a0

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\libEGL.dll

                                                                                                  Filesize

                                                                                                  473KB

                                                                                                  MD5

                                                                                                  637eeb39ddbeb3ff518ff1988604505f

                                                                                                  SHA1

                                                                                                  8b3d9a0d542718fb906f8fafb2583d7bb53176ef

                                                                                                  SHA256

                                                                                                  3c51a8e53ef7473e9a335673e909dc9c67bf962997e6e2a319c3bd70fd52b4ed

                                                                                                  SHA512

                                                                                                  3257f9c96665f1bc8bb39acd0d98015b7d5e32f3cf3f84e795df4d19f6bd3bcc14a4e89759cc0de83289b79cd290fd5f4b176c3e9a4cb2eca3acfba0c9e232df

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\libGLESv2.dll

                                                                                                  Filesize

                                                                                                  3.0MB

                                                                                                  MD5

                                                                                                  ef73a61ef76ead2443aa55a096430793

                                                                                                  SHA1

                                                                                                  73c960fab5863c947ac32a04770e349ee8622dbe

                                                                                                  SHA256

                                                                                                  5234b401ebf9b70e7a4d14d4d5a27a80666a9a0b907e6e0ecd66c8b41b9883a3

                                                                                                  SHA512

                                                                                                  8af1a76ad2f3c89b275d345940739bfe54479648b76ba151e8d3752666e2eca38871e417e6ab064881b32d8fed04787084d455d4576dd06e100cf1f0fab732c9

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\af.pak

                                                                                                  Filesize

                                                                                                  275KB

                                                                                                  MD5

                                                                                                  65fed89cd1b76b84eb99e85e7bd01b3a

                                                                                                  SHA1

                                                                                                  8bfad4f94f4ea08b04b2a9282ac43bef86548416

                                                                                                  SHA256

                                                                                                  83a908f04265657b290d0be079728ea3e6dc2813028babc09cef470c4e2ba7b1

                                                                                                  SHA512

                                                                                                  a809ffad07601243d86f8176a68948a276a0e374ab888ce416e22bd1e32e828fade9ab6b4da80d51107d29194b7d86dc310bbe21d5826ee504f2f655e58c9de1

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\am.pak

                                                                                                  Filesize

                                                                                                  256KB

                                                                                                  MD5

                                                                                                  06f135e3db5ceae5b22cab94f94ede28

                                                                                                  SHA1

                                                                                                  ccfd5285cf02c6d4c456714f9c857fc076d54172

                                                                                                  SHA256

                                                                                                  f3e951d44b40bd9a59551f033759b23d6c2306766787716c19c70b08afb76bf8

                                                                                                  SHA512

                                                                                                  71123835d7902f9bdf86cc10899c54ddbf45ba7f1c87d0000c23522effd5b3d12b901579c747c6334b206e2e2e1b09a101c99f13d8960626133121bfa9a187f9

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ar.pak

                                                                                                  Filesize

                                                                                                  256KB

                                                                                                  MD5

                                                                                                  5be298dc554d62854b0529fd6de6ada8

                                                                                                  SHA1

                                                                                                  e803b7829d46bf61d2be5ccd99369a9f90ffaf99

                                                                                                  SHA256

                                                                                                  221862093d2e86c1c4a30d1a56bb16bd5b4c3fe954a33127c9929955b6beeb11

                                                                                                  SHA512

                                                                                                  f4f3e30add72c59566cf376406c26513ba562bee83a07078b5dbfff468b0dbfef175d6ed9de8124086f44bb4b5cf3e55571617c51161fcb924b466540224bd77

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\bg.pak

                                                                                                  Filesize

                                                                                                  256KB

                                                                                                  MD5

                                                                                                  1d40a2951a50e4a6c6a75677d3dc173f

                                                                                                  SHA1

                                                                                                  5dc89724289c6d252d8ac02bdd20c905d5e6e06b

                                                                                                  SHA256

                                                                                                  4da260528be091770a02d0fd7929e0d12c08f88e9f2ef8e6294778d79c435169

                                                                                                  SHA512

                                                                                                  6862d75180e4571714df0bd639c0378aa1e2874550f57e01a8771857337c674645a98def62973c7187cda9489ab0b8b034cef2f9c5fcd742e36b21b40883523c

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\bn.pak

                                                                                                  Filesize

                                                                                                  256KB

                                                                                                  MD5

                                                                                                  f8965020aa76a89ac491f3cba222553d

                                                                                                  SHA1

                                                                                                  ec7bf34d2a59f3d3c8cd94716a03f0230861ada1

                                                                                                  SHA256

                                                                                                  89703c786348165672637572582c1040ce8091878ec01d2c97109474fc552174

                                                                                                  SHA512

                                                                                                  e58b50e7dac7e63349a90de3fca8393b6bc4f649a37a58e937f0b26a5c8fed5af091914537f273ebadebba134ddf6978b7421bd2496882b6f3296528d84d2a8c

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ca.pak

                                                                                                  Filesize

                                                                                                  256KB

                                                                                                  MD5

                                                                                                  890ea915ce1014ae3a1129b21e4265b3

                                                                                                  SHA1

                                                                                                  74554ce2305ebcedd6ff6a81a35137b820ecf0c1

                                                                                                  SHA256

                                                                                                  63be688c383ba8cccc4eae9085a65102e4b2fd9838e8d5ede55c0f4672f1130d

                                                                                                  SHA512

                                                                                                  a5847d28922f6e0e01acced95f6a3d774cb8324393972e625d6b75411e19746d33227cb7931c5c20172406edd76d4418fa7b7456209b5e4c351c5fb00f0f6f87

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\cs.pak

                                                                                                  Filesize

                                                                                                  256KB

                                                                                                  MD5

                                                                                                  2cc23bc2f77c399064c4ebd50365f81d

                                                                                                  SHA1

                                                                                                  9b2b45e28ab3dcf1afd9bf2f67017340a97de791

                                                                                                  SHA256

                                                                                                  2b3883a0e1378fe2f64541799a935198fb5df2000de7b3d630d80a09ece885d0

                                                                                                  SHA512

                                                                                                  76d164b9a8ae27300ad57c7a1f22872d738700276afc175f8825eabdf1d68cf680b3943e725a2c01a7cc69898f0a4f2e89d9bf30654149bbad701d84a6bdea22

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\da.pak

                                                                                                  Filesize

                                                                                                  356KB

                                                                                                  MD5

                                                                                                  4bccba46add5ebaf6efd4ade3c42aed9

                                                                                                  SHA1

                                                                                                  e48dcc2de930bbf0ea8ee7b735ead321dadb5be8

                                                                                                  SHA256

                                                                                                  2497368658a988e4eb3f64cd17423ea04e7555b104d43c8996c0ecbbfed5f74d

                                                                                                  SHA512

                                                                                                  e2059e2a7f80353981eef6982a7da006fa3753aeba9aca5279eef71aa2fa4b7adbf9cbb17c85b8060359f9e871b1a5c665226f8d3b8a6fe49f908fd44e1b46bd

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\de.pak

                                                                                                  Filesize

                                                                                                  381KB

                                                                                                  MD5

                                                                                                  8569900305a5661573f7766b93909f16

                                                                                                  SHA1

                                                                                                  3529376f54e32c17447b065d08c77314c4db2ec8

                                                                                                  SHA256

                                                                                                  068ba3e34e7f253fad7dc526b1078aaa969bea044d48171925534598aa8becb3

                                                                                                  SHA512

                                                                                                  d544febbe20a9bc5cf31f79f7ef74c1a742cccc99136e9828187c9a643bd0317c7cc48706346ee1a3c9eda8984be9c8606e9dfa7a6ce2cff49db2d785c2aa1c3

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\el.pak

                                                                                                  Filesize

                                                                                                  691KB

                                                                                                  MD5

                                                                                                  8025eb8756d4bf3126d83c9078935520

                                                                                                  SHA1

                                                                                                  78895218a90680fe223af0b003c195da84902e1f

                                                                                                  SHA256

                                                                                                  e42aeaea80dabe82657983a462e4cd3ec74f71d4f08a689f5825f55fc02f3141

                                                                                                  SHA512

                                                                                                  f99f47e54583b60857a31648b985216713725496d8653ca04eb1d6634f2b7f7a1f9f70b8a7938529bfc6c8665360da5e6bfb6b68c314c011fef4a9817010c42b

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\en-GB.pak

                                                                                                  Filesize

                                                                                                  310KB

                                                                                                  MD5

                                                                                                  502260e74b65b96cd93f5e7bf0391157

                                                                                                  SHA1

                                                                                                  b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7

                                                                                                  SHA256

                                                                                                  463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b

                                                                                                  SHA512

                                                                                                  0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\en-US.pak

                                                                                                  Filesize

                                                                                                  313KB

                                                                                                  MD5

                                                                                                  3f6f4b2c2f24e3893882cdaa1ccfe1a3

                                                                                                  SHA1

                                                                                                  b021cca30e774e0b91ee21b5beb030fea646098f

                                                                                                  SHA256

                                                                                                  bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f

                                                                                                  SHA512

                                                                                                  bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\es-419.pak

                                                                                                  Filesize

                                                                                                  380KB

                                                                                                  MD5

                                                                                                  02452424bb0cf6ab832808d04883f147

                                                                                                  SHA1

                                                                                                  a8e97ee52f3d97c1a4c678f7578808416e9fac65

                                                                                                  SHA256

                                                                                                  1b23cda69927c77764bda121ee398ffefcf5edcb5866432aa3526c378553c9b5

                                                                                                  SHA512

                                                                                                  9e750b26ab40b5f1c075acbdeb15a57cda9e6bd8049488cfaf368b5cbe8cd9b6e5dc96130e4137370c90bb0777b97515ea2be0787e255cff750fb7e188e22ab2

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\es.pak

                                                                                                  Filesize

                                                                                                  380KB

                                                                                                  MD5

                                                                                                  4ca91891b2d4670d02931f0ca84e4744

                                                                                                  SHA1

                                                                                                  85f6559b09c80af2575e3b7626842c10081e188e

                                                                                                  SHA256

                                                                                                  85fff1ca6bd2527073de03fa77dd013db2557a57cce1fd370caa2b185abb9336

                                                                                                  SHA512

                                                                                                  83eae7ab2f03598c657786bff6171803b6bbe2128d1a5b8a01d9a13337113632279712dd8ffcd3b707fa6052a936d92a57cb67d848c77ee291e75700e29f2bf8

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\et.pak

                                                                                                  Filesize

                                                                                                  342KB

                                                                                                  MD5

                                                                                                  74eda453b23793ced4480ea7a595fe44

                                                                                                  SHA1

                                                                                                  76964af9c8024bd84fa1d89f60784e7ee6569350

                                                                                                  SHA256

                                                                                                  e2d38131a5ef4b0e8438f45e8c74c56bcf666760d4682120c8071c9220230555

                                                                                                  SHA512

                                                                                                  e9928cfac01f10b040c74e63242ffa1f7f616d8598f49f0aa7ddad063e18666cf5649cc65d00b3526526af8a7b46ee3b3655da22adf46aa44c0c6a1c2ac4dc7b

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\fa.pak

                                                                                                  Filesize

                                                                                                  557KB

                                                                                                  MD5

                                                                                                  99de8cfda36ab9ab3342889fb6da393d

                                                                                                  SHA1

                                                                                                  6bdd3d627d4b6702f43725039089562af58898c0

                                                                                                  SHA256

                                                                                                  b93145f30e25122015373a248d6ea22a539c7d0d58c8aa853ac35cc80dc06bfe

                                                                                                  SHA512

                                                                                                  aa20793f9ece5823cb9e74a4a3ff97d7a1860a593f427fb5eacb0390569a48122589610fe5a02577577f3a30f981c5e3da97cf73bdfe158a6bb845586c5b19d6

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\fi.pak

                                                                                                  Filesize

                                                                                                  351KB

                                                                                                  MD5

                                                                                                  fa7dbd2ee35587ff31fde3c7107e4603

                                                                                                  SHA1

                                                                                                  baaa093dcb7eccf77ce599c8ff09df203e434b60

                                                                                                  SHA256

                                                                                                  5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c

                                                                                                  SHA512

                                                                                                  587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\fil.pak

                                                                                                  Filesize

                                                                                                  394KB

                                                                                                  MD5

                                                                                                  0b7d25d70a2d94a032b7ff7faea45a75

                                                                                                  SHA1

                                                                                                  d9d473b2ea936ffea4f751d8716cb03407a95785

                                                                                                  SHA256

                                                                                                  a737a14f84b10b2e3c9ad4d147b430fd30c5ac0e125d5aaaf1ea19b0507de5af

                                                                                                  SHA512

                                                                                                  e4dbef6fae4cb56c3cd7bd5dbb239b5136eb2534a17cacbf628f5e5d77bfca924580ad4e4d0ec580ffaf94d6e1fafad58e9c5f472c3a3ff782702ea5eae2aea3

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\fr.pak

                                                                                                  Filesize

                                                                                                  410KB

                                                                                                  MD5

                                                                                                  a7c88eda9e12b6dbd432c544767acbe2

                                                                                                  SHA1

                                                                                                  81f1abe537870f7888431e820b636b17b5213835

                                                                                                  SHA256

                                                                                                  a4d0e5a39241a6326143afa4c8ec881d6edb0382c66425411881946f98e053e0

                                                                                                  SHA512

                                                                                                  88ca203256aaaaa26afd4a0aacb6fba2eb41618d09df6fc6aaa80ab8d699b30e73c373fa75098b1ec4912c042341dd1c79ee3d04f98b4bd59a44481d350a7988

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\gu.pak

                                                                                                  Filesize

                                                                                                  787KB

                                                                                                  MD5

                                                                                                  3268b8d9b4d4db87ec627b09f1c55a6d

                                                                                                  SHA1

                                                                                                  683ba367e40abb2fefd4548805e845fc1b452855

                                                                                                  SHA256

                                                                                                  dee5ef4f4b36fc5fe0f3b5e10c7cc3a7edc14bf948317b31a3287a95bfe0afa4

                                                                                                  SHA512

                                                                                                  59cff62843d35f790092f42b611e9bcd80d948c0ef27a770b2d7af859997f40c320d67df3c5a9420d28d5c8f1678df4677e01cb99b729664d198b3b95b5fbd20

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\he.pak

                                                                                                  Filesize

                                                                                                  448KB

                                                                                                  MD5

                                                                                                  d73328ecb472a2965e45595b541f456e

                                                                                                  SHA1

                                                                                                  6d918e242a4dbd721e2ad423e32af0946f142f0a

                                                                                                  SHA256

                                                                                                  eb76536aff6d58f65db241dfb73a044c4b05214c8ff9ebe1f3c56c3f52b6a6dc

                                                                                                  SHA512

                                                                                                  219404de03108af3d21ea5a31bc8bb2363bd77522612af030c438b60afc50aeb4b431d6e1a52a6df70920735c3f7aaa4672690b25ba2e8b80c2c02eac2465d2c

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\hi.pak

                                                                                                  Filesize

                                                                                                  448KB

                                                                                                  MD5

                                                                                                  de6ee83e4b5c80e402be45f8319f6011

                                                                                                  SHA1

                                                                                                  c707b6f5d42fac5244cf9e53d34bb62576e7f36b

                                                                                                  SHA256

                                                                                                  cb94f38d68b66c0b95eb509510ae965bc25d3fda2208883f61816277cc4966f0

                                                                                                  SHA512

                                                                                                  da3729f0085527c1f87219659aa6083cd1a75982497bb66d4829e8e74000f67b0f52202845ebfef10084eead81f1d569fa859d0416bdf77f2ee3baca732d4590

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\hr.pak

                                                                                                  Filesize

                                                                                                  381KB

                                                                                                  MD5

                                                                                                  7dbd4a9de6e30de028c97a7d39f8038a

                                                                                                  SHA1

                                                                                                  18d68f37b3c5eea3a2fe42c4ab1694a439a189c0

                                                                                                  SHA256

                                                                                                  e1c793e08e062043cc65271718d9b21d5742729dfa2e076ab012e8a008d06c04

                                                                                                  SHA512

                                                                                                  a18c43257d26380ec14ae0259cf192257fee0c6895b82240c3b41c5d6e8bd6f8023cb39dc2da0701bbcf05e8eb2cd13c84af971c28c94099a6d0ea02ce745ddd

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\hu.pak

                                                                                                  Filesize

                                                                                                  411KB

                                                                                                  MD5

                                                                                                  d6904e7d1b6750d43a6478877c42618d

                                                                                                  SHA1

                                                                                                  919f090a6a3aa1112916f5bb0d5b73a62be43c1e

                                                                                                  SHA256

                                                                                                  3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f

                                                                                                  SHA512

                                                                                                  d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\id.pak

                                                                                                  Filesize

                                                                                                  128KB

                                                                                                  MD5

                                                                                                  a96f0f3f69e6b873910b370af5d23069

                                                                                                  SHA1

                                                                                                  e0f6e1def18c9f3441c3081f22fa74546edc8102

                                                                                                  SHA256

                                                                                                  f32e06fdda29bc8932505122f5aa3054f64a9038915e8e77593af912054af833

                                                                                                  SHA512

                                                                                                  b10e7a8d1685fe48042d32b76d715ed5a44f3bcd1c0a5f323932a115a7f9a89f939c6793cab7fe53b47680df9a8619064e7f21e09d78e1b2db2f281a83b65fa3

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\it.pak

                                                                                                  Filesize

                                                                                                  373KB

                                                                                                  MD5

                                                                                                  6629c344b6e5ee8fb476522627b34221

                                                                                                  SHA1

                                                                                                  28335e3c96a68a560c68756860394a0a86c21870

                                                                                                  SHA256

                                                                                                  e76c3f15529fa7cc088dc32903c6885f4cfa170a1e0144710b05965f3210c31c

                                                                                                  SHA512

                                                                                                  78ca2ebf40d6cc3eb7035cca78364be63b8eb69e27caf2cae57e3489b39a9e443409e800fd95e1b646d37655c37ee8a9ae1ab344b506cf65f8603a6a3ad892ed

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ja.pak

                                                                                                  Filesize

                                                                                                  456KB

                                                                                                  MD5

                                                                                                  c294012268f9e611fdc2904be57e45d8

                                                                                                  SHA1

                                                                                                  9ba4bd190ced7ffe053fa74071fc5836bdebea53

                                                                                                  SHA256

                                                                                                  21cd7ae581f6d0c19e90ac7df03d7dd5305b882776a1f091573f824bd28514da

                                                                                                  SHA512

                                                                                                  d16653f30617e52a040c5e033896a71055fee9992e54ffca5029601bb62a41b9685a68655b9c8bf7a7ba54a914836a0f7a49cccacae0eda180a6b68c0471a268

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\kn.pak

                                                                                                  Filesize

                                                                                                  910KB

                                                                                                  MD5

                                                                                                  01e8dc084d07743fbda50d54d86ee3bd

                                                                                                  SHA1

                                                                                                  e0709217e1a6785706b7d14037b1478ee2a3a59d

                                                                                                  SHA256

                                                                                                  ae4e003458f1a8bd3652e61241e11ff91bd887f6b95c1fe2700e76a117ba2119

                                                                                                  SHA512

                                                                                                  7d8db84f975d778bde21253f43d174921c2c71111644a953ad8671754e5d656f72bcabf62f4b960cbf4ca0ccc5f67d1558ed250b568c1f2308a31970e380654d

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ko.pak

                                                                                                  Filesize

                                                                                                  383KB

                                                                                                  MD5

                                                                                                  ce19dea7b7d0b9472f99427de2b307f0

                                                                                                  SHA1

                                                                                                  9c84dbff9927c052dcb9818ed73bb272abf9054a

                                                                                                  SHA256

                                                                                                  586f34de2c7bb0e92fc376f3ad962bf9bae1a768398459d39f8ed06b59d8ccbb

                                                                                                  SHA512

                                                                                                  9a6c84ef9bb03be9ce96948bea94ec0ba83ecbd06ed648acab9d6fd27c1ab85f011a5670591da6256781dc147fc234d627cfc4bf5eb29bc2c8bfc84aaf89085f

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\lt.pak

                                                                                                  Filesize

                                                                                                  412KB

                                                                                                  MD5

                                                                                                  7b6bf901352885c0699db71239b7cf24

                                                                                                  SHA1

                                                                                                  9e3ec5f327c0d0e54a449332061e60a8c79243cf

                                                                                                  SHA256

                                                                                                  9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350

                                                                                                  SHA512

                                                                                                  79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\lv.pak

                                                                                                  Filesize

                                                                                                  410KB

                                                                                                  MD5

                                                                                                  cccbd7f8a0c34c7094ce4d7b8e7e0588

                                                                                                  SHA1

                                                                                                  1a08401e2dc8c59200c4ecaa1886b43b6faa6979

                                                                                                  SHA256

                                                                                                  7467360f9addd4d8694e1508a6ab3a3e00dce57e5897d5376ad27d8e651b23d4

                                                                                                  SHA512

                                                                                                  2cc43437f1cd8d5fda0e95e7dd117c9b82e90cfed58ad8f492f46b4634aa01cd1b0ebe39377231a0828fc1ccd39641e4efc2f1210d629f9aba12ea9048accd95

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ml.pak

                                                                                                  Filesize

                                                                                                  948KB

                                                                                                  MD5

                                                                                                  00292b0801e0dd0a74091bf53f1574c9

                                                                                                  SHA1

                                                                                                  63a002e7a8796bc4b4459a19c95ce426fbd1ec7f

                                                                                                  SHA256

                                                                                                  61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6

                                                                                                  SHA512

                                                                                                  e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\mr.pak

                                                                                                  Filesize

                                                                                                  772KB

                                                                                                  MD5

                                                                                                  b9a2aa88c69c42ebcc41fef00c980a38

                                                                                                  SHA1

                                                                                                  9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8

                                                                                                  SHA256

                                                                                                  481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09

                                                                                                  SHA512

                                                                                                  5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ms.pak

                                                                                                  Filesize

                                                                                                  351KB

                                                                                                  MD5

                                                                                                  6de7b004a86967a3433545b3b38bf89d

                                                                                                  SHA1

                                                                                                  113bd5b28dda669b27c798e0b46fd680f3a04956

                                                                                                  SHA256

                                                                                                  ead5a37549b98d55839ffcf0dc8f8201d37d71968ec9138fdea79d7c9b79549d

                                                                                                  SHA512

                                                                                                  239c4acd2c0b6c08fb92fd95b89a302ddefc01ea843950a0247b7310c2b024383ae98286c2d4b83b99833452c41b386e047b2ef33610ef122fcf2f439ef43726

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\nb.pak

                                                                                                  Filesize

                                                                                                  344KB

                                                                                                  MD5

                                                                                                  bbae0915edec081b04bb903b689bc40b

                                                                                                  SHA1

                                                                                                  6a0fc635ce1c431e512b8b3b8448176aa4025556

                                                                                                  SHA256

                                                                                                  d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8

                                                                                                  SHA512

                                                                                                  573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\nl.pak

                                                                                                  Filesize

                                                                                                  356KB

                                                                                                  MD5

                                                                                                  9fdf47fef5b549497005ef8efd2a2c59

                                                                                                  SHA1

                                                                                                  3449de72bfc2be537f4b007c81e5bc5de6ff3d0a

                                                                                                  SHA256

                                                                                                  65a9c1efcdd451504e2e9b44b0c8fafd2c3c1445d760fd6c435305e2f8534f59

                                                                                                  SHA512

                                                                                                  3e77178dcd9e8894847039a997c87d5d04eef8a1ace1846132fde229285da08ffc8d3ba697226130bd07ab122a868cc53693981a21f8211c839ccdaba77207cd

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\pl.pak

                                                                                                  Filesize

                                                                                                  396KB

                                                                                                  MD5

                                                                                                  c9da926441d438b952149650c86a033e

                                                                                                  SHA1

                                                                                                  74ee60342bda33048570dd3c03f897668cdfc971

                                                                                                  SHA256

                                                                                                  ce96fd415ffcda01345146faac716e2d45e2c556e5c6c38e9a1ea5ac19dafe84

                                                                                                  SHA512

                                                                                                  3e718e8df695cbd80146c3e911de9b235ccc06f574739e5720d47952f69eab089b56451cdc321174da9b239c0a71a720baf9d68b46046efa0edcb2a3f1804ea0

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\pt-BR.pak

                                                                                                  Filesize

                                                                                                  374KB

                                                                                                  MD5

                                                                                                  c68170e4948cf3ae6910364c1e68ce90

                                                                                                  SHA1

                                                                                                  420f3a392db28b6fd6be44fd702b455518b67bbd

                                                                                                  SHA256

                                                                                                  b26499a256d66feed42b372ea2eaceb75c279694b40a7b5d0f8c1a5c24cf381c

                                                                                                  SHA512

                                                                                                  29482ced2091873a8c6242a608ed641b3a4d72fb93ccc2eb58d2769c446195f717b438d5633522f457234f3d209029936e9ea4ccd65d45ba8ae0c2df71043797

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\pt-PT.pak

                                                                                                  Filesize

                                                                                                  376KB

                                                                                                  MD5

                                                                                                  9b04c89c2d17c7c00a6a4342f0771fec

                                                                                                  SHA1

                                                                                                  a0886040fd5f870023cc3038f5722f4ba6d7c8b6

                                                                                                  SHA256

                                                                                                  abb012215610178b7f8203f61f41103546d3949ac3df4acb3a622b01663f39cc

                                                                                                  SHA512

                                                                                                  7c4cf5e7bfad4709db49779c1e3e762b8d0bac6cd736c511711ddca7682e08bc6b3274c9872d88db78bc36b0456b29680d3c4e518d4a401830cfb37b48567bb8

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ro.pak

                                                                                                  Filesize

                                                                                                  387KB

                                                                                                  MD5

                                                                                                  9b9c22a12ddce43a4a3c0c047a16a5c3

                                                                                                  SHA1

                                                                                                  901e072d644a79e0b18be2f4a81e6842b070485d

                                                                                                  SHA256

                                                                                                  3e89d43b86b2582fd7db236659af47ff459a44c5b5ebcbb0bcc9eda244c8e501

                                                                                                  SHA512

                                                                                                  196a5bb1b0b5093d4a18279037ef7993525c36c136d4560b7e902c815687f7992ecd2b64d96422911a3468cf3f1478b21df6465d3b31486466cbb5573ff0e7e0

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ru.pak

                                                                                                  Filesize

                                                                                                  634KB

                                                                                                  MD5

                                                                                                  aa75c21bfe54bb70e7abd9fce1347a8f

                                                                                                  SHA1

                                                                                                  3492307cec15b367274c948beb76598f72347846

                                                                                                  SHA256

                                                                                                  bd981aa65536b544228ed1d60a552ff4c7800b46f815177b33b3e628b97d77e4

                                                                                                  SHA512

                                                                                                  0e77f1c7e4b5410e9eaed875f5dae6485d8de5b650ec44133b1634645cc3055fa7bea316e843b491f29d9c137b20623b120e014b1c74bbf4e8d1f08dbeaf5bb2

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sk.pak

                                                                                                  Filesize

                                                                                                  128KB

                                                                                                  MD5

                                                                                                  66bc18d7458cc4fd3f1118563896fa58

                                                                                                  SHA1

                                                                                                  83e86b3cb0ae20990611cb4060d7c183c6709646

                                                                                                  SHA256

                                                                                                  9d6babec2ad4a28464375eee8190d93f4ee1f823bf5b04df44db2692a01b8276

                                                                                                  SHA512

                                                                                                  c4407c25d5f3915f164e74a6c69daa8674816c6d3bd2d2fd789e6e3516ed0f1f2cf59f1c17f645bf005321eb231b0370c954fcdc95635020f38b31a84cd56d20

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sl.pak

                                                                                                  Filesize

                                                                                                  128KB

                                                                                                  MD5

                                                                                                  31e0ed62df864e3a0c0271cbf3456220

                                                                                                  SHA1

                                                                                                  32f5bdc061e7a0da16062711a41097435623bcfc

                                                                                                  SHA256

                                                                                                  08d5d0ad877cac7cd29b05067a7a5d9d4b89c13e4028fecbd7760dbb86fb9565

                                                                                                  SHA512

                                                                                                  2ec6fe3a4270c7a0b05938d3c583ed5e011b7798830de4d0b573f5acc1dca41aa9404c9d55180a415153f8fe98be843a23415ff9e16c0ee0e20b8e0d3a06f438

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sr.pak

                                                                                                  Filesize

                                                                                                  128KB

                                                                                                  MD5

                                                                                                  8b1b532e51bfc8abea50e088e2dafd8e

                                                                                                  SHA1

                                                                                                  5a36e0897e530cbbc7fcb3c4cae5a8ff9a24d799

                                                                                                  SHA256

                                                                                                  a950eb1a5245f0f55a8266905622051b07b503549ba8ffe6f46cdb5d2d602206

                                                                                                  SHA512

                                                                                                  5a7304d2ae91b722662ed45ffd9a8dca94f205a306f1bebeda1a1c8cb21da89275f9a8a2433bb497edccfecd39a04fbbe3b80053f6add0c2d71c1308056aa6f3

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sv.pak

                                                                                                  Filesize

                                                                                                  128KB

                                                                                                  MD5

                                                                                                  44ff73d05895487fcf3842da2fffbfce

                                                                                                  SHA1

                                                                                                  0e55c6ca81fa0c6c29327ccf95e9dd53374fd5ff

                                                                                                  SHA256

                                                                                                  f3a15c1fcfaa90b51694bd3a768aa15817ab994522442aeb965b326d9d62e6ab

                                                                                                  SHA512

                                                                                                  46e961630a618dd062b2d41aa43774167417444140879f4311a5d21bd1293f524e635970d58192ef08cd0d6c9b8108757c9a581895deb18ce5d91286b2e055be

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sw.pak

                                                                                                  Filesize

                                                                                                  128KB

                                                                                                  MD5

                                                                                                  2d7443de1db199a267a7b9155f006a22

                                                                                                  SHA1

                                                                                                  045386b53cb5096e42e4a74dd4bf369180353e77

                                                                                                  SHA256

                                                                                                  73b6b0365da72e6fe6e5be408f3430f8049cdbc29aecea3b574ea597c7fb1ae0

                                                                                                  SHA512

                                                                                                  3e1c255594e44c0088e4091fb40828f3b88ba26b2afeb71f85ca9110011c691a44edcd865ed33560402a4f9ea72655f137f6f70a917ecc4b5c3b684551d3a098

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ta.pak

                                                                                                  Filesize

                                                                                                  936KB

                                                                                                  MD5

                                                                                                  714ef30e819d791b41ab093d515e1704

                                                                                                  SHA1

                                                                                                  5410b58dcaa0bc82146655ed56493581d18d5c04

                                                                                                  SHA256

                                                                                                  9be97a18356b05ac4c3aa2b7e719eb29b47d8ad406aa50cf0f24bdde1d613083

                                                                                                  SHA512

                                                                                                  a35074a54dc12a68301553345c69f02ad31bc010690d5f4c4fad5d65b3fd9c3f7c3ec7e3637673d250cb33496b93a9582e28b5210d11137bc0bd5b2e219c0aab

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\te.pak

                                                                                                  Filesize

                                                                                                  869KB

                                                                                                  MD5

                                                                                                  28f500e12a7b91d91d8f99395fce8332

                                                                                                  SHA1

                                                                                                  885fd6c78259ae38f7dba3887f7fee783c1766bc

                                                                                                  SHA256

                                                                                                  06dd7ae122d6f1f394aeb85089a9c837ec05dad627b0bcc92863ab2830e971c9

                                                                                                  SHA512

                                                                                                  6f0fe4a527e9c53a41d20f95cafda7a2488bab310eecf68c98271a2db6f3efe5d2180e158b5018a9c56a0580b0735146f0ae07d884f564de1e8780956a10d190

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\th.pak

                                                                                                  Filesize

                                                                                                  731KB

                                                                                                  MD5

                                                                                                  d34a2993eaf0ee6bf65c3729baee426d

                                                                                                  SHA1

                                                                                                  d796911e57c89b11a603c645dd0e32aad7819d75

                                                                                                  SHA256

                                                                                                  7870b92c64f7776c469b4d19be8881ce30a5263cc8287c3d7de573aed43c7dba

                                                                                                  SHA512

                                                                                                  eb2f4b3cb7741c996acbd121d0c69eda6cfac6bdbd7b8036dc6394ed7e49c9a45641c7983431b5f8c5db685fc7ce958e7c9f5e79837b381caeecf009f79ca4c2

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\tr.pak

                                                                                                  Filesize

                                                                                                  371KB

                                                                                                  MD5

                                                                                                  0662e2b67524444e843d0104adab0b7e

                                                                                                  SHA1

                                                                                                  ec39112f57e28010295398c24c6a17e60a88fd47

                                                                                                  SHA256

                                                                                                  e8f86dc87dbf11935863efb3a5af8213a97123889019e98a7ef313b488088790

                                                                                                  SHA512

                                                                                                  6529083d04e777be3cdaa14f06bb6b3a3d26006ed9d067f7a1bdfcf669856cc6340bf0caf90bbceb75666062fac1bc02ca2d2cff94c6ca5627ccaece6f973a65

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\uk.pak

                                                                                                  Filesize

                                                                                                  634KB

                                                                                                  MD5

                                                                                                  0d9b7f3ce815f7bcfd63ee3492350d52

                                                                                                  SHA1

                                                                                                  6138b5dc296cf406b2314b8b797f9f96de2b40fb

                                                                                                  SHA256

                                                                                                  b86358579a9cec015c996c6ae862ddcb8cb558f30eedd0d0b9ef3cb18c3cc130

                                                                                                  SHA512

                                                                                                  17d874849e5eb17bff2ac98c8191f9f38a07a66eccc502122c0ed2bdd6af94eb17db1b0a2477a75c1fd4f3ed00c76b1818eac5bc4093d92eca0d0a5323718cc0

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ur.pak

                                                                                                  Filesize

                                                                                                  552KB

                                                                                                  MD5

                                                                                                  6733dba4f3f0afeffc40bd87300b9d6e

                                                                                                  SHA1

                                                                                                  610aab026d25f2cec6c636fbaee922c099d26ef2

                                                                                                  SHA256

                                                                                                  d0c8ae8f4f60f04d4eee8cc639ee3b52ad073f5c9ee6fb84c774eb855fd51e9c

                                                                                                  SHA512

                                                                                                  40c1cb7be3709bb6ef01a4e66bfd85e20641020a800292a2a14f4cf188242aa0b8d42cabd0f323acd3d2f257243c7dc04b346a39475343c761af7a1833c3366a

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\vi.pak

                                                                                                  Filesize

                                                                                                  439KB

                                                                                                  MD5

                                                                                                  5b8fc875f0b57ac7793e19e0ac6f4899

                                                                                                  SHA1

                                                                                                  b8ec064365fc29a70bc3a8d3df0ef222ed244fa8

                                                                                                  SHA256

                                                                                                  ff3cdd834569cf9f957a444ab8a51ebe673bd26d7c907a907aedfeed248d4890

                                                                                                  SHA512

                                                                                                  f3a9ad912823aaae0d089cf53151cfba0b6fbc2cebf826b1b7c70fec03bf3f967e440558fef94c990c87349b82c36379bf645b828ab6b69eb9f396165dd6178d

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\zh-CN.pak

                                                                                                  Filesize

                                                                                                  319KB

                                                                                                  MD5

                                                                                                  37b051269289e0eaafd411d374663135

                                                                                                  SHA1

                                                                                                  fa94bc7fe89475f1d5e1c9a2d88161cc992a638b

                                                                                                  SHA256

                                                                                                  4ff334da089d2ffb9c6173de7c918b74c9326ed7bd76317b2696d57861871488

                                                                                                  SHA512

                                                                                                  357350ec552765df460cd66ae59ebcc771df72431baa380247750627ee974f1859bfa423461a2197d4e608063d021faa7fc94bd30c6fe2b1a0cf9b9f7e64ea73

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\zh-TW.pak

                                                                                                  Filesize

                                                                                                  316KB

                                                                                                  MD5

                                                                                                  032c4f24764d531d0de876f1e9d51dc9

                                                                                                  SHA1

                                                                                                  6662a5e3466c1ca415e219634cd67863ff830b32

                                                                                                  SHA256

                                                                                                  a0a715a3ef1ead036f0f03d02a8252fbdbd52ce6f8cc5b9298fc1c4494d4e508

                                                                                                  SHA512

                                                                                                  3cf212a638cfe9d08e625f7f70d453263e44721be9550c2aebfb67462666a8d67b87cd2ed613cc12c7d1fc7d1c1368c7d198a6669fa3a10c2c2bf61966c46aff

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\resources.pak

                                                                                                  Filesize

                                                                                                  2.3MB

                                                                                                  MD5

                                                                                                  42f7134c522b82637590d74ad799c692

                                                                                                  SHA1

                                                                                                  eb5dd9dbbb161dd182a170f205830b2406b7b118

                                                                                                  SHA256

                                                                                                  62641681593c38661c091851858e7139557d6212d27e5aba5f9e9e006ab0bbf6

                                                                                                  SHA512

                                                                                                  df0d004a3b658bd71190d0e18f1bacc15bf91dc0d559f7fb1ca6721c07f35dbed40e8fea18f05a3e2eef5ed9313a1dd361cbd50792300df0a896c857893bea3b

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\resources\app.asar

                                                                                                  Filesize

                                                                                                  64KB

                                                                                                  MD5

                                                                                                  ad0c9f0efd13c539fff616902fb91208

                                                                                                  SHA1

                                                                                                  e77b7808dc84126d6dbf3c820d8a9e705d167036

                                                                                                  SHA256

                                                                                                  0ac4cb2482da32bb92d0b9afeb6c512a899b1003833fd488cf370117c6e08e6d

                                                                                                  SHA512

                                                                                                  3b11183ae3aa9bd7c4b1035383072a0fbfb3a9b1102481df52d96b3e2fbb414940796b5cc0d146363910a15c804bdb6f3b2afa8b20a6796b373df11d5ac49a95

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\resources\elevate.exe

                                                                                                  Filesize

                                                                                                  64KB

                                                                                                  MD5

                                                                                                  c5a83078584b605426afe770df33cf5d

                                                                                                  SHA1

                                                                                                  30f04b3583d10715abcd26cdef1db579329eeb4a

                                                                                                  SHA256

                                                                                                  da79357b952f54d52ede45ff4fd87658c1ee019ce179752d62adea04dd3ae937

                                                                                                  SHA512

                                                                                                  a34157a0d2295b969315fe5fa54eeacba76160316d1326355c814dd0746b8edbf448ac910e2123b596727dfc253124fa5cb4602168e4232cfcef661860c3b6d0

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\snapshot_blob.bin

                                                                                                  Filesize

                                                                                                  168KB

                                                                                                  MD5

                                                                                                  b82ff216a0babf602940759b9a3af870

                                                                                                  SHA1

                                                                                                  07e8a22dcf8d7be04a6ddbcab3098e040494bb0e

                                                                                                  SHA256

                                                                                                  943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5

                                                                                                  SHA512

                                                                                                  da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\v8_context_snapshot.bin

                                                                                                  Filesize

                                                                                                  471KB

                                                                                                  MD5

                                                                                                  031ea03da08fe1247280cfe781658791

                                                                                                  SHA1

                                                                                                  e91db50ad16b5a5fbbaf4118672d60b347ea6161

                                                                                                  SHA256

                                                                                                  c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c

                                                                                                  SHA512

                                                                                                  b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\vk_swiftshader.dll

                                                                                                  Filesize

                                                                                                  2.4MB

                                                                                                  MD5

                                                                                                  66a0e2de40dd6e09205be85504947475

                                                                                                  SHA1

                                                                                                  95501bb535697e712e2ec5310e0db146cfbf5f5d

                                                                                                  SHA256

                                                                                                  c400c8475fa1b8fcbf5abd2e50df5b4fddccf4602c343084ae4843f2a3481883

                                                                                                  SHA512

                                                                                                  cad0250a418c61c7e58869257eb83ded5b64cb4f7db57e3b51f0037e878f58afdbaf74260de0ca28c15676c5fe890959d906e6e4d272f19ace1e70894f3bd77f

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\vk_swiftshader_icd.json

                                                                                                  Filesize

                                                                                                  106B

                                                                                                  MD5

                                                                                                  8642dd3a87e2de6e991fae08458e302b

                                                                                                  SHA1

                                                                                                  9c06735c31cec00600fd763a92f8112d085bd12a

                                                                                                  SHA256

                                                                                                  32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                                                                                                  SHA512

                                                                                                  f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\vulkan-1.dll

                                                                                                  Filesize

                                                                                                  894KB

                                                                                                  MD5

                                                                                                  c286e1191c5b91130b6d16e23cbd44f3

                                                                                                  SHA1

                                                                                                  8231664efdf30b07ff0dbc6b6f4e4d46ec574de0

                                                                                                  SHA256

                                                                                                  8d4b92d08f42bfe9d30362b9cf671fd6ae3166ade44f94de17dfc531393b66cd

                                                                                                  SHA512

                                                                                                  5cd07f2edec7bbe8684ea291a9d1dd3709f6a25c55fda3d92938eaf9c3b047ec481e3e7f3fc64973f6833422ab5880f1318a15afa666e2dd207763c7d3822bbd

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\SpiderBanner.dll

                                                                                                  Filesize

                                                                                                  9KB

                                                                                                  MD5

                                                                                                  17309e33b596ba3a5693b4d3e85cf8d7

                                                                                                  SHA1

                                                                                                  7d361836cf53df42021c7f2b148aec9458818c01

                                                                                                  SHA256

                                                                                                  996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                                                                                                  SHA512

                                                                                                  1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\StdUtils.dll

                                                                                                  Filesize

                                                                                                  100KB

                                                                                                  MD5

                                                                                                  c6a6e03f77c313b267498515488c5740

                                                                                                  SHA1

                                                                                                  3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                                                                                                  SHA256

                                                                                                  b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                                                                                                  SHA512

                                                                                                  9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\System.dll

                                                                                                  Filesize

                                                                                                  12KB

                                                                                                  MD5

                                                                                                  0d7ad4f45dc6f5aa87f606d0331c6901

                                                                                                  SHA1

                                                                                                  48df0911f0484cbe2a8cdd5362140b63c41ee457

                                                                                                  SHA256

                                                                                                  3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                                                                                                  SHA512

                                                                                                  c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\WinShell.dll

                                                                                                  Filesize

                                                                                                  3KB

                                                                                                  MD5

                                                                                                  1cc7c37b7e0c8cd8bf04b6cc283e1e56

                                                                                                  SHA1

                                                                                                  0b9519763be6625bd5abce175dcc59c96d100d4c

                                                                                                  SHA256

                                                                                                  9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                                                                                                  SHA512

                                                                                                  7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\nsExec.dll

                                                                                                  Filesize

                                                                                                  6KB

                                                                                                  MD5

                                                                                                  ec0504e6b8a11d5aad43b296beeb84b2

                                                                                                  SHA1

                                                                                                  91b5ce085130c8c7194d66b2439ec9e1c206497c

                                                                                                  SHA256

                                                                                                  5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                                                                                                  SHA512

                                                                                                  3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\nsis7z.dll

                                                                                                  Filesize

                                                                                                  384KB

                                                                                                  MD5

                                                                                                  4e8f2dd6c9bb8a9d586ed0017528b605

                                                                                                  SHA1

                                                                                                  b41d3e8dafbc2acf58c8bb301a39c4239ffe57f8

                                                                                                  SHA256

                                                                                                  ac5193383059dbfe7c1592ddb7750ac5cbb92f5a0175b65808d60636bbe99721

                                                                                                  SHA512

                                                                                                  daad666f2480f540d3d6e5634da8323ffeba04f6fa330b241c82d24213ed7b821a705388116f2fb9aa8bbceea15c871ae519db37fc65cf3441a43a228c2a0a2b

                                                                                                • C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\nsis7z.dll

                                                                                                  Filesize

                                                                                                  424KB

                                                                                                  MD5

                                                                                                  80e44ce4895304c6a3a831310fbf8cd0

                                                                                                  SHA1

                                                                                                  36bd49ae21c460be5753a904b4501f1abca53508

                                                                                                  SHA256

                                                                                                  b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                                                                                                  SHA512

                                                                                                  c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                                                                                  Filesize

                                                                                                  2B

                                                                                                  MD5

                                                                                                  f3b25701fe362ec84616a93a45ce9998

                                                                                                  SHA1

                                                                                                  d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                                                                                  SHA256

                                                                                                  b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                                                                                  SHA512

                                                                                                  98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                                                                                                • C:\Users\Admin\Downloads\Launcher.zip

                                                                                                  Filesize

                                                                                                  960KB

                                                                                                  MD5

                                                                                                  165bd8039d6ec5beb56d240595a66762

                                                                                                  SHA1

                                                                                                  3bbd71e4cfd597f63b95e10b8d67e621cbabc8d1

                                                                                                  SHA256

                                                                                                  703ab747322120357d3ce314de14a76a0f28db355b0684c8114bae9d8c1dd8ab

                                                                                                  SHA512

                                                                                                  6a0201242693621d95aabe72ca414cdb3363c2956a6ac85ab939c4da044be2ad419f0c21f414a50d74329ce90bb1b546199ec80b231eb25f982072d76a215c8e

                                                                                                • C:\Users\Admin\Downloads\Launcher.zip:Zone.Identifier

                                                                                                  Filesize

                                                                                                  26B

                                                                                                  MD5

                                                                                                  fbccf14d504b7b2dbcb5a5bda75bd93b

                                                                                                  SHA1

                                                                                                  d59fc84cdd5217c6cf74785703655f78da6b582b

                                                                                                  SHA256

                                                                                                  eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

                                                                                                  SHA512

                                                                                                  aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

                                                                                                • memory/5440-1477-0x00007FF85A450000-0x00007FF85A451000-memory.dmp

                                                                                                  Filesize

                                                                                                  4KB

                                                                                                • memory/5440-1543-0x0000026539FF0000-0x000002653A110000-memory.dmp

                                                                                                  Filesize

                                                                                                  1.1MB