Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    361s
  • max time network
    370s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 20:19

General

  • Target

    Launcher.exe

  • Size

    79.2MB

  • MD5

    80845fc266ad5e33d5dc6041f489c4f9

  • SHA1

    4dc316aac50de2ede61960b2b56fd43dc26d5413

  • SHA256

    34514a17baaffe570d209aa16f9aeba094c71982181af860046579868f3e6d6b

  • SHA512

    4586aeddd2531117e3b8af99e9e6fe7aaad9bf575be33fbedaca0ca9f3698baddbbaf1a8fcbd86fa33a4726cb246a036beb0da9d89d6431dc5d3d75766dbe40a

  • SSDEEP

    1572864:zJATsCYme/C4YaKJKuoNgfKLx0cwXwusrP4qJNjpOfI8W5ZmsrW46n7:zwfeHQnoNrLx0bXwuwP4qJNsfI8W7mEI

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\Launcher.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:1176
    • C:\Users\Admin\AppData\Local\Temp\2hu5PNR92M0O1p00nF50h3QBkGl\start.exe
      C:\Users\Admin\AppData\Local\Temp\2hu5PNR92M0O1p00nF50h3QBkGl\start.exe
      2⤵
      • Executes dropped EXE
      PID:2264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\LICENSE.electron.txt

    Filesize

    1KB

    MD5

    4d42118d35941e0f664dddbd83f633c5

    SHA1

    2b21ec5f20fe961d15f2b58efb1368e66d202e5c

    SHA256

    5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

    SHA512

    3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\LICENSES.chromium.html

    Filesize

    9.8MB

    MD5

    0ff177fbf2a3873dd573077840e0b8f5

    SHA1

    03d06bc7cd894399a5fc6600a0210f6e3226f92a

    SHA256

    c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb

    SHA512

    3264becd3103c905ab7f9cc034320885f18cbecaa45f582a4a9567ca4bcd620d64dc59fb03532964e775c35f07928a4497f5529cf1b9dc18379e4e9cff02ff8a

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\chrome_100_percent.pak

    Filesize

    146KB

    MD5

    6c2827fe702f454c8452a72ea0faf53c

    SHA1

    881f297efcbabfa52dd4cfe5bd2433a5568cc564

    SHA256

    2fb9826a1b43c84c08f26c4b4556c6520f8f5eef8ab1c83011031eb2d83d6663

    SHA512

    5619ad3fca8ea51b24ea759f42685c8dc7769dd3b8774d8be1917e0a25fa17e8a544f6882617b4faa63c6c4f29844b515d07db965c8ea50d5d491cdda7281fc5

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\chrome_200_percent.pak

    Filesize

    220KB

    MD5

    77088f98a0f7ea522795baec5c930d03

    SHA1

    9b272f152e19c478fcbd7eacf7356c3d601350ed

    SHA256

    83d9243037b2f7e62d0fdfce19ca72e488c18e9691961e2d191e84fb3f2f7a5d

    SHA512

    5b19115422d3133e81f17eedbacee4c8e140970120419d6bbfe0e99cf5528d513eea6583548fa8a6259b260d73fab77758ad95137b61fe9056101dd5772e8f4a

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\d3dcompiler_47.dll

    Filesize

    4.7MB

    MD5

    a7b7470c347f84365ffe1b2072b4f95c

    SHA1

    57a96f6fb326ba65b7f7016242132b3f9464c7a3

    SHA256

    af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a

    SHA512

    83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\ffmpeg.dll

    Filesize

    2.6MB

    MD5

    0c9e32a7e43da1e763f5c5fd1e69b807

    SHA1

    f7226dde5a53355212c587cea43db69ffdf3fa56

    SHA256

    64e2ddca9d8e38f7ffae9b7b877f0df65ebf0c9b9239535201a71d6c8627ca53

    SHA512

    c3b9578ffeba367be5dc919d6390d25509548eeaa3c0372b58b65cbaf309a5bf399f02a94a47ba03c3b9537c992b924ce051675c190cf6a2e428b97b1d7a8c10

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\icudtl.dat

    Filesize

    10.2MB

    MD5

    74bded81ce10a426df54da39cfa132ff

    SHA1

    eb26bcc7d24be42bd8cfbded53bd62d605989bbf

    SHA256

    7bf96c193befbf23514401f8f6568076450ade52dd1595b85e4dfcf3de5f6fb9

    SHA512

    bd7b7b52d31803b2d4b1fd8cb76481931ed8abb98d779b893d3965231177bdd33386461e1a820b384712013904da094e3cd15ee24a679ddc766132677a8be54a

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\libEGL.dll

    Filesize

    469KB

    MD5

    b18e61b64020f9d2dbf23f34f27c8e66

    SHA1

    52659183955060a375eeb3f86f974e8165ea4052

    SHA256

    66d62de4fd8f53a33cdb8bf2459c015a86ff8022e86821d06f1b67a080e80a7c

    SHA512

    f8867c70178cbc506bc024e50353c8076a68c9887529d9bdc7b0063f71dce1d64f77cace112b815bc15a58935e9a875ffd91ed77294a72d3a9bcf0406d897698

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\libGLESv2.dll

    Filesize

    7.6MB

    MD5

    0cd3bcadd2eb658c25bb0f4f0f1ed68e

    SHA1

    5d8bf68402fab7ea43132ee9a1d9384f75043cc6

    SHA256

    86558341956ab58be3ac5b4b2cd04665b44e254a7b78f4b57780e88cfaee480a

    SHA512

    7124e2bd35467eb4d9706c00ad27b971d0e6fd7be41b9f358f796a7288aa70accf3611b62cc7a7f06d75ffb6f0c4ef4f0ae9b9f3a551abdc3c4ed5254887586b

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\af.pak

    Filesize

    481KB

    MD5

    94af96b7f60a4cfb9d596cd8927ba37d

    SHA1

    556833517bc6ad77b5427000f2c3dccad91b92e6

    SHA256

    716e296c2f663ad90cdde85c5134582fc2305e5ebe10649fc9653bea533500a6

    SHA512

    6605688a373a358ff1dfbeda1c09dd031e4a63de662555f5304843c31eb3afcedbc8ffa4dae8ddc1483b04ea24cb709ecc639a9902caa68731d8e44d04cdbd83

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\am.pak

    Filesize

    782KB

    MD5

    34b24f035bad74764b7cc57420488180

    SHA1

    fac3fdba1a94d7676ac4d71447178cfbd1fa4e82

    SHA256

    9cff5c4af5997b45fb2a384bd73560e56bcb7710149e1a7e3e172d64e6eda025

    SHA512

    a01da4c45c6295a57248603f01a6b6231c4ce400aa3ec94e4228b26e8cea995c31d52b2008f99d0f17482aad80f1d67725c32e0f37cad6b012b1022ecde998f0

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ar.pak

    Filesize

    855KB

    MD5

    38b30dfa8ccd369c747c46bef204e2f2

    SHA1

    047976a9b0aad536cc61ac3dfbc37b20f39ecbf4

    SHA256

    516584da5741e7bb49ba6a70c9cf2ac47ff190ca9c4f692c3a30bc03a4560f50

    SHA512

    5396af2e915808abb6f0ff8c4a1c3a7675e620687d717193d5e69905a070accce08925b7e243b54b922e1b022fd6210884fd12b18681e1b7d08f28c542cc4c3c

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\bg.pak

    Filesize

    892KB

    MD5

    d08e8e493f0b3c8ab19070ab05a78af8

    SHA1

    c5fa430269dc2d32baa6885de2453fa84c36f2fc

    SHA256

    d223e994ad1aa6e747507187f724cdede8c369d2e8e0def50c4a6c912dba3880

    SHA512

    4b415fa2ae6ba399674f90ea67e571d90a35fff1ce93df77f20bf692b52c92bfc41e5a3622776e3979b1662fecd2d9665209d5d1d53ece1bff3ed01a28e499d8

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\bn.pak

    Filesize

    1.1MB

    MD5

    696016f43190747d63befa354d76e50b

    SHA1

    3399e641930b820b627a4e28dea0a79fc457f929

    SHA256

    1e49980f89360b395a70e844ccd0c43b3a34eab84461b1499e7621f757149e3e

    SHA512

    3966fcc5988ceeb4dca79c0053fb428e5180029d44704faa4723334c69413a6eacf622e637857c1dcc096e129dd84e2369e4595ea50316cf8eb68696611a8430

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ca.pak

    Filesize

    542KB

    MD5

    1ef1e76e7028cf6e0b1f93b3218feddd

    SHA1

    20c76258573d7499889147b5532a919a827f6de7

    SHA256

    7e8b5bd0a7a9835f20130ed17fb68242d7eb277cfaa2be6407f08c8d0dfcd500

    SHA512

    7e1a7e8cc5e5a2d32192dd38005553961037501a3b000210d92a8796cf65e025c60674d206bd9ca6a9dea5007ae322b2f87b233046d5dc1b838ad3e5b5ad91bf

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\cs.pak

    Filesize

    558KB

    MD5

    c942efb2a8c25205b66a056028a8bda7

    SHA1

    30b74bd9398e330ce5e4f4d3eb343a4e67ee0a41

    SHA256

    21916011c2668389727c8970e1407b9c0806812effab9552106da963951d9f27

    SHA512

    319fbdb304912b5628c0e5330416f000c6e0090e26a60ed8005a66aa5ba698892415ed3dd0e4f4ff8afce7986566d8557b76eed15e493f01f889b7a664180cf6

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\da.pak

    Filesize

    505KB

    MD5

    4345285a4690b023767e352aa2a587f3

    SHA1

    9646a3a5662f2bf233e553e51e7cddf6212f8fd9

    SHA256

    10dfa841d08a3ab094f83e151fdc1edbd66bf8f2392f1511e325628e4e9c7a0d

    SHA512

    2d466e285b44eb0c30f1847015c0056a517dc1dddd4d49c907f070eef5f071d81286cb0834c2a30253d8da9eebb6c6f34271f49850e9bc0cfa7dab0eebdad52e

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\de.pak

    Filesize

    539KB

    MD5

    be9b3438f622428f971c92cd84681750

    SHA1

    80278ec6889973ba0fa47e542fb3e85ee52a3534

    SHA256

    400f965d457e958b063e60131d88eaacd74fdb6213ae14cf84c4b6b45809e04d

    SHA512

    8ec4388dd11829324f72b2828a4282cad5205488d4d47d90da83e25fd9f4b43d1aca1d67f9470a93fb0a23b21094b4c17dc68247fb285317dfd2b01f8e312cac

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\el.pak

    Filesize

    979KB

    MD5

    271c3234e3a07223e6db8f6ab1c18f92

    SHA1

    dbc1ecc686eda75627f3fa60d034ea4021da0acf

    SHA256

    58ca76aa55e11a475c830ac89010d4431f455f531079c1e8a0943490b4dd8e4b

    SHA512

    50e6fab168889a283e26eacd7731367032db41841f39fef0f99543b98266c3784ee62a956cd4415c83a6fb7451b3f618f4f3dcf9807cf9b0f2f595ce26e24aac

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\en-GB.pak

    Filesize

    439KB

    MD5

    b98c06126d26961d99a7ee6e397afc94

    SHA1

    bb5249dda1029597c461564798b77efc1fc0d402

    SHA256

    a672387f6fb84ade1b0c44c456ff1a19dcd464c4a9e65e439ca95a115455340f

    SHA512

    ad3783d03e3e7bb343eac48f179a3e3f799146a8ba7b25e2a02e860c53738b01518dbf5e66097366f0b7202e6c02dc046c6b51c116115cffc02aca3ed962951a

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\en-US.pak

    Filesize

    443KB

    MD5

    88bbc725e7eedf18ef1e54e98f86f696

    SHA1

    831d6402443fc366758f478e55647a9baa0aa42f

    SHA256

    95fd54494d992d46e72dad420ceee86e170527b94d77bfaaa2bfc01f83902795

    SHA512

    92a5c6cfc2d88272bb5144e7ee5c48337f2c42083bc9777506b738e3bcb8f5a2c34af00c4ccc63b24fb158c79f69e7205b398c9e22634dae554410450978a2c4

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\es-419.pak

    Filesize

    534KB

    MD5

    aa187b593ff0784db94718e4bb7aad2d

    SHA1

    fd0a95dcfb08cc6e85a4b61e13e2be705f7cac8a

    SHA256

    dba56ab390a959dc40cb79db195e4ed6b17d4009235063f738b9ebcf41c4b5cf

    SHA512

    66f38fd0c6c6c2f87d00a46c41df57e82c11f260a1cf247e95182628b62f143a6707034f77577348f46a21d633966ff96e5a568cc9da587ae6bda77715c3fd1e

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\es.pak

    Filesize

    534KB

    MD5

    fe679a1a0332b0f36183421a0a41a478

    SHA1

    7230d8646db57466b07a0d700db35838e5030481

    SHA256

    ea54cbe126cdd85b2799ad9600b86ca98c994e69251344163037139296ecea7c

    SHA512

    8b5da5c0e2c55a2dc849050a7d092c78d4bf4975c885ce69d360a0245b1f40bcc9c4cc6eac67d83a6e98f77eb84e1401fc025ccba058be94e962e6f6627c37fb

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\et.pak

    Filesize

    485KB

    MD5

    818d154524c0c900d15a8a25b3659c14

    SHA1

    4121be86ee3869c3c884e3467d82ca6b8f4ae0cc

    SHA256

    3610615dcac844cc9a64b843da606f4f8d29b1c945ecc19b288b54829d0e92e4

    SHA512

    1bffdc771102997bc16b3b5fb01ba009a61a85e7d9c53f32a2b2e713ff70f396a9be9431cc45ebdd28dc5eda43490b8d8d82866b42acd32f49e6368ec0b779ce

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\fa.pak

    Filesize

    794KB

    MD5

    08fcd4a7e857c8b42e61152e437566e8

    SHA1

    018c041227f307fdef2fc38b42a598b73992667f

    SHA256

    34d79e8a7fa478bf3b350412160a59249e87d31932d728f0167cee89aeff2bad

    SHA512

    8405365949f31aeedfea0ecc7634abc81147b0dc163ee432f294926acfed3a71af469e2f4427dfed2877bee5fd38f5ffda6793d564f11c8ed4a6e64a78529d35

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\fi.pak

    Filesize

    495KB

    MD5

    32391a1b0d1bf56bca591971974e8fb7

    SHA1

    b578f82db8f42d9bae763320abf7c8bec886ca07

    SHA256

    01f9669cd2fa17965f882e2cd81c39fa2face2f13ba4f024c3799f1841111ffc

    SHA512

    06e066ab26ceb75d157b35bd283a55f40e2d15698c3f1b62c6596586975e09f5f3fee7d765b10a667b98b347d92883124bbb0f436edf7addea77871542f44bf1

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\fil.pak

    Filesize

    559KB

    MD5

    4990033756bc1b2410e77a607bb62f8c

    SHA1

    a02c0f347606bf50aa6f281e42d2d66ce6155299

    SHA256

    3265ae5b6c16a09b1ec9ea53181de78df75e951c3ce28f33d4c483088a9ab37b

    SHA512

    3d45c6dd30eea6d6929039c0cdaa7bb6f7b665fe67fc7a5ca79567d4fd3f907011857e5cb43c16cce9c558d4f669618bc5378f05fa583b19360df58b12b5f913

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\fr.pak

    Filesize

    577KB

    MD5

    1aea0f212cb96575b119da1f7b84633e

    SHA1

    3d540d9f7fccd4a5ab03824e3b4894aea6b7ea48

    SHA256

    8a283001240c59a552945d0466e3118dc125fbc9f1a10bdea4ca4197460102ba

    SHA512

    be10aadf5a127e7cd354cc2620e162e377e7263ae7c97ba1f026e9711cc8e9655d7a0bb2327ec1f09eb287f68ad4df9ecb133bc6d72adf9d8a5cd6929fec51f4

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\gu.pak

    Filesize

    1.1MB

    MD5

    86b829b3cdcf383f11ffa787a32446a0

    SHA1

    c9f626a97bcf00541876caa7a49d23e0b84b83ef

    SHA256

    74c62dca0b7a310aa593d1dcca8b0b0b382b052837e7cae6b87cf05b8b346b1b

    SHA512

    72b69cc9846fb078a8c03afd60154a3b55bc828b9e13b5124a473c0ee528e3cb3ed67f67d7d763ec8e78883640c53d4c88a7a14552b851d493abf65e269353f8

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\he.pak

    Filesize

    696KB

    MD5

    8cac9a900616961967ba5d0c9b3317d4

    SHA1

    2fd04055155222a1b220238edb3a20a908e7947f

    SHA256

    25281efad59a66f310cabb92da67198451567da553f2c437e52388e8fd25b9a9

    SHA512

    337deee8affc46670d3263ca17c2f8b7aef8450010d4ff2eb39a4bf66e2c6f639643639b2e576961e24a7fc772f331d9ef23085f557e605cd499f6992000c0da

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\hi.pak

    Filesize

    1.2MB

    MD5

    3ddd4ae85a39fe6675365404dca77bf5

    SHA1

    2a3c2fc24612938edd46738f127098496262125b

    SHA256

    4b5585a8cc1a21e2dfcbd0d33f6cea87b7a583b8690f0f3635bd74bb5cbd2ed0

    SHA512

    fbbf103af336eceba0855f341c9e424bcb09c0527a63ce6ceb4773ddc228fdd5996b2b3bfbc2d11c77d82d012f9f4650317044cfbe50fa5adc0acb71c26e7da9

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\hr.pak

    Filesize

    538KB

    MD5

    427d00ead5500f7480cd6ef8de88b0cb

    SHA1

    4f271a9009201f00959a3eab337130ca9fad7557

    SHA256

    d1f8093b91663d061bc2fa20426e2c430d53b06fc605ac1b0b2279d446dc9317

    SHA512

    93190a72013d7fe155404585080c12b64f57948e829888a75d60284ea93cf59b6771956eb325b00eac484c7b424f8b8a1d5d293d90b221b7440ecc63c2899faf

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\hu.pak

    Filesize

    581KB

    MD5

    92995b10868e466811b909c9702f1727

    SHA1

    6cd34086b876bf07dc1222cbd33e8fac60e401ae

    SHA256

    0a62d168c0f6d9d651dedb4e01be5b533b94e8617535cd70ad22717748fbbc64

    SHA512

    412d0f253d31eff5819fc05ed0da6284a39cd5dbc3f8dac81153511c69aef9cd3f1170d3c6a74616e3d9c51bc457045e9715456b1ef50e139f68f667d5662f53

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\id.pak

    Filesize

    478KB

    MD5

    fb42de6be21c78da1b05c518c5625882

    SHA1

    7d8d4e28ea196e3e48df4999d94a04c0be31de16

    SHA256

    d9fc19e683240404a60d57037f24e1d8b20cfda4c8bcacfed577b86cd8988517

    SHA512

    63885e8c82dbef4902c75ae7bc4c3f953057236b07d6919bf3a9f8d1e6ec0ae2cb94cbe0366e56e1272653087faf2fb07b92b18bd312e8e1b38fc76ff5eb3922

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\it.pak

    Filesize

    527KB

    MD5

    d7c45df7f6d29d9a2775f531817b2fad

    SHA1

    f8a11fc014007e7ce2fd0ff137df117146a48a5d

    SHA256

    f38e6b6d975f8148f46dbeda89563cf71bf07af98e9b79c1a8d158b5f8f1309f

    SHA512

    c09b0f026077eb1f0be2206aabfc4bcf201fb2d8c6bb9072f27b7b95ab7fec18a837ecfcdefee2256b2508326e577e6e098572c4d3b0bba4852a79585d4bd522

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ja.pak

    Filesize

    644KB

    MD5

    ace3fef3bcb086a6caafbdfc9562ecee

    SHA1

    ac86efa1b8fe88f050a8936926b96b055485a8b9

    SHA256

    6df72da472ee171acc440c20a2a194a2a4af4839b6a88323c4654c50ff8b492b

    SHA512

    da5425b10b239ce941733781b6994581d37c8b683946b97d759c2915e96808e18ba967849354687b2ba5ba492387b740dc8e6e67badccbd1a812e349693eb9ff

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\kn.pak

    Filesize

    1.3MB

    MD5

    a48fa9762b3504adc3fe4ec828c75149

    SHA1

    043f6ced7e30cee906eb15dcdd3ae59b9574fb1a

    SHA256

    333725ea1045d44acf2c19efc765bffc38cc5cea6e9977fe583ad6e203442582

    SHA512

    40d983b3df4b6cd8e3df855f4062e163bdbdd5142882088e6e8d5ca30bc538af44044f61803d33e94f4527cceafc44059c5de67c847567190767d3246bb93396

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ko.pak

    Filesize

    544KB

    MD5

    c524ce72c7049c1c401d8685772e8d74

    SHA1

    56d28e03538e2fca873ac453ef2698fabda75a4a

    SHA256

    3ad0012db772293073acb05d24b8dfb26697d6cc5dd1612150df023dbc31b674

    SHA512

    ab764fa9b9f82c7146e1b108a2af792c35cba91b0e3be9accba48bac87a13612a61ec026705b77f006519d65a6415a5978139898239093b249ff583af0dc6aa3

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\lt.pak

    Filesize

    583KB

    MD5

    1bab0f6c08b1cb26db455aaf581490dc

    SHA1

    3a32246b812e8ed35ddf0a6842b8bf26b19be9d3

    SHA256

    946351ed2d74f247dea0f2742fc36d89225355480f0cec99d71599ccce3ea9e1

    SHA512

    c6e4502fda62e2606e31a7c67679d59d21a04342c507e1fa39ac59156a4d1e1cab1923de4bcf30b735d5bcf89824d4283b57db11af9673b5b956c2f883a3bc7c

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\lv.pak

    Filesize

    582KB

    MD5

    e4993f39d6fa671658aa3ce037aec60d

    SHA1

    2db9bfc42b07060f6e256c74a01c348cd6c2ac0a

    SHA256

    1e6f9a40f4fa1206117063234399bd7c1e7d198cbf6c4ad633e5e18ad0929836

    SHA512

    4192274330be238a93e370fc3fc8ada444b38fa1464889f0e3d0f6c5e548f7f7de14248937d45f8aa84c043078a69174ac1c9a5894fc9b4ff8f10deef6f77e5e

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ml.pak

    Filesize

    1.3MB

    MD5

    9f0422326953a0c48c1db82ca2a9d639

    SHA1

    2305bc895e9ccc5b9a3d661e891c4f06d8a503ff

    SHA256

    f2fb440eb0518dc695810fcb854b20b72aa47e5ffc75c803aacf05861d35a94f

    SHA512

    a899dd975a56a53503b5cbc7448f54423b18bfbd917f73f0871840d6cf6a574bbaac8d735ae8de6a074cd78c43b6640e3e46be1550dcef8f8cfd1971cc1513d6

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\mr.pak

    Filesize

    1.1MB

    MD5

    b0e1f36587445f28f22777d555683a0f

    SHA1

    42f7cd3c596c2f52662b86df9d9096bf822a80f3

    SHA256

    a674db4e60152fc17a32d4b92add129adaebfc02a1a783a12653f984447c535e

    SHA512

    575fdea827497ceab51df5fc8783f960b87d180f6031f0947525279d224189a6299943df37a014f7bcefc637ee23327fb1ae82eb77c175d63c515b29947ac0d1

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ms.pak

    Filesize

    502KB

    MD5

    c8d605a91b2b66603b379f5557783afe

    SHA1

    d6f294eb91675182f658158ff9399592935c779a

    SHA256

    7707f79a2a4aec553e68af87802a0f19d3714a25311fb7b8afdc6ff4a5b6c5ff

    SHA512

    a9f100dc1fe0a19a0a0a4360fff392af4e07eaed6613ab6dc61548d36afe55e4c9183e6584ca4e15feb477947ee8a79a96775718197129a555319a162281b9c7

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\nb.pak

    Filesize

    487KB

    MD5

    4914ceee005991ad76c7cd75ed8bb645

    SHA1

    61d2732f5d5a20467d7f667b54ab654849d23289

    SHA256

    53b12866e7265661c0088b89653d2c1cb9220e1ec0ce0049f3095d53356b3f1c

    SHA512

    fdb51c9239eb894bc807d56a6afeaa06cabdbaa25cedf3d0b3763c6670321ef7087a35258737c0627b450932aceb7b6859224735bcf53b4b12f6f531fb066f99

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\nl.pak

    Filesize

    503KB

    MD5

    ed94cd5fe4846c197ebcdc3fb3dec939

    SHA1

    3239425517ebc508a449f3998036c21370685e32

    SHA256

    4736b7ec56cb845c14795e6e4fa98ddaba47c75aecec86e931f61222dff45ad9

    SHA512

    0f0a79ae99e8f74aab18c3673e640d4ea5f24d8b88a3ba63ea262da77ee3fe630296a818337c7b36b6603365f43c6f60720336fab9f594eb755f9c7efcdb8fe7

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\pl.pak

    Filesize

    560KB

    MD5

    12c3e7597522f09e87ff438ff2cf5c23

    SHA1

    e634c8bcd7d5f77fdb227f7428c146cac3e87b81

    SHA256

    2191f77aabe75522166a3325e2660395479633b936d5173d150120367ed501a4

    SHA512

    fd58c466458496316c659dea6afcd8dd8269b312c56a506d65db4bbcbd28d37edd137947f3c78e783cd1b3fbe9014480f3c625dc707ec4c27a63115ff8d877b4

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\pt-BR.pak

    Filesize

    527KB

    MD5

    576c1c0bbac545348532ffe36bf27fc1

    SHA1

    55c614f9d31c5e6466080afdaca79b6daf8ab10a

    SHA256

    1deee32edff320827dbfbe22aa42e83d8caf79f95f7cf18013424da7cdadb975

    SHA512

    11caaa048778e258fdf2af5b442eaeadf3412921d2e50065b7217de2277980a5fde086b7d6749cb918090daf4feaeb5e89ad7876ded2fba9f62d9e809593ccda

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\pt-PT.pak

    Filesize

    530KB

    MD5

    e4565bfa531c9c4344f84dc8be207c93

    SHA1

    5d1084ad5bff80383129850a853fe1319c23199f

    SHA256

    fcd194e5caf36be4958c559acbde4f28a957083bf2aceac893f9e5c9e65d8a95

    SHA512

    531a318e8ef1683abe4bc7b44e7d3a4d6ef907d5e7ddfa1f5cea20414dd33060981afdb8d1f4813b05be90985f10fb892f9060f6c1f2b975984f12acc8cdce6a

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ro.pak

    Filesize

    549KB

    MD5

    8c922129bfb61fe14fa035d965108823

    SHA1

    aa8d8dac978053163a303c1f1206480144d4b330

    SHA256

    06c6486e8a42b447a55bd789bf2bc794354fa4be062139481e4612550f16c755

    SHA512

    25f9c2b75febfe607cbdd872a82338aecb5f277ed2d3d80fe0ec01289e3361445102392ea23207658ac347a774a7f47bbe19672d49f080cd6aea220da5ac3618

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ru.pak

    Filesize

    902KB

    MD5

    dbd513d5ff195a0068677ba4aa417648

    SHA1

    9d6304911c1bfd9449a661baab44518f17ba64a3

    SHA256

    6e53b1b54bac43c07798ee6507bd05806fbd2146ac0f987a7f03aae3cf5d9985

    SHA512

    58b903eab4e0c769245c56f1d92dc020690b617d30495e8b436e0e052978c23d38219ad6a89493c116443e8ec4556f59de782326e567088d866751415abde40e

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\sk.pak

    Filesize

    566KB

    MD5

    b74b01d80d6edcf13ba6514dcb1bf3f7

    SHA1

    405ddedaa9e3c9f3b5ddfeae6f440085c155a6f8

    SHA256

    7a1db23a5b4f8e4c7cbc80a832f4f4c33fe29e31d4ae78a814bd8ca85620968f

    SHA512

    2f649b116eb297c7ee7248a35858506f5329094c14be2e6c2cf52bca42170c519ef0446773be096c1571d1cb4502a5a840c3c934710c4900c8cd8344e4e9bd1c

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\sl.pak

    Filesize

    544KB

    MD5

    998585ed4b877e6cb29bef5ec5675004

    SHA1

    d82e9c2127062187a0ad3906579cdc491f6ecf04

    SHA256

    7235e631afff75cad9d25b2e5a0e74696ea6b7f4b2a05753331bbd719a0699cb

    SHA512

    b0d4ad73c4e1aaddd156cd115dbadcda692e314e6f5629e26aa13144e2bac5fdb432db345b68eb79f732e6e102674ebf8cb90c06570ea4d49e4045fbd8cedba4

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\sr.pak

    Filesize

    839KB

    MD5

    044954b860180caff2b57af02aa4e1ec

    SHA1

    c006f910386d7a11c9d074586c60b629131caf0b

    SHA256

    35e57d972a60e161f123a5783e67e250f5cae1f66a2c11b119c10b81c43bd03f

    SHA512

    33d8a0fb6c76364b756eb199f629f930d419ea31f631b8e6935b2efdefeca7f755a87bc3ec5422f9ca9f00da7ed5564fd90e228b0f1e9951a82cd1a4deb9b2b3

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\sv.pak

    Filesize

    489KB

    MD5

    d5925395fb791adebe0d06ce055ce976

    SHA1

    73163c7420f6a70ac7fcb52bb8cd97f4828a3ded

    SHA256

    bcd070d70a4284fd3144bf37c5e56994ca3a69c8f65aa72a9231748b30210e00

    SHA512

    6e0bf0f4d488eaf388431f05effced112e597be52b9c8f199c88ebb6e7e6a28d06f9a180ba3a9e7bf9da5166570077ed895249af7806db74343a64bb598a4260

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\sw.pak

    Filesize

    515KB

    MD5

    0787972a076c6690e7938758c2a92e24

    SHA1

    dbf02e5a3ae26acb060b533bb006756c19122bfe

    SHA256

    eb96ab83e2e08e811928742590178e97454863bc581dd8574d6a644fd3c6615a

    SHA512

    9f3560a3b648b1a7025cd8a98c39ec7634883aade1ac2c7836fde890cc04bd009aa5c1bca8354ee1259ebcd9482326c51a7d21bdee3caf92984ecbefab35d34c

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ta.pak

    Filesize

    1.3MB

    MD5

    85403cab968fbdcbf7f92f3a4d49a4b4

    SHA1

    eacf6ecf2bef4ed5275ed237d3830754db9e1149

    SHA256

    e213c963248c93fcb4b88b1a45936dda28a5fe39cc0428a16556c6d737fc9940

    SHA512

    b49bcd260c38f302fa9fa83a2b17d2f7bf576bae14b64882ce9b38152141504a69fbb73d1f9ef8b47ae1a7a995a41e1127df3689c1e043e3b110cc35b73c0fb0

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\te.pak

    Filesize

    1.2MB

    MD5

    d251d089aa789bccc27a0b473d39e46c

    SHA1

    283d8fb6b6195b3427144773ffc4691c82e31f0e

    SHA256

    8dd7d206379445bd9afa4e01ab986c439cf70841d080fca6e152b453e94fcc49

    SHA512

    27e6f13f6c7937c8121451d70ee90d2a2ce5e519d17e882a86b29a6a78764427022c36b6a99178e9933e01500b55bcbfd0dc79a6f028a046967c2c53f78424fa

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\th.pak

    Filesize

    1.0MB

    MD5

    f30b74c4203bc2cdf830681b14651943

    SHA1

    47f541c0b5ca948dd371e657ac24f7e61b402ceb

    SHA256

    a4c2c305aa9d3df52d988c4da2bda398e8ee81d320e9da1de7d4d366e826dbc2

    SHA512

    a92ac611d43287060fafc66070d7b40d4d253d32cec9cfd01c15fd7892eabbc49c1ba63d03c39919bb2ba94e974f93c73f6e455263ce4e0080fc8161587f09c6

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\tr.pak

    Filesize

    527KB

    MD5

    a4520237e44d35110e003a26cac98052

    SHA1

    8e50c8f88200a417d2d792c67e52ca115340902a

    SHA256

    f842b56ddc4145e4474c5cfc67893900b577c131a4b123cb16cfcad48ed0f338

    SHA512

    b08e577ebe680383f9fb228162ab21e8aaa38abc3e5d0b95326cd579454571738845f4bd86ccd316643f45bf5b6b619dd3f77f67b68b056dde68ee1697029b03

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\uk.pak

    Filesize

    902KB

    MD5

    8f894b4972b41dc4c7b65847ba856ff1

    SHA1

    63ce84840a90485fd376908c39a4125dfd53fc2d

    SHA256

    5dd2fcc64ef09be0775c2efe7e07dddfc18f5ba6059f878d0c22b9b0c2207cdc

    SHA512

    77ecdfcfd31803f308da51e6b2bbd47b7c0848104925b642cbcf877c6ee228c5c7e9dc7746a208d0640455daeeb6dfcbe954d7268119b9c096588deab3c2b53f

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\ur.pak

    Filesize

    790KB

    MD5

    7b5fed5150135b728bf8865246f7c8fc

    SHA1

    214b0f507ff6384b1b305f1718db43023499eeaa

    SHA256

    a0c752a805da7dd6608ad04625734f4d27cb75b682f51b2dc8ef08350cc7a2cc

    SHA512

    81fc55db4b0635e09057fd060d9eb72bda5a5fd2d2e1e4284e1b45098b287c609526c766b030dd0eaebc0836a32bcbf6dc0aae94327c103f3f736b5cd051a8a1

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\vi.pak

    Filesize

    624KB

    MD5

    d910fb70771f06c64f6a2d78ca25d340

    SHA1

    2b1ba5cf58c552984164e65e30cc05744d8ec419

    SHA256

    d7f676cf557d43db07b14a22b0b20ca761ced59285cadd75c07c68613486e909

    SHA512

    4e3626cd558cc75b8833308c816c45ca106203cc054e214a08ceccd3214aa296097153ad69635f584dbab9def2440ea2aed79c0e02464c164bbced572840f264

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\zh-CN.pak

    Filesize

    450KB

    MD5

    6617a2bfccc344c5dc0dfe03762d219d

    SHA1

    9f9d5059515af878d273a9b74f32ecddd4a93f83

    SHA256

    48e32f53d07cad6e6dc12040619f7021fa8f0b3254cc6945905b7c6748acb787

    SHA512

    9ad87e1f4b404cfaa80ba4bd617217bd638cdf7255da0c74d03b8b3123e2afe9f1077f27dda07e5dc71edf82d08c69ac20a415157b12519731e1ebd45fc3b5c9

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\locales\zh-TW.pak

    Filesize

    445KB

    MD5

    197d88a99d2348c9539d388f4b825c4c

    SHA1

    7b634dcd2cd27b2f8592eacfe314cf23a37f316d

    SHA256

    a8b11c74a0512fed29b11748181ef4b1de84dc99197c48d9eecf316aceb425fa

    SHA512

    da7acb060d14f87743ed788df4e2c6ff3ca18a633e46f4d84c4619802edfc23b363f45cec8d2cb23c3e12bbaa547f6df1f5b60ce7ec7d770f689346b0e06a977

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\resources.pak

    Filesize

    5.1MB

    MD5

    97770ebb513490dfb038bed3bc444128

    SHA1

    2e459ca458879ac8f427080764bb5d668a912235

    SHA256

    75e03df55d7d23c840c09288da270285f17d067cef8709252451c0a8aa1254f4

    SHA512

    7f41708f8f29f0a9730e461c7a5a6780824ec31dac6278abb2c42a50919c10e01ce00aa7e4cdef680d667c467bab4683df90d5db2c61aef8dfdf77c2eb3d8d24

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\resources\elevate.exe

    Filesize

    105KB

    MD5

    792b92c8ad13c46f27c7ced0810694df

    SHA1

    d8d449b92de20a57df722df46435ba4553ecc802

    SHA256

    9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

    SHA512

    6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\snapshot_blob.bin

    Filesize

    300KB

    MD5

    0c13aba4e77dd56e5f7ec8f8fdd6c9a8

    SHA1

    e17eb5b549ac1389cf3761da7d2b2aede1c93fd9

    SHA256

    ca7012d6e1478bdd112c485844253e48ef43168c4267ba19be229f0ba2bd6994

    SHA512

    f7d49048af8f2dd58c4af0602bda888b948aeb0846f7f27dd7db873f4b185debf5edf3869f8e311e31865e2408aa93af4f0f67a4f1ca0554ff8a8f2fb9a1214a

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\v8_context_snapshot.bin

    Filesize

    641KB

    MD5

    228cb75c5b14fb790ec913a34c12b4d6

    SHA1

    aa6dbfb6cd403be3110f85c2a3ae72ab575645fb

    SHA256

    bb9c5a66316280c3d90ad63e20e34a7311972632bfd927f9d192407c13714444

    SHA512

    ab6b94de633b71a99b58f3924b0b8a351e0899ccff0fdab35e06938ad22ed62548a331b0b296a886f67941a642fd32d00ec2297b0d687139c0e57d2919739c19

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\vk_swiftshader.dll

    Filesize

    5.1MB

    MD5

    5c4e9c88d8a0f3cf766f14461021acbb

    SHA1

    1d464d1195839eaa6cf13faec0b496146112228e

    SHA256

    cfaa7a0ffbe5761b1d8633cb87d829a8e121448a33e4aa2a0021b8dd02367a86

    SHA512

    1cb5262af4f0b7db0ba8ba0ac2f299aa62aacefa3b9f5e83b5c39351774292daf462a6b0151bfb4a6d20920bf0473b81f486d3e7fcbf0e8bd74a8086ee007495

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\vk_swiftshader_icd.json

    Filesize

    106B

    MD5

    8642dd3a87e2de6e991fae08458e302b

    SHA1

    9c06735c31cec00600fd763a92f8112d085bd12a

    SHA256

    32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

    SHA512

    f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\7z-out\vulkan-1.dll

    Filesize

    935KB

    MD5

    25657db2fd526c1729995a3684c85395

    SHA1

    386992f37c5c4f79e974d5f1438b631b4a831565

    SHA256

    a63a4b6cfb8e5f2be7b2b9b5cb0665932ac2bdbf0f5481d3ab676fb712e5a42e

    SHA512

    c9a2badd476e3537105a388b438f4ce94f4b36143fe1094453f061ce2600f6ba521e7184831eba3767827aa14ed4e1a1a32963c57b86868571bf1a01b0616c85

  • C:\Users\Admin\AppData\Local\Temp\nst6920.tmp\StdUtils.dll

    Filesize

    100KB

    MD5

    c6a6e03f77c313b267498515488c5740

    SHA1

    3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    SHA256

    b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    SHA512

    9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

  • \Users\Admin\AppData\Local\Temp\nst6920.tmp\System.dll

    Filesize

    12KB

    MD5

    0d7ad4f45dc6f5aa87f606d0331c6901

    SHA1

    48df0911f0484cbe2a8cdd5362140b63c41ee457

    SHA256

    3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    SHA512

    c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

  • \Users\Admin\AppData\Local\Temp\nst6920.tmp\nsis7z.dll

    Filesize

    424KB

    MD5

    80e44ce4895304c6a3a831310fbf8cd0

    SHA1

    36bd49ae21c460be5753a904b4501f1abca53508

    SHA256

    b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    SHA512

    c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df