Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 14:47

General

  • Target

    Lunar Client v3.2.4.exe

  • Size

    846KB

  • MD5

    a365628bc5db87d07620a5471fb03af6

  • SHA1

    7125951a75566fbf555bf88b8f1593485356c8bd

  • SHA256

    711206b976da00afa5e5aa2a892a1c324572d82ee3540aac8a28dbd7a46f5cee

  • SHA512

    37278fdb8962180de9ea810f9fd5bca8f19c2553a4aff418ace5210ac8309db567196e48195e37d4494cade39d4e8392679d5af880db48316a44e70dd0d5ee41

  • SSDEEP

    24576:QzFZPrnq2MDhobsfLsoSDu173pG1szLSvJw8pdQVDhM:krnqlDhG9oSK73pfqvCcQVDhM

Score
4/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 18 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies system certificate store 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.2.4.exe
    "C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.2.4.exe"
    1⤵
    • Loads dropped DLL
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2612
  • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
    "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    PID:2872

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    690KB

    MD5

    47d07dd7cc12e1099ed7d01e1dc0f9a6

    SHA1

    15960c68e1d62c50a782398d4fac71208d0f3641

    SHA256

    7c1e7449d4d49ddcae803d42620077518dabc75d4a8007cc537e83b6ea9049a9

    SHA512

    817332f4f341fb063361a16023e5440d3a5f245a8e69fbb54f080312d0e57f8a9defb1a48265180f8d5e7efcd3b37c050650c05a21d69fe7699e462209897953

  • C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

    Filesize

    804KB

    MD5

    a443990ee0750ddaeba5656bf33530a3

    SHA1

    b975e3b3af1a8f621afaabae4bfd506d5671cf30

    SHA256

    e7727308c9a79477517ebdf72d5a2d549f6a8d602578486ad2e821f902ad0c0b

    SHA512

    074f936e72b077598c73ad0b8157a9c91c5cf743e8ab615787fa65f435341de55d9bc15e3344b899e8d3647c1790689f25492a7b09607ebdb20f10874624ba4f

  • C:\Users\Admin\AppData\Local\Programs\launcher\locales\sk.pak

    Filesize

    409KB

    MD5

    b0c2f6ec3192c539a55494485df7a240

    SHA1

    41b8918f678fcb5e64be3e52fb2bdbca3e7f6a8f

    SHA256

    76c44d6d3afe9e629991ee4133c4c2245dd18e73d0dc6824adc92294b08129c7

    SHA512

    1ffa32bd5144a50c74bc8dae1a83a62822379a079faca9609d6c9d5b855016869e5f703751ed7936c36b137fbc14028eaec6d2a1846d45496e1f7270672dc4d3

  • C:\Users\Admin\AppData\Local\Temp\TarEFE4.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\LICENSE.electron.txt

    Filesize

    1KB

    MD5

    4d42118d35941e0f664dddbd83f633c5

    SHA1

    2b21ec5f20fe961d15f2b58efb1368e66d202e5c

    SHA256

    5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

    SHA512

    3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\LICENSES.chromium.html

    Filesize

    1.2MB

    MD5

    5a0915ac2ee6ca09e06e55880296172c

    SHA1

    8d79a49cf0899ab99b2115978af3314cce45c98a

    SHA256

    eda145c7fc4d59f6797368a338db22aee30172e8a38a1dd8771a4bdf6f343dd1

    SHA512

    ab48057127a3c6a1ef87853e0458f4578d1ddf1eb78a6717e478b3b5f06396f0e258751d1bdc22ef6caf15a22909a07b44100fbd858facba3862511da4f30637

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\Lunar Client.exe

    Filesize

    190KB

    MD5

    1b06767c7d05acfeb06b47cc84d1b3c9

    SHA1

    3793a566d737b27c3fcee130c7b870eb853da9ec

    SHA256

    c4baef0e9ba8167013d57419c58355e20148ffac68ed70f0e00dfdc93ea3c303

    SHA512

    615704e9590cf46024cf63460f9905bb110fb7db26ba5ebaeafe5b2cbf7adb9fef7dec87c8be85c63c7cbd6394df9ddef33dd1863c64c2e7232b3d35489c78ac

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\chrome_100_percent.pak

    Filesize

    132KB

    MD5

    443c58245eeb233d319abf7150b99c31

    SHA1

    f889ce6302bd8cfbb68ee9a6d8252e58b63e492d

    SHA256

    99ca6947d97df212e45782bbd5d97bfb42112872e1c42bab4209ceedf66dc760

    SHA512

    081f3ee4a5e40fdc8bb6f16f2cfd47edde2bd8f3b5349775526092a770b090c05308d4289ecdda3d541cf7f0579ac64b529930fd128edad9b0991dfa00b0e9bc

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\chrome_200_percent.pak

    Filesize

    191KB

    MD5

    81b5b74fe16c7c81870f539d5c263397

    SHA1

    27526cc2b68a6d2b539bd75317a20c9c5e43c889

    SHA256

    cb4fd141a5c4d188a3ecb203e9d41a3afca648724160e212289adcac666fbff4

    SHA512

    b2670e2dfa495ccc7874c21d0413cfbebfd4a2f14fc0217e823ec6a16ac1181f8e06bfe7c2d32543167bc3a2e929c7f0af1a5f90182e95913ba2292fa7cadb80

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\d3dcompiler_47.dll

    Filesize

    4.7MB

    MD5

    2191e768cc2e19009dad20dc999135a3

    SHA1

    f49a46ba0e954e657aaed1c9019a53d194272b6a

    SHA256

    7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

    SHA512

    5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    d5e1f1e9d0ccfe7f21b5c3750b202b4d

    SHA1

    74144ac93c0c58a9b9288bce5d06814c9a1b1dc2

    SHA256

    e1ab367644f72ebcdc8eb3fcfe829ff51719559ac2a43a1600e712b16871ad65

    SHA512

    dcf70d43f1a83c424be99c38e33e520c72115c3d30945980e5e394d460462251bde309e543213b2b08dcbe9769d11d46792e1cc99aa42777fcc34d6f3361a3d2

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\icudtl.dat

    Filesize

    4.9MB

    MD5

    4d9171bcb6733695a3332e358f383ec5

    SHA1

    3828bea85dcf2414b097d5c265c20186385d1a0e

    SHA256

    97593de70cc4313a2167c459534802f05b1b2661131ac274263adc65ae40932b

    SHA512

    6cfc8395b59f8a957f0c2967d53503dca21126d05f1734ca78e74172719a79d6986308557ae1362ba6568ec64f8269d1dcbea9b7c2edf72f5f5378f7342c5625

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\libEGL.dll

    Filesize

    469KB

    MD5

    dd78b86b3c92d61c37b44ef5b157cfe0

    SHA1

    4dcf9ebc3ff5ca552c0e83469b921153b29aea1f

    SHA256

    e142752e073c0051a0beb963981af70263ed673959515545521a7941d3230838

    SHA512

    9d071568dc56db2ab93d034d07a11a477aab8ac50d9ea3c4db3ac4866fcd3c2f3002ba7a3f2c55589a9d68463181fc7a03327dc164310d7e80e30cc6f6bf2423

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\libGLESv2.dll

    Filesize

    1.5MB

    MD5

    045edbb1e4bf357a4de55b4a4761d8c8

    SHA1

    97252fb2b8ffa00f1c9f10a8ee92da3fa4ff32fc

    SHA256

    6ee763de4e6ce3d151dd27aa335783df05389b188903e8e550014877d3cbd804

    SHA512

    9fc91a29a029dfd4758f88d29777fb06ce7d98e5377e0d3e4f498342ef355165a54c374732f27b7b9058a4194f06fb551b076661da88606adc3476f4a3f09b3c

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\af.pak

    Filesize

    381KB

    MD5

    b293cc5ea7db02649bd7d386b8fa0624

    SHA1

    32169b9d009b7a0fb7ecdaf650c989e956291772

    SHA256

    7bb75adef02d28819f1bd3b42fa46ed56d6dfbeae072341997b09b8c1f52d8dc

    SHA512

    496bc72e7b798d02e453eb96d20566b91405bab774521527ef882c1fcb58f25e2d0718013ddc0d23f7fad883f4cde93b57c6caaeba8cd18a09665c9f6245f557

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\am.pak

    Filesize

    515KB

    MD5

    55e120e29af5956d99f448adf3efc506

    SHA1

    3de90bc6fa1a0d70c39ad9c8b77d1fd0f4613b36

    SHA256

    4d1734cd11297b5e2e107739a5e5bad7a91fbe6619675a2e4dfb0635910d120f

    SHA512

    daddc61d6ee18a79182c47ce7d647ed8e38a7ab80619751945df2857a29ae7c86e9b4531b82e4498604448309112c750fbde8619c1d21a473b8e9cd1df4d651a

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ar.pak

    Filesize

    522KB

    MD5

    eb4e8105afe559f7180ac8503863a59f

    SHA1

    52600d18272d99c3a56703445319555818221b62

    SHA256

    e442ac123a636b804f3e753fad1867c8f179b4ddbb1a617bcb2c6f46e5ecfa65

    SHA512

    537d129a7e574fa4a9e633360686693c63c8d9dff024c217a7dee6067c1c8b8fcf7e1ef9977fc872b2bf5c858acaaea3eaa8ec7113e87861ff6e22d1c3b69163

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\bg.pak

    Filesize

    579KB

    MD5

    ae2c0a34a0534187d396c3b5b08c0861

    SHA1

    a9ee7adce74fb23ad190308b27cee2b43f8e29b2

    SHA256

    49b49bab8150e92071a550386a237ea8bfd5841771ede604c7aaa0a9934efb61

    SHA512

    3ce7d0dfaa19f3f290b4ef100e028134496377d503089cd528ff5b20f27d07c753ba18f09e1bd4e0f81dc45dc1d9f488219883d1729ced6c166ca62df27b33d4

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\bn.pak

    Filesize

    344KB

    MD5

    474113f851a73ff3f38ff4e16dc23477

    SHA1

    169111aac0fa5a236a2752f41d9e209337b5f18e

    SHA256

    44f87d0421720a2a95d7a6bd3f79e7624e6d592cc6f6f065b2f41502c16adab9

    SHA512

    9a055edb57dd9b2314e5112cd7b9029bf95a0fb744a2a2811c088db227e8c48abb7f3de73df70245f7945c0d9e39829e903d9c8d3f56d6af362fc2a6c2702306

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ca.pak

    Filesize

    291KB

    MD5

    8b819f6aa41957c1caa2124597c2a7ed

    SHA1

    22a190eaabab0ba977dbbc05b83e43df67ecc7b2

    SHA256

    bebc79a80d8f0ffe5858c52eff3b8cd87588186bfdb054a6b2301daf3f40a261

    SHA512

    82173a5c7853271c27b7bed52751277308845aa99d00470826912abef8d2f32e4603b84ad1852439b0c16993ac2fc48263b3023419481176fd4dba5b5125856a

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\cs.pak

    Filesize

    195KB

    MD5

    42e38db79b6ba8d720bbbfc04ddacb4d

    SHA1

    bd8f3bf39e16b6b2bf80d9c90c3280488c03e17d

    SHA256

    ee6e47f2178b1763c1cdbf523f12db9267c64e2ae776b7c2c396b4d754eb998f

    SHA512

    39df048bcc5d5e50a59d1b961346b045e4a826af1d89ad9bebc56fb4a3b4b1fcccec1ae0f7ef511db538c642ac705042ae719bfbd19113992edd3f649d8958cb

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\da.pak

    Filesize

    400KB

    MD5

    ba54e3345d61d5cf431db6a0d649f792

    SHA1

    32b2edc19df7e14e6567e0faf671c038f78a65da

    SHA256

    dab543bcc1a8abf057f720f9f448e45ca5cfd1c424826bce8933174bb2eccad7

    SHA512

    5f858c4c876e1d15d4929464b7d9bc2cc497eea93d887c3cf0cc1c651a0f5a81d75f04f7a0b4277dc43bd9deb148d147d35fa1aa2dd218d404fa2c8c389ecb5d

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\de.pak

    Filesize

    181KB

    MD5

    78730f2e490b43a46ca249329ce3f2f1

    SHA1

    dcb3805dd1669deb4bd6069e897d8a6b12899482

    SHA256

    1fca9c2489135afef3efd1660f4963e01b028d7120804b25e5fadd45e974e531

    SHA512

    0fb7edad21bbee46e1bec46ad519175d23f57d50fc9d23777989088d27a29b041cd761d13f296143167e754754fcf38159e2b9d68789ee1b62648bc5333627e3

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\el.pak

    Filesize

    504KB

    MD5

    d23788db4dc1a73f142a17fc4f747de6

    SHA1

    a2556e56a040bbcbee7be2bec1d8109da95bae7f

    SHA256

    3c5b4f3d3eccce461179e06d553d2207963071a7e75efb5af5eef6f7dfc8a6bd

    SHA512

    515df7beb92cfbf9a1f26371d900073ea6edefad678a1b437dad69a03f430f92eff597e95b34f8b32af62573c8f0a793fb2a7722c248f29879718efa0affc25b

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\en-GB.pak

    Filesize

    63KB

    MD5

    7bdbcc79788444093f0a1439b3ff32dc

    SHA1

    3f89579f652df914cc8b7b26802c2b2849e72f65

    SHA256

    8f7859bd9027bac1148307abaf31d4e1e9e07302898930846a02bad1c89f2566

    SHA512

    de1c5e0836dc66c507b2b57c3699843aa29979ba9cbb04b4cc6d2af9a155603e16fc28d90761be52e031c17b1705526aaad6da09583c47d28e7f83157dacd907

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\en-US.pak

    Filesize

    106KB

    MD5

    eb55df9ce1863b148bd919033d0508cd

    SHA1

    7e647c085ccba9d1e2ee48381c4ac1f72b9787a8

    SHA256

    d60602b8cafd8aac073f9592be02d0f02b9c1f50d948a7ba0e5e0b6a44414744

    SHA512

    47d840c8039407bc06e880535e8c1ea42c1cadc6fe2f11335219eda869592d19063298c0df73f45ca27f656483e6c1348be4e3f988a39fe52a64a9d2038f276e

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\es-419.pak

    Filesize

    53KB

    MD5

    ad7f45acd6bc2b70edf4168d4252f0b2

    SHA1

    9e25cca50ddfd235db88953565cb225585ada20c

    SHA256

    dd046584701e8c3f57f167af77953b1e389cd09253e3cbb0aa3e6e7ecb44cf88

    SHA512

    eb0fc6e04f3af3c8062fc4c1dc1ce83be91872d95f7fd409bce2f702b3aee270cd133b373b732560d3d013eda5a3a61bdd60becc472abd0cf29d582c69a8bb00

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\es.pak

    Filesize

    216KB

    MD5

    20875f4a5dd948a6198e43d40f5d0570

    SHA1

    dcaee2b795283d3e1108b2a35b60b9abbbd225d2

    SHA256

    86eafd49c64957e5a8ba7418c09b2fa2b31fc463a7dc49eb2aacb3d4e6746d9f

    SHA512

    4dea06dbb2d54a43dc33d99a34a443746ff31979f4172e71ca393f06991253b75bf01fb19ab021fe4f0bc8158a94c432c1db1b3ff625bbb9ccefce4bdd5854df

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\et.pak

    Filesize

    126KB

    MD5

    81f462fa5ea4a515dbb3cdf1831b0366

    SHA1

    880ca4202156fac9b26df1074f8c402e9e410ad1

    SHA256

    0e7d784dc41bc9274ecfd7d518f349670c495e1e660c6ad7b38b94b7f21f2e3c

    SHA512

    1bca6c715d62b1c3058e54f238db9606beeaccbc92f5ad06a2c556a8ff888a83b27ed31b5c17415544c24bd7464a48deec1a2fd2176cf7afd17ea35e44aab704

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\fa.pak

    Filesize

    35KB

    MD5

    b58620d1a277f24bf10ac4ae95d77c93

    SHA1

    9b558e8f7e051df065a2744b36c2e917f2732565

    SHA256

    60d3969a6149def794e6b89157c9a3b89fcc70badb246819887898a971df3576

    SHA512

    dcb195e0128648ae720a77e1b9c51747ccc1986566504f284c04a9c0bcd2b5709b1e4b76eb555b2da6f0b9ccfcc4363cddfbb972751431592dee24fcc59ed575

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\fi.pak

    Filesize

    77KB

    MD5

    2c53920814a3a8eccb974ead92486f04

    SHA1

    8703fce7c6e8d78dcffb933c29a7e916522a6ce9

    SHA256

    0fa6e8df0d0fe48ca85d57149d0c27ff2c5e5faf2cadcb0bbd62b2869d851ba0

    SHA512

    0c26480de9e07b43694c43b601d7a3b433ab0aae4682c2f7bda677cfafbc934a5825b97b922c41732ea97fb04ceadeaf04bddd6d0e8065a91f3447c9f726ef1a

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\fil.pak

    Filesize

    187KB

    MD5

    5fd3110351ceceef30d246b5215d7fc4

    SHA1

    818ec1638855c30ddcb5b0130d4287eb7e23a0b2

    SHA256

    f2a2dd332d52133f6dd87180c3393a4cf8f9982b8f2a9f9292c3e0ca3ca0b3cd

    SHA512

    3eccf87a52289b93fcdf8ac0ecc2b4557e2f77f016f390a7d9f38fec5768cdaec8e175c704ddffa350ae3bbbcbbfd56dec8e5f0ec5c849fee8e333f9fb9c0651

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\fr.pak

    Filesize

    50KB

    MD5

    f3f6fe0a3f52a600145c3d934c3b4151

    SHA1

    83f1de932d4a7f46e08cdad1b5a4f14bf7e001e9

    SHA256

    6dc2c781b2255342a4840ce8bab71307d2fcd4cddb56cfd0c178fa71161decbc

    SHA512

    5158a893d7814bd770a7f5be01e406027c4832a9b9b638b2ae2f0da2b91e948efb72e7f315096a974abd6df370b989d25e899559e5f4426a1f037eae06e25660

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\gu.pak

    Filesize

    36KB

    MD5

    ee9935bb4a13f3b264c6eba0fe67e3c9

    SHA1

    fb5c24b47d9128cc8c142ff3c7390107569adc9b

    SHA256

    11ce050f87f4e100c0af63e27d4491ab0f9d18cfe3423c432c1d5049695c6506

    SHA512

    33591f4acc508fdb0673a6e09a06ab3f9219eb480f4ac4f15404f0b417fea26df6c81d48c9428f49b31fb397adc054843a0c3c5a2a8faa100978faa3e4f9fdb0

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\he.pak

    Filesize

    45KB

    MD5

    6dd7c16f889aaa3bfe25a63e3937c8fe

    SHA1

    2e5c8f87fd9c61c8c76091c390400097624e3604

    SHA256

    f9f430c047f1c575fc13dbd2570ee26048604ef560321318072c79079aeb2c33

    SHA512

    9321a62e2638d567a302e90848144d9ad50328f0502dae2cb10000d61d26cc373a18f3d9356cf07e52dfad87ec6ba6a0a5db77e40072dbc6887f5854c7044948

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\hi.pak

    Filesize

    692KB

    MD5

    15379208625ec70619315ab54a614c65

    SHA1

    6898210ceade89d152fbb87e874590b3a77a07b7

    SHA256

    85d9a9ec6b58d4a9a0fd5d0bf648bf12cd8bc7583042c96d3d19c2cd88648074

    SHA512

    3891669d2bb1941601fb52e01c4030acc25822b33d08c0b2f782e7f803cf7c7a5e032561bf028c5266746f3fbc884d235950901fa33eefb846320d72a6bbb12c

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\hr.pak

    Filesize

    428KB

    MD5

    23fdde99818ba28131a6ba81decf2c1b

    SHA1

    c1a87661f80c7dde9a08a360d2f5b72f58042076

    SHA256

    08fc2b1e6b9652d809a7550f1343b3ee54ebcbad0fe74b009aab6ef926c0279b

    SHA512

    0f53b131d142c7b88081afa59f10e17be489c342f2e328d0e7bcaa18b5dcfa599b37ca09317aa9ae564e52a3cea06d79021eac6ab5ab38a9c0ec99bdce797e9e

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\hu.pak

    Filesize

    460KB

    MD5

    2fef83993a62f73f8e4b40a6e28a085c

    SHA1

    8bae181f3eed8d5ea8fb0f912c679e608ee7c008

    SHA256

    ca4b4c7c7be45ea0871abf7d5668ab948f712a02facdc1d6bbc189b1b3522446

    SHA512

    6eed29acd38b662f62381a5c00ebfb254915a57de6fde8e6da77f60dffd13d4846b26b1897d710ef852bcec5728a4460becaed2367f1a06a066da77521701324

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\id.pak

    Filesize

    377KB

    MD5

    0dcb56f6b196199f7ed802c06b774037

    SHA1

    f62edd5e814d05cc4aeb5574fc63acfdeffb6010

    SHA256

    bd512e36a88f0d7e6fecc0b559adb2761589947fef9c253dc350cd8d6ea889f2

    SHA512

    e03474255bce20004788475ee1f546ee7830e9b9960023b15210d88347032b5376848aeadef3e953ec654d3905baee37279bfaa287af7669ca66e382a4b1344c

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\it.pak

    Filesize

    417KB

    MD5

    47c89f9ba4993e7cb6640c23f444e9cd

    SHA1

    0e3755d2835742b7aa4e1d5245454f7cf22a2d47

    SHA256

    95bbf94625cf0476124763cebedcf5ee46148bb6b5c006f86540a02e8d8c883c

    SHA512

    948e4da235cf7d0272fd7a99e7238596e5d50913886fc73fe35f9af17d1087f550a3cc3251ee6595f9872ef0b88e75725405382e6aea4850088e068d5b80922d

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ja.pak

    Filesize

    510KB

    MD5

    afd423713e28b3980392443f31dbda7b

    SHA1

    926560b21af422f22e1cca1a4a2948ff988bc6d9

    SHA256

    88383ddccacb53f3ce5918cd80b5dafb16b3cf1fab295e230cc15490600615e4

    SHA512

    1544f7a91b4b63bb80f651833a931204e44745bb0bccfb5564ee9af3149218f140b6adfb6d4ebb5ce5e82f5c345c098cae8a0637b274c42f6711aa53877b0bd4

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\kn.pak

    Filesize

    456KB

    MD5

    980b4f7aed0dd0c2f5c2ebc13757108d

    SHA1

    c3d32247df8f6c8dff107fc80c586d0d696d1541

    SHA256

    865539c671f6f11bfd1f5675a12606c042eb52ecf31a2120b0ab544abdf14039

    SHA512

    848863e5c72c04b09bea16195c9316890d14c39ae591efbb077534021215ceda2eb313d279c5aa5bd07f89743fece2befa257d36b0b16015b2bfd2406e1e344d

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ko.pak

    Filesize

    429KB

    MD5

    c90a42bb27bcbf1bd345dc998f9e410e

    SHA1

    66f8bb72db6b38e2d288959bcee3c43caefdc59a

    SHA256

    56100d20a59fe6cb333f57ffdef90157324ae1b90194e852478daa8c46d29de9

    SHA512

    b5912c895a6a3b391555efc10b15d45fe9a84473c8687327b7d2fa033711e437e2f160345daefd554374357e0afbaeda4a25f4f69ca74e498d7081062f299b46

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\lt.pak

    Filesize

    463KB

    MD5

    06d8db8aab68c565af14bfe408ae4daf

    SHA1

    0898fd0ee4d7380b93b8fb3d4a1816eb810ea9a7

    SHA256

    ecb4ecbd96575f6f984f60e85ab1ebb0067e73174ff9912941ee1aaa28516d93

    SHA512

    1ebc04cca7e3bf005f9befad5a81736fc572383a636c7237e4206e75b05befe49f967427f912c97758aa392f9cc2dcbdf07c471562cb4ccc90f7d8e951c3ab9f

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\lv.pak

    Filesize

    461KB

    MD5

    f8a5403bd91f231db58e77c9d4514e2f

    SHA1

    7d29e2d8459af6fc3082cec0d9638daf5275bf3d

    SHA256

    dfb9b5ee446977dc0435cff4d66402d3a9426edb106effdbb7d86379527c5956

    SHA512

    f491cffdc5cc588f7ec70f87be84615aaf5b39e9c990cd9c835e65beb27f26334517abac1af7419f2b7b18f94c369037c8df4c1c8e26a5fed4288d477dc0874e

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ml.pak

    Filesize

    612KB

    MD5

    ca1fcf1dfc3997027f520f3252aa4d75

    SHA1

    40adb4250f7f493383936701275827a34e7c6dc7

    SHA256

    0341a3e55b7f9b1e2068527c03b77504e69b6e193acd340e562b4382a112c27d

    SHA512

    f7ad2d19b35aba9e3a68a55d5c1cdae2b8a9b76b4a97dc994dc8cf26aca6a4f4152cb6c5d9cb96bf892f05dbf1f16241b8da25783b1998cb3d3a9cead30f6c0f

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\mr.pak

    Filesize

    398KB

    MD5

    fe01f2720ac5b992a9676183798c853a

    SHA1

    dda29228d474c029d556103d8453cf20b1578f84

    SHA256

    0a005c181ffa932fbc370ce85c9b70eabe9fceb1d45b26f261616b585126747f

    SHA512

    99a0a44c10c462d751a8b0024cf3053ce81c70356015682cddc973a1e25c587735453933722ae5d84fca4955384ddddfe0b1dd2858bfba94ba0a11a2c177d8cf

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ms.pak

    Filesize

    395KB

    MD5

    2c4056d84b980267faadd69d52c17086

    SHA1

    3b3c5fcf182d86a170c8f35c041bf3869a82b362

    SHA256

    163eb7ba5f0c61acb6443709c24e38ca6370a33f89a12e13d0a57c258a87ca16

    SHA512

    47285ab42b46cf7d6556eac2a8f7afb9a9c9abe8cb026fe847b2504e4dbddd481a98c1ea959c74e31f195ecdbb618a3d93df8f20b797411a8bf2b3856fc9b963

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\nb.pak

    Filesize

    386KB

    MD5

    23ecce10db7753622fd7cd956aa55212

    SHA1

    52affc68e91448d8aecf2396f02ede77d4ea664f

    SHA256

    29f38d3720c948fd261a2aea7d195e861a73a1313071bd2cbf1ebcbba77c63e6

    SHA512

    553543bef496052995e33e2f3e8bd66ac845351cd292623479a303261900c393cec35af3e0ecd57db84197e6f7653ffa4eeaf4950647ae2d5304f961890deba1

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\nl.pak

    Filesize

    398KB

    MD5

    54817be286dbfd9de461f42304eb72cc

    SHA1

    79386881a11e6c7d49f2d117822c29d7631f3830

    SHA256

    3c682e37df71cc036c2b5e91064407fed8091c0306a856121e28c19e7110e1e4

    SHA512

    d8f922b028b03c6379911308cf240d104b40a9c46f67a6ddbbfcd20110c287e8106376cd6e8295915d054e05b2a8a045b3ab8d98932c1be97b1f258525db1a68

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\pl.pak

    Filesize

    388KB

    MD5

    378c80da615fe321b26676371daf8caa

    SHA1

    eb261356699f4d9a387af707339e3eeea7dae6f7

    SHA256

    65fd2cb63c5c4335021e75eb939a67d0795309b0cda9525be65a3537c26766de

    SHA512

    9647c3027fde1c51b5dfe74af3edd6d609dc3a6478ec15e7aa9579a41879dadac3f4e33fc12a1c6c5c7c387a4de19f50909351b1895e3afe394cd440d51bffd2

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\pt-BR.pak

    Filesize

    419KB

    MD5

    4f3f65f6639ae1905fa37b9b6ee2e4d4

    SHA1

    07553f41c4f8f3d105eb92b65497c4976449a6b4

    SHA256

    b4e0a6064dcfe876c819ec4b00f9857b84ff52cd3e845bd0c48e31ad43a23db9

    SHA512

    85cfcaed8fa2026c13735e7d4b6852bf794dd4a8ac078889d5ef46ec2ff7173ae443addcb0b0c711f6a31f80469fc1df5af1a78da6397d9df5e33cabb354fba2

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\pt-PT.pak

    Filesize

    420KB

    MD5

    7074036013be3839e218ec7b15d49215

    SHA1

    7711ae4e96efd4f4676a3c0281a92af56329deee

    SHA256

    342381f89058bedd809991a0b416f48642df3c71aea10bb13e13bc15eaaf46c8

    SHA512

    8a1e9cefb8a64b3664d9496e2d2f76e2281b3c427fe24ecb70ee74f78778d94def66787a7e35ccde6037ec061e29a6ac7fd8b4010f77b13945780e1316bb16e0

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ro.pak

    Filesize

    352KB

    MD5

    76e995cc89f09d7eb6fd6dc31dd1bd31

    SHA1

    ee7f26486b669db00f817b57a83bbd2da5dd498c

    SHA256

    d1da43aade9eb9b7cc1c49822f451e38ed08fef8ddb8c284217f2f31cddbb667

    SHA512

    65d5db175d0cf2f62a6f57cdc4417ee966c0f16e8c6719a637c839c293a9063f05ebf909c060bd1092820205921be4032179fb3300a3851297f221e998249dee

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ru.pak

    Filesize

    526KB

    MD5

    0bacb0500aa479a0572b4910398ea2ed

    SHA1

    fce31a192b63dcb269e2f97e8a7f7222b8a1ea52

    SHA256

    ea1101bc3375aad59ef287d72cb9a2b555589204ef6ea8aacb11620f1fb74d4a

    SHA512

    2db612325f1e29eeecf1409bcf195c5b87c724b5d3a09dffe3600efc2e149b78662a33e2608b13f321e754df1c26fe399409f789e4ad4784c4abf0dc7c77a26d

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\sl.pak

    Filesize

    385KB

    MD5

    a2b33f9221da31a2fefd84eab842d90d

    SHA1

    8f1aad2d668baece16f75a0d21bbf5b24e7413a8

    SHA256

    2eb39e4a842cf35fff3f3ac6abee67f59cea54f898ad9c89a367e0ccd74f200c

    SHA512

    739505cdb9ec104351d1b774f091aeb385a0e90d571d26c1a2905ae6f4cc9ef41eb6d069d219e6fed205a132048b31730c0403f1d1ef9114a4b84f724dce5818

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\sr.pak

    Filesize

    476KB

    MD5

    1aa65f4143ce018c54c64273704b1d43

    SHA1

    2a6b65efb1fc7bea1342e4b7fd916ebf5fe9c986

    SHA256

    873c1a9623038685fec2c59dd1c7093d583881fabed9e36f55139d759e0eb2bc

    SHA512

    ea53e43e2d2bda3e3cb530d5ea05f303dab54881e2a4e32590fda69c966904031b4f9f6e466ecdaf062b61c61291b7a928bca1bd0ec4900914bc6e3839874340

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\sv.pak

    Filesize

    300KB

    MD5

    93d6d736d9cd55ad35ac695fb61e849e

    SHA1

    780eea0e4d5dea4038f9b8b5572ac572aed99444

    SHA256

    bd6206d3177eaa172f9c11b3f26f2bb165a8aa964517f23c1a9c78952f374378

    SHA512

    cfdf784136afe5ea665527560a569c0a83639ca426573ae7f6d174e728923e38a801bf5ffe161691a655b4fc45948ce8ff1a32ceed63c1cc0568ffefb3f5fcc3

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\sw.pak

    Filesize

    324KB

    MD5

    f60847d11aac356f4ccd912fa805851b

    SHA1

    e634877d78051faba0aaa6e106fbb30854cd7e1f

    SHA256

    ffc559fd758c50272d7e1c3fe86b7ae62d2e6487e83bb414228215a4a542ea21

    SHA512

    499b7a3528e6b3c2119634ed8f7886320cce59bf955244cb617d752d4f264405cc216ac4fc01142ef894916f630b37deb0b6a6da358338a652446bb5c4c4bbd3

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ta.pak

    Filesize

    401KB

    MD5

    f1c6d7cf955d96ebe843ab83901aad65

    SHA1

    e95dc721f148421fa5a04f7720360a8eac54bf95

    SHA256

    c27d1b71d0099eca791457ae0d6c61c9118dded75bd8b2c7d5a2a66d175002ab

    SHA512

    389446e6e277adddd1c011456ba6a58e34abf980902f80cb62bb30ec8789f0545689e59da43a61b9e3c2a113375414bb57a9daf077e2e7d3ca9ae45ebbf2e117

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\te.pak

    Filesize

    563KB

    MD5

    25879664bb15bcea005d897bd92e91a7

    SHA1

    da42c5389847c351496eb08130b895f23a3417fe

    SHA256

    39f37a7f097555d6c6765f1e7c90c979becbe83e9eea1d070db8ee9b4c630805

    SHA512

    d38159099a577c3914e2b503347148c01e11245ffe1e0e71527130a32a6e6890f4205d471e08929b7d382a943e5d231d9390e6973c6e75e887329089f4f320d4

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\th.pak

    Filesize

    367KB

    MD5

    7a13b9c625eb2baf43e3a0799cc98dab

    SHA1

    7813b07e7ffcc92c2016702d32e7f493740069bb

    SHA256

    56a2fcff0b1a727f0042ac90ecbc383b26a82ad389f9d237cd2b299c316034f2

    SHA512

    9ae3979b93384852fdaa2308f7620c3ef2d433bcb52ffb7887e60ba604fb9287debbb4bfa6401d9651bf3fb3b8de8327ea64e17c7828b65e7ed5230260cf782f

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\tr.pak

    Filesize

    411KB

    MD5

    d31d29b0a99b8b9ab3fd294c39f1c083

    SHA1

    9c717103bf1fcabd0a20098f97f41c11a15f5909

    SHA256

    be85b36717c24728a976e9e40840d99e2d27bf17d709eef426044dae69651214

    SHA512

    64b259afb604c2efe22de8fe3b85f515cd5b48b97857c0373d85ed1cc52833c21f3850bd56bd6938b4664acd99a3974e9b4327c2f5ac1c2588ca782530cf102d

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\uk.pak

    Filesize

    372KB

    MD5

    c160702d004438d5368622f88e0aafcb

    SHA1

    ce38892d4f673dd4253fd8d48af305fb7bedec3f

    SHA256

    1dcb640404f0a9134df79b6905c12408fd956f3d4b2386754c2ef354efd3eb17

    SHA512

    43a77b96d57c6fd71cbcdbc671110a1f3c71a2431d47b76c840e0d0712bff7e1046aed71b7fd3e925c4df7a6b07cc2269d4cd67e36a1fde1252c253aeb4fb22f

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\ur.pak

    Filesize

    447KB

    MD5

    e0aa5c38378e21a6e2d28c0dd7729d75

    SHA1

    f17cce4a57de09720958e2fb8912cbfedb2cb9bf

    SHA256

    a45bb087ae01574dc4bfe3beb8beed61fbd4ee0ac39d220768d25702b285f3db

    SHA512

    6d35121dd274e2db61982fe4edc7beab69b15da827d160cdf68fa3d539d3402ed35044228f0273b7968c22936cc6c99de2041eff99381a9a73293903543a887a

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\vi.pak

    Filesize

    419KB

    MD5

    f4e31d3c3fed68bc8f43c40e0ed2ea14

    SHA1

    b7062a5b44c96e7502641379e19b103317e72020

    SHA256

    57153fe8274b9d80c2e9a96f470e664617f096a7ce0b79e28f88e096ba39f9ea

    SHA512

    6d2d99a4b19fd3845f9e00ecae21f998ac93d15ee43df365e29b6b949d26f8d87329e18aac9245e284626e198bbb96255b7ed638623392cf33e2c31039c52f3a

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\zh-CN.pak

    Filesize

    317KB

    MD5

    f9a8558647094fd47fe5723bf54d4d18

    SHA1

    4bf362c06605693eb968f1e22b7d9a1afe8d8b4c

    SHA256

    5c0e40526cfbc7c470ef5cc3b78fa516c8f6a52c416bbbca1bf2d5662b72082c

    SHA512

    fa41e08617259004cf690d58f2c07d0e17a6075ec099bd909b714749277119e235698f381d43c355c07e62c3161e66988071fc1af1a48e3423d64199b081b821

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\locales\zh-TW.pak

    Filesize

    199KB

    MD5

    5c39ca40a41cc52cecc3bc398b18ee0c

    SHA1

    8bc20dd0225eb1d89c56334bc3323163e14084db

    SHA256

    f051c548900ce2dba35cc0dc8c48d066ef166b3876c976b1441fec37dc9f2db6

    SHA512

    b33b211ed5a74b199a99eb6566d3dd8e980e031c1f33e7eae7d41080ef717107a8cbac1c82948936eb5be5c6d85604006154db3f5dce51cd45aee024ea308fc4

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\resources.pak

    Filesize

    80KB

    MD5

    76e2662c7943186c02d4251f7b8bf6e1

    SHA1

    52d75d282abeeba63b50d4932b67ef4dd9ded6bc

    SHA256

    5d2900f0ac7ff32ab6b747ee0b5fd5ee7190ecf247323710aeaded422c587943

    SHA512

    3706d865b42c8adb22092fb30ba6185ba38dc85e59d4c3cd508bb091f930ce23ecb09801067cb3e2ca7de0a165be9c5d3836b0a5c6dbd2d88ccf03e972c06b9a

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\resources\app-update.yml

    Filesize

    175B

    MD5

    9fafe2931214f36d81e3632b0be80774

    SHA1

    cac08ef88b787dfea0acc0d18e559fd9180819ba

    SHA256

    9161bcc9763091ff3670ef98eff99d004c0f67f13b5dd94715c661fae274cf33

    SHA512

    a671cec02c8957864797cad7657b4d2165b40980410db0696cb6dbd05b9485f0491065f1249461fb7777d73cba601f8d1035c9c2718a52a56a217da859c03217

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\resources\app.asar

    Filesize

    245KB

    MD5

    8eaf879c856d3bd40132d8a4d796bf24

    SHA1

    5174eceaf897d35a7b56bcc8a4049505b21192e4

    SHA256

    0855b714219cc18ad9573518d8ca105100a4207e3376c48e3b13d08a99d196fd

    SHA512

    02342d2af49c9e923283466edf0dca9224ed59e8414f05452e13fcb4512c11cab4aecd8adfe1a25c5401d9bc6e5d3de2dcc2406cc258a1594711871636d147ee

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\resources\elevate.exe

    Filesize

    115KB

    MD5

    27bfe10ec248c1c5d2932c8b86967055

    SHA1

    2066149ddef1b6cb65559c0afb3cd584fb71c81a

    SHA256

    d93fed1423bab35582b03a57bc3ffa72978019ddf54b4ffe2811ab1123f6a251

    SHA512

    c44a351493298f14eb9dd0955ae99bfb8409418abf25f4f7fcd2f0e5cec7b0476bd70088dce7c6eec13adea211b6c62e1024bd8e6d2ec8f1f8404f72db6b0180

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\snapshot_blob.bin

    Filesize

    149KB

    MD5

    77077328e26936355c557da52bb85aed

    SHA1

    730ee8a3d48d852e7cf4d3cb3642cfdaf6bf57e7

    SHA256

    9f3cea90ef228ff89748517a1767f21bff748b6f277fd4468459eb1637c4c54e

    SHA512

    2d1eb42ff48bb6b76ecac065e04d42e551daf50c5c2c6499ae19c469c41bb4e163db80ca3c2be612a669cf5b7e8d01ea8850ef4cba90cc8b7fe62ef018d0c6ad

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\v8_context_snapshot.bin

    Filesize

    96KB

    MD5

    6ab558f9917d6627e207d02843e23d28

    SHA1

    768e2f5f0381b544401024b2cdc752082c22a1a0

    SHA256

    dd45ce4b789ee2f6e8b916bc0df60c25afede44ec258a5aaca15f6bba48ae6f0

    SHA512

    9979c70ca9efa680b60c1aa80c0216a19bc3b07dd970eaba511e4588130b80ea85d65f4ac190304fbc4313e456983250da9ff2c6cc69640f92113b1d579cecda

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\vk_swiftshader.dll

    Filesize

    126KB

    MD5

    70bfd0bb45428612e669eec616785514

    SHA1

    499ab2cc75b80613b4b82d06cd4c69070b3a0750

    SHA256

    860e47814211047fe4e4b34dadd95d56a2fbb567d7f27ab534af24a1f69cb30f

    SHA512

    fe96b053975ab2d3d2c9ed28343fcf47295a47dd828efec7661b8825de2786a16b12226f6d66a2b28a1781d27c765e515d42df0a839a7ae3048890dfcbfaf7ad

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\vk_swiftshader_icd.json

    Filesize

    106B

    MD5

    8642dd3a87e2de6e991fae08458e302b

    SHA1

    9c06735c31cec00600fd763a92f8112d085bd12a

    SHA256

    32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

    SHA512

    f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\7z-out\vulkan-1.dll

    Filesize

    45KB

    MD5

    e6a6d06ea97a5849064fabd8e35c8436

    SHA1

    9593049e4e2c35c109b1f82ca62460c5f179dd68

    SHA256

    87e9092b73aa4ddec243e81b913c5eedf49264c83ede886df4b235fe71fd52f2

    SHA512

    8ac901e0b8e171acb3fbe7cd6e0817946ad3eeb43639cb8eeb67c05b0a756ebcfd836b2bb07d7e25490b5bbbe31671bd3dd4d0699d7d9f5a9054351513bb5678

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\StdUtils.dll

    Filesize

    100KB

    MD5

    c6a6e03f77c313b267498515488c5740

    SHA1

    3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    SHA256

    b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    SHA512

    9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

  • C:\Users\Admin\AppData\Local\Temp\nsy934B.tmp\package.7z

    Filesize

    285KB

    MD5

    cee1442fc6570e8fa93d2c1a0c19232a

    SHA1

    681734371a87509417b607ea597c5567ea28a92f

    SHA256

    0f315a9766f7047e45bb0a89ad53ab0177e49ec9bee0884eb584c723716ebb02

    SHA512

    5b46e974d774adf5df6f8b708b88907fa63f900af4e7ad264960641d7eb71c445744b6ad072d7d70c715fa9aba1f5fc7e6b6717dff11f22245e18a58fb5d4de2

  • \Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    204KB

    MD5

    06ba85391b9f088fa9c0d9ac958b95ee

    SHA1

    d65b7db560b31ff06885f1661b1b6e3a035384c9

    SHA256

    7b2c4a69de83619d3535bfad85f59a36f74c643cfcdfe5e74bba5eb25d23acc9

    SHA512

    046cbcf0a24142e256be609031be665d95c98f0d1583d7550a84fc2c69567d44a646f419fa1c1339da002c5b6a90646f862002073913105ee7911792122ad64e

  • \Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    101KB

    MD5

    10c0ad5bc7603b061cb5ac11fd87b77c

    SHA1

    1415a9a73e42402b38d6548a2f36c5dc5e39a8d9

    SHA256

    7c6e79c4aec091bc7c5e27bc7658ae2fa0c302e6ffc2cc0509a39cbaa09c74d6

    SHA512

    d4b211130e72fba2417ba8c3800a1dc565c57b6b996ef387cd4af5918ee9f3c821d2a08b9976ecfd306cbd7e446621b8781b0231a1ddd691704228d396768389

  • \Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    138KB

    MD5

    cf2041ae1e9c5c7faea89c5d4e8ecaf5

    SHA1

    e33641870c7acfa437eb242c91bac205654583bd

    SHA256

    8818f2b7189452450f4773f3058190bbb8f491215a97af8baec652f856edc943

    SHA512

    14e4d7be7c6207d938e797c54c9e03a4d138c76151eb8a4a6506d84fd5e7717c529a94dec621acb8aa3221ff1114307b5b1868fd7708f0e98805de5c0eea9d5e

  • \Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    138KB

    MD5

    87b61692d82a890396e4bd999d9199a4

    SHA1

    9a0dbc879f63f46bfe38e4451d4c9337a30859a0

    SHA256

    68030cbab9a74ba7f57c6ce0b4095c0d8724164f6d46eb634d2d4dfc83f6c22f

    SHA512

    0bd586ec7404b6793a0de57a9ae2478010bee2d08b21d58a9451dab8c2e472c5f9ebcea7c1b82f4c9018135f26c4128f4545c09b3f97702ca8a94e9d050bc522

  • \Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    822KB

    MD5

    c6bec1a84b4295b066b210f8cd67a4f2

    SHA1

    3f3e810cb79fde74ac6412ea73064eee50ebf32d

    SHA256

    e9c392ddb218272d153e13200decf3debda15eec5ecfd4dadf71f39bd33f0963

    SHA512

    ed757677db7813deba92aa993c90b53b3ada2200a060499f8925d06dc8dfe905465aa11a4f58dba84edfa0937a8e85fbf0b2457fe4c567ea3e0918dcab74ae46

  • \Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    594KB

    MD5

    465a8edc051b64ac356b0cb4b47b384a

    SHA1

    25aa5de298c43315f558f58d3a6f1eedba2177cc

    SHA256

    db1b62d8249a2ce7c45dd22df0a319f1f845cba27200e16a6ca668300089826a

    SHA512

    15d921525f0e2a7fc457b8f7a4675aa3333941645b8831535b55d50342cb306bdf8fd392df984f5e7fde391ed430bb4e9a88463c8ef4777123e321c49c68509e

  • \Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    306KB

    MD5

    2053ba520c5ccb2b63ab0861fd86f7ec

    SHA1

    f6774fb890604229cfbfea204aa4aa23400c9e18

    SHA256

    8ba73b893bcb3dd4fadd07ca4f196537d4962be200bcf5101cd6130d0fc3d39e

    SHA512

    431aa4d4cba050b7345c34060ba2c62d63d24c9f6100ac0a16792ce6d6102ec3bf4559cd18c5968b30b429c86eb7e57312e537c8e82036fe5794476167c1a653

  • \Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    618KB

    MD5

    86f25e68ee43d60ce1c9d80a9ce1f6da

    SHA1

    ec1e7dc51dc764661ece6bae754235613965869b

    SHA256

    17db91833ce2b81c98335fd383ff69df9185500572e8ede1a5f930154c2214e9

    SHA512

    31f7406b80c996f2dff3216b77a85073e0c1fa87525d58a22a36912a7fbfa5fbd2459f93a964cb149da91c26db3e19f6f507c998a182acaccd648520a89e69a2

  • \Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe

    Filesize

    759KB

    MD5

    883239ab5d8534e75e497b804862aa76

    SHA1

    25033e2653e7261fc4fd0248b22a79feae912130

    SHA256

    830aa2589b47591484ccb96ae751024a55d18167722cdd929c269828612fa167

    SHA512

    574a6a238cf6bbcd107feea917282af0c1e3fe5a8718620d3cdf438e0ac5a101bf0eb64e92f6f91409e31da807814ddf11d3c307e9a6066c5a5f007c0477f95b

  • \Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll

    Filesize

    777KB

    MD5

    56fc9642009adb0ce87872e98eae9e31

    SHA1

    1556212ab469c4d432da6190c1b5bd2f19be484b

    SHA256

    a86dd3657e62fb06dcbfbb18ed4f3ed7e96f1c1d18435d19fc75a579ac6abc17

    SHA512

    a947e688a076d6ba93b50aebb048c081c5721c461b7eee6b70153967b7c9646b3fefe43327fa85ae061823dfddbb47159d410eb4189a8be241b3208c6b08418c

  • \Users\Admin\AppData\Local\Temp\nsy934B.tmp\INetC.dll

    Filesize

    238KB

    MD5

    38caa11a462b16538e0a3daeb2fc0eaf

    SHA1

    c22a190b83f4b6dc0d6a44b98eac1a89a78de55c

    SHA256

    ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a

    SHA512

    777135e05e908ac26bfce0a9c425b57f7132c1cdb0969bbb6ef625748c868860602bacc633c61cab36d0375b94b6bcfbd8bd8c7fa781495ef7332e362f8d44d1

  • \Users\Admin\AppData\Local\Temp\nsy934B.tmp\SpiderBanner.dll

    Filesize

    9KB

    MD5

    17309e33b596ba3a5693b4d3e85cf8d7

    SHA1

    7d361836cf53df42021c7f2b148aec9458818c01

    SHA256

    996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

    SHA512

    1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

  • \Users\Admin\AppData\Local\Temp\nsy934B.tmp\System.dll

    Filesize

    12KB

    MD5

    0d7ad4f45dc6f5aa87f606d0331c6901

    SHA1

    48df0911f0484cbe2a8cdd5362140b63c41ee457

    SHA256

    3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    SHA512

    c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

  • \Users\Admin\AppData\Local\Temp\nsy934B.tmp\WinShell.dll

    Filesize

    3KB

    MD5

    1cc7c37b7e0c8cd8bf04b6cc283e1e56

    SHA1

    0b9519763be6625bd5abce175dcc59c96d100d4c

    SHA256

    9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    SHA512

    7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

  • \Users\Admin\AppData\Local\Temp\nsy934B.tmp\nsExec.dll

    Filesize

    6KB

    MD5

    ec0504e6b8a11d5aad43b296beeb84b2

    SHA1

    91b5ce085130c8c7194d66b2439ec9e1c206497c

    SHA256

    5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    SHA512

    3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

  • \Users\Admin\AppData\Local\Temp\nsy934B.tmp\nsis7z.dll

    Filesize

    424KB

    MD5

    80e44ce4895304c6a3a831310fbf8cd0

    SHA1

    36bd49ae21c460be5753a904b4501f1abca53508

    SHA256

    b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    SHA512

    c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

  • memory/2612-640-0x00000000034D0000-0x00000000034D2000-memory.dmp

    Filesize

    8KB