330471973044d1ff265456fb532dc2c391780848277ba445648ee7e49829b469

Resubmissions

03/09/2024, 16:47

240903-vag1caself 7

03/09/2024, 16:30

240903-tz1y3ssdjh 7

Analysis

max time kernel
251s
max time network
259s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
03/09/2024, 16:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

win-Miru-5.5.6-installer.exe
Size

78.6MB
MD5

9de769d9d389754fa8a787ba3266437d
SHA1

d77dbb09f9474eb6ee831526237a07a2135981f3
SHA256

330471973044d1ff265456fb532dc2c391780848277ba445648ee7e49829b469
SHA512

097f370a4ab278446581302b8eaa897a568ff1c5f00bbc846e62d329c9392a71710f85894a244fae7786fad01153647d3bfb88cb128591ac929a8ca666071dd0
SSDEEP

1572864:hmm2um4VoC0gzasAnmMrJ7k84K5W9Nta40DBFTthaA9nEREF0G2BoM/+9Q:8mTm4QeasQ7m895W9NtdErR9pSdzBRKQ

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 12 IoCs

pid	Process
5000	Miru.exe
1564	Miru.exe
1524	Miru.exe
3540	Miru.exe
1904	Miru.exe
1576	Miru.exe
1108	Miru.exe
1896	Miru.exe
2796	Miru.exe
4944	Miru.exe
5036	Miru.exe
4824	Miru.exe

Loads dropped DLL 35 IoCs

pid	Process
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
5000	Miru.exe
5000	Miru.exe
1524	Miru.exe
1564	Miru.exe
1564	Miru.exe
1564	Miru.exe
1564	Miru.exe
3540	Miru.exe
1564	Miru.exe
1904	Miru.exe
3540	Miru.exe
1576	Miru.exe
1108	Miru.exe
1108	Miru.exe
1896	Miru.exe
1896	Miru.exe
2796	Miru.exe
4944	Miru.exe
2796	Miru.exe
2796	Miru.exe
2796	Miru.exe
2796	Miru.exe
4824	Miru.exe
5036	Miru.exe
5036	Miru.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
9	raw.githubusercontent.com
10	raw.githubusercontent.com
15	raw.githubusercontent.com

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	Miru.exe
File opened for modification	C:\Windows\SystemTemp	Miru.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	win-Miru-5.5.6-installer.exe

Modifies registry class 13 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\shell\open\command	Miru.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Miru\\Miru.exe\" \"%1\""	Miru.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\URL Protocol	Miru.exe
Key created	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\shell	Miru.exe
Key created	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\shell\open	Miru.exe
Key created	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru	Miru.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Miru\\Miru.exe\" \"%1\""	Miru.exe
Key created	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru	Miru.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4272559161-3282441186-401869126-1000\{2ED980E8-2927-490D-A6B3-4EE0D15F8697}	Miru.exe
Key created	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\shell\open\command	Miru.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\ = "URL:miru"	Miru.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\URL Protocol	Miru.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\miru\ = "URL:miru"	Miru.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
1712	win-Miru-5.5.6-installer.exe
1712	win-Miru-5.5.6-installer.exe
5000	Miru.exe
5000	Miru.exe
5000	Miru.exe
5000	Miru.exe
1108	Miru.exe
1108	Miru.exe
1896	Miru.exe
1896	Miru.exe
1896	Miru.exe
1896	Miru.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeSecurityPrivilege	1712	win-Miru-5.5.6-installer.exe
Token: SeIncreaseQuotaPrivilege	3088	wmic.exe
Token: SeSecurityPrivilege	3088	wmic.exe
Token: SeTakeOwnershipPrivilege	3088	wmic.exe
Token: SeLoadDriverPrivilege	3088	wmic.exe
Token: SeSystemProfilePrivilege	3088	wmic.exe
Token: SeSystemtimePrivilege	3088	wmic.exe
Token: SeProfSingleProcessPrivilege	3088	wmic.exe
Token: SeIncBasePriorityPrivilege	3088	wmic.exe
Token: SeCreatePagefilePrivilege	3088	wmic.exe
Token: SeBackupPrivilege	3088	wmic.exe
Token: SeRestorePrivilege	3088	wmic.exe
Token: SeShutdownPrivilege	3088	wmic.exe
Token: SeDebugPrivilege	3088	wmic.exe
Token: SeSystemEnvironmentPrivilege	3088	wmic.exe
Token: SeRemoteShutdownPrivilege	3088	wmic.exe
Token: SeUndockPrivilege	3088	wmic.exe
Token: SeManageVolumePrivilege	3088	wmic.exe
Token: 33	3088	wmic.exe
Token: 34	3088	wmic.exe
Token: 35	3088	wmic.exe
Token: 36	3088	wmic.exe
Token: SeIncreaseQuotaPrivilege	3088	wmic.exe
Token: SeSecurityPrivilege	3088	wmic.exe
Token: SeTakeOwnershipPrivilege	3088	wmic.exe
Token: SeLoadDriverPrivilege	3088	wmic.exe
Token: SeSystemProfilePrivilege	3088	wmic.exe
Token: SeSystemtimePrivilege	3088	wmic.exe
Token: SeProfSingleProcessPrivilege	3088	wmic.exe
Token: SeIncBasePriorityPrivilege	3088	wmic.exe
Token: SeCreatePagefilePrivilege	3088	wmic.exe
Token: SeBackupPrivilege	3088	wmic.exe
Token: SeRestorePrivilege	3088	wmic.exe
Token: SeShutdownPrivilege	3088	wmic.exe
Token: SeDebugPrivilege	3088	wmic.exe
Token: SeSystemEnvironmentPrivilege	3088	wmic.exe
Token: SeRemoteShutdownPrivilege	3088	wmic.exe
Token: SeUndockPrivilege	3088	wmic.exe
Token: SeManageVolumePrivilege	3088	wmic.exe
Token: 33	3088	wmic.exe
Token: 34	3088	wmic.exe
Token: 35	3088	wmic.exe
Token: 36	3088	wmic.exe
Token: SeIncreaseQuotaPrivilege	2088	wmic.exe
Token: SeSecurityPrivilege	2088	wmic.exe
Token: SeTakeOwnershipPrivilege	2088	wmic.exe
Token: SeLoadDriverPrivilege	2088	wmic.exe
Token: SeSystemProfilePrivilege	2088	wmic.exe
Token: SeSystemtimePrivilege	2088	wmic.exe
Token: SeProfSingleProcessPrivilege	2088	wmic.exe
Token: SeIncBasePriorityPrivilege	2088	wmic.exe
Token: SeCreatePagefilePrivilege	2088	wmic.exe
Token: SeBackupPrivilege	2088	wmic.exe
Token: SeRestorePrivilege	2088	wmic.exe
Token: SeShutdownPrivilege	2088	wmic.exe
Token: SeDebugPrivilege	2088	wmic.exe
Token: SeSystemEnvironmentPrivilege	2088	wmic.exe
Token: SeRemoteShutdownPrivilege	2088	wmic.exe
Token: SeUndockPrivilege	2088	wmic.exe
Token: SeManageVolumePrivilege	2088	wmic.exe
Token: 33	2088	wmic.exe
Token: 34	2088	wmic.exe
Token: 35	2088	wmic.exe
Token: 36	2088	wmic.exe

Suspicious use of WriteProcessMemory 28 IoCs

description	pid	Process	procid_target
PID 5000 wrote to memory of 1564	5000	Miru.exe	85
PID 5000 wrote to memory of 1564	5000	Miru.exe	85
PID 5000 wrote to memory of 1524	5000	Miru.exe	86
PID 5000 wrote to memory of 1524	5000	Miru.exe	86
PID 5000 wrote to memory of 3540	5000	Miru.exe	87
PID 5000 wrote to memory of 3540	5000	Miru.exe	87
PID 5000 wrote to memory of 1904	5000	Miru.exe	88
PID 5000 wrote to memory of 1904	5000	Miru.exe	88
PID 3540 wrote to memory of 3088	3540	Miru.exe	89
PID 3540 wrote to memory of 3088	3540	Miru.exe	89
PID 3540 wrote to memory of 2088	3540	Miru.exe	92
PID 3540 wrote to memory of 2088	3540	Miru.exe	92
PID 5000 wrote to memory of 1576	5000	Miru.exe	95
PID 5000 wrote to memory of 1576	5000	Miru.exe	95
PID 5000 wrote to memory of 1108	5000	Miru.exe	97
PID 5000 wrote to memory of 1108	5000	Miru.exe	97
PID 1896 wrote to memory of 2796	1896	Miru.exe	101
PID 1896 wrote to memory of 2796	1896	Miru.exe	101
PID 1896 wrote to memory of 4944	1896	Miru.exe	102
PID 1896 wrote to memory of 4944	1896	Miru.exe	102
PID 1896 wrote to memory of 5036	1896	Miru.exe	103
PID 1896 wrote to memory of 5036	1896	Miru.exe	103
PID 1896 wrote to memory of 4824	1896	Miru.exe	104
PID 1896 wrote to memory of 4824	1896	Miru.exe	104
PID 5036 wrote to memory of 2996	5036	Miru.exe	105
PID 5036 wrote to memory of 2996	5036	Miru.exe	105
PID 5036 wrote to memory of 1664	5036	Miru.exe	108
PID 5036 wrote to memory of 1664	5036	Miru.exe	108

C:\Users\Admin\AppData\Local\Temp\win-Miru-5.5.6-installer.exe
"C:\Users\Admin\AppData\Local\Temp\win-Miru-5.5.6-installer.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1712

C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
"C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5000
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=gpu-process --disable-gpu-sandbox --no-sandbox --disable-logging --double-buffer-compositing --use-angle=default --force_high_performance_gpu --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --gpu-preferences=WAAAAAAAAADgAAAcAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --disable-logging --mojo-platform-channel-handle=1936 --field-trial-handle=1940,i,8519652728289248039,4143490345917831036,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies registry class
  PID:1564
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --use-angle=default --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --bypasscsp-schemes --disable-logging --mojo-platform-channel-handle=2080 --field-trial-handle=1940,i,8519652728289248039,4143490345917831036,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:3
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1524
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --bypasscsp-schemes --app-user-model-id=com.github.thaunknown.miru --app-path="C:\Users\Admin\AppData\Local\Programs\Miru\resources\app.asar" --no-sandbox --no-zygote --no-sandbox --autoplay-policy=no-user-gesture-required --disable-logging --disable-notifications --disable-permissions-api --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-zero-copy --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2404 --field-trial-handle=1940,i,8519652728289248039,4143490345917831036,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:3540
- - C:\Windows\System32\Wbem\wmic.exe
    wmic path Win32_NetworkAdapterConfiguration where IPEnabled=true get DefaultIPGateway,GatewayCostMetric,IPConnectionMetric,Index /format:table
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3088
- - C:\Windows\System32\Wbem\wmic.exe
    wmic path Win32_NetworkAdapter where Index=1 get NetConnectionID,MACAddress /format:table
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2088
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --bypasscsp-schemes --app-user-model-id=com.github.thaunknown.miru --app-path="C:\Users\Admin\AppData\Local\Programs\Miru\resources\app.asar" --enable-sandbox --enable-blink-features="FontAccess, AudioVideoTracks" --no-sandbox --autoplay-policy=no-user-gesture-required --disable-logging --disable-notifications --disable-permissions-api --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-zero-copy --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2688 --field-trial-handle=1940,i,8519652728289248039,4143490345917831036,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1904
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-sandbox --use-angle=default --audio-codecs-from-edid=0 --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --bypasscsp-schemes --disable-logging --mojo-platform-channel-handle=3428 --field-trial-handle=1940,i,8519652728289248039,4143490345917831036,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1576
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --disable-gpu-sandbox --no-sandbox --disable-logging --double-buffer-compositing --use-angle=default --force_high_performance_gpu --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --gpu-preferences=WAAAAAAAAADoAAAcAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --disable-logging --mojo-platform-channel-handle=3360 --field-trial-handle=1940,i,8519652728289248039,4143490345917831036,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:1108

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004E0
1⤵
PID:1824

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:3204

C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
"C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1896
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=gpu-process --disable-gpu-sandbox --no-sandbox --disable-logging --double-buffer-compositing --use-angle=default --force_high_performance_gpu --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --gpu-preferences=WAAAAAAAAADgAAAcAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --disable-logging --mojo-platform-channel-handle=1868 --field-trial-handle=1880,i,4337072110419840506,6636614306166020371,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2796
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --use-angle=default --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --bypasscsp-schemes --disable-logging --mojo-platform-channel-handle=2160 --field-trial-handle=1880,i,4337072110419840506,6636614306166020371,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:3
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4944
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --bypasscsp-schemes --app-user-model-id=com.github.thaunknown.miru --app-path="C:\Users\Admin\AppData\Local\Programs\Miru\resources\app.asar" --no-sandbox --no-zygote --no-sandbox --autoplay-policy=no-user-gesture-required --disable-logging --disable-notifications --disable-permissions-api --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-zero-copy --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2552 --field-trial-handle=1880,i,4337072110419840506,6636614306166020371,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:5036
- - C:\Windows\System32\Wbem\wmic.exe
    wmic path Win32_NetworkAdapterConfiguration where IPEnabled=true get DefaultIPGateway,GatewayCostMetric,IPConnectionMetric,Index /format:table
    3⤵
    PID:2996
- - C:\Windows\System32\Wbem\wmic.exe
    wmic path Win32_NetworkAdapter where Index=1 get NetConnectionID,MACAddress /format:table
    3⤵
    PID:1664
- C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe
  "C:\Users\Admin\AppData\Local\Programs\Miru\Miru.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Miru" --bypasscsp-schemes --app-user-model-id=com.github.thaunknown.miru --app-path="C:\Users\Admin\AppData\Local\Programs\Miru\resources\app.asar" --enable-sandbox --enable-blink-features="FontAccess, AudioVideoTracks" --no-sandbox --autoplay-policy=no-user-gesture-required --disable-logging --disable-notifications --disable-permissions-api --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-zero-copy --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2712 --field-trial-handle=1880,i,4337072110419840506,6636614306166020371,262144 --enable-features=CanvasOopRasterization,PlatformEncryptedDolbyVision,ThrottleDisplayNoneAndVisibilityHiddenCrossOriginIframes,UseSkiaRenderer,WebAssemblyLazyCompilation,kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,Vulkan,WidgetLayering,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4824

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Programs\Miru\chrome_100_percent.pak

Filesize
150KB

MD5
1402f3209c097fcd57222a78bb81b766

SHA1
807d920a7c4f6180def2230346863fba35605329

SHA256
c9a1c38e0c61f19babfc31fbb9d02d2fbea083af7842f4303533c162d69ef67b

SHA512
7cae33f98ad2bd7a479af00c774d11cecfbca471bc4369ca9b7b2bc5e93b68e80a9670ffc92f625811b93d632788797dade4bd6be97339f0216492194c63867a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
f6ac9ee74aee55e606a9bd6ac7339d0d

SHA1
90cda622fb0743f788351a16cb7ae89639e5840d

SHA256
fd8fba3293b11d24886743418bfb624de8c46f81772b60a7e1b08a029e24c5b9

SHA512
2c1d9c1c512a76c40bb335901cdc4d15053ab9fd764a4e68a153656e4aa76cb6876fd44de1f6f6de925587f8b0498fe54ba34cae2dd54831c6c1a5789c49bb93

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\LICENSES.chromium.html

Filesize
8.8MB

MD5
e47a5caeb2e2f18529ef744c68a0dbf6

SHA1
a02f9812e4099d6bde267c0f4e44dcf5dcebe0c0

SHA256
4cc5a28e965505a60dd7151bbdd0b5303cfdf1a3a359e58eb28a5b4d3a653203

SHA512
abd12f7413211c091801a8486b46f1aa5e70e578cbe44868f4afbfed3de4411896c77c4d2bab1acd9064ee6920b89366e0bf975a618f19e3bd18fd1e5c5dd2de

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\chrome_200_percent.pak

Filesize
229KB

MD5
210d028ec1882a8841672cc21343bc96

SHA1
5fa9e19e86840336cb85804ec88515a1c50c447c

SHA256
3446eb467ffd8a45677233c7f107e23312884f599d6e22ae326a4d9d416ce240

SHA512
5f1bf35687c54ce14684803095dac3c8b5aa3b9af15f118d2fdb49f7c3095991a1c9340a21195b57257f60626c454ed92c41c6a4bbe75fa56d83ab84fdd7f4aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\d3dcompiler_47.dll

Filesize
4.7MB

MD5
a7349236212b0e5cec2978f2cfa49a1a

SHA1
5abb08949162fd1985b89ffad40aaf5fc769017e

SHA256
a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082

SHA512
c7ff4f9146fefedc199360aa04236294349c881b3865ebc58c5646ad6b3f83fca309de1173f5ebf823a14ba65e5ada77b46f20286d1ea62c37e17adbc9a82d02

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\ffmpeg.dll

Filesize
3.7MB

MD5
0bc3d1e33931bf75128271b73008c14e

SHA1
d93d61d5a9ccea992802292dc3dc7c1076ca4abf

SHA256
b2d14f34c4d881d964a3c6458921264ca09dfb7213eab03e0dbce991c8fd6d4b

SHA512
1a9ca2b6fe0dacb69fe5dd575677a8d16f943d55a6c8f845b0b8fa62e62d2580c352b4c59dbc1e4aac6c05e84e5dea005f4be0955f0309b56a0fa0f5c23bfde7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\icudtl.dat

Filesize
10.2MB

MD5
74bded81ce10a426df54da39cfa132ff

SHA1
eb26bcc7d24be42bd8cfbded53bd62d605989bbf

SHA256
7bf96c193befbf23514401f8f6568076450ade52dd1595b85e4dfcf3de5f6fb9

SHA512
bd7b7b52d31803b2d4b1fd8cb76481931ed8abb98d779b893d3965231177bdd33386461e1a820b384712013904da094e3cd15ee24a679ddc766132677a8be54a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\libEGL.dll

Filesize
471KB

MD5
f32de7f8bdea8d8b4081131812ec7ba4

SHA1
8a492e0d4aea604c2e4800ff94f5e1970465722d

SHA256
84e4212ac785fa7fdecc4ace68cdbc4d0a555f53a554dd6169b45841a1d32894

SHA512
99ee7f2e020ffd3bf738dc1db5cee708324d2dc1fe343586fc64171804ac946ddb9061361939778bbe3e6a705a338156527c2e72a3a9394051e61e0f00f8c2e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\libGLESv2.dll

Filesize
7.3MB

MD5
2a1cf1e4a51a1fc6804061d3f4470900

SHA1
f1cd8a5f3f19f08a234601bc370d13b7478f330f

SHA256
120e0bef002e1bda7b2f7a819a2b9662737faa5e22aee54843d6bf5f93ce023d

SHA512
d00c1a2fd6e0a6accd002650309f43e0f3f9f2e93626cfba4f5c584d14b3ce36ce66e0bf9c26c383eb321834f0a7cef45d638633bd3fbac217a0a95d5c8e985b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\af.pak

Filesize
478KB

MD5
2602cd68ebe25f12f5d9892d5fa92b11

SHA1
478766dcc8ce4427872bebd81ad929f7aef250a3

SHA256
e36a906908a92dad39ad8e5b344b38c538574e35c5386ac2b901640b202d3228

SHA512
6bbecbeaa6e09857a5698a280475496498a88488249025b2f58ca7a8493a77bc13fcd783041a6198f58696f4e2a84c3dbee0891e89800dac6f3fb317f70c5492

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\am.pak

Filesize
776KB

MD5
ac7a72616a544cdb022eda20b0dc8872

SHA1
50b7f8363894a7e33042412804efa2bda510aba2

SHA256
1847f8517d8f26c856adbf08df3996d5f3b7ab61378199c138346bfe29675f01

SHA512
d5b3b851a0d6615eccc1223cfba6b285ac8387e0c0f9df1fb5bd95c9a208813b31f56546fc9c624e7f3a12b35ab7e8acd13ea85025b5f9cf74def60ad679a546

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ar.pak

Filesize
851KB

MD5
670ce34ea4fbbfe42c7bded4bb5579ad

SHA1
0dc3750989a85296d467d76c408b123a11bc2c63

SHA256
25dda3d00be579c42a042254762b242b09e9ab4c4dee1fe1237f4c22f363791b

SHA512
2c1faffa0254617b4094958f32446ea0500993d43fb73a4ca052fd7b1a8b11b8af5be4de9eb5dee58d579190dd46c47f57c348afaee168a26df4357c2e1553ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\bg.pak

Filesize
885KB

MD5
d0b47c1cf62b29b866ca630958a019fb

SHA1
bae6e1af9d7225584510443aed21a40fcea349e3

SHA256
24c09721c3cb4f3fe7eb403113375257197bed808295c6b85532409b6664db45

SHA512
39472b1f6859c10cc782a303761d63a2409807d7d342c3bc558075284cf455a26c3e1b9b4ce67a5fbd84e6c4b621adcfd8fd8a819cfc25554962454e5f4b5816

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\bn.pak

Filesize
1.1MB

MD5
83a0030387afbe1cd2d6790079fc5024

SHA1
9d4253d253167aee6f3ba9cf6f8f376266832d00

SHA256
bf2fa4c57095e0be63e8cd1ae6d2389d6417a91d8c9e1970eeee5363c46f0d27

SHA512
20c92c5c3634a9663d933aa98d9356e18beb8927f2975778967a65cc25522560784eabecfe99037008689cf3b77093c35d3f109f32ae2db2160e9798415a3771

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ca.pak

Filesize
538KB

MD5
d5d6200b582b9b12a0bd8c773dea0474

SHA1
341650b76af1c74129a97725673b646b7256d4d6

SHA256
f4da114b473c34e0946b12289f6e802fcede2f66013d4f184c729a1f8ae7350e

SHA512
1465e7214c4ae818b545778b831b7773f0373726f705160ba4df33ce3c206a2166c8b6519336fd2b1e405ef6811d2cfdc2a655f1b767bf9b4e083c6a33b34ae4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\cs.pak

Filesize
555KB

MD5
0e52ac897f093b6b48b5063c816f6ca1

SHA1
4f4febb42fd7cdd0bc7df97c37db0e4aa16518e4

SHA256
5635587f6ffb152c027b4357092fe78168e31cbc7f6be694c627f819c1ad1d73

SHA512
9cf5594ac47ae967bd4221f61b92c97343ea0c911fbe992d35a9391e3e1e6560b1b41bd031074cd262a622ca88af3b25ba33575b456a4d5b8a7b897233c0a54d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\da.pak

Filesize
501KB

MD5
d5bf4aba2d82744981ebf92ccaadf9c0

SHA1
1a1c4ea1d4ecf5346ee2434b8eb79d0bf7b41d46

SHA256
0c75acb008dd5c918d8a1a73c22fa7c503961481bf1708f6bda0da58693c3c08

SHA512
5bccc18687fcefad5e78c5c8072acea36ce7687c5b848a1e0367c82a38f32f46402ff01edd4fb1379ee77083ef0e1964e24bad87b18ce78077b28f0c1bd4bd08

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\de.pak

Filesize
536KB

MD5
acc495606f706282f9214e704b673056

SHA1
3eec97e52ca0789bb0b09e80b9e6b8a1bfabdfed

SHA256
21c18e04be929f8b551c4ca5d78fddeffe8c48c503234cf79220c31bdd9e6309

SHA512
b2a916e1304b0ea8134359559b0f7bde32cd495fc85467ce373d1c6ca3cca7d1a7fa4de2dfc59febe0a6cef95fa9ab9e318aeec545eb251ffc66309582bd36db

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\el.pak

Filesize
971KB

MD5
71abcfdf468dc5813610dd32234be946

SHA1
aa4c14e702b06e391834e4cfc58929b873bc3d1a

SHA256
f1e01eeb90c0842f7af927f65d034fc93fdbcbcb9b9ea7e31c79761c316c8fb8

SHA512
615b591e4bd744848e6e15b729e543faa9ab06db11f042fff12ffee6fd3e7802c9da37d8784004e6727fc39cde17becb60c1158dec401e20a088056451693bb8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\en-GB.pak

Filesize
436KB

MD5
413e4484b8aa83bf7d928af143340dd9

SHA1
92b8dc474fd507f28c51b34014fe9f867af25531

SHA256
ad460425c88be889d6d6a9b69d0b6f64e2e957bf8ac4f230de4d25340c75ba87

SHA512
e8ab41ca706d8a49b4a411fb9f50bf1c04627dab452a7aec01a5c61e4951fde42fc05163cbd193f034bfee378849353db9ad4b8a2db3f992df105df17bb146e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\en-US.pak

Filesize
440KB

MD5
8f164155d22029535cd60f47966a89af

SHA1
19733935efe68f7ff3e2a84d28317e0391eb824b

SHA256
20be1732675fedf380010b09936ed65c71bb761d0a05732215ef0795b5aba606

SHA512
4582715817bb9c99d875aa89b1efbd0f70b63dcd37dbfc64e3078d1d4d7ad4ae8fac5a703afe1fc65b9af2f5c0fe8d3e293e2f0530106a6974b38b4cebca9db0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\es-419.pak

Filesize
530KB

MD5
32678c239fa82c893a6c5293cad8d7e8

SHA1
14465e6276269c4e623e8bc4f8ff225230fd1300

SHA256
400e0a9ca26fd4e269f9b690607598392dfac527f22926d9109d20b85fea9af0

SHA512
d088de0c6f23aac65fd6a910f9d2797c9741d6f4c14f5726cce84dd0722ac5f3c51e877b09f8ebf6a51ab66613b784256e40ffd80a2db8a57a7b285ec91b5321

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\es.pak

Filesize
530KB

MD5
fe7c4ad3f058c2511bd4d98d9b147fa1

SHA1
d384e3d9b68a447b898b53ff4fad9d3a3bf6b057

SHA256
e09883eb027accf16b738e5a8072c28dfa5eb76b1a94b6e3ffda550fbb74c7ee

SHA512
96f3f16f156d6acc5138afbf0803e3c920eb6190d667344241284bad2396e2f3773cd4d44a9e3333e4fdd7c5f5448261d3b8ebe7b9c0808c5e12ea0a8b69c52c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\et.pak

Filesize
481KB

MD5
78a8a4956b1cd09124b448985a839f28

SHA1
a25bcab44ed12dd0dd643aa6782903b22b84816b

SHA256
ac1431e61f8c6c56ef96860dc8a8ddf840dbf6965af6b920d811b7e39adab6b1

SHA512
843bafce3e528ba98a3ff537b01d7896f83c22c0ad2e43bbce83381faa943d74d7b11b419daac0b0f57de30d5792e3262defe9c68f5f4c7ca84b173395d14798

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\fa.pak

Filesize
789KB

MD5
9752a87705df37ed99ac046ff80d7de3

SHA1
c2f2c238a60343ad96e82748f2cd69391c387e2a

SHA256
a9f1868e931879a8cc0a991143515fd5f4803fb16f5588aa61b2117dbcc5f6e1

SHA512
6c8ecc32e7821e9e6e07fb3e38d61c1e2dcbb41dd830c363c9e8c7c5616924ca15a7bd28779ec42c507ef6b23316aed35162f59fbbeca5eb4f8168f019eb4264

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\fi.pak

Filesize
492KB

MD5
fb475502e9478cccb4ae41b9ca8d4ec2

SHA1
5e04d66f5c787a2d8caca32b60aafb9ce854d107

SHA256
a1f79a3621aa0ad69fb35863ddd456a1e7fc78d9d2ed3c7bf78d3c2eccf20d7a

SHA512
783e1abda5692ac2426be00736d39083f32f9fc71e6a70214fa2aad3075877014652d347a41dcd0c7950f94ab932af93b88e7dc40a4ee6078e390f25b8b185a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\fil.pak

Filesize
556KB

MD5
e499af17fce1f7f276b3bfb0e1b2f5b2

SHA1
e2bf18acf2a9e357aa7a694b5c60f947fd8bb0c2

SHA256
a30015021fb928bcf16f9409fb45fb89ca3d196bafb3597df3fe4a9e477a3fd9

SHA512
a1f03b7a6ec3f4601052d4e1f2ca6c092d9e5fe41ce7df89f7e7fbe1a1892df73a9cb85058f3c24e1236ed013e2bdd017f7bec3d6b6ff13ca61bf0849c73f472

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\fr.pak

Filesize
574KB

MD5
6cc4835e20c03171e4b65f02279fd323

SHA1
c92c56a39efd5cf3f977f68af29fd3b15673fd73

SHA256
d7cc14961dbf13cc35b80b5582bc8f442dad7c6e1495d0bf68d229bd75a4fd45

SHA512
79967e6222e7aa3ec7ed73f4890ccd73cfa7c4ea96a0d588d1e15f4f622e648cd5d984016ed36929aa804dbe4012a8bc8c2733e809c03424ff8c3befdadeb6dc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\gu.pak

Filesize
1.1MB

MD5
dbc465e12c921212c1a3e899e5fd5046

SHA1
f6f7081e622df0fc9647dce0572483899a59e440

SHA256
7b06f3b7040901e7dbd2884ba534d43e73013ce0677bc725d53bccd54759ad5e

SHA512
9c3f3e7e7a62a0148789f561c37144f971ecc16c44a4f5a89214cbd7fade0e1d2cccd5c106c4718df84a198262ef139a6530c400f5c0873231009e8b432bd3bc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\he.pak

Filesize
691KB

MD5
0002d6ecc7f06d88dc714debf31c925a

SHA1
4c5de1e0a8ef47b0d98bb3a9c5c1ee176f0df3ef

SHA256
d71c98ed9ef2aaf13033332dcd40f41785656c156d41614916353daa3ea5f2a7

SHA512
060c668b540813055f7537b64f8a9f4b393e3e1d31a6341c603644725eb8673e3249a07b7f519cccdb65c4d2abed2792580df880cfb8b9b154d9ddadb3ade027

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\hi.pak

Filesize
1.2MB

MD5
5fe0b17532cfc8523f97ee17dba844a7

SHA1
6233fd3670bcb32c4efeaef7bdb41adee6efd825

SHA256
352f833b4f936369216eeaa1f8c5e652b34a36cc143ff9a872b0608e4e88957c

SHA512
a37db9da6d9b5f913930712a57fed8ebe1654787b246445a40f59a91fcc67373367cadab2dd70a89445514f2d6d806fa3dfd744461e2c15777ffad30d3d0bf12

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\hr.pak

Filesize
535KB

MD5
7ba9bf24f9965ef7ff2a9eea86188ee0

SHA1
b9953144fb5e519a7a35ae595a29d15bbd34c0f1

SHA256
f882072827c75a5c046e29cc4e2468a41cb786199045b58550e978272d338fe8

SHA512
768213543c68caf8ca941b1c7c87e5dddaafc4915457a849c83b4fece528bb7bda409b99930572dbc6a102fd7dbb29a593073b1d5b894708ab2b2019a938be2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\hu.pak

Filesize
576KB

MD5
ab64cf95b5231922340ecec09182dcb2

SHA1
9eddeef898e4a4c1ec6db989587a75fc3e8a1e75

SHA256
e806294a2d609a514dfa416a07625fb2f173018bb2e278323f752efc459c39f8

SHA512
bec74ef13db548fb9b225c6afff2841d5bd987d4ea129adedf6e5b852d004f89cdcf5fd4a6ccb1e4e5448ef38d488f258e3d5cc49c24775a34647cc0bb7102e5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\id.pak

Filesize
475KB

MD5
cca203946e3da2d163c6df7b049306fd

SHA1
91cc95f8387060e5439055a859ee14132d19a199

SHA256
a368573c71a4590d5eb8a809b49a94ba484a83bc0bdd46731189bdffef5171f5

SHA512
8d36b5f394440acec4cd1b818e21df2b32e2a568d1e83c82d61a6e741651052b96f37d6baa404e0e141b851b9cc3c3cad5ae63ed650de4f581a345ad569d0270

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\it.pak

Filesize
523KB

MD5
ca5405ca45e0f95d546447f612836fc1

SHA1
a791fc142594bef10c2b95cd97d67fe970e74ea9

SHA256
9d03ba5af9a119b074ab3387f423fcea789b598d31e71f334e6fa2ba4ac413cb

SHA512
348a53d596ca9008c1c752a03475ec4cd9cf38a2c8dcefb1d69bbf60f1f56239e4b5cbadad9c8b706f02fc94b4afc912ccc76ab53788d4fbc2171bef313c8c2f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ja.pak

Filesize
639KB

MD5
3a75474ef25d238257de866f344dd14f

SHA1
b6d4527c128af6cb82ed632fc9a41a72ee6b7739

SHA256
796069bd22828f22cd2ab32d00eb025c4302c2b3f0d7254825e527dc9056f831

SHA512
f1c43de7830c4c499eb73e0cb848c6837630aac44ee8dfd957c212bf5f603e99dd26db4038eeec3b3714b4aaef40eb75f410d20ee8f083cad3cd8c99a1c05f57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\kn.pak

Filesize
1.3MB

MD5
1af86682faa8eb2cde4dd0d44e448066

SHA1
588794c7b5772a94d896b8616a0993f9e0edf069

SHA256
4e7740fc6793f03be61a23f688396c7babe380a7e27ddd705bf2c1ed3bbf1ef0

SHA512
44353e15a8b116da42920cec2bbed771431e764884ed6e9c0d2e2f3305d8ea2a428611f36dbf59a27ba5153b7526fc33d8e355bb79d6a653b3156f06655f435f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ko.pak

Filesize
540KB

MD5
a2fbc1d4fe45dbc52d3c8dbdeeab1e7c

SHA1
5ca2788513fbe28003a1f42e2effd134de7fecbc

SHA256
ce125b6517268ff5f9dab14535876caae0a46d43c1e7048e1eb7dbf2ade89a00

SHA512
ac138796fefd0260e08b25c3589daf39a5b0b19fa6a891b2ab18fb95777ae65909aaa495d4dd919d0c7f175135f6498740bfcc75974e838b269a4295ab670325

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\lt.pak

Filesize
580KB

MD5
1051deea3eb2bc73a1cbef894635541d

SHA1
a122975c2c3366fc4d87ab4c6c3c6d65ff6aa4a9

SHA256
95253deae9554317c60490a982a4d310c87238096e3bad0329e8bf4c944cbaed

SHA512
2dbb1da602fe9966c03debb03c1b793574968d68c5386fbbb7e56e97d6626dbe4991eca6b9c470bf778a327e3db29530977d25ba40e5704501696dc8af8d0302

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\lv.pak

Filesize
579KB

MD5
9f632be534faae3aeea35d27a9b32f88

SHA1
a1f0958811ae42a858e8069dbcf7931d77e17d42

SHA256
7cd453d14e2929319b373a9c8069f62eb4a91ebb484bd4b689dd06918c787dd7

SHA512
9e21f623d8abaa33a634d24a1053d8e60ed132558c4518d89a84c8ab122a2161b0ad9cf06db95385749de38f42f2f9f81bf4533212157d5190a0ae41d37309bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ml.pak

Filesize
1.3MB

MD5
83069898afa7cb0a288cf8d17505536f

SHA1
2ec0f1f3ccde4f88bbdf37eb1bf8feda82b12ab1

SHA256
957b57bac9d8a927be5cfbb74d23dcf69cf2678ecd4fcf2158a391f7a02fea87

SHA512
e6f549c732f0bd0938b140978c49b2aa097876970adfd7b87ca593ed54c3456c041fac28883cff7da61c7ee3952a6c7ef2c4faedbfe6a23522ff6ffb083c24bb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\mr.pak

Filesize
1.1MB

MD5
e45351ad81be0444c2731e0fe2457bfd

SHA1
23caacd7f2354cb3c1a72cc89799daae3089ede3

SHA256
bf42c87554153b83e53ed8b839a74a50e893abda190d7ddd73521cc6d121dfa7

SHA512
b93e70b09eb536a2ab58a064b05aa13d6b0eed08ee1681ab9c59374d119a8bf3ccc2793fe005d0c51734afe25794c9bbd759ef7085a4b9fa6c3dd5e29d0f39b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ms.pak

Filesize
498KB

MD5
617f11a37b1c1802c2048a6026c05c15

SHA1
5500b11d943242f4318f6f58f47c44e999510105

SHA256
a4ad4345064fe64756fe2b244839a3a0db7df1a3996bc6ee4504b1cabc3aebf3

SHA512
050e4723fb1137f44104945ce3bee4ddf44743e7b62cc042bbdb891ffea2f8a0fdf7a6a7841a6fbdb2e4804185a3ce1ef8b6d66c40936484252dc8bde13cd375

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\nb.pak

Filesize
483KB

MD5
8b2649b45e24ff3455da93e31b305eb4

SHA1
cf81b58a26c575986c7ad12409efab2d2e095d62

SHA256
f6768c45305a24679a915e6d42c38fe6ea12a9e36ec016592ea52a8701e876c1

SHA512
b7e755e5a83dd8aa7057214d2cf8bf4035b2452c8dfc0a608551d336b4a11d1db8f0a5b1f21a01056a397efd6b4449df6aebac30e2f4867ac53f0f6f1a54ea39

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\nl.pak

Filesize
499KB

MD5
834219d952a58bdb01b40cce5269d449

SHA1
c325fdd7e21e993b745233086c9df4376901e2b4

SHA256
9b46eec8a0b0b568ddc35387ca02c2116baa7520efb04d92325fec17d5091353

SHA512
9c28177d8530b24fedccdd7b4562a87cdf08567410d82ffc3e5a874474695a18eb533e7d55e4a901b77c873a22beff570b5c5cd79b47947b5bf3af2c38b9d486

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\pl.pak

Filesize
557KB

MD5
1fda71f0e653e0041cc7aaec19f81905

SHA1
e705f0afb9302bd46d462df945207066b37b188e

SHA256
cf9a58b99709df28ae4acaae0e3279365a7388df074dfece041202680caa0037

SHA512
975e76fd6fcf0a7d0bbf4b640d096a572961f2370627d7ff0d3e6223e676e69006add4c61e3e84830ec788a503da693208bf8c2ea1fe2f89c1d81518d7e42f10

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\pt-BR.pak

Filesize
524KB

MD5
d4ff2b420b976be0f91fcf7a91b466eb

SHA1
5c18762082fb062c50ea47d5f741796a0ad01fb9

SHA256
69185b6ab367271e83ccfecaec7d40265dfcd414355d85187adb5284e1b00a6e

SHA512
89e69c483c4a3fcea87882df00137c10a6eb1ef388886fd8c1eee46bc1e53fab9ec87f74bdcb51aa13728b3647ef5e05e7923769825f99cc732f7a8bd9fa956c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\pt-PT.pak

Filesize
527KB

MD5
90964c1734b1c36442dd69edbd85882c

SHA1
ba1ff66b255fe432278bc44860c6c4b3da975296

SHA256
b9439000c1c75565c2f223612079a51971ac54a3786d5b631f20436447929465

SHA512
5a6afc90ff5a3a65e9e2f4347635a82ccbfcc9d1f5d6b206828650aa49a2dcc59d3c8833cbfb9fc7ce8f347a28d718567e1cc300758a2ea5126c67e0967aedc8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ro.pak

Filesize
546KB

MD5
91e3c11af8a029c26e26df3da5b72cc7

SHA1
6f06327f21a58b4a6015560d006aee884f9df417

SHA256
dd17c680dd2b8d435b64882a54d928354a83201fe4a5923dc9ba878131be93a7

SHA512
205a2654b19a24d2949a5fd63bbbd545b99cd3737ceb70605065dcfddada3c5ee35c796ea5bf6020de53f4bb3b6c091984f1a20e734a3a5cd438160b7f87cede

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ru.pak

Filesize
897KB

MD5
35135bf0c3b94df19bf93efd8302f67d

SHA1
37e8946b06bb4eb3f0eb7866cf937edcc0de63b1

SHA256
2e53cab562c4708bcc760728f346e62a2b9d3b912ee456bf81639e341417f99b

SHA512
da758194a0725dba869dd63bdb8490e072af9b9237d58bd28e63e338c574a22e5603a478981d08cd3da2b4d9ad1244bea8228a69954c21078a69d8f574280655

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\sk.pak

Filesize
563KB

MD5
ccb95c3a934623125aaefd09d7e01bd1

SHA1
1c8cf6379ac62c2dff3561bdf77b2bba55dd7db5

SHA256
74f33cf691b30c2220d800407ca87dd9b01873d11e3fb15d9db9d7564ea1cb80

SHA512
df5d7254a4980d252809d496ff5320e05b3029fe6a2f240f4acad00d00467512ca2359535a97b753e00aefae5814fb9b9de12106bc0a081b13300d89c8584c6c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\sl.pak

Filesize
541KB

MD5
03ac79d4774b95c6e09441d49ab996d3

SHA1
defebf59eb45169012aca4196742bf7a97689354

SHA256
93cbaf02a305c1b042449caa5f741f212ee9e2ff989e92029cec4ce5e880dca5

SHA512
de0219bc38aea97a68897aa34b5c87fc7dfa0edbf0ca0df66c3b6de9fb67288b1ff74d4794e7af455b4a23224b6d7b100ca33873a3c5299af7b75e39806f38af

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\sr.pak

Filesize
833KB

MD5
1234c72919842db099916294d40b00fa

SHA1
c0964cd889d51fff610df1915053055eb434f8fc

SHA256
7984d3852fb4e6e893a297df600f039fe39f2d50d1c3ca1b9ddeeaff9b5d0bcb

SHA512
c9468b0230b905340aa00a5d7f9fa8372865a0fc7709c2e027a11940213e61c09c9fd274d7fca0e6b28f7aef512feadd0b7ecddb05b0ca6c7db55a06ba963f22

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\sv.pak

Filesize
486KB

MD5
e6043d2233938ec26f6efa2dd8d480fd

SHA1
e9b80a519a069c618fe4bfd5a673fe8005f311b5

SHA256
ad5be91183fc0b8489d0ce80d5529a5e85911d17fa36d3dc0c6a8a036aa0af0f

SHA512
cdb7c22deaeb48f79b7c785abe37697d649d8d1ecf759d729a8373dc68c8b4aea3242611ffe68300610eb659c42868158adb0bf3169699c8df5f9412cc5d7be1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\sw.pak

Filesize
512KB

MD5
ad41974eff2483e260b558ac010879dc

SHA1
be8b566a4ce4a529f8eb0352abc7a2023a9b5355

SHA256
ecc84d9a40448772697c14f27b1297fcdce12df30d008a7d4149a6aa587d85a8

SHA512
2b731daad19ca5e43d29106c1ec06b8ba6b54ef44571fd51c2cf65da4c9ba1941d78808d03f2056a839e2e76844e979b775afc7b470640101328b572d10e0c4e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ta.pak

Filesize
1.3MB

MD5
2f628abbfe91a7738cd47142e42a4ccb

SHA1
9fb966c32d237e3addbed97478cb84697bcf1fe3

SHA256
3c8dce29bcf2b60bcc273229afca64eb07a73c729d0d20e35455cc5d933e9a69

SHA512
9a1f0a40e8ff8e68dd08dbea55dcff45e7bbe76de45520323832a9004698e6ab30d53eca58efe6db08621f940a80c3ae441e038bcefa4206cafaf664e6cc0bfb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\te.pak

Filesize
1.2MB

MD5
443f0de5deb05cd2013f37489d0800c3

SHA1
24742a9fd49d8af19a62c58fd297641acceba50c

SHA256
e2cb4856b605a3a2bda9c09052717f3581e1eb3847357803294af5d02dd3b301

SHA512
9a41b8bb285d37d86ad63c34a3f3c87e810d95f04bb373f89c98d5183e7c7e080540b7f97f0e7f297b8bc712ea62d15d0a6b791660dee8e1c46190228275052d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\th.pak

Filesize
1.0MB

MD5
b499ad28435349c278256f9d83c034d6

SHA1
22b19df9df95b9952a6e555159ffe4c18e47c903

SHA256
6c2aa6d1297ca001c09dbd684dda7b1a4a2e76ff685bf9124bab4af911cafbbb

SHA512
5088b2f5783250b93487a49574eabbc01c68d2325d41cc498b5632f8d3a48b8b1eae6a10cc3d6632bbd611931e8c236bdf779a36c0dad5832257087bf0bd84ed

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\tr.pak

Filesize
523KB

MD5
d5f3591fd654105ece52586e8b668921

SHA1
bb3e0fcc7e6be4f64356131987d5a502a31d3152

SHA256
224aa5fd6cbbdaae3e72a8e398d9e22a613c8dd5551d27cc1cbc5a892ef5a129

SHA512
44fadc97f5ce1fb60f04689bc1885e4b52bf8511c026ba9af5362983150dfbc7d4f50106ac84f3018ba64a336a595a66862910d424406076dc2c857683986ab6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\uk.pak

Filesize
896KB

MD5
bc19ed011123ce8ce343ba2be9daa315

SHA1
d588df92475bb650d1e2bfc15e558315e90c9425

SHA256
ef7ffd8792b482829f31924241e6bd12dccdfdf404a0781bb28747c308649c0a

SHA512
6b0960807f27c7653e7d851d503f5564f773c9e4290d4745566a0c3911cc0ef12e90f47de883c541129ad7d294a766f226dc689aa343a00ad72049bf3d5c3713

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\ur.pak

Filesize
782KB

MD5
4144860c649699b6237186d186697910

SHA1
a1774f0ae15891a80d40202723e4df4044788d40

SHA256
2e0b43afa9c69288586ed404564ee2f420a87ff7936bdb48efbf21ce8f58f468

SHA512
d1e1ff2bdc0e746e84c36b221c7cbbd49a905b6353a23914f1f9f4a9314f495b1d273230c99488f9a3b61980211d90e996165b3df7a3aa761e374d2a35ac8cd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\vi.pak

Filesize
619KB

MD5
91b5431ae8051cd34e0074ed82786737

SHA1
52465f9e51052463cf09bda6581d5dfabf5fcdc3

SHA256
882a6068baeac090b841d47a28e078597d23deef8b9d76af2e341f3e9593afec

SHA512
9d175891cded7f34802de5551e4743166e22f120d32018749a7d0c2d013d929459ba0157e2486d15285750def2f24b90604a19386b15cc00ca0e72150f8492f9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\zh-CN.pak

Filesize
447KB

MD5
3d96318036975b3f9881f83b7f04999b

SHA1
5f41b936cd0adcf278527a7ae37493963a93754d

SHA256
9296256b5fa35ffb68375607bf32bb0af57b28c8786d71deaaa97757122652ed

SHA512
a22a29e2467f0c74cb13fef9eb30b9f02bbd9e790ec3ed17e3418f7dbadb72cda233efe0b5a18aba54303574ba397fc6b7525c9ece5f4599ad78911d1c60ada0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\locales\zh-TW.pak

Filesize
442KB

MD5
43d2edf15e6faff938d469b34eb102e0

SHA1
c6ce47f10a1673fdfe31879f207a7979580681b8

SHA256
786e2da4066cf49a64d9f818824fd6ee57dd4541375bc877e87c85536650f9a4

SHA512
975da3550288d9062966888fd8c0d0d3accbcf307222f578f8284f312a0230a1e8885659a0711b07c85139015418527a2fa59d3247a3511cc3454910e09f38f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources.pak

Filesize
5.0MB

MD5
7460fd4dd73a977e9312b0fc942456a6

SHA1
f1ccc93a30919763b0bd9b8a92dceb2260afd807

SHA256
920cc557b0e7c595d0fb89432ed7d0165aff668b99ea7647fe3715b5c62f7071

SHA512
885baf07ad2b273d7844f975f937cc8d111ea1400aad547a064504db1eea302a6839b50e897eb5a7b181b3af502de57d48b8da738a84f79b14108938c58988e8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources\app-update.yml

Filesize
80B

MD5
3462b653f31c880aa20304b846fe6362

SHA1
53a6eec2bffa52cfd5ddad8c14d4b8d28e224566

SHA256
238413a81979834469be8160f9b32ddc91cd2a6998656cb99b3eb8016438d059

SHA512
ae8a82b108f823216bcce9cf3314fe1b1bbeded860bcd1a0c34fdf2316f9986577d942af39e4c06a481df3b73374c7f412ac99c4187e2101a02a0639f310208e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources\app.asar

Filesize
20.9MB

MD5
33224e003b46895750e84349840fde5d

SHA1
5de0d18bc1baea162dd403d7abe90ab3bcbd40e4

SHA256
f96b4a093b3a0c56dd3c196295276745dd1c1ad3616dc41413b8a9062fecefda

SHA512
a08464cd4829b306f8816a359180974dccff835f0b033537a01c9ada095228085324334eed9c9731a0e61a713948da79616450286c0d4884cd720d9532efb33f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources\app.asar.unpacked\node_modules\@paymoapp\electron-shutdown-handler\build\Release\PaymoWinShutdownHandler.node

Filesize
114KB

MD5
5d72165813c41cd6efeeb13cce2cdfea

SHA1
52e0a1c3e23e10b5f1459334d5199c17f189d52d

SHA256
96eb99a5215e8fda16f43fed31974629ea81796e6f48991f159d8b947de1cce7

SHA512
6d7d9f88ad026f63cabf77bbd5151d36f09f5387d8c2ffd8c379c9bfb9dc56435cd61ca077c66f8cf34a3f71db5deab1ab12af14f6c3a3577147687747d5d64d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources\app.asar.unpacked\node_modules\utp-native\prebuilds\darwin-arm64\node.napi.node

Filesize
113KB

MD5
c1dc2df4ff973f11affb6be99d6f5008

SHA1
4ca656ef96a115d73424262ab8f1c745e6adfd5c

SHA256
463f2d32e971e53b24f6af8b8b2ec1e243788a57412c074ac8a35d47fc2e645c

SHA512
6c8fc4d4f6ae3e86d99e10056eaadacd9fbfded03b520c5c22eb24c051cb4897054dd1829e886e60241e65bb26919d3379fad69a9b441ea27e5cf7c73a3f8a6f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources\app.asar.unpacked\node_modules\utp-native\prebuilds\darwin-x64\node.napi.node

Filesize
96KB

MD5
d11ec9f62cb7ac49cc7e91201deb0930

SHA1
7d3e74b478b489ff592b710b31595ded7078ff49

SHA256
bebf7e46085bf669f5fb222ce0b6f70cf5c85b2ba09dd2f7cd3fda1febec9a0d

SHA512
96c85da1d181c6a09f9678b5edc77107b7730df352491926b9676b41c023084fa29d4949c6f21dc0684d63d338076639d99a895a28d11b49da067f895d2a6260

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources\app.asar.unpacked\node_modules\utp-native\prebuilds\linux-x64\node.napi.node

Filesize
91KB

MD5
c89f0c228bdc07288a121634c9a2e4ed

SHA1
3baaafffc32cab00d42ac7a48a0f9d748d42c5c6

SHA256
05d19b60cc21fc2cc746455495accead40c25a5203b6b345335d1febd408d1d0

SHA512
dcc380d585f2d5b1e28541f3dcf4bf291c43581e0730ee34fb77bb3708679f2a986d1366951a02bf0434a24c1e3d1d38ad1b69adfd5d850d35eb91e8cb1d2913

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources\app.asar.unpacked\node_modules\utp-native\prebuilds\win32-ia32\node.napi.node

Filesize
506KB

MD5
2b2d3630eeefaa6248938c10cb67f9b8

SHA1
4cfc84caab965f060252d6090af52f1c0eeb6a5f

SHA256
ffce9bc906cf091d101b5ece0ed455f694a0a093a4e10e16390eb2bbcb8961fb

SHA512
7daf11d876574251d7457f15b20fd55e2c07256db86c0ec406f21e725d90ff43bfb88e43f2018272ed537945fd8f8d84cbb066b20f683318258dc924d04b895a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources\app.asar.unpacked\node_modules\utp-native\prebuilds\win32-x64\node.napi.node

Filesize
644KB

MD5
45b14230ff6a1fa0229c1a494c8f2a05

SHA1
a760ff8a2b04d5fe0f96d3f845129ae7c499be8e

SHA256
172bcb54e696157570d17cda2420df3da7c02c350f814ca0e0a1717394c8a778

SHA512
8d88bd549063246d2a92bd8bc09fb04db7810c5181bc2e030ffc6aa4b91564402f7b2465be1d7cdbee3dd8e6c72730aa804b2ae389cfb796f687b41343d10d9b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\resources\elevate.exe

Filesize
105KB

MD5
792b92c8ad13c46f27c7ced0810694df

SHA1
d8d449b92de20a57df722df46435ba4553ecc802

SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\snapshot_blob.bin

Filesize
299KB

MD5
6c3422748a9471bb84e1d70b9116f8b9

SHA1
ad166d705afd06f08ee9e1b2e2bf1e8de1b41426

SHA256
b082fbcf0c790cce78c6e5a7208cdab264ab3037bc1f82919ff2cfa524694a36

SHA512
6f80708c2c839221399b260f2a3c14a045fd6ef73c49cb9d8c2e3d5f0efd7b532a742971622de61e6989aac912cd6c0bf17c51ff04cec1370e7c062a41a1b522

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\v8_context_snapshot.bin

Filesize
663KB

MD5
796517f2fa15adf83ee3be8e7d647a73

SHA1
4287c74c8a765286350dc5322eb79dcdc3f2fd06

SHA256
68effe7d9398b4e81b829fe65c4c68c4cbb9b42a4bb146df826fbf808926f675

SHA512
7c24fb1c249d7355f0b2576e14fa802acca11333ee23ec59503ae611292de63c217343af77c49ca10ed6e9bcd792810a1f1b2abc50784572902ec87ea7203f03

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\vk_swiftshader.dll

Filesize
5.1MB

MD5
ba2e5a9f2b27db53b2a15f23e7cd395e

SHA1
82e8e4a33d870bb4c827be6fb0610ebe4ddc873e

SHA256
586c874bf576afb040f0d7a328ba2abe46c316796886d169a1209c2d9c64814a

SHA512
11b50748011d84b729faa65ffa0300cdcff941cdc02f42a67ff0d7e76538ded0737a487889b41bb01f17c35089ab9c676f1e058d1fbf397f9b0d94416532c6a3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\7z-out\vulkan-1.dll

Filesize
936KB

MD5
5298a47d09b59c969c239cff3b35ffb9

SHA1
d6acff4d50000f643a3025d765fd5c080afe3d39

SHA256
46399bfce9bf8c8693984f22f70965fe6f72a534e3a54f427425bfda3adf05da

SHA512
cd81ef825052f9e1dbc8fb16a27c89508439bb3c65c8545cfbd5e0ee06712ccc5dc561c2ee077d8429835e738b46d190d0ff759f097da731a52b914fbb9e960c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\UAC.dll

Filesize
14KB

MD5
adb29e6b186daa765dc750128649b63d

SHA1
160cbdc4cb0ac2c142d361df138c537aa7e708c9

SHA256
2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

SHA512
b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\nsDialogs.dll

Filesize
9KB

MD5
466179e1c8ee8a1ff5e4427dbb6c4a01

SHA1
eb607467009074278e4bd50c7eab400e95ae48f7

SHA256
1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

SHA512
7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmB1AD.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\afcf75a8956916d1.customDestinations-ms

Filesize
923B

MD5
6891af323147bd41e48d52d341f454ad

SHA1
3c7df4fefa119209e64435d8ef009f6e5a735131

SHA256
5a67cc101249497f357de1993dda08a08e4e8d2e66db597c31511e73ba4411dd

SHA512
57d177bd98b233000a975849360187bb774ff167119ea8e97e35840aebbb15eacf77277f9cb631021fed270a9921d654c39d3770bdd64aac1c563f5c4fb3721f

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Cache\Cache_Data\data_0

Filesize
44KB

MD5
f4878a0ee39bcfad6471adfa080accc8

SHA1
98b3408c7663bb971df6e0d1c1c628763cd98446

SHA256
7fd601ce97d31ee2437beefba395912980fa2d8bf664f4e24640fb48b32fbbbb

SHA512
3a0fca4b61a683749a56f99d6e112e734507c7a19e5ee7566006395846785a8ab79b8c5995309ed8e28b40efdd78d320313a3a32144975c11d53aa150575cf19

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Cache\Cache_Data\data_1

Filesize
264KB

MD5
fef312789b7379656c2dd2108db07163

SHA1
996284b91fdd73fe343a9b35d726f1c5b07aefb5

SHA256
691446d0d03a1a82bb6335dfc4ae19aa4b6346f8ee0aadc485234a4c6595b6fa

SHA512
184723bf18d81ae7480213372b89839a9a2c42d069d5151da0d1a71b9af7fa73d1bd707b1e441e3943d1b622a74b525b50a0f7e561cc7c939672e8be5351d52e

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Cache\Cache_Data\data_2

Filesize
1.0MB

MD5
d73aebbe9068a2d9e45fb89f480972c0

SHA1
e63075392e91693629c8617f63e2bf9cd462d192

SHA256
d84c584e37e429d748e49e23dd712ac73b5b6e8dc57c8efc52c1d6a9e642bf18

SHA512
dce12af425eb2297d95f36d0f83f7fd39afb28aafa1b29dbafd227581291e88024a452b38a3304845c818437c3887b383c991e17dd902f41bcde6e7d36ff2c1d

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Cache\Cache_Data\data_3

Filesize
4.0MB

MD5
729d8f49ad5fc8dec9c2674cc1f9c97e

SHA1
29c239e21ab7c7877b2a549cf7fa4cc6e2e5fdb7

SHA256
c0ce0bb0f31159267e838b80958b5a839e12e41eb4e6d6d63de6f7326a850935

SHA512
e2a9779017499de013ae0d24e8342ab58895d54c114554e4120bb880c8768d97a5ec21edf6a6c077ecff6e7161d60078e87dcf5b49e3ac18574d92a49fe35618

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Cache\Cache_Data\f_000001

Filesize
27KB

MD5
f01995ffd1236b702fc6e45be7a5e250

SHA1
7f5d7909cfdd5731b58ce3593ef9269b4cded4ac

SHA256
c7a71e2c234716be3a1d300a443412891f9998193a2093931ee44c6a7a7d998d

SHA512
6e671ae9b7b83766e496599409b3abd131ab30b14d356ffcf375ce4e188c6fff4668d8fe0a544bf711adce13f70534e7aa17153e24b9040c698c81169bdfdca4

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\DawnCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\DawnCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\File System\000\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\File System\Origins\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Local State

Filesize
434B

MD5
5450b9fe9273324be28c1e2319fbfd40

SHA1
d96218495ba2687ba822e0d70b721d87ccc6c9af

SHA256
45a522b6256bd87ac364d511bc20f39554770ffba764a93fa31d45dcc70c7673

SHA512
b1a45ae1b702426be86ae1a4bbb04022315d5f90cd9068b0d140b5638b5914c189536503827cdcc1bd5b12d38ba775a7ede09cdca441f45879ad422198d6cfda

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Local Storage\leveldb\000004.log

Filesize
1KB

MD5
e5ba2118b36ef3360dfdb768f7957db0

SHA1
a593586304c97b9430656dabfe8f562ff1be1cd3

SHA256
ba736efd502907afdf4bac25c1d934f2c8d10810d303f461a330b9b3c23a503f

SHA512
fcced33be87bfd302524ff72d460e345b45064d96dc32e33966600515c5764e2376289cdca34571e05ad95d16a6d2d7a3c93f0e8d2c49057d6ae29e4921f11af

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Local Storage\leveldb\000005.ldb

Filesize
422KB

MD5
18f5401d1f5176649d9ee3789d145203

SHA1
451b355c2001574bd3618ad84087c09b77c74998

SHA256
4851c2aa77839805723d11bd1b3ce0b96d000b874607cec2c8c7301af527ec1c

SHA512
2949228c9aaed65b37d98462b55ae80b2bd174e6d32187e5a4a516f38ac4ab247a1dbbd9c1d295792c8ac3bddfc9e757f38045c06893e500f81f2e9ab0d67b6b

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Local Storage\leveldb\LOG

Filesize
402B

MD5
305605e346f685dc8b1979c02ada4077

SHA1
d9b734dc9cd9afbe66e8bceeee3151f30940bac1

SHA256
771ba7807a5cbcc5c9a1c146642a0c712a11b253eb539ea4be8ecaf2a9b0aa2e

SHA512
2f741f43bb4ac4473e718204b70d8585e11d3d9fc6712bd48a1da5d9e641f5fe4038d370cb71c30b8d49b205e9a053c1033eaf604aa0fef2787f07c602b83f96

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Local Storage\leveldb\MANIFEST-000001

Filesize
108B

MD5
f5016d566f232de8d755d6a3fc974e7f

SHA1
deb5d5358ee41a3e354d47c027ebbe7bcd5249be

SHA256
82816af883bab2d9975fc4c5c610c506d3e0706479225f46d0aba2fa078f4ddb

SHA512
2b64903c64446455cf335360d0cded6d7461705c727403a7853f788fb2e05e028d581c93e71f4b36bb010d8da6c91e002ded82e67066f93bc880e44325ceb355

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Network\Network Persistent State

Filesize
2KB

MD5
94486e46088f1e46e7a739cf18c2842a

SHA1
7b02cc420d11cf34d5b4c48d2c521c6f785555d7

SHA256
abbc9a23b3cfb17af43d462bf88cbfad5974366dd923652d0f6ca507cb738336

SHA512
7df8b1159b0a7099237de531f0f8f59c463593828c0e78cc5e8743c0667cb6958dfc56883ac757f89940a292bc1be6950a07bcefb62c5a9a9a69253038f16ee5

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Network\Network Persistent State

Filesize
2KB

MD5
43c16785966a58312ad9b301ffff5606

SHA1
c2deb51a9fc5107ee9cad70387762dd6e6b4abc9

SHA256
ccff7c2fb48ffb6d2489bb45acb7dfa60738374850ccc4368a7a5c60f22a4e0f

SHA512
dbbc4ab059821ca0fb9271b134adc3ea723acb3be15bbcb7359b8df6a99f3a6c7aab7cb9b8b63e7d4c325855913727309447730bafb9d87276bc238fcf306a99

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Network\Network Persistent State

Filesize
1KB

MD5
9749aa950061744f12ef80491f6880ed

SHA1
0dfc58ee0f3435b6bb7ea1053f25d946c27b240c

SHA256
a8b9712d587a4c54c48831604605ff688e4a3efe5925f449cfcb71ea2f4540aa

SHA512
dbc651c82325a853377aed4300221a9ffcdb98d0debe116d05b14a7e606ffebb7c64fc08ed16c75b2136ba34b7052079a9aeed48e7ac5e7d13ce0d3b2ae4b835

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Network\Network Persistent State~RFe5a0a13.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Network\TransportSecurity

Filesize
858B

MD5
9b967b6d5e852679bf2bf30e3a35f5d6

SHA1
415c39c1b5c139901640acf4380b28dd06661b6c

SHA256
ddde5ac75c1f1655ed13ca93ee95ae91562b55c7c95738236bc19f15f7ff735d

SHA512
25a690621f2ca66ea55e8ac4b5c317a83d9f2d0f1f52f8c99afc1e9afa25c3b9ff1aeb75ba04e054246aeba994e1b88920d4407f013308acc16b69766f2bf721

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Network\TransportSecurity

Filesize
858B

MD5
015016780626efa81d795bc4fc7309d6

SHA1
bffb836aaebde19a3d46bcfaeb97cf43c29b7d6e

SHA256
2366df6a112eebf75789f6a97959b4e8ff25bbc2536f17dd109a0821f631ad80

SHA512
81059b8a41f65bcdeef32dfc97c7fb807b2298cf7d410ce3f9a925e06a68a48a23e0fa59744b2295ead0d8ce45126d83f60fdf5f44f857b43e57350590acb567

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Network\TransportSecurity

Filesize
858B

MD5
f70c3a25ef38ddc8025e6998c1dce801

SHA1
4bb0dd741f48ee28cb9b3005abfb6906f0b5c20f

SHA256
bba6f10a9ea7523ee98098464ba462928fc7cf6f7548392fb39790b86f4b1d21

SHA512
8711a9c7d93e6f354a3055986a0aaa83b18418c0291e3986b5afefa02537e0fbf395d3989e99c2d4e1f21c6a9641398616eda6ac8957999fe14b73b7c4ae1c0f

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Network\TransportSecurity

Filesize
858B

MD5
0847c1657d3414785e62c4b827a11c45

SHA1
b3fa1d9f515c4b92960a2e099901d1c2ce4ff976

SHA256
6462428a1915217b22c50a5ca833ffa7db65e09b64d4b8b1dd4a938e52bf021f

SHA512
67703cc54edd27c88455c864c64315534ff60b0ba300b3edbe7669c3eeef1a8d2e361481c4dc8c46f378f69563a78a0676ce778817d9a6bd275bf9c91975520c

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Network\TransportSecurity~RFe595db6.TMP

Filesize
858B

MD5
9fd4e1a7fe640fd8dd5ba951be602e8b

SHA1
e1e2bd2b229d0f0be475b46d85bb8b8a3329000e

SHA256
9f60578979239ca5f4ac39b97c817e9c7180ece0cd844c013bf1782166c6096c

SHA512
c5945666f40455a9ebf744c2ddf5374c13f07720d4ca1d844872a6248532d37dfba4b9b02a3eea5c405f4bb51cdc7145003237b0ba666a00594f90b62facbfd8

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Preferences

Filesize
57B

MD5
58127c59cb9e1da127904c341d15372b

SHA1
62445484661d8036ce9788baeaba31d204e9a5fc

SHA256
be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

SHA512
8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\Preferences~RFe591c77.TMP

Filesize
86B

MD5
d11dedf80b85d8d9be3fec6bb292f64b

SHA1
aab8783454819cd66ddf7871e887abdba138aef3

SHA256
8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67

SHA512
6b7ec1ca5189124e0d136f561ca7f12a4653633e2d9452d290e658dfe545acf6600cc9496794757a43f95c91705e9549ef681d4cc9e035738b03a18bdc2e25f0

Download Submit
C:\Users\Admin\AppData\Roaming\Miru\electron-log-preload.js

Filesize
963B

MD5
3d4f29135e9e55db7c096b3152a372d4

SHA1
f1135453f3ebb75363196ec98a7ee2e603645833

SHA256
e03602e4a766e5a1873fd0c5a44692ee409619ad131948382e78e86a9f927090

SHA512
3244f9b4d2cf0c7c4221a2d81bdf658b5ac8facbce215eccdbea469bd65c9ba7c919022c47239e6c93802c016ceb75a2cbe6e34afe07c77c24c16bc5867fbeb2

Download Submit
memory/1108-1165-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download
memory/1108-1166-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download
memory/1108-1171-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download
memory/1108-1159-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download
memory/1108-1167-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download
memory/1108-1170-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download
memory/1108-1168-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download
memory/1108-1160-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download
memory/1108-1161-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download
memory/1108-1169-0x000001C20DD60000-0x000001C20DD61000-memory.dmp

Filesize
4KB

Download