Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

AFKJourney..._7.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    61s
  • max time network
    120s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    15/04/2024, 23:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    AFKJourney_setup_1.1.0.0_7.exe

  • Size

    14.0MB

  • MD5

    0bafbd90a6657ebc1d40339949a65d0b

  • SHA1

    e072e153f9cd9279632d82d5c6a618a7c7f0e290

  • SHA256

    4245b59eb49f9ea2596ed1791ea2c81173acbfdfa2ceaf8e17ab418ace71d847

  • SHA512

    074433aa21c00282bdf517e8935dc279f4a67b6105b8c484eee2e320b979254d07deb0234160c0bc6a3c3df9f6ebc50e0a36353dc91a0379dad61f0ff2aebd01

  • SSDEEP

    393216:wcWqAOa/J3K0GWkn+FL9mA2HtJrU3+OhPfAS:qFO+J3TGbuL9YJzOT

Score
5/10
discovery

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AFKJourney_setup_1.1.0.0_7.exe
    "C:\Users\Admin\AppData\Local\Temp\AFKJourney_setup_1.1.0.0_7.exe"
    1⤵
    • Checks computer location settings
    • Drops file in Program Files directory
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4668
    • C:\Program Files (x86)\AFK Journey\AFKJourneyLauncher.exe
      "C:\Program Files (x86)\AFK Journey\AFKJourneyLauncher.exe"
      2⤵
      • Checks computer location settings
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4092
      • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey.exe
        "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey.exe" --env_id=prod8bef2ba4a37b2d80540cd3f97000 --version=1.1.138.1374 --env=prod
        3⤵
        • Executes dropped EXE
        PID:4700
        • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\UnityCrashHandler64.exe
          "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\UnityCrashHandler64.exe" --attach 4700 2225223241728
          4⤵
            PID:4824
            • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\UnityCrashHandler64.exe
              "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\UnityCrashHandler64.exe" "4700" "2225223241728"
              5⤵
                PID:5620
            • C:\Windows\System32\Wbem\wmic.exe
              wmic cpu get processorid
              4⤵
                PID:2876
              • C:\Windows\SYSTEM32\nslookup.exe
                nslookup ir-sdk.guardease.com
                4⤵
                  PID:1192
                • C:\Windows\System32\Wbem\wmic.exe
                  wmic bios get serialnumber
                  4⤵
                    PID:3920
                  • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe
                    "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe" --start-from-parkapp=0.1.5.1 --pk-env-id=prod8bef2ba4a37b2d80540cd3f97000 --pk-host-port=8888 --trumpet-name= --lang=es --flags=0 --ppid=4700
                    4⤵
                      PID:2300
                      • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe
                        "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe" --type=gpu-process --no-sandbox --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 parksdk/0.1.5.1 browser/0.1.5.1" --lang=es --user-data-dir="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache" --gpu-preferences=UAAAAAAAAADgACAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\console.log" --mojo-platform-channel-handle=1640 --field-trial-handle=1796,i,18172652166894476332,5550236735050927704,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
                        5⤵
                          PID:1816
                        • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe
                          "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-sandbox --ignore-certificate-errors=1 --ignore-certificate-errors=1 --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 parksdk/0.1.5.1 browser/0.1.5.1" --lang=es --user-data-dir="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache" --log-file="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\console.log" --mojo-platform-channel-handle=2168 --field-trial-handle=1796,i,18172652166894476332,5550236735050927704,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
                          5⤵
                            PID:4244
                          • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe
                            "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=utility --no-sandbox --ignore-certificate-errors=1 --ignore-certificate-errors=1 --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 parksdk/0.1.5.1 browser/0.1.5.1" --lang=es --user-data-dir="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache" --log-file="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\console.log" --mojo-platform-channel-handle=2296 --field-trial-handle=1796,i,18172652166894476332,5550236735050927704,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
                            5⤵
                              PID:3728
                            • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe
                              "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe" --type=renderer --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 parksdk/0.1.5.1 browser/0.1.5.1" --user-data-dir="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache" --no-sandbox --force-device-scale-factor=1 --log-file="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\console.log" --js-flags=--expose-wasm --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2456 --field-trial-handle=1796,i,18172652166894476332,5550236735050927704,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
                              5⤵
                                PID:984
                              • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe
                                "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe" --type=renderer --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 parksdk/0.1.5.1 browser/0.1.5.1" --user-data-dir="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache" --no-sandbox --force-device-scale-factor=1 --log-file="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\console.log" --js-flags=--expose-wasm --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2468 --field-trial-handle=1796,i,18172652166894476332,5550236735050927704,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
                                5⤵
                                  PID:5012
                                • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe
                                  "C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey_Data\Plugins\x86_64\LIMPC\limpcbrowserex.exe" --type=renderer --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 parksdk/0.1.5.1 browser/0.1.5.1" --user-data-dir="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache" --no-sandbox --force-device-scale-factor=1 --log-file="C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\console.log" --js-flags=--expose-wasm --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=2272 --field-trial-handle=1796,i,18172652166894476332,5550236735050927704,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
                                  5⤵
                                    PID:5356
                                • C:\Windows\System32\Wbem\wmic.exe
                                  wmic csproduct get UUID
                                  4⤵
                                    PID:3348
                                  • C:\Windows\System32\Wbem\wmic.exe
                                    wmic nicconfig where (IPEnabled=TRUE) get DefaultIPGateway
                                    4⤵
                                      PID:4512
                              • C:\Windows\system32\AUDIODG.EXE
                                C:\Windows\system32\AUDIODG.EXE 0x50c 0x4f0
                                1⤵
                                  PID:2024

                                Network

                                MITRE ATT&CK Enterprise v15

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\AFK Journey.exe
                                  Filesize

                                  366KB

                                  MD5

                                  d1d6f8e0d6c44646610a4bdf1bbefdfe

                                  SHA1

                                  7692b19a173b47f0c5d6839fd01a0fc6002ca18f

                                  SHA256

                                  13e291120cd7f96795b1acd20b7abe27944bb8691de3ee414c560a2df21e9e2b

                                  SHA512

                                  41fa536d9d1a0b799cf82c159c70850210031a5be337fd0b08b11bf03e9d1f0bb02b050e12ada77f570850058a375850adff71aeca8eca6c5e96332d4a2349f5

                                  Download Submit

                                • C:\Program Files (x86)\AFK Journey\AFKJourney Game\game\ver.dat
                                  Filesize

                                  78KB

                                  MD5

                                  d39ef41f310b9819d0ca9dda231e589b

                                  SHA1

                                  9b6cfbc0384333ef0d5223557790dce8a048d67f

                                  SHA256

                                  630eda88a91f01b3b54dc89b973b977b8f2573b11e1f74c7787c0582772a80b2

                                  SHA512

                                  ade88dc47e8f5c4ee0bfc881cad260160eeed829a5069dac0363c3c8729c8352ea14f4caff743bfaf016d9ebca87034c651de3b7c12ab5d329715d402753bb8c

                                  Download Submit

                                • C:\Program Files (x86)\AFK Journey\AFKJourney Game\temp\11\gamepack.zip
                                  Filesize

                                  130.6MB

                                  MD5

                                  d7a19bdf459a564d8a7e72938fcc9e36

                                  SHA1

                                  35b088e26726de48c76ed02efa32bd8843440021

                                  SHA256

                                  818b68219e562770501ccb9a3067fbbf41ec1723e18e308b5189529cf0ce84db

                                  SHA512

                                  48e0d6403eaa7c2182e2805eb95ac066018a13043291f3d42d9ca0cdbf2e523bb07829086e587a4b74887d5837108cddb2b6931aacd32e78e97957df2357fa12

                                  Download Submit

                                • C:\Program Files (x86)\AFK Journey\AFKJourneyLauncher.exe
                                  Filesize

                                  8.4MB

                                  MD5

                                  45b6bdf8c267b7f0848df5ce3bdbf170

                                  SHA1

                                  063000bf7d6c8ece7a83bf19ded5c950642a6bd4

                                  SHA256

                                  f04675e786a4ee91467766316241af4970f56c31c7598de738c95042cf503de5

                                  SHA512

                                  26a82ddbb377000ea1c7d5b3cc5e554a2a5c5e968bda9a2c8fc84eac00662e259e206b70611ab28ea21db4cd79813091fa10c0a2a21dfcf3fb12b3069d2afd66

                                  Download Submit

                                • C:\Program Files (x86)\AFK Journey\resource\img\btn_playnow_hot_pressed.png
                                  Filesize

                                  1KB

                                  MD5

                                  9af0eb9304cb0cb7c51a12f862c4af11

                                  SHA1

                                  d95f820b320f8f260425d2fe19c3b9c3037ade7a

                                  SHA256

                                  e364697c47ccd474b3515ea65963672677e0340d44d555c5abf9eb7a97f6cda0

                                  SHA512

                                  cccc393e1d360340f7f94df6762ec2aa2187859db96dadf5844bcd63be76d5a281f837b2d15c3b984c6fa24e5d2469e5143fc19a74bba29198f608c18ec578ce

                                  Download Submit

                                • C:\Program Files (x86)\AFK Journey\resource\img\icon_close_pressed.png
                                  Filesize

                                  182B

                                  MD5

                                  dd1754acab2a6e93b9e7dfab5d4ebe39

                                  SHA1

                                  10c44b1e9f377d6d6e77c54b9dd28e25bed4ebcb

                                  SHA256

                                  c5ef9c0d242242675f876b53a215101ec17124c4d1fe8f98f58174454f9fb13c

                                  SHA512

                                  5723be3ffe800fbd44668c1faa8691cfcf1f3fd5fd7a18d4c09daae2fd138450f80823f28300496acffe2bb48d68effa1f9c8997821a9b6c4c7dc0db1eceeeeb

                                  Download Submit

                                • C:\Program Files (x86)\AFK Journey\save\gamepack.json
                                  Filesize

                                  1KB

                                  MD5

                                  a5b6b6b3836643260e394d880f92badc

                                  SHA1

                                  5314923b322685f02948d52c44a6c5f7f8954783

                                  SHA256

                                  6fd1bafc3faee1f58343be021b7b651301de1c9bd3c741286acff1a1827825dc

                                  SHA512

                                  6e2a15311a87ee20cc7782da5a952d226a04c8844c9d789b012dcd2b131d100aa3dccdb170f3134b26561bb4e8386b6b5e627d02e3ad3e9d1a75d41ad817f908

                                  Download Submit

                                • C:\Program Files (x86)\AFK Journey\save\gameupgrade.dat
                                  Filesize

                                  1KB

                                  MD5

                                  6545c7e1ed8c6da09a27a761a00f3f60

                                  SHA1

                                  788f7dae128a57e678a4eb88c433f6f30bc4ebca

                                  SHA256

                                  f21fb75d0031a7c577c0457c3220ff0bc29639e02d6504299f614e985d7bc711

                                  SHA512

                                  43d590a38a4304669f012878d2ea1502d687194e3770c5764c6d546ae3797e6d1a22c471a4fd2f3c7be6364229d409b48ee72e9deaaa7a5590cb385702ab8630

                                  Download Submit

                                • C:\Program Files (x86)\AFK Journey\temp\launcher\res-1710922321\6e2ce2b213653ff11c3d8ea5b3d79ad2\6e2ce2b213653ff11c3d8ea5b3d79ad2.zip
                                  Filesize

                                  2.6MB

                                  MD5

                                  6e2ce2b213653ff11c3d8ea5b3d79ad2

                                  SHA1

                                  5d39286f23064e5c4040e059ae4cb9924d4e3f98

                                  SHA256

                                  67cb71c9494cb27d4df0601b56e21dce8fa967ed5fb6a9d420f1263a5fbf04a1

                                  SHA512

                                  32db75dc79c075666c577ead6bcdb847d5055e2e08d173368aa9c693c2764dd4c1807f5e3610e4ad33eff9a729a32539d98285cb640437b0b133a6106cb719f5

                                  Download Submit

                                • C:\ProgramData\NeteaseWinDev\isc.dat
                                  Filesize

                                  216B

                                  MD5

                                  58b4167f8d407874ab5b023bb9d1ee17

                                  SHA1

                                  fd72f1c84583cf653472df8ee6d465718dbe891e

                                  SHA256

                                  416c4d1a08c07960ad08db329808369ca3611cb814d3d8fd4bcad1731b20ca7b

                                  SHA512

                                  ef1a2251db0cd48b7a4f6ba5a2cd38e6eabe907daf47f92e42f107b1cc11686403a1efc58f6d8ca13a788f6bba1f6f15d88129b4d83e9a7ea664ab5a59be6a4b

                                  Download Submit

                                • C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\Code Cache\js\index-dir\the-real-index
                                  Filesize

                                  48B

                                  MD5

                                  c5a885a79b3a70a3efec331639efb58e

                                  SHA1

                                  da7c92e7c46661ebfc066d205b7deedbf30957b9

                                  SHA256

                                  cc071d7c4ef9801ee8f44c6d93a7c818bc59dfb7d6f86188d871480ff3e373bd

                                  SHA512

                                  56fb1b1aa7e1bb3014825b6a3a111c0a76516b96362d99a31d2300d6869022bc47387bff28ba4168265ed0e9d2cb6927d86672447bec6fee7af4ff9ec50ae4eb

                                  Download Submit

                                • C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\Code Cache\js\index-dir\the-real-index
                                  Filesize

                                  336B

                                  MD5

                                  05b9ee2a8676d81d50cb998299980aca

                                  SHA1

                                  da68cbca5a094c346dbf2367b14a2b7673fcf744

                                  SHA256

                                  b721c07516a378c6870a3ff869d79a86dd160a86b04fb2f178ccff49563b2bad

                                  SHA512

                                  446f4ae114994675c18ea11209cf2e9cde92d8bf9f7cb3290d69ccd3146a5ac033cf072debbcb900cec16832e3df9f3d9bbe8ba2e72f3f2434b19ecf682cecb6

                                  Download Submit

                                • C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\Local Storage\leveldb\CURRENT
                                  Filesize

                                  16B

                                  MD5

                                  46295cac801e5d4857d09837238a6394

                                  SHA1

                                  44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                  SHA256

                                  0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                  SHA512

                                  8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                  Download Submit

                                • C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\Network\Network Persistent State
                                  Filesize

                                  725B

                                  MD5

                                  c776ff19b571a8e7d8a0524bbe52735e

                                  SHA1

                                  56b168eed18e1404ae7c05f7d3e1db7d696f2ac6

                                  SHA256

                                  75a6265febd23b8b710c2044dd96dd445d47d9479642a6c725d560c459fe82e2

                                  SHA512

                                  b47648936094745d09a528e5545b4249f4c8853b291c3d5b30c6c5fe16da4a3d000f0f82dae523a6a9c216b5239c203e5a2c52115ee54db8353e6cbad016cf97

                                  Download Submit

                                • C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\Network\Network Persistent State~RFe590381.TMP
                                  Filesize

                                  59B

                                  MD5

                                  2800881c775077e1c4b6e06bf4676de4

                                  SHA1

                                  2873631068c8b3b9495638c865915be822442c8b

                                  SHA256

                                  226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                                  SHA512

                                  e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                                  Download Submit

                                • C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\Service Worker\ScriptCache\index-dir\the-real-index
                                  Filesize

                                  72B

                                  MD5

                                  9f2b33a0dcc27ab06825a4ff6f35ccdd

                                  SHA1

                                  6c0f1614145ed68651fe36ca059df6d266e43c3a

                                  SHA256

                                  93c3ec9f8691f475f496e8735a16e84696e514c1da87edc5866338d3ade19aa4

                                  SHA512

                                  3c7d0907a2a890c33a026fed8ed4d19226321a306edec4b68844bf83be464314d4b9ef1373c736956f2bb502c16c4d99ece9853196bac32cffa2d761dde7a197

                                  Download Submit

                                • C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bef6.TMP
                                  Filesize

                                  48B

                                  MD5

                                  1a6f3a6d3a1329006b1e421ca9d4dbc5

                                  SHA1

                                  62eaac76a715f45ad16d0e74ec2b392cb65ed1f2

                                  SHA256

                                  45a76de27ee4523921fe2d4f301291d4f2df70f74c63d4ba64df02d43173fc6b

                                  SHA512

                                  5a05a3135df4ece254de6baf03d073af430143e576cd6c5ecd5d8fc13db23900d5a2d2d6e5eb1bc38406a707aa7cc8faf695d327e9d798403401228ef480277f

                                  Download Submit

                                • C:\Users\Admin\.limpc\prod8bef2ba4a37b2d80540cd3f97000\cache\Session Storage\MANIFEST-000001
                                  Filesize

                                  41B

                                  MD5

                                  5af87dfd673ba2115e2fcf5cfdb727ab

                                  SHA1

                                  d5b5bbf396dc291274584ef71f444f420b6056f1

                                  SHA256

                                  f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                  SHA512

                                  de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Temp\nsc4B92.tmp\BgWorker.dll
                                  Filesize

                                  2KB

                                  MD5

                                  33ec04738007e665059cf40bc0f0c22b

                                  SHA1

                                  4196759a922e333d9b17bda5369f14c33cd5e3bc

                                  SHA256

                                  50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be

                                  SHA512

                                  2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Temp\nsc4B92.tmp\NsLauncher.dll
                                  Filesize

                                  7.3MB

                                  MD5

                                  e289f003033fb7d3d52ff9afccbd3677

                                  SHA1

                                  2083fb9828ecc87d3b274208be0e8b88ba37136c

                                  SHA256

                                  e243bcd7575fdff522a23d97a848f562a52d484cea06151642ec5e36773a1b87

                                  SHA512

                                  99b9ec5c405b86754dd48959643080b5dccca4231e3092c1be77a8e86c5dfc893122b7d04cb2a87e4c21ce900f7eace488d01494045381cb96055a96cadc7863

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Temp\nsc4B92.tmp\System.dll
                                  Filesize

                                  11KB

                                  MD5

                                  a4dd044bcd94e9b3370ccf095b31f896

                                  SHA1

                                  17c78201323ab2095bc53184aa8267c9187d5173

                                  SHA256

                                  2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc

                                  SHA512

                                  87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Temp\nsc4B92.tmp\nsis7z.dll
                                  Filesize

                                  424KB

                                  MD5

                                  80e44ce4895304c6a3a831310fbf8cd0

                                  SHA1

                                  36bd49ae21c460be5753a904b4501f1abca53508

                                  SHA256

                                  b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                                  SHA512

                                  c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                                  Download Submit

                                • memory/4092-1436-0x00000000765B0000-0x00000000765C0000-memory.dmp

                                  Filesize

                                  64KB

                                  Download

                                • memory/4700-2446-0x00007FF9609E0000-0x00007FF9609F0000-memory.dmp

                                  Filesize

                                  64KB

                                  Download

                                • memory/4700-2600-0x00007FF9D0170000-0x00007FF9D0171000-memory.dmp

                                  Filesize

                                  4KB

                                  Download

                                • memory/4700-2457-0x00007FF9D0170000-0x00007FF9D0171000-memory.dmp

                                  Filesize

                                  4KB

                                  Download

                                • memory/4700-2448-0x0000020619A10000-0x0000020619A11000-memory.dmp

                                  Filesize

                                  4KB

                                  Download

                                • memory/4700-2445-0x00007FF765700000-0x00007FF76575F000-memory.dmp

                                  Filesize

                                  380KB

                                  Download

                                • memory/4700-2461-0x0000020820A50000-0x0000020820A51000-memory.dmp

                                  Filesize

                                  4KB

                                  Download

                                • memory/4700-2619-0x00000208208F0000-0x00000208208F2000-memory.dmp

                                  Filesize

                                  8KB

                                  Download

                                • memory/4700-2662-0x00007FF765700000-0x00007FF76575F000-memory.dmp

                                  Filesize

                                  380KB

                                  Download

                                • memory/4700-2459-0x00000208208E0000-0x00000208208E1000-memory.dmp

                                  Filesize

                                  4KB

                                  Download

                                • memory/4700-2460-0x00000208208F0000-0x00000208208F2000-memory.dmp

                                  Filesize

                                  8KB

                                  Download

                                • memory/4700-2458-0x00000208208D0000-0x00000208208D1000-memory.dmp

                                  Filesize

                                  4KB

                                  Download