42ad279878792b976f051847fc40e8b31fb4a043cc440455fca28b8f9a252271

Analysis

max time kernel
19s
max time network
141s
platform
windows10-1703_x64
resource
win10-20240404-es
resource tags

arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
05/06/2024, 18:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

GDLauncher__2.0.9__win__x64.exe
Size

111.3MB
MD5

02cb50dc6c2d8a0b158397dbb88364e6
SHA1

a47c3b438761d74f0b6f5881286578f4cecd24da
SHA256

42ad279878792b976f051847fc40e8b31fb4a043cc440455fca28b8f9a252271
SHA512

62d87a1b097578e8c5807b5e993699962cedaf39d574bf22aa987ba723c782d139092860a049cbe5f1074926a11893fdfc7b8b8fa5b599a7f52dc1ca0e11d7e5
SSDEEP

3145728:Ise4/oxf03ZRozA76omzShIsS3sklyK6XllaG:44/YsOc6F6IsS8k81aG

Score

7^/10

discovery execution

Malware Config

Signatures

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
5396	icacls.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\Control Panel\International\Geo\Nation	GDLauncher.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Executes dropped EXE 5 IoCs

pid	Process
2848	GDLauncher.exe
4272	GDLauncher.exe
4172	core_module.exe
4168	GDLauncher.exe
4428	GDLauncher.exe

Loads dropped DLL 15 IoCs

pid	Process
4688	GDLauncher__2.0.9__win__x64.exe
4688	GDLauncher__2.0.9__win__x64.exe
4688	GDLauncher__2.0.9__win__x64.exe
4688	GDLauncher__2.0.9__win__x64.exe
4688	GDLauncher__2.0.9__win__x64.exe
4688	GDLauncher__2.0.9__win__x64.exe
4688	GDLauncher__2.0.9__win__x64.exe
2848	GDLauncher.exe
4272	GDLauncher.exe
4168	GDLauncher.exe
4168	GDLauncher.exe
4168	GDLauncher.exe
4168	GDLauncher.exe
4428	GDLauncher.exe
4168	GDLauncher.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
5004	powershell.exe
2476	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 7 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	GDLauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	GDLauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	GDLauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	GDLauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	GDLauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	GDLauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	GDLauncher.exe

Modifies registry class 7 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\gdlauncher\URL Protocol	GDLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\gdlauncher\ = "URL:gdlauncher"	GDLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\gdlauncher\shell\open\command	GDLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\gdlauncher\shell	GDLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\gdlauncher\shell\open	GDLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\gdlauncher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\@gddesktop\\GDLauncher.exe\" \"%1\""	GDLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\gdlauncher	GDLauncher.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4688	GDLauncher__2.0.9__win__x64.exe
4688	GDLauncher__2.0.9__win__x64.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeSecurityPrivilege	4688	GDLauncher__2.0.9__win__x64.exe
Token: SeShutdownPrivilege	2848	GDLauncher.exe
Token: SeCreatePagefilePrivilege	2848	GDLauncher.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2848 wrote to memory of 4612	2848	GDLauncher.exe	75
PID 2848 wrote to memory of 4612	2848	GDLauncher.exe	75
PID 4612 wrote to memory of 3568	4612	cmd.exe	77
PID 4612 wrote to memory of 3568	4612	cmd.exe	77
PID 2848 wrote to memory of 4272	2848	GDLauncher.exe	78
PID 2848 wrote to memory of 4272	2848	GDLauncher.exe	78
PID 2848 wrote to memory of 4172	2848	GDLauncher.exe	79
PID 2848 wrote to memory of 4172	2848	GDLauncher.exe	79
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4168	2848	GDLauncher.exe	81
PID 2848 wrote to memory of 4428	2848	GDLauncher.exe	82
PID 2848 wrote to memory of 4428	2848	GDLauncher.exe	82

C:\Users\Admin\AppData\Local\Temp\GDLauncher__2.0.9__win__x64.exe
"C:\Users\Admin\AppData\Local\Temp\GDLauncher__2.0.9__win__x64.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4688

C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
"C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2848
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4612
- - C:\Windows\System32\reg.exe
    C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
    3⤵
    PID:3568
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
  C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\gdlauncher_carbon /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Crashpad --url=https://f.a.k/e --annotation=_productName=GDLauncher --annotation=_version=2.0.9 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=28.2.5 --initial-client-data=0x414,0x4d8,0x4dc,0x438,0x4e0,0x7ff65d8bf648,0x7ff65d8bf654,0x7ff65d8bf660
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4272
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\binaries\core_module.exe
  C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\binaries\core_module.exe --runtime_path C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\data
  2⤵
  - Executes dropped EXE
  PID:4172
- - C:\Program Files\Java\jdk-1.8\bin\java.exe
    "C:\Program Files\Java\jdk-1.8\bin\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
    3⤵
    PID:5284
  - - C:\Windows\system32\icacls.exe
      C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
      4⤵
      Modifies file permissions
      PID:5396
- - C:\Program Files\Java\jre-1.8\bin\java.exe
    "C:\Program Files\Java\jre-1.8\bin\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
    3⤵
    PID:5464
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_130375\java.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_130375\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
    3⤵
    PID:5636
- - C:\Program Files\Java\jdk-1.8\bin\java.exe
    "C:\Program Files\Java\jdk-1.8\bin\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
    3⤵
    PID:5808
- - C:\Program Files\Java\jre-1.8\bin\java.exe
    "C:\Program Files\Java\jre-1.8\bin\java.exe" -cp C:\Users\Admin\AppData\Local\Temp JavaCheck
    3⤵
    PID:5004
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1888 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4168
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
  C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe --type=cs --cs-app=GDLauncher
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4428
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --mojo-platform-channel-handle=2176 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
  2⤵
  PID:3328
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --app-user-model-id=GDLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\app.asar" --enable-sandbox --first-renderer-process --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2560 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --skip-intro-animation=false /prefetch:1
  2⤵
  PID:1304
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  PID:2476
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  PID:5004
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --app-user-model-id=GDLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\app.asar" --enable-sandbox --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3432 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
  2⤵
  PID:984
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --app-user-model-id=GDLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\app.asar" --no-sandbox --no-zygote --node-integration-in-worker --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3624 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --uid=dibeihhdinofpmiennjkclnoidpjakanhclfmpmo --package-folder="C:\Users\Admin\AppData\Roaming\ow-electron" --app-root="C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\app.asar" --muid=be1eddba-b706-993a-4e05-708de5e6096a --phase=41 --owepm-config="{\"phasing\":100}" --js-flags=--expose-gc /prefetch:1
  2⤵
  PID:4624
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --standard-schemes=owepm --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --streaming-schemes=owepm --mojo-platform-channel-handle=3900 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
  2⤵
  PID:2300
- C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\@gddesktop\GDLauncher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_carbon" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3436 --field-trial-handle=1900,i,48243284745775908,17886119107524818186,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
  2⤵
  PID:6128

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2c4
1⤵
PID:1900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Oracle\Java\.oracle_jre_usage\905ebba3a8fc8cc.timestamp

Filesize
50B

MD5
ab4e4f0faa25f74df0dff79cf30a6723

SHA1
91748033e681d05b9f3cc4165dea6ba0eee5dbaf

SHA256
d34cfbee8c59704c094896abf84918c58ea22eefbbe8779a1b5400f07946ee90

SHA512
00517ca33aa244522326b95c49b33b0fd51d3ac8bb336374349299085b374242dff2a3ee6059efa1598224be419c1b594f4cdf4a44fba13d0edc6637cfa04448

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

Filesize
3KB

MD5
ea6243fdb2bfcca2211884b0a21a0afc

SHA1
2eee5232ca6acc33c3e7de03900e890f4adf0f2f

SHA256
5bc7d9831ea72687c5458cae6ae4eb7ab92975334861e08065242e689c1a1ba8

SHA512
189db6779483e5be80331b2b64e17b328ead5e750482086f3fe4baae315d47d207d88082b323a6eb777f2f47e29cac40f37dda1400462322255849cbcc973940

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

Filesize
2KB

MD5
80ef418749393790b80930b9d1b1ed38

SHA1
baae03cf53c24cb4b4e16618f69dd770e75b17f5

SHA256
a9116390b696f61a4e6fb4887cc9e1cd896c2dbdc92693d247ccaa3ee590cfbb

SHA512
935c42409d95d6e35082cdad292e85d938988c5957e05b81c7473ce7b149457b3d47047c1eeba985d4b1f87b240cdb426537989d4dbf2621143c2090df2abcd1

Download Submit
C:\Users\Admin\AppData\Local\Programs\@gddesktop\chrome_100_percent.pak

Filesize
128KB

MD5
0fe2a515b62e22bcc448f07e4e47af0d

SHA1
c1d2a26d66fc50552fbb0e877b7eca3b1811e6c8

SHA256
8e67853cd70eff301a58b2f5e132e227cdb24f1fb093f5cf2166f4408663f55e

SHA512
cb8279f709d27bfd8aefa38c900ba313be1ad0f746d90813d1fccfe2eaeff16b7f1ac8a74be77643e7e5051a2c0d634cde8301f657873148932efd849f96fc55

Download Submit
C:\Users\Admin\AppData\Local\Programs\@gddesktop\resources\binaries\core_module.exe

Filesize
448KB

MD5
60f7345ee9c5af722bda940b154c6b22

SHA1
d261e9a5145c8b987d2f918a447b35e87b6558ff

SHA256
9906348c59f4d463307c5e7990c162011d4cab31e604fc605810863417d28a21

SHA512
2474ab1dc492782c694649eb1a5190e8801ebaf981567f7eeaa32bb77d8cf37fb6271bdb8df79ad76463879e0c3bb9ebac5876ed642785dec8c5859b05d652c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\JavaCheck.class

Filesize
1013B

MD5
8098d31488cd52db41f95188b9daed5e

SHA1
76988b607c667c86211fe1dfe57ed4aedacc5691

SHA256
c607f5871610bf9240c75f4abe947469496570b380f670e9d8d09f9c785978b5

SHA512
e2b4c54e78daba4a04d17915eded43a3f59a744108cf28baf4c22545d807338a39de052d69243ce610981b930e49790ba8be0f7b370e042a9526ef09e2b9fb78

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_02wsr3hd.icv.ps1

Filesize
1B

MD5
c4ca4238a0b923820dcc509a6f75849b

SHA1
356a192b7913b04c54574d18c28d46e6395428ab

SHA256
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

SHA512
4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\LICENSES.chromium.html

Filesize
128KB

MD5
3c433301aec5c2254575d7e304a4ec6b

SHA1
9fdcf74a5502845115bd5e1f0e831076b59cda54

SHA256
531f07e876732108cc75d7dc36bf7cd6e9f9d59c3aa183f39af6d17c89b25969

SHA512
198c89a65e2ba42e5edcdf277de757929a44b58ddb5901735cfa412dd5a24c8ae13b11c310f99b2725b5e5437413e4a3fb14a094ae11c4cb2566db468a9016b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\chrome_200_percent.pak

Filesize
128KB

MD5
d9ca2c885c1db6b5d41e828fa5ec8a53

SHA1
943d16942b4588844ef22af64139ac25d2a4492c

SHA256
4e7b6c5e28a255df0efb07443c444aab8713ab7275020b9f046164068d4a8fd1

SHA512
3ca2a86cb53fb2ef026adebe629663b9af796c12798043db537e3809764deb71c5d0c65ec17c247d0d3ec5f1dffe396bf168d76f3d069a2c1a54d4e1635ab1e1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\d3dcompiler_47.dll

Filesize
128KB

MD5
194744961312b41729883d288b26ad45

SHA1
c7fbd5ae7f1c376a9bf26b6d3a861a5493aea9ea

SHA256
2b07fed22fdd46869b1a19490ba8f19ec81a8ef3a5dd9853ea9e6ba96831c845

SHA512
3dd8d534246f5fea157f130a62444db3dd7f6d2535bc8be88a31f7c39057b7f86a601ced74c62c138bfcd22cc9a1233a58a4e4169c2dfd0091c8645008b4097c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\ffmpeg.dll

Filesize
128KB

MD5
6c865c2d6173622e40d0f489ca59ee39

SHA1
c42417f803bfbd0a025b22015b6d76b39a50cbeb

SHA256
8955d9eb271593c71e4ba49c2883647c6a0c32da464f81a86815342a7592ed70

SHA512
1270bdd2bbb50cb6b2939845c5bb649115a770070a070de36e05b94b1b08ba4da1d79f21741907e1b2df8056f1b4acf9fe722f42b3aa73bb1ef34484fd40744b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\icudtl.dat

Filesize
128KB

MD5
822e42028a9bfdb232bbc50d54ae9094

SHA1
c5846b517aa12f4c1f4039e557134b4a93f7243e

SHA256
63b14ec7f150458f9bb94f0d839bb4c03ff561fbf7dcb30ac01f247465c64def

SHA512
08ccfbe58a411fcbb93364daaf4e8ad0c6547c71d976047c7b49c00a7c24abaa3182a8b743d2d02083065ff55581130185a965b6905c1eb05b5efb5f6f183683

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\libEGL.dll

Filesize
128KB

MD5
2138d2855f6e30e8dbe754e298a44d62

SHA1
d4e3439a6406176b564e1e4d8989547c75bcaa25

SHA256
2a575cfe0db6dfdb887ba764a45d8f78ee3e8801445bc04fc80b9b838ac52996

SHA512
064d6e0a5cea06771cc95ad48ed03562bc6acd642a1e2dc5362cc986cb73b605f98b28125a17efdcb5313b8eb5ae22e23ab90b5278d095e18ddebbd54e443afc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\libGLESv2.dll

Filesize
128KB

MD5
23bd5414de4b506d2fb6dd00ee2edc12

SHA1
631eb57c2f23fc4dcb7b7cafc25dc9f88545048f

SHA256
6148ba105ae17634a9b2a1b29c35914079620615f36c1170d7166f78d04f46bd

SHA512
1ef13c3e7ccf128ed3ac79fa530af9a357a730ad648b11ca6696ffc82857cc9b437e39703a7f7ed83952f33864b61653f0c33fb7e058fb56ffc4733bc29d8672

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\af.pak

Filesize
128KB

MD5
0d16244dcc2545bfb66047b9cd7959ce

SHA1
d8e67263a89cd9192955333ffd138cb7f00de139

SHA256
57ee87147f05c745c8947947f8e5c14279d04090c97af2c225fa22622a7c007a

SHA512
4b5d77d86c0d54d8f2afd57c9b50b71853a04682040f4fd55d9bae3d74bb6c20d6c027bcd3a27cd1ba47ad6f03463cf578c505424864eec2871c727227647627

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\am.pak

Filesize
128KB

MD5
62b9359e25de17964b6eb3cf0b124012

SHA1
c04155335c886f968859322a456df2915e2d1d38

SHA256
14766f32a15fd176d9e0221366369d88e08df6141da452c7590d1fb4fb2c52aa

SHA512
07ebf570d761bcc7baa0b900b1bd3e93a54c76aa46c9347abd6fe69832d106db97e6921d2c7e1cd4009ff500197328fe2e8a3cb92243c6be1f8e59534c114e2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ar.pak

Filesize
128KB

MD5
f0ffdcaef6b8e5b8d1aa0840ca2617d7

SHA1
2d7a143a098b6e39b92cd6441b4839ab9832c06e

SHA256
706c34c3d7c3141612750ea3d2ffab8019377030e0a101735bce9212dbb37280

SHA512
2a38698e9e0449ec1ccb733cdc3a5703b8be69e922c77e8b934975a2c9f5ee8dd463f006bfd83a32c1a2a15dbd3399f7b87c3254e6dff5976571d2451eae6980

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\bg.pak

Filesize
128KB

MD5
93073bb1cb526e4b598c301acb436393

SHA1
4d381e17264c402023d31162e33e555837d7120d

SHA256
20096f49b74fc209531ecc8a66a95d18137d207033ff37c17cd4f5b8570689ae

SHA512
792224c66725056740b43b11401f2b13997d8199de4b4fd884076d74e53fda35083ba6636fe8e07729d418cdc749759de7771ed7790974165086326adc415056

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\bn.pak

Filesize
128KB

MD5
e6406f3b62fc05eea06f895676562a6a

SHA1
ab2316577c2fb34de4858ddf0c51198507039ee5

SHA256
e00bc025d66a77db1c4f9b38e78bae5374a6e177585794146db1679e4e72460a

SHA512
8540590fb14c27bff524a2a9c1964855d32d6aeca352e728571aee04ee6f77919b99535d46e44b5b289d67f678be18b2f9783183460f4f5dfd50a1d88b37bbda

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ca.pak

Filesize
128KB

MD5
d04fa7e18d1dac8022430281dc24bc5c

SHA1
ce997b9996ba5a6545b4299db1a5ce210c12944c

SHA256
d4970e55702c5dc424b2f80a16800d08b88ef2ac0311b7932e3628a0a09c8128

SHA512
95884ab47dd0a47eb099854790a3ba3da17abf039f99ed7d9cfb47f9d9708ccd3a9a85ab6c5d490a75d4223544970d2c3ba693dc78ce230b31193f1ad6d59acc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\cs.pak

Filesize
128KB

MD5
2926d8217e5bdf620e0acc5fe1a8b8d4

SHA1
a060367469671ed8cfb374c8e526588b70cd1221

SHA256
62bca1c078936043364783b6f73e34b61cb093344d8a72bf280938150ca1bee4

SHA512
e3724b8b6434c431c1eae0a904ce9a0eb5f045771f3eff8f56d8e23164790db29fbba0beaab78aa1fda6a498c37bbebb07180b7c2d58a02275a8e6e44f238bc9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\da.pak

Filesize
128KB

MD5
e1891c924559c03cab09fb3e7da87fa5

SHA1
413bbae20e8b184b013808f2898257dd0c4864b0

SHA256
39d41113280d8d8121eec4dbb02c2a9be309e544acdd972e1974f79e3f7a1de4

SHA512
85facbb804cd9d9ab458b8c84b96a645a0430eebe7b7fedf6422ead7d63fea64d7d11dd434422d8ab191bf1fea21e9b69cd4497722a12d6a132359739eb0ab56

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\de.pak

Filesize
128KB

MD5
e9d79c9be26d4253a6dff9fbd3b016b7

SHA1
6e773d335f4595072eeeac7c19e9ebd984b69dba

SHA256
5579d8ce1013795e97594b9fb33d33985bc174ea319103788b0160346d70ed70

SHA512
1365a80fe7538ca41bef391c0fde56108569ea05629adf19b16f5807a4f3d7d05bd3f8d6c0503c4403b14cfefd81f358f54f70164880e7324fda825617b04340

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\el.pak

Filesize
128KB

MD5
39f598e37680a62d6a850c17cb91d326

SHA1
146e291304c9c14cd864431c0fdaebfd5b5abb8a

SHA256
00c66ee3218ab7fa8c9bdb019d207e6853555fca386735f8bb1f74a846329ffb

SHA512
7112f7266cc730ff16bc0d4c1f5ef341b2989436ae962a2e2d4beae885f3bcdd1f455081ce3a284750f66bad4faa859f38d3fb07cc88776456b2419d964dfdea

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\en-GB.pak

Filesize
128KB

MD5
d8e6702165e00a6fe67db12d6874ba9d

SHA1
fd000a3e01be1302f13036f052fee09f3d02f8af

SHA256
c7b014efd7223b8f51c2f8a2c3ed3a5e23e9aa44c2307f9c16666f1635db42c0

SHA512
214d9084ecf128d6a6d2e406c7bb45e532becbe65e39bc219ee8f2cab8f16bc4ad5112bd8d01838c74ad2d5a4b17ed6f5ab668e30c74edf21191cbcd0d9d5742

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\en-US.pak

Filesize
128KB

MD5
39b9fd6656e0888899b1d3d72c3c3b13

SHA1
978817fd39dee7076e642fcec8a24a96d17f7228

SHA256
1d6987fe1564e8df36aa19a63005809a11960d634b6c34b0292cd60bd2873d7c

SHA512
7b019499ed1682baca8c0557e5908bdb3c2f330c5bc6d4a7d560b3dce52c7ee4ca981382240d9057ee25811e25ca612900bb8ef692e71555b1a4e5b8f291128f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\es-419.pak

Filesize
128KB

MD5
0d4049238974be84ba0c7a7640322db1

SHA1
faf0d7385a223d99d3f44a2b91266dde2e3cb56f

SHA256
65210f1edaf27caba88a73e6d4348f6bf488775d0263a72a39f06d96a16d8eae

SHA512
6a59071660975cc034e713dbef578a74489b7e85e38ca827c0f9938db736427c3c56948f20b3b64c35cae5ff64525eb7e2d76d6d48d8a1263ba5fe873e8b7333

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\es.pak

Filesize
128KB

MD5
da6ad5e14530046ad7b6cbb82f53310b

SHA1
1ac18a7340d07662a3a0d3dcbdf39ad5a2bd6a0b

SHA256
4656452f891c99ec24b4ee04e9bfe28881735b17e19c6bf68949b169fff18b3a

SHA512
2aae49e835a9136145c805a3a19d31e778283ea7b966679ed0aa996a2028ccc0de9df18a37949773a5d2d34dc3405bd4d4cb1e1e8b53cc6f58893fd62bf9227c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\et.pak

Filesize
128KB

MD5
48e2f898a9b8fe95b5d6cb2d5174b81e

SHA1
cd88ea74fdc25dca46a33954963b4106626e3b3b

SHA256
5b30f5aad9c101a3d95e1bebccf512f4ed71227f52887459a8add3e866642bae

SHA512
9a0929ab016e86a9d44a03e39f8277403f20b70f97790ef648b8326bb6db3fdf0f7174ff30149558eb2c887b8645c348aeb0440ec48671d9c618ed7f6ac044d1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\fa.pak

Filesize
128KB

MD5
2afdeedd32a32e79fb1e350bad74e163

SHA1
bcdab283be2245b56f5e83c843991fc4e2af17c0

SHA256
08e4fd86f3229a5f40e3d611442d3340ac9427f00c6471a351ba00202533e86b

SHA512
8ac632fab99cb8c8822e2c09a0efe44f9ba33bdfe851f1c57dd303a513a85d650bc9fab87a76894608709777d8eb955eed1842c0d8aa11e701e5f1a74ff5abf4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\fi.pak

Filesize
128KB

MD5
d5170f0831d322945a56c61100de331f

SHA1
3c44647abbe680f32294e910a68edf5290eb198c

SHA256
77bf6c20c5492f574fbeba84b6092ce3d225a645591ba079a78b74039088989a

SHA512
9086e4a747793ddcfe9770b05eeb0435324a80a0896f31b6db2d4333e3186323de81fe35b09cba000d0035150ed91e296c8b7ea3577aaf410cb8fd375cf1bffa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\fil.pak

Filesize
128KB

MD5
b914973e55b6fbda227effd783c45e13

SHA1
aade93c872c6bb41f695ae051c0579f154bbb9c9

SHA256
7615684c3c9d3564828fd065db3889f2de86f46a5783917a5790fa236963bf7e

SHA512
db9591522e7cc634b7440966caf08711f6b5643a2a34f0ebf8c88dca6d2e227871f1df73630e166704831c5e4dac5795387f4a29b68fd2a676c0dbd59666c633

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\fr.pak

Filesize
128KB

MD5
95f44184ffc3ad781f57187166b44f6b

SHA1
0733e0a26b1e3661e056ed24d1d395873b774d58

SHA256
dd746f2e61bebcca3823be8940c5e7a5b534ea16f3d0c0a4ef30c9612ebffa29

SHA512
99de236386305bc5486ab680114364fcbf3493b7ca5afeabfbdac92995aa0a480f560a32c85eb317b84a9e83e06ac3740e6a39eac34723a5fb4ddd51127d87aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\gu.pak

Filesize
128KB

MD5
1557602946e1144117d521671f1ec8f5

SHA1
428646880091ee14265b889c81f1c0162a77dd09

SHA256
b86fe2bff133830c12cc986ade0c392bf2c85a7d9581e53e14b724a1982234ee

SHA512
a6664374680d8167f5e7e0d4d9ce7901f1e22176ada29a9a291e6f9e01f90c672597a015f0c0fc3ace237b197796f339f4b22d0610fb77afdd3990d760fb3d8b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\he.pak

Filesize
128KB

MD5
43ef6ba4245d201371ae18bf36621d30

SHA1
c99f33ab7a1361b335419cec4fc3ecff5e23ab64

SHA256
e20c6dec2ddcdd7c0ae1173a80d6f4311d05e7ac008d318bf57289f514d91ed5

SHA512
302956dffc2e098a5ac828e3b5726c5878ee54c88c61d2fddd9f706745194f5536f8da21b54a0970546d327be14c5aa40c84dcd49df2bcd8efab0eebb23c6bff

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\hi.pak

Filesize
128KB

MD5
513c7a372949c1712eee07996fd33a7a

SHA1
d177d9cd6dc2ba3e4cb3e95239e7eaa7254e0100

SHA256
27292b3a1ac2a7066eef2fb613b368b6ae13e4b39043ad9a5dc1def37049813c

SHA512
6aecd94fb321d484d8d756efa1b6a5e5e529a2878bd48de8c6e7587eaa8f63cd040c2f60378cf5e7da8fd8a63bf920ee8509b14d9cc934e6e3c3591130becdf2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\hr.pak

Filesize
128KB

MD5
1cf3bf7efc6807251b7f62910c65fc28

SHA1
e02248d0209dd503644cd1f1a4a99f7e0b811382

SHA256
012235b7b890239f0c81433bb685877f40ede086f321d8b56418f38bfaad6943

SHA512
633c2dee6b8cefb2a07f357fa75beb2f96d6d40ea7c6f2b95a07ba846a746afabe631ebddad42047656c533ee44c6091678507d9cdf8bbc7531428194fd53418

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\hu.pak

Filesize
128KB

MD5
206ea5e377d024eee2547d7a1c807800

SHA1
8e9f6d2a5dfa74e589817aa794e1ed50163a9e0f

SHA256
b81255b4ded93302cfd191bf5357cb9e6851ab815b23871799ce54da75472ff0

SHA512
267f781dd6669c8cf291f3859abbc60266bed6ff0858239bf7e0fcbb5ffb3ba896bef2a597e49b34f66f0d6f8b140b2722657a3e74a7b586f7fcaa21d8ffa7fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\id.pak

Filesize
128KB

MD5
3bb64a4a73235125fcb8af055bed40db

SHA1
91b0bd2e518f8f2f4864dceec0e3710d8e86070e

SHA256
937081c56ca6b711d2c42999d76ff4038af1f9e50dfc36ed6d69e50cd2e54e4b

SHA512
c27a8c81d562423b11aee45f5f27edde7e28e10a817bd23beed8956c0c382e379f18199279d3bce9d1d2ba19ebdfb3f46da3be8954e8e5cf7d2fa3bf0659ea48

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\it.pak

Filesize
128KB

MD5
dfc209fde9a4ae4e621a32fa8a19fb8e

SHA1
aeb894b4099777002c114f5f92f7cd6eb18f78a7

SHA256
b3d236e590289c1aabfcc7296976a0093288231f17ea7fd5dcac8db8b5e715a4

SHA512
e046f9c86e4b8ffb765371a98190bda282f10334e52cb3adab937983b4c5f30e3330b3ff6ba450034f41a747e90a57ad466b70c305b878b1faf58cca80963d04

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ja.pak

Filesize
128KB

MD5
e432000e4b0def8924b39879fa8054d1

SHA1
0ce3bcee45823fae70bfae9e24b15c2e3f218967

SHA256
8fdc72f63f645e96fba11eb74ca54ba549a15f455368a39544f66f35c06327fc

SHA512
96f45c3f4faa003ab46146a750ca49bf1c19830173551acf2c8336a1b97e7755afd563232867acbbb84244d19b26434713bd8cbe7e68c33356e7ef94c208b5e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\kn.pak

Filesize
128KB

MD5
a584313c3f97092b6a970f58451de0d4

SHA1
f6eddaf4de4b5169443f86ee248edb741af486bd

SHA256
2268a81d47a969ab6d9e9c8fdd692206f87cfb1f69169b325c7aacac68b5090f

SHA512
440578d7c7b082a96f7429f78a279f68bdfa50f4f61f05986a0c33f3233a611ab223ffd0c6ff8dd484c703cd295268c63f4da39325402ebf007a025cbce0d30c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ko.pak

Filesize
128KB

MD5
a5849ff2d9b1e19fc4db2661f00be97e

SHA1
4519a6e6be9058088c9226d0f2fa400526aebc52

SHA256
2fed5fd8c8cdb65da453af50abed84b3f036daa360a7fffedfd87879c9749221

SHA512
e8b165cf4064de1cea89f3cc12bfa23dea5e48cfcca6f315a261b0312eb08d5ed078c962f18cf93f80e5d7812f69007564e06d5b23d0c4cfdb7b9a3635afbe48

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\lt.pak

Filesize
128KB

MD5
0d5e4d75a17fbb32f8e887b3257198e5

SHA1
6bfed696b9c9c76aad928df7792f483d08db30c6

SHA256
40134e8ab492b18d6c1f4f911023b3800b513e1e48fdee9602563c02162ba9f3

SHA512
5fe19ee19f50c02d5e500636b043ae6b0fa4cdebf10012a2c821a3f30b7ce6fb08c10a28ff1dcf358675d152110dc1a6370a9045b5ac5307b4ed1fa1bbd36c6b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\lv.pak

Filesize
128KB

MD5
4621ff299dc4499625de11c596382fe6

SHA1
d67ead34e9c509cb4a18484b8783d8cef7114a52

SHA256
b282284dd40a07578c700ee3a2f1a30372acd2b9988f8a1484199353767f851b

SHA512
07e34e3b64851b5d14650f72ce55d744bda4b592290fd50504063677918c2961bf74cde3d92717ae399bce7afe89559d09713d1ecb819e36e8087aee780483a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ml.pak

Filesize
128KB

MD5
3cf719bf4c0c16a963cc0c1ea8a767d7

SHA1
9f791e1c538f6883c28bf74ca8fd9620d32686f6

SHA256
de388a254452b30d4cb60efb8a24f88999508746c060f48a01fc3f41c05e7426

SHA512
ccb919b0d0125d4774c31f9b27c5e8625e5d0ddf44dd88366fa564bd621b4ab9a757b698a45061000c7ad7b989a5f6a515213316b1a18708bd7b06e605ba2a5d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\mr.pak

Filesize
128KB

MD5
ba211f170a4a37bc91b7c231535cc0eb

SHA1
5232de1f313e772c72520957ae9b62506dbbbccc

SHA256
c031a53b52049d9500219b3308a6047625e1e46be0c2a10b09698e74ce9ed0a7

SHA512
6e27ecb784236a5d58e63cdc96379033d73d5913a3a0017a40ca4f684c275d8a2f84b6fb50ad6b70196ae4cb4f61963c7fb4de23efd37d502854b04d130839ac

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ms.pak

Filesize
128KB

MD5
06846feea88ab362a0eb02316d382ab9

SHA1
df300ca1b0189afa668ed9a70ed72f7648b9bded

SHA256
68802e6b84b69057cd3720b23ae5626e568e29fc1f0780551bfe73d3f967d384

SHA512
a063de0cdff9c76b825417d2384c6fa3cb0a93376ccbc308a3f797f5de1dfe2725b7f3618aa5126eb28a85b4094808e176c4f9e9252e5264fa20856090a11e5a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\nb.pak

Filesize
128KB

MD5
d17ff9e4b5af5d95aaf52f257541dd0d

SHA1
b8e88984bcf9f29499bf1d5074f166d5f06e58bd

SHA256
5cc3bf76564c5996d7852099f53006a93a3be137bf1c358f0c7218a42ad6bc48

SHA512
2d279e1fcfced8836a949ec3604b4d89dbab5104151477a9ed02d005d10c6de1efe0afd55113e512ed6cefdda01a2cea3c677fde22e5b04d3c1c1ed9f308ae4f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\nl.pak

Filesize
128KB

MD5
45a17024183e4bc3f8e7c40a0efd5926

SHA1
4752eed1aa0fabb0190566cebf8beaa4bcd4cebe

SHA256
a4b946c02b08f26a6454b2184e4f9d670e4e09d871964db4b78a6b9af7abdb0d

SHA512
842d47dfc53ab368db724ff686c4ae612505ea6e42d3d6668d9ec7c3ab0167b3f5e920a49cff66be02faf1e38522a19a69b10f1d9a364850f12e51ef9817e363

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\pl.pak

Filesize
128KB

MD5
3e064b15a82324959ff86de1006780d8

SHA1
ea8e0a0f29cae10754edc775cad33feaed3b8b93

SHA256
63e7f0a8df0be0a973be03ddc6d2b55416b73979d0571db80202793b0c814386

SHA512
b545af1701ddeed07dd07e2a327cc5ee7a5dd3d46a6f28271adbcdaa11eb8d6e54629ae7bc707f799114243e5fd6bef41c6eb8f61d91c353435b56cfd38a3787

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\pt-BR.pak

Filesize
128KB

MD5
c72d5a1bd0de6d9f678ce71f7304b19f

SHA1
694f47156845040b0dcdc58b29671501a769e2d9

SHA256
32e577856a32abf0cf4617fc403f0c6cee54b80147cae55443079d7f357d5bf1

SHA512
44c7d6c6e5544154ed5513023951c2c5397292eb575255a10ecdea5ea8593578c87f8ec2f06e60a6aee9e60d082275d0ba30bd533bb9d2e40a53b6181d682203

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\pt-PT.pak

Filesize
512KB

MD5
4816d83e54beaa2f94c671d56361c04e

SHA1
5cae66c0b7079d778ac87ad48777afd85b172d2f

SHA256
a903ca2a8e52f987e23d040de7403b58d925a6c39668d3bc0822fb2aadd34cb1

SHA512
0d3a39e1205ce9366818cb51d38db035b80448dc1e2d2d6bbd7d5df693641582043b45b4a78bbf2334159616187dc85a51e623bb6878b1498d9bc7acd2a6ffab

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ro.pak

Filesize
128KB

MD5
93357271792fcd757fd9572fcf3cebb2

SHA1
a5c9dbc1a4056d7ff8bce2c0a94ef39d093038fd

SHA256
0bbbfdc6e1558d318be0212e7006c702d7b20b0fd5363975065888c72a0ee280

SHA512
42964c1d8fb8cd96b61ed5929a2bdce98a679d96c59e6759f503b6409c5110c30fae3c99e60cc231a1fc867d2123533047c747b089f1c54ff2bdd55099c0b931

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ru.pak

Filesize
128KB

MD5
a726359d7cc0d8eb82d17f12a5de12e3

SHA1
7dda091c2662ecf36d6a6065f6fe8aff9b1266fa

SHA256
a8b1a79f77d706fe8a7cb0cfcc10400fd0338880320d935a0a5be6bad6bcf210

SHA512
3b0a11d1a6eb8f3e958ce2eaafcfe03cd8db018cdb507c7075747979296c31134141d4a20b7dadfd90e73b52cb39258294a81a4df761f6bb24d07a041c46b52e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sk.pak

Filesize
128KB

MD5
49f7305d0cd5112074a3af363e7fb566

SHA1
f43740d6d5f044c724eb23d78cf9fb44da735011

SHA256
b0863d99694a95cb567c2891a05ced81cdf0b5537e47787776b5b6fcde68b5f8

SHA512
ec04c80648be75da90726ed131d2182b25604d746b79c5d9999f11630ad83bb5c974a9ea29c0272375b7b9da9d07bc7a4fe4dc198ee7015d68a224062751f3c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sl.pak

Filesize
128KB

MD5
9934d655435c851876bf3a1f742a1203

SHA1
2f90dcaa9e19794afd2f5775d26edcc833f3d83a

SHA256
1fa9b6b50edd0d76bfb713ff3958b2c1ab701ecbbaaa46aab9807dd89d3d91a1

SHA512
5b710910122afe35fa8d346a4fc6bd91cc025cd4420fa1d9c525016befb9cf7b35bd1a9cac7fd5bb58d56e2530bebedfda4317d691c5713dd217c1ce42f870bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sr.pak

Filesize
128KB

MD5
336cdfff7710060fd59a8e4e8d17ad27

SHA1
58e19ffb642e27b7b8ed3f736fd509a2a03975cb

SHA256
e4c309ecd0763675c10ba2d9e67b336fe2008b424dabd429c5b8536a30ddb436

SHA512
dde993430aef35c1f195fff91af861ef6b0217a28983c224f7504bda6cff082bced47239e527daffcb8e02ff4e803d60746d19e7eb1b843701ec9781acb9566a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sv.pak

Filesize
128KB

MD5
9f71b559567ae65afbc049320f3932cd

SHA1
845d63ff5f19f0b4be4e1c97028fc2b72075e420

SHA256
40422d3a686a6001e2de1783d12cfc402ab28d237e236d4aa6e322491b4b502e

SHA512
a14905ba43a719da51b37b2d144a1efb6cc42b2aef30c848c7479ca5f29dde059706a1c3d84eb922cfb910db60517242fc66bc46d77a3acf0cb65eca5913a82c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\sw.pak

Filesize
128KB

MD5
d0b803201a0d296fc1391feeba33b577

SHA1
9c7979e681f49aecc6deadb154248337f2648003

SHA256
2ba3010a15cc842725ed53a9d7fef3e01d97a1fb8f5ceb05f04443f0f6fa3059

SHA512
d365950a042538da72b324a055402809b60157f4cc8db7cc59a40c7f32a6afe3334409364694f9be4a942ceda5f5076a273d04e548be960e0237c87abe15513a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ta.pak

Filesize
128KB

MD5
b880e743f86d263544469546c48d9ba6

SHA1
a6b56ded3ff16c19a6267cb3877f6b3a47516cb8

SHA256
4294a5d445dc1fb1d963dea6db5ada48d2f9ecc7e71a9b1d416958812ef5c94c

SHA512
8a257d94a2825fe5b85e89cd43f619e23dcdad351fa48650fe4fbfc16267aff61c2748459084f8485e682eeb1675a594b6c9fe852d3a83729a4b4cdee7d08869

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\te.pak

Filesize
128KB

MD5
d043db39d507896d0b2a2083151d0a17

SHA1
9bc0193944ed48cb619be5db31e03240ed7bbc01

SHA256
87526e01767bb1ff00848ee069c0c1f55b199264ce55c5e809690d17463ab9e7

SHA512
902e8f5fdccfcacfd9aea9e5a5d5c24c43427bf0befb34b8da373d70c79028c28fe8f448858912bd3d4e94ad703f8dd6c28b0cb7a1466883031c34b955cac738

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\th.pak

Filesize
128KB

MD5
13005450603233fcfa6804c704890172

SHA1
99ae2d4647353b3d7e7cfa7678c23db60ce1b65b

SHA256
799cf9c2f5af2413a98b3fc28ac228fea88ba868eac3da6b289d4a2b7ad92d8d

SHA512
1a664dc0556b8f2de85517e3a200203cafe857600fc6087bc66b367f7c7c10860f3c0302555eecd8afb78b678978f6155a9b00c1873147b07b9a0a4a2369c7d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\tr.pak

Filesize
128KB

MD5
9346512bac33c76c08344e22e9335d61

SHA1
09a4f0f32455ca59af9816ef105cd9fac4b24d80

SHA256
5731d70dc2bb0b6d32a848906c4f151f4686177049b6312beeb78f1aabfe210c

SHA512
4f213fcde7480a70c2d6a820ea7f91116522d3e29ea039e8b783b8fa13a43d0b04335e4f7112e8a7ccec8c5280b009a6a9a5f5570c272a167b1f16c1f62a57f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\uk.pak

Filesize
128KB

MD5
ede2335402e980505323bd622ad0d428

SHA1
d6e5b45e898b63c790b38f711c8f204489239f23

SHA256
11a70881316b79931daafdbaee627d5de3665dcef4f328a332118fc2d9559d02

SHA512
664d745207430986474d66db80d96ac828951e057e283dc158e3d43d4b3f71630504c3663df35d74fa28da03d6dd10ba71970ba15024ff732d75708c624d1e3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\ur.pak

Filesize
128KB

MD5
3b68d767df81854c3f12e2928af5f49f

SHA1
50690981494a02a8f53b67c78fbdd3458ecbd2a1

SHA256
99c675fb525e9d3c38772c199b6d41ef02589725516447acf23c2564ef25888f

SHA512
e61c446ae99035b42f9dec8048207791435a3fc6d7f5d1fd9ea7ed0eedad284fc701b0e78f8bd09ecc6e7503d739697debe3d876e9d78458daa66e2d3c922724

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\vi.pak

Filesize
128KB

MD5
f612fd41fb6b5dc997958bd37251e44d

SHA1
d3a092be2358e45aecc0ae193391d453cfe436c2

SHA256
02ed78715de6126829127b420117cedfeca78c9b25e1ff74db953b6da15607a4

SHA512
d7214bea09e74fad4dde9d2e416c2c429d0b4fae8eacf4f3be7d36e724659ab71a23d32354f3ef3e0ffa6172d51134921bca0d3f7469165e22822c3ce8d37f22

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\zh-CN.pak

Filesize
128KB

MD5
b6f89779ec4b13342e96f1e932f69971

SHA1
f050400e654d656d4188d297d1c697447be40452

SHA256
c0e1e83347f375062853078010f88a055d42a1eb31da4fef1888d5d4bd17677b

SHA512
70674ca75e90ee3c94310e1b826925033e43525ac736b9f7ea2445bcbc3a21d47f3d0ec50d92359d46d0657b37a5d2a7a6676566c48a2287eb232fdb3116802e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\locales\zh-TW.pak

Filesize
128KB

MD5
6ffa01714c7076d46b632fed81da9c25

SHA1
1fb845beabd987643b8747adc133042ffa7d29a0

SHA256
f60c4f5a98d95c91e4ae7ea5fc07d40f38bbed73507b2271b9fa87743332b893

SHA512
73d40b25db5b61821636ace3b4dda0a08e1c196747938927a65c0ba9883ce047305366e184fd851de31fc52ade058485059b91c23f970ca81ddb9c5d1ac9c691

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\owutility.dll

Filesize
128KB

MD5
587b71c3aba31f57da386edf72c5db1d

SHA1
40b4088c1e561440d286ea6bd4ed5c1cb524756e

SHA256
d0d742afe711bf238d164e3e259c9af23a5be37c83083f505051da2fa69bd43b

SHA512
08ecb5af27d8385c5b1670297618fd636ebb634fa1401a0a561f5106babf8163dcece1a25a40003cbd1924fd3b4fd8807111e87c1575c985da0aaf50c4a6cf17

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources.pak

Filesize
128KB

MD5
372b2b84ee60f441226d538bf63ed67a

SHA1
3b5d4740d9e646b55abdfa78abd25da3b9a65c4b

SHA256
b1f41b9016ee0085554642aa76d94e1d1a7ffdbaa743972edf5217cee476479b

SHA512
5fb1fc2de97570dc57a8233af5c3cc5e9fb2a25288d8b77b031968babe9221317dca108662ee6a85a92bc0f7f3ca2f88b94b142fe13c1074322c78531eb0dc8b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\app-update.yml

Filesize
133B

MD5
fb01b9479a97014234fbffba6dbd7811

SHA1
677cca903beae0ba830e569bfead4f1a74f52bc6

SHA256
d7358a93f52b95baa21cd49d81bf22c3edcc2169f9d1728dd70a7af0af212f4a

SHA512
e805b927e30cdac3d5a0f65a15d2b91dc6a511c05e08cdce676a9faeacc88f86ffbdf8de6b63060b71edcb2f8fb85d3d627d37a8b5f0aba45bebf0655f61be4b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\app.asar

Filesize
128KB

MD5
e06314578c26fd6cc8cf42be46cb0503

SHA1
2300627f45d9bd26ce4edc72b0c2c8e9aefde34d

SHA256
555f50392283f79788b6b67795bad720140c7e0aac2194f818eb51414c051fe6

SHA512
e09395d2e6ff755e274d27683db1d1b2b6babfc19e3d0ec57965a92a6c96cfca8c0c8514a9833c87424199474f31de8bebfa77c87404fb6c3af2e42eb7aa95d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli-win32-x64\bin\sentry-cli.exe

Filesize
128KB

MD5
e1582cd0c715b0f88712e01c4a683cd0

SHA1
f86e026ea2ee76fb9519134c5dead21f1074a9dd

SHA256
5ceb74537193bd05dfc7415fd9a7823871246ed211ff8b2b6fd2255442dd5341

SHA512
3f100fe0defceaf83650f4d90e82774fa4ef8a84d73d62afe93417f9174e1c8f0d5cc8dd0acc12ebe580cc361cc2ea113fb6973fa3fb4dd6a4fbd34a4e2e840a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli-win32-x64\package.json

Filesize
365B

MD5
63eedeeba75050dd53797741216e353f

SHA1
24c27f37773717471bd65dfd65950066067df06a

SHA256
8f1a9b77f30b23a9570fcfee61c36ce1ef72ecd75966ba9e1dbfa33847a80303

SHA512
8012dfd3f4733838930cdac0b7d49005eda6be6d5ae832e7149c7790d3074feacaf4367e9fbb2996a49d4da72a2e38d85410b3bb10ebc8c1945f419e5791002f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\binaries\core_module.exe

Filesize
128KB

MD5
74b89f649f8b3e043f4ddcbf944eb29d

SHA1
cda158b3f6f1a9ef34652e6d638dd4b470b49d40

SHA256
f97e0e64f378b594cb678253ac070e73b108f714397b14c7b942f0d28713da24

SHA512
1a6d4e79b8cc6cf40366bb166a781e494cb93c80868a4c0524e7760607148719ba20fb9458c376afa4a70f7964e5c5a5803f42143362eab5cdeeb237e1380962

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\resources\elevate.exe

Filesize
115KB

MD5
d53dfeeb4d0e73a3f7ad0eafc96da9b2

SHA1
b24cafd25092b94e133c0e4ed515ab3854244a6a

SHA256
939a5e8ac7b0251d7f8cc37370e7409b1091aa28b91d061bf78883f78be05d69

SHA512
2fc6926dd8132f8a0d7244a69e86bf37ca12ba33e9136c6e99a1c81233c0a5b790499e6e144afbbd9513912dee5d3f314c1cd33d8707d1ed78a991363c56c618

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\snapshot_blob.bin

Filesize
128KB

MD5
7f182fc1b22e1e66325f9e6a95e98165

SHA1
624bc50f5276637403ec2432b3cc8f0603e7eac0

SHA256
8c720771e898d2e1bfefb6899a10a052b4b2927de31148e70b7d391e5f5630d5

SHA512
aed96d36b65cd2b2c40495c8d81dc5b17d9a1bbb6cd5e6762d079072c0d705611303805a156d4cf2d155469a0192ecf8f9c6509883023f0a336fe1c57eb4a04c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\v8_context_snapshot.bin

Filesize
128KB

MD5
7f581ae9236d613b570308f1ba280be2

SHA1
b04f94eecc8ea19d075844bedea880d0bc07d0ef

SHA256
8025de38985466fc3524299f76c14d9e429f68f2ad644beed5600d310221a7c2

SHA512
56c669a9bcf2760e96549d865de3e3704fbde0d287fde5a95ecdf97b4d2ee73d9ed12de20b9455083ab47f159db11968c380e8289d835993f76b1709305d9fe9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\vk_swiftshader.dll

Filesize
128KB

MD5
f615fc09d9ca1ade6b3f065c479361c7

SHA1
79705be2c8f928a51226ff00c3cf1324b90b63ee

SHA256
f5f6f9e8ab96f836b0d899d0bbdea5a832c094869807fb62d9559af2e8bb8150

SHA512
60372b7bbfefbc44780b69c5b90ff0f639b5b2a210d89f4506fca1bc70c17b7d7413dee8784a1a79abce071ff04a8cfd79f4beefc9af6d1601ee8363d00d9ee8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\7z-out\vulkan-1.dll

Filesize
128KB

MD5
ebd4e480f2bd00a85fed66dd076c3328

SHA1
2affc954f736ca3765c77cce4b9b74996d59c18c

SHA256
767518299e53af4d1001d2e6f73850b51fdf525b717f37119a57a4c7d2239554

SHA512
bedf0d3f090a9215b8ea849c9a98d4ff4813794f7546def2fec35d1a3c162e4a4ff160db94398ee11fefb46fb39084b49d908e6f04eea592a7fa0fbd49ee693c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\owutility.dll

Filesize
128KB

MD5
607646c7dc94a3602fb17c22bc8ad704

SHA1
6bc9775a3adb972cbfc8aa4cddbb2d3649ca50df

SHA256
a6b1811cc995587084572f2c8716910fdcc488618bbced2e0d41deb3eb50cfda

SHA512
b6eea7b0f945ef00d308b1adcd178ae7f1bf2d59d631d862c5d3fd08a147b68f4d483ef207a4f705e3f3bbd3296505cbdbb56f36e45d85762ccb7dcd4de2abdd

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Network\Network Persistent State

Filesize
1010B

MD5
bbd4449e3a5ba532a7b80dbfe5297cd0

SHA1
22fbc2d20981707e72c47e04e1f1709aedd36767

SHA256
6e231395fc1779f699a9da410a07191191d9c9f357b1ff3d9ae58b7402f7fa47

SHA512
49397036f941a4e93a0fa2511f4cbf46ed12a089117aa7987867038f014d4060d25598561677591f501ab0aec267b009b70c77aa3d8652c7ed43df6618b8e659

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Cache\Cache_Data\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Cache\Cache_Data\data_1

Filesize
128KB

MD5
e4c4c46a30c9a1cabc478449efebbf79

SHA1
dc7f9f18466e929a18d5fef1ee10b4baab76495d

SHA256
9d4b2ef99039e3f1163a67a50a94358ca3031ba16410e6f038145d4715bdaa98

SHA512
0077447d0ec84ce40df0da51b329be7ca4e3b1a1c279054df92294f10848a5d250d889f9016334475e3f2df3b21ebd205d13dd962d86d7fdfaf132383061416d

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Cache\Cache_Data\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Cache\Cache_Data\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Local Storage\leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Network\Network Persistent State

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Partitions\__owepm__\Network\Network Persistent State

Filesize
937B

MD5
1779868b4632022b0648a0453236adb7

SHA1
af3f59632e4f8129c734f6273cd205c137bf9e48

SHA256
f474d352c9fa80f02360066f5efe0ac5d80907ee0c16393c4bea5340dc66bf6b

SHA512
19b4fed146d25580d97e012dc6afc95ce25e7e1a4284e8fcca13eddf9ea8ce91107c2b453815fa4d742c6736d358898c7b79feae2d9f78da64bd10547c2f4edb

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Session Storage\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\Shared Dictionary\cache\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\af0c6fde-8c15-47c6-87b1-63663d4bcdb6.tmp

Filesize
57B

MD5
217c781be08416f5b6fa33aedf027293

SHA1
0e76955a55f31406fc64e3b136f1bb9214bc2d79

SHA256
3de8ead96083d18355eed62a5b8089a61f6c7f97ba3dba04cbefae364f0455b0

SHA512
964b588d2bb87d3e19924cf8a16f1c35807c45ccb41caa00be9dd4e34b9fdfa0625973828a9df1f5f56354f00bf13939e01798c40a8a7089c9aee4535e45b099

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\es-ES-3-0.bdic

Filesize
128KB

MD5
d01bcbfc4129bf0d80694df887fb8f82

SHA1
5aab2b87fe02358d590cb75411b2f3b88acad98c

SHA256
e74d7b9ba6f65734ca66f286a3e544c2da10966c7414c56dda124956db92d911

SHA512
be4031e53ade3cbb72b2231182a85f40bd9d1001da59d35a9185f3235b3ff21cca6c8aabb422fbab76f41c92f50da3787716d3067fef2389fd106626f25b7f5e

Download Submit
C:\Users\Admin\AppData\Roaming\gdlauncher_carbon\sentry\scope_v3.json

Filesize
7KB

MD5
cfc262ce395b0b027ff91eec556b806d

SHA1
c85313e9911a8db371636901e43564800fd63274

SHA256
aa4ffdd8ff33a777cd59d11eccab196157d0ceb3e60994fa8f595e743d87f419

SHA512
96a945eb7731f3669fe9ea96894afce9eac8dd9bcadd0ae8ba6285727af9d2371b34109de8fe3cc89c4bda01d2b711d81c087b5c4468b51825e2a6cc0b99323d

Download Submit
C:\Users\Admin\AppData\Roaming\ow-electron\dibeihhdinofpmiennjkclnoidpjakanhclfmpmo\packages\jopghajpapbfooofklncedoalpgiaglgjaokpkon.owepk

Filesize
128KB

MD5
1f0a8bc3df3a633d91c48a1fda6ddf41

SHA1
589608fecd317ceb8bb4bb115b7f99fc7f0f780f

SHA256
314b5aa987b795fc091ccf7b224eea14c01a3d025f68df1b6d8a48bc6591cc2e

SHA512
4ae8569325f6c832fdd9a12a3179e99891eb7cfa0204bc9b66e9a59b98683f463b9478eae3a246b26bc98674cc8bbacf9eeaab3482c97f7091b540ccf66d342a

Download Submit
C:\Users\Admin\AppData\Roaming\ow-electron\dibeihhdinofpmiennjkclnoidpjakanhclfmpmo\packages\jopghajpapbfooofklncedoalpgiaglgjaokpkon\1.0.19\ow-electron-utility-plugin.node

Filesize
128KB

MD5
24af4feef5fbef90321f0e15a23b9aef

SHA1
2ef0f5e855d929f436f7044708761b6d0075eacb

SHA256
e97f51ebafde2df506a27f72f6edeb839a58d7cc2a305543bb50323fcf71153f

SHA512
71c9420958bf6c571ba96328e584422052e574f9384d30acffdfeac869f076fb712282b0931e2af20c10cf86abb703363e2aede52bd6e67703dfb2fb6447ba7e

Download Submit
\Users\Admin\AppData\Local\Programs\@gddesktop\ffmpeg.dll

Filesize
448KB

MD5
ed298fd27e5ca7420b16f9f61fe3e857

SHA1
cb8cfaa1294ed72c2f49de31d1b396a5fce8718c

SHA256
a4ca554597e4ab135ca74582826ba2e349dac9329c8dddf06d327d8464a5d09d

SHA512
77c0033b239220d7a538a17761564a84d2770044ac542908d5ac34979bdf56375705f6f91800a8695191643cdb6b57ccc713af54fe0ccf75a45a620d26840100

Download Submit
\Users\Admin\AppData\Local\Programs\@gddesktop\ffmpeg.dll

Filesize
1.8MB

MD5
66c16d6ab881cc3e0d5f2752fa7e67d3

SHA1
606af017dfe1f93fb847d10558ff0f85e1c38138

SHA256
dc952d5e0bc39ef0886281f40f1f137e0a8581dbb04e4c5b56a6a539985acf73

SHA512
548156ebe17614f3cdf8588ddfc14b6ba32cde712c03b306728f92e70ca68c7b5e2451439c6f3dff60e3318368517b876c92413efb7b227b987742696f5d07d9

Download Submit
\Users\Admin\AppData\Local\Programs\@gddesktop\vk_swiftshader.dll

Filesize
1.1MB

MD5
97269ce95b0f92c605b722e7dcf14b2d

SHA1
0988f4508da40e6f94a5a56031a2f3f3d08b36c9

SHA256
05231a9ad524cf0f8f06fbc056839f98479bb257d4c610e0884e473bda94641e

SHA512
2ed98fadcd7ae8e6e477dbbcb7cb5396b7bed08ddd0ab972b774f650cd5f690f53898c4e6f077231015d5addc2d6023b76f8647cc273faa8e911eeaf7f893475

Download Submit
\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
\Users\Admin\AppData\Local\Temp\nsj4EC8.tmp\nsis7z.dll

Filesize
128KB

MD5
fbd1f32cdce63ac29b6fb5fa4ea323a4

SHA1
088eb006ff8f57a790cf5985ae33e5b1587c9f1d

SHA256
845ceab6f308c77b8c085b61c1791aa40170eee9c0f8a5e2ab01ab63a70e585b

SHA512
4c72f8c60098a2d2cdd84c52224db2457fb151e81a4764bf2519888b1b3072018776cf18e51c0833f7b27cb1396e331b63dd386fe3d90a10d18a3f3880d76298

Download Submit
memory/984-1671-0x00000297A9260000-0x00000297A930A000-memory.dmp

Filesize
680KB

Download
memory/1304-899-0x00007FFD73230000-0x00007FFD73231000-memory.dmp

Filesize
4KB

Download
memory/1304-900-0x00007FFD71740000-0x00007FFD71741000-memory.dmp

Filesize
4KB

Download
memory/1304-1670-0x000002055BE50000-0x000002055BEFA000-memory.dmp

Filesize
680KB

Download
memory/2300-1627-0x00007FFD739C0000-0x00007FFD739C1000-memory.dmp

Filesize
4KB

Download
memory/2476-1373-0x000001ED2C7C0000-0x000001ED2C7C8000-memory.dmp

Filesize
32KB

Download
memory/2476-1371-0x000001ED2C830000-0x000001ED2C844000-memory.dmp

Filesize
80KB

Download
memory/2476-1069-0x000001ED2CD20000-0x000001ED2CD96000-memory.dmp

Filesize
472KB

Download
memory/2476-1362-0x000001ED2C860000-0x000001ED2C882000-memory.dmp

Filesize
136KB

Download
memory/2476-960-0x000001ED2C600000-0x000001ED2C682000-memory.dmp

Filesize
520KB

Download
memory/2476-961-0x000001ED2C350000-0x000001ED2C360000-memory.dmp

Filesize
64KB

Download
memory/2476-1343-0x000001ED2C860000-0x000001ED2C88A000-memory.dmp

Filesize
168KB

Download
memory/2476-1402-0x000001ED2C890000-0x000001ED2C898000-memory.dmp

Filesize
32KB

Download
memory/2476-1032-0x000001ED2C7F0000-0x000001ED2C82C000-memory.dmp

Filesize
240KB

Download
memory/5004-970-0x0000021FEFC90000-0x0000021FEFD92000-memory.dmp

Filesize
1.0MB

Download
memory/5004-1581-0x000001AC21A80000-0x000001AC21A81000-memory.dmp

Filesize
4KB

Download
memory/5004-962-0x0000021FEF980000-0x0000021FEF9A2000-memory.dmp

Filesize
136KB

Download
memory/5284-1509-0x000001A533850000-0x000001A533851000-memory.dmp

Filesize
4KB

Download
memory/5464-1533-0x00000217B6570000-0x00000217B6571000-memory.dmp

Filesize
4KB

Download
memory/5636-1549-0x000001E0EB6F0000-0x000001E0EB6F1000-memory.dmp

Filesize
4KB

Download
memory/5808-1565-0x000001BF171B0000-0x000001BF171B1000-memory.dmp

Filesize
4KB

Download