e1d2362f0bf622de97c99833516fa7c50ebce8bc6e824a7a3dedd3f8b487c679

Resubmissions

01-09-2024 14:15

240901-rkpldssgrl 7

Analysis

max time kernel
97s
max time network
127s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
01-09-2024 14:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Bootstrap Studio 6.7.3 x64_SoftoRooM/Bootstrap_Studio_Setup_softoroom.exe
Size

138.3MB
MD5

bbc94ada1d8c429a416961ad845c6259
SHA1

5a81a2f1b5d15eb9a855c716ab2c8e58f004ed90
SHA256

bfe582faeef56b3cd896914534451912367a2f0cdef7a6bbe4412fb45160b0bf
SHA512

cca1d415248a8f1fb43174dde7b5e9da3ecfc572fec1ba40a1e5b32b226c2f8e6eb7b6f649dc33b64e09f0327927cffa99c1a02e4a27d8d0abe592b760dbafa9
SSDEEP

3145728:6W5puoq8WxDrw/nqV1H0EbXb76W7UehPqp41t7KlEIvU:ruBQ/nO19brf4eB8I7dIs

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 5 IoCs

pid	Process
3752	Bootstrap Studio.exe
564	Bootstrap Studio.exe
2912	Bootstrap Studio.exe
4920	Bootstrap Studio.exe
4112	Bootstrap Studio.exe

Loads dropped DLL 16 IoCs

pid	Process
2640	Bootstrap_Studio_Setup_softoroom.exe
2640	Bootstrap_Studio_Setup_softoroom.exe
2640	Bootstrap_Studio_Setup_softoroom.exe
2640	Bootstrap_Studio_Setup_softoroom.exe
2640	Bootstrap_Studio_Setup_softoroom.exe
2640	Bootstrap_Studio_Setup_softoroom.exe
2640	Bootstrap_Studio_Setup_softoroom.exe
3752	Bootstrap Studio.exe
564	Bootstrap Studio.exe
564	Bootstrap Studio.exe
564	Bootstrap Studio.exe
564	Bootstrap Studio.exe
564	Bootstrap Studio.exe
2912	Bootstrap Studio.exe
4920	Bootstrap Studio.exe
4112	Bootstrap Studio.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates processes with tasklist 1 TTPs 1 IoCs

discovery

Process Discovery

T1057

pid	Process
4520	tasklist.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	Bootstrap Studio.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Bootstrap_Studio_Setup_softoroom.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	find.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tasklist.exe

Modifies registry class 26 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\bstudio\\Bootstrap Studio.exe,0"	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design\shell\open	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\bstudio\\Bootstrap Studio.exe \"%1\""	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component\	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\bstudio\\Bootstrap Studio.exe \"%1\""	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\.bsdesign	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\.bscomp	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component\DefaultIcon	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\bstudio\\Bootstrap Studio.exe,0"	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design\shell\open\ = "Open with Bootstrap Studio"	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design\shell\open\command	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component\shell\open	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component\shell\open\ = "Open with Bootstrap Studio"	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\.bsdesign\Bootstrap Studio Design_backup	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\.bsdesign\ = "Bootstrap Studio Design"	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design\shell	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design\shell\ = "open"	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component\shell	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component\shell\open\command	Bootstrap_Studio_Setup_softoroom.exe
Key created	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design\DefaultIcon	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\.bscomp\Bootstrap Studio Component_backup	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Component\shell\ = "open"	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Bootstrap Studio Design\	Bootstrap_Studio_Setup_softoroom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\.bscomp\ = "Bootstrap Studio Component"	Bootstrap_Studio_Setup_softoroom.exe

Suspicious behavior: EnumeratesProcesses 20 IoCs

pid	Process
2640	Bootstrap_Studio_Setup_softoroom.exe
2640	Bootstrap_Studio_Setup_softoroom.exe
4520	tasklist.exe
4520	tasklist.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe
3752	Bootstrap Studio.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4520	tasklist.exe
Token: SeSecurityPrivilege	2640	Bootstrap_Studio_Setup_softoroom.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe
Token: SeShutdownPrivilege	3752	Bootstrap Studio.exe
Token: SeCreatePagefilePrivilege	3752	Bootstrap Studio.exe

Suspicious use of WriteProcessMemory 45 IoCs

description	pid	Process	procid_target
PID 2640 wrote to memory of 4916	2640	Bootstrap_Studio_Setup_softoroom.exe	82
PID 2640 wrote to memory of 4916	2640	Bootstrap_Studio_Setup_softoroom.exe	82
PID 2640 wrote to memory of 4916	2640	Bootstrap_Studio_Setup_softoroom.exe	82
PID 4916 wrote to memory of 4520	4916	cmd.exe	84
PID 4916 wrote to memory of 4520	4916	cmd.exe	84
PID 4916 wrote to memory of 4520	4916	cmd.exe	84
PID 4916 wrote to memory of 3248	4916	cmd.exe	85
PID 4916 wrote to memory of 3248	4916	cmd.exe	85
PID 4916 wrote to memory of 3248	4916	cmd.exe	85
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 564	3752	Bootstrap Studio.exe	92
PID 3752 wrote to memory of 2912	3752	Bootstrap Studio.exe	93
PID 3752 wrote to memory of 2912	3752	Bootstrap Studio.exe	93
PID 3752 wrote to memory of 4920	3752	Bootstrap Studio.exe	94
PID 3752 wrote to memory of 4920	3752	Bootstrap Studio.exe	94
PID 3752 wrote to memory of 4112	3752	Bootstrap Studio.exe	95
PID 3752 wrote to memory of 4112	3752	Bootstrap Studio.exe	95

C:\Users\Admin\AppData\Local\Temp\Bootstrap Studio 6.7.3 x64_SoftoRooM\Bootstrap_Studio_Setup_softoroom.exe
"C:\Users\Admin\AppData\Local\Temp\Bootstrap Studio 6.7.3 x64_SoftoRooM\Bootstrap_Studio_Setup_softoroom.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2640
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Bootstrap Studio.exe" | %SYSTEMROOT%\System32\find.exe "Bootstrap Studio.exe"
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4916
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Bootstrap Studio.exe"
    3⤵
    - Enumerates processes with tasklist
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4520
- - C:\Windows\SysWOW64\find.exe
    C:\Windows\System32\find.exe "Bootstrap Studio.exe"
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3248

C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe
"C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3752
- C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe
  "C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Bootstrap Studio" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1692,i,12827911517430141005,7539866721460772375,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1684 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:564
- C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe
  "C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\bstudio" --field-trial-handle=2156,i,12827911517430141005,7539866721460772375,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2912
- C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe
  "C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bstudio" --app-path="C:\Users\Admin\AppData\Local\Programs\bstudio\resources\app.asar" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2540,i,12827911517430141005,7539866721460772375,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4920
- C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe
  "C:\Users\Admin\AppData\Local\Programs\bstudio\Bootstrap Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bstudio" --app-path="C:\Users\Admin\AppData\Local\Programs\bstudio\resources\app.asar" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3336,i,12827911517430141005,7539866721460772375,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4112

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1524

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\LICENSES.chromium.html

Filesize
9.8MB

MD5
b620990ddbd932d6475152e5a833860e

SHA1
70de0b3d7ffa77900f685c1788b32997a61ec386

SHA256
921452a09f92f10da4cfef0521acd6ee6c689c630661ed35189e793de2c99fc5

SHA512
ba84b5e6281dd64d5da41d0db35942b6c0b1ee6b47d24dedd5006be40b2d22d90f58dc653e17893347900fb1bfcd37b0f2fff5b532175ccacc3b63d98fe42ac7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\chrome_100_percent.pak

Filesize
146KB

MD5
6c2827fe702f454c8452a72ea0faf53c

SHA1
881f297efcbabfa52dd4cfe5bd2433a5568cc564

SHA256
2fb9826a1b43c84c08f26c4b4556c6520f8f5eef8ab1c83011031eb2d83d6663

SHA512
5619ad3fca8ea51b24ea759f42685c8dc7769dd3b8774d8be1917e0a25fa17e8a544f6882617b4faa63c6c4f29844b515d07db965c8ea50d5d491cdda7281fc5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\chrome_200_percent.pak

Filesize
220KB

MD5
77088f98a0f7ea522795baec5c930d03

SHA1
9b272f152e19c478fcbd7eacf7356c3d601350ed

SHA256
83d9243037b2f7e62d0fdfce19ca72e488c18e9691961e2d191e84fb3f2f7a5d

SHA512
5b19115422d3133e81f17eedbacee4c8e140970120419d6bbfe0e99cf5528d513eea6583548fa8a6259b260d73fab77758ad95137b61fe9056101dd5772e8f4a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\d3dcompiler_47.dll

Filesize
4.7MB

MD5
a7b7470c347f84365ffe1b2072b4f95c

SHA1
57a96f6fb326ba65b7f7016242132b3f9464c7a3

SHA256
af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a

SHA512
83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\ffmpeg.dll

Filesize
2.6MB

MD5
4a70c1ca8da3c5efbab2a9446bb7df7f

SHA1
df685473d3412e6c7d6ca5b0812a2ded4322a551

SHA256
7f9d1fd65112708875f5e97f47041c5140c3f658910630fa48c51acec85e410c

SHA512
808fdfecea1892460676d8a6a00224dabcfa0f8fa0e74a551c9c6caf104e0b8586efb6a1576e81f6b2f3c78c58e38cb2996f3872004dbad507ac919f4489cef6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\icudtl.dat

Filesize
10.2MB

MD5
74bded81ce10a426df54da39cfa132ff

SHA1
eb26bcc7d24be42bd8cfbded53bd62d605989bbf

SHA256
7bf96c193befbf23514401f8f6568076450ade52dd1595b85e4dfcf3de5f6fb9

SHA512
bd7b7b52d31803b2d4b1fd8cb76481931ed8abb98d779b893d3965231177bdd33386461e1a820b384712013904da094e3cd15ee24a679ddc766132677a8be54a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\libEGL.dll

Filesize
469KB

MD5
1c351976c1ce53a7872dd48acc10befa

SHA1
b0d0ef235cc0f48ce102726764eec1c003646c2c

SHA256
91b210c66f501e762073def3b56c0b31acb0c128980bc607b057770f9bd716a2

SHA512
f4351e49f8248a40c671f25632caf3d296a35fd42959743bc8efb16988472380adcf15d7c8564f4ce5cb30ebe5bfea1369635fa7bbdd1254070e278759e782ea

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\libGLESv2.dll

Filesize
7.6MB

MD5
1ce4e1cf6c86d884ce774ec0978d4fb5

SHA1
f2be58b8f192d0e7aa5b3d1fb10330c2382ce3b0

SHA256
9f94f89bbd31bdc4ab7376186b3618a5c228497ca59fc930783a3cbc2eaef7ed

SHA512
aba621dc0f9c3bf84fcef0a4e567583658c322b7d9b10ed64d0509d075397b9b33a07f44b9672fe39512b35f51e0b936a5d9b5545fa02b38e010df7ace8007e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\af.pak

Filesize
481KB

MD5
94af96b7f60a4cfb9d596cd8927ba37d

SHA1
556833517bc6ad77b5427000f2c3dccad91b92e6

SHA256
716e296c2f663ad90cdde85c5134582fc2305e5ebe10649fc9653bea533500a6

SHA512
6605688a373a358ff1dfbeda1c09dd031e4a63de662555f5304843c31eb3afcedbc8ffa4dae8ddc1483b04ea24cb709ecc639a9902caa68731d8e44d04cdbd83

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\am.pak

Filesize
782KB

MD5
34b24f035bad74764b7cc57420488180

SHA1
fac3fdba1a94d7676ac4d71447178cfbd1fa4e82

SHA256
9cff5c4af5997b45fb2a384bd73560e56bcb7710149e1a7e3e172d64e6eda025

SHA512
a01da4c45c6295a57248603f01a6b6231c4ce400aa3ec94e4228b26e8cea995c31d52b2008f99d0f17482aad80f1d67725c32e0f37cad6b012b1022ecde998f0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ar.pak

Filesize
855KB

MD5
38b30dfa8ccd369c747c46bef204e2f2

SHA1
047976a9b0aad536cc61ac3dfbc37b20f39ecbf4

SHA256
516584da5741e7bb49ba6a70c9cf2ac47ff190ca9c4f692c3a30bc03a4560f50

SHA512
5396af2e915808abb6f0ff8c4a1c3a7675e620687d717193d5e69905a070accce08925b7e243b54b922e1b022fd6210884fd12b18681e1b7d08f28c542cc4c3c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\bg.pak

Filesize
892KB

MD5
d08e8e493f0b3c8ab19070ab05a78af8

SHA1
c5fa430269dc2d32baa6885de2453fa84c36f2fc

SHA256
d223e994ad1aa6e747507187f724cdede8c369d2e8e0def50c4a6c912dba3880

SHA512
4b415fa2ae6ba399674f90ea67e571d90a35fff1ce93df77f20bf692b52c92bfc41e5a3622776e3979b1662fecd2d9665209d5d1d53ece1bff3ed01a28e499d8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\bn.pak

Filesize
1.1MB

MD5
696016f43190747d63befa354d76e50b

SHA1
3399e641930b820b627a4e28dea0a79fc457f929

SHA256
1e49980f89360b395a70e844ccd0c43b3a34eab84461b1499e7621f757149e3e

SHA512
3966fcc5988ceeb4dca79c0053fb428e5180029d44704faa4723334c69413a6eacf622e637857c1dcc096e129dd84e2369e4595ea50316cf8eb68696611a8430

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ca.pak

Filesize
542KB

MD5
b61ee1261b8c19b0207f257b97c6a4fb

SHA1
66b7f3180be435905175c21ab36b361efbf4a4fb

SHA256
36edc589fb6e468aae4dbc78a5a66c6848e700e50a88c57093c7b277903771cf

SHA512
d37301693fb74653dff44d7ee6f223363b7b1dc6628cf4041b8d9a83db45eab195b477c9243953f81a7e705e2aa74a15ceae60b3610beea7660228c029be45ac

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\cs.pak

Filesize
558KB

MD5
c0b5c8b3e46c715f313ee78a788401ca

SHA1
5a59b4c2214f52c63f6e8c7ef7a11662c30a1ff9

SHA256
f7eafc84e6e55fc7dcfbc749e0b7bbd7cf051390bef3dbc37f2cdeecf92637e0

SHA512
b6a28846601ee937b21dc5e7c3b19e612b2a654e4de7e9dd7943f7b981ca6c3a1c86a93ce6a4b801debbbfbf71fdb243ca81e56163d44b2bc0fe8415ca5a55c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\da.pak

Filesize
505KB

MD5
4345285a4690b023767e352aa2a587f3

SHA1
9646a3a5662f2bf233e553e51e7cddf6212f8fd9

SHA256
10dfa841d08a3ab094f83e151fdc1edbd66bf8f2392f1511e325628e4e9c7a0d

SHA512
2d466e285b44eb0c30f1847015c0056a517dc1dddd4d49c907f070eef5f071d81286cb0834c2a30253d8da9eebb6c6f34271f49850e9bc0cfa7dab0eebdad52e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\de.pak

Filesize
539KB

MD5
be9b3438f622428f971c92cd84681750

SHA1
80278ec6889973ba0fa47e542fb3e85ee52a3534

SHA256
400f965d457e958b063e60131d88eaacd74fdb6213ae14cf84c4b6b45809e04d

SHA512
8ec4388dd11829324f72b2828a4282cad5205488d4d47d90da83e25fd9f4b43d1aca1d67f9470a93fb0a23b21094b4c17dc68247fb285317dfd2b01f8e312cac

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\el.pak

Filesize
979KB

MD5
271c3234e3a07223e6db8f6ab1c18f92

SHA1
dbc1ecc686eda75627f3fa60d034ea4021da0acf

SHA256
58ca76aa55e11a475c830ac89010d4431f455f531079c1e8a0943490b4dd8e4b

SHA512
50e6fab168889a283e26eacd7731367032db41841f39fef0f99543b98266c3784ee62a956cd4415c83a6fb7451b3f618f4f3dcf9807cf9b0f2f595ce26e24aac

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\en-GB.pak

Filesize
439KB

MD5
b98c06126d26961d99a7ee6e397afc94

SHA1
bb5249dda1029597c461564798b77efc1fc0d402

SHA256
a672387f6fb84ade1b0c44c456ff1a19dcd464c4a9e65e439ca95a115455340f

SHA512
ad3783d03e3e7bb343eac48f179a3e3f799146a8ba7b25e2a02e860c53738b01518dbf5e66097366f0b7202e6c02dc046c6b51c116115cffc02aca3ed962951a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\en-US.pak

Filesize
443KB

MD5
88bbc725e7eedf18ef1e54e98f86f696

SHA1
831d6402443fc366758f478e55647a9baa0aa42f

SHA256
95fd54494d992d46e72dad420ceee86e170527b94d77bfaaa2bfc01f83902795

SHA512
92a5c6cfc2d88272bb5144e7ee5c48337f2c42083bc9777506b738e3bcb8f5a2c34af00c4ccc63b24fb158c79f69e7205b398c9e22634dae554410450978a2c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\es-419.pak

Filesize
534KB

MD5
7c151af6aeafae6d18f85d67d5d42f39

SHA1
d379907e2f935c28d1379b2b64d6d7a123700287

SHA256
1e3e648efb45857b9e47261d9b57b82f8d01bfe830b0f2e6ccc20e0372178f49

SHA512
0df3186257ec0d486eac366cbcfc971e80cc9145b2a113919576e8a6432db14f520477883564b3b7577230fa075e032b1287b31ac21f4f0636cb195ab1c1400c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\es.pak

Filesize
534KB

MD5
2128a5e8be8bba99ece377804a831b76

SHA1
fdd3393c827533e7aba982e4533a44f872b505b3

SHA256
92c599470f59e6bc8e9ee3872418a1e6a5281e4fdd6ac3b01b2ed0936af4d18a

SHA512
2f69d6efc841b74998933910d11c9b67ac2d7aeae01924b6d8040e33caf69cc1cb172f8f6dadbe22ae23bd9cba4d666d04759075fb3c112577ab518c404057f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\et.pak

Filesize
485KB

MD5
818d154524c0c900d15a8a25b3659c14

SHA1
4121be86ee3869c3c884e3467d82ca6b8f4ae0cc

SHA256
3610615dcac844cc9a64b843da606f4f8d29b1c945ecc19b288b54829d0e92e4

SHA512
1bffdc771102997bc16b3b5fb01ba009a61a85e7d9c53f32a2b2e713ff70f396a9be9431cc45ebdd28dc5eda43490b8d8d82866b42acd32f49e6368ec0b779ce

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\fa.pak

Filesize
794KB

MD5
b2d349ce08c9c1d8cb4280466e15cc4c

SHA1
2d7187fd2d13c6fc18885f7e87b2caee0db34d31

SHA256
c8bb9cdb28d8f80f20447163ac246d713adb83e8812f870e61796a5dce7e2eef

SHA512
3a54f2d0a226b976c0b9c5ce804eea84fa2ffc7228123b792bfd06a1ea438bc8430d49a4f8cec5727a8185af478b85cfa958cae24a67494656b739ef72f28aa9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\fi.pak

Filesize
495KB

MD5
671cff3aa38e9810a6fdd11c91861acd

SHA1
6062122660beade0e00cb86d9e2c8abc274f9f59

SHA256
3e69afb533da49338f036ad2c286c4193ce6b5a2476230dc4a1140cdaf03a6fd

SHA512
3127764aa594de149528b716ed135aff1e45a3fdf4a0a936b9240785812be2509f61d629c4dfae1759c87defab61e34203bf2a196381e87633d0fd02a1b76454

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\fil.pak

Filesize
559KB

MD5
4990033756bc1b2410e77a607bb62f8c

SHA1
a02c0f347606bf50aa6f281e42d2d66ce6155299

SHA256
3265ae5b6c16a09b1ec9ea53181de78df75e951c3ce28f33d4c483088a9ab37b

SHA512
3d45c6dd30eea6d6929039c0cdaa7bb6f7b665fe67fc7a5ca79567d4fd3f907011857e5cb43c16cce9c558d4f669618bc5378f05fa583b19360df58b12b5f913

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\fr.pak

Filesize
577KB

MD5
b96ff7d64d42aa11a76c111b683ffc2f

SHA1
bfeb5705c24a457420f67ae40be0d757b829d94e

SHA256
6166ea3e00cf7761b7a4ad841929eaf32061e86609d2dc92686daf4d4a032da8

SHA512
b2fa2d852f7cb84114e1a50988e5ad5582664d4924ec010d34e4ccc28ed35e5b9b5e7ddb32944f032321df33771f2c89e6212c7487921f27cf3d347e3ce2fc79

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\gu.pak

Filesize
1.1MB

MD5
86b829b3cdcf383f11ffa787a32446a0

SHA1
c9f626a97bcf00541876caa7a49d23e0b84b83ef

SHA256
74c62dca0b7a310aa593d1dcca8b0b0b382b052837e7cae6b87cf05b8b346b1b

SHA512
72b69cc9846fb078a8c03afd60154a3b55bc828b9e13b5124a473c0ee528e3cb3ed67f67d7d763ec8e78883640c53d4c88a7a14552b851d493abf65e269353f8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\he.pak

Filesize
696KB

MD5
2e2ba3e5e49a8b113fd4d9c80a92b82d

SHA1
4a544e82d093c955449cb3053709ce5283fd8a3b

SHA256
3e9d498ad05b76f9e23ac15e247dc91c934f50a06c3d1576097c21141d5c3ab9

SHA512
ab04f5da8f35f17fbacf6e664d791948c40a5821d9ede9d6bf8a19ebe6c4a1ad2edd043b1bd690dd04dcf0a5e6288c1e449f27300bb379515acc472c4fb2dc10

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\hi.pak

Filesize
1.2MB

MD5
3ddd4ae85a39fe6675365404dca77bf5

SHA1
2a3c2fc24612938edd46738f127098496262125b

SHA256
4b5585a8cc1a21e2dfcbd0d33f6cea87b7a583b8690f0f3635bd74bb5cbd2ed0

SHA512
fbbf103af336eceba0855f341c9e424bcb09c0527a63ce6ceb4773ddc228fdd5996b2b3bfbc2d11c77d82d012f9f4650317044cfbe50fa5adc0acb71c26e7da9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\hr.pak

Filesize
538KB

MD5
427d00ead5500f7480cd6ef8de88b0cb

SHA1
4f271a9009201f00959a3eab337130ca9fad7557

SHA256
d1f8093b91663d061bc2fa20426e2c430d53b06fc605ac1b0b2279d446dc9317

SHA512
93190a72013d7fe155404585080c12b64f57948e829888a75d60284ea93cf59b6771956eb325b00eac484c7b424f8b8a1d5d293d90b221b7440ecc63c2899faf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\hu.pak

Filesize
581KB

MD5
92995b10868e466811b909c9702f1727

SHA1
6cd34086b876bf07dc1222cbd33e8fac60e401ae

SHA256
0a62d168c0f6d9d651dedb4e01be5b533b94e8617535cd70ad22717748fbbc64

SHA512
412d0f253d31eff5819fc05ed0da6284a39cd5dbc3f8dac81153511c69aef9cd3f1170d3c6a74616e3d9c51bc457045e9715456b1ef50e139f68f667d5662f53

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\id.pak

Filesize
478KB

MD5
fb42de6be21c78da1b05c518c5625882

SHA1
7d8d4e28ea196e3e48df4999d94a04c0be31de16

SHA256
d9fc19e683240404a60d57037f24e1d8b20cfda4c8bcacfed577b86cd8988517

SHA512
63885e8c82dbef4902c75ae7bc4c3f953057236b07d6919bf3a9f8d1e6ec0ae2cb94cbe0366e56e1272653087faf2fb07b92b18bd312e8e1b38fc76ff5eb3922

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\it.pak

Filesize
527KB

MD5
edb971b4938258358738c7254205cc8e

SHA1
17dfbbab2aa1c554188696b947b4f4cd6311856d

SHA256
4321fef2140d41d6e7700755c6ede505870c006211441492ed37028236e96edf

SHA512
5b10405c8151f895ea0b1b86256d59869585e7da1ed71e16ed26e98579b96ef418d5b4b2800398c57bec6cc562e736d791f49aa0691aeb2d109d5a67d5ffa24a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ja.pak

Filesize
644KB

MD5
ace3fef3bcb086a6caafbdfc9562ecee

SHA1
ac86efa1b8fe88f050a8936926b96b055485a8b9

SHA256
6df72da472ee171acc440c20a2a194a2a4af4839b6a88323c4654c50ff8b492b

SHA512
da5425b10b239ce941733781b6994581d37c8b683946b97d759c2915e96808e18ba967849354687b2ba5ba492387b740dc8e6e67badccbd1a812e349693eb9ff

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\kn.pak

Filesize
1.3MB

MD5
a48fa9762b3504adc3fe4ec828c75149

SHA1
043f6ced7e30cee906eb15dcdd3ae59b9574fb1a

SHA256
333725ea1045d44acf2c19efc765bffc38cc5cea6e9977fe583ad6e203442582

SHA512
40d983b3df4b6cd8e3df855f4062e163bdbdd5142882088e6e8d5ca30bc538af44044f61803d33e94f4527cceafc44059c5de67c847567190767d3246bb93396

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ko.pak

Filesize
544KB

MD5
c524ce72c7049c1c401d8685772e8d74

SHA1
56d28e03538e2fca873ac453ef2698fabda75a4a

SHA256
3ad0012db772293073acb05d24b8dfb26697d6cc5dd1612150df023dbc31b674

SHA512
ab764fa9b9f82c7146e1b108a2af792c35cba91b0e3be9accba48bac87a13612a61ec026705b77f006519d65a6415a5978139898239093b249ff583af0dc6aa3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\lt.pak

Filesize
583KB

MD5
1bab0f6c08b1cb26db455aaf581490dc

SHA1
3a32246b812e8ed35ddf0a6842b8bf26b19be9d3

SHA256
946351ed2d74f247dea0f2742fc36d89225355480f0cec99d71599ccce3ea9e1

SHA512
c6e4502fda62e2606e31a7c67679d59d21a04342c507e1fa39ac59156a4d1e1cab1923de4bcf30b735d5bcf89824d4283b57db11af9673b5b956c2f883a3bc7c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\lv.pak

Filesize
582KB

MD5
e4993f39d6fa671658aa3ce037aec60d

SHA1
2db9bfc42b07060f6e256c74a01c348cd6c2ac0a

SHA256
1e6f9a40f4fa1206117063234399bd7c1e7d198cbf6c4ad633e5e18ad0929836

SHA512
4192274330be238a93e370fc3fc8ada444b38fa1464889f0e3d0f6c5e548f7f7de14248937d45f8aa84c043078a69174ac1c9a5894fc9b4ff8f10deef6f77e5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ml.pak

Filesize
1.3MB

MD5
9f0422326953a0c48c1db82ca2a9d639

SHA1
2305bc895e9ccc5b9a3d661e891c4f06d8a503ff

SHA256
f2fb440eb0518dc695810fcb854b20b72aa47e5ffc75c803aacf05861d35a94f

SHA512
a899dd975a56a53503b5cbc7448f54423b18bfbd917f73f0871840d6cf6a574bbaac8d735ae8de6a074cd78c43b6640e3e46be1550dcef8f8cfd1971cc1513d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\mr.pak

Filesize
1.1MB

MD5
b0e1f36587445f28f22777d555683a0f

SHA1
42f7cd3c596c2f52662b86df9d9096bf822a80f3

SHA256
a674db4e60152fc17a32d4b92add129adaebfc02a1a783a12653f984447c535e

SHA512
575fdea827497ceab51df5fc8783f960b87d180f6031f0947525279d224189a6299943df37a014f7bcefc637ee23327fb1ae82eb77c175d63c515b29947ac0d1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ms.pak

Filesize
502KB

MD5
c8d605a91b2b66603b379f5557783afe

SHA1
d6f294eb91675182f658158ff9399592935c779a

SHA256
7707f79a2a4aec553e68af87802a0f19d3714a25311fb7b8afdc6ff4a5b6c5ff

SHA512
a9f100dc1fe0a19a0a0a4360fff392af4e07eaed6613ab6dc61548d36afe55e4c9183e6584ca4e15feb477947ee8a79a96775718197129a555319a162281b9c7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\nb.pak

Filesize
487KB

MD5
4914ceee005991ad76c7cd75ed8bb645

SHA1
61d2732f5d5a20467d7f667b54ab654849d23289

SHA256
53b12866e7265661c0088b89653d2c1cb9220e1ec0ce0049f3095d53356b3f1c

SHA512
fdb51c9239eb894bc807d56a6afeaa06cabdbaa25cedf3d0b3763c6670321ef7087a35258737c0627b450932aceb7b6859224735bcf53b4b12f6f531fb066f99

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\nl.pak

Filesize
503KB

MD5
525b638051d9ac36fa759039c17283c4

SHA1
c1922ba3bceae681b90064b60fcb85a7e6c944b1

SHA256
a2335c62cdd4875660e955b0d65d9e995946b1281ed7f34521d3ee01cedd643c

SHA512
680c18b6782f977c87ae0ecae9d1cc0e2590ad75d8146a5ee3e9b1dd9ed1081530f310e871bbd6dccbba42306d8f59778f202691e5690da1859e22d485fc75b5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\pl.pak

Filesize
560KB

MD5
12c3e7597522f09e87ff438ff2cf5c23

SHA1
e634c8bcd7d5f77fdb227f7428c146cac3e87b81

SHA256
2191f77aabe75522166a3325e2660395479633b936d5173d150120367ed501a4

SHA512
fd58c466458496316c659dea6afcd8dd8269b312c56a506d65db4bbcbd28d37edd137947f3c78e783cd1b3fbe9014480f3c625dc707ec4c27a63115ff8d877b4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\pt-BR.pak

Filesize
527KB

MD5
576c1c0bbac545348532ffe36bf27fc1

SHA1
55c614f9d31c5e6466080afdaca79b6daf8ab10a

SHA256
1deee32edff320827dbfbe22aa42e83d8caf79f95f7cf18013424da7cdadb975

SHA512
11caaa048778e258fdf2af5b442eaeadf3412921d2e50065b7217de2277980a5fde086b7d6749cb918090daf4feaeb5e89ad7876ded2fba9f62d9e809593ccda

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\pt-PT.pak

Filesize
530KB

MD5
e4565bfa531c9c4344f84dc8be207c93

SHA1
5d1084ad5bff80383129850a853fe1319c23199f

SHA256
fcd194e5caf36be4958c559acbde4f28a957083bf2aceac893f9e5c9e65d8a95

SHA512
531a318e8ef1683abe4bc7b44e7d3a4d6ef907d5e7ddfa1f5cea20414dd33060981afdb8d1f4813b05be90985f10fb892f9060f6c1f2b975984f12acc8cdce6a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ro.pak

Filesize
549KB

MD5
8c922129bfb61fe14fa035d965108823

SHA1
aa8d8dac978053163a303c1f1206480144d4b330

SHA256
06c6486e8a42b447a55bd789bf2bc794354fa4be062139481e4612550f16c755

SHA512
25f9c2b75febfe607cbdd872a82338aecb5f277ed2d3d80fe0ec01289e3361445102392ea23207658ac347a774a7f47bbe19672d49f080cd6aea220da5ac3618

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ru.pak

Filesize
902KB

MD5
f6abd2a1e73f70c712b0e33cf225ab60

SHA1
17aa5a69cc2b0f4e0f96f266246ee18b69140197

SHA256
996d93fc5524a467f3b96fbd4a33a3438bd0f1b7090a1981e8b2b1263476711a

SHA512
a32ada035e6d6f1a058dd175896a9747e0660dbeb371c34f2f3b9f3798526484b07537b199fee4bb8d4720cfeced7cc79ecc0fd78a7c61efcc9efccfadc3a2b2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\sk.pak

Filesize
566KB

MD5
b74b01d80d6edcf13ba6514dcb1bf3f7

SHA1
405ddedaa9e3c9f3b5ddfeae6f440085c155a6f8

SHA256
7a1db23a5b4f8e4c7cbc80a832f4f4c33fe29e31d4ae78a814bd8ca85620968f

SHA512
2f649b116eb297c7ee7248a35858506f5329094c14be2e6c2cf52bca42170c519ef0446773be096c1571d1cb4502a5a840c3c934710c4900c8cd8344e4e9bd1c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\sl.pak

Filesize
544KB

MD5
998585ed4b877e6cb29bef5ec5675004

SHA1
d82e9c2127062187a0ad3906579cdc491f6ecf04

SHA256
7235e631afff75cad9d25b2e5a0e74696ea6b7f4b2a05753331bbd719a0699cb

SHA512
b0d4ad73c4e1aaddd156cd115dbadcda692e314e6f5629e26aa13144e2bac5fdb432db345b68eb79f732e6e102674ebf8cb90c06570ea4d49e4045fbd8cedba4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\sr.pak

Filesize
839KB

MD5
044954b860180caff2b57af02aa4e1ec

SHA1
c006f910386d7a11c9d074586c60b629131caf0b

SHA256
35e57d972a60e161f123a5783e67e250f5cae1f66a2c11b119c10b81c43bd03f

SHA512
33d8a0fb6c76364b756eb199f629f930d419ea31f631b8e6935b2efdefeca7f755a87bc3ec5422f9ca9f00da7ed5564fd90e228b0f1e9951a82cd1a4deb9b2b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\sv.pak

Filesize
489KB

MD5
d5925395fb791adebe0d06ce055ce976

SHA1
73163c7420f6a70ac7fcb52bb8cd97f4828a3ded

SHA256
bcd070d70a4284fd3144bf37c5e56994ca3a69c8f65aa72a9231748b30210e00

SHA512
6e0bf0f4d488eaf388431f05effced112e597be52b9c8f199c88ebb6e7e6a28d06f9a180ba3a9e7bf9da5166570077ed895249af7806db74343a64bb598a4260

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\sw.pak

Filesize
515KB

MD5
0787972a076c6690e7938758c2a92e24

SHA1
dbf02e5a3ae26acb060b533bb006756c19122bfe

SHA256
eb96ab83e2e08e811928742590178e97454863bc581dd8574d6a644fd3c6615a

SHA512
9f3560a3b648b1a7025cd8a98c39ec7634883aade1ac2c7836fde890cc04bd009aa5c1bca8354ee1259ebcd9482326c51a7d21bdee3caf92984ecbefab35d34c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ta.pak

Filesize
1.3MB

MD5
85403cab968fbdcbf7f92f3a4d49a4b4

SHA1
eacf6ecf2bef4ed5275ed237d3830754db9e1149

SHA256
e213c963248c93fcb4b88b1a45936dda28a5fe39cc0428a16556c6d737fc9940

SHA512
b49bcd260c38f302fa9fa83a2b17d2f7bf576bae14b64882ce9b38152141504a69fbb73d1f9ef8b47ae1a7a995a41e1127df3689c1e043e3b110cc35b73c0fb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\te.pak

Filesize
1.2MB

MD5
d251d089aa789bccc27a0b473d39e46c

SHA1
283d8fb6b6195b3427144773ffc4691c82e31f0e

SHA256
8dd7d206379445bd9afa4e01ab986c439cf70841d080fca6e152b453e94fcc49

SHA512
27e6f13f6c7937c8121451d70ee90d2a2ce5e519d17e882a86b29a6a78764427022c36b6a99178e9933e01500b55bcbfd0dc79a6f028a046967c2c53f78424fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\th.pak

Filesize
1.0MB

MD5
f30b74c4203bc2cdf830681b14651943

SHA1
47f541c0b5ca948dd371e657ac24f7e61b402ceb

SHA256
a4c2c305aa9d3df52d988c4da2bda398e8ee81d320e9da1de7d4d366e826dbc2

SHA512
a92ac611d43287060fafc66070d7b40d4d253d32cec9cfd01c15fd7892eabbc49c1ba63d03c39919bb2ba94e974f93c73f6e455263ce4e0080fc8161587f09c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\tr.pak

Filesize
527KB

MD5
2cb8c1ccbf9f487116119530a4c3ed68

SHA1
5ca03535ee86c79f28c500d820d8b843d55a6264

SHA256
39d36d6d82f2a0a602620368ba593c7aac2190e323d776c6a72fa5ea269cf62c

SHA512
d076b6b1c8ae08001f700b3e02493044b8f4308563ad5f016b0ba3ffc1e20ede9f15fd729f55cc5370c2f3864ca08690bf50d3fe4e966b9120794bd93fe5deb9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\uk.pak

Filesize
902KB

MD5
8f894b4972b41dc4c7b65847ba856ff1

SHA1
63ce84840a90485fd376908c39a4125dfd53fc2d

SHA256
5dd2fcc64ef09be0775c2efe7e07dddfc18f5ba6059f878d0c22b9b0c2207cdc

SHA512
77ecdfcfd31803f308da51e6b2bbd47b7c0848104925b642cbcf877c6ee228c5c7e9dc7746a208d0640455daeeb6dfcbe954d7268119b9c096588deab3c2b53f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\ur.pak

Filesize
790KB

MD5
7b5fed5150135b728bf8865246f7c8fc

SHA1
214b0f507ff6384b1b305f1718db43023499eeaa

SHA256
a0c752a805da7dd6608ad04625734f4d27cb75b682f51b2dc8ef08350cc7a2cc

SHA512
81fc55db4b0635e09057fd060d9eb72bda5a5fd2d2e1e4284e1b45098b287c609526c766b030dd0eaebc0836a32bcbf6dc0aae94327c103f3f736b5cd051a8a1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\vi.pak

Filesize
624KB

MD5
d910fb70771f06c64f6a2d78ca25d340

SHA1
2b1ba5cf58c552984164e65e30cc05744d8ec419

SHA256
d7f676cf557d43db07b14a22b0b20ca761ced59285cadd75c07c68613486e909

SHA512
4e3626cd558cc75b8833308c816c45ca106203cc054e214a08ceccd3214aa296097153ad69635f584dbab9def2440ea2aed79c0e02464c164bbced572840f264

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\zh-CN.pak

Filesize
450KB

MD5
6617a2bfccc344c5dc0dfe03762d219d

SHA1
9f9d5059515af878d273a9b74f32ecddd4a93f83

SHA256
48e32f53d07cad6e6dc12040619f7021fa8f0b3254cc6945905b7c6748acb787

SHA512
9ad87e1f4b404cfaa80ba4bd617217bd638cdf7255da0c74d03b8b3123e2afe9f1077f27dda07e5dc71edf82d08c69ac20a415157b12519731e1ebd45fc3b5c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\locales\zh-TW.pak

Filesize
445KB

MD5
197d88a99d2348c9539d388f4b825c4c

SHA1
7b634dcd2cd27b2f8592eacfe314cf23a37f316d

SHA256
a8b11c74a0512fed29b11748181ef4b1de84dc99197c48d9eecf316aceb425fa

SHA512
da7acb060d14f87743ed788df4e2c6ff3ca18a633e46f4d84c4619802edfc23b363f45cec8d2cb23c3e12bbaa547f6df1f5b60ce7ec7d770f689346b0e06a977

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources.pak

Filesize
5.1MB

MD5
a1373fd7976b2505d5a7bcc5c5612095

SHA1
aada11c623580a07d4ee6a51ae8a36088f521274

SHA256
ed14046f28a70e190b336824de2d907fb6c2b411ee9d68906eba747440eb4b05

SHA512
f7acd3fcd80bd87fdd0ca16ee8fc12b5dd4ef5cc2c868f01bf8b026f1a60d0f39610c5666de8431d24269fea1b0aca11af8e7b6ec75a125fa1d088a6fd071d4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app-update.yml

Filesize
99B

MD5
1b213cdf9c20d1ba124efadfbc9b76c2

SHA1
720d9660c069d13106ac21f7f2744917ce2bbff1

SHA256
2f521bf80f693e28cd0a6009c376ad13f95e20242ac38baa187874b5ec97b04e

SHA512
e1c1a3b10af769141f9cc80b974a1d8f2e83f5cea494d0ec72e3fa664eee1af9615277a6f5fde0129f043a3136129f48f51e6bf0800eca809ca89f90d5dc4f2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\.eslintignore

Filesize
75B

MD5
8ff7ca2ba114e8b6cf3103830f215147

SHA1
eea26c964f956bd639fbd6ce4060196637c81a41

SHA256
e32f444e9b9da9883e7cc37eff35c03da954f7c85c1388e0922aa5347193ae2d

SHA512
4ab86cc22741b50cfd2a8b94ee155fa5f83b0fea3d5f0ad3075767101861e1667fa217df683dd62b03f8f4c0e97d78cb41fbaca16d8d8860ee810165bb695f09

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\.eslintrc.js

Filesize
73B

MD5
4845ca510ae2961e531fa41faed9d7bb

SHA1
f1c0cea2250d6e538658ce3b833d5505e1db1d80

SHA256
df85748adac0bd2d13fb6f3b3833d3cda0429e60296a111057dc05fbe3b00025

SHA512
367cedcb213dfcfbfa9a21afb36970064db1a9e7e57a9a0e7b1e9370a51142191ee183788fba9529d80598f9597dd823810d9b0e24ccf0d398bd48e5333be329

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\.github\workflows\ci.yml

Filesize
1KB

MD5
5ac1b96978a8a8a6baa2ff4b98e4a2ce

SHA1
09d46f5c953f40c472493c1416a1536b36914130

SHA256
ea9a93f0618cca58561531551ad9f74abbf334084b6c1afd2f2afd94f5a695f4

SHA512
4b135f6e5705a1f6ad65504f4e3f35b5f82e5aaa8b0e7f8ca9ca9a3c48a4e20dd3feb01ff54a895fbd064a7f2c2632269c84fd7d79c33c80127946145fe71ad8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\.github\workflows\lint.yml

Filesize
471B

MD5
450117984740aaa6e2f01a7cb2ea4336

SHA1
e43b53dd613661d2b3fa1ec536f070986c887f7b

SHA256
4b4b6d7823ced557344e868db03e502cfebe8799664522322f6218f815fa681f

SHA512
5fcc401630085b0ac8dc93eef164e0970a00e8a9c3fa3437267571aa76957940fced6a0c03386d7e3848c3d04d4aa64661fa4db379ba08fd5cc80675af9c2a12

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\LICENSE

Filesize
1KB

MD5
df3ad145c2acbfc4f246fa834a6675c7

SHA1
7601ea2d9d1ee9c68dfd8f2d0bfffbb002565db9

SHA256
d06b5d27bbbbe22c36b1fd88406b1208876e2d37d795f5b8eaed951a459a3111

SHA512
1444380f0b33906114c402d4fae723212e5ca7ae14db7feac0bfd5d0947429ad200aa9457486a49a25b86de0e2f0f0f6c4e4a8c7256f254324459828c33570d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\SFTP.md

Filesize
19KB

MD5
b687162177148a340ab7b673f6929f5c

SHA1
3361df03c3dfae0b7b3986654c86cd5fad424df9

SHA256
054b916de5fdc5eda1457c5919f6f21b205b26de554a65f2f2efffe8c77bb88e

SHA512
fe80eafe47764093737bff13cb98babe9a642b0f4dbb9e34c23245cfacf2a378e00d2baf5b4f9e4403466535bbca0291e6079d8aefd2a0975bf5300d4867e843

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\install.js

Filesize
710B

MD5
4b1149f77de8b7f90dbc1967b4705f10

SHA1
df90983b41fb921c9ef0402c6647593d9667a1e8

SHA256
52c970cf01ed6e93f04300a2e9f68d1b9a00a4d0dcfaa77aa5d520fc8e2a0a73

SHA512
08686ca2cd3fb8df28a8c7b5af3666831515f624ff1025fab7a3689d423085b1f8a20ba73a5dafbff5d935ceae30315c7698004cae8642ab8c64bf3511fd7d5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\Channel.js

Filesize
6KB

MD5
54b15fa9a2480dbd86595410341ad0a3

SHA1
76cd2594a8432d254225fc563e462bf60554afc7

SHA256
53e92988a025009b192b72be110bd240b5653f88dbdec93e515e3e401e7f94aa

SHA512
fe351d6431f13560aa8629ab865538bcf230b104ced81306f018af5991f1ccbc88677151c1ec4fe6d9dc2a25b816b9b2cd3764c4cb8a4c4882c7ef85b126a7cf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\agent.js

Filesize
31KB

MD5
4f928fb220e194783bb7dddb525ff687

SHA1
6639e5e4d93cc283548ed6854d0f423326cc7297

SHA256
cc6987488bf45f73e0ac5d8bbe59912b70a144cd73b53c83919f188f4cc3f2be

SHA512
82c332ba7d49db0bfea15746730c9cca1dd34902a5723773cc51fbdbe4bb8c2ec33852fa6f620025abae9dbb02b6f4b51486072109ce177d3ed30ff8ec62c6c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\client.js

Filesize
57KB

MD5
23c809b861b209b2e1cb6ec112a33f9d

SHA1
dcd102255f551833a6356087cd9479eaec07783e

SHA256
b1a0b2c57914a7b70c7711524f190a8c8c344b74f4737017d33a7582558d5ab9

SHA512
928559a0528818957c1dd15f489f4e509a58cecca3f4da5fdc21d2416dd77df0d3f2779a15ef23f2561b263f829ff5d0cc753865e194fa7c055ec6decb4f15df

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\http-agents.js

Filesize
2KB

MD5
e90ade66c6a686afe6c7881bafd28669

SHA1
48c2a28aca7d5349674131ce79692585118b3589

SHA256
477d34701116572f2af06ac545994f3e2d2f14b26c5ae76bff2b13de2289339d

SHA512
05d62973c7745dd4c03867a868a9587c179d0ae8f23f66d4a950229bd13f013430f13f2e8f7511b1fcf5dafaa760a49a26de8cd04e29c81b593501df2fb9dabd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\index.js

Filesize
736B

MD5
2cc70e94d62698bcbe1faeb53e2ada4a

SHA1
35831dd443ac21eb8e00a4c1320ec5bc881082ad

SHA256
01af117837d5822f9fa91208f45b0a630774117aa40f80f93b82a7495c24a6d7

SHA512
ce93c43e3594e151a2dc1ec8af08faf09caacb9aee14e5d72774be02a796ef47d4b4083b590a57336c34e7cab179ea9ded858c8c8fcaf10d64df146ab16c6185

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\Protocol.js

Filesize
62KB

MD5
150cfbd99b1ed00eddf0f2788c0f74ab

SHA1
40661bfaaa543e00653d11e7e992acab6eb19cac

SHA256
910a56c80040bf1ceb1676e965c40838c6f8f8a67fafd976b17ef32c66ed47e5

SHA512
e0c4fecbe7b4ecc64ab305a4f9887c25f7146d2d652d6aafcc6e2edb863b5ff2a3a5ba762032a5d835366461f07aef477e90953ee47d16cf9bfa299bdc79556c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\SFTP.js

Filesize
106KB

MD5
a5073ccbd57ae415f4bbf164cb8060e7

SHA1
4ce3c58cf87d962bb20de42299f67f6a36e6c867

SHA256
9969e72b877c21bd17234f2084fa26575365b9a516951173d645a7802c43e12f

SHA512
f3aa697a43cc8a507a657020685acf1a1b03a44c1c7bebb2d279804ab49dbebb3282d4facc4541b2fd982b98c40962a765dec1c80d37d9460918d8a89b722ded

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\constants.js

Filesize
11KB

MD5
a609410353297d8534bb003b6a18f035

SHA1
2e6509c2110d962b76ceb183d9b4f605c5274b80

SHA256
d97ad075a5799bc446037f3f493682b2c9ac8d5ffe359c05c8b19eb56fb716d6

SHA512
cfa80e7e93726b6f76fb38e1d7a464aadf6c5dfe9a41f6952cd991a56a7d9971153ec656e211c19ccd447796d20d83f8116d0786e579ed9980b1139e16de33b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\crypto.js

Filesize
46KB

MD5
d904e7c17a12f07b22afac8011a37ab3

SHA1
e41449122c04b8c8bc958ec7ea19836baaf03643

SHA256
a729d2064e787e2a4589c25a284444fe54a58b7434a4e6e5e8e9c73c6d91e28e

SHA512
0a5a48118781cb332d45e90853af31c9da21f881b0a7bf9b3a1f9033c282c9ecd8c0baf363500e96889000bb6be75bb9ac57ba2ceef74f1432f2a20c5e20b110

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\crypto\build\Release\sshcrypto.node

Filesize
90KB

MD5
a23bb8b521011499da62913808e71fac

SHA1
ac2e1d94633c9516cfc907eab7662612361d8183

SHA256
9858496c5ae2523558d6292432a63506271f4c74d31d9e77283ec0b9694dbce7

SHA512
8aea24708bfd8d7243a32ebf7fdbabf91974acb3e65168fc843648ea51958b793f2bbd57a124494b276bb1a89223b45de842cca17bbb20a68579b29e3715d49b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\crypto\poly1305.js

Filesize
22KB

MD5
ca36b7462ea0f4f5ce9e68c9ac67c573

SHA1
ae86026ca6d9c64db23373e8becedf822765b1c4

SHA256
55a579ed6a30022054fd1dd822b1b49e2fc51bfbdfa933bfe441de8b7e4dce40

SHA512
e519717d8f653a11e786c396e1d2d0809dcb4fa5b72e9ac0cec7ae46c1c686ddfdd58ad122f7a2b37d295b30f725bcd6b35498b2c3a83900e77430fe900e03bb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\handlers.js

Filesize
423B

MD5
0f9d21c84ce6c492c35a94dfaf288294

SHA1
ec47b16e35903a25e34b3483e3da05e46c191b75

SHA256
b15f990134a4f69b7492d0b875d80d8c28228907045619b01ec30871ac711df9

SHA512
8c74079b5d2ae11c6d8e9dfed44cfdc3c2d4c9ea25b5250dbb11ae847186dde52d2706c3b3a003347da5b35b8d3f61e3a03004b22da58c20e02249a95d6ab38c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\handlers.misc.js

Filesize
36KB

MD5
ac95be30ce621bbe6097300f7062d6e7

SHA1
6a1403231fe0872832364349370ae6fc62c70aa5

SHA256
7fc29dcefa1eec69a2e27356411fad507fdb58d72cc37eb1326faf258da79df2

SHA512
dcbfbb53910a613cb4160fdd71cc28fcdd5e9d13f109f85e3134a8d5ec368de4223b048e10247105d2427d0be4189bbe38c0133aef6e82417c32dc2827b8606f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\kex.js

Filesize
56KB

MD5
a22e7e78d3b0bf5e7b295a38681e93ac

SHA1
218ff3b3a616dd8d526628e8b25babc4c8a0469e

SHA256
4472f2eb29d9700a60dbb1a14b721f0d168f823bda3eecc35e8b0376706699ed

SHA512
a65f759fe98cad6a2334f215ec62fa39ddee2856a6db90c5a249411488e3ffb515db1e1135cd55371ea8a553a87d85325f79178820fd3f18fb7068a080aa4d76

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\keyParser.js

Filesize
46KB

MD5
d2ea2a4e5b44f5dcabee76ccf11a64b4

SHA1
10533edca34ca5631e4ea8995870cb681b03efcb

SHA256
ea3e02a80888842727ba18316b0890c4a5a46afecdae2943eae670105d949a8d

SHA512
810ebf6daabaeb452fc690e4f6c23ecc98b3a91df5af1ebc1d8152b6591798357ea274c88f57988bf13b20e54760bc0c611cb8cf20f47bbb911279803081a223

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\node-fs-compat.js

Filesize
3KB

MD5
6bdcef6a38d4eea3135f1a0dbf59241f

SHA1
d87f78800ca333e33a63e12ba53628410b4a8791

SHA256
d46a25cc158456c4a82b686ceed9a8267dc7d1bb69b6fd1d1f9b09d467951b4d

SHA512
3e2ee0a667f7f1d2f104d9c6d8d9cd88356fa14d792ba2d4455779c5e84a3bd05704e3e13462694c99d51bfcd8aa9c6d386fe4186ac8159bed779f529644be32

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\utils.js

Filesize
10KB

MD5
389d455fc1274f5ce6f385af1ca026bb

SHA1
d73d6f3823f842eb0786208d2bfdb3824f462c61

SHA256
402b39e75ede9e3dc99af5e8af008602546f35aa1472bd4232c06f606987f053

SHA512
42c78ebedb062a9161dc103a5370412f75b4465e6ab078370489b9db8d913047175fd5026c063cdd25a50d180efe70443153f1d52ad3e8cb6bbdce99b5c8cedd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\protocol\zlib.js

Filesize
5KB

MD5
9c0f8722a3b3eab38efd8d2ee6ddd378

SHA1
4d424e4adf177b4caa1189c10255676f6c9f83a1

SHA256
8cd9f4c1825cbc394ddf9cf076a5ba9195ec255db9e904182ae9c25a1036e2d6

SHA512
2d05e11f0ee01a552c6bc007850d722b7a5afd626553242a056019f939b3d152e4ab72f43d55b51a24059fa13845b32bc333208657e959885a46e32507feb8ab

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\server.js

Filesize
40KB

MD5
3a70dee7839e4fc3b3318134f2b93fc4

SHA1
acac59a388888964711cb92ea87fbb0bc9bf0df4

SHA256
f6971169eb4fba0f8c00f34aa4fcd53ac77f3fe366624567ddc5567866c29e43

SHA512
91f5b53a23e2339e6fa1af9f67257e9681c5e5edc27a017dbf324ea8d0647b4b686cc1a42c7890319a39bfe21296868929f26317577ce0134416fad3a873a98e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\lib\utils.js

Filesize
9KB

MD5
103897a34b15aa2bae141a1f247865a5

SHA1
efa953c79411813ef1bd56ab1d0822cdeedfca5e

SHA256
bbae8286bc64b049499ce353e8dc4eefbbedefca8f50591432c1057276097aee

SHA512
76b6cd18a55b87ba1c1912f96a09c07282adee154deb6ee39ae4f1a1e931e3104c56f093bbfc9e0aca05525b1f58bcde7d62c7fc35d52c2cc9103234d2726386

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\package.json

Filesize
709B

MD5
10cd9b907477c9bef25ce78c9ac7eb75

SHA1
ebaf38ca2138410da284e36985dd68ad54647f63

SHA256
cf37f07d322d4bbdf030303bec0034910c9de37be31fee6502f1c5610807c50e

SHA512
5c347415abb7f24e0ebaeb1e4bec5c52ebdc893604950426e72be1c21971655c48e3fef56293d6d5fdf848f1f4a744ba191be7c608da5e1736d6320c142629a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\util\build_pagent.bat

Filesize
41B

MD5
bed30ff5dac655070584704c6a306f4c

SHA1
9ee01d85dcbb43721ebdd3b148507810c2d9366c

SHA256
a53d135864c0049e1ba1e956a99f31bddaccddb49aebf15b1dc39c0e0fcf2284

SHA512
528288b0b5130f2b86721c12d85ea355d3ce1f295004088fe05a0ad15a9a638209cf32114c42da4399607c258cb4c4e66c7e6e6679166e08f5f3e5a54c8d6040

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\util\pagent.c

Filesize
2KB

MD5
f0c117a351df8e532fc227e8d60403d6

SHA1
76cf0f3eebf6a01cd780e6d527708776173e1e08

SHA256
6a4825742849e5b1ee0b79e860746e8ceab511ef896d585ae4fc8e50567cfa46

SHA512
1025800e606d4d19d634d8c4679837638fb7dc50c04118b21a436efc2a56a0aa615ab813f2afe1071f99c8db82a6cacd9962324e7929d183d2fe5bfd784336cb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\app.asar.unpacked\node_modules\ssh2\util\pagent.exe

Filesize
57KB

MD5
2cb7928e39a58e1e7901335602510ae8

SHA1
7b9592477001dd2cc09a18af12ca142a33979671

SHA256
9e9a591f5afc5b71b2799705dfe237f00134f9032034cfb37388809a237e52d6

SHA512
b95c68f654b01f9e335e06329622e5c37c41ef8ba9e5adccdb2ae1723c763155c22ed4a40933ce831bf969eb3c472ea8948a67609f7915bd3573838cebe9d593

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\resources\elevate.exe

Filesize
112KB

MD5
375722b9c926d253cfcaac3b45a9c1f5

SHA1
9cad2cdcff970510e673e60574a2c00c7c8d3a1c

SHA256
6ce3b4aefe22ea14e5412a276023dceb29b63353aa5beb447158cf84cf795fb0

SHA512
8747796140000af7b439fab2ceedc7301a782a091d949c213681eb2e67c8469f76b37b3afc09dcc17a8d4277c8f4cc46bbb54edb6b9bede41ff9ed564972f5ce

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\snapshot_blob.bin

Filesize
300KB

MD5
0c13aba4e77dd56e5f7ec8f8fdd6c9a8

SHA1
e17eb5b549ac1389cf3761da7d2b2aede1c93fd9

SHA256
ca7012d6e1478bdd112c485844253e48ef43168c4267ba19be229f0ba2bd6994

SHA512
f7d49048af8f2dd58c4af0602bda888b948aeb0846f7f27dd7db873f4b185debf5edf3869f8e311e31865e2408aa93af4f0f67a4f1ca0554ff8a8f2fb9a1214a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\v8_context_snapshot.bin

Filesize
641KB

MD5
228cb75c5b14fb790ec913a34c12b4d6

SHA1
aa6dbfb6cd403be3110f85c2a3ae72ab575645fb

SHA256
bb9c5a66316280c3d90ad63e20e34a7311972632bfd927f9d192407c13714444

SHA512
ab6b94de633b71a99b58f3924b0b8a351e0899ccff0fdab35e06938ad22ed62548a331b0b296a886f67941a642fd32d00ec2297b0d687139c0e57d2919739c19

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\vk_swiftshader.dll

Filesize
5.1MB

MD5
61ebe426afe4f9d447a230b1da9a3190

SHA1
a45b10c35cd04e86078c0b46a906ea6514176dff

SHA256
a876d22c0d5ac885665b1a226e792480efc78b4d36a478a1bad48f38546e44d3

SHA512
2da9aee7dc6b8334dfb5f5e4358232b26b5679bd4f7ee6982c517a30b73c70cb861abc65448673a578b8b5df9e87b76c2a2f8c1cd863365de239e9d0b328283a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\7z-out\vulkan-1.dll

Filesize
935KB

MD5
b0a4ec4fca688236937ea9c6b584f4ed

SHA1
9f32af0d03ea5829338848926328c32e7e536325

SHA256
d97d35b5391e9eb4a6c72fd439ae6ac83096d7242d4ae4d6e81e46a0e80cf580

SHA512
e7030fa09e22e2115c9619c10b8aa6061ce3e206381cdf4ad98d54d3c00cdab509d6ba1c7d1c0318b4d518d499c9ef63bcbd1c3c83be71e574a13806dfc82b59

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl81A.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\bstudio\DawnWebGPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Roaming\bstudio\DawnWebGPUCache\data_1

Filesize
264KB

MD5
4eef4da90506de35e0090aa90dc74d3e

SHA1
e31f7ea2764bf94a9c8becbf91552de227ee0b77

SHA256
ec8b9f5febdca8241a426697782e587eeb457a0fc2b69bec05bd8261bd22401b

SHA512
15fac1ca250661dda6cb45a6a3d37ff4ce9388dc5cce735e4c04292c3a3f7405f623834f5f4bb5f00618f0bf6b539d2ca53db61711ddc04b3b3b26a2f6dfc63f

Download Submit
C:\Users\Admin\AppData\Roaming\bstudio\DawnWebGPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Roaming\bstudio\DawnWebGPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Roaming\bstudio\Network\Network Persistent State

Filesize
380B

MD5
f7e058407134a97fbdece3a6ff7961ac

SHA1
1a1b37bc0810de5ef583639a15b608aecbddb9eb

SHA256
1bac5ebda5a308e8ed1c20b1c979d3e9e80839f7f9a9ddf2130dac3cb43401a7

SHA512
428a057807875f2cb38605a20ade50fee7f883ebfa98d376f07e51814458442ba681b6a27a723cb396fc0f66afa20ced8ce66b242d47ca0eda6b3383940f953a

Download Submit
C:\Users\Admin\AppData\Roaming\bstudio\Network\Network Persistent State~RFe59571f.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\bstudio\Preferences

Filesize
57B

MD5
58127c59cb9e1da127904c341d15372b

SHA1
62445484661d8036ce9788baeaba31d204e9a5fc

SHA256
be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

SHA512
8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

Download Submit
C:\Users\Admin\AppData\Roaming\bstudio\Session Storage\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Roaming\bstudio\Session Storage\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit