Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

Stream+To+....0.exe

windows7-x64

7

Stream+To+....0.exe

windows10-2004-x64

8

$PLUGINSDI...er.dll

windows7-x64

1

$PLUGINSDI...er.dll

windows10-2004-x64

1

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

LICENSES.c...m.html

windows7-x64

1

LICENSES.c...m.html

windows10-2004-x64

1

Stream To Earn.exe

windows7-x64

1

Stream To Earn.exe

windows10-2004-x64

8

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows7-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows7-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows7-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/elevate.exe

windows7-x64

1

resources/elevate.exe

windows10-2004-x64

1

vk_swiftshader.dll

windows7-x64

1

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows7-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows7-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/05/2024, 15:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Stream+To+Earn+Setup+0.16.0.exe

  • Size

    76.3MB

  • MD5

    631ca08b37714af0840040ec7d71c36e

  • SHA1

    6427086b52a0092b3669f12a36e391d73e1da9e1

  • SHA256

    fe6a7c0a2182b291b60041be502a9784554bd2264d48976f17dc5d4904f65ba3

  • SHA512

    8f56d4d968df4fdaf0528a66ab6e5edfab85a0fdc715c6a96e2f994c5732d62cc00fd56cf774320bfee672f266dea46489081b2c25b02afbd43be55d5add50e9

  • SSDEEP

    1572864:72+e4h7TqpmHGZ5KQEF5/pMIsamlM7QjebuUa8ZVUFXz/cbg7dgdQT:7Xe40YGfhEF5xMhQ7QjeyUYag2dQT

Score
8/10
discoveryexecution

Malware Config

Signatures

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Run Powershell and hide display window.

    execution
  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 22 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in System32 directory 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Stream+To+Earn+Setup+0.16.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Stream+To+Earn+Setup+0.16.0.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:5096
  • C:\Program Files\Stream To Earn\Stream To Earn.exe
    "C:\Program Files\Stream To Earn\Stream To Earn.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1488
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "powershell -Command "$uninstallString = (Get-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Uninstall\streamToEarn').UninstallString; if ($uninstallString) { Start-Process -FilePath cmd.exe -ArgumentList '/c', $uninstallString -Wait -WindowStyle Hidden } else { Write-Error 'Uninstall string not found' }""
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:1612
      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        powershell -Command "$uninstallString = (Get-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Uninstall\streamToEarn').UninstallString; if ($uninstallString) { Start-Process -FilePath cmd.exe -ArgumentList '/c', $uninstallString -Wait -WindowStyle Hidden } else { Write-Error 'Uninstall string not found' }"
        3⤵
        • Command and Scripting Interpreter: PowerShell
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:64
    • C:\Program Files\Stream To Earn\Stream To Earn.exe
      "C:\Program Files\Stream To Earn\Stream To Earn.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Stream To Earn" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1716 --field-trial-handle=1720,i,18300550365906582057,661953374377799323,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3780
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "powershell -Command "$uninstallString = (Get-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Uninstall\streamToEarn').UninstallString; if ($uninstallString) { Start-Process -FilePath cmd.exe -ArgumentList '/c', $uninstallString -Wait -WindowStyle Hidden } else { Write-Error 'Uninstall string not found' }""
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:3476
      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        powershell -Command "$uninstallString = (Get-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Uninstall\streamToEarn').UninstallString; if ($uninstallString) { Start-Process -FilePath cmd.exe -ArgumentList '/c', $uninstallString -Wait -WindowStyle Hidden } else { Write-Error 'Uninstall string not found' }"
        3⤵
        • Command and Scripting Interpreter: PowerShell
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4688
    • C:\Program Files\Stream To Earn\Stream To Earn.exe
      "C:\Program Files\Stream To Earn\Stream To Earn.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Stream To Earn" --mojo-platform-channel-handle=1980 --field-trial-handle=1720,i,18300550365906582057,661953374377799323,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1888
    • C:\Program Files\Stream To Earn\Stream To Earn.exe
      "C:\Program Files\Stream To Earn\Stream To Earn.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Stream To Earn" --app-path="C:\Program Files\Stream To Earn\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=3116 --field-trial-handle=1720,i,18300550365906582057,661953374377799323,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5276
    • C:\Program Files\Stream To Earn\Stream To Earn.exe
      "C:\Program Files\Stream To Earn\Stream To Earn.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Stream To Earn" --app-path="C:\Program Files\Stream To Earn\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=1008 --field-trial-handle=1720,i,18300550365906582057,661953374377799323,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5912
    • C:\Program Files\Stream To Earn\Stream To Earn.exe
      "C:\Program Files\Stream To Earn\Stream To Earn.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Stream To Earn" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3552 --field-trial-handle=1720,i,18300550365906582057,661953374377799323,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in System32 directory
      • Suspicious behavior: EnumeratesProcesses
      PID:6100

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\Stream To Earn\chrome_100_percent.pak
    Filesize

    132KB

    MD5

    a0e681fdd4613e0fff6fb8bf33a00ef1

    SHA1

    6789bacfe0b244ab6872bd3acc1e92030276011e

    SHA256

    86f6b8ffa8788603a433d425a4bc3c4031e5d394762fd53257b0d4b1cfb2ffa2

    SHA512

    6f6a1a8bfe3d33f3fa5f6134dac7cd8c017e38e5e2a75a93a958addbb17a601c5707d99a2af67e52c0a3d5206142209703701cd3fab44e0323a4553caee86196

    Download Submit

  • C:\Program Files\Stream To Earn\resources\app.asar
    Filesize

    18.2MB

    MD5

    80beeed5ea1e9dca7efc9458ee75a4fb

    SHA1

    eb2695e0dcefa175f37bfe38d2db8953670dea06

    SHA256

    7952637ea70faff46d4fc5f5be7b69d8eb15c1597fb29fe7d4f01bb6f3a07b57

    SHA512

    c1d2a015a34674983e1ecc0b2ea80ab4f6ce4734c287adc49ba03e87b9926326616a5af916dabbfdc12fa2453ebe2842c8844be0910038b990a9808ffddb8d5c

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
    Filesize

    3KB

    MD5

    223bd4ae02766ddc32e6145fd1a29301

    SHA1

    900cfd6526d7e33fb4039a1cc2790ea049bc2c5b

    SHA256

    1022ec2fed08ff473817fc53893e192a8e33e6a16f3d2c8cb6fd37f49c938e1e

    SHA512

    648cd3f8a89a18128d2b1bf960835e087a74cdbc783dbfcc712b3cb9e3a2e4f715e534ba2ef81d89af8f60d4882f6859373248c875ceb26ad0922e891f2e74cc

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
    Filesize

    1KB

    MD5

    6a210b55aded73b2248fc6befecf97ac

    SHA1

    116740a92b20a51523d34f58ee4073557f15a2fa

    SHA256

    50b88de1425817b6d8b443056b45039c874f31624deef02fd74f91668dde808f

    SHA512

    f5b6746e98242c40cd9252143e1050c06cebf891d7cf76772da9c49002607afdd979b9f26399698cc46b706e7f2891a4f228a6459bea9ed09610bbde4a73620c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_c2d1nbf5.5fq.ps1
    Filesize

    60B

    MD5

    d17fe0a3f47be24a6453e9ef58c94641

    SHA1

    6ab83620379fc69f80c0242105ddffd7d98d5d9d

    SHA256

    96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

    SHA512

    5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\c0c08b0b-292b-4afe-98e7-9d87e556b37f.tmp.node
    Filesize

    148KB

    MD5

    4dc971c52b14a3843564fb0ce8a6a0c1

    SHA1

    5b19af49368e4f067cbc73af7b2b54bf2dc8efee

    SHA256

    27ec96008c48052d5f493683297c26b9136f1d6a9e73c3722e243bc959d7cc93

    SHA512

    52510b4c20146e635656814e7088464399cd4ca2d64ca67ee2b116ab4631918e092d90462fc450d610154b3284579cb8b7d0ca7bbc3a6eae6b0a348ccffd04dc

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\ee45b242-a575-4e87-b065-e9cbd38ec790.tmp.node
    Filesize

    147KB

    MD5

    5cb6b3762df753d84e4ffd4afe1a7e1c

    SHA1

    ae2b1c4652aec7315607fc413a4c258f11b69544

    SHA256

    48b7275f47cd44a05d349eb4fdb6cfc451ccbf609a4a56fa34452bcf231c1208

    SHA512

    5723c10ea9c26524f7866b9c749d9887b10c1514bf0cc893ba2a6e9c5d9690015cbcbe024653956af3fb842de3290b4c6c4beb051b67480bdae543d8fd3981cc

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\LICENSE.electron.txt
    Filesize

    1KB

    MD5

    4d42118d35941e0f664dddbd83f633c5

    SHA1

    2b21ec5f20fe961d15f2b58efb1368e66d202e5c

    SHA256

    5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

    SHA512

    3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\LICENSES.chromium.html
    Filesize

    8.8MB

    MD5

    2675b30d524b6c79b6cee41af86fc619

    SHA1

    407716c1bb83c211bcb51efbbcb6bf2ef1664e5b

    SHA256

    6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081

    SHA512

    3214341da8bf3347a6874535bb0ff8d059ee604e779491780f2b29172f9963e23acbe3c534d888f7a3b99274f46d0628962e1e72a5d3fc6f18ca2b62343df485

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\chrome_200_percent.pak
    Filesize

    190KB

    MD5

    c37bd7a6b677a37313b7ecc4ff01b6f5

    SHA1

    79db970c44347bd3566cefb6cabd1995e8e173df

    SHA256

    8c1ae81d19fd6323a02eb460e075e2f25aba322bc7d46f2e6edb1c4600e6537a

    SHA512

    a7b07133fa05593b102a0e5e5788b29488cb74656c5ee25de897c2ba2b2a7b05c0663ade74a003f7d6df2134d0b75f0ad25e15e9c9e0969e9453b7fc40b9f8bb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\d3dcompiler_47.dll
    Filesize

    4.7MB

    MD5

    2191e768cc2e19009dad20dc999135a3

    SHA1

    f49a46ba0e954e657aaed1c9019a53d194272b6a

    SHA256

    7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

    SHA512

    5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\ffmpeg.dll
    Filesize

    2.8MB

    MD5

    dc58f38055a1ccd9d00c9b3b004bf191

    SHA1

    8d1725632ec0725d6b42898cc1c977b85e1bd63d

    SHA256

    da6d1af6d27b453b4bc126e085a1e51cf0826b9156b37f26c553dd0370a44ea2

    SHA512

    807026560b4b561057b52d6050b969750e46674490d8ef687e6bce80433371f03f5acc5903290c2e8fa3305ca4907b46358d75e6c8f86e51fab5d943cb1e3890

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\icudtl.dat
    Filesize

    10.2MB

    MD5

    e0f1ad85c0933ecce2e003a2c59ae726

    SHA1

    a8539fc5a233558edfa264a34f7af6187c3f0d4f

    SHA256

    f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb

    SHA512

    714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\libEGL.dll
    Filesize

    477KB

    MD5

    90dd4416b522b2ce598defc32ef048b4

    SHA1

    660c93040e4cd32907bf6fbb4fc788dde177046d

    SHA256

    ba8bc2c43a33ccbaeff01c6810ffe40208105a3502d17f8a08cb6951b54d36bd

    SHA512

    5513497208c499caad9f812f00be61ee31636f0a054cc4758bb5c2c32777ff7230db15fc2d7d333c81b76e7b3510785d482d0a4f51c90ac2c13a87b66ec46f58

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\libGLESv2.dll
    Filesize

    7.3MB

    MD5

    0acc7f72c56e8e36c9ce8ce65b6b081c

    SHA1

    ec714b98b7c87478cd47d4c5422f75273dce37c0

    SHA256

    cbdfd5207e302b1e96a79b6d186c0dfd8f84f8243e8b81b687f9e14687e08b5f

    SHA512

    b7f5ee22cf18a95e5291f86f05e470189e60ab801b264c9ce74603044fdd6e7814a99c6c93d2ad357aaed13a84cbd01b6f1df41822ae466176d1c2cbe1de0879

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\af.pak
    Filesize

    447KB

    MD5

    917a688d64eccf67fef5a5eb0908b6d4

    SHA1

    7206b01bbc3fd8cc937db9050dd8ac86cf44d8cc

    SHA256

    6981249837ad767fc030edc8838878a5e493fb08cc49982cffaed16cfbeb564d

    SHA512

    195dbec8463cf89990232296c5c927e1501f0c2e01a7be7c6a6acae651853ce1edb23d639af65979b39a3c61979119c3a305acfa3aadf0cb93e241c5e57f4534

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\am.pak
    Filesize

    727KB

    MD5

    3cfd7c5bb92ab72c63e003208a9e4529

    SHA1

    165d2f69ab6a6e237f0fec943b5577123cefea87

    SHA256

    12e9e1bec1c46e5ea706157726e17a4429acf288a5754fa183bd9b4cf7d3853b

    SHA512

    cd7c7837d758ea66abc871503cda6fe99ff45990405e60c1133e7c1f4cb29ee69723c9558bb2d3eccb42948da57351f4f095062616686ab2e255acd3c86236f0

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ar.pak
    Filesize

    794KB

    MD5

    3c2ab7363018db1f20b90acbc305cb4c

    SHA1

    60b9cf453178ad0e60faf20d137a0c7eabde65c9

    SHA256

    3ca47b9c436723f837a53b2904b51efdf13ab6cad2f3ef4fe48a1115847eccbf

    SHA512

    589beb3e95e93f30341933c9b9826210e6bf3e9c1ad8f113d9d8a98fa5a526f81e454ee3357fb55d60d67a4890ce33e964ba2fa810e1771a6b7e82746492313a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\bg.pak
    Filesize

    828KB

    MD5

    a69f6075863d47b564a2feb655a2946f

    SHA1

    062232499ff73d39724c05c0df121ecd252b8a31

    SHA256

    a5eb7038ed956bad7704a722f05691474ff709dffbad92b8e31dbb869ad58334

    SHA512

    930ce3938aa02a8bcc609a64bd86b7e6164d63baad157a980fd079859a6bee5db87bd1f7a74a71108f8368bc9c6154bf14a2dba1abf269f572bc262614bcf1db

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\bn.pak
    Filesize

    1.0MB

    MD5

    d43ce80ddca3fab513431fa29be2e60a

    SHA1

    3e82282e4acfec5f0aca4672161d2f976f284a0c

    SHA256

    87670ff2ceb1ebc38fce2c3b745ac965f3de5de3133d99ed33933a8f3e99d874

    SHA512

    1d33ca9bacb91ef328f89a14777a704000bf30fe59aa1cbbbff34d8bad266c98d78c9e411e289e834e76eb721dd98934426a565cd5b3436d5a103abe37f7612a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ca.pak
    Filesize

    503KB

    MD5

    2d30c5a004715bc8cd54c2e21c5f7953

    SHA1

    fed917145a03d037a32abac6edc48c76a4035993

    SHA256

    d9c45d55a9a5661063b9bbebb0615de8f567f3925d04fd10938da9617c6220e0

    SHA512

    b3803551f53d290d8839789f829afc9c1e12052c81ba20d5e01fb3d2bacd5d1e97bd4c05074322eed17fdec04c9176c655076faec8a3aef17c39fb999e0c1fcf

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\cs.pak
    Filesize

    518KB

    MD5

    06e3fe72fdc73291e8cf6a44eb68b086

    SHA1

    0bb3b3cf839575b2794d7d781a763751fe70d126

    SHA256

    397134d1834f395f1c467a75d84ef2e8545cb0f81e94dbe78b841fbbdaad802d

    SHA512

    211594c30ad4f5ca8813596b59751168c60dfa0d13f24f2aa608fce82d21c2de3de69fe007c4bde1602da8aa7ea81ec0f15e173abc1224362c36b493b425b425

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\da.pak
    Filesize

    468KB

    MD5

    ca86dc72b319d93e16aefe20ddbe4d19

    SHA1

    686904628ccaee9bb75a95c02a866368ea6be69f

    SHA256

    29f88dbe1952b71a7f72aeb31d9646b5ab2586714878a731f11f66cd30de89c8

    SHA512

    0435bfa042e51747212504e0a7de90bff452774d71b61ab9fd8a48895e219f89ded44f4786a399fcf966e325fd957362bcb85542ee6402d868b057a4bd352cb8

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\de.pak
    Filesize

    500KB

    MD5

    b63d774e72c6183a98ea636864c1fd35

    SHA1

    8c5aaa2d9a2d9d1ed91805d3af17d4e62f06227c

    SHA256

    62f63a7dd55506726cb73dce0c0de26df866ef215123ec5842b39d260b238cd2

    SHA512

    cfbd786f201d2e91a019da270ba3b536825b71045796896f4ca40cafc897bdfa0e4011234a9138cfe5bf47ff9510a43ce4c6c305471781636e580432a272b019

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\el.pak
    Filesize

    907KB

    MD5

    a14d8a4499a8b2f2f5908d93e2065bf7

    SHA1

    1473a352832d9a71c97a003127e3e78613c72a17

    SHA256

    eb46d9860835b69d33b2583d1e52b20238b666b967bf00906424e3c8a161ed64

    SHA512

    427271d12590f8ea3f11b83e4c0ce79c55c289573c5f6e5c70c789b28a5181f295a3c9b1a4bdd1f731f338e6edb1e06318ea6410ceac546128a84ff8f2ec0b40

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\en-GB.pak
    Filesize

    408KB

    MD5

    b7f9397c0f3cee07667f78a47dcb79b5

    SHA1

    23b195409aa79065ec6719ad7731b4bfa6488fa0

    SHA256

    37de35396aa9f339a24ead5435d7d7b7a46a698129e3e160bf2e753519e71a9e

    SHA512

    6a6ac49e72cd93f01a6b95dc8f789ce8097b51ca4404079e32a6699af744b87520f9b8c7a5dd38af27b8f0cc480ea637a2bc387872f1e53121a2b0a5187c0c42

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\en-US.pak
    Filesize

    411KB

    MD5

    626f30cfd9ad7b7c628c6a859e4013bd

    SHA1

    02e9a759c745a984b5f39223fab5be9b5ec3d5a7

    SHA256

    0fd74bb69ad35b3f9391fa760bf0eb0ee73d2bea0066244577ef2abd269513de

    SHA512

    9ce902f21fef70c5b5af444b532b36c9a00d896878cb4021c9b1dc07aa3277d956bca65ee0adb68467eec113e535b60a8a5fb5414c7d0ca761ceae5c43b7d9a9

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\es-419.pak
    Filesize

    496KB

    MD5

    6f4613a4a88af6c8bd4ef39edeee3747

    SHA1

    c8850a276d390df234258d8de8c6df79240c8669

    SHA256

    8f7b8776e61e3ed5aa33b1a571ac834653b54b12a499d956b95d567b7e1ba987

    SHA512

    e5933dcb2aaaa2018ba8b13f4af3dc8a950640ac60acb1b56ad6de24541701d0ffc1f4cb28c7932af924bfd673edcee20bf649156ab95ea9499ec43c703ea141

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\es.pak
    Filesize

    495KB

    MD5

    198a99df04dc127677755cd021faff60

    SHA1

    e97692d927059d507e99144fbb4ef4829abeeaab

    SHA256

    10d257b76fcc484ab163eb570de406fe07607ae75abba94681719dc7415f40eb

    SHA512

    ddc0d64cf906a9357aa675acf6037effd9a79d49dc0bfa8e49ffe41592f4b776095db5a6a49f33a637514f56ffa08bc9f1dfcb03572a205fc5ce7e658cc77ca7

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\et.pak
    Filesize

    449KB

    MD5

    82a07b154cb241a2ebe83b0d919c89e9

    SHA1

    f7ece3a3da2dfb8886e334419e438681bfce36cf

    SHA256

    84866ccaf2ec39486f78e22886bef3fe75c1eb36e7a7c071471040e12018db28

    SHA512

    07319d155bdf9e27762ecb9ef6871430bef88b1af129450eb65aa798ebaa4e02b25b0cf9bde3b12ff1b04a3d14241569b73d6af895d2e85dd7b24d393e7317e9

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\fa.pak
    Filesize

    738KB

    MD5

    3b163367af2f1b78a4b7c3ad986bf83e

    SHA1

    d4887f4afb4ff93abb5b0e2f7633e7b436e18a18

    SHA256

    d345115bc896ebdc397c7ee490020216b900713b9a6c4e8215d241dfbfac1091

    SHA512

    828c4c418ba36a4abcb62b08589505bf17f21622e288b4cb705b73a137dd7becf689c9e32893b86227794d2c59988a2865660f5fb203e33fa7f0ef1fed54442f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\fi.pak
    Filesize

    459KB

    MD5

    fe011231bbc8b3a74652f6a38f85bc88

    SHA1

    2b851e46738d466b3a5a470de114d15051b6eb6b

    SHA256

    7a3249514585491eb47fe4b579edc27ccc48761e7ad6bc11d113b257132c5dd2

    SHA512

    2a4e5c1409347b4b514556c81ef32c8ae118add28e3469717b13045c8424fed9b817c7988629050ed3e732e0cdca181891b6a8b9e64e4c8d65f004d7c8db9796

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\fil.pak
    Filesize

    519KB

    MD5

    7354de570c8132723c8e57c4ccb4e7c4

    SHA1

    177780faf460e3c8a643a4d71c7a4621345a8715

    SHA256

    91149190c856195fb330605686acf09c7197e5b7efe37fe2a7c76bb8fb08cc89

    SHA512

    a8487a6a7fd46d62e78ca4262de49e12c120268561ee61a642c45efa48116edebeb40cf9e8be229db0bbf06bb6b5457cc54399a08ee6a603e5540ef5ca482798

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\fr.pak
    Filesize

    537KB

    MD5

    cde8331e559cbda2aaeba33987001ac1

    SHA1

    c3ab03d5450cdec6b2fa6e2a608296ba12d81d9f

    SHA256

    e2dc84e54be64477b0b60fe12fca69a452920ad78cfab65e46184c6d8e9f3e55

    SHA512

    61dadd67df9646f7a6c37732eec228207e31ae9f3513fe915b56d6040ef608828dc9c74f50b61fea8ad8d24f359f7068d07b27dfd315aa24d057eb62b4f0540c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\gu.pak
    Filesize

    1.0MB

    MD5

    225167dbdf1d16b3fafc506eb63f6d1d

    SHA1

    8651b77f41e3c5b019ccb124a7c8f6449a04b96c

    SHA256

    ff379dd77136b9b85e7e9fcb5b261ace9c6d9184af3ba2dea35b1757b9bab6d9

    SHA512

    a353d36a87b6608578816056647de45a456f9012d399b2cb5cb7b9de867a370fcaf1a90d293f367b9b678d13991294425abd85cf77e971afa0d3e9c316952115

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\he.pak
    Filesize

    645KB

    MD5

    c8ae69424b04667229f1bbc1f7d1321d

    SHA1

    ec89cbbcdcb395c60e6827f6b37579b6c3276556

    SHA256

    373f28243321c58616b979686ff6dfa9a947d92b33074fac52ef4ed1e9d8e64a

    SHA512

    57a9436f0a6cf396d619302a1e924567e9d737d1be8851a7633eb258a0c4c9ad6af7c9ccbb7b7eea133235bf1d22aeabe680d7869ee5876888e146b1d50acd8f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\hi.pak
    Filesize

    1.1MB

    MD5

    9e1788b0f3e330baf2b9356a6c853b20

    SHA1

    a2f4b37a418669e2b90159c8f835f840026128d9

    SHA256

    c640313e10e985a58d16f928d2428ae278421a070d948733ac68fdf7312090fd

    SHA512

    b9a577e084f8daeb53fad0a9423661c99cab272125899a16b0b052606a2cb88f823137f3a21b5c06b10e0235321b7faca84cd759bf406fb2dd02c2f598e92cb5

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\hr.pak
    Filesize

    500KB

    MD5

    e4e05d988e90cc628e72b88a44544f11

    SHA1

    02f2c04aa29bad4766b09767f99108c2c1e4c4ec

    SHA256

    a7245c9afb6787f85b662f5f3ee7f78cde9b28498cc5e332f76d6b5a7b5b58b5

    SHA512

    1809430b8ceb8aa3dd11ef63b93a86a672849c1b6eb2c47bf2caaeb9403c73fa8ef05dc90e1f0bfdbb4e1cee0644ae53617fa73b92ec00694aeda15d67bc4f3b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\hu.pak
    Filesize

    538KB

    MD5

    b93beeb1e35a29b310500fa59983f751

    SHA1

    45c0b2cab4c4a820cfc2aed4b7236ddc79a0db00

    SHA256

    bab09c3cb80130a4a288642633c2b31ab08b1757466d9a468bc36d276079f002

    SHA512

    249de5b8bd7c4755caa8b9552254d353b0d885b63bd5f7c6c8e29b3f4e447c9e8d6c0e88d5aaba0b898aa26880592b3904e19ca4797a2ac1dd757aaee782c37c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\id.pak
    Filesize

    443KB

    MD5

    bc719b483f20e9a0b4b88969941c869d

    SHA1

    4d926a9aba7c350e9da8aa570a9f52534c81aa88

    SHA256

    f175e58be47b228803aa32d2695e2fcfaf4655b65b96fb6b539b3e59593e6799

    SHA512

    ddf6108888676c1a90865daaa88198b681b685d9047b0e10f5aa08daa39a628a84732a8518606176529297bec51ce8bc39e910eeffc8b88e9585fafb694c35db

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\it.pak
    Filesize

    489KB

    MD5

    6b6e505c15f8ddf44876762ad2ca51a7

    SHA1

    551d6e3b111aac6c96cea4cff939d0e25d4f1403

    SHA256

    ea71154eb34bdc4183e0be8bf803730d6bd315020b814cf0ac63a04a1f6ea42f

    SHA512

    3e17189ea9c3f22ba88afa99b3d4d8abf08e84af0d5c1e345a280ffd7ff1716ef3d7ab299f884fe1f272617ad595d21530464477576e6282ae4907b60668aeb4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ja.pak
    Filesize

    598KB

    MD5

    dee9626a8d7cacc7e29cff65a6f4d9c3

    SHA1

    5c960312f873ab7002ed1cce4afdb5e36621a3ce

    SHA256

    63ad3974baa8c160ba30448171f148d008ac19e80010fb13d3a65cf411b67ae0

    SHA512

    ee80d58886f4ac378d6491e075062c171a715af7c42dd1785952b25a572381acd722764e8be914adbfccf2a5fa4a51968b989b632eefb9d636851f1b8ffb82e1

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\kn.pak
    Filesize

    1.2MB

    MD5

    f59a0ab572adb9ea630497599a0e4312

    SHA1

    ec9ef32088810281c503abe8b056095d458c0930

    SHA256

    9757e201e8f56d376af40c399df0a4f6997f6ea47ae364cfe2c53f257bbe968c

    SHA512

    b49cbc7962815b7d16c4a12e199b174837df040fa2cac2d2e583426c7a459d12e5ae5e43b03d4cf4fcdf15badedf99febf21c8f9633ad0d947020ff6d2db3c4a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ko.pak
    Filesize

    505KB

    MD5

    ec59b052a85b244d45d76c795c0f7cff

    SHA1

    46663ce3c4a617a8c641fab8f3a47b5b00d1c7bc

    SHA256

    a3513c85206a06179223ee7c890ffded53dba6d13ebd4aed6c8dae6009d36ef9

    SHA512

    d5b951245fb15e044fb4e4d74a4e0c482b0fed4d1c0e8529dc9c288a6df0dd763b5a620a5b1a23fe9827c97dbdbaaf55248e41e739558386bd671a4de3389c15

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\lt.pak
    Filesize

    543KB

    MD5

    3e9119a712530a825bca226ec54dba45

    SHA1

    10f1b6bf2fa3a1b5af894d51b4eb47296c0dbc36

    SHA256

    3da531a9a5870315823e74b23031cb81379d2d94ae9894a7fb1d8a8ad51a2da9

    SHA512

    765c872cafa1b266575b0cac09dfa796cdb860bd82e1c657397fe2aada11771f306b0a1776e4d66ff41e94b153c812592430f31e7b1ff97abe7d8e6b96d321f1

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\lv.pak
    Filesize

    541KB

    MD5

    e75cdda386dd3131e4cffb13883cda5f

    SHA1

    20e084cb324e03fd0540fff493b7ecc5624087e9

    SHA256

    ae782f1e53201079ca555baa5ec04b163188e5161242d185f04a606a49fc8c0d

    SHA512

    d27bc61028031946ed6708918f921c3d681c8962b8d5507a91ab6576e3b2c462524e550305db87ede886e41fb0e49edec2d84cdbbad675282105627e01d98bf5

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ml.pak
    Filesize

    1.2MB

    MD5

    6e96eddfe80da6aaa87f677feef4d1d6

    SHA1

    8a998785d56bc32b15cee97b172cd2dcdc8508d9

    SHA256

    e2fb73353ab05eb78f9845bdbdf50b64c9fb776b7f08948f976fe64e683397c4

    SHA512

    feea11dfc6ec153ab903b5828306617eedeee19daa73bd046ae47757795fecb9abce6192bb3a9561aaace7fc85ee442057b93081c6c986855b819fd38815e6f7

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\mr.pak
    Filesize

    1.0MB

    MD5

    fda40999c6a1b435a1490f5edca57ccd

    SHA1

    41103b2182281df2e7c04a3fff23ec6a416d6aa9

    SHA256

    0ebb125a0bdfd1e21b79914ca8e279790d41f7bac35bf2d031dd7981f1c1c056

    SHA512

    666ceb24d2e568a00a77512295e224a6545bf6abcfa19c93aa823db5330117fcb39fde570e7601dbd41976950c3ec03634f89fc5d9203357515e6651ab0b6d32

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ms.pak
    Filesize

    465KB

    MD5

    73096184d7bd6a9a2a27202d30a3cfa1

    SHA1

    ea711b29787aa8b9e9af6bde5b74103429e5855f

    SHA256

    d1072514bab63af5dfbf923175d491787139f0c1b6361acb23e67543836c84ba

    SHA512

    e3fbee4896554e502c222b5ffe38e9d61e9db4d18cdc92ce5118b819dc60789bfd6d6c7f8444ff1763222455ab91e79bfe500e75c0e06b0de70c2c64fb043c6f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\nb.pak
    Filesize

    452KB

    MD5

    28cc86c7204b14d080f661a388e7f2c0

    SHA1

    e0927ea3c4fd6875dafd7946affb74ad2db400f5

    SHA256

    9253122d94ccea904fb9363b8178ca9335b8380b7891f1a7a22afb3113309e72

    SHA512

    e2524e10d145f95c028d65e47cf06fc82c7a43fcf0ecf01202278c7fb14079c03e9434e8039fd96aaee870872c9896d9f0ed575e50c19a3781cb0c94fe59b3a5

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\nl.pak
    Filesize

    466KB

    MD5

    7fc6ae561fd7c39ff8ba67f3dbaa6481

    SHA1

    2e3977403a204c6f0ca9a6856bb1734490a57e72

    SHA256

    844031e1de2b2872d12d5b7d42adf633c9d4b48169b1b33b7492b3b060c73558

    SHA512

    90294ae24b7db003bc34a48f98d9e1887e87c6f605defe01ddcf9187429e8446c04a7f94bb6aadc8e61c98842163bc3702b414393ab836eb0bee038f09481c2b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\pl.pak
    Filesize

    521KB

    MD5

    ba7a9aba68211d8639dffae0ef8b88da

    SHA1

    a9a26b8f0902475cb576967cbe9013028cb21da4

    SHA256

    60aa08598a81bb46ddc64a5ab0852565554c6e6262e9c5dfee09f4e3fc08d5fe

    SHA512

    a1b8bfc3e19aa1267e31838e1c1f2b0b1cfcdf56f84e967088d626b58ec64b3305043a14b12fd080498ee1d74a4192453914c393ce8f848ea5616cf88abc4eb5

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\pt-BR.pak
    Filesize

    490KB

    MD5

    53d5fb849c9bab70878b3e01bffad65a

    SHA1

    e72af1a76539e66cef4a4eef5844b067a4e1a79f

    SHA256

    40dd24c5e225ed941bbaab3dcfefa993e39fbc75a1798f4f6e06424956698ac5

    SHA512

    55357643d789d2eed72e009f08f72ba4895ba455ca00c8347a3c3790e43f8d7e4625feda438ecac840bdc52c26d2135d89bea693b61a293922b6056bde6b4516

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\pt-PT.pak
    Filesize

    492KB

    MD5

    0237374730fa1a92dec60c206d7df283

    SHA1

    62dbbd855d83ef982a15c647b5608dafb748745a

    SHA256

    2fb2fd2e32b952dcbc8914f9d3aaf02bf2750b72abfee2e8b2bb08062ddd9934

    SHA512

    63ec4ec44002724e22703a3bd952d1ff4062b367c4f5e3f106349bd226ad1317bef2e371fda0e099ea5c0afd32a9d2c1246c93c18d73dccf8fc2c1644a6fb6b2

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ro.pak
    Filesize

    510KB

    MD5

    4e692489e2ae74a4a11ca0a113048f15

    SHA1

    cb2b80217d5372242d656ac015c024fe1e5e77b7

    SHA256

    4a2a305668f1926cfe4bb72e8fbfde747c83ac4dd9cf535c13ae642d0b96fb79

    SHA512

    8ad9e0a79137a862def24d6963536e75b87bb71ab74dbdd43531c5c95ddd3cd834f22c6a8e3a1e03aad35ade65ecd227d5101b5be3ce3f0b7b471f5136cfd77c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ru.pak
    Filesize

    836KB

    MD5

    c43e59a6b8f5316ec6d21688c78e4be7

    SHA1

    06ed1d48c56f6b11ecc3d1dc69777a25f08718fe

    SHA256

    b4ce6458cad018c464c9d3a82dea4888874348d7bff1379976dde69cfd52352c

    SHA512

    e9618bcb7a4f0d50de2b2bfae72426ec85773462f11b132efdfb0d1b1e56426282a921e356af235a6ee1fe4295f5b6149b37fabc1c2c268840697a75c091ea44

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\sk.pak
    Filesize

    526KB

    MD5

    f117e58e6eb53da1dbfa4c04a798e96f

    SHA1

    e98cee0a94a9494c0cfc639bb9e42a4602c23236

    SHA256

    b46db20eeba11f8365296b54469fdd001579852dc1d49a01fc59d2a8bcf880a3

    SHA512

    dea792a63e0557d9e868c0310ec2a68b713daf5cf926389e05a0885cdb05433d20f35d087de269f9584795da50600966b8ff5dd95583861443a1e90564a89793

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\sl.pak
    Filesize

    506KB

    MD5

    435a2a5214f9b56dfadd5a6267041bd3

    SHA1

    36bbc7ca3d998bfb1edc2ff8a3635553f96ca570

    SHA256

    341c33514c627501026c3e5b9620cf0d9f482ab66b10a7e0fb112c7620b15600

    SHA512

    55271935e18ac27c753431af86a7dcd1f4a768adef1b593ba8e218da34856a5f9faf9819a3ecce3f21f0607ba95100c5cb18cd1a7138ec563090d0391ad5b52d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\sr.pak
    Filesize

    780KB

    MD5

    8f58b2463e8240ef62e651685e1f17d8

    SHA1

    6c9f302aed807a67f6b93bcb79577397a5ad3cf7

    SHA256

    5a55320d6953efb5b565893e32e01f6dae781a16460df5502c8ba012c893edfd

    SHA512

    6076d43a73d5fa5192cbe597e018b268cfdc7efb94a6cb45dad5b0da9c3abf68aaf2ea06f3ad650b28a993605917b6d356339d79f8dd6962d2c40dbf4653ef83

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\sv.pak
    Filesize

    454KB

    MD5

    9494aa2956b6e560038e8c5b5f9f19b7

    SHA1

    7a6989e57519a5b2af40fecf481a68a1fb8e6f6e

    SHA256

    cbd0bdcb5fb6a472c1c478aeecc360208dc6c1a045c3258007239ae580113fd1

    SHA512

    e806e4b15bc67d87dae52cfc00d442505c95e754b20bbcbb04522e979cd734566b55c246d6c1efac3b998231d6ab2e740b96f629caf0052b30c626bfe74d4066

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\sw.pak
    Filesize

    479KB

    MD5

    b167d748390dd2618faafc32ea93a744

    SHA1

    da5b68a3f09904578bf361d3a316e39689b5f906

    SHA256

    a5b3021ab3a25a1a2cebcdcc7a8afabfba4e51a4e732f92f77c10c53ad1edcf3

    SHA512

    1e01c8d6793f4cd7856807c317551a32b004fff69c31eae08339a5577f32a048b9313d152f2b703a5997e29bbf18c2b2ba436cbd7f8e02c1accda74622f548a8

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ta.pak
    Filesize

    1.2MB

    MD5

    5f80c9da0c09491c70123581a41f6dad

    SHA1

    3fc9560a954271cf09aaa54eec34963c72c06e85

    SHA256

    30658d99d753946e9c9c02094c89be25b710db77251df6cd1a8839c29de5f884

    SHA512

    072c5db7fe1eb9e6c270d0e9b439cf84ebb3dc374d4f01f01f9341030883f2d6d9c6970fb6ef14bf96fccb51eade9ca762f396f89ba1d3df1230dda68557fd4a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\te.pak
    Filesize

    1.1MB

    MD5

    629796b92dfefab4c2ae2318e2271542

    SHA1

    791861476a5e9cac190637156f832d82a20b39f7

    SHA256

    7cb52808fa4eaa00bb8a204d29c9c0f411af50d0b8a9c480823ed38ae576b8a0

    SHA512

    d9314d78e9d2287b1a91634c1d1512e5e1690201d1b5073e516ec75ca424a57d392dd0a636b811cf22e454653a3a213eebe215c8a77e3646baaf98c40926d673

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\th.pak
    Filesize

    964KB

    MD5

    4917873d8118906bdc08f31afb1ea078

    SHA1

    49440a3b156d7703533367f8f13f66ec166db6e9

    SHA256

    d051b400096922089f6daa723fac18c9640ba203b2879aac4ca89b05738dd32d

    SHA512

    30e6446bad54b86be553fa293c7a92ec221adb54b99624ed69702df75347a98697158041a45f77ece4e7ed0fda41306ef21eb27981f24f0a4e42e8306175a88e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\tr.pak
    Filesize

    489KB

    MD5

    5af4008ede54491b95d94bbd238e5306

    SHA1

    ae78c51b7a31f8f5755ddb17c98623d3fc5fb01d

    SHA256

    5387793bd98254801b0274b101b99ab182395dfd48a301638a774480e4ae574a

    SHA512

    3fddc30713e525c67c14f825f0fee8981a47ffe487607ad0160dca3022b494f6cc000b8965e7a546d9dc0e949465c0258e64c13b5d99286caf2590d2988b6af0

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\uk.pak
    Filesize

    836KB

    MD5

    87f514f52144d34484d74062776d36ab

    SHA1

    598e384ddf3b52c8d0985707d74ba1b98ca8c8c9

    SHA256

    97f71b455a7e5be3b92f31962a328d923fd976e580036d584420eeb509d0d04e

    SHA512

    99b228ef246c9c25e9860df4c028c2a9ae49d9a7b00ddfecc68d34a2f2a49c445a0b088d82b202689d582a7e2c42b76ef776955654e5db0eeb035e878c208dc1

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\ur.pak
    Filesize

    732KB

    MD5

    861ffd74ae5b392d578b3f3004c94ce3

    SHA1

    8a4a05317a0f11d9d216b3e53e58475c301d7ea5

    SHA256

    b9f22a23368bf1e21f3085583ecb775cce8045176721ff6ae798b06bd2810dbc

    SHA512

    52ede35b7ed1fb6e51b18e450b95c3245d326f2afda646e3642ee68b714dcf9a726afe32e2759e9ea87a104f4a59e6fc2c60b3275aad8332ae1c626231e6747b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\vi.pak
    Filesize

    579KB

    MD5

    05cd5bfec6652ce8ecc88e81c21a782d

    SHA1

    65af646e193e6fcd1d13c2bab74abb2d2c12a100

    SHA256

    94414f758c41526d99570d54651fca3c8e78a5c60fae63b06c878f81e46887ef

    SHA512

    7330cac357c88873719fc20ecf3b40e1eaff75731d4bd605bdf4a9c20d5f89f11756239551914e3687dc2bf29777150c05d3d0b97219600fc2cb58a80750c6de

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\zh-CN.pak
    Filesize

    418KB

    MD5

    b1bd83789441face3ac52ac660456f12

    SHA1

    82f6f04803ad0f4c7e83d976397adc6de31286d7

    SHA256

    75d84537cc3211934619e47f772089f6dd8395cab42f4b4887a7181150167f55

    SHA512

    2879122edb0a66d3fe1940e709cea89567f70c2c27c1e813a05717b4a9d6b15459a4ec3c56b11671c62dc8a8294c87a0c39aeb251b76ac66a4359f96444e2ee5

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\locales\zh-TW.pak
    Filesize

    414KB

    MD5

    7646ce7c03cfc5572143d26af72810b5

    SHA1

    ca58589dd2867a9fa1863be934e2c1c1d55f06ac

    SHA256

    46b29b6be5a33ee45898bc67784d1ca70b6d3897cf434a48c47b5b080d58e3db

    SHA512

    dee9fb24ea2e09b389cabdb99a36a9fd61690f4255dda29c32e900a990e7844982c162012e58c0cbed187ba40c1678d21c2c8e4dfe3c3fed5465436bfb5ad3a2

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\resources.pak
    Filesize

    5.2MB

    MD5

    addeeb6949395b4a4d897f94dd40a2c7

    SHA1

    25ec08073fdca15f3794b035f27d27716dc95740

    SHA256

    fc8689ef075dd6f54698c18d5ae75b086d7995ef9af2765c0db4ac7d6f8a351f

    SHA512

    642df2b1c28fd22280d06b1fbd4e44e0233708e4e65f9f23cca764824b742e51e8ff216007c1e47395d1457bc6721c861788d5e1fa5307a9ace4d4a2e4329d33

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\resources\app-update.yml
    Filesize

    125B

    MD5

    44f0945873edd6b0f610e2887e43a5cf

    SHA1

    988df4c62c8696aac8589eaffe2f327799d80ac9

    SHA256

    3ba8bda1652651ffddead80bdcd163d4e448b3b5fdffa2d8e489ed71e8785d06

    SHA512

    1c93d89e9c738c7d97b71056776da440b71130c2620190b08d69924b28c8f9e5fd69c41739b6a56b1cb5c8178adf17ad2ec774e3258cfeaa739c2c2accb73cdf

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\resources\elevate.exe
    Filesize

    105KB

    MD5

    792b92c8ad13c46f27c7ced0810694df

    SHA1

    d8d449b92de20a57df722df46435ba4553ecc802

    SHA256

    9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

    SHA512

    6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\snapshot_blob.bin
    Filesize

    261KB

    MD5

    9dfc22c8fdc4a2420879a2c4ef9848c2

    SHA1

    f539e4e09e6f7b8edb2b539434db5fba1e80ee96

    SHA256

    721b2fe7c122bca5b8b7819cc7869c33a35384eb79da03a263dc792ce3862e86

    SHA512

    92c45bc4aa29288a13f569c0c7b4d67eebd5c80803f4b795737cbdc6978a9738ba4e4b06541033332c57bf8ee045c396b87231c9b60efeed04e98e1163cdc7c6

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\v8_context_snapshot.bin
    Filesize

    611KB

    MD5

    c4f8d4e932cd5cf482d5b5711b97c593

    SHA1

    449cff36ed3f87a064fd4954f1cdc51e49ae9d0b

    SHA256

    6e35a8d61b211828e1d3669702d6e96770d60a07085c983a5939921ca6341319

    SHA512

    01fc6b6a9e3dd8c5446e92251063256dc5cfa31ace693af2a4bbd14063863b5824768cdf4ac590ceede4e66bf5a9cd440fe8a2daf87f2a9fab22e0a8e6e7ca71

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\vk_swiftshader.dll
    Filesize

    4.9MB

    MD5

    50b9e79c8d4b88c3d8ff73339e168ada

    SHA1

    690bdc28d28a0e3fcf1c961fe9dfbcb580f9a2f6

    SHA256

    135d4f43b85fec0691df0150c924f4ca8c64b0ced0250da0ebc083704ef11f7c

    SHA512

    34ddffb63abf425dee5cd1eb2ff96e8ab7352886e473896923fbc0c7fafdb30432117e5622fa1cf0c71ac445f820ac0ae1a620b8a67752a881f9d3304efd242c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\vk_swiftshader_icd.json
    Filesize

    106B

    MD5

    8642dd3a87e2de6e991fae08458e302b

    SHA1

    9c06735c31cec00600fd763a92f8112d085bd12a

    SHA256

    32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

    SHA512

    f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\7z-out\vulkan-1.dll
    Filesize

    931KB

    MD5

    c933c4ef042148e9c164b944c97ee402

    SHA1

    0e8a803c1cb3bbad4cfb4406070ddeaa9b6df4b1

    SHA256

    04f62f822a5e78a67dd0918b5c32163f7a06abeb4ef4bf8462e37aa469538a68

    SHA512

    cbb4fad63409c1d9c9993676cedc62264543b4bdd0e31171ea82d2dc179b606723799b4e5fc247c2960663d77dbc1dff37f05685676f9c6aaa0f9ec3d59b8978

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\SpiderBanner.dll
    Filesize

    9KB

    MD5

    17309e33b596ba3a5693b4d3e85cf8d7

    SHA1

    7d361836cf53df42021c7f2b148aec9458818c01

    SHA256

    996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

    SHA512

    1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\StdUtils.dll
    Filesize

    100KB

    MD5

    c6a6e03f77c313b267498515488c5740

    SHA1

    3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    SHA256

    b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    SHA512

    9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\System.dll
    Filesize

    12KB

    MD5

    0d7ad4f45dc6f5aa87f606d0331c6901

    SHA1

    48df0911f0484cbe2a8cdd5362140b63c41ee457

    SHA256

    3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    SHA512

    c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\WinShell.dll
    Filesize

    3KB

    MD5

    1cc7c37b7e0c8cd8bf04b6cc283e1e56

    SHA1

    0b9519763be6625bd5abce175dcc59c96d100d4c

    SHA256

    9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    SHA512

    7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\nsProcess.dll
    Filesize

    4KB

    MD5

    f0438a894f3a7e01a4aae8d1b5dd0289

    SHA1

    b058e3fcfb7b550041da16bf10d8837024c38bf6

    SHA256

    30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

    SHA512

    f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsh4B14.tmp\nsis7z.dll
    Filesize

    424KB

    MD5

    80e44ce4895304c6a3a831310fbf8cd0

    SHA1

    36bd49ae21c460be5753a904b4501f1abca53508

    SHA256

    b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    SHA512

    c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
    Filesize

    2B

    MD5

    f3b25701fe362ec84616a93a45ce9998

    SHA1

    d62636d8caec13f04e28442a0a6fa1afeb024bbb

    SHA256

    b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

    SHA512

    98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Stream To Earn\64c4f51a-9c74-463b-a5e6-9e5fa9c8da17.tmp
    Filesize

    57B

    MD5

    58127c59cb9e1da127904c341d15372b

    SHA1

    62445484661d8036ce9788baeaba31d204e9a5fc

    SHA256

    be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

    SHA512

    8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Stream To Earn\Code Cache\js\index-dir\the-real-index
    Filesize

    48B

    MD5

    b84b386d900a576e3604d343063d38d9

    SHA1

    2e996eeba0602765a8323b7f9fe6885778755259

    SHA256

    7567f577da5985e5345eaa665f3f0d982c06fd82056a1c3d4f469ae0d9aea0c9

    SHA512

    202c179ed5dc46460ca2d396cecb760d6e30ab7a08bfe246c8afa8a9766adc9f53ad463b11cbfcc6f3342e4013623d2d5e11ac807a6298f2685f51cdc84d2133

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Stream To Earn\Code Cache\js\index-dir\the-real-index
    Filesize

    144B

    MD5

    78e999868b7d5c56fef8ef78df676bf9

    SHA1

    efa75ee6246b4440ca4b9775346226afeadc48db

    SHA256

    6da731f4e2bee98f3e627ed44ec84c708a4badbdd67aaebb3eba4ce36f633441

    SHA512

    22717155be2169122d74104f0651568340c66229df3f4cc2d87e23869988765191a108f27853253bf0252e73e40396a9d529762b85a4c635ea7b33694fd8d81c

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Stream To Earn\Network\Network Persistent State
    Filesize

    1KB

    MD5

    cb873f0fb5261480e0f2ec062797aaf0

    SHA1

    ed00e122f506bd01ba125f4abf85a98050eba489

    SHA256

    41b46d2455100456b99f653e6799da13a361ecee3700a4a2dec8f02f148d6ce2

    SHA512

    cb2689aed4c5c9c41bf72de89eae3e6789c3266e327ce71f60e2d3da29f90b47062dbae845712e3ad31b4badb8838967804d5d5dd2d960daec219b103fd33ff2

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Stream To Earn\Network\Network Persistent State~RFe5882f6.TMP
    Filesize

    59B

    MD5

    2800881c775077e1c4b6e06bf4676de4

    SHA1

    2873631068c8b3b9495638c865915be822442c8b

    SHA256

    226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

    SHA512

    e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Stream To Earn\Session Storage\CURRENT
    Filesize

    16B

    MD5

    46295cac801e5d4857d09837238a6394

    SHA1

    44e0fa1b517dbf802b18faf0785eeea6ac51594b

    SHA256

    0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

    SHA512

    8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

    Download Submit

  • memory/4688-820-0x000002C1415E0000-0x000002C141602000-memory.dmp

    Filesize

    136KB

    Download

  • memory/5912-877-0x00007FFF28F10000-0x00007FFF28F11000-memory.dmp

    Filesize

    4KB

    Download

  • memory/5912-878-0x00007FFF29390000-0x00007FFF29391000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-922-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-921-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-920-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-932-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-931-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-930-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-929-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-928-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-927-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/6100-926-0x00000197390B0000-0x00000197390B1000-memory.dmp

    Filesize

    4KB

    Download