hxxps://github[.]com/wsidewalk/fn1/releases/download/v1[.]0/Launcher[.]zip

Analysis

max time kernel
114s
max time network
155s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
10/03/2024, 06:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/wsidewalk/fn1/releases/download/v1.0/Launcher.zip

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
6924	Injector.exe
6924	Injector.exe
6924	Injector.exe
6924	Injector.exe
6924	Injector.exe

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
2520	tasklist.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-627134735-902745853-4257352768-1000\{91161CFA-A6DB-44F1-94C1-B32C2E2A4D99}	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Launcher.zip:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
2072	msedge.exe
2072	msedge.exe
2260	msedge.exe
2260	msedge.exe
3536	msedge.exe
3536	msedge.exe
4460	identity_helper.exe
4460	identity_helper.exe
5728	msedge.exe
5728	msedge.exe
1656	msedge.exe
1656	msedge.exe
6924	Injector.exe
6924	Injector.exe
2520	tasklist.exe
2520	tasklist.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 32 IoCs

pid	Process
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2520	tasklist.exe
Token: SeSecurityPrivilege	6924	Injector.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe

Suspicious use of SendNotifyMessage 14 IoCs

pid	Process
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2260 wrote to memory of 1804	2260	msedge.exe	81
PID 2260 wrote to memory of 1804	2260	msedge.exe	81
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 4312	2260	msedge.exe	82
PID 2260 wrote to memory of 2072	2260	msedge.exe	83
PID 2260 wrote to memory of 2072	2260	msedge.exe	83
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84
PID 2260 wrote to memory of 2276	2260	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/wsidewalk/fn1/releases/download/v1.0/Launcher.zip
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff83a213cb8,0x7ff83a213cc8,0x7ff83a213cd8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2004 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4916 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4592 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:32
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6664 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7064 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7340 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7324 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7692 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7632 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7824 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8044 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8100 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8480 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8552 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7620 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=9492 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=8220 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8568 /prefetch:1
  2⤵
  PID:6324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:6956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9424 /prefetch:1
  2⤵
  PID:7048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8416 /prefetch:1
  2⤵
  PID:6432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,12315633252645203152,13682857309517526911,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6448 /prefetch:2
  2⤵
  PID:5420

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1188

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4100

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5116

C:\Windows\System32\DataExchangeHost.exe
C:\Windows\System32\DataExchangeHost.exe -Embedding
1⤵
PID:5756

C:\Users\Admin\Desktop\Launcher\Injector.exe
"C:\Users\Admin\Desktop\Launcher\Injector.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:6924
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Launcher.exe" | %SYSTEMROOT%\System32\find.exe "Launcher.exe"
  2⤵
  PID:1136
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Launcher.exe"
    3⤵
    - Enumerates processes with tasklist
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2520
- - C:\Windows\SysWOW64\find.exe
    C:\Windows\System32\find.exe "Launcher.exe"
    3⤵
    PID:2216

C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
"C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe"
1⤵
PID:5948
- C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1476 --field-trial-handle=1664,i,9028771190878043050,17349349446488968871,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  PID:5440
- C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --mojo-platform-channel-handle=1920 --field-trial-handle=1664,i,9028771190878043050,17349349446488968871,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
  2⤵
  PID:6528
- C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --app-path="C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2244 --field-trial-handle=1664,i,9028771190878043050,17349349446488968871,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  PID:6880

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d4604cbec2768d84c36d8ab35dfed413

SHA1
a5b3db6d2a1fa5a8de9999966172239a9b1340c2

SHA256
4ea5e5f1ba02111bc2bc9320ae9a1ca7294d6b3afedc128717b4c6c9df70bde2

SHA512
c8004e23dc8a51948a2a582a8ce6ebe1d2546e4c1c60e40c6583f5de1e29c0df20650d5cb36e5d2db3fa6b29b958acc3afd307c66f48c168e68cbb6bcfc52855

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
577e1c0c1d7ab0053d280fcc67377478

SHA1
60032085bb950466bba9185ba965e228ec8915e5

SHA256
1d2022a0870c1a97ae10e8df444b8ba182536ed838a749ad1e972c0ded85e158

SHA512
39d3fd2d96aee014068f3fda389a40e3173c6ce5b200724c433c48ddffe864edfc6207bb0612b8a811ce41746b7771b81bce1b9cb71a28f07a251a607ce51ef5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

Filesize
19KB

MD5
3063a7e62c0b62d1df750848304a77c0

SHA1
2e93091ad21938d525b69cbacb1072cab03281e8

SHA256
bafc3557a30f9a45ae9feef34f3bf71d46d5c23c462ea584b131384adb712d35

SHA512
359be0ff7f43d7a2d21dbb49c58734e8c2d659c29b1e45b8392fe1adecd2c26e6b49e8783cf0449cb802dc5ec68ee3d3d822fa57c8f078df2b49a3bcb4e29475

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033

Filesize
62KB

MD5
daa01cc5a9b8b3a7730d8c940015554c

SHA1
6d3091870737fffb408000a4664c8a6f088b5cf7

SHA256
60dfc7c4f1adc5282ff9d3a0bd9445b59874ce5e123226d3d6f5339d1b998a6d

SHA512
7de57bc1ef544432cd0cf5e27b87fd19af248d2adde11b9b0b7f1cd5e762fe8ab08954344027b7fe32a62c142ba8411e3db42df87ed47a009437aaa511d6246e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
afcc7934062050e2754263bf1ce0954d

SHA1
db915b5d3dffa18fb3b61bbbab902f8b9c92b096

SHA256
5c2d142d67568fa5e8c0b6ab76352e7028b0939bbe88c54ff5e51b596cd5270c

SHA512
9c4fdc25d82af4cdc1e64d3a3b6a02880e5e79c6dc2c789321ff0a42ce3501c59f432a1d3d4c3e1afde399b3401f7ffc54bb77d6f4186fe465b9f70e9cb3e688

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
7KB

MD5
0740460d71f2835575dfa7b720d21778

SHA1
5f18e6a1cfe05b7c27811ffb4db2271ff927123d

SHA256
5f10df2581a2e02e102acffecbfd96ce7534f16814134b27c7068afeb163c72d

SHA512
61daeb1ea0a75c90275bd94135eecf3b4a53477344fcf892f9e6bc7b3c609dafb7f1fbf4a7147306bffd9025f6dd67724c2f7c296de120d322d51528a062354a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
9KB

MD5
4cbbba3579e70dd1ba07bf43ce9e47fb

SHA1
8f3254354289abd349a8d937d3370da46bc7d1fb

SHA256
65957e67146ba1bac5051cc92c99ee824e10efc316bc9c3f1689cb3935a0bd55

SHA512
38b934bb21cb15f18f5858f9deff5b17940a4be21d9738c762a3e2977d67ad2886f8204dff3a781f2e78325e786543dd7eb32089da690a5df5359606e9fae9e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7b3c5b90d654b6165631aa3b2799d933

SHA1
83bd609e0410c4f07ca8a6a00b48fc72d57c440a

SHA256
b3f65080f52dd465ae651cf66a8e9d49d3d304cf9ae618bccf4f07b3f6c78a2f

SHA512
d470145b2c433e7b8a16a4999364c67365b15ffab61f0af340e315f2226c0b15ff821477bd034a77e4c0175f745d71156ab195860e4458f7bba7f986091dd49f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6300ca7e50a0941dbe56fc761f3258a5

SHA1
05f188886524e0f7a9d4a139d65a1cbe616c00f7

SHA256
2be38c908e9ab5373615964b9c46afe5fa6b396821ce7cba3bbf062473157774

SHA512
afac08e87da10486de7000bbbe3ebaea4f2077e6c1e71a82f44f0243ad2a8c202aef11153796e91f9a290e10f6805e203b5c930b7f8723605724c88a3ca4eeb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
5626eb04bde63bca304708c874021c78

SHA1
aaeecbebb8a23502f90a08f27210b438dff48843

SHA256
cba7367284a33fd5cbeb29cd699eaa4464911144d98a9a3fb0e8cd19b03604c4

SHA512
2d56c54eae98cbd7c39de799fac80f6bd9ba451ff92c2caa3c24cb44b8566d41358c8cfab18fd8734f6c9e2f7d4aa7f0ad6f13eb510914007987080238bad716

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
17361b8c6328d2aff92c1af0b1fafbb6

SHA1
28a8c01e024c79697ffcdbfbf36e567c7023bd25

SHA256
826fe87927030d3b0fa5f545219b122ec33cfeae1bec162e010a5d5790324938

SHA512
7e5c12746f0ec13fd0500e92834b861c34cb6da66897facd352b55f338d820782a9d22c0a0f2049442467c50d62d82c6fa8cef44084f36914010a5a573819a0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
75513e7d12c746b2b0d4ab00a6bf4c29

SHA1
c32f89887372f8745b91be2afb9b9bf46e75aa1c

SHA256
9a82167d45e2a63ea829014fe56f3893417f1debd65522f83372070a58f16ce9

SHA512
b877f93c5909cca133728b292c2447afd1b59057ea3905f921b617656cbd757f7b92b45c447e5066b6f740c84753fa9ea239ed633a0ab87cbbb3fac3754dd755

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
49109b6630ac6c8f3ca329510a16642c

SHA1
958a02783d27eaa70639dae833076ff3879d2d16

SHA256
a35ad5afa7fd8dfdb99f0da6d6c04770cb4baf73a995dd1ba559ade0f07b27d5

SHA512
9edc8ed1f2f51997f990adb73fe6cc87a6606d8795b4fd28fa64e88c0afe3b11f8110f7f192ef45f93443f6cc1dbfb01b6b3900c54e5997ea3065a114b5ec4c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
80fdb7de4f667a1901f45648dc23b055

SHA1
602bb170876a20f59bfd73ce075a41162bcfb029

SHA256
629e7a81fd37eee9885e941a464ed168bc6bd660432fdf98adc813cba95af184

SHA512
698bb58740d8c297a84b873212c42e19f8d0cf78ed9953f846819a2800f47208989a32fa499e79aa0425041702c83b1dee76fb4c7c8e2098a451105cb7297de7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
c153ae0ff17ddd9c5bf8f262d172a457

SHA1
47d4a38eb09f8bf34aae34c2435c34db43c6a492

SHA256
33dd5340c0f8e53a9325be1008a537a8698b47ef7d3d1e53a8f437f3e74ffbca

SHA512
b8938346f51007823b9a98d2612d90e395fd79ed855a32d8308831027aee8875d8e643b7f790a11cb4ba205364467a75bd503ce6b270ab6ce924a8c554774d62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
4801750d41fe84e7e3bbef20106530ad

SHA1
c9ac8b8df02d39fe98783bb6d73813175d3369a8

SHA256
39ab1ed90f6d083b3f538cc67aab0fd3dec15297eacb30f8c1f30761849c0f7f

SHA512
985636102644c29e7f9d677429ebdb2bd3620fb93f24e663f3f3c3a47ccea34c3032983dc9d7bb1e8c54c73db3136cf80b9fcf7524dc27afe59d4bcaf38dbd39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
4ccf4b19200f444e2d10358041aa5b51

SHA1
7e8ea9bea1a55c9c853f7deecad85d4d0fc14f08

SHA256
580c715b0a2da887a2ff6714e6262c40712db75cc29298ae47e12cc463401c72

SHA512
2e588874605a46c9f6abfdab8ef2b2fcbd2d227b2832a1904d1e30ac0a5860204e7bf4c729b03cc032d8d7ca34655a7444e3ff208ff39314ad11bcd474571d87

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
b5eb95325aeb92148a27b24750ceb823

SHA1
1ea8ff327db203ace719da5ff3f585f882727ae4

SHA256
dea054655910c001f81eb84b92f6605ee5407b925dabe8915471aec804fb3d4c

SHA512
b9ec320dd4447f72a9ecd8aafbe224ff3bd1b04d8651d060ea442227b4cc2d0c308f3a783c1d48bf55e39bdc427d918d505434ebb7b35e305d9c50d7c083527c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581613.TMP

Filesize
203B

MD5
32940483616cf8ad10cce0030edc2085

SHA1
2c338b0b13707291246a467e4a038d6e5d110644

SHA256
ae60214d06766878462ca7d345c4898bfb3f6ccfdf21458a751ea870630c52ed

SHA512
4d70af3e96e8ed469cab2a0329c89d53690295df9caccdaa273de51bc6749f76d92ab17bfc9ba6a232d0cb57d2dc088477303ebb006651a12bb678a5f69c5183

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
5abbb7a744d769ac913de98553f6be65

SHA1
ee79568ff223ccac8f380e5e55a0ae7bd805629f

SHA256
bee86f3d00be3401a0b50615722ec1d3c098f6ac08fa91c13bfd8db8cbd8f4a9

SHA512
97b28cfe8f2d868f298ffbda4f70a14f2dbf651505bb7057f9aadcc9f612cdd9851f349b2d86f7c64bf298dbdc4b04d73b31c24794a36b671e4c72104e2fde4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
552ac900f868c1bf23eb7441ce954c4e

SHA1
4bea0aab789440188754481e97e871f51d9e3835

SHA256
4ec5142730a768391128c4112aec3abc9cfd5973f52e012927ffdd32c6d5214d

SHA512
31e3dc3704327cb6894e062f799c4002642d03f2ab8e0fca3244f68825f07664357ef4e987473b28ffbcd3982cf5151b339d7336c33ff8c5b3cdd99db1cf29ae

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\D3DCompiler_47.dll

Filesize
2.0MB

MD5
2ee5ae604cfc42e4cd962166b3e129d8

SHA1
943a089582a07428d9f286c0a539c1e989680b01

SHA256
16f4cb586d1bc7d4ed94e967af28975527d6927ca09d9180c3e000b3c56c958e

SHA512
3b2c0a59d508057869493dcde4ead3c1f0b663d220fac9d4da07448ff2ec8d7df53b528e560151898784016dc04931e776cef1103e80520b77343270c959f27a

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

Filesize
3.1MB

MD5
174f39f47ce2ce123bbb4eda96df27d9

SHA1
dbb33310eec5975bbff3aea5fdd8c4dce0627ed7

SHA256
69e749e73aa810b0723905026049179128ed603218e8f68e3aea9acd7e54624e

SHA512
b4f7c07d8357daf7101c985870865000f4fa4ce3c021b9402d10912148b7eaf2840a7a0dc8d00bc870a42bf63198176ce13b0ae8ea58446738a2ee35c6c9e728

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

Filesize
3.2MB

MD5
7e566b950ff4c22a40b108189f6b7b2e

SHA1
b02f420a6ef3f17e3222ac62471d490d8915ebc7

SHA256
6081e6092b72ed813f8d1b4c9e9e64806adc81c79c301e0e489d7c7a09f9cbde

SHA512
358075d1d2a67465ec3462486d8baa4a3fc8534fec21d8015880278e3635e03ff1ec4c7402e6121cd645ea81b1079df11cf2ed56d5db210570f8119f6b931833

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

Filesize
1.6MB

MD5
8a89d650e07c78a89972a14e994082d7

SHA1
4a747a3ed6828384a4fd538cc8ef1e6ce7525706

SHA256
d049c99d34a92a574335402bffd0eb27c11c4263a397caf890ecf79e90015705

SHA512
a7548676a897913ccc0847950107998d259d26602668af0e0a8a5edd60461e460c17edcaca75fea12aeed339e1f6637e66cbc1e173155057f3338094e00ab284

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe

Filesize
1.4MB

MD5
b070c4f9d39aeb78acc9a8dbee6f5555

SHA1
28f50c26cb82c632fae425757e92be2bfa181519

SHA256
1aa97792b662382aa3e511ee2ff942d638f06ccb2747a47ed87c792d0e929b8d

SHA512
0373917cce8aa9d836d4ad04bb53acd3bdaa53adbe1311ac6ffa48a434f10c0b5bbd431cdfa9f34ea5c036e5ed9b2fca73435247610e8e1e6ec208f5f1d72bde

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

Filesize
2.5MB

MD5
164643712e4e9f766a318c5f47055b04

SHA1
7114c35c3d3f25a98906e85dd2ca91cab1de91d3

SHA256
c0c6abdc4c1695f96fcf7df583378b969450a1ee335ebdceaaee3927f6112d80

SHA512
68fe3c4adfd9a9f86e976352f735f569a7aa05a47374886c54d08523e2d67bc0c76be69dfc9f020e6b3a07b1c395a468b00e16a604660721a08c88da24bde91c

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

Filesize
1.7MB

MD5
d40f541bd47e21c03ae3d2c5c8ac0fde

SHA1
6affa1cc19823556e0adab32d8e7123642b2a783

SHA256
b80d72cb0f841ee2a4d3e0ade24e52a4c31a8eff08964609977fb5c67c2a611f

SHA512
7382ee496e232feeae9dac5f9789bb7aa1bffaa3abcc98188c76a8b21a97a2d59fa2dfe9f6f7212d9d27cba58a06542421156111b137219eeaaebd265a8b49cb

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll

Filesize
1.4MB

MD5
27507c2961d86445d9c45825685cd4ef

SHA1
e4250c154d4ee4579b9cc7130dfd7e794188dbf5

SHA256
f9427081e7d349ecea406ccd7a4a87ecff5e5c4676944e857efb93bae4faa630

SHA512
00c1d19fc54e62e73fbc044c7756679b5b34358832458de8ce2178c631014e3cd38de49579f8f1cb0b85e76b765600ea3c288820fa652801c320dddf9fecbd17

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\icudtl.dat

Filesize
2.0MB

MD5
3dae90f0872a7f313ad932dd16b91e03

SHA1
b98dd75a9cc9d4f45fedcb88b37bfd4fda3b835d

SHA256
1e1c5baf359daaacc6a115e6dad64e10412b4641e9e63da25955bd2f84a8eb0e

SHA512
137b21f7755fb6f9f1dd48c31a562a46dc9db1c604c593609c08c37bef1a81c4ad8e42761d8ed650047d1a9837c04bc15f75f6b1ad03fb3cb8f26392a0fbf77f

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\resources.pak

Filesize
1.9MB

MD5
403b4a4ca817a27db25b1fd6e135850c

SHA1
7aa10efaff9c5c3e351ddb180b26c25e914f427f

SHA256
8b2fe9d8ba1966c2381651a1a7800d3b11e7bae04af9cba564784f6cf5059d06

SHA512
865db15de34d856a393bd3021717db2453a64c401aa27293a8d48d7e577a0cd6a932cfe348d372437ee8a0141ef3ee462751a379bb580f8537297fbd4963a4da

Download Submit
C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar

Filesize
256KB

MD5
90fec8ae6d7679008887ef68e60d130d

SHA1
873db456aee70e571f7ca9a9b361b25c4c234073

SHA256
a7193bb320e23b89f4a3d6fa1217c0d9ca7811da45917bef7ac0469cfe158085

SHA512
2e9c312905fb5f4fee38cb1724e9fa0789a40245f8756b89be7a15145f99093a8c998fcd9cc4441e7e316cfdcba3b32e3257b356a2c3a9a231c41e3c3ec64cc7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\LICENSES.chromium.html

Filesize
2.6MB

MD5
85c99abff5774db44ab4dbb9e9411c58

SHA1
c5494d4558f2187cc1930a63ea6a4bee4977c222

SHA256
2acc03c5fc53760803473694b73ce61ab41f1c7c7f26d6f212e336f5781d4601

SHA512
1cc62e55b88ef976b069cc4e1a3815905b0596ff31742343c8e3d2bd11be16870ac6f0e7cb3c809861035f2ad3e475991d014ae559e475557efaf195ae88bd6f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\Launcher.exe

Filesize
6.1MB

MD5
0d7cc33b52a453cf542d2065d43d5895

SHA1
cb866ff3ae6e2a226f2be84c7193ed76c105778b

SHA256
70ca29a376c859bafaa0c2f8f5492bf9f34e67a63b631e01690cf636042d24fd

SHA512
b8e2e9df1f11881f49bd0e57f6b3e00113957d04071a7207e860552c1c46b851c715c534566cc27a0e8c6a0f231afe35acd5a684c6083470017ee66493a449b0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\chrome_100_percent.pak

Filesize
126KB

MD5
d31f3439e2a3f7bee4ddd26f46a2b83f

SHA1
c5a26f86eb119ae364c5bf707bebed7e871fc214

SHA256
9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

SHA512
aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\chrome_200_percent.pak

Filesize
175KB

MD5
5604b67e3f03ab2741f910a250c91137

SHA1
a4bb15ac7914c22575f1051a29c448f215fe027f

SHA256
1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c

SHA512
5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\d3dcompiler_47.dll

Filesize
4.7MB

MD5
cb9807f6cf55ad799e920b7e0f97df99

SHA1
bb76012ded5acd103adad49436612d073d159b29

SHA256
5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

SHA512
f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\ffmpeg.dll

Filesize
2.6MB

MD5
e3ab6f226a9189a456d53dd700f5d503

SHA1
0d3f467e9f36a404eb10b318c758edaf02305e26

SHA256
16070fc0fc3ae0d3d5872e5bd2194d883a1d91cf021e1fcb708c785a348c1a80

SHA512
b1d5b362489b5d26037c035c8b1e9bac24a4555b64371b41f8549ab70d5d591589ba154e163ec84d4b4b4435903db32f7ffe0f720f5e6d01b7656ed03f6757d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\icudtl.dat

Filesize
6.8MB

MD5
2546aa76f052eca050926eb7b15db275

SHA1
195c0bdc2d47caa2dc7c1166bd127010daeb1a44

SHA256
56c9e7c869a6e835ba27c063ae6098c67625363e1d41991de5dc9883bc375a87

SHA512
27c2fdbbe4c68514fadf767796f48b4527a6cc90259432cfca9c92fa94eeabadb0ae09d196354809bf0bc4073269e6d6c737d08ce0db1cbbe802b96ea24f10a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\libEGL.dll

Filesize
473KB

MD5
637eeb39ddbeb3ff518ff1988604505f

SHA1
8b3d9a0d542718fb906f8fafb2583d7bb53176ef

SHA256
3c51a8e53ef7473e9a335673e909dc9c67bf962997e6e2a319c3bd70fd52b4ed

SHA512
3257f9c96665f1bc8bb39acd0d98015b7d5e32f3cf3f84e795df4d19f6bd3bcc14a4e89759cc0de83289b79cd290fd5f4b176c3e9a4cb2eca3acfba0c9e232df

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\libGLESv2.dll

Filesize
3.0MB

MD5
ef73a61ef76ead2443aa55a096430793

SHA1
73c960fab5863c947ac32a04770e349ee8622dbe

SHA256
5234b401ebf9b70e7a4d14d4d5a27a80666a9a0b907e6e0ecd66c8b41b9883a3

SHA512
8af1a76ad2f3c89b275d345940739bfe54479648b76ba151e8d3752666e2eca38871e417e6ab064881b32d8fed04787084d455d4576dd06e100cf1f0fab732c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\af.pak

Filesize
275KB

MD5
65fed89cd1b76b84eb99e85e7bd01b3a

SHA1
8bfad4f94f4ea08b04b2a9282ac43bef86548416

SHA256
83a908f04265657b290d0be079728ea3e6dc2813028babc09cef470c4e2ba7b1

SHA512
a809ffad07601243d86f8176a68948a276a0e374ab888ce416e22bd1e32e828fade9ab6b4da80d51107d29194b7d86dc310bbe21d5826ee504f2f655e58c9de1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\am.pak

Filesize
256KB

MD5
06f135e3db5ceae5b22cab94f94ede28

SHA1
ccfd5285cf02c6d4c456714f9c857fc076d54172

SHA256
f3e951d44b40bd9a59551f033759b23d6c2306766787716c19c70b08afb76bf8

SHA512
71123835d7902f9bdf86cc10899c54ddbf45ba7f1c87d0000c23522effd5b3d12b901579c747c6334b206e2e2e1b09a101c99f13d8960626133121bfa9a187f9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ar.pak

Filesize
256KB

MD5
5be298dc554d62854b0529fd6de6ada8

SHA1
e803b7829d46bf61d2be5ccd99369a9f90ffaf99

SHA256
221862093d2e86c1c4a30d1a56bb16bd5b4c3fe954a33127c9929955b6beeb11

SHA512
f4f3e30add72c59566cf376406c26513ba562bee83a07078b5dbfff468b0dbfef175d6ed9de8124086f44bb4b5cf3e55571617c51161fcb924b466540224bd77

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\bg.pak

Filesize
256KB

MD5
1d40a2951a50e4a6c6a75677d3dc173f

SHA1
5dc89724289c6d252d8ac02bdd20c905d5e6e06b

SHA256
4da260528be091770a02d0fd7929e0d12c08f88e9f2ef8e6294778d79c435169

SHA512
6862d75180e4571714df0bd639c0378aa1e2874550f57e01a8771857337c674645a98def62973c7187cda9489ab0b8b034cef2f9c5fcd742e36b21b40883523c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\bn.pak

Filesize
256KB

MD5
f8965020aa76a89ac491f3cba222553d

SHA1
ec7bf34d2a59f3d3c8cd94716a03f0230861ada1

SHA256
89703c786348165672637572582c1040ce8091878ec01d2c97109474fc552174

SHA512
e58b50e7dac7e63349a90de3fca8393b6bc4f649a37a58e937f0b26a5c8fed5af091914537f273ebadebba134ddf6978b7421bd2496882b6f3296528d84d2a8c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ca.pak

Filesize
256KB

MD5
890ea915ce1014ae3a1129b21e4265b3

SHA1
74554ce2305ebcedd6ff6a81a35137b820ecf0c1

SHA256
63be688c383ba8cccc4eae9085a65102e4b2fd9838e8d5ede55c0f4672f1130d

SHA512
a5847d28922f6e0e01acced95f6a3d774cb8324393972e625d6b75411e19746d33227cb7931c5c20172406edd76d4418fa7b7456209b5e4c351c5fb00f0f6f87

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\cs.pak

Filesize
256KB

MD5
2cc23bc2f77c399064c4ebd50365f81d

SHA1
9b2b45e28ab3dcf1afd9bf2f67017340a97de791

SHA256
2b3883a0e1378fe2f64541799a935198fb5df2000de7b3d630d80a09ece885d0

SHA512
76d164b9a8ae27300ad57c7a1f22872d738700276afc175f8825eabdf1d68cf680b3943e725a2c01a7cc69898f0a4f2e89d9bf30654149bbad701d84a6bdea22

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\da.pak

Filesize
356KB

MD5
4bccba46add5ebaf6efd4ade3c42aed9

SHA1
e48dcc2de930bbf0ea8ee7b735ead321dadb5be8

SHA256
2497368658a988e4eb3f64cd17423ea04e7555b104d43c8996c0ecbbfed5f74d

SHA512
e2059e2a7f80353981eef6982a7da006fa3753aeba9aca5279eef71aa2fa4b7adbf9cbb17c85b8060359f9e871b1a5c665226f8d3b8a6fe49f908fd44e1b46bd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\de.pak

Filesize
381KB

MD5
8569900305a5661573f7766b93909f16

SHA1
3529376f54e32c17447b065d08c77314c4db2ec8

SHA256
068ba3e34e7f253fad7dc526b1078aaa969bea044d48171925534598aa8becb3

SHA512
d544febbe20a9bc5cf31f79f7ef74c1a742cccc99136e9828187c9a643bd0317c7cc48706346ee1a3c9eda8984be9c8606e9dfa7a6ce2cff49db2d785c2aa1c3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\el.pak

Filesize
691KB

MD5
8025eb8756d4bf3126d83c9078935520

SHA1
78895218a90680fe223af0b003c195da84902e1f

SHA256
e42aeaea80dabe82657983a462e4cd3ec74f71d4f08a689f5825f55fc02f3141

SHA512
f99f47e54583b60857a31648b985216713725496d8653ca04eb1d6634f2b7f7a1f9f70b8a7938529bfc6c8665360da5e6bfb6b68c314c011fef4a9817010c42b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\en-GB.pak

Filesize
310KB

MD5
502260e74b65b96cd93f5e7bf0391157

SHA1
b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7

SHA256
463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b

SHA512
0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\en-US.pak

Filesize
313KB

MD5
3f6f4b2c2f24e3893882cdaa1ccfe1a3

SHA1
b021cca30e774e0b91ee21b5beb030fea646098f

SHA256
bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f

SHA512
bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\es-419.pak

Filesize
380KB

MD5
02452424bb0cf6ab832808d04883f147

SHA1
a8e97ee52f3d97c1a4c678f7578808416e9fac65

SHA256
1b23cda69927c77764bda121ee398ffefcf5edcb5866432aa3526c378553c9b5

SHA512
9e750b26ab40b5f1c075acbdeb15a57cda9e6bd8049488cfaf368b5cbe8cd9b6e5dc96130e4137370c90bb0777b97515ea2be0787e255cff750fb7e188e22ab2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\es.pak

Filesize
380KB

MD5
4ca91891b2d4670d02931f0ca84e4744

SHA1
85f6559b09c80af2575e3b7626842c10081e188e

SHA256
85fff1ca6bd2527073de03fa77dd013db2557a57cce1fd370caa2b185abb9336

SHA512
83eae7ab2f03598c657786bff6171803b6bbe2128d1a5b8a01d9a13337113632279712dd8ffcd3b707fa6052a936d92a57cb67d848c77ee291e75700e29f2bf8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\et.pak

Filesize
342KB

MD5
74eda453b23793ced4480ea7a595fe44

SHA1
76964af9c8024bd84fa1d89f60784e7ee6569350

SHA256
e2d38131a5ef4b0e8438f45e8c74c56bcf666760d4682120c8071c9220230555

SHA512
e9928cfac01f10b040c74e63242ffa1f7f616d8598f49f0aa7ddad063e18666cf5649cc65d00b3526526af8a7b46ee3b3655da22adf46aa44c0c6a1c2ac4dc7b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\fa.pak

Filesize
557KB

MD5
99de8cfda36ab9ab3342889fb6da393d

SHA1
6bdd3d627d4b6702f43725039089562af58898c0

SHA256
b93145f30e25122015373a248d6ea22a539c7d0d58c8aa853ac35cc80dc06bfe

SHA512
aa20793f9ece5823cb9e74a4a3ff97d7a1860a593f427fb5eacb0390569a48122589610fe5a02577577f3a30f981c5e3da97cf73bdfe158a6bb845586c5b19d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\fi.pak

Filesize
351KB

MD5
fa7dbd2ee35587ff31fde3c7107e4603

SHA1
baaa093dcb7eccf77ce599c8ff09df203e434b60

SHA256
5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c

SHA512
587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\fil.pak

Filesize
394KB

MD5
0b7d25d70a2d94a032b7ff7faea45a75

SHA1
d9d473b2ea936ffea4f751d8716cb03407a95785

SHA256
a737a14f84b10b2e3c9ad4d147b430fd30c5ac0e125d5aaaf1ea19b0507de5af

SHA512
e4dbef6fae4cb56c3cd7bd5dbb239b5136eb2534a17cacbf628f5e5d77bfca924580ad4e4d0ec580ffaf94d6e1fafad58e9c5f472c3a3ff782702ea5eae2aea3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\fr.pak

Filesize
410KB

MD5
a7c88eda9e12b6dbd432c544767acbe2

SHA1
81f1abe537870f7888431e820b636b17b5213835

SHA256
a4d0e5a39241a6326143afa4c8ec881d6edb0382c66425411881946f98e053e0

SHA512
88ca203256aaaaa26afd4a0aacb6fba2eb41618d09df6fc6aaa80ab8d699b30e73c373fa75098b1ec4912c042341dd1c79ee3d04f98b4bd59a44481d350a7988

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\gu.pak

Filesize
787KB

MD5
3268b8d9b4d4db87ec627b09f1c55a6d

SHA1
683ba367e40abb2fefd4548805e845fc1b452855

SHA256
dee5ef4f4b36fc5fe0f3b5e10c7cc3a7edc14bf948317b31a3287a95bfe0afa4

SHA512
59cff62843d35f790092f42b611e9bcd80d948c0ef27a770b2d7af859997f40c320d67df3c5a9420d28d5c8f1678df4677e01cb99b729664d198b3b95b5fbd20

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\he.pak

Filesize
448KB

MD5
d73328ecb472a2965e45595b541f456e

SHA1
6d918e242a4dbd721e2ad423e32af0946f142f0a

SHA256
eb76536aff6d58f65db241dfb73a044c4b05214c8ff9ebe1f3c56c3f52b6a6dc

SHA512
219404de03108af3d21ea5a31bc8bb2363bd77522612af030c438b60afc50aeb4b431d6e1a52a6df70920735c3f7aaa4672690b25ba2e8b80c2c02eac2465d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\hi.pak

Filesize
448KB

MD5
de6ee83e4b5c80e402be45f8319f6011

SHA1
c707b6f5d42fac5244cf9e53d34bb62576e7f36b

SHA256
cb94f38d68b66c0b95eb509510ae965bc25d3fda2208883f61816277cc4966f0

SHA512
da3729f0085527c1f87219659aa6083cd1a75982497bb66d4829e8e74000f67b0f52202845ebfef10084eead81f1d569fa859d0416bdf77f2ee3baca732d4590

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\hr.pak

Filesize
381KB

MD5
7dbd4a9de6e30de028c97a7d39f8038a

SHA1
18d68f37b3c5eea3a2fe42c4ab1694a439a189c0

SHA256
e1c793e08e062043cc65271718d9b21d5742729dfa2e076ab012e8a008d06c04

SHA512
a18c43257d26380ec14ae0259cf192257fee0c6895b82240c3b41c5d6e8bd6f8023cb39dc2da0701bbcf05e8eb2cd13c84af971c28c94099a6d0ea02ce745ddd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\hu.pak

Filesize
411KB

MD5
d6904e7d1b6750d43a6478877c42618d

SHA1
919f090a6a3aa1112916f5bb0d5b73a62be43c1e

SHA256
3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f

SHA512
d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\id.pak

Filesize
128KB

MD5
a96f0f3f69e6b873910b370af5d23069

SHA1
e0f6e1def18c9f3441c3081f22fa74546edc8102

SHA256
f32e06fdda29bc8932505122f5aa3054f64a9038915e8e77593af912054af833

SHA512
b10e7a8d1685fe48042d32b76d715ed5a44f3bcd1c0a5f323932a115a7f9a89f939c6793cab7fe53b47680df9a8619064e7f21e09d78e1b2db2f281a83b65fa3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\it.pak

Filesize
373KB

MD5
6629c344b6e5ee8fb476522627b34221

SHA1
28335e3c96a68a560c68756860394a0a86c21870

SHA256
e76c3f15529fa7cc088dc32903c6885f4cfa170a1e0144710b05965f3210c31c

SHA512
78ca2ebf40d6cc3eb7035cca78364be63b8eb69e27caf2cae57e3489b39a9e443409e800fd95e1b646d37655c37ee8a9ae1ab344b506cf65f8603a6a3ad892ed

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ja.pak

Filesize
456KB

MD5
c294012268f9e611fdc2904be57e45d8

SHA1
9ba4bd190ced7ffe053fa74071fc5836bdebea53

SHA256
21cd7ae581f6d0c19e90ac7df03d7dd5305b882776a1f091573f824bd28514da

SHA512
d16653f30617e52a040c5e033896a71055fee9992e54ffca5029601bb62a41b9685a68655b9c8bf7a7ba54a914836a0f7a49cccacae0eda180a6b68c0471a268

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\kn.pak

Filesize
910KB

MD5
01e8dc084d07743fbda50d54d86ee3bd

SHA1
e0709217e1a6785706b7d14037b1478ee2a3a59d

SHA256
ae4e003458f1a8bd3652e61241e11ff91bd887f6b95c1fe2700e76a117ba2119

SHA512
7d8db84f975d778bde21253f43d174921c2c71111644a953ad8671754e5d656f72bcabf62f4b960cbf4ca0ccc5f67d1558ed250b568c1f2308a31970e380654d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ko.pak

Filesize
383KB

MD5
ce19dea7b7d0b9472f99427de2b307f0

SHA1
9c84dbff9927c052dcb9818ed73bb272abf9054a

SHA256
586f34de2c7bb0e92fc376f3ad962bf9bae1a768398459d39f8ed06b59d8ccbb

SHA512
9a6c84ef9bb03be9ce96948bea94ec0ba83ecbd06ed648acab9d6fd27c1ab85f011a5670591da6256781dc147fc234d627cfc4bf5eb29bc2c8bfc84aaf89085f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\lt.pak

Filesize
412KB

MD5
7b6bf901352885c0699db71239b7cf24

SHA1
9e3ec5f327c0d0e54a449332061e60a8c79243cf

SHA256
9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350

SHA512
79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\lv.pak

Filesize
410KB

MD5
cccbd7f8a0c34c7094ce4d7b8e7e0588

SHA1
1a08401e2dc8c59200c4ecaa1886b43b6faa6979

SHA256
7467360f9addd4d8694e1508a6ab3a3e00dce57e5897d5376ad27d8e651b23d4

SHA512
2cc43437f1cd8d5fda0e95e7dd117c9b82e90cfed58ad8f492f46b4634aa01cd1b0ebe39377231a0828fc1ccd39641e4efc2f1210d629f9aba12ea9048accd95

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ml.pak

Filesize
948KB

MD5
00292b0801e0dd0a74091bf53f1574c9

SHA1
63a002e7a8796bc4b4459a19c95ce426fbd1ec7f

SHA256
61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6

SHA512
e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\mr.pak

Filesize
772KB

MD5
b9a2aa88c69c42ebcc41fef00c980a38

SHA1
9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8

SHA256
481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09

SHA512
5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ms.pak

Filesize
351KB

MD5
6de7b004a86967a3433545b3b38bf89d

SHA1
113bd5b28dda669b27c798e0b46fd680f3a04956

SHA256
ead5a37549b98d55839ffcf0dc8f8201d37d71968ec9138fdea79d7c9b79549d

SHA512
239c4acd2c0b6c08fb92fd95b89a302ddefc01ea843950a0247b7310c2b024383ae98286c2d4b83b99833452c41b386e047b2ef33610ef122fcf2f439ef43726

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\nb.pak

Filesize
344KB

MD5
bbae0915edec081b04bb903b689bc40b

SHA1
6a0fc635ce1c431e512b8b3b8448176aa4025556

SHA256
d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8

SHA512
573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\nl.pak

Filesize
356KB

MD5
9fdf47fef5b549497005ef8efd2a2c59

SHA1
3449de72bfc2be537f4b007c81e5bc5de6ff3d0a

SHA256
65a9c1efcdd451504e2e9b44b0c8fafd2c3c1445d760fd6c435305e2f8534f59

SHA512
3e77178dcd9e8894847039a997c87d5d04eef8a1ace1846132fde229285da08ffc8d3ba697226130bd07ab122a868cc53693981a21f8211c839ccdaba77207cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\pl.pak

Filesize
396KB

MD5
c9da926441d438b952149650c86a033e

SHA1
74ee60342bda33048570dd3c03f897668cdfc971

SHA256
ce96fd415ffcda01345146faac716e2d45e2c556e5c6c38e9a1ea5ac19dafe84

SHA512
3e718e8df695cbd80146c3e911de9b235ccc06f574739e5720d47952f69eab089b56451cdc321174da9b239c0a71a720baf9d68b46046efa0edcb2a3f1804ea0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\pt-BR.pak

Filesize
374KB

MD5
c68170e4948cf3ae6910364c1e68ce90

SHA1
420f3a392db28b6fd6be44fd702b455518b67bbd

SHA256
b26499a256d66feed42b372ea2eaceb75c279694b40a7b5d0f8c1a5c24cf381c

SHA512
29482ced2091873a8c6242a608ed641b3a4d72fb93ccc2eb58d2769c446195f717b438d5633522f457234f3d209029936e9ea4ccd65d45ba8ae0c2df71043797

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\pt-PT.pak

Filesize
376KB

MD5
9b04c89c2d17c7c00a6a4342f0771fec

SHA1
a0886040fd5f870023cc3038f5722f4ba6d7c8b6

SHA256
abb012215610178b7f8203f61f41103546d3949ac3df4acb3a622b01663f39cc

SHA512
7c4cf5e7bfad4709db49779c1e3e762b8d0bac6cd736c511711ddca7682e08bc6b3274c9872d88db78bc36b0456b29680d3c4e518d4a401830cfb37b48567bb8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ro.pak

Filesize
387KB

MD5
9b9c22a12ddce43a4a3c0c047a16a5c3

SHA1
901e072d644a79e0b18be2f4a81e6842b070485d

SHA256
3e89d43b86b2582fd7db236659af47ff459a44c5b5ebcbb0bcc9eda244c8e501

SHA512
196a5bb1b0b5093d4a18279037ef7993525c36c136d4560b7e902c815687f7992ecd2b64d96422911a3468cf3f1478b21df6465d3b31486466cbb5573ff0e7e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ru.pak

Filesize
634KB

MD5
aa75c21bfe54bb70e7abd9fce1347a8f

SHA1
3492307cec15b367274c948beb76598f72347846

SHA256
bd981aa65536b544228ed1d60a552ff4c7800b46f815177b33b3e628b97d77e4

SHA512
0e77f1c7e4b5410e9eaed875f5dae6485d8de5b650ec44133b1634645cc3055fa7bea316e843b491f29d9c137b20623b120e014b1c74bbf4e8d1f08dbeaf5bb2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sk.pak

Filesize
128KB

MD5
66bc18d7458cc4fd3f1118563896fa58

SHA1
83e86b3cb0ae20990611cb4060d7c183c6709646

SHA256
9d6babec2ad4a28464375eee8190d93f4ee1f823bf5b04df44db2692a01b8276

SHA512
c4407c25d5f3915f164e74a6c69daa8674816c6d3bd2d2fd789e6e3516ed0f1f2cf59f1c17f645bf005321eb231b0370c954fcdc95635020f38b31a84cd56d20

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sl.pak

Filesize
128KB

MD5
31e0ed62df864e3a0c0271cbf3456220

SHA1
32f5bdc061e7a0da16062711a41097435623bcfc

SHA256
08d5d0ad877cac7cd29b05067a7a5d9d4b89c13e4028fecbd7760dbb86fb9565

SHA512
2ec6fe3a4270c7a0b05938d3c583ed5e011b7798830de4d0b573f5acc1dca41aa9404c9d55180a415153f8fe98be843a23415ff9e16c0ee0e20b8e0d3a06f438

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sr.pak

Filesize
128KB

MD5
8b1b532e51bfc8abea50e088e2dafd8e

SHA1
5a36e0897e530cbbc7fcb3c4cae5a8ff9a24d799

SHA256
a950eb1a5245f0f55a8266905622051b07b503549ba8ffe6f46cdb5d2d602206

SHA512
5a7304d2ae91b722662ed45ffd9a8dca94f205a306f1bebeda1a1c8cb21da89275f9a8a2433bb497edccfecd39a04fbbe3b80053f6add0c2d71c1308056aa6f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sv.pak

Filesize
128KB

MD5
44ff73d05895487fcf3842da2fffbfce

SHA1
0e55c6ca81fa0c6c29327ccf95e9dd53374fd5ff

SHA256
f3a15c1fcfaa90b51694bd3a768aa15817ab994522442aeb965b326d9d62e6ab

SHA512
46e961630a618dd062b2d41aa43774167417444140879f4311a5d21bd1293f524e635970d58192ef08cd0d6c9b8108757c9a581895deb18ce5d91286b2e055be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\sw.pak

Filesize
128KB

MD5
2d7443de1db199a267a7b9155f006a22

SHA1
045386b53cb5096e42e4a74dd4bf369180353e77

SHA256
73b6b0365da72e6fe6e5be408f3430f8049cdbc29aecea3b574ea597c7fb1ae0

SHA512
3e1c255594e44c0088e4091fb40828f3b88ba26b2afeb71f85ca9110011c691a44edcd865ed33560402a4f9ea72655f137f6f70a917ecc4b5c3b684551d3a098

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ta.pak

Filesize
936KB

MD5
714ef30e819d791b41ab093d515e1704

SHA1
5410b58dcaa0bc82146655ed56493581d18d5c04

SHA256
9be97a18356b05ac4c3aa2b7e719eb29b47d8ad406aa50cf0f24bdde1d613083

SHA512
a35074a54dc12a68301553345c69f02ad31bc010690d5f4c4fad5d65b3fd9c3f7c3ec7e3637673d250cb33496b93a9582e28b5210d11137bc0bd5b2e219c0aab

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\te.pak

Filesize
869KB

MD5
28f500e12a7b91d91d8f99395fce8332

SHA1
885fd6c78259ae38f7dba3887f7fee783c1766bc

SHA256
06dd7ae122d6f1f394aeb85089a9c837ec05dad627b0bcc92863ab2830e971c9

SHA512
6f0fe4a527e9c53a41d20f95cafda7a2488bab310eecf68c98271a2db6f3efe5d2180e158b5018a9c56a0580b0735146f0ae07d884f564de1e8780956a10d190

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\th.pak

Filesize
731KB

MD5
d34a2993eaf0ee6bf65c3729baee426d

SHA1
d796911e57c89b11a603c645dd0e32aad7819d75

SHA256
7870b92c64f7776c469b4d19be8881ce30a5263cc8287c3d7de573aed43c7dba

SHA512
eb2f4b3cb7741c996acbd121d0c69eda6cfac6bdbd7b8036dc6394ed7e49c9a45641c7983431b5f8c5db685fc7ce958e7c9f5e79837b381caeecf009f79ca4c2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\tr.pak

Filesize
371KB

MD5
0662e2b67524444e843d0104adab0b7e

SHA1
ec39112f57e28010295398c24c6a17e60a88fd47

SHA256
e8f86dc87dbf11935863efb3a5af8213a97123889019e98a7ef313b488088790

SHA512
6529083d04e777be3cdaa14f06bb6b3a3d26006ed9d067f7a1bdfcf669856cc6340bf0caf90bbceb75666062fac1bc02ca2d2cff94c6ca5627ccaece6f973a65

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\uk.pak

Filesize
634KB

MD5
0d9b7f3ce815f7bcfd63ee3492350d52

SHA1
6138b5dc296cf406b2314b8b797f9f96de2b40fb

SHA256
b86358579a9cec015c996c6ae862ddcb8cb558f30eedd0d0b9ef3cb18c3cc130

SHA512
17d874849e5eb17bff2ac98c8191f9f38a07a66eccc502122c0ed2bdd6af94eb17db1b0a2477a75c1fd4f3ed00c76b1818eac5bc4093d92eca0d0a5323718cc0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\ur.pak

Filesize
552KB

MD5
6733dba4f3f0afeffc40bd87300b9d6e

SHA1
610aab026d25f2cec6c636fbaee922c099d26ef2

SHA256
d0c8ae8f4f60f04d4eee8cc639ee3b52ad073f5c9ee6fb84c774eb855fd51e9c

SHA512
40c1cb7be3709bb6ef01a4e66bfd85e20641020a800292a2a14f4cf188242aa0b8d42cabd0f323acd3d2f257243c7dc04b346a39475343c761af7a1833c3366a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\vi.pak

Filesize
439KB

MD5
5b8fc875f0b57ac7793e19e0ac6f4899

SHA1
b8ec064365fc29a70bc3a8d3df0ef222ed244fa8

SHA256
ff3cdd834569cf9f957a444ab8a51ebe673bd26d7c907a907aedfeed248d4890

SHA512
f3a9ad912823aaae0d089cf53151cfba0b6fbc2cebf826b1b7c70fec03bf3f967e440558fef94c990c87349b82c36379bf645b828ab6b69eb9f396165dd6178d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\zh-CN.pak

Filesize
319KB

MD5
37b051269289e0eaafd411d374663135

SHA1
fa94bc7fe89475f1d5e1c9a2d88161cc992a638b

SHA256
4ff334da089d2ffb9c6173de7c918b74c9326ed7bd76317b2696d57861871488

SHA512
357350ec552765df460cd66ae59ebcc771df72431baa380247750627ee974f1859bfa423461a2197d4e608063d021faa7fc94bd30c6fe2b1a0cf9b9f7e64ea73

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\locales\zh-TW.pak

Filesize
316KB

MD5
032c4f24764d531d0de876f1e9d51dc9

SHA1
6662a5e3466c1ca415e219634cd67863ff830b32

SHA256
a0a715a3ef1ead036f0f03d02a8252fbdbd52ce6f8cc5b9298fc1c4494d4e508

SHA512
3cf212a638cfe9d08e625f7f70d453263e44721be9550c2aebfb67462666a8d67b87cd2ed613cc12c7d1fc7d1c1368c7d198a6669fa3a10c2c2bf61966c46aff

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\resources.pak

Filesize
2.3MB

MD5
42f7134c522b82637590d74ad799c692

SHA1
eb5dd9dbbb161dd182a170f205830b2406b7b118

SHA256
62641681593c38661c091851858e7139557d6212d27e5aba5f9e9e006ab0bbf6

SHA512
df0d004a3b658bd71190d0e18f1bacc15bf91dc0d559f7fb1ca6721c07f35dbed40e8fea18f05a3e2eef5ed9313a1dd361cbd50792300df0a896c857893bea3b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\resources\app.asar

Filesize
64KB

MD5
ad0c9f0efd13c539fff616902fb91208

SHA1
e77b7808dc84126d6dbf3c820d8a9e705d167036

SHA256
0ac4cb2482da32bb92d0b9afeb6c512a899b1003833fd488cf370117c6e08e6d

SHA512
3b11183ae3aa9bd7c4b1035383072a0fbfb3a9b1102481df52d96b3e2fbb414940796b5cc0d146363910a15c804bdb6f3b2afa8b20a6796b373df11d5ac49a95

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\resources\elevate.exe

Filesize
64KB

MD5
c5a83078584b605426afe770df33cf5d

SHA1
30f04b3583d10715abcd26cdef1db579329eeb4a

SHA256
da79357b952f54d52ede45ff4fd87658c1ee019ce179752d62adea04dd3ae937

SHA512
a34157a0d2295b969315fe5fa54eeacba76160316d1326355c814dd0746b8edbf448ac910e2123b596727dfc253124fa5cb4602168e4232cfcef661860c3b6d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\snapshot_blob.bin

Filesize
168KB

MD5
b82ff216a0babf602940759b9a3af870

SHA1
07e8a22dcf8d7be04a6ddbcab3098e040494bb0e

SHA256
943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5

SHA512
da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\v8_context_snapshot.bin

Filesize
471KB

MD5
031ea03da08fe1247280cfe781658791

SHA1
e91db50ad16b5a5fbbaf4118672d60b347ea6161

SHA256
c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c

SHA512
b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\vk_swiftshader.dll

Filesize
2.4MB

MD5
66a0e2de40dd6e09205be85504947475

SHA1
95501bb535697e712e2ec5310e0db146cfbf5f5d

SHA256
c400c8475fa1b8fcbf5abd2e50df5b4fddccf4602c343084ae4843f2a3481883

SHA512
cad0250a418c61c7e58869257eb83ded5b64cb4f7db57e3b51f0037e878f58afdbaf74260de0ca28c15676c5fe890959d906e6e4d272f19ace1e70894f3bd77f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\7z-out\vulkan-1.dll

Filesize
894KB

MD5
c286e1191c5b91130b6d16e23cbd44f3

SHA1
8231664efdf30b07ff0dbc6b6f4e4d46ec574de0

SHA256
8d4b92d08f42bfe9d30362b9cf671fd6ae3166ade44f94de17dfc531393b66cd

SHA512
5cd07f2edec7bbe8684ea291a9d1dd3709f6a25c55fda3d92938eaf9c3b047ec481e3e7f3fc64973f6833422ab5880f1318a15afa666e2dd207763c7d3822bbd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\nsis7z.dll

Filesize
384KB

MD5
4e8f2dd6c9bb8a9d586ed0017528b605

SHA1
b41d3e8dafbc2acf58c8bb301a39c4239ffe57f8

SHA256
ac5193383059dbfe7c1592ddb7750ac5cbb92f5a0175b65808d60636bbe99721

SHA512
daad666f2480f540d3d6e5634da8323ffeba04f6fa330b241c82d24213ed7b821a705388116f2fb9aa8bbceea15c871ae519db37fc65cf3441a43a228c2a0a2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf4250.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\Downloads\Launcher.zip

Filesize
960KB

MD5
165bd8039d6ec5beb56d240595a66762

SHA1
3bbd71e4cfd597f63b95e10b8d67e621cbabc8d1

SHA256
703ab747322120357d3ce314de14a76a0f28db355b0684c8114bae9d8c1dd8ab

SHA512
6a0201242693621d95aabe72ca414cdb3363c2956a6ac85ab939c4da044be2ad419f0c21f414a50d74329ce90bb1b546199ec80b231eb25f982072d76a215c8e

Download Submit
C:\Users\Admin\Downloads\Launcher.zip:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit
memory/5440-1477-0x00007FF85A450000-0x00007FF85A451000-memory.dmp

Filesize
4KB

Download
memory/5440-1543-0x0000026539FF0000-0x000002653A110000-memory.dmp

Filesize
1.1MB

Download