Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    19s
  • max time network
    141s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-es
  • resource tags

    arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
  • submitted
    05/06/2024, 18:56

General

  • Target

    GDLauncher__2.0.9__win__x64.exe

  • Size

    111.3MB

  • MD5

    02cb50dc6c2d8a0b158397dbb88364e6

  • SHA1

    a47c3b438761d74f0b6f5881286578f4cecd24da

  • SHA256

    42ad279878792b976f051847fc40e8b31fb4a043cc440455fca28b8f9a252271

  • SHA512

    62d87a1b097578e8c5807b5e993699962cedaf39d574bf22aa987ba723c782d139092860a049cbe5f1074926a11893fdfc7b8b8fa5b599a7f52dc1ca0e11d7e5

  • SSDEEP

    3145728:Ise4/oxf03ZRozA76omzShIsS3sklyK6XllaG:44/YsOc6F6IsS8k81aG

Score
7/10

Malware Config

Signatures

  • Modifies file permissions 1 TTPs 1 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 15 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of WriteProcessMemory 40 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GDLauncher__2.0.9__win__x64.exe
    "C:\Users\Admin\AppData\Local\Temp\GDLauncher__2.0.9__win__x64.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4688
  • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
    "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks processor information in registry
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2848
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4612
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
        3⤵
          PID:3568
      • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
        C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\gdlauncher_carbon /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Crashpad --url=https://f.a.k/e --annotation=_productName=GDLauncher --annotation=_version=2.0.9 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=28.2.5 --initial-client-data=0x414,0x4d8,0x4dc,0x438,0x4e0,0x7ff65d8bf648,0x7ff65d8bf654,0x7ff65d8bf660
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4272
      • C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\binaries\core_module.exe
        C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\binaries\core_module.exe --runtime_path C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\data
        2⤵
        • Executes dropped EXE
        PID:4172
        • C:\Program Files\Java\jdk-1.8\bin\java.exe
          "C:\Program Files\Java\jdk-1.8\bin\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
          3⤵
            PID:5284
            • C:\Windows\system32\icacls.exe
              C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
              4⤵
              • Modifies file permissions
              PID:5396
          • C:\Program Files\Java\jre-1.8\bin\java.exe
            "C:\Program Files\Java\jre-1.8\bin\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
            3⤵
              PID:5464
            • C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_130375\java.exe
              "C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_130375\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
              3⤵
                PID:5636
              • C:\Program Files\Java\jdk-1.8\bin\java.exe
                "C:\Program Files\Java\jdk-1.8\bin\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
                3⤵
                  PID:5808
                • C:\Program Files\Java\jre-1.8\bin\java.exe
                  "C:\Program Files\Java\jre-1.8\bin\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
                  3⤵
                    PID:5004
                • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
                  "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1888 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
                  2⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:4168
                • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
                  C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe --type=cs --cs-app=GDLauncher
                  2⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:4428
                • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
                  "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --mojo-platform-channel-handle=2176 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
                  2⤵
                    PID:3328
                  • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
                    "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --app-user-model-id=GDLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\app.asar" --enable-sandbox --first-renderer-process --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2560 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --skip-intro-animation=false /prefetch:1
                    2⤵
                      PID:1304
                    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                      powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      2⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:2476
                    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                      powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      2⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:5004
                    • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
                      "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --app-user-model-id=GDLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\app.asar" --enable-sandbox --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3432 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
                      2⤵
                        PID:984
                      • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
                        "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --app-user-model-id=GDLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\app.asar" --no-sandbox --no-zygote --node-integration-in-worker --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3624 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --uid=dibeihhdinofpmiennjkclnoidpjakanhclfmpmo --package-folder="C:\Users\Admin\AppData\Roaming\ow-electron" --app-root="C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\app.asar" --muid=be1eddba-b706-993a-4e05-708de5e6096a --phase=41 --owepm-config="{\"phasing\":100}" --js-flags=--expose-gc /prefetch:1
                        2⤵
                          PID:4624
                        • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
                          "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --mojo-platform-channel-handle=3900 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
                          2⤵
                            PID:2300
                          • C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
                            "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3436 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
                            2⤵
                              PID:6128
                          • C:\Windows\system32\AUDIODG.EXE
                            C:\Windows\system32\AUDIODG.EXE 0x2c4
                            1⤵
                              PID:1900

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\ProgramData\Oracle\Java\.oracle_jre_usage\905ebba3a8fc8cc.timestamp

                              Filesize

                              50B

                              MD5

                              ab4e4f0faa25f74df0dff79cf30a6723

                              SHA1

                              91748033e681d05b9f3cc4165dea6ba0eee5dbaf

                              SHA256

                              d34cfbee8c59704c094896abf84918c58ea22eefbbe8779a1b5400f07946ee90

                              SHA512

                              00517ca33aa244522326b95c49b33b0fd51d3ac8bb336374349299085b374242dff2a3ee6059efa1598224be419c1b594f4cdf4a44fba13d0edc6637cfa04448

                            • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

                              Filesize

                              3KB

                              MD5

                              ea6243fdb2bfcca2211884b0a21a0afc

                              SHA1

                              2eee5232ca6acc33c3e7de03900e890f4adf0f2f

                              SHA256

                              5bc7d9831ea72687c5458cae6ae4eb7ab92975334861e08065242e689c1a1ba8

                              SHA512

                              189db6779483e5be80331b2b64e17b328ead5e750482086f3fe4baae315d47d207d88082b323a6eb777f2f47e29cac40f37dda1400462322255849cbcc973940

                            • C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

                              Filesize

                              2KB

                              MD5

                              80ef418749393790b80930b9d1b1ed38

                              SHA1

                              baae03cf53c24cb4b4e16618f69dd770e75b17f5

                              SHA256

                              a9116390b696f61a4e6fb4887cc9e1cd896c2dbdc92693d247ccaa3ee590cfbb

                              SHA512

                              935c42409d95d6e35082cdad292e85d938988c5957e05b81c7473ce7b149457b3d47047c1eeba985d4b1f87b240cdb426537989d4dbf2621143c2090df2abcd1

                            • C:\Users\Admin\AppData\Local\Programs\@gddesktop\chrome_100_percent.pak

                              Filesize

                              128KB

                              MD5

                              0fe2a515b62e22bcc448f07e4e47af0d

                              SHA1

                              c1d2a26d66fc50552fbb0e877b7eca3b1811e6c8

                              SHA256

                              8e67853cd70eff301a58b2f5e132e227cdb24f1fb093f5cf2166f4408663f55e

                              SHA512

                              cb8279f709d27bfd8aefa38c900ba313be1ad0f746d90813d1fccfe2eaeff16b7f1ac8a74be77643e7e5051a2c0d634cde8301f657873148932efd849f96fc55

                            • C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\binaries\core_module.exe

                              Filesize

                              448KB

                              MD5

                              60f7345ee9c5af722bda940b154c6b22

                              SHA1

                              d261e9a5145c8b987d2f918a447b35e87b6558ff

                              SHA256

                              9906348c59f4d463307c5e7990c162011d4cab31e604fc605810863417d28a21

                              SHA512

                              2474ab1dc492782c694649eb1a5190e8801ebaf981567f7eeaa32bb77d8cf37fb6271bdb8df79ad76463879e0c3bb9ebac5876ed642785dec8c5859b05d652c6

                            • C:\Users\Admin\AppData\Local\Temp\JavaCheck.class

                              Filesize

                              1013B

                              MD5

                              8098d31488cd52db41f95188b9daed5e

                              SHA1

                              76988b607c667c86211fe1dfe57ed4aedacc5691

                              SHA256

                              c607f5871610bf9240c75f4abe947469496570b380f670e9d8d09f9c785978b5

                              SHA512

                              e2b4c54e78daba4a04d17915eded43a3f59a744108cf28baf4c22545d807338a39de052d69243ce610981b930e49790ba8be0f7b370e042a9526ef09e2b9fb78

                            • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_02wsr3hd.icv.ps1

                              Filesize

                              1B

                              MD5

                              c4ca4238a0b923820dcc509a6f75849b

                              SHA1

                              356a192b7913b04c54574d18c28d46e6395428ab

                              SHA256

                              6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

                              SHA512

                              4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\LICENSE.electron.txt

                              Filesize

                              1KB

                              MD5

                              4d42118d35941e0f664dddbd83f633c5

                              SHA1

                              2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                              SHA256

                              5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                              SHA512

                              3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\LICENSES.chromium.html

                              Filesize

                              128KB

                              MD5

                              3c433301aec5c2254575d7e304a4ec6b

                              SHA1

                              9fdcf74a5502845115bd5e1f0e831076b59cda54

                              SHA256

                              531f07e876732108cc75d7dc36bf7cd6e9f9d59c3aa183f39af6d17c89b25969

                              SHA512

                              198c89a65e2ba42e5edcdf277de757929a44b58ddb5901735cfa412dd5a24c8ae13b11c310f99b2725b5e5437413e4a3fb14a094ae11c4cb2566db468a9016b1

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\chrome_200_percent.pak

                              Filesize

                              128KB

                              MD5

                              d9ca2c885c1db6b5d41e828fa5ec8a53

                              SHA1

                              943d16942b4588844ef22af64139ac25d2a4492c

                              SHA256

                              4e7b6c5e28a255df0efb07443c444aab8713ab7275020b9f046164068d4a8fd1

                              SHA512

                              3ca2a86cb53fb2ef026adebe629663b9af796c12798043db537e3809764deb71c5d0c65ec17c247d0d3ec5f1dffe396bf168d76f3d069a2c1a54d4e1635ab1e1

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\d3dcompiler_47.dll

                              Filesize

                              128KB

                              MD5

                              194744961312b41729883d288b26ad45

                              SHA1

                              c7fbd5ae7f1c376a9bf26b6d3a861a5493aea9ea

                              SHA256

                              2b07fed22fdd46869b1a19490ba8f19ec81a8ef3a5dd9853ea9e6ba96831c845

                              SHA512

                              3dd8d534246f5fea157f130a62444db3dd7f6d2535bc8be88a31f7c39057b7f86a601ced74c62c138bfcd22cc9a1233a58a4e4169c2dfd0091c8645008b4097c

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\ffmpeg.dll

                              Filesize

                              128KB

                              MD5

                              6c865c2d6173622e40d0f489ca59ee39

                              SHA1

                              c42417f803bfbd0a025b22015b6d76b39a50cbeb

                              SHA256

                              8955d9eb271593c71e4ba49c2883647c6a0c32da464f81a86815342a7592ed70

                              SHA512

                              1270bdd2bbb50cb6b2939845c5bb649115a770070a070de36e05b94b1b08ba4da1d79f21741907e1b2df8056f1b4acf9fe722f42b3aa73bb1ef34484fd40744b

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\icudtl.dat

                              Filesize

                              128KB

                              MD5

                              822e42028a9bfdb232bbc50d54ae9094

                              SHA1

                              c5846b517aa12f4c1f4039e557134b4a93f7243e

                              SHA256

                              63b14ec7f150458f9bb94f0d839bb4c03ff561fbf7dcb30ac01f247465c64def

                              SHA512

                              08ccfbe58a411fcbb93364daaf4e8ad0c6547c71d976047c7b49c00a7c24abaa3182a8b743d2d02083065ff55581130185a965b6905c1eb05b5efb5f6f183683

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\libEGL.dll

                              Filesize

                              128KB

                              MD5

                              2138d2855f6e30e8dbe754e298a44d62

                              SHA1

                              d4e3439a6406176b564e1e4d8989547c75bcaa25

                              SHA256

                              2a575cfe0db6dfdb887ba764a45d8f78ee3e8801445bc04fc80b9b838ac52996

                              SHA512

                              064d6e0a5cea06771cc95ad48ed03562bc6acd642a1e2dc5362cc986cb73b605f98b28125a17efdcb5313b8eb5ae22e23ab90b5278d095e18ddebbd54e443afc

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\libGLESv2.dll

                              Filesize

                              128KB

                              MD5

                              23bd5414de4b506d2fb6dd00ee2edc12

                              SHA1

                              631eb57c2f23fc4dcb7b7cafc25dc9f88545048f

                              SHA256

                              6148ba105ae17634a9b2a1b29c35914079620615f36c1170d7166f78d04f46bd

                              SHA512

                              1ef13c3e7ccf128ed3ac79fa530af9a357a730ad648b11ca6696ffc82857cc9b437e39703a7f7ed83952f33864b61653f0c33fb7e058fb56ffc4733bc29d8672

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\af.pak

                              Filesize

                              128KB

                              MD5

                              0d16244dcc2545bfb66047b9cd7959ce

                              SHA1

                              d8e67263a89cd9192955333ffd138cb7f00de139

                              SHA256

                              57ee87147f05c745c8947947f8e5c14279d04090c97af2c225fa22622a7c007a

                              SHA512

                              4b5d77d86c0d54d8f2afd57c9b50b71853a04682040f4fd55d9bae3d74bb6c20d6c027bcd3a27cd1ba47ad6f03463cf578c505424864eec2871c727227647627

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\am.pak

                              Filesize

                              128KB

                              MD5

                              62b9359e25de17964b6eb3cf0b124012

                              SHA1

                              c04155335c886f968859322a456df2915e2d1d38

                              SHA256

                              14766f32a15fd176d9e0221366369d88e08df6141da452c7590d1fb4fb2c52aa

                              SHA512

                              07ebf570d761bcc7baa0b900b1bd3e93a54c76aa46c9347abd6fe69832d106db97e6921d2c7e1cd4009ff500197328fe2e8a3cb92243c6be1f8e59534c114e2c

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ar.pak

                              Filesize

                              128KB

                              MD5

                              f0ffdcaef6b8e5b8d1aa0840ca2617d7

                              SHA1

                              2d7a143a098b6e39b92cd6441b4839ab9832c06e

                              SHA256

                              706c34c3d7c3141612750ea3d2ffab8019377030e0a101735bce9212dbb37280

                              SHA512

                              2a38698e9e0449ec1ccb733cdc3a5703b8be69e922c77e8b934975a2c9f5ee8dd463f006bfd83a32c1a2a15dbd3399f7b87c3254e6dff5976571d2451eae6980

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\bg.pak

                              Filesize

                              128KB

                              MD5

                              93073bb1cb526e4b598c301acb436393

                              SHA1

                              4d381e17264c402023d31162e33e555837d7120d

                              SHA256

                              20096f49b74fc209531ecc8a66a95d18137d207033ff37c17cd4f5b8570689ae

                              SHA512

                              792224c66725056740b43b11401f2b13997d8199de4b4fd884076d74e53fda35083ba6636fe8e07729d418cdc749759de7771ed7790974165086326adc415056

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\bn.pak

                              Filesize

                              128KB

                              MD5

                              e6406f3b62fc05eea06f895676562a6a

                              SHA1

                              ab2316577c2fb34de4858ddf0c51198507039ee5

                              SHA256

                              e00bc025d66a77db1c4f9b38e78bae5374a6e177585794146db1679e4e72460a

                              SHA512

                              8540590fb14c27bff524a2a9c1964855d32d6aeca352e728571aee04ee6f77919b99535d46e44b5b289d67f678be18b2f9783183460f4f5dfd50a1d88b37bbda

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ca.pak

                              Filesize

                              128KB

                              MD5

                              d04fa7e18d1dac8022430281dc24bc5c

                              SHA1

                              ce997b9996ba5a6545b4299db1a5ce210c12944c

                              SHA256

                              d4970e55702c5dc424b2f80a16800d08b88ef2ac0311b7932e3628a0a09c8128

                              SHA512

                              95884ab47dd0a47eb099854790a3ba3da17abf039f99ed7d9cfb47f9d9708ccd3a9a85ab6c5d490a75d4223544970d2c3ba693dc78ce230b31193f1ad6d59acc

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\cs.pak

                              Filesize

                              128KB

                              MD5

                              2926d8217e5bdf620e0acc5fe1a8b8d4

                              SHA1

                              a060367469671ed8cfb374c8e526588b70cd1221

                              SHA256

                              62bca1c078936043364783b6f73e34b61cb093344d8a72bf280938150ca1bee4

                              SHA512

                              e3724b8b6434c431c1eae0a904ce9a0eb5f045771f3eff8f56d8e23164790db29fbba0beaab78aa1fda6a498c37bbebb07180b7c2d58a02275a8e6e44f238bc9

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\da.pak

                              Filesize

                              128KB

                              MD5

                              e1891c924559c03cab09fb3e7da87fa5

                              SHA1

                              413bbae20e8b184b013808f2898257dd0c4864b0

                              SHA256

                              39d41113280d8d8121eec4dbb02c2a9be309e544acdd972e1974f79e3f7a1de4

                              SHA512

                              85facbb804cd9d9ab458b8c84b96a645a0430eebe7b7fedf6422ead7d63fea64d7d11dd434422d8ab191bf1fea21e9b69cd4497722a12d6a132359739eb0ab56

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\de.pak

                              Filesize

                              128KB

                              MD5

                              e9d79c9be26d4253a6dff9fbd3b016b7

                              SHA1

                              6e773d335f4595072eeeac7c19e9ebd984b69dba

                              SHA256

                              5579d8ce1013795e97594b9fb33d33985bc174ea319103788b0160346d70ed70

                              SHA512

                              1365a80fe7538ca41bef391c0fde56108569ea05629adf19b16f5807a4f3d7d05bd3f8d6c0503c4403b14cfefd81f358f54f70164880e7324fda825617b04340

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\el.pak

                              Filesize

                              128KB

                              MD5

                              39f598e37680a62d6a850c17cb91d326

                              SHA1

                              146e291304c9c14cd864431c0fdaebfd5b5abb8a

                              SHA256

                              00c66ee3218ab7fa8c9bdb019d207e6853555fca386735f8bb1f74a846329ffb

                              SHA512

                              7112f7266cc730ff16bc0d4c1f5ef341b2989436ae962a2e2d4beae885f3bcdd1f455081ce3a284750f66bad4faa859f38d3fb07cc88776456b2419d964dfdea

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\en-GB.pak

                              Filesize

                              128KB

                              MD5

                              d8e6702165e00a6fe67db12d6874ba9d

                              SHA1

                              fd000a3e01be1302f13036f052fee09f3d02f8af

                              SHA256

                              c7b014efd7223b8f51c2f8a2c3ed3a5e23e9aa44c2307f9c16666f1635db42c0

                              SHA512

                              214d9084ecf128d6a6d2e406c7bb45e532becbe65e39bc219ee8f2cab8f16bc4ad5112bd8d01838c74ad2d5a4b17ed6f5ab668e30c74edf21191cbcd0d9d5742

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\en-US.pak

                              Filesize

                              128KB

                              MD5

                              39b9fd6656e0888899b1d3d72c3c3b13

                              SHA1

                              978817fd39dee7076e642fcec8a24a96d17f7228

                              SHA256

                              1d6987fe1564e8df36aa19a63005809a11960d634b6c34b0292cd60bd2873d7c

                              SHA512

                              7b019499ed1682baca8c0557e5908bdb3c2f330c5bc6d4a7d560b3dce52c7ee4ca981382240d9057ee25811e25ca612900bb8ef692e71555b1a4e5b8f291128f

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\es-419.pak

                              Filesize

                              128KB

                              MD5

                              0d4049238974be84ba0c7a7640322db1

                              SHA1

                              faf0d7385a223d99d3f44a2b91266dde2e3cb56f

                              SHA256

                              65210f1edaf27caba88a73e6d4348f6bf488775d0263a72a39f06d96a16d8eae

                              SHA512

                              6a59071660975cc034e713dbef578a74489b7e85e38ca827c0f9938db736427c3c56948f20b3b64c35cae5ff64525eb7e2d76d6d48d8a1263ba5fe873e8b7333

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\es.pak

                              Filesize

                              128KB

                              MD5

                              da6ad5e14530046ad7b6cbb82f53310b

                              SHA1

                              1ac18a7340d07662a3a0d3dcbdf39ad5a2bd6a0b

                              SHA256

                              4656452f891c99ec24b4ee04e9bfe28881735b17e19c6bf68949b169fff18b3a

                              SHA512

                              2aae49e835a9136145c805a3a19d31e778283ea7b966679ed0aa996a2028ccc0de9df18a37949773a5d2d34dc3405bd4d4cb1e1e8b53cc6f58893fd62bf9227c

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\et.pak

                              Filesize

                              128KB

                              MD5

                              48e2f898a9b8fe95b5d6cb2d5174b81e

                              SHA1

                              cd88ea74fdc25dca46a33954963b4106626e3b3b

                              SHA256

                              5b30f5aad9c101a3d95e1bebccf512f4ed71227f52887459a8add3e866642bae

                              SHA512

                              9a0929ab016e86a9d44a03e39f8277403f20b70f97790ef648b8326bb6db3fdf0f7174ff30149558eb2c887b8645c348aeb0440ec48671d9c618ed7f6ac044d1

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\fa.pak

                              Filesize

                              128KB

                              MD5

                              2afdeedd32a32e79fb1e350bad74e163

                              SHA1

                              bcdab283be2245b56f5e83c843991fc4e2af17c0

                              SHA256

                              08e4fd86f3229a5f40e3d611442d3340ac9427f00c6471a351ba00202533e86b

                              SHA512

                              8ac632fab99cb8c8822e2c09a0efe44f9ba33bdfe851f1c57dd303a513a85d650bc9fab87a76894608709777d8eb955eed1842c0d8aa11e701e5f1a74ff5abf4

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\fi.pak

                              Filesize

                              128KB

                              MD5

                              d5170f0831d322945a56c61100de331f

                              SHA1

                              3c44647abbe680f32294e910a68edf5290eb198c

                              SHA256

                              77bf6c20c5492f574fbeba84b6092ce3d225a645591ba079a78b74039088989a

                              SHA512

                              9086e4a747793ddcfe9770b05eeb0435324a80a0896f31b6db2d4333e3186323de81fe35b09cba000d0035150ed91e296c8b7ea3577aaf410cb8fd375cf1bffa

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\fil.pak

                              Filesize

                              128KB

                              MD5

                              b914973e55b6fbda227effd783c45e13

                              SHA1

                              aade93c872c6bb41f695ae051c0579f154bbb9c9

                              SHA256

                              7615684c3c9d3564828fd065db3889f2de86f46a5783917a5790fa236963bf7e

                              SHA512

                              db9591522e7cc634b7440966caf08711f6b5643a2a34f0ebf8c88dca6d2e227871f1df73630e166704831c5e4dac5795387f4a29b68fd2a676c0dbd59666c633

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\fr.pak

                              Filesize

                              128KB

                              MD5

                              95f44184ffc3ad781f57187166b44f6b

                              SHA1

                              0733e0a26b1e3661e056ed24d1d395873b774d58

                              SHA256

                              dd746f2e61bebcca3823be8940c5e7a5b534ea16f3d0c0a4ef30c9612ebffa29

                              SHA512

                              99de236386305bc5486ab680114364fcbf3493b7ca5afeabfbdac92995aa0a480f560a32c85eb317b84a9e83e06ac3740e6a39eac34723a5fb4ddd51127d87aa

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\gu.pak

                              Filesize

                              128KB

                              MD5

                              1557602946e1144117d521671f1ec8f5

                              SHA1

                              428646880091ee14265b889c81f1c0162a77dd09

                              SHA256

                              b86fe2bff133830c12cc986ade0c392bf2c85a7d9581e53e14b724a1982234ee

                              SHA512

                              a6664374680d8167f5e7e0d4d9ce7901f1e22176ada29a9a291e6f9e01f90c672597a015f0c0fc3ace237b197796f339f4b22d0610fb77afdd3990d760fb3d8b

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\he.pak

                              Filesize

                              128KB

                              MD5

                              43ef6ba4245d201371ae18bf36621d30

                              SHA1

                              c99f33ab7a1361b335419cec4fc3ecff5e23ab64

                              SHA256

                              e20c6dec2ddcdd7c0ae1173a80d6f4311d05e7ac008d318bf57289f514d91ed5

                              SHA512

                              302956dffc2e098a5ac828e3b5726c5878ee54c88c61d2fddd9f706745194f5536f8da21b54a0970546d327be14c5aa40c84dcd49df2bcd8efab0eebb23c6bff

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\hi.pak

                              Filesize

                              128KB

                              MD5

                              513c7a372949c1712eee07996fd33a7a

                              SHA1

                              d177d9cd6dc2ba3e4cb3e95239e7eaa7254e0100

                              SHA256

                              27292b3a1ac2a7066eef2fb613b368b6ae13e4b39043ad9a5dc1def37049813c

                              SHA512

                              6aecd94fb321d484d8d756efa1b6a5e5e529a2878bd48de8c6e7587eaa8f63cd040c2f60378cf5e7da8fd8a63bf920ee8509b14d9cc934e6e3c3591130becdf2

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\hr.pak

                              Filesize

                              128KB

                              MD5

                              1cf3bf7efc6807251b7f62910c65fc28

                              SHA1

                              e02248d0209dd503644cd1f1a4a99f7e0b811382

                              SHA256

                              012235b7b890239f0c81433bb685877f40ede086f321d8b56418f38bfaad6943

                              SHA512

                              633c2dee6b8cefb2a07f357fa75beb2f96d6d40ea7c6f2b95a07ba846a746afabe631ebddad42047656c533ee44c6091678507d9cdf8bbc7531428194fd53418

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\hu.pak

                              Filesize

                              128KB

                              MD5

                              206ea5e377d024eee2547d7a1c807800

                              SHA1

                              8e9f6d2a5dfa74e589817aa794e1ed50163a9e0f

                              SHA256

                              b81255b4ded93302cfd191bf5357cb9e6851ab815b23871799ce54da75472ff0

                              SHA512

                              267f781dd6669c8cf291f3859abbc60266bed6ff0858239bf7e0fcbb5ffb3ba896bef2a597e49b34f66f0d6f8b140b2722657a3e74a7b586f7fcaa21d8ffa7fd

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\id.pak

                              Filesize

                              128KB

                              MD5

                              3bb64a4a73235125fcb8af055bed40db

                              SHA1

                              91b0bd2e518f8f2f4864dceec0e3710d8e86070e

                              SHA256

                              937081c56ca6b711d2c42999d76ff4038af1f9e50dfc36ed6d69e50cd2e54e4b

                              SHA512

                              c27a8c81d562423b11aee45f5f27edde7e28e10a817bd23beed8956c0c382e379f18199279d3bce9d1d2ba19ebdfb3f46da3be8954e8e5cf7d2fa3bf0659ea48

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\it.pak

                              Filesize

                              128KB

                              MD5

                              dfc209fde9a4ae4e621a32fa8a19fb8e

                              SHA1

                              aeb894b4099777002c114f5f92f7cd6eb18f78a7

                              SHA256

                              b3d236e590289c1aabfcc7296976a0093288231f17ea7fd5dcac8db8b5e715a4

                              SHA512

                              e046f9c86e4b8ffb765371a98190bda282f10334e52cb3adab937983b4c5f30e3330b3ff6ba450034f41a747e90a57ad466b70c305b878b1faf58cca80963d04

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ja.pak

                              Filesize

                              128KB

                              MD5

                              e432000e4b0def8924b39879fa8054d1

                              SHA1

                              0ce3bcee45823fae70bfae9e24b15c2e3f218967

                              SHA256

                              8fdc72f63f645e96fba11eb74ca54ba549a15f455368a39544f66f35c06327fc

                              SHA512

                              96f45c3f4faa003ab46146a750ca49bf1c19830173551acf2c8336a1b97e7755afd563232867acbbb84244d19b26434713bd8cbe7e68c33356e7ef94c208b5e6

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\kn.pak

                              Filesize

                              128KB

                              MD5

                              a584313c3f97092b6a970f58451de0d4

                              SHA1

                              f6eddaf4de4b5169443f86ee248edb741af486bd

                              SHA256

                              2268a81d47a969ab6d9e9c8fdd692206f87cfb1f69169b325c7aacac68b5090f

                              SHA512

                              440578d7c7b082a96f7429f78a279f68bdfa50f4f61f05986a0c33f3233a611ab223ffd0c6ff8dd484c703cd295268c63f4da39325402ebf007a025cbce0d30c

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ko.pak

                              Filesize

                              128KB

                              MD5

                              a5849ff2d9b1e19fc4db2661f00be97e

                              SHA1

                              4519a6e6be9058088c9226d0f2fa400526aebc52

                              SHA256

                              2fed5fd8c8cdb65da453af50abed84b3f036daa360a7fffedfd87879c9749221

                              SHA512

                              e8b165cf4064de1cea89f3cc12bfa23dea5e48cfcca6f315a261b0312eb08d5ed078c962f18cf93f80e5d7812f69007564e06d5b23d0c4cfdb7b9a3635afbe48

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\lt.pak

                              Filesize

                              128KB

                              MD5

                              0d5e4d75a17fbb32f8e887b3257198e5

                              SHA1

                              6bfed696b9c9c76aad928df7792f483d08db30c6

                              SHA256

                              40134e8ab492b18d6c1f4f911023b3800b513e1e48fdee9602563c02162ba9f3

                              SHA512

                              5fe19ee19f50c02d5e500636b043ae6b0fa4cdebf10012a2c821a3f30b7ce6fb08c10a28ff1dcf358675d152110dc1a6370a9045b5ac5307b4ed1fa1bbd36c6b

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\lv.pak

                              Filesize

                              128KB

                              MD5

                              4621ff299dc4499625de11c596382fe6

                              SHA1

                              d67ead34e9c509cb4a18484b8783d8cef7114a52

                              SHA256

                              b282284dd40a07578c700ee3a2f1a30372acd2b9988f8a1484199353767f851b

                              SHA512

                              07e34e3b64851b5d14650f72ce55d744bda4b592290fd50504063677918c2961bf74cde3d92717ae399bce7afe89559d09713d1ecb819e36e8087aee780483a9

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ml.pak

                              Filesize

                              128KB

                              MD5

                              3cf719bf4c0c16a963cc0c1ea8a767d7

                              SHA1

                              9f791e1c538f6883c28bf74ca8fd9620d32686f6

                              SHA256

                              de388a254452b30d4cb60efb8a24f88999508746c060f48a01fc3f41c05e7426

                              SHA512

                              ccb919b0d0125d4774c31f9b27c5e8625e5d0ddf44dd88366fa564bd621b4ab9a757b698a45061000c7ad7b989a5f6a515213316b1a18708bd7b06e605ba2a5d

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\mr.pak

                              Filesize

                              128KB

                              MD5

                              ba211f170a4a37bc91b7c231535cc0eb

                              SHA1

                              5232de1f313e772c72520957ae9b62506dbbbccc

                              SHA256

                              c031a53b52049d9500219b3308a6047625e1e46be0c2a10b09698e74ce9ed0a7

                              SHA512

                              6e27ecb784236a5d58e63cdc96379033d73d5913a3a0017a40ca4f684c275d8a2f84b6fb50ad6b70196ae4cb4f61963c7fb4de23efd37d502854b04d130839ac

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ms.pak

                              Filesize

                              128KB

                              MD5

                              06846feea88ab362a0eb02316d382ab9

                              SHA1

                              df300ca1b0189afa668ed9a70ed72f7648b9bded

                              SHA256

                              68802e6b84b69057cd3720b23ae5626e568e29fc1f0780551bfe73d3f967d384

                              SHA512

                              a063de0cdff9c76b825417d2384c6fa3cb0a93376ccbc308a3f797f5de1dfe2725b7f3618aa5126eb28a85b4094808e176c4f9e9252e5264fa20856090a11e5a

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\nb.pak

                              Filesize

                              128KB

                              MD5

                              d17ff9e4b5af5d95aaf52f257541dd0d

                              SHA1

                              b8e88984bcf9f29499bf1d5074f166d5f06e58bd

                              SHA256

                              5cc3bf76564c5996d7852099f53006a93a3be137bf1c358f0c7218a42ad6bc48

                              SHA512

                              2d279e1fcfced8836a949ec3604b4d89dbab5104151477a9ed02d005d10c6de1efe0afd55113e512ed6cefdda01a2cea3c677fde22e5b04d3c1c1ed9f308ae4f

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\nl.pak

                              Filesize

                              128KB

                              MD5

                              45a17024183e4bc3f8e7c40a0efd5926

                              SHA1

                              4752eed1aa0fabb0190566cebf8beaa4bcd4cebe

                              SHA256

                              a4b946c02b08f26a6454b2184e4f9d670e4e09d871964db4b78a6b9af7abdb0d

                              SHA512

                              842d47dfc53ab368db724ff686c4ae612505ea6e42d3d6668d9ec7c3ab0167b3f5e920a49cff66be02faf1e38522a19a69b10f1d9a364850f12e51ef9817e363

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\pl.pak

                              Filesize

                              128KB

                              MD5

                              3e064b15a82324959ff86de1006780d8

                              SHA1

                              ea8e0a0f29cae10754edc775cad33feaed3b8b93

                              SHA256

                              63e7f0a8df0be0a973be03ddc6d2b55416b73979d0571db80202793b0c814386

                              SHA512

                              b545af1701ddeed07dd07e2a327cc5ee7a5dd3d46a6f28271adbcdaa11eb8d6e54629ae7bc707f799114243e5fd6bef41c6eb8f61d91c353435b56cfd38a3787

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\pt-BR.pak

                              Filesize

                              128KB

                              MD5

                              c72d5a1bd0de6d9f678ce71f7304b19f

                              SHA1

                              694f47156845040b0dcdc58b29671501a769e2d9

                              SHA256

                              32e577856a32abf0cf4617fc403f0c6cee54b80147cae55443079d7f357d5bf1

                              SHA512

                              44c7d6c6e5544154ed5513023951c2c5397292eb575255a10ecdea5ea8593578c87f8ec2f06e60a6aee9e60d082275d0ba30bd533bb9d2e40a53b6181d682203

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\pt-PT.pak

                              Filesize

                              512KB

                              MD5

                              4816d83e54beaa2f94c671d56361c04e

                              SHA1

                              5cae66c0b7079d778ac87ad48777afd85b172d2f

                              SHA256

                              a903ca2a8e52f987e23d040de7403b58d925a6c39668d3bc0822fb2aadd34cb1

                              SHA512

                              0d3a39e1205ce9366818cb51d38db035b80448dc1e2d2d6bbd7d5df693641582043b45b4a78bbf2334159616187dc85a51e623bb6878b1498d9bc7acd2a6ffab

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ro.pak

                              Filesize

                              128KB

                              MD5

                              93357271792fcd757fd9572fcf3cebb2

                              SHA1

                              a5c9dbc1a4056d7ff8bce2c0a94ef39d093038fd

                              SHA256

                              0bbbfdc6e1558d318be0212e7006c702d7b20b0fd5363975065888c72a0ee280

                              SHA512

                              42964c1d8fb8cd96b61ed5929a2bdce98a679d96c59e6759f503b6409c5110c30fae3c99e60cc231a1fc867d2123533047c747b089f1c54ff2bdd55099c0b931

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ru.pak

                              Filesize

                              128KB

                              MD5

                              a726359d7cc0d8eb82d17f12a5de12e3

                              SHA1

                              7dda091c2662ecf36d6a6065f6fe8aff9b1266fa

                              SHA256

                              a8b1a79f77d706fe8a7cb0cfcc10400fd0338880320d935a0a5be6bad6bcf210

                              SHA512

                              3b0a11d1a6eb8f3e958ce2eaafcfe03cd8db018cdb507c7075747979296c31134141d4a20b7dadfd90e73b52cb39258294a81a4df761f6bb24d07a041c46b52e

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sk.pak

                              Filesize

                              128KB

                              MD5

                              49f7305d0cd5112074a3af363e7fb566

                              SHA1

                              f43740d6d5f044c724eb23d78cf9fb44da735011

                              SHA256

                              b0863d99694a95cb567c2891a05ced81cdf0b5537e47787776b5b6fcde68b5f8

                              SHA512

                              ec04c80648be75da90726ed131d2182b25604d746b79c5d9999f11630ad83bb5c974a9ea29c0272375b7b9da9d07bc7a4fe4dc198ee7015d68a224062751f3c6

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sl.pak

                              Filesize

                              128KB

                              MD5

                              9934d655435c851876bf3a1f742a1203

                              SHA1

                              2f90dcaa9e19794afd2f5775d26edcc833f3d83a

                              SHA256

                              1fa9b6b50edd0d76bfb713ff3958b2c1ab701ecbbaaa46aab9807dd89d3d91a1

                              SHA512

                              5b710910122afe35fa8d346a4fc6bd91cc025cd4420fa1d9c525016befb9cf7b35bd1a9cac7fd5bb58d56e2530bebedfda4317d691c5713dd217c1ce42f870bf

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sr.pak

                              Filesize

                              128KB

                              MD5

                              336cdfff7710060fd59a8e4e8d17ad27

                              SHA1

                              58e19ffb642e27b7b8ed3f736fd509a2a03975cb

                              SHA256

                              e4c309ecd0763675c10ba2d9e67b336fe2008b424dabd429c5b8536a30ddb436

                              SHA512

                              dde993430aef35c1f195fff91af861ef6b0217a28983c224f7504bda6cff082bced47239e527daffcb8e02ff4e803d60746d19e7eb1b843701ec9781acb9566a

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sv.pak

                              Filesize

                              128KB

                              MD5

                              9f71b559567ae65afbc049320f3932cd

                              SHA1

                              845d63ff5f19f0b4be4e1c97028fc2b72075e420

                              SHA256

                              40422d3a686a6001e2de1783d12cfc402ab28d237e236d4aa6e322491b4b502e

                              SHA512

                              a14905ba43a719da51b37b2d144a1efb6cc42b2aef30c848c7479ca5f29dde059706a1c3d84eb922cfb910db60517242fc66bc46d77a3acf0cb65eca5913a82c

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sw.pak

                              Filesize

                              128KB

                              MD5

                              d0b803201a0d296fc1391feeba33b577

                              SHA1

                              9c7979e681f49aecc6deadb154248337f2648003

                              SHA256

                              2ba3010a15cc842725ed53a9d7fef3e01d97a1fb8f5ceb05f04443f0f6fa3059

                              SHA512

                              d365950a042538da72b324a055402809b60157f4cc8db7cc59a40c7f32a6afe3334409364694f9be4a942ceda5f5076a273d04e548be960e0237c87abe15513a

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ta.pak

                              Filesize

                              128KB

                              MD5

                              b880e743f86d263544469546c48d9ba6

                              SHA1

                              a6b56ded3ff16c19a6267cb3877f6b3a47516cb8

                              SHA256

                              4294a5d445dc1fb1d963dea6db5ada48d2f9ecc7e71a9b1d416958812ef5c94c

                              SHA512

                              8a257d94a2825fe5b85e89cd43f619e23dcdad351fa48650fe4fbfc16267aff61c2748459084f8485e682eeb1675a594b6c9fe852d3a83729a4b4cdee7d08869

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\te.pak

                              Filesize

                              128KB

                              MD5

                              d043db39d507896d0b2a2083151d0a17

                              SHA1

                              9bc0193944ed48cb619be5db31e03240ed7bbc01

                              SHA256

                              87526e01767bb1ff00848ee069c0c1f55b199264ce55c5e809690d17463ab9e7

                              SHA512

                              902e8f5fdccfcacfd9aea9e5a5d5c24c43427bf0befb34b8da373d70c79028c28fe8f448858912bd3d4e94ad703f8dd6c28b0cb7a1466883031c34b955cac738

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\th.pak

                              Filesize

                              128KB

                              MD5

                              13005450603233fcfa6804c704890172

                              SHA1

                              99ae2d4647353b3d7e7cfa7678c23db60ce1b65b

                              SHA256

                              799cf9c2f5af2413a98b3fc28ac228fea88ba868eac3da6b289d4a2b7ad92d8d

                              SHA512

                              1a664dc0556b8f2de85517e3a200203cafe857600fc6087bc66b367f7c7c10860f3c0302555eecd8afb78b678978f6155a9b00c1873147b07b9a0a4a2369c7d6

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\tr.pak

                              Filesize

                              128KB

                              MD5

                              9346512bac33c76c08344e22e9335d61

                              SHA1

                              09a4f0f32455ca59af9816ef105cd9fac4b24d80

                              SHA256

                              5731d70dc2bb0b6d32a848906c4f151f4686177049b6312beeb78f1aabfe210c

                              SHA512

                              4f213fcde7480a70c2d6a820ea7f91116522d3e29ea039e8b783b8fa13a43d0b04335e4f7112e8a7ccec8c5280b009a6a9a5f5570c272a167b1f16c1f62a57f6

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\uk.pak

                              Filesize

                              128KB

                              MD5

                              ede2335402e980505323bd622ad0d428

                              SHA1

                              d6e5b45e898b63c790b38f711c8f204489239f23

                              SHA256

                              11a70881316b79931daafdbaee627d5de3665dcef4f328a332118fc2d9559d02

                              SHA512

                              664d745207430986474d66db80d96ac828951e057e283dc158e3d43d4b3f71630504c3663df35d74fa28da03d6dd10ba71970ba15024ff732d75708c624d1e3e

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ur.pak

                              Filesize

                              128KB

                              MD5

                              3b68d767df81854c3f12e2928af5f49f

                              SHA1

                              50690981494a02a8f53b67c78fbdd3458ecbd2a1

                              SHA256

                              99c675fb525e9d3c38772c199b6d41ef02589725516447acf23c2564ef25888f

                              SHA512

                              e61c446ae99035b42f9dec8048207791435a3fc6d7f5d1fd9ea7ed0eedad284fc701b0e78f8bd09ecc6e7503d739697debe3d876e9d78458daa66e2d3c922724

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\vi.pak

                              Filesize

                              128KB

                              MD5

                              f612fd41fb6b5dc997958bd37251e44d

                              SHA1

                              d3a092be2358e45aecc0ae193391d453cfe436c2

                              SHA256

                              02ed78715de6126829127b420117cedfeca78c9b25e1ff74db953b6da15607a4

                              SHA512

                              d7214bea09e74fad4dde9d2e416c2c429d0b4fae8eacf4f3be7d36e724659ab71a23d32354f3ef3e0ffa6172d51134921bca0d3f7469165e22822c3ce8d37f22

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\zh-CN.pak

                              Filesize

                              128KB

                              MD5

                              b6f89779ec4b13342e96f1e932f69971

                              SHA1

                              f050400e654d656d4188d297d1c697447be40452

                              SHA256

                              c0e1e83347f375062853078010f88a055d42a1eb31da4fef1888d5d4bd17677b

                              SHA512

                              70674ca75e90ee3c94310e1b826925033e43525ac736b9f7ea2445bcbc3a21d47f3d0ec50d92359d46d0657b37a5d2a7a6676566c48a2287eb232fdb3116802e

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\zh-TW.pak

                              Filesize

                              128KB

                              MD5

                              6ffa01714c7076d46b632fed81da9c25

                              SHA1

                              1fb845beabd987643b8747adc133042ffa7d29a0

                              SHA256

                              f60c4f5a98d95c91e4ae7ea5fc07d40f38bbed73507b2271b9fa87743332b893

                              SHA512

                              73d40b25db5b61821636ace3b4dda0a08e1c196747938927a65c0ba9883ce047305366e184fd851de31fc52ade058485059b91c23f970ca81ddb9c5d1ac9c691

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\owutility.dll

                              Filesize

                              128KB

                              MD5

                              587b71c3aba31f57da386edf72c5db1d

                              SHA1

                              40b4088c1e561440d286ea6bd4ed5c1cb524756e

                              SHA256

                              d0d742afe711bf238d164e3e259c9af23a5be37c83083f505051da2fa69bd43b

                              SHA512

                              08ecb5af27d8385c5b1670297618fd636ebb634fa1401a0a561f5106babf8163dcece1a25a40003cbd1924fd3b4fd8807111e87c1575c985da0aaf50c4a6cf17

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources.pak

                              Filesize

                              128KB

                              MD5

                              372b2b84ee60f441226d538bf63ed67a

                              SHA1

                              3b5d4740d9e646b55abdfa78abd25da3b9a65c4b

                              SHA256

                              b1f41b9016ee0085554642aa76d94e1d1a7ffdbaa743972edf5217cee476479b

                              SHA512

                              5fb1fc2de97570dc57a8233af5c3cc5e9fb2a25288d8b77b031968babe9221317dca108662ee6a85a92bc0f7f3ca2f88b94b142fe13c1074322c78531eb0dc8b

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\app-update.yml

                              Filesize

                              133B

                              MD5

                              fb01b9479a97014234fbffba6dbd7811

                              SHA1

                              677cca903beae0ba830e569bfead4f1a74f52bc6

                              SHA256

                              d7358a93f52b95baa21cd49d81bf22c3edcc2169f9d1728dd70a7af0af212f4a

                              SHA512

                              e805b927e30cdac3d5a0f65a15d2b91dc6a511c05e08cdce676a9faeacc88f86ffbdf8de6b63060b71edcb2f8fb85d3d627d37a8b5f0aba45bebf0655f61be4b

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\app.asar

                              Filesize

                              128KB

                              MD5

                              e06314578c26fd6cc8cf42be46cb0503

                              SHA1

                              2300627f45d9bd26ce4edc72b0c2c8e9aefde34d

                              SHA256

                              555f50392283f79788b6b67795bad720140c7e0aac2194f818eb51414c051fe6

                              SHA512

                              e09395d2e6ff755e274d27683db1d1b2b6babfc19e3d0ec57965a92a6c96cfca8c0c8514a9833c87424199474f31de8bebfa77c87404fb6c3af2e42eb7aa95d5

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli-win32-x64\bin\sentry-cli.exe

                              Filesize

                              128KB

                              MD5

                              e1582cd0c715b0f88712e01c4a683cd0

                              SHA1

                              f86e026ea2ee76fb9519134c5dead21f1074a9dd

                              SHA256

                              5ceb74537193bd05dfc7415fd9a7823871246ed211ff8b2b6fd2255442dd5341

                              SHA512

                              3f100fe0defceaf83650f4d90e82774fa4ef8a84d73d62afe93417f9174e1c8f0d5cc8dd0acc12ebe580cc361cc2ea113fb6973fa3fb4dd6a4fbd34a4e2e840a

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli-win32-x64\package.json

                              Filesize

                              365B

                              MD5

                              63eedeeba75050dd53797741216e353f

                              SHA1

                              24c27f37773717471bd65dfd65950066067df06a

                              SHA256

                              8f1a9b77f30b23a9570fcfee61c36ce1ef72ecd75966ba9e1dbfa33847a80303

                              SHA512

                              8012dfd3f4733838930cdac0b7d49005eda6be6d5ae832e7149c7790d3074feacaf4367e9fbb2996a49d4da72a2e38d85410b3bb10ebc8c1945f419e5791002f

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\binaries\core_module.exe

                              Filesize

                              128KB

                              MD5

                              74b89f649f8b3e043f4ddcbf944eb29d

                              SHA1

                              cda158b3f6f1a9ef34652e6d638dd4b470b49d40

                              SHA256

                              f97e0e64f378b594cb678253ac070e73b108f714397b14c7b942f0d28713da24

                              SHA512

                              1a6d4e79b8cc6cf40366bb166a781e494cb93c80868a4c0524e7760607148719ba20fb9458c376afa4a70f7964e5c5a5803f42143362eab5cdeeb237e1380962

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\elevate.exe

                              Filesize

                              115KB

                              MD5

                              d53dfeeb4d0e73a3f7ad0eafc96da9b2

                              SHA1

                              b24cafd25092b94e133c0e4ed515ab3854244a6a

                              SHA256

                              939a5e8ac7b0251d7f8cc37370e7409b1091aa28b91d061bf78883f78be05d69

                              SHA512

                              2fc6926dd8132f8a0d7244a69e86bf37ca12ba33e9136c6e99a1c81233c0a5b790499e6e144afbbd9513912dee5d3f314c1cd33d8707d1ed78a991363c56c618

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\snapshot_blob.bin

                              Filesize

                              128KB

                              MD5

                              7f182fc1b22e1e66325f9e6a95e98165

                              SHA1

                              624bc50f5276637403ec2432b3cc8f0603e7eac0

                              SHA256

                              8c720771e898d2e1bfefb6899a10a052b4b2927de31148e70b7d391e5f5630d5

                              SHA512

                              aed96d36b65cd2b2c40495c8d81dc5b17d9a1bbb6cd5e6762d079072c0d705611303805a156d4cf2d155469a0192ecf8f9c6509883023f0a336fe1c57eb4a04c

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\v8_context_snapshot.bin

                              Filesize

                              128KB

                              MD5

                              7f581ae9236d613b570308f1ba280be2

                              SHA1

                              b04f94eecc8ea19d075844bedea880d0bc07d0ef

                              SHA256

                              8025de38985466fc3524299f76c14d9e429f68f2ad644beed5600d310221a7c2

                              SHA512

                              56c669a9bcf2760e96549d865de3e3704fbde0d287fde5a95ecdf97b4d2ee73d9ed12de20b9455083ab47f159db11968c380e8289d835993f76b1709305d9fe9

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\vk_swiftshader.dll

                              Filesize

                              128KB

                              MD5

                              f615fc09d9ca1ade6b3f065c479361c7

                              SHA1

                              79705be2c8f928a51226ff00c3cf1324b90b63ee

                              SHA256

                              f5f6f9e8ab96f836b0d899d0bbdea5a832c094869807fb62d9559af2e8bb8150

                              SHA512

                              60372b7bbfefbc44780b69c5b90ff0f639b5b2a210d89f4506fca1bc70c17b7d7413dee8784a1a79abce071ff04a8cfd79f4beefc9af6d1601ee8363d00d9ee8

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\vk_swiftshader_icd.json

                              Filesize

                              106B

                              MD5

                              8642dd3a87e2de6e991fae08458e302b

                              SHA1

                              9c06735c31cec00600fd763a92f8112d085bd12a

                              SHA256

                              32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                              SHA512

                              f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\vulkan-1.dll

                              Filesize

                              128KB

                              MD5

                              ebd4e480f2bd00a85fed66dd076c3328

                              SHA1

                              2affc954f736ca3765c77cce4b9b74996d59c18c

                              SHA256

                              767518299e53af4d1001d2e6f73850b51fdf525b717f37119a57a4c7d2239554

                              SHA512

                              bedf0d3f090a9215b8ea849c9a98d4ff4813794f7546def2fec35d1a3c162e4a4ff160db94398ee11fefb46fb39084b49d908e6f04eea592a7fa0fbd49ee693c

                            • C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\StdUtils.dll

                              Filesize

                              100KB

                              MD5

                              c6a6e03f77c313b267498515488c5740

                              SHA1

                              3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                              SHA256

                              b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                              SHA512

                              9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                            • C:\Users\Admin\AppData\Local\Temp\owutility.dll

                              Filesize

                              128KB

                              MD5

                              607646c7dc94a3602fb17c22bc8ad704

                              SHA1

                              6bc9775a3adb972cbfc8aa4cddbb2d3649ca50df

                              SHA256

                              a6b1811cc995587084572f2c8716910fdcc488618bbced2e0d41deb3eb50cfda

                              SHA512

                              b6eea7b0f945ef00d308b1adcd178ae7f1bf2d59d631d862c5d3fd08a147b68f4d483ef207a4f705e3f3bbd3296505cbdbb56f36e45d85762ccb7dcd4de2abdd

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Network\Network Persistent State

                              Filesize

                              1010B

                              MD5

                              bbd4449e3a5ba532a7b80dbfe5297cd0

                              SHA1

                              22fbc2d20981707e72c47e04e1f1709aedd36767

                              SHA256

                              6e231395fc1779f699a9da410a07191191d9c9f357b1ff3d9ae58b7402f7fa47

                              SHA512

                              49397036f941a4e93a0fa2511f4cbf46ed12a089117aa7987867038f014d4060d25598561677591f501ab0aec267b009b70c77aa3d8652c7ed43df6618b8e659

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Cache\Cache_Data\data_0

                              Filesize

                              8KB

                              MD5

                              cf89d16bb9107c631daabf0c0ee58efb

                              SHA1

                              3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                              SHA256

                              d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                              SHA512

                              8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Cache\Cache_Data\data_1

                              Filesize

                              128KB

                              MD5

                              e4c4c46a30c9a1cabc478449efebbf79

                              SHA1

                              dc7f9f18466e929a18d5fef1ee10b4baab76495d

                              SHA256

                              9d4b2ef99039e3f1163a67a50a94358ca3031ba16410e6f038145d4715bdaa98

                              SHA512

                              0077447d0ec84ce40df0da51b329be7ca4e3b1a1c279054df92294f10848a5d250d889f9016334475e3f2df3b21ebd205d13dd962d86d7fdfaf132383061416d

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Cache\Cache_Data\data_2

                              Filesize

                              8KB

                              MD5

                              0962291d6d367570bee5454721c17e11

                              SHA1

                              59d10a893ef321a706a9255176761366115bedcb

                              SHA256

                              ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                              SHA512

                              f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Cache\Cache_Data\data_3

                              Filesize

                              8KB

                              MD5

                              41876349cb12d6db992f1309f22df3f0

                              SHA1

                              5cf26b3420fc0302cd0a71e8d029739b8765be27

                              SHA256

                              e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                              SHA512

                              e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Local Storage\leveldb\CURRENT

                              Filesize

                              16B

                              MD5

                              46295cac801e5d4857d09837238a6394

                              SHA1

                              44e0fa1b517dbf802b18faf0785eeea6ac51594b

                              SHA256

                              0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                              SHA512

                              8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Network\Network Persistent State

                              Filesize

                              59B

                              MD5

                              2800881c775077e1c4b6e06bf4676de4

                              SHA1

                              2873631068c8b3b9495638c865915be822442c8b

                              SHA256

                              226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                              SHA512

                              e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Network\Network Persistent State

                              Filesize

                              937B

                              MD5

                              1779868b4632022b0648a0453236adb7

                              SHA1

                              af3f59632e4f8129c734f6273cd205c137bf9e48

                              SHA256

                              f474d352c9fa80f02360066f5efe0ac5d80907ee0c16393c4bea5340dc66bf6b

                              SHA512

                              19b4fed146d25580d97e012dc6afc95ce25e7e1a4284e8fcca13eddf9ea8ce91107c2b453815fa4d742c6736d358898c7b79feae2d9f78da64bd10547c2f4edb

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Session Storage\MANIFEST-000001

                              Filesize

                              41B

                              MD5

                              5af87dfd673ba2115e2fcf5cfdb727ab

                              SHA1

                              d5b5bbf396dc291274584ef71f444f420b6056f1

                              SHA256

                              f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                              SHA512

                              de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Shared Dictionary\cache\index

                              Filesize

                              24B

                              MD5

                              54cb446f628b2ea4a5bce5769910512e

                              SHA1

                              c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                              SHA256

                              fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                              SHA512

                              8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\af0c6fde-8c15-47c6-87b1-63663d4bcdb6.tmp

                              Filesize

                              57B

                              MD5

                              217c781be08416f5b6fa33aedf027293

                              SHA1

                              0e76955a55f31406fc64e3b136f1bb9214bc2d79

                              SHA256

                              3de8ead96083d18355eed62a5b8089a61f6c7f97ba3dba04cbefae364f0455b0

                              SHA512

                              964b588d2bb87d3e19924cf8a16f1c35807c45ccb41caa00be9dd4e34b9fdfa0625973828a9df1f5f56354f00bf13939e01798c40a8a7089c9aee4535e45b099

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\es-ES-3-0.bdic

                              Filesize

                              128KB

                              MD5

                              d01bcbfc4129bf0d80694df887fb8f82

                              SHA1

                              5aab2b87fe02358d590cb75411b2f3b88acad98c

                              SHA256

                              e74d7b9ba6f65734ca66f286a3e544c2da10966c7414c56dda124956db92d911

                              SHA512

                              be4031e53ade3cbb72b2231182a85f40bd9d1001da59d35a9185f3235b3ff21cca6c8aabb422fbab76f41c92f50da3787716d3067fef2389fd106626f25b7f5e

                            • C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\sentry\scope_v3.json

                              Filesize

                              7KB

                              MD5

                              cfc262ce395b0b027ff91eec556b806d

                              SHA1

                              c85313e9911a8db371636901e43564800fd63274

                              SHA256

                              aa4ffdd8ff33a777cd59d11eccab196157d0ceb3e60994fa8f595e743d87f419

                              SHA512

                              96a945eb7731f3669fe9ea96894afce9eac8dd9bcadd0ae8ba6285727af9d2371b34109de8fe3cc89c4bda01d2b711d81c087b5c4468b51825e2a6cc0b99323d

                            • C:\Users\Admin\AppData\Roaming\ow-electron\dibeihhdinofpmiennjkclnoidpjakanhclfmpmo\packages\jopghajpapbfooofklncedoalpgiaglgjaokpkon.owepk

                              Filesize

                              128KB

                              MD5

                              1f0a8bc3df3a633d91c48a1fda6ddf41

                              SHA1

                              589608fecd317ceb8bb4bb115b7f99fc7f0f780f

                              SHA256

                              314b5aa987b795fc091ccf7b224eea14c01a3d025f68df1b6d8a48bc6591cc2e

                              SHA512

                              4ae8569325f6c832fdd9a12a3179e99891eb7cfa0204bc9b66e9a59b98683f463b9478eae3a246b26bc98674cc8bbacf9eeaab3482c97f7091b540ccf66d342a

                            • C:\Users\Admin\AppData\Roaming\ow-electron\dibeihhdinofpmiennjkclnoidpjakanhclfmpmo\packages\jopghajpapbfooofklncedoalpgiaglgjaokpkon\1.0.19\ow-electron-utility-plugin.node

                              Filesize

                              128KB

                              MD5

                              24af4feef5fbef90321f0e15a23b9aef

                              SHA1

                              2ef0f5e855d929f436f7044708761b6d0075eacb

                              SHA256

                              e97f51ebafde2df506a27f72f6edeb839a58d7cc2a305543bb50323fcf71153f

                              SHA512

                              71c9420958bf6c571ba96328e584422052e574f9384d30acffdfeac869f076fb712282b0931e2af20c10cf86abb703363e2aede52bd6e67703dfb2fb6447ba7e

                            • \Users\Admin\AppData\Local\Programs\@gddesktop\ffmpeg.dll

                              Filesize

                              448KB

                              MD5

                              ed298fd27e5ca7420b16f9f61fe3e857

                              SHA1

                              cb8cfaa1294ed72c2f49de31d1b396a5fce8718c

                              SHA256

                              a4ca554597e4ab135ca74582826ba2e349dac9329c8dddf06d327d8464a5d09d

                              SHA512

                              77c0033b239220d7a538a17761564a84d2770044ac542908d5ac34979bdf56375705f6f91800a8695191643cdb6b57ccc713af54fe0ccf75a45a620d26840100

                            • \Users\Admin\AppData\Local\Programs\@gddesktop\ffmpeg.dll

                              Filesize

                              1.8MB

                              MD5

                              66c16d6ab881cc3e0d5f2752fa7e67d3

                              SHA1

                              606af017dfe1f93fb847d10558ff0f85e1c38138

                              SHA256

                              dc952d5e0bc39ef0886281f40f1f137e0a8581dbb04e4c5b56a6a539985acf73

                              SHA512

                              548156ebe17614f3cdf8588ddfc14b6ba32cde712c03b306728f92e70ca68c7b5e2451439c6f3dff60e3318368517b876c92413efb7b227b987742696f5d07d9

                            • \Users\Admin\AppData\Local\Programs\@gddesktop\vk_swiftshader.dll

                              Filesize

                              1.1MB

                              MD5

                              97269ce95b0f92c605b722e7dcf14b2d

                              SHA1

                              0988f4508da40e6f94a5a56031a2f3f3d08b36c9

                              SHA256

                              05231a9ad524cf0f8f06fbc056839f98479bb257d4c610e0884e473bda94641e

                              SHA512

                              2ed98fadcd7ae8e6e477dbbcb7cb5396b7bed08ddd0ab972b774f650cd5f690f53898c4e6f077231015d5addc2d6023b76f8647cc273faa8e911eeaf7f893475

                            • \Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\SpiderBanner.dll

                              Filesize

                              9KB

                              MD5

                              17309e33b596ba3a5693b4d3e85cf8d7

                              SHA1

                              7d361836cf53df42021c7f2b148aec9458818c01

                              SHA256

                              996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                              SHA512

                              1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

                            • \Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\System.dll

                              Filesize

                              12KB

                              MD5

                              0d7ad4f45dc6f5aa87f606d0331c6901

                              SHA1

                              48df0911f0484cbe2a8cdd5362140b63c41ee457

                              SHA256

                              3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                              SHA512

                              c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                            • \Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\WinShell.dll

                              Filesize

                              3KB

                              MD5

                              1cc7c37b7e0c8cd8bf04b6cc283e1e56

                              SHA1

                              0b9519763be6625bd5abce175dcc59c96d100d4c

                              SHA256

                              9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                              SHA512

                              7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                            • \Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\nsExec.dll

                              Filesize

                              6KB

                              MD5

                              ec0504e6b8a11d5aad43b296beeb84b2

                              SHA1

                              91b5ce085130c8c7194d66b2439ec9e1c206497c

                              SHA256

                              5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                              SHA512

                              3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

                            • \Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\nsis7z.dll

                              Filesize

                              128KB

                              MD5

                              fbd1f32cdce63ac29b6fb5fa4ea323a4

                              SHA1

                              088eb006ff8f57a790cf5985ae33e5b1587c9f1d

                              SHA256

                              845ceab6f308c77b8c085b61c1791aa40170eee9c0f8a5e2ab01ab63a70e585b

                              SHA512

                              4c72f8c60098a2d2cdd84c52224db2457fb151e81a4764bf2519888b1b3072018776cf18e51c0833f7b27cb1396e331b63dd386fe3d90a10d18a3f3880d76298

                            • memory/984-1671-0x00000297A9260000-0x00000297A930A000-memory.dmp

                              Filesize

                              680KB

                            • memory/1304-899-0x00007FFD73230000-0x00007FFD73231000-memory.dmp

                              Filesize

                              4KB

                            • memory/1304-900-0x00007FFD71740000-0x00007FFD71741000-memory.dmp

                              Filesize

                              4KB

                            • memory/1304-1670-0x000002055BE50000-0x000002055BEFA000-memory.dmp

                              Filesize

                              680KB

                            • memory/2300-1627-0x00007FFD739C0000-0x00007FFD739C1000-memory.dmp

                              Filesize

                              4KB

                            • memory/2476-1373-0x000001ED2C7C0000-0x000001ED2C7C8000-memory.dmp

                              Filesize

                              32KB

                            • memory/2476-1371-0x000001ED2C830000-0x000001ED2C844000-memory.dmp

                              Filesize

                              80KB

                            • memory/2476-1069-0x000001ED2CD20000-0x000001ED2CD96000-memory.dmp

                              Filesize

                              472KB

                            • memory/2476-1362-0x000001ED2C860000-0x000001ED2C882000-memory.dmp

                              Filesize

                              136KB

                            • memory/2476-960-0x000001ED2C600000-0x000001ED2C682000-memory.dmp

                              Filesize

                              520KB

                            • memory/2476-961-0x000001ED2C350000-0x000001ED2C360000-memory.dmp

                              Filesize

                              64KB

                            • memory/2476-1343-0x000001ED2C860000-0x000001ED2C88A000-memory.dmp

                              Filesize

                              168KB

                            • memory/2476-1402-0x000001ED2C890000-0x000001ED2C898000-memory.dmp

                              Filesize

                              32KB

                            • memory/2476-1032-0x000001ED2C7F0000-0x000001ED2C82C000-memory.dmp

                              Filesize

                              240KB

                            • memory/5004-970-0x0000021FEFC90000-0x0000021FEFD92000-memory.dmp

                              Filesize

                              1.0MB

                            • memory/5004-1581-0x000001AC21A80000-0x000001AC21A81000-memory.dmp

                              Filesize

                              4KB

                            • memory/5004-962-0x0000021FEF980000-0x0000021FEF9A2000-memory.dmp

                              Filesize

                              136KB

                            • memory/5284-1509-0x000001A533850000-0x000001A533851000-memory.dmp

                              Filesize

                              4KB

                            • memory/5464-1533-0x00000217B6570000-0x00000217B6571000-memory.dmp

                              Filesize

                              4KB

                            • memory/5636-1549-0x000001E0EB6F0000-0x000001E0EB6F1000-memory.dmp

                              Filesize

                              4KB

                            • memory/5808-1565-0x000001BF171B0000-0x000001BF171B1000-memory.dmp

                              Filesize

                              4KB