69f2acfa7e266a460567e2d4c3724f85d7565f8b2622fc096d264184051b3974

Analysis

max time kernel
151s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
24/08/2024, 16:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Blitz-2.1.202.exe
Size

114.0MB
MD5

2dfa6604a2b84d63b297e42e3ec0815b
SHA1

11fe9f2fb09b4be8bbd17f35d9687dba3cd568f0
SHA256

69f2acfa7e266a460567e2d4c3724f85d7565f8b2622fc096d264184051b3974
SHA512

e602011301de6ec5e7dd83c439dbe33c4a01fa73e679fa3274cd65f7227461458d9f5d9e1f203273602bc0e493b027a2fd64584eb4d16a34274f61b1b16541b8
SSDEEP

3145728:ScKJkSU6xje4F7DbzRZG+Afxi7HNTmy5pEL9fGN:PKkm64F7Dbz3ewhOQ

Score

6^/10

discovery execution persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\com.blitz.app = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Blitz\\Blitz.exe\" --autostart"	Blitz.exe

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Control Panel\International\Geo\Nation	Blitz.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Control Panel\International\Geo\Nation	Blitz.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Control Panel\International\Geo\Nation	Blitz.exe

Enumerates processes with tasklist 1 TTPs 1 IoCs

discovery

Process Discovery

T1057

pid	Process
784	tasklist.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Executes dropped EXE 7 IoCs

pid	Process
5396	Blitz.exe
5776	Blitz.exe
6056	Blitz.exe
6124	Blitz.exe
392	Blitz.exe
3616	Blitz.exe
6088	Blitz.exe

Loads dropped DLL 25 IoCs

pid	Process
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5776	Blitz.exe
5396	Blitz.exe
6056	Blitz.exe
6124	Blitz.exe
6056	Blitz.exe
6056	Blitz.exe
6056	Blitz.exe
6056	Blitz.exe
392	Blitz.exe
3616	Blitz.exe
6088	Blitz.exe
6088	Blitz.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 14 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
5260	powershell.exe
4052	powershell.exe
5140	powershell.exe
6408	powershell.exe
4276	powershell.exe
6416	powershell.exe
6396	powershell.exe
740	powershell.exe
5272	powershell.exe
5556	powershell.exe
5632	powershell.exe
4196	powershell.exe
5612	powershell.exe
4548	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	find.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tasklist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Blitz-2.1.202.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe

Checks processor information in registry 2 TTPs 9 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Blitz.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Blitz.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	reg.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\FeatureSet	reg.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Blitz.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Blitz.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	Blitz.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	Blitz.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	Blitz.exe

Modifies registry class 7 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\blitz\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Blitz\\Blitz.exe\" \"%1\""	Blitz.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\blitz	Blitz.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\blitz\URL Protocol	Blitz.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\blitz\ = "URL:blitz"	Blitz.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\blitz\shell\open\command	Blitz.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\blitz\shell	Blitz.exe
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\blitz\shell\open	Blitz.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
2396	Blitz-2.1.202.exe
784	tasklist.exe
784	tasklist.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
740	powershell.exe
740	powershell.exe
4276	powershell.exe
4276	powershell.exe
5556	powershell.exe
5556	powershell.exe
5140	powershell.exe
5140	powershell.exe
4052	powershell.exe
4052	powershell.exe
5632	powershell.exe
5632	powershell.exe
4548	powershell.exe
4548	powershell.exe
5260	powershell.exe
5260	powershell.exe
4196	powershell.exe
4196	powershell.exe
5612	powershell.exe
5612	powershell.exe
5272	powershell.exe
5272	powershell.exe
4276	powershell.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
740	powershell.exe
5140	powershell.exe
5632	powershell.exe
5260	powershell.exe
4548	powershell.exe
5556	powershell.exe
4052	powershell.exe
4196	powershell.exe
5272	powershell.exe
5612	powershell.exe
6408	powershell.exe
6416	powershell.exe
6416	powershell.exe
6408	powershell.exe
6396	powershell.exe
6396	powershell.exe
6416	powershell.exe
6408	powershell.exe
6396	powershell.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	784	tasklist.exe
Token: SeSecurityPrivilege	2396	Blitz-2.1.202.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeIncreaseQuotaPrivilege	6100	WMIC.exe
Token: SeSecurityPrivilege	6100	WMIC.exe
Token: SeTakeOwnershipPrivilege	6100	WMIC.exe
Token: SeLoadDriverPrivilege	6100	WMIC.exe
Token: SeSystemProfilePrivilege	6100	WMIC.exe
Token: SeSystemtimePrivilege	6100	WMIC.exe
Token: SeProfSingleProcessPrivilege	6100	WMIC.exe
Token: SeIncBasePriorityPrivilege	6100	WMIC.exe
Token: SeCreatePagefilePrivilege	6100	WMIC.exe
Token: SeBackupPrivilege	6100	WMIC.exe
Token: SeRestorePrivilege	6100	WMIC.exe
Token: SeShutdownPrivilege	6100	WMIC.exe
Token: SeDebugPrivilege	6100	WMIC.exe
Token: SeSystemEnvironmentPrivilege	6100	WMIC.exe
Token: SeRemoteShutdownPrivilege	6100	WMIC.exe
Token: SeUndockPrivilege	6100	WMIC.exe
Token: SeManageVolumePrivilege	6100	WMIC.exe
Token: 33	6100	WMIC.exe
Token: 34	6100	WMIC.exe
Token: 35	6100	WMIC.exe
Token: 36	6100	WMIC.exe
Token: SeShutdownPrivilege	5396	Blitz.exe
Token: SeCreatePagefilePrivilege	5396	Blitz.exe
Token: SeIncreaseQuotaPrivilege	6100	WMIC.exe
Token: SeSecurityPrivilege	6100	WMIC.exe
Token: SeTakeOwnershipPrivilege	6100	WMIC.exe
Token: SeLoadDriverPrivilege	6100	WMIC.exe
Token: SeSystemProfilePrivilege	6100	WMIC.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe

Suspicious use of SendNotifyMessage 6 IoCs

pid	Process
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe
5396	Blitz.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2396 wrote to memory of 2200	2396	Blitz-2.1.202.exe	95
PID 2396 wrote to memory of 2200	2396	Blitz-2.1.202.exe	95
PID 2396 wrote to memory of 2200	2396	Blitz-2.1.202.exe	95
PID 2200 wrote to memory of 784	2200	cmd.exe	97
PID 2200 wrote to memory of 784	2200	cmd.exe	97
PID 2200 wrote to memory of 784	2200	cmd.exe	97
PID 2200 wrote to memory of 3416	2200	cmd.exe	98
PID 2200 wrote to memory of 3416	2200	cmd.exe	98
PID 2200 wrote to memory of 3416	2200	cmd.exe	98
PID 5396 wrote to memory of 5776	5396	Blitz.exe	110
PID 5396 wrote to memory of 5776	5396	Blitz.exe	110
PID 5396 wrote to memory of 5876	5396	Blitz.exe	111
PID 5396 wrote to memory of 5876	5396	Blitz.exe	111
PID 5876 wrote to memory of 5924	5876	cmd.exe	113
PID 5876 wrote to memory of 5924	5876	cmd.exe	113
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6056	5396	Blitz.exe	114
PID 5396 wrote to memory of 6124	5396	Blitz.exe	115
PID 5396 wrote to memory of 6124	5396	Blitz.exe	115
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116
PID 5396 wrote to memory of 392	5396	Blitz.exe	116

C:\Users\Admin\AppData\Local\Temp\Blitz-2.1.202.exe
"C:\Users\Admin\AppData\Local\Temp\Blitz-2.1.202.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2396
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Blitz.exe" | %SYSTEMROOT%\System32\find.exe "Blitz.exe"
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2200
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Blitz.exe"
    3⤵
    - Enumerates processes with tasklist
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:784
- - C:\Windows\SysWOW64\find.exe
    C:\Windows\System32\find.exe "Blitz.exe"
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3416

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1012,i,3861745594156495651,17595114179815238301,262144 --variations-seed-version --mojo-platform-channel-handle=1408 /prefetch:8
1⤵
PID:3196

C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
"C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe"
1⤵
- Adds Run key to start application
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5396
- C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
  C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Blitz /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Blitz\Crashpad --url=https://sentry.blitz.gg/api/2/minidump/?sentry_key=d0d473722f3c496a9d6097abb79c953f --annotation=_productName=Blitz --annotation=_version=2.1.202 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=26.2.2 --initial-client-data=0x484,0x488,0x48c,0x480,0x490,0x7ff7b0fb1ef8,0x7ff7b0fb1f08,0x7ff7b0fb1f18
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5776
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "chcp"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5876
- - C:\Windows\system32\chcp.com
    chcp
    3⤵
    PID:5924
- C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
  "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1928 --field-trial-handle=1932,i,8000744423143956819,13757705686282255870,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:6056
- C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
  "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-fake-device-for-media-stream --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --mojo-platform-channel-handle=2132 --field-trial-handle=1932,i,8000744423143956819,13757705686282255870,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:6124
- C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
  "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --app-user-model-id=com.blitz.app --app-path="C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar" --enable-sandbox --disable-blink-features=Auxclick --first-renderer-process --use-fake-ui-for-media-stream --js-flags=--expose_gc --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=3044 --field-trial-handle=1932,i,8000744423143956819,13757705686282255870,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:392
- C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
  "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --app-user-model-id=com.blitz.app --app-path="C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar" --enable-sandbox --disable-blink-features=Auxclick --use-fake-ui-for-media-stream --js-flags=--expose_gc --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3068 --field-trial-handle=1932,i,8000744423143956819,13757705686282255870,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3616
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "wmic os get Caption"
  2⤵
  PID:224
- - C:\Windows\System32\Wbem\WMIC.exe
    wmic os get Caption
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:6100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "echo %COMPUTERNAME%.%USERDNSDOMAIN%"
  2⤵
  PID:2128
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:4548
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:740
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:4276
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:5140
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:4196
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:4052
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:5612
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:5632
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:5260
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:5272
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:5556
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet"
  2⤵
  PID:3020
- - C:\Windows\system32\reg.exe
    reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet
    3⤵
    - Checks processor information in registry
    PID:6088
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:6396
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:6408
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:6416
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "findstr /C:"Detected boot environment" "%windir%\Panther\setupact.log""
  2⤵
  PID:6156
- - C:\Windows\system32\findstr.exe
    findstr /C:"Detected boot environment" "C:\Windows\Panther\setupact.log"
    3⤵
    PID:6296
- C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
  "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3988 --field-trial-handle=1932,i,8000744423143956819,13757705686282255870,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:6088

C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
1⤵
PID:1108

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

Filesize
2KB

MD5
2f87410b0d834a14ceff69e18946d066

SHA1
f2ec80550202d493db61806693439a57b76634f3

SHA256
5422bc17b852ad463110de0db9b59ffa4219e065d3e2843618d6ebbd14273c65

SHA512
a313702f22450ceff0a1d7f890b0c16cf667dbcd668dbafa6dbecd0791236c0bc68e834d12113cc75352365c2a2b6cfcf30b6ef7c97ea53ed135da50de389db4

Download Submit
C:\Users\Admin\AppData\Local\Programs\Blitz\.electrum

Filesize
10B

MD5
56a973757a296ff6e4da28fa4883cc15

SHA1
0d81ccb4267e91f3a871fa6e9401e8be86e46c04

SHA256
1f9bab6c2c975a0dd3614bb7b8b7045fdda298da93035d95041a07812b3e3a20

SHA512
31177bb9d35a64a14057e4fb12d6c5ab22148108229d3babd5deb429df0dc2c78436f744f7df7ebbcd78528016cd4d0e72c6681713065b0d93dbb7a3fbc57c21

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_2gbttebq.msd.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\LICENSES.chromium.html

Filesize
8.4MB

MD5
8e263cc42a54ce9a3562008eade01062

SHA1
5053b8d240852729c73282c9d2c2beb3d749d2e7

SHA256
6f95e9ff1f5c55233bcb1520c1296a0c7aff9cb4d864086da191acb77e7a068f

SHA512
d25652d9f8ca416219dcfd742ae330319386d499c1c70bc1830a68f6f4eb5cb01072c7986157e26c4298d4587af06d33d0b8c8ff0cec6069577c418618fb0e4f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\chrome_100_percent.pak

Filesize
132KB

MD5
e4cbb48c438622a4298c7bdd75cc04f6

SHA1
6f756d31ef95fd745ba0e9c22aadb506f3a78471

SHA256
24d92bbeb63d06b01010fe230c1e3a31e667a159be7e570a8efe68f83ed9ad40

SHA512
8d3ea1b5ca74c20a336eaa29630fd76ecd32f5a56bb66e8cef2bce0fa19024ea917562fd31365081f7027dde9c8464742b833d08c8f41fdddc5bd1a74b9bc766

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\chrome_200_percent.pak

Filesize
191KB

MD5
99b95d59d6817b46e9572e3354c97317

SHA1
6809db4ca8e10edd316261a3490d5fc657372c12

SHA256
55d873a9f3ac69bbf6eb6940443df8331ebd7aa57138681d615f3b89902447e7

SHA512
3071cfeb74d5058c4b7c01bfe3c6717d9bb426f3354c4d8a35bd3e16e15cde2f2c48238cb6382b0703b1cc257d87fcecfb84fbf4f597f58e64463ceede4366dd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\d3dcompiler_47.dll

Filesize
4.7MB

MD5
2191e768cc2e19009dad20dc999135a3

SHA1
f49a46ba0e954e657aaed1c9019a53d194272b6a

SHA256
7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

SHA512
5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\ffmpeg.dll

Filesize
2.7MB

MD5
0378f24b66466d7ab3321e4ac34805b7

SHA1
7ef73f565d3a9f8b1f5a4a2b994442b17c28923a

SHA256
614b2d4a2d57a0765f92ccafd75d493b1aefb24af0999d10a2b90b4d4a7edb8f

SHA512
0f0e0fc8731e15e4d68cdd24a65a0f10c4f73ce786a7321fe2ecc0664e242026ec28e762a91604e09f8bfe6f90230f05a80195b442da8c3e215f6b282a05d093

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\icudtl.dat

Filesize
10.1MB

MD5
93a9a46ed3d866b0ef15dec17a1089f0

SHA1
7b694a99d123f1db59cd3c8e8b6dbc673f765b88

SHA256
397f173091be0312df508a82ab444c92e3c39a4c72b9e896324f7cae8e2abedc

SHA512
0565c323bdd65dbf9cdff5a9a9dc5089c4d2c35472caed72505fa305c49ae6e76fe7266703f63cae7dc31f31b597c96f9d0993ee6ac036648fe78e06c5e59f35

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\libEGL.dll

Filesize
469KB

MD5
f333553c6bf378ebb7164b83f9234d63

SHA1
44c0527f84f8e8b6d55eab5b3db8c30ba063f28a

SHA256
3c543255d163f16c7c15431a11748341edbe6a68e1e6b4eb468b244b5ff7d745

SHA512
28e295c1051a7009ba6d8f42d764f9844a2861e95ae9a3fb19a7403d4275a520e610021be9987bafc3182693550058e34625c7c68200958c35ed014ee51dc1ea

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\libGLESv2.dll

Filesize
7.1MB

MD5
c0c388a24861df09f5b91f116933585d

SHA1
94cfc73e0dc8afc63b3c258da911cd1e00b94abb

SHA256
4443baaaa9720421bf851b623d885af25ed9d322827f8ca096b5ab76d2ca772e

SHA512
8ba380bbdaa5bf69047e6d371b10e95dddfa4f641446eb45875c3dbb2223ad7a0a7c2c6d725608d36f7836caafc874b926b5f71d1fcb8ad4e741b35e2ed46274

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\af.pak

Filesize
425KB

MD5
13f2bba88538437cd59e7cdc6f4fbec2

SHA1
05d94197ccc845cf0fbbdc3858000ff4bdd21288

SHA256
e4c2378f4254e11e3d79a735314a2ec712389ad4d9fae3fb429d364ea0978bf4

SHA512
06a1456454b543eeeb6f3d0ae4218aa14ef89f1620fd4a7f0013e77d10553bb54ed8118faefffb76a4d8e08ceddc76b1929165c7e711a711cfeda52fc78d9ea8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\am.pak

Filesize
693KB

MD5
39a396fce4d93f744b3c786d62d2686c

SHA1
7ec8176e652b666b6ab9fffb6cb9b7dcfdd1a2a2

SHA256
0b1d326be9dabcda8e37740017383f2d8f1bec7a8fdb1f11ebe538c3632453fd

SHA512
798063b51f745fc2c9e7f852f72ce55939ed41305d070d1844c790755f7ab42a6830406ba2485237d37a0c46b804512e7dc37c65b7f03249c28741a4f706017a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ar.pak

Filesize
758KB

MD5
37dd1013428a907fc1e6f4794c9f48da

SHA1
0c6fdb7a16882582de95ca54b5449c5543664d21

SHA256
e96ebff226ad97b3a0f8b288d6eb79e3dab624aea13365fa36dce1df81de2cdf

SHA512
79bd98b94bad76231d4a298ecd8e274476733a530d77c727b7ee3e4f01e33ac2e76267c8b906d427c963e4d6d97e67dfd612864ea9c9f3b336820a2788a07bc9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\bg.pak

Filesize
788KB

MD5
01dfb1a7815613fa0a5411235f45b27b

SHA1
3bf1ea5597ac77b26bd30caa1efea7cb4f7a1b19

SHA256
13d08d2c4972cd18bb8ea8a57587dad29684c2336f73282dd3284b0649377cf8

SHA512
5d8a65e5a17aa163fb679e003e1837ea96e515b105c9977029a5ca4854845289de5d65c0edfd473cb74410c5cacdb5b360f25a69776705fb05f48688d92680da

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\bn.pak

Filesize
1019KB

MD5
ff4f966849b4107535e41d037d9144c7

SHA1
3a973857b061914e8905bda7e8f2bdafa384588e

SHA256
2dc26dee345271f4606650912b0b7b5df68f621f2920864e0e36c1d1b22459b1

SHA512
98772f266f9553f77f91b11dc4589ec8a0930554e9e0b381bbacd8d23ce794c04f6fe821388a6e87cb14cb59c7522c18c06b1af11fc177c7e40ef71242adcba7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ca.pak

Filesize
479KB

MD5
5fee8bf10a710988a303f2f1fefabf83

SHA1
3558fe55dc043ae3f2cb90ad8244a19560ad3d0e

SHA256
3d82bd3de5447eb04f205383dce91e812e87820bb1e9b0ab5acfd924db1cf8aa

SHA512
41dc47bdb6dd6de249e2350488de9b4740abc61406461d82e33e3bc41ceb53647f5c5b89129da75f1a6130f3e45027a7e2f616f3a9b0fc6abd2aaaf2f338387b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\cs.pak

Filesize
494KB

MD5
1101c784521a550b0561b363722086de

SHA1
838f2bfe3432b87b950a2ec5d9862d2f58fde3e5

SHA256
cc6ff937d1c9fec4634db4e2f6c0718d2606fe2d5d25addf1314e110c5b78772

SHA512
eca3ce2075d3c920116c9e34957631e0617a869467bb76b09873ae96f7803f20032a6dd0a0f785f9e59dcfce3a4ccecdab2d445a860bee20d42e140b45e74089

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\da.pak

Filesize
446KB

MD5
5b033c206820ace5eb4c6f82aed34a5d

SHA1
28017cfc13259273022059f02564ffc99dcd75a4

SHA256
1a51de04cb205c708520f1b013447f1a89f0b1330dbce6d1e71cf355319d1108

SHA512
e423069f7a895179ea17be5774284e9e2e27f02c40bac7d7211cab77348800622796f04c3e6618905364e189ca5ec772ed7dbd285872777d163d3ebec08a64d4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\de.pak

Filesize
477KB

MD5
7ccdc41a3dbdf89058d71629225664ae

SHA1
e15c35b18685d9573349ff4247733b5f5ada8717

SHA256
163ea4c2cf67edd0526a8e18d3810872e92a1d4e17b5cf4f04107fda5967b0c9

SHA512
13b20b0db02a0a7480c56c79304ef594353507e1a30da0130b73aa8e9ec7636f306315a6f40729b10dc725f936642d2e2b282ed3040a079a6f25a7f9f7f1ae28

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\el.pak

Filesize
865KB

MD5
451c678e1af7e79a411057e7d616d02b

SHA1
ec95364cd43436d7f570643897667464d9265953

SHA256
932a3ae4fe40cf79f20991608dcda90e94435d79f9405f5948b8211f8de0c284

SHA512
f15af670831823ddbabd878dfde4e578021af4efd49ef685ae5a77054e21b0a3081a49ca846ade60202ae6e2cc4c851f9384212b6e7fdc7c875134426724f374

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\en-GB.pak

Filesize
389KB

MD5
c27e3b641d2f8533875f5aaba6a7988a

SHA1
05e44a22b705c1e18f11865accfac03e3e515077

SHA256
38d8a09cee11668341781030439729af895ba8ad079775d7552758a9a995f5fe

SHA512
73a61f08447ecf118663ea8629fe81acce86aef11cf3bc965cc407450b6af399df21873bc21240a38eb1cf9d304be219879e280e9cf0dc9ae484fce6ada0cefe

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\en-US.pak

Filesize
391KB

MD5
c9c2abcb04e1ad5f1a20244da8d595a8

SHA1
89ca81da21900074a5ccdcdc852768277b2b620b

SHA256
0364c73f320e441b03cb2afcaaca3ffbfac51a3559dcd0ff99a1accf82c7f762

SHA512
96bbf21174f56a111a2fc6ec024ab2f143945306797e77d773367a7fad42b7828ebb7b08d0dab76858d9fa340bf3205be403bc53df9e5e4e390058c94a751ffd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\es-419.pak

Filesize
473KB

MD5
af687eefaec46e65b8f42b1bb2d01315

SHA1
3eca718dce243ae170823d5509a4711e89b9127d

SHA256
41b96bdecd2f8adb79171b710169683401d5943e86e836280bd26b8100f3537e

SHA512
8a5f8c8b94741036d10e08ac2ee0ac776f69d489a620484b912bdba27645f03d9b4876343eacd33b68b445a27650f5385c45fe8876bed796775da337bf6ec6f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\es.pak

Filesize
473KB

MD5
16bb0e206b7ab4b485dc3a1351fd18cd

SHA1
7f8ba0a7b05b5d147b5f625374974baa7bd5f133

SHA256
2e639f1484994063c8dd2b2e8fcb6ab63ddd79da3c179c93b3b33c092f38bea6

SHA512
be64c5d8ed23b3ed3b6ba55a56f05875d44fc80ff29d225267b36bd299d9d93a67aaf1278df2faf02a1ab3c77722aee64753df1011b848035885e15ae91706cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\et.pak

Filesize
428KB

MD5
c535505444973759c65c3a060aadc75f

SHA1
32137ca1188669f1f548a8208a2209e1b9cbd604

SHA256
890429677a648a0489e734fd3856677c083b9ac1a88ea6c7278c0055bf20ad06

SHA512
4d598453fe4a0ec72ab114b2180cb953c53d8c64a780ada0267a461a672aa5e74389134bef9021b13d09fcbd1320f007e207578abe8028a3b78981b3528ccd36

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\fa.pak

Filesize
703KB

MD5
cf18eadbeca3504b1c375840e8d1c1de

SHA1
ab72aa02f47d500f5bea798dea50cc433120fa21

SHA256
7b98811c21db6284626c3c3c97f6b54a4bccc0289d6c80b980a87a092d1573fd

SHA512
7c579c65f54c80d223dd72631bc7dd54b8a4df59f19c7a6cab6df0925be21b625c5f607609751d36c408c1b516cee64bdc87ca29b3cf3ff331ffa016f4a3606d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\fi.pak

Filesize
438KB

MD5
1cbfa553a5b1de642ea4c248dfe1edba

SHA1
5de05b3c11fdd59ff5064a153a6dcbda33350971

SHA256
8f3e8ec0fbb471b45db65a77dc1013e3363f387d3d0c6a458c90f371907d0085

SHA512
ea3b99be7da893be8c3b228d1d3d7b644a1f5425b5380dc3e0ae0ba1bd29cf39dabe73819bcc4fa67f10a488f018e9fa2328995cb78f40ae8fdb66aa514188aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\fil.pak

Filesize
495KB

MD5
8ce446cac9221f07f912be59534d86ec

SHA1
15cd1b902b26abbe665fed518575748483a9c3e4

SHA256
b6ce37b1aeb4ca17a7f78ebc8f97c2807f588dfc4ad3e0639005c626b5c9b939

SHA512
20be2b5c7e8fca897109b1dc8219931eaaa1c8296b1d26dcc7f9058168fef371d7955fb0f6c5693399b83fa81d27369efac8c3742059eea2333bd66d20b8d0d8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\fr.pak

Filesize
513KB

MD5
a1de4ad3d9b7aa8f122ba00cb983e49c

SHA1
323d6e1b4ed75f9406bb8488d7ffc7e12fa96886

SHA256
a69f52162f6081a06f835ede10818218df6e211f00d0ef24561e6221f4696e61

SHA512
542f0818ea4517fdea929f3d4938f7de75e2a5e6d872607e548f87de7e9cd0737fab3f5e82ab7895f44e809279d81c490999ed055acbddafe84f85e60ce2e23b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\gu.pak

Filesize
996KB

MD5
02bfa1114fd5b75261c24d6c0e6441f7

SHA1
d48b80339405cb8c8ec7a19b688e8d544938c4c7

SHA256
bbb17268412fb3e13584ca4dc90a94f984177d3c97ee89af2a57324709f8ed1d

SHA512
751b91d381c882a5dc0c0ee6313cf3e7ef51b4d369330a169cf9625de99e6019233109e815fc474fae44d79235940ba2ce68af7033f4c4c994e2774bbd8105be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\he.pak

Filesize
616KB

MD5
cdd42769598c10cad3c19a563f04ff5a

SHA1
55e1d0364d41c8ca1b09726f4b42e8be93c7bacc

SHA256
dff85c48182320e584466e0f37aa4b17429e9545fb48d1c4c088d612f7b88b8c

SHA512
dff9558e0e39c823cc88b3bd99ee5c640808949f2cb28f3afa64392d7c105c06c7f78af53ef6284943c9fd53e7ac30862fc2a5273a27dac0ac7cd34a266f8b15

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\hi.pak

Filesize
1.0MB

MD5
cd91036827739441e4cc849aa30706d6

SHA1
cc8e4c53e18db16876f855c2377f3cf0e2abf95a

SHA256
0936587aa072339f8dc347506e5553159319a686010ca1912bed1d830e107c6e

SHA512
553773bdc11be94f495b88e0587d572455ef68c182d51c9e1ae0e3aa23744f836996a446ed136afc562eb9a110e435b494d5955d2792a364a619111e7b3550e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\hr.pak

Filesize
477KB

MD5
ef62a50cc098afcf3fab69c7502219e9

SHA1
db474cf332c90de660fc575ef897d5389b65784c

SHA256
07effa557c8bc822626c05a4d299296f88d3da0654248c326d796f7c2de3ec64

SHA512
7ae6f40c7bf404532df0bc2ffa449e0d99debc2b9816450ed0d015b1634dd96cd5650ab6af5a6d44d52d0e3c9c81836ee350210c4f8a13be6cc0cb796a630350

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\hu.pak

Filesize
513KB

MD5
51b14b96d1b9fa99ed849347a8954133

SHA1
5259b749576a9612e429a665dfc8bf47651c39ea

SHA256
70d4a0724a2e0e80ec047e7683eec7715c0fb5f88795cc97a63e4c2ee2237800

SHA512
b68d4bc792f29df210602a557d0b3333a95e30cd03a0a4cb5f537c9c51da9937119391f2a359c03fb874c1f540c23f44bef121e45f048f32b1db06d67a0bad1b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\id.pak

Filesize
421KB

MD5
3b5e08406059d1a76566e9a5d4c9b15a

SHA1
6bf45f2647e959ec1b545763180e8f29961ab3e1

SHA256
60409d8b785dd057e3495190b18e6d6d235d8313555341cba5f64327e3d8c3aa

SHA512
6c4150c064edf6ed0b83b216ce62134bbab12137e6b45749dad08d1d1734b3365309414900615137c6acdd12250add5c69a222daa7984a94ee850aaa55af1b8f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\it.pak

Filesize
466KB

MD5
78183120a4319dd308aaef43b2f84485

SHA1
0b9e9be6ff7237acb2969d4703f6eb1f929cc1ac

SHA256
c04c144683be80154f229c65d69a2816375260f9c0875e1d7e7da19589f8d17e

SHA512
2d15b9503f95090678154557a546fb3d61e27c510a9721c438cd3c9e41643a27a58e1e970d09418e20fd478d8d29d0d1bff2121be0cea2b1bc2955e4198449d1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ja.pak

Filesize
570KB

MD5
f947519f5558bbb0d860861335a57d20

SHA1
20bb2367c39edcfad9eae3853bfc4dc8ab1b7775

SHA256
2a0f9c4b08b474117b0eae8316a391f77a828d03e32496ed692bdda3c8efb677

SHA512
62c17fe85f88bc8aceb58f09dd501bfdb6170220a4ad84ef79c5a4d0e6c1454695f78374e637a1bc8adc3ed60f6be56886531c0ea0284cd03df31a3e6d847bcb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\kn.pak

Filesize
1.1MB

MD5
73b4682f63377aa77b5161afac7e428f

SHA1
ebefc4490f03c8e7baa68e1a8ef83b2e483f643c

SHA256
0f955bbe226eb0bda2c3528f682281133f2c58a519418bb4f6f89bbe56e9578a

SHA512
590b007631263bae0b9eb68933301e4785b6d6beea4021705cd0157049de07da12c6901b1c6af45a3eac806b869ce9f1ce4ae94d3576b2add49c83712d6c6382

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ko.pak

Filesize
481KB

MD5
6fdc6e46e33311a8fc2ac6bc5f079a9b

SHA1
9fed5ffa64899c137389d88e3ff8273c6da2d2ab

SHA256
150c66ff7d0dddb84dcb6bec9bcb5c6d41f6601496c277b7bee627cbd8591ce3

SHA512
938c402d63196c430c67086a731626ff83f535c65417a8540801321d1c7257ed66a9ec92397201b9e7cd0efa643c8d38f9c4ace8b4c5ef98c3e5b66cbaf3eb56

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\lt.pak

Filesize
519KB

MD5
49201fae17b715a15fa03c4d89dd2176

SHA1
7c559c174850de48c4a2837fe32c58f74d8150b3

SHA256
4a80792cb9a401ebfa7ec3212182b5024d651ca6a5ead8fc9809d0d3ad4803cd

SHA512
3016f721d77206e13e275e7eea1adc95d403feaccf595eacf933940485031e9aac0c29b6f47a9ff5f73b08c354b7b82c72193c83e1ff09d84cb5b9b72b708166

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\lv.pak

Filesize
516KB

MD5
335158efe454819a0dc8de0edb0f0e90

SHA1
85871f85f626db1fc597ef24c79c84115a66c17e

SHA256
113073cf60ae3d2bcf8a61df655762e34ba28e4b35b97de33c18e13f959d76ff

SHA512
f81733bca3fa65c789630b55c4f414a8541e71c4e1aba56bdb9d231ce189677b3bff4dc57c92fbe1cbc88f1f2f7fbf1a7e4319a8918c50409fcba958d743ccbc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ml.pak

Filesize
1.2MB

MD5
1030c08ffbbe7366ce5b7d55bc8ecc0f

SHA1
b45b53c1e47a0051560c607874357130c499563d

SHA256
e1f97ce3011d9231f23fe033bdbb0905c173921b18402d362bfc35224ff67db7

SHA512
3b9127a0eec02f75f79c66f5f7845b65c4ebe2e6a33989c7686815ffe0651be47d42f55c2f32a67a221495a8bebf043d853df7b244a68f89390044210e52dd3d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\mr.pak

Filesize
976KB

MD5
eafb18d633064d0f02a3eff3eff9aadd

SHA1
a8846e473014be80125630f1c5b51366220ff018

SHA256
fcb7c4aeed28ae4d16fa7b82d9571165aab0fdd46eb65d3ab29007231630ccef

SHA512
d332a4b7f4cb1583a5bf5ce08fdb46661a5bccbf0a66f7f5ab6ce04367e9bc589588dcb32f443695a3ab129dc50d2962ed4c138f97858639d4ea37c117e23495

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ms.pak

Filesize
442KB

MD5
3d0dc94a638f98d9bf3c0f60f89a0c95

SHA1
a979b04c65832d908305fb0406cb0653271ad744

SHA256
a9f9ae23a3bc2ac919c5b46d16b7e1f3bff73698d2626260196210e101d119c2

SHA512
6d687f1eb9a7fda3791295487063393b8f0a7409b55461b185aaf106c596229de6988114230625d6504b869d25d7a624bc3b90d66a0bdf561cb05a57d5b87c15

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\nb.pak

Filesize
431KB

MD5
9c18dfa9e69c1d7810132800d084136c

SHA1
bbaa9576e1b012df33d79a5dc7776c00e67295e4

SHA256
4f3babcbec0d138654ec59fd8ab5fd58da2273237a587928b9687928c7ca10ff

SHA512
a82b1e340a25a3858906ded73624bd0be4b3ccd1f5728560480b4a4e3a78529f5a178d20cf7d95fd55ded7ca4fa95a5fff87d89f0520ea08b54e7b99c9057d6b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\nl.pak

Filesize
444KB

MD5
fb86018ca5cbe224fb2369c3295f368b

SHA1
9d625406e5b7be23944547e31873089c53eefd2b

SHA256
0f51c724a8008107b457ed398b29f98b5b41a1da2a25931a566362dfe658c8bb

SHA512
466c59651caab5dcd66e8ed868a3001b76ae100d36eb97fe15ab9d31ff8375f4e0e880c21327eedf7345afab29801ec184c6cf8a0c60e658edb5c427976d34e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\pl.pak

Filesize
497KB

MD5
b44fcf9fdc4ec7bb5e72cae30aa15c01

SHA1
daaae4aa7987bcce299995feea5c54f2d77b61d4

SHA256
7f1a8392fe3aff4e6bb4bacbc1f4b395f08ecafda9f81e36b41b77fb4ab0bc76

SHA512
52b46d7affac4949fa19841d26d2f4bf877e36cbda4b75f3ff289a7abe9a80c2a014b1ae23d3079f4d31ed5fa76c320103733284a2c13d99a451810407325674

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\pt-BR.pak

Filesize
468KB

MD5
a0208192044dbfd3fd15e85b235ce7b9

SHA1
070824915f4d093632ed27e50dd5ca913f23b8ae

SHA256
210082d26b3ea228c87e4711324ad61de91ec9479a197ea95e1340d1785b9cb9

SHA512
41202bd38546fe1e5aed4806082c09198d0b77ff88b851959c411f6834caa5a66105402d4de78975330556cf7edbefb8850c24c4a1162f82f2faae6de9de2687

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\pt-PT.pak

Filesize
469KB

MD5
002d5b37e68a0725dd7d89fe3fc7ec48

SHA1
545de8047d3f89150516b95031965adc8f17df68

SHA256
1fadff356a7e89a8ff2af3ddf84f70fd0ce69525c7787f8adae10beed9d76d4e

SHA512
abad6cbb30a958bb84a521a66636af4221a9f63774122d3ac3b552503930ad83d343ec4c8109c8031cab17c546ef7549aa0f87746e39a80f6758fad28ecee129

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ro.pak

Filesize
486KB

MD5
7056fc61de4a16c7f4f5bf44d2e87f8a

SHA1
99d16dcb3b1aefc472601439f630e1244b1aa277

SHA256
b7ba9435d82f6bedd7005b6e868ee86f0bb6c4d7b312fe5f5d4afbd440ad5b85

SHA512
529152da39f7ade6713206fa9f767b35b9bf03816387579522eea78ac7d0e150bad557fcdbef51e76d52e39f61a0b4e54ff6a3b592eb7e34fafdb98afe460f7c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ru.pak

Filesize
797KB

MD5
05a0abd1229a65bf64e3eeb36419a1d4

SHA1
15211446a070572404ea0e7e3565ab0697f06c5e

SHA256
b25592ef1c37677d5741a28bedfe143f7b2e17fcd711e62febb0562e2d5b5b3b

SHA512
4585c35313b42bd33c2dc95c19dfb7bed90bb37a4af7da809f5a6c563abaffde566e9245173542ffec009dbf5d7750c10da61ce2d975a5a621ca66a7a33a8ce8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\sk.pak

Filesize
502KB

MD5
78bc785a75ee512391a9cb462a771c09

SHA1
229d39e017174dc0a8cefcfcc72b0feca94d6208

SHA256
ec15c82956ebddb7b246c78045ad414ed34ca97d890a915070e252c8715096b0

SHA512
96556f6072e69351e1bbce06bbf896b1ad53060c7cbaf7928eebbe0f610f5e8778b2b8b97a5a268b7942a1c8d1adc6bea0403383a2a5bb99049437e95d575ea0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\sl.pak

Filesize
483KB

MD5
e76e473c419c25768b08a95a2822918f

SHA1
0fa7e2fcabb03a8788f50f1d4b4eb383c833e9ba

SHA256
fcd27a9f5cb4b4be373da7076a8232006ebe020999fdf90d20745f16cd7ef223

SHA512
e39ae0acbb7d148d6ade676d92e83fa9fb433230bae4339c31693a538198bf0679adef51883b96f8dfbcc8593a982544c64a2b265897f35a693183b27070ea5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\sr.pak

Filesize
745KB

MD5
48abf758a49e2e8aab013f2bf56091c0

SHA1
ca909bc28b03bf959ac32e218a318289e0badbf0

SHA256
b4cf2d19b5e443b57ca9d1189880458a7cacfe1c8b231265557a3fb58f597617

SHA512
22d65df1cd35a8127296420a699f26edf55813fd6a970050dc9b2b051aaf7da2cf2fe6314a94977587021c02aa7d8b42541e1d08d5940fb7e1af127e87268c68

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\sv.pak

Filesize
433KB

MD5
06c878c1538813e5938d087770058b44

SHA1
c8ab9b516b8470bdee86483151ae76368646bffc

SHA256
90dc45426bc1302aa05261f136881ddf038272e9ac315297aa8e5dae2b31109b

SHA512
6ddf615bcf0a8c62221233687bae1eeda5cfd749aa8acc179d6650987289201b405edd453fc181a1d250eba9bbdf61ea28fb7c694539fae3d320bfdea56665cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\sw.pak

Filesize
456KB

MD5
55241312a3aaba14a6b19a9012ca25b8

SHA1
69fadf0817faec3bc6b018f0af5f63378ade0939

SHA256
722c86bd857a93ae06ca0b7cfe2cc04237a7ed5a52586cab7246336c802abe37

SHA512
612f815c25e9f593d1f1c4de8e9016dce048cfe90f21319c4cdbb5772580cb8c71229e9ddba60852cd0bec80a07a783ace24f873d90dc3323e5fdcc44905f2c7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ta.pak

Filesize
1.2MB

MD5
2c0a9cc4a7c775ff13a6888234265cab

SHA1
497bde42737667fc833bbb9d8a9edaf014d99957

SHA256
1dd55659ef21082b9d58bed50f387c0e1fc0f28d0ede52251b9ada25ed2a657f

SHA512
b862221cf17d3f2ca0495a8a3e1f630ab915fd9b2a46ac16c71deffee9a6f71264a8550233781474d60cc6001a48c7c658c77d4e0dbd5b543e768928119d2f0f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\te.pak

Filesize
1.1MB

MD5
5f9b7a945638b88e75a3175a7923119d

SHA1
6af614f2cbd72da2224f48a203a6430a623fc7ed

SHA256
3b476d2ce7c72c3a10170808020dc3f1a87309f9f725b08217c4716b28d10888

SHA512
3b66c9152ec032d6f2372ae5075cbfe7d0fb398c4bf173a7f8c76d91d9eaa816e6f839b90884533b46a9224e9fb52c4d439b3d1907885b8e9f80c5c55a852b65

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\th.pak

Filesize
918KB

MD5
6e18856a34a98f71f4566d991b113fb9

SHA1
fc993bf63f55eece6bd9504b667f43188e381dc9

SHA256
e5dd778ad3cdef1bae293192bf7cde1423f37aa6c9529c3d6308a16799158414

SHA512
7ba1e0a9c4daa7211c2b60601d0db72ce740986d6f92649b3b99c7b516c6799eafb0dd93a96dfa1271f49f64899dd156711a65f91ff1dbba04723986974f2a91

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\tr.pak

Filesize
465KB

MD5
f47e92a8f9c35eb5884bdec4362bd86f

SHA1
2ced463ff400ae7b8d63097cc121e6dd04678391

SHA256
be5a3224592a4ae0b5e80277486e3bb7ffcd1f5e5552a706b449622e31f85577

SHA512
843d3999de123a3337c9c63ea5169e1965783108da66966217297eda7f57586b977668186f3d76ee256d5ce4aafcffe8b4cb1eaea20ea842a778cc6d93e6accd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\uk.pak

Filesize
798KB

MD5
294716cc45bcef706df86b63528d8bb2

SHA1
04c79310b68cf51f3eeb126a1d585065d3434ecf

SHA256
af9f638e8ca464f0b2e706200e90ebd6d70f08e378ff4004693606c91aa15d7a

SHA512
cd382e3abadf1266debc8c828ad792d7a1fce1227a405f3c8a68c27b0c689a825d2f4be75f53d9b50f670b6807bb30aa64e1d551764e7fb36233c1c20a1aee22

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\ur.pak

Filesize
696KB

MD5
88eef2798dee8a361c3ea9bafaa02a35

SHA1
6f8d4ce422336ca5048ef35d6ece360a9b416d8a

SHA256
91318006c880e427417a2b2fff81fd451769a5536fa16d1dc185972137bc2d6a

SHA512
db36b58186f165ff3f746ac483f75b6fed596fad9b3f335e86b374b359e563407acf58ac7cded9420e4fcb91f31eebc8a91c7777ea59bafced8cff2f1c0e9a53

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\vi.pak

Filesize
551KB

MD5
65e0407c26140b0c19efa105dc99384e

SHA1
94e8d9ac6d24cd829fe8ff25bedaa51582e50fe0

SHA256
0c2593a21f021128f7882869014f3b6959322531d91af7322c3ea9177c79c90f

SHA512
5802cb5e159d0f427ba738aea93ec192fbe5d2f7a2299ecccdf25e6b41bcfe38656cdc63137119b556a2b00eb021249dc0440344f9174ddeba34c8cc0603ea03

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\zh-CN.pak

Filesize
398KB

MD5
0e4d2848f2e8a1e487fdaced399f43d2

SHA1
1313734f3d15ea739e63b23586f265ae60c9e305

SHA256
01384c60d6a54badd745c55b0a5e8dd83f7f003934acd095986c5028463f1548

SHA512
46552cc0d303a6fd264fd97b6bbc0b6557ba7b2557c2460b98eaef28816411d1ec34ee28dff842ec72a8a8d58476f7dd9d6a6d1b0d0e934d1c375e8ebf71858d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\locales\zh-TW.pak

Filesize
394KB

MD5
af1a09d373265b5e0c703a39c6f77969

SHA1
47fc3d3fe9d574f34e1559083732868bb799bcf0

SHA256
1f73e98ee70a660250cfb138a30b5a263ee0de756c7e35f054a50a5745e16d84

SHA512
f144819055b46288d9827d1b29780135e8a54e94b4736e79db4967898656b8c505e992e7d37bd3c718855651186c78677076498f22862df32ea3fa57fb3f985f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources.pak

Filesize
5.2MB

MD5
df671902e35bd2b5a48723723d16fb45

SHA1
70f55a2342d854d5ed2b5906a605c480311de8a0

SHA256
471e7505949433d21ba107f731e6a37aaeae29e6951594e2e662bd579008d513

SHA512
943798182147e28160ab389b79564a2b13e4323fd9a15c301ff819b765f68e2ca1634cd15374040d34cb4c154839c9ea7c7003525efbd450dd6692d801309ef6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\.env.production

Filesize
409B

MD5
1ed4951b197e8b19f62fd349ddc5c497

SHA1
3c85fc42b2e7da37b889f7387d5d8baf12910427

SHA256
e5746cebef7e0550b47ddf2f6c7ce26153b8bb7e7d78afdc4581b21d2d61a121

SHA512
bdb3b1c717fa25526db787b3f310d40f0b891d9eaa3736b1091dcecdf2c95780d61bd18b7abe792210e147a5dc974fdd5baed8f26367bc22d75baa52f1baed5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app-update.yml

Filesize
164B

MD5
875a5f18484fd4c3272008448a163711

SHA1
4fbd146657ad6dbb03fd717720bd5c63713d0027

SHA256
38170150435f16f6eb41e2528a78073797357d454f0da847c3f0241dd4e09f58

SHA512
ef6e1c03316f39dad05d8b57cd6503e32751ea3f1778a82819d72ba7e56c55005e4eeb515624c6fe5f382dbb3187211bcb74f91b23ce910e42a5ee5eaecf581b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar

Filesize
17.0MB

MD5
8328af90ed48bce519aca4cd52e43222

SHA1
7c03fca59e0c938c2f4d8acdbd9b1469f98c1971

SHA256
21facf270cabe43ef3bc70d2e5b241887ede490323fe9c6865111fc51a1b2e0b

SHA512
deba7347e94a1238874aaa13e0a8630befcf0c8f0e87090ce813d46bfdbb53b5d5263a1679d1bb12e83d95573697aa7111cf2441741301ce526085bf0aaa4b40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\android-arm64\node.napi.armv8.node

Filesize
352KB

MD5
0d54b11f81b5e7a8456af7a8840514ff

SHA1
5c4afe095a14f20fd9e09ab01f084c61be381f70

SHA256
5a48730eb00ed420052488e4140418d87d7e4fadc4c975821cb75e80a640e67b

SHA512
ee46bec1f1465e64d8bd97d84098fc610724ca35e336e31bb6e9a9f01ff5801f0b48eef05fa2772dd4373220b6d0136b41600ebbf6c3873cfa29bca176508662

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\android-arm\node.napi.armv7.node

Filesize
317KB

MD5
b4198ee8d0847182e046491cdb994a37

SHA1
0ca1e4ad8d5e3247f61f2eba3698df2914fa7db8

SHA256
8a6f1f4ede9c14b7459214429dffbbd0962ab18a63573d5e3db4a071b4425e53

SHA512
595dcc842d5e27b2ae2b2b5ed071184be1d2b6f151220e8bac059cc25667ca13fee61d3785a24e9a6404c235d56d5915669e1b6d849f99f0be03d933e7d356c7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\darwin-x64+arm64\node.napi.node

Filesize
631KB

MD5
b1a2256fc3a83e4c38701dd8601799bf

SHA1
992a59c72740c0069693365a25e9b90705cb54f3

SHA256
18b01d23ed59caf184d3236597d786190fd00dfd1b60b47827b6016aed4a0a6f

SHA512
7a1d9b8d73632c2f78718fc9ef3ec0e95f40ba5daa9a8542d2a8d4291c155431ae4d8c91b74453f2eb8e40ef0d57be91e25a0c9bad10b295cbffb068eb52a913

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-arm64\node.napi.armv8.node

Filesize
413KB

MD5
74dd34d7cef74c1edb52edc0d5ec18b8

SHA1
f7a4b6f2ced297940d8eb905dc152769174c9794

SHA256
8a33b138161ee5c9abdd58acca3ad0e46141dae475ede3daacc7a748641c19e7

SHA512
d7c9c85c2f08b5cca981e97f99c2c5953f757b944be274db332f4e018ad0c01630a27487974d06bcbed1e7ecd8c01bd87656340088ae21e490322033f4b42916

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-arm\node.napi.armv6.node

Filesize
383KB

MD5
ffaed8b8a788c8341fea99941d6c6af8

SHA1
540d9be2e8e22c3afe78800bb8a4a4fe1a2dd362

SHA256
7bbecbc527d97794ac439173572b324c036d61a53fca92e7f6136615c2634247

SHA512
ebfff5aa4acd57a3e2e535b637e595c25deb8f049863840a90d8e2d898e7b2e5d5fd3e3aa9e49f4a17899ee31882eb04d625ee125b5f589bbaffff732e942557

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-arm\node.napi.armv7.node

Filesize
383KB

MD5
2bce30f73cd872c45a11c49241c0dab3

SHA1
6107892bd710fb513c2779d5f6b76ac7afeaf96b

SHA256
3e1893440bbef942c70830d325f28e18b8f424e4a2d0530bcb04854707faae84

SHA512
a4fc370af020da6a53ffc07ec049944fad86e6f6cd9ad5400315d9da40239c952f804684f7f7f0a55ccbddc1406863e301be7d265fc71bacff8265434a038bd8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-x64\node.napi.glibc.node

Filesize
485KB

MD5
5475ab592396587c524cf06cbea197f9

SHA1
2cd3e30c8469f624b368bd31d7fdf8f602dcd1bb

SHA256
a4b2e54a3b557a027356ae0f5d11645393f5fa1248ff773e2f826588a46e17ff

SHA512
b55a3c961bee0e6331d3b5a584dd001d64499ba3ae77248c7d5ed02abba5ccb6db09db1bfe53bf56f3e16ce9ddc2390166c19b663d4d5f52730c3685a871d9aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-x64\node.napi.musl.node

Filesize
449KB

MD5
e61864dff370fa147c7eff58b86cefb7

SHA1
91618e40257a3030b53d59f165d5e0d990ea5a22

SHA256
7e47d25bbbde4268ebadef394c651f3851179a6937bdb7acea6f507a74ed5081

SHA512
9938cf613aac452bb86a3a4cd55f7c2270749b715620c9cc9b3270ea83fb97ed8fbf1b726d2617dd7c6b3c1193afa112e6d38d186acd8fb351d9e70e649714f7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\win32-ia32\node.napi.node

Filesize
434KB

MD5
586005fbe56e589599d7f025fdd780b9

SHA1
76f19ae1912e31d7527520db0ed17966a4ceae3b

SHA256
a4f03881ba542dff477f08028c9ea3385662f6e540f3f46b3118a60ec34cf692

SHA512
6b426f7904ad1e083e907f1d1a8c33650d3cee32aeee2835ee6a99dd00116b304413d4c7ff3f6230ff838059d6296ed3222f2254154259c6edf14ad30f9c1983

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\win32-x64\node.napi.node

Filesize
502KB

MD5
634880d110281abbdb792740b736716c

SHA1
d7744ef00679b1b75a2277ed02110a3606c838c4

SHA256
2e46125d679a7e1051fef7b862008ff520e06b49130c70378ee817ca7c63cafc

SHA512
7edd950f5a779723e85780c61d3e2fdbe0a24883790172035c6fd452724f73240f932d6d94791cc468d05825ea606cf1d1bf8cc5d8279bff0dc3f7e508edf0b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\LICENSE

Filesize
1KB

MD5
f6c414bcc4984dc9495adf4f8a8e76c9

SHA1
8c0563be623b8c40ad7cca0b9245d4d0c930c063

SHA256
9415b233c6c5a6fc3ac6977cde3530d149f45a61d86b2fd9611cbca4bf08f4e2

SHA512
023ea74e84b1ff671a5cd88ecd0ed578b9e52770ef7b0947bc909d5e0da2ee4181814a9734ebd8ad7848da3d594ee10d189d50cd9de11dab0cca502daa59fadd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\bin\lzmajs

Filesize
1KB

MD5
cdea38e7d795ce6e8274bef89c773780

SHA1
7bf89bfcaac6964e4f551233f0daea7dc2f58930

SHA256
f29aae866c7bb66e5424a730c473231c1329f6bb0636ad33945299a4c4957a50

SHA512
401068503e0cefa4bae0c524bafd903f83ce945170a5a28fa5b8f3004c9b1afd09db188e416a071011276c836a6a2dd75ca5d9397e7d24cd1715b6c46e1b71e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\index.js

Filesize
13KB

MD5
ff2e30ea41c50e397cc5fb516d633d2b

SHA1
bfa32375a230e4c6b37d9dee9a94bd106af80bdf

SHA256
77d9568c9c5479953a4588875b9d5c4a06ce9f926f9fab96d7678e68a74e6985

SHA512
bbaa0d96fa3b546fe913d0988dbac54c8d963b4a79f8459c22cf27920e754977f471ccecc07bf9936bd34a3b65dfc6517ae5e126dc260d68347f71f3106bb51f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-build.sh

Filesize
138B

MD5
cd2e20d9a8384d3090058e3428d6b327

SHA1
b3f90405a89eeb07ff6fc4243be8016ce2d6e1c3

SHA256
ae56a4c3e521e37c5677e4d867e79ab46ac23b3f5682a7e2893497232a0326ce

SHA512
d39514e34aea97b3b03b966b76affc5fbb740799bf15219935d8995029a1fbeefb59d3a2a356ede3cbfce69ed0d775680dbff33493d2585a7ab29b84cbb70527

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-config.sh

Filesize
733B

MD5
e886188759f08df991ad8af4bbc333c1

SHA1
b9644330527cb91fc20e2d66a93c8380f71932ff

SHA256
100d04495f6b1804aef3983377d91509864758cf9aa7470d28a24b69f0bce116

SHA512
b4b30187505941eb75d44bdb51d4bc9ee778034d0850c7253a38ca636a620c9c6ae8954e43515b57ef409adcb6a91976e4e92f49b466c6c38e7bd33a79340ce8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\package.json

Filesize
777B

MD5
26d1fe454b2c4f81e114e798c706c8b1

SHA1
a97b9dfc25e5d7d13da483257c86ee04df440b0e

SHA256
492448e7c5e26eada710d45c14a2d8eb5c6333eb39dbaff4631befaad37e0ed6

SHA512
5a60d5213a4ed341dcfdabca3e6f736908ce4ca1859dc049dc079f7f8d8a439f809de20b501907a7932199882988c261539172eb8539ac1aa4ad39a791e4791b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\electron.napi.node

Filesize
227KB

MD5
d9d08aab6b8f1725e7e79819b0ed52e6

SHA1
bc08e98564462675100b8c244e45b6dca7f504e0

SHA256
b322385eb19c1d0737144fbe2fef3c5d27b5e5531878f5a21700489785e51ac4

SHA512
3abd4ffc4b04a0bb2c46a2f60901728587b116b0cd9aab15d77392cd70118f2d6f03abbb172d01e162596fc5a205a38003b3025d59587ea565c10b29d84b4eb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\node.napi.node

Filesize
227KB

MD5
d4757cb9d3db465324fd6d209159c3e1

SHA1
d7e219800ffa8913b7ad75720ab9771a0cfe536d

SHA256
7eb79b4ace336fc1f31923f7407d997d2676f95a5fab4a3dc4688be2ed659f1a

SHA512
9564008c36fe2610224103c0300cd8616ccb5d1d92eccee20124369bdc2267fc9261de103c1be50d34328493d96f90195ce7ff3fd73b006f81efaddc0c5246fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\electron.napi.node

Filesize
434KB

MD5
7ee8fd865c9bc4cf48a3ffaa31c5c83f

SHA1
c3b6eab72a5a365470b9c093917a072ea50f19ee

SHA256
37713bcaf2468d4a60c94652dd2ed8801fff57f270650b2fee90428bc5ad290a

SHA512
a18d1bbdd3345090034dab3400cebf5aecbc080e6dc358d63dc448e2f20cab3aa95d967a3f3af013a6c7e8b957a5a7b79e68fdf3cc089c5a3d8b5837d222abbe

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\node.napi.node

Filesize
434KB

MD5
001fbb6d0df309b30eb8d164dffe5b3d

SHA1
ebc50ac789a7d5541162365de2dc8fd45da01b5e

SHA256
5c77fb5f183ee197b110c76440b390d74aae7c35ab1ea48861308d8b62c22f65

SHA512
46ef76780c0c0c2c1a1b524708f66fa2f53636cc46fcdbdc3aa572423beece14cb040d0e943739f1a32eb381689d72e06d38789b59ccce5f694cd64a9007fdac

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\electron.napi.node

Filesize
421KB

MD5
5a8ff3c35b7d2d367d4b56f016650860

SHA1
43f00704db624630f2164d52e47e93d4430b764a

SHA256
99006146d3f02a3701a254dbf57d10175a2950fa7d85b4dee90b99c997d882da

SHA512
753b32f63a2638b49123b49876c8f0e336aebcaed128b181b7555de4646a9f3e1e2419b7489de61888a5b18f40790507367206507ee52afe92d19abc78129721

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\node.napi.node

Filesize
421KB

MD5
c5ac962f6ef85085075bf5e761696f56

SHA1
0574d6d3914d86027d35c5a4bcd36c9f23f426fb

SHA256
9a03f9e38254ac721d042561b23842c944db243c3c30fb21f240a577a34c8cb8

SHA512
64323a70a99aa2a018e5c4e43768a3c4b9897e8da4cd34a580cdb50d7657a54a3bf36ba4ddfa21f70a84b4800e788091a7c65ccce6ae58e18528c0b5118a1072

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\electron.napi.node

Filesize
619KB

MD5
8e7adb376ff87a10990f783562b06a4b

SHA1
924bcdf667dcb58767efc662068ffaea2f40e7f3

SHA256
e73951d1d9f4155cadbeb530be14dd32e1abc4ad9332527507ede586ce41e095

SHA512
6a18f6f71a55eacdd4dd415e3a39ff2fd551594d332921e5e68d717142ec75595a32dab7d40aa82b33dc33c27661e7382d622dea4173a1deb88fcfc976621e23

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\liblzma.dll

Filesize
148KB

MD5
29e433f0ecf0cc28fad655baeff3d006

SHA1
9948f1638d3afddf346d901a04a9e5a83df5b9b4

SHA256
37c4a4277ac066522402c71fd03bea5e8900fefd505ccf9b6399128c92182780

SHA512
98bf4ceb9a04d50cdf64dad0fdd40e5fc61a2ffd7032aa4cefbcda0fa8dc33988902b5ecedf7f7ff5e32fde729dd8948f6561f38626d2140fa1f36ce7fae4e3c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\node.napi.node

Filesize
619KB

MD5
3a706e64b17cc01d142794436c95805a

SHA1
f1bb6751517c517681bab11e5c47a9a141e659c7

SHA256
ab5e095b49f13ef86a3dc83f0c11b9bee1fef24a4cf0616b0015d0ebabd443e5

SHA512
f839493cf238c735b7937d361bf08cdc2ef3381ac88accc759096baf0c6063660ac9771d18de8c3af94b5b8abbb1fa079bd60824ec48996946fdbac6f5f92ac3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\electron.napi.node

Filesize
797KB

MD5
b872a2c94ff78af34eb7c14c71f7a784

SHA1
e8016fafa0a91176d56664d9218abbc286707411

SHA256
5c7dd24a625d806e37cca949e52ec348ef0054a902e8700f9fdb61cac44e4c9e

SHA512
df93b9c2e8b118d3e01da7dd63af83e4bf0c36d835ee49167aa49b3a9459b6f21b0802feeb6ed52d7eefc0c1270128a7748487ead1bee82f2039745599a80262

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\liblzma.dll

Filesize
147KB

MD5
2e91129e126d90edccef94ebf7abd6e1

SHA1
a8d221d3475216c11f4beaed8c9b9f33ccee32fc

SHA256
fc7348418be392d5ecebd7b9f07c1ae5bc530260fef923801b140088eddce96e

SHA512
dbae0120c0b3709811fe9a738a4d66da4b47a1d09f0e5be373a77330d57fd87068963c76f294eac81723856dac500e3b824e7def828a1646fef611230d42898d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\node.napi.node

Filesize
796KB

MD5
218fc90e5725a6a7ddfdd1edb760c12a

SHA1
2fd9c618e6105a81c1f812d55f405a947b61fe3b

SHA256
c738ba03c84330556184b07d4f9a94bb875807834f46c0b49ea42c8e45df714f

SHA512
7d6d0cef3b33a092d9a8f37e2fa2f3ec44b843f4bc0d3415d832f3c183318cdfa3d05590d94c552a1ef322de2d67bcb24864c65f4fe43293891755b94bd8062a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\filter-array.cpp

Filesize
1KB

MD5
8e23561dd14a502f4aeb34b7849b65c8

SHA1
53948762c109504e00f33397d0e321bcfa0a3ffc

SHA256
0cbca5a1c726cbb06e9f466727cdd2eeabf33588f9b54138eaf14f5e8eb1f988

SHA512
0b736a09d67058239401637c70777dbd9848465fc8396e8dc5797bea37080c23f301b06dd135fc5a9c6f41a5f673fba267f6da37ea8ca7525cdef4dcf560cc2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\index-parser.cpp

Filesize
15KB

MD5
62f707e008a9e9656f6930705405501c

SHA1
e6cef294446b49cc31a0c60f3e7b50c2cea1e512

SHA256
9fe709a77ab9073a903922a88f242f997985fb62e997e1c876685a67beac54cd

SHA512
b7333cc3ec85fe2245c18ef3f12d62daee5d28a7adfba5287718cafa5d14420db4cd6bde2c1a6fe5d5ff7b7274a36919771269192cda2913bb174f71cffc347d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\index-parser.h

Filesize
7KB

MD5
63d0a3834053264a1c4931f95d6d9593

SHA1
e5cacdabb9affb24978f355be2fe44d066f4d79a

SHA256
e3f9760df002dcf558888484cd4eea67b4812b9ea46411d4574e1f1270d7feeb

SHA512
d21af5f4a91683761928b9a72534ccd151fe784cca10b1f962564eeda727186ee503c2d33b5baa351193d6eb715a639fcbd581a464d21644e9742dbb78f8f80d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-functions.cpp

Filesize
2KB

MD5
8149efe3570be84844b13d6e75fc7730

SHA1
d690d65617e9b306ea834ed4f474f1842961290d

SHA256
0061d0cf1cafa5664e456d28156b26b864eb3db973e4d7d66c8e6a00951a5820

SHA512
6501ad70ad90f3856e8fec7af9093204b3918a50b06beac740dc7117221fcd76bdddab36e5be389e1291cdbcbbde619b2ef2c14cc7942dde1c12da3abadfb494

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-node.hpp

Filesize
7KB

MD5
072370882082895f5139689e86f49c00

SHA1
4d089c24f57f1db3968feb1bb58a9c25a8e04028

SHA256
083be435288cabebb7e7d2663e06396327b5d9c58bc0a48ffa1e849aa4bc3998

SHA512
8816ee2612b750b9319818c9fdc34090ca09580573280c89e52d5c2d3c6ec948ccd875cd8e7923ddd43736d65bb2e28d59bbb81c95f5b9cc5b1a0b229cead0dd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\lzma-stream.cpp

Filesize
10KB

MD5
21991cda30fe580c6565f24c466bd655

SHA1
c9f9d17cc6416785fa1ea269348e8c7d0192430f

SHA256
62a94542647f30332b4c9d4b26092980a46e056b15037c68a6ad2463beb378d8

SHA512
e627939079bf4b84c3e9c88c28c8bcc8367aa192b1eca8197e5e4483fe7ab361b019084989997aaf76f61c4b7f38fe6d49e51c79ced22efd510a9ba628c6c58e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\module.cpp

Filesize
5KB

MD5
4c0b5026d5ad68ffa3066a750d2a15df

SHA1
2729919652da9287b9e953e87d1c199a43974dad

SHA256
952f0fe5f1e6421a91f5cfc5f1556d8f88af6072676bed71691c2d1dfe8bbd33

SHA512
a59faa2709968cdd45a6fd90da6895a131ca2b12fcf5f773c04d0036b12e52384dd0c018fab8859f3479ed3ad124d07d0a8eef24118ae87b1ba0c2a87b731e52

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\mt-options.cpp

Filesize
793B

MD5
d0db0166396a8028ec415f5bb0a38414

SHA1
a535ce118a7beca7f82f4eb6d5ede65bc6229a08

SHA256
955fef2460387cab4f96a45bc03a110bf82e062d1b6f62c524cd037a9835857c

SHA512
019da332d4eeb394e6dfa7a19f584af7b7a086b5c5cf9c7f3f20b530e578cbe1b6947d0165b12ea7fbfa7438ea14f2ebac64e73e53355ee81b65b13c0cc590e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\util.cpp

Filesize
4KB

MD5
0ddbb6832b2a2e881f9ab537b158c1ba

SHA1
760cac4a71bc91b3217d71148acfc6864140a79a

SHA256
88a6913de83d47fb45ae173d7b61c2545d65cf19707ceaedbc0385bb1ea0301e

SHA512
fd617cbb7e5b7d511eb7836e6b3a4a505ed61c0e80441788f4b3aeb3e00447b0d655737571821050e3a1329758bb785855c2ca19e98b5c0e4fc15d3615314624

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\PinManager.exe

Filesize
41KB

MD5
349c62c8e1c39de20ba24badd6d849aa

SHA1
574030f3177c0663bdda7ac0f4a33dc437a7c801

SHA256
13afc0e1cb2a24d2fb506ca9e5fa7ab8dff74029f30346611c11040e74373b64

SHA512
a94dfdc7acf37bf3532e25cb06d15363c78c3ad8d7f21571f6d82ce440f14c400b98a409a55e3382672608f8ffe4a39a9a98a3e8444c86193609bbf99710c339

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\apex-internal.dll

Filesize
3.3MB

MD5
656d04ce4deb3de39153c95c5cff1336

SHA1
d1fa67170d30d99de95c48626ebbb381389b5e8b

SHA256
325cadb7e9f61c960c49a03ef916f178c910bdc6c134a43f0b208d14751136ed

SHA512
2692d8994c7ad07db8224ab70df557b33e9953b27da9ec2636b0b95669ce3eae6ceca4df7d191a2ca9f2c7cf0c190e2a0d00fc365f546cf8f2c6e855d4d23e25

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\blitz-csgo-external.exe

Filesize
3.1MB

MD5
d7315f3703e3673046da360d74cfde0f

SHA1
675e3b2b1bc9618c40418cd76905d5cc208cdc52

SHA256
3118b7128f59f7df95766a04943dd5c6ed47fcc963b3f6a5bd350cdbda01da0c

SHA512
e4b23bd32f2f588dbac45ca757ffe6a99679e288877e0ff117b514c0ac1ad771b8b17851f5d0a3251e76bbdd90787366a91cb4d5548efd8c4f0ad168448e782a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\blitz-overlay-old.dll

Filesize
3.8MB

MD5
904f402532004edab7e88a0a8adb7de1

SHA1
32e5da14f6d94d6840378b85617e5a50034d2a75

SHA256
5ccca21c796b09baadd63a044d30d9cc0b8d50fa0560cdd432c40cec7c3643c1

SHA512
40e7ebc4167b10cc6d858264866ffd9140180ae26e7c4a53322bd878317b35bdeaea1fe35f7beb52bc5dbdf95140887c37fb40ff93d0046bb54420ad181b7470

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\blitz-overlay.dll

Filesize
3.8MB

MD5
151915c2b92ca44bff1a4cec32846cad

SHA1
a5b7f6dc9c9f420d45818ce4e01ddf330ad0dfba

SHA256
ffa8f2906ba35716113df2cab8f9fdb5a584839f182b4a0f6b1eb07c45a76aad

SHA512
51ff50f8002e587f0c3670241393539d1df42b9d7714525926ad90dada2c5c68d0cc40094764e3177ab7e06e9b3b30f65124c077745e448cdfb0fbc303c70fad

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\blitz-update-digicert.exe

Filesize
244KB

MD5
229d244a355b1fc32f569090c34f8360

SHA1
ebca3086116971daa70ac0ee7b67bdd66ecb709f

SHA256
1fba3e3c5ca0d9dc583dd39f34f75cb2475e0d36c01a2902d9a4bcf01d5febb8

SHA512
0d31189fece5c253cf384997691bf92349703fe19f70a40ff979fbcfc324c38794589b0751133b2094523b31fb22fb77d655f781078a6148e37dfee5fcc41fb6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\blitz_core.node

Filesize
932KB

MD5
d38cd0507df5e8f2273d012102656c99

SHA1
cbc9809c1d08a36f36608393a2c0392b9f618bff

SHA256
0716738d25997d2929cf51bf450bd601c2553479469c857384b7442825e9ac28

SHA512
d26f5bbf1b87afeefbb0a208e57eb51bfc84ff2c75bba56b62dc5a297d263977fedd908c05d395f0af63720f00b59c31e9326ea7d2bcf35bbc8ef8c7757775d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\blitz_destiny.dll

Filesize
2.0MB

MD5
4ffe3dafee7f104edebf07b02ae650fe

SHA1
8545d585e908ef768d439c34b1d18e81167d713f

SHA256
1a06bebb6f6da41dcaf6d0a60749a5444c48b2eaedcdf565af8a8f53c46b67fd

SHA512
a5e530977a351555a3ce2b2bd7d930ceaf675a2cff495ba0b499444d7f9750780b61ce6c2fa4213b740a5b052d9d8ac996d88f5cdb36fb64a380c6fc48c2cbbd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\blitz_eft.dll

Filesize
3.0MB

MD5
93c55bcfdbbccd7b62154af2f9aaa21f

SHA1
be9bef97f08a78fda674420325b79d81098913fa

SHA256
d48ecac8d38120e92660f18e190ff2698fcdf0fd9bc03dde8000493dd75c3635

SHA512
afef0d59036c9e1efce8022d39d641722cc8e646a01f2e618e5e0493052fd186598754ef8cce3522ada61c2a5bf526d2048b4f0382dd95fbf89df0bcd79469fc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\blitz_fortnite.dll

Filesize
3.6MB

MD5
c5c4e5c25f3db46c74fdc3afb67253fa

SHA1
4705c942104794a254e0cdb78a0b22287c3f43c0

SHA256
681802dac5df0ecf6affb20271406135976a4d374e9587c3555744aba78b375b

SHA512
3014ac4563515eb45aeab28c62ea7828fc6e325c9f26ffe7c3e3b3d6c4e58018318d639f96921e88ccc75656c4eb6da88306e4c91c9e2b29728637e7dc6a709a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\blitz_palworld.dll

Filesize
8.5MB

MD5
a0407f214918eb78c67b71e4450c3001

SHA1
cdc88af86f0e7116cd051cef1d61b214bc7d8ba9

SHA256
6b69d7a420e65361b29d504440ed7e51b4b8264e6d7461a36caf55765e8cbbf1

SHA512
1019cebfce3965dfc15bae82d14752c8975b842207f38dde8461f0d2a79e334aea65d4b2ea9fe12354de2424cbb5fd52faf19f3bf330d3ab322411679a067a25

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\csgo-demo-parser.exe

Filesize
13.1MB

MD5
6dbcab5de2c7b749f600ccb2586efdf0

SHA1
d17177b472aa84b0f7b384c32e376e002508b66b

SHA256
21747e836936c2cfa58c5f79aaab47fe7d7b3d3917a2effc18e58bfc454ca5ef

SHA512
77a361ba19f258e32a1b9d38f0fd93c7b18026331fbea83ed13a4dae241b08980efa87ceda0bf03b457fb0643d40d68552860335d3f36b16bdde8b5d18be9b8b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\flutter-worker.x64.dll

Filesize
2.3MB

MD5
8f1de45ded71d1056bf274075b654206

SHA1
4794e8964ee939cd06670980dda2bf55f7f94e24

SHA256
0a3f4ed5b3683d8bf3dc8f202c372e99ec5db4066bbbf56bd5362a71ce9e3ace

SHA512
481bec214bc5879f3be8aedb98f9dd5e1eeb0d20b533209db2392f2269a14e2f607daacfebd3bf4145726049466051db6be8293d6b8e5222000ddd05a28d73e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\flutter\app.so

Filesize
7.7MB

MD5
793cc4ced7a4d280e7bbe14f4fab1759

SHA1
969aaff8a29a52f433aeadbc659a2dabbb78d436

SHA256
f318c8768822b93ce4e39b451e1ce503b451906f06c2ca6fb590ae26ed5befe1

SHA512
7149edbcb082ea3f5be443180f437cf8bb8f29d23252ad939a001ad80584efe37879caf668f9416db81a3b522cc880dffcd5e86aeacfd2c8b60c9d6beac77a3b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\flutter\icudtl.dat

Filesize
10.2MB

MD5
e0f1ad85c0933ecce2e003a2c59ae726

SHA1
a8539fc5a233558edfa264a34f7af6187c3f0d4f

SHA256
f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb

SHA512
714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\flutter\resources.dat

Filesize
3.9MB

MD5
d4fb2c371f97057e41293857df5724f2

SHA1
748d9d5c8116d1ac7ff332dc846985d1b203189d

SHA256
85706531a630d4ee9c2afb75e9d3e915989254ec1d8c45c9da52b3f2213c1c07

SHA512
6d5b8986c6f2d9d855d0bbbbdc14b133118cd9cb02ccc20d325d5dcbbb3569257ccb053a6dd1853a85a95d59e608a21e82749c6c2eafbfd4b5c7cecc6dd034eb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\flutter_engine.dll

Filesize
10.6MB

MD5
a814ab4375ab3c731d25b6b2a2c4bcae

SHA1
329ea62fb2316e2d350d78b939038f3d0711fb52

SHA256
dbacb0cf112a8da6de14b6c558ed7be1f4f249c19abd8eccafe79d8d5adaedd6

SHA512
0f3c5388debc3800a93892e36f143813519e6e2ff100c3923a1ac936c60775ec6cb3c4e80f78a5c558def94c563f10cb10f121b333c1f76329aefe2847def572

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\game-shim-external.exe

Filesize
2.8MB

MD5
7b411ad81658ac2a469521bc14af5a2a

SHA1
7d51a0d7e72ad666a78915763c7d3056efc10096

SHA256
7fbcf03a4acce371e2db7fab85c8a10736ff9195581d9adf966e0306dfec25f3

SHA512
5a4ea8a5a7c61b0a46c7f1fd5e478f47f64c94c089f2288a060a6e2207dff5c2693430f156531958683b5b9ec002651baf202acc14fa29c3ab214e6d0f82a12e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\game-shim.x64.dll

Filesize
2.6MB

MD5
7e71d4a751f605fe68c93b3ccaa6facf

SHA1
1c008ed4fc582cf9c79828d215316933bf230c14

SHA256
ce6f83538d0a70e3236f779981a718b0a3c4d85f84615917724e7c7b66013618

SHA512
45f6acd854a5adf63c3633cc9a4b5bd2fa133d1d165cb4dbd1a1711c4a9d55d8dbd2d98faf76c1ebe445551b3ea041c8bec0291a8c6f0d72d78c6b99f3d5f371

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\index.node

Filesize
3.0MB

MD5
225ab414dc427cdbf3e97ba06a160ed2

SHA1
83439310a25756a49d67daad73bba2b38ea36500

SHA256
b9c93c304a1caafd1f518d6f10fb54c2d03a466c405bf1a398bb50c2230b49f7

SHA512
d00727ae9e326bde8fb45cb9f7c377590d88716c393870fbde1f89727ae26d4d3c251009e223aef1f29ae4a986b914aa05ea50226b76a704e42087fb0179e541

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\safe_x64_injector.exe

Filesize
298KB

MD5
a92e13aff6048f416411978188915e94

SHA1
e4c801311d0fd00e849476e5dd472cda43da7a9f

SHA256
88f5a8657d884aedb94277ae84de2aad9b895d9c82cdf685bacc59b28089e645

SHA512
6bdc95aed2f55a2f44e259281c07bb24f94d9d541a6b268cc9db025c7e71726ef69c91784f316af6dccdc1475179acf1753801d82e8d72f11f5a52c01aa3d106

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\safe_x86_injector.exe

Filesize
235KB

MD5
1614fbd5d69bf53d80fc2f53871e0cb9

SHA1
c1060155b6fcfb7206e28cb139e3b37bf87c2ab7

SHA256
a43fd7fbc14d9e5d8a54f29a8a6b8a6196399d4158a4427a7bd4817137ab22ad

SHA512
54dbd78874c3a12f1d0a2195bf3a29ec1bed754890a4b9b5b80358ff6b4624afef48aac32607c50cc6d21ece5016c043e2176525d0f84122af5e417aee6b23ce

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\steam-tool.exe

Filesize
2.6MB

MD5
27663fbfe2cdec136fdd2b8068ffef7c

SHA1
0e298c8eeb5d870f561f2bc613d0cc4861e039ee

SHA256
c945392b41c97e83c385496743d6348d715ae7b115880f3e17160b995cbe4d4a

SHA512
d1adddb3cd27d98bcc64c0acba60fa27d6259e0847970eaf3145db2c47e03ac6dd6878d001499e70cec774fd25d9e636d60b5e10f3d88c5a5d99ae8838a34521

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\steam_api64.dll

Filesize
291KB

MD5
f3db5801dc9b75da671b39041e2e8bcf

SHA1
40d0ae44e090db49b2309fb152fbd3e11124a376

SHA256
a44e5537939ae4eebc69000589aa9b2437a667813a1657cc779198bae9b815a9

SHA512
9abeb8542ce48f3d263e9924a82cafa80b42b730636f1df6e594679482b6638997563b5d752d5505f25596a5d0e2f56f1255e4a94bb9523d47c180bc131e22f9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\binaries\valorant-internal.dll

Filesize
3.8MB

MD5
d71293221b7935c93fc1798767102d3d

SHA1
7b2c0153090e33eb80a90440cd2423e61c2422d9

SHA256
bd9e26459da44174480761749e08d85b80b9358b8cb6ba42bf83247423ef23ab

SHA512
70ae9dc5e5099aea7aed4f84f09759ae1c70f409f4144012dfad3d3c4a32315f728345ace81cde098403b6a3f06ddc06b4495e4ed5ac41c7db64a1fc4ec9915d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\resources\elevate.exe

Filesize
105KB

MD5
792b92c8ad13c46f27c7ced0810694df

SHA1
d8d449b92de20a57df722df46435ba4553ecc802

SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\snapshot_blob.bin

Filesize
262KB

MD5
1f45b15aebe0f8d2326ac06b52d64396

SHA1
03b38aa11be8b23055453b560e33cf9fe3a4f9c3

SHA256
57cb73262e8a93baebe63db8a5b70b829f2bd3062edba20ab4015104d476df56

SHA512
b584153bc040591696b3106bcb517ff20dcb91dedfa2ede2012edeb44d93f455a23982e6958ef0f08242aa51244c368399048b84d2a8042454bd17d9ea95caa7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\v8_context_snapshot.bin

Filesize
581KB

MD5
b291a4e181d0fa1f65010e13b91c5187

SHA1
aa9b5f3665c02d4d3d77b1fc5cb5f052d1802db0

SHA256
535fe8389ba233e57182fac05f96f612d04187d3cf7ea8a2702e4e28878e97bb

SHA512
730269dd2a1a2fe889d470c2a71af03fa529b5346b2b24aea953843db9d080c541bfc548bc12dedbac052d62bf262b10ce88e75bf8815a7424262ca0d58f5afc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\vk_swiftshader.dll

Filesize
4.9MB

MD5
5880c4d14b87bea998ad2fe554b9f56a

SHA1
9c40875fb01cf8e959bcce11a081b2fe013bb82b

SHA256
295d58f6a41857f08367627eaa985fbf62da59e85cc93e0ba31ce120232e5ccd

SHA512
c839bb18caed38ab521377961867f54ca6a99e787928dd8577af80b46bad70108e2d447cc24570f7e55e2bd162fedc174380a4dc8bf0e686cca9c483a8e6e755

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\7z-out\vulkan-1.dll

Filesize
917KB

MD5
8974a14c8f37359f54295f673324b8c0

SHA1
223d980f2a32b569a97ffce74491b76bcaf02913

SHA256
925fc969b7b4bdf9b852cbdd0578b684449a06ff2f88fc61034735bf1ea22ece

SHA512
455eb36e6b26eb668226b89c21b2461dc0e09c6b3827ebae0cf56b6738706cf29564d5082406f5ae7b8af852a9fd6c3459ea993e872763b5aba00a7499aa60ae

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\nsProcess.dll

Filesize
4KB

MD5
f0438a894f3a7e01a4aae8d1b5dd0289

SHA1
b058e3fcfb7b550041da16bf10d8837024c38bf6

SHA256
30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

SHA512
f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa7981.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Cache\Cache_Data\f_000003

Filesize
56KB

MD5
281d42e0c96ca3948bad4509b8b7938f

SHA1
533d60d0c9dc9060ceadce70cc5af56febf92a12

SHA256
88fa4c28aa3d6c025767815183b29e8ef78273ef8b206fde0ad90c43021e5568

SHA512
bec017e6709fb8e9164c5585cd85531c5eb00fefbda4b1c18c21e43d132521df3ddb11d82d1c2e1e3d17825fdd9e9ac219d35a4967b2ca9569073291c9cc61fa

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Code Cache\js\index-dir\the-real-index

Filesize
48B

MD5
31344446ab7e2720e40382c2df3ada03

SHA1
6abb0b77bfa374760ce60a79e86534f33a2064da

SHA256
48e6e87ee26fcf454bf32704f9ca5b3e2f3580e4abafbab76e8fbd592f0788ea

SHA512
2ae50fa7913f23df12235c67ae503c33f796bcc3b22ecfd08d64f9883c6523e2caa873a4c4e99d861075d8e18109c02da2c50fdfb7b9ac6f0d53717ff4c208e1

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
f8931b12ece8a7a580bf924b8c783823

SHA1
ad67525f0b6f5dc696b604c7fa31b24ff4f4ce15

SHA256
c4d1d86ad2247ec61002acae7526ba74800b1f5eadab24063801a8944d3b21d5

SHA512
0dd189389422a53f60fb8b1bc5bbf8d0f8fca061b4622a966119dc49a4ce5b204024b8aebb8586a372ea3b56bf46cb81b7721773a8c4c78dbf966f3481c98e15

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\DawnCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\DawnCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\DawnCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\DawnCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Local Storage\leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Network\Network Persistent State

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Network\Network Persistent State

Filesize
2KB

MD5
c975525fd9f523a9708e64fa6dd10d60

SHA1
80bda8be9d90879e620d95de1d08e18cf9f6b783

SHA256
ecac4483baa7e439741f5debeb3b1a4cb73590ed15e06fed0e41bbaccea0c36d

SHA512
3eef6a7d31551c6df356bc216214b313cad5c5776a4350dc59f4f037d0769f734ad6dc0ef486e9ff77f9a48d7dc2bb6c46cf31e6521fd0b97fd564958728800e

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Network\Network Persistent State~RFe593df9.TMP

Filesize
59B

MD5
78bfcecb05ed1904edce3b60cb5c7e62

SHA1
bf77a7461de9d41d12aa88fba056ba758793d9ce

SHA256
c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572

SHA512
2420dff6eb853f5e1856cdab99561a896ea0743fcff3e04b37cb87eddf063770608a30c6ffb0319e5d353b0132c5f8135b7082488e425666b2c22b753a6a4d73

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Network\TransportSecurity

Filesize
355B

MD5
c530dd53ba25a9ffa97e0d0102f0e008

SHA1
1d26ec9c71a394bc0c347d0c047c31ae57c39103

SHA256
92f78d37889c9f5b2f86d042f3243ec027ecc5568f4b463e729e0ff252551a9f

SHA512
a7c0417479411cd1648320c3b6e4db8c6c6bdec01be23ebafd787e18190775e43557ac30ce9c4ad12eabf392d213251b7a5a452ed6d95a447e5b29f601161589

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Network\TransportSecurity

Filesize
355B

MD5
78661b089a47461d111910271bdc17ba

SHA1
38af39731f587b0814e8cacaeb316d25df8093c3

SHA256
f3db4a85f650775a4bdf50b01293778acc8f3dd3d34af02d27fd7e7e24c88790

SHA512
e46d53dc9e92922528cfdd34b3a4aec9d80192bf0a88f2a92f2f5cbe629b1876c59d5aab15740a6bcbaa4daeeebefff6791a5237daeb73a1020f08e86ac4e0d3

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Network\TransportSecurity~RFe594b57.TMP

Filesize
188B

MD5
d70354f983810427ed828da83ae2705c

SHA1
4f06372f5af25a65dbd54b36fdd823a13b4dc3e3

SHA256
2e7d00f5b4ad0a80e215e22534cf02a38698371e95b8e4405c0be4ba1d2d5244

SHA512
680cd51816911b79ab9e74a8ee4ccc61927b9a5a988b1a1bd54f9b85bab8a76d44796c0ed35102f2c0190f794c8ee14e28d4791401650c922410184d4e6abe85

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Preferences

Filesize
57B

MD5
58127c59cb9e1da127904c341d15372b

SHA1
62445484661d8036ce9788baeaba31d204e9a5fc

SHA256
be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

SHA512
8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Preferences~RFe590872.TMP

Filesize
86B

MD5
d11dedf80b85d8d9be3fec6bb292f64b

SHA1
aab8783454819cd66ddf7871e887abdba138aef3

SHA256
8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67

SHA512
6b7ec1ca5189124e0d136f561ca7f12a4653633e2d9452d290e658dfe545acf6600cc9496794757a43f95c91705e9549ef681d4cc9e035738b03a18bdc2e25f0

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Service Worker\CacheStorage\def18c870a86b4bed9723549188adec65eda9630\index.txt

Filesize
104B

MD5
abf7ac9d95e5b636f6bcc1d6fdb4dfe3

SHA1
7973d53fcf12d8fc8451fc20b04035711ed0fbb5

SHA256
f5709dc63bc59c6c307149485657ca678f2650b9ac474cfbea1f28645301803c

SHA512
1c2792cd44cae76208b3e5385e619609228af5811556e62f8a221df40f17402952a4023a85e9a3a36c657823e1d32829f6b5d3d0cd8e60f6d8d83ec12ee78dd0

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Service Worker\CacheStorage\def18c870a86b4bed9723549188adec65eda9630\index.txt~RFe597083.TMP

Filesize
111B

MD5
ea8f034d2fc101b5045596b185d80c63

SHA1
2894c775fa897082b8cf021ea0b8154c86267317

SHA256
458740c83b1bc7859e9b0ea105a0e7b8a853390e13b656a9e5cf2c0852a8b2dc

SHA512
d0d3c7ba8607fe0dde26f37928a2453dbaff2255f5d9e0c757e6b90d2917ec9371c29b4503096b4fe6b615beb1d120fe776871e161dd2d33e62837afffd2f475

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
906e654045fa36fe83df7447f75ee443

SHA1
b86d3841c8db259c3443267702acc0c93c78c527

SHA256
6c9bb54540c32abf5c6d3aa2781612976fa495c14fefbd9a50869bfe1b60f908

SHA512
b28356bea2a4fae61a183e299ad1f07a6995ed3ece60de87525be8ac989898ff6c78fdba58a1f7665554c03c0643d61e73c9161e8352b11a9ef0c184a361a76a

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Service Worker\ScriptCache\index-dir\the-real-index~RFe597054.TMP

Filesize
48B

MD5
8b6ebeb0017242e3f7d048f0ba56fbd3

SHA1
f909c6c3fd2b695f386bf1b2811db74258905c5b

SHA256
c370846acbf82f4218457cd7ed1954f42f3ad77f8697886a2765cc00a86fb592

SHA512
d4c62452c7c42953af4140ccf21603891b1463343f5be02232978a93544b961c4c58892e15af1d89f729aeff7f74b30553b6e6d17e5a9ebab476742071dbb9fb

Download Submit
C:\Users\Admin\AppData\Roaming\Blitz\Session Storage\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
memory/392-1499-0x00007FFD1E7D0000-0x00007FFD1E7D1000-memory.dmp

Filesize
4KB

Download
memory/392-1498-0x00007FFD1FFA0000-0x00007FFD1FFA1000-memory.dmp

Filesize
4KB

Download
memory/740-1858-0x000001A82A450000-0x000001A82A472000-memory.dmp

Filesize
136KB

Download
memory/4276-2003-0x000001FAF0000000-0x000001FAF0076000-memory.dmp

Filesize
472KB

Download
memory/4276-1967-0x000001FAEFF30000-0x000001FAEFF74000-memory.dmp

Filesize
272KB

Download
memory/5396-1541-0x0000000063CC0000-0x0000000063CEC000-memory.dmp

Filesize
176KB

Download
memory/5632-2015-0x000001ABC5C20000-0x000001ABC5C4A000-memory.dmp

Filesize
168KB

Download
memory/5632-2016-0x000001ABC5C20000-0x000001ABC5C44000-memory.dmp

Filesize
144KB

Download
memory/6088-2169-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download
memory/6088-2167-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download
memory/6088-2170-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download
memory/6088-2171-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download
memory/6088-2172-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download
memory/6088-2168-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download
memory/6088-2166-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download
memory/6088-2160-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download
memory/6088-2162-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download
memory/6088-2161-0x0000026B70EB0000-0x0000026B70EB1000-memory.dmp

Filesize
4KB

Download