Analysis

  • max time kernel
    92s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-01-2025 03:22

General

  • Target

    SephioneRPG-Setup.exe

  • Size

    72.8MB

  • MD5

    dced1ca040f46bd57293698a4924e866

  • SHA1

    9104ba6c803644caea26475922646db6d4266611

  • SHA256

    23115d7b6f50955145a73ae7e56ab9c2a2c40b7f83e875470a8dba516d4c1e31

  • SHA512

    72a341b4dc10abbf17d3d84f196ab72adc60057f1bf4c72418d2b1177429d5e341d092516b9c54874d1ac4ae2feb821252f6d23269f1dad63132a8cdce13b64c

  • SSDEEP

    1572864:wXukFzve9l9/3oA92WPTWyI+XERsvpRQKM2/IQFcjyf:wj07F3fVPTWjRsvg9QF8U

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 12 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SephioneRPG-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\SephioneRPG-Setup.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2364
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq SephioneRPG.exe" /FO csv | "C:\Windows\system32\find.exe" "SephioneRPG.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2232
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq SephioneRPG.exe" /FO csv
        3⤵
        • Enumerates processes with tasklist
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3516
      • C:\Windows\SysWOW64\find.exe
        "C:\Windows\system32\find.exe" "SephioneRPG.exe"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4272
    • C:\Users\Admin\AppData\Local\Programs\SephioneRPG\SephioneRPG.exe
      "C:\Users\Admin\AppData\Local\Programs\SephioneRPG\SephioneRPG.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks processor information in registry
      PID:4944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Programs\SephioneRPG\chrome_100_percent.pak

    Filesize

    126KB

    MD5

    8626e1d68e87f86c5b4dabdf66591913

    SHA1

    4cd7b0ac0d3f72587708064a7b0a3beca3f7b81c

    SHA256

    2caa1da9b6a6e87bdb673977fee5dd771591a1b6ed5d3c5f14b024130a5d1a59

    SHA512

    03bcd8562482009060f249d6a0dd7382fc94d669a2094dec08e8d119be51bef2c3b7b484bb5b7f805ae98e372dab9383a2c11a63ab0f5644146556b1bb9a4c99

  • C:\Users\Admin\AppData\Local\Programs\SephioneRPG\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\main.cpp

    Filesize

    698B

    MD5

    88934cc736b505ada3d07afe22083568

    SHA1

    6d1d112f4e7fc943dc5c9ce5ad2f32154aeb2f3a

    SHA256

    1ada21451bab629832372d519e366bfb08c80facfefe5a40c76a4f10a697c905

    SHA512

    9f45386cba32d13a50360916b0c2f240e43cba5983a86ad80f85c75cd8e6ac2c6b931992842a736e84e234b91fc46a7a66824a3a2748f474cf1bbd22ec138a99

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\LICENSE.electron.txt

    Filesize

    1KB

    MD5

    4d42118d35941e0f664dddbd83f633c5

    SHA1

    2b21ec5f20fe961d15f2b58efb1368e66d202e5c

    SHA256

    5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

    SHA512

    3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\LICENSES.chromium.html

    Filesize

    6.4MB

    MD5

    c3528648bedbde1223a2faab1a3f9af3

    SHA1

    934d3c8f184258338ff380964ed89053ce69ac5b

    SHA256

    57b8e5a3f2cd62805001aefca035c7348b4d1abac157e6df3d798bb31f2ec3d2

    SHA512

    3e3cc0fd7a55f67ee0afff9696beef33bdc9524375bbe9d8e8f7660fd408c756c1156ca0b02ecccdc22799c7b8e74dbde012732ad6b3ebe0a3cfc54ff5132b35

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\chrome_200_percent.pak

    Filesize

    175KB

    MD5

    48515d600258d60019c6b9c6421f79f6

    SHA1

    0ef0b44641d38327a360aa6954b3b6e5aab2af16

    SHA256

    07bee34e189fe9a8789aed78ea59ad41414b6e611e7d74da62f8e6ca36af01ce

    SHA512

    b7266bc8abc55bd389f594dac0c0641ecf07703f35d769b87e731b5fdf4353316d44f3782a4329b3f0e260dead6b114426ddb1b0fb8cd4a51e0b90635f1191d9

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\d3dcompiler_47.dll

    Filesize

    4.7MB

    MD5

    cb9807f6cf55ad799e920b7e0f97df99

    SHA1

    bb76012ded5acd103adad49436612d073d159b29

    SHA256

    5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

    SHA512

    f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    6418dfc9980cc0416a327961dacd41df

    SHA1

    2e32ab8ea0059606dfe66e978c271e0852406215

    SHA256

    04bd8ee92194f076686eab2a94a119629b6d61e554782a0d4520359f1ceb24a9

    SHA512

    d3e98fe91bfa4f7b9363d8fbb6997f20f76a638bcb5345d9280f919a4bf13dfa02d190534d1965eccd95f2300f6b4d29b6eaec5d544e5428377d1e26daf501a1

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\icudtl.dat

    Filesize

    10.1MB

    MD5

    2c367970ac87a9275eeec5629bb6fc3d

    SHA1

    399324d1aeee5e74747a6873501a1ee5aac005ee

    SHA256

    17d57b17d12dc5cfbf06413d68a06f45ccf245f4abdf5429f30256977c4ed6de

    SHA512

    f788a0d35f9e4bebe641ee67fff14968b62891f52d05bf638cd2c845df87f2e107c42a32bbe62f389f05e5673fe55cbdb85258571e698325400705cd7b16db01

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\libEGL.dll

    Filesize

    468KB

    MD5

    13318cb90b385fb918ba6e07f1fd8d83

    SHA1

    899985a7608268893c7fc1c9810568bdd8294b81

    SHA256

    53a2d4c5ae582f15aad481e75e516ddabce9b756e553bed33720a66d2c5f736d

    SHA512

    b5418f6bd2ab883dc1ef4d9f2c0a976296d06fe1309c6db7331a3470f198505561cabd41ecd05e675b90076196b4f82e8a9ef0574cfe96869bfb24d07cc82450

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\libGLESv2.dll

    Filesize

    7.2MB

    MD5

    ad3edee84b49923e4847119eb4d6c6b7

    SHA1

    8649be26571d3fa645c416f36c1bdc0b27f1d478

    SHA256

    51c9f2e9aecf5745ad343185cd39a05f581c2062d644bedcb25a5ef4b9624591

    SHA512

    e504996b8371f294fa8a5173da48256e9070156249bdd7431e3adeacbd99f7cf39dc3c0876c4aa11da8d1932147cfaff91764c517a70d69d8c8e4876abbeea56

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\af.pak

    Filesize

    353KB

    MD5

    464e5eeaba5eff8bc93995ba2cb2d73f

    SHA1

    3b216e0c5246c874ad0ad7d3e1636384dad2255d

    SHA256

    0ad547bb1dc57907adeb02e1be3017cce78f6e60b8b39395fe0e8b62285797a1

    SHA512

    726d6c41a9dbf1f5f2eff5b503ab68d879b088b801832c13fba7eb853302b16118cacda4748a4144af0f396074449245a42b2fe240429b1afcb7197fa0cb6d41

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\am.pak

    Filesize

    569KB

    MD5

    2c933f084d960f8094e24bee73fa826c

    SHA1

    91dfddc2cff764275872149d454a8397a1a20ab1

    SHA256

    fa1e44215bd5acc7342c431a3b1fddb6e8b6b02220b4599167f7d77a29f54450

    SHA512

    3c9ecfb0407de2aa6585f4865ad54eeb2ec6519c9d346e2d33ed0e30be6cc3ebfed676a08637d42c2ca8fa6cfefb4091feb0c922ff71f09a2b89cdd488789774

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ar.pak

    Filesize

    624KB

    MD5

    6352905a290802a05dd3a64d22216f6e

    SHA1

    11adb10f0678079c8f73779bb039e12329bcaac7

    SHA256

    00861d9fa5763cc5c3152edb4a5c956c6bc4f56311ce2ed9e6b496181624ab5e

    SHA512

    0b0dbad8201ebd1a7dc2cfb11325c509efbcced3ac3d337915cf2972defe2304ea9f8af91d9362cb51333459900a80b714e7302a6483ad58fd64404f8410b6ea

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\bg.pak

    Filesize

    652KB

    MD5

    38bcabb6a0072b3a5f8b86b693eb545d

    SHA1

    d36c8549fe0f69d05ffdaffa427d3ddf68dd6d89

    SHA256

    898621731ac3471a41f8b3a7bf52e7f776e8928652b37154bc7c1299f1fd92e1

    SHA512

    002adbdc17b6013becc4909daf2febb74ce88733c78e968938b792a52c9c5a62834617f606e4cb3774ae2dad9758d2b8678d7764bb6dcfe468881f1107db13ef

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\bn.pak

    Filesize

    838KB

    MD5

    9340520696e7cb3c2495a78893e50add

    SHA1

    eed5aeef46131e4c70cd578177c527b656d08586

    SHA256

    1ea245646a4b4386606f03c8a3916a3607e2adbbc88f000976be36db410a1e39

    SHA512

    62507685d5542cfcd394080917b3a92ca197112feea9c2ddc1dfc77382a174c7ddf758d85af66cd322692215cb0402865b2a2b212694a36da6b592028caafcdf

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ca.pak

    Filesize

    400KB

    MD5

    83f9f785483cd92a73843ed98e674f86

    SHA1

    70e223dba0ecc5cf3f5fcf32278d97ff864c8024

    SHA256

    f7f54b55a917a0f68e4b7ed7a3e6feabb224c52d09786b939712607ebe8ab0ea

    SHA512

    df231f6774a9568cc4b85ad18d13c31cfb4de78830c72900ebd613d580e914e85eff85330ac9aa85246a0e4949891fdfb224ac615a03fcb0ce05b989391963e8

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\cs.pak

    Filesize

    409KB

    MD5

    f36f1b2ff12fb87a578c36f73f5aac83

    SHA1

    73f61f7b6f191468ff4d9566a0bb6eccf1069cac

    SHA256

    877a0a3dcb5d393365b2f775faff0d3593dd84b380a27dc72025597061a50ba7

    SHA512

    c61a38f937dcc90c7dd5b87d9514147b6362d339d9af85bcb3677bb12ae5715d05426f6e67ffd3b441cc41530883a227096b4135b98f2d5c73f51612e0a0e4c9

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\da.pak

    Filesize

    371KB

    MD5

    7ff057b530184205100dbea8635a29a7

    SHA1

    f6e22b2e37e6d7bf0ca9bec220650f01d1a4a091

    SHA256

    40b32636ffb813574d8a063ce7e74860ab06b93a9b16dd56b5b6aa602b5e6943

    SHA512

    09b7b6c280d98f21beeddf1b9e5834462f29d299a64276c198ef3eab466b352695172d2ff118664c34e51a2b73e21949f203ba35b0bb6d3e031ac770e3e6b451

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\de.pak

    Filesize

    397KB

    MD5

    1b928ff4831916bbe39e4b2e08f52267

    SHA1

    dd8788bb4d386f7d0b8e685a09cc9ca361b7c31e

    SHA256

    9c335a4e85b4ac58ed386d89d284be053ef288b2706a4cae433d91625ec1b31e

    SHA512

    95dc4ecd45708277618a913bd07073a7cc61b642ae14fecc91ac0548898771a522a0672ee67399e5f5c8ca3006c37aa878b74af1f41717b9607c00f49e40124a

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\el.pak

    Filesize

    712KB

    MD5

    e66a75680f21ce281995f37099045714

    SHA1

    d553e80658ee1eea5b0912db1ecc4e27b0ed4790

    SHA256

    21d1d273124648a435674c7877a98110d997cf6992469c431fe502bbcc02641f

    SHA512

    d3757529dd85ef7989d9d4cecf3f7d87c9eb4beda965d8e2c87ee23b8baaec3fdff41fd53ba839215a37404b17b8fe2586b123557f09d201b13c7736c736b096

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\en-GB.pak

    Filesize

    324KB

    MD5

    e0c79cf2e5b790386e44b125d8e1a5fc

    SHA1

    1b75baf8035b81d6494f9f36930bbc8c512e1dbf

    SHA256

    6b0e81b2198e025eae1e2f6d5d3a33ccce034d1f4bc59e4cade1b5f5adb99f1a

    SHA512

    e4feb64ce7edf416422127280cf87967a5e6b20436a8ed33932b1bade73f0691ac819449d38fa0d8a81b888d6319f0b3167aa16e225999dfd6e7800d2365f2a6

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\en-US.pak

    Filesize

    326KB

    MD5

    19d18f8181a4201d542c7195b1e9ff81

    SHA1

    7debd3cf27bbe200c6a90b34adacb7394cb5929c

    SHA256

    1d20e626444759c2b72aa6e998f14a032408d2b32f957c12ec3abd52831338fb

    SHA512

    af07e1b08bbf2dd032a5a51a88ee2923650955873753629a086cad3b1600ce66ca7f9ed31b8ca901c126c10216877b24e123144bb0048f2a1e7757719aae73f2

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\es-419.pak

    Filesize

    395KB

    MD5

    a510ff6703676bacde7e528823878018

    SHA1

    6551a7dac1c3fcd839b8d7c6ca92470f30a93d0d

    SHA256

    77114f519743741a488a9b57cdc7190f0507c37dc3b29811704a048172ba6736

    SHA512

    e9b75bc92eb077db57f906ef544b2339c4eb4f6eddf65d2570c36a00ab4b8a167a53e869d81150a7d097ecbf4ba19625ad4228f133392cc850352fe66fea47e0

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\es.pak

    Filesize

    394KB

    MD5

    e42486833449ea57261d5bbdabb8b4e2

    SHA1

    09734ed71302c7a3bf5f84dee1dfab7732bc0745

    SHA256

    d539c88c4493cb1d9eae600611e3119fe129ec95149049f4b62fc3a97d78ca61

    SHA512

    8ad283323c3f2e7a9d2e33eb86c371be6a9e29d9243e0d74d5936606692367212f81825d5c313a8859ff8de84eb6d23cbfc577ca47185392da803717f29e8b24

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\et.pak

    Filesize

    356KB

    MD5

    8b3cb5e4b8ac769bde84e5c375c1774e

    SHA1

    53665908d6ec12095abd766911d8abcc84c6da58

    SHA256

    c351b84558214420495bed6d882d37496483cc66b0e10400ca872e3fc4145b66

    SHA512

    b0dff640d32e5c277f2d3441abf823e8859f28f215cfc63fde8a968cbc9b9531aa0394e10fa98284d186323e3357ea2265d762dc034be86bb50f5c55630ab4c5

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\fa.pak

    Filesize

    577KB

    MD5

    e861a65f12b38a3def1fe9e933cae275

    SHA1

    8d083b5902a15a63ef11c7783f12e088d333fcf5

    SHA256

    f9a8e3b9bbc809f11cc3dc32811940e033bd78a31ec154d28321473f8efa1e4d

    SHA512

    d1fe91c693c794b4a4d60560800c919977654832e8f6e34fb1ec0ffbf5c411cf35b0a0e22e036dca48a246ab8d6bea0427c5ceb232d460e9c59cf4163d55314c

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\fi.pak

    Filesize

    365KB

    MD5

    7243727348009668ded33dd0109118c3

    SHA1

    aa19e2e340c8328132d12ff79d8fd6b02c512a48

    SHA256

    6581fca26336f66d8ba898ec1253b237db30e7cd1a25fc788290d7ace96fa6e1

    SHA512

    e890346915c0891a9f49640f232f6633e25655b969911a6697adfea709cec59bb925678e0b97424936c59d523c3ee9e2dc23f115e20c45ca3ed51ae691d0d7f0

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\fil.pak

    Filesize

    410KB

    MD5

    d7df2ea381f37d6c92e4f18290c6ffe0

    SHA1

    7cacf08455aa7d68259fcba647ee3d9ae4c7c5e4

    SHA256

    db4a63fa0d5b2baba71d4ba0923caed540099db6b1d024a0d48c3be10c9eed5a

    SHA512

    96fc028455f1cea067b3a3dd99d88a19a271144d73dff352a3e08b57338e513500925787f33495cd744fe4122dff2d2ee56e60932fc02e04feed2ec1e0c3533f

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\fr.pak

    Filesize

    426KB

    MD5

    3a5bb07820cf46c0f4a81a25724fe870

    SHA1

    dbc296c1fc516c60d453253ee341ca4d31554230

    SHA256

    b62c51b85545b3f5d70ac9c684a111689044636eafaeb196f5d52760e0f96f91

    SHA512

    0222f7a8bf3a6f77fcb9ab7eb0d03509d15bb8634d556547ed55141d550af241a525cc99eb13957744fe2e6d4732b9dbe4d078cb3555b16af6c13e20b9f4e8a1

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\gu.pak

    Filesize

    812KB

    MD5

    9e189d21ad5843b69c352466c94cdc4c

    SHA1

    99af98cc510abe726b54f28488f647ea6f7d4c91

    SHA256

    9c210e3143f99df59bebea6bdb6e30959f8520d59a20fffd437f7029840bb3a9

    SHA512

    c3007f45ec20c3c3e763f20be1a5557f548a28757cb032617c20fe7d44b7524368b75b8182de243048aa56b939b2a790b5b85cf359b009c4c20c41089e8992e8

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\he.pak

    Filesize

    507KB

    MD5

    c6937badd93ff4ae6f6a2c9e31f678d5

    SHA1

    b3175d7bebe340ab08e0d8e85d550a076b073c55

    SHA256

    3cd4440501bc67d0b2e33e1346ba133fb9a09a8762f2334732f8cc349cd840b7

    SHA512

    db232d7da04b4a854fd399fa04779469ec6fd0a752c4da7b2eed6d1aeaca4a096130fe326c91d777131d1a8ba32637d884e518f1522e9658d233a35e5eef9397

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\hi.pak

    Filesize

    848KB

    MD5

    bc777a1010c846906d05d75d82f5dea9

    SHA1

    73bbeeda37164845ca3f4f2827165b4023f8a194

    SHA256

    ccf7a557d0f8353ff3d656d4c2a4fca2d462ed2cc3d18c599d98f4d57b23c615

    SHA512

    e6a01b80adfa31fa93d48fc4f1ba9222d21b8ed7734e664e4f274843b46d826ec8863483c0e8647e39ad85988dfe0a2848d32a26ce1fdd8a0eb85e4fe64be292

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\hr.pak

    Filesize

    397KB

    MD5

    cbca0ad35cfa5c4b852cc8f556706b0b

    SHA1

    608d2e11a40e5e15a2840e248a249d1562ba9846

    SHA256

    6ea4b1a28cf567cca73ccdb7eec631fffba3b49acc41e3c88b448514578d80da

    SHA512

    5b6f01c10d613f278d507d43fb0c708b32fd486d9b5a5f31a9837d0b1025da6ff85772b8f39e192cd8625d363be570565fd4eaf0f8d11c17ad6cbd956893022b

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\hu.pak

    Filesize

    427KB

    MD5

    2aa0a175df21583a68176742400c6508

    SHA1

    3c25ba31c2b698e0c88e7d01b2cc241f0916e79a

    SHA256

    b59f932df822ab1a87e8aab4bbb7c549db15899f259f4c50ae28f8d8c7ce1e72

    SHA512

    03a16feb0601407e96bcb43af9bdb21e5218c2700c9f3cfd5f9690d0b4528f9dc17e4cc690d8c9132d4e0b26d7faafd90aa3f5e57237e06fb81aab7ab77f6c03

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\id.pak

    Filesize

    350KB

    MD5

    366d1b2c3759d6ff9c588f53ec9a7c5b

    SHA1

    e9d5c6e8311c6f7b7c4ad997db0cec5c11cfd754

    SHA256

    0853a5543923b7a8db5989ebb8ebe8f9fb6271bfa59b94f5843f97de4401e2d8

    SHA512

    879e72625fd112cec85a6489c590d7e89c65753d2beee259f7393e7377729d40bbb8cd0a2a9fcfde93d14c2cc9a97879312e60ab26035970a632e36d2f8d9e53

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\it.pak

    Filesize

    388KB

    MD5

    8cde7372fc5095e581bf64fb77e04d61

    SHA1

    0d30e0ae2c401a06ffb4056bab44d2b5d3970492

    SHA256

    d011fd39c3cbab740a7944a60a8dd48d6f76c563ea473cfd1f569c5e6fc9fa4e

    SHA512

    83778880ad95b39b5746d512aa116b05928f580f0c5e75b45cddcb80addb24cf079f73f65771e1d75ca18925ea6fdb86283aa060af2cd1308dee53ee728f76e8

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ja.pak

    Filesize

    472KB

    MD5

    e9133185d2339d0a2f68c4c739eb3615

    SHA1

    cfa6db85ec99bb38b734254b7d4a83d12ee5cd00

    SHA256

    ba2acb635671a48ed0bf8cdc6e0a0318cfb33eb74b4171c6b483b95f2a167bc5

    SHA512

    e89c886a601943d2089bad27ce9458f95929fd39fd2f88da0545f71e9d18a678eafc303630d0f94ab3af7c77ad19fabdb2616a2d004151232bc6ce1ae8e4c46e

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\kn.pak

    Filesize

    938KB

    MD5

    fccd5d8ad5e1c774771b19dda55d9b9a

    SHA1

    fabbaf469e4aec44342a7e6f74b837cde2203b71

    SHA256

    47c77fdf73267865a025a54027865a8d67e26943264a43c6e794ccbd6eec549b

    SHA512

    c9dc6cf0ff5a4094cc07ce4881319778a076b44651b16a220940d7a587ffaa92b6b80f7264605a3c8e6dd780e9c3d8e4d403d01cd8f94e0122ac19cd4d636aac

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ko.pak

    Filesize

    398KB

    MD5

    54ace51d8b687e36a66a2bfde258a550

    SHA1

    1b2fe7c62e3f2c7deede2034e44980e02afa3b4d

    SHA256

    8d131066e2fa004e11f9128162bfc354d3254381059d6c852bf88a55859ae3e8

    SHA512

    50b825a88d646a32a4d620bcdf5ce490c8dfbea628c5256a6918dc647c42385f955396ec5d3b32cfdb50153897cf303cd517bc9f62663b14def2dae42229f640

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\lt.pak

    Filesize

    429KB

    MD5

    64b08ffc40a605fe74ecc24c3024ee3b

    SHA1

    516296e8a3114ddbf77601a11faf4326a47975ab

    SHA256

    8a5d6e29833374e0f74fd7070c1b20856cb6b42ed30d18a5f17e6c2e4a8d783e

    SHA512

    05d207413186ac2b87a59681efe4fdf9dc600d0f3e8327e7b9802a42306d80d0ddd9ee07d103b17caf0518e42ab25b7ca9da4713941abc7bced65961671164ac

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\lv.pak

    Filesize

    427KB

    MD5

    4468d6a6114d5a7ea3c1173ae9a8250d

    SHA1

    ef664a6a140fb7a244bce44ff8c73250856d8061

    SHA256

    0ff66161377be2fb8b2b456a64dd910d8375a2b9f1f6f22333540a77111903d6

    SHA512

    db4179b53cd44f297f5455a167ceccdd2a384c5296311346fa53f15ef5acab76cd166df13dbdf22b0c85a66455f22218e88c02fda2c5e2f863b9f4e7ea6e9a56

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ml.pak

    Filesize

    974KB

    MD5

    038b9eb34737bf472fde68b91a40f122

    SHA1

    64771e91d4fdac0b909c6f446cc2f310be7d1320

    SHA256

    27b7947e36a521403de094cc563d5eced1e46f98e4d6b872fd424352f798e84d

    SHA512

    3c96b42ab838f2ad5434e719f5906427a5fb327967d04c8498f3af4e913de833ac9cce6545fcfe0de2dc920cdf54c8b31c1d1527f609f90bcf9728d7bdbaac7d

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\mr.pak

    Filesize

    797KB

    MD5

    5657d67f6d21b507aab24ff62b0d4701

    SHA1

    b685a327c525b7e42eece306984e6d88dd803a29

    SHA256

    671c3cb2a805a63a275ad608d37d0577c6a2813dd67fb6c2b70f8232323aac04

    SHA512

    637c60834edc6f31c80692274af05e3f78466cd5ddb2fd7c79315b0f54939f41f25c3b30c86fd10751d032def1f99cb853c3186128a76a3a82a6989eaf14a835

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ms.pak

    Filesize

    365KB

    MD5

    aee105366a1870b9d10f0f897e9295db

    SHA1

    eee9d789a8eeafe593ce77a7c554f92a26a2296f

    SHA256

    c6471aee5f34f31477d57f593b09cb1de87f5fd0f9b5e63d8bab4986cf10d939

    SHA512

    240688a0054bfebe36ea2b056194ee07e87bbbeb7e385131c73a64aa7967984610fcb80638dd883837014f9bc920037069d0655e3e92a5922f76813aedb185fa

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\nb.pak

    Filesize

    358KB

    MD5

    55d5ad4eacb12824cfcd89470664c856

    SHA1

    f893c00d8d4fdb2f3e7a74a8be823e5e8f0cd673

    SHA256

    4f44789a2c38edc396a31aba5cc09d20fb84cd1e06f70c49f0664289c33cd261

    SHA512

    555d87be8c97f466c6b3e7b23ec0210335846398c33dba71e926ff7e26901a3908dbb0f639c93db2d090c9d8bda48eddf196b1a09794d0e396b2c02b4720f37e

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\nl.pak

    Filesize

    370KB

    MD5

    285f965bdfd40491c0669f41a1c9e2f5

    SHA1

    b5c17191ab4d152c7793b6dec0a2e8f1fc298a89

    SHA256

    b20178135b9f21feef0315fb2f2bc574c2876385e607a539ff0ce6ae7faf707b

    SHA512

    03de0c35bc75fb96cc5871b5d06a49d99b92864541a3a03816c1245bef567401b260ed94b99818f81273395b1ec60a9f6cae22084ef34e01a95cc41da4fbd1b7

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\pl.pak

    Filesize

    412KB

    MD5

    fbc79131a645b3853b4fa97c2b589a07

    SHA1

    91c6d4386384efa9074956b9e811a0aac385aa4e

    SHA256

    0948238576efb502327af4040c1d9eb1346fbf1bdcee35cd46746b170a7ea6a7

    SHA512

    0559d787bb7e4fa32a70c19cf0d1b2962d3869363904c13f345ef733f1193c73a13bad9600d7a5ffacf60b92cd97c27e27f7c4b7e143d0925fb358498c92f8cf

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\pt-BR.pak

    Filesize

    389KB

    MD5

    3701247a5ac607053278aea185ee6616

    SHA1

    8cb40ddd4865347677f8d327792c6edb69012f76

    SHA256

    7f41c3a58d08d98f21232e7c85839c9dec0053b447bb4dae867d2faadb278d45

    SHA512

    637070ebc4411fb92bef5ff75eff46602db8ed59021f37f1a0d8201093f047419c558ec1af49c4dbbb4f58e7169e2f2cf04af7e1d11a57d39ab1cf036cb8497c

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\pt-PT.pak

    Filesize

    391KB

    MD5

    e032c0d39df2b7bfc71ece3bfe694039

    SHA1

    6664f303bae983a1bffcba22e9df712bb3cb59d6

    SHA256

    60a5a7f03d4d54397ca04be0c89d1f67a496b72807c0bd660c076bc945b40339

    SHA512

    3f12ed39848ad76411d4d84b2ccef59e2346d40c8e7ddbf6e333a2323df737d864126777fb54a15e90283ced2e7f04a7dda561fa2ebe13b30e082988b13e1406

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ro.pak

    Filesize

    403KB

    MD5

    d8b831a4896af7c78c534f1e8676ae37

    SHA1

    175da19445b975b24a1e7bc8ffafa93d456ed10c

    SHA256

    3a58f2275ea6a2baa68924b1dab6b0f06abf8b6657a878dea94b0060a95e38f0

    SHA512

    e7e75dc7f92eb28759b567ec395f2a951c0e71284c75b9e2c4efd92209dda5767d51d51cdf591d04baddcfe88fbc2c8e6851a904d631b69bd801b9568767d948

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ru.pak

    Filesize

    656KB

    MD5

    e582616cb61afb76688aa7669936bbff

    SHA1

    cd2e894a59238ce90be527156243546b4a3fc53e

    SHA256

    e4edec80c9e29357bcf31eda5d8b046c6c9fbc6434a0b5594b6a906d5f1407d1

    SHA512

    a5346390b6ec966d75839fb84e8d7284db55065b1a032ecd869a06555cdf116caaad73f9b059c92c17d5a5fb310a41c5f3b2461eee531b231adacb1b3d3d6cec

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\sk.pak

    Filesize

    416KB

    MD5

    07498676ad49df5cb1a14d91e2fc2353

    SHA1

    da344ebcc2ed566b45668c8ff5b950cb921af71f

    SHA256

    b7ba1d08ac8498ea6a37186a51b30d6d0db17136ac734982af4dab97f4a6cd9a

    SHA512

    548dd27e98700681941ac13e6cf90a70c66520f70df51c75ecfbb32391805ee536a34f3e90400c1cfb34b750c9415378e1a75233db614c94a057da64d3369d91

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\sl.pak

    Filesize

    401KB

    MD5

    83ef046784c1b113e827cb744bcb8656

    SHA1

    f6f3e0e975e7d3ca8e06f1988cb8a1c182eea734

    SHA256

    ab2079923e2baa27c220df2f1559af8edc785f8e9fe2e12c8ecb0e0e7e7d0a09

    SHA512

    f62f7e1eee91f5d42d591abbc7cb0fdf639834090824e7ab7f4dffb1e6c108c540074fdbadd5e153caecdb37b722ed9f737f13cbab387685013781949b9ee321

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\sr.pak

    Filesize

    616KB

    MD5

    c68c235d8e696c098cf66191e648196b

    SHA1

    5c967fbbd90403a755d6c4b2411e359884dc8317

    SHA256

    ab96a18177af90495e2e3c96292638a775aa75c1d210ca6a6c18fbc284cd815b

    SHA512

    34d14d8cb851df1ea8cd3cc7e9690eaf965d8941cfcac1c946606115ad889630156c5ff47011b27c1288f8df70e8a7dc41909a9fa98d75b691742ec1d1a5e653

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\sv.pak

    Filesize

    361KB

    MD5

    251682c6f4238bef8ab5471870a5454b

    SHA1

    2bf36466446abe39d487c61898d335901bbb09b0

    SHA256

    e1cbce672de3ba3a01272b9b763dcfd8229fba0883df2b4117ac6b0f9916c073

    SHA512

    de1e507b24e71f60c298253aacff49724b6a8c6336455d8dfcc6e939e53ed5e7a95dc5574e66a7fae38b6666446ac9cd83e5ad1b794b4ffa38d06052663c1f45

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\sw.pak

    Filesize

    379KB

    MD5

    67a443a5c2eaad32625edb5f8deb7852

    SHA1

    a6137841e8e7736c5ede1d0dc0ce3a44dc41013f

    SHA256

    41dfb772ae4c6f9e879bf7b4fa776b2877a2f8740fa747031b3d6f57f34d81dd

    SHA512

    e0fdff1c3c834d8af8634f43c2f16ba5b883a8d88dfd322593a13830047568faf9f41d0bf73cd59e2e33c38fa58998d4702d2b0c21666717a86945d18b3f29e5

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ta.pak

    Filesize

    964KB

    MD5

    292f763cb8eb588659eb7cc25cf57d2e

    SHA1

    dc42622f272843cb3afce9968146b85a98485237

    SHA256

    d5bfe0699342b8bba6c4c73c115b1c7f3f903c4ed95d77461c34369f2f60d5ee

    SHA512

    100ec32914f0d140baa414180cb2ba34e95f75ab73a0c036d6d5ebb64cc69b2b7c62b9e3f9de192bab8ddac3b387b953bed2ca1fd3bf0aab0198b9c1f2911151

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\te.pak

    Filesize

    894KB

    MD5

    41e49a1ef6850d90e0cbdc720c45ea5a

    SHA1

    a2fbe1585a1b653ac6acccaf6184ae2de3e007af

    SHA256

    aa2b9d1ad8591e91872c3fee62b111b74d6e7e890a47d0bcc388947ae5245290

    SHA512

    687ff66471248104f8780f142e1810ccc7275857e4bd188447d01cecbe74ebac4070ab135d4a7111bc5f4ae17247dd865f21a2d3e73031534dac1f5117bc4570

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\th.pak

    Filesize

    753KB

    MD5

    f9ff2275865f2cdebb9b0d19d4fb57a1

    SHA1

    e83c6c8e0005bf34771af3f1c0c9d8ebaa822f95

    SHA256

    3d4556bc0f26b89d090a8a779a8fda8f6fbe157a23181cbfb1d6c67a6212b864

    SHA512

    96f596bb564e62bbafe62774fba1cefa644feff47a331e54cd7dc9b85b29f2a2e8e785e85d90cccc27f9a1c735b0a8c6dbe01fa244601f1359194f64a49ee6d0

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\tr.pak

    Filesize

    385KB

    MD5

    1525dd38ca529c56f9d3e08293385690

    SHA1

    e0dfb9d60a3469d701dcb9ead8f8cd2cfe6fd604

    SHA256

    5a7e1c8b572f67ed40e9d5107ddd6f8791b03138bb9933cfb26f1678b2c4a9cd

    SHA512

    195ffc165e45a51c12b03252759c5e1ff684e57b5994aeca608d40ef6799f29812add6fb2479e8e8c1655799f4dbf29e47272324b857b9161ad43a1b271eddfd

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\uk.pak

    Filesize

    657KB

    MD5

    88d51b6df9f3cec54eda732dcf2c63fa

    SHA1

    a826200f112d5c69f1aa5837bc40d4c423515029

    SHA256

    e914b8956745a14d9d64f12698805e0910f9d3581dd380468949b54576fad2a6

    SHA512

    3ed8f2090497597d4e2583901993331de19f9dc787ea886dabdaf22a79aefa2956e63501c9a50be34fabf7287b6751f50d9a5105e4f16a579961ebc0d6eff14e

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\ur.pak

    Filesize

    571KB

    MD5

    1ca4fa13bd0089d65da7cd2376feb4c6

    SHA1

    b1ba777e635d78d1e98e43e82d0f7a3dd7e97f9c

    SHA256

    3941364d0278e2c4d686faa4a135d16a457b4bc98c5a08e62aa12f3adc09aa7f

    SHA512

    d0d9eb1aa029bd4c34953ee5f4b60c09cf1d4f0b21c061db4ede1b5ec65d7a07fc2f780ade5ce51f2f781d272ac32257b95eedf471f7295ba70b5ba51db6c51d

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\vi.pak

    Filesize

    455KB

    MD5

    ebb5db1dbb64895b1a25120d5ac9b5e4

    SHA1

    810fa53a97fe42994f8a68698d582651d69cfd51

    SHA256

    ef3ddadb90dc73b73e25e9608626ce68d6778445812b8bd2f6c81e1f1e4bff16

    SHA512

    fba594183c7b672204330ca698f1e195026fc51d4e05db2c49e58a896c3b5e11e23286be0d6ffae3ec321e6c08322544df3c876dbce3c2e69a951985a84a2c91

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\zh-CN.pak

    Filesize

    332KB

    MD5

    0d5b72258b56c584113a022e16777387

    SHA1

    77f91e8c36befb818229ef8fef068e97f60ecf0f

    SHA256

    539f0bfdb461bf777aab14a4baaf47c8c32ae1856cc4ac93b23ce73dc50ba02a

    SHA512

    632c4ca60529c717fb2ba700d8f12017d097e67045639e2c30144a0372cecf595a2727d3505f019b91e8a15fe3259f2727bfb24e970dea8080a11e1a3dfa2068

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\locales\zh-TW.pak

    Filesize

    330KB

    MD5

    c651e23053764c38a4e8a7f34317f19b

    SHA1

    93cd303c91024748d283c3779f11402cfb4f5c0b

    SHA256

    9689ba3f2dc7248a3ab5db3b97d473e29464afbc7f2d1c7035f7e8e9a1c05aa4

    SHA512

    1b7951fc4dcc2c08811dd3449fe2ce1302286b3eca21675adefa25a806ae7dcf91c565a111032fc5fda4dd9f5231875f0c77cdfd22ecc7d435450080d853a503

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources.pak

    Filesize

    5.2MB

    MD5

    9d000106fc3192e4c3d47031cf450131

    SHA1

    814c455baba7dd4d9354ed061522fc4caad3e7b4

    SHA256

    d0e884b68e2b79162e88b5d4a593c3bb4a7c60c5c62f4e3cc69a346727e6f7eb

    SHA512

    b19e926fc5223375685854a0b26a04efdcd8128e44b3b56f3ed2cccb860b9069ff6e49dbae053a4287f12de6796643021a316baaf3f8505f5574171d8c6cf885

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar

    Filesize

    10.2MB

    MD5

    28774e8d22b007967856defadb98900b

    SHA1

    3d8a06b6bc7896c1af1608199f427a0b9942f1d6

    SHA256

    81e4424c1f199371793a09fa129a747b65be74ae4ace114c50c5fd4ff4c72385

    SHA512

    613af01271f7851d521010b333fefbd9775bfd17c7e644335c8d2f0c4a2073f619083a319f8f5e1c6e93a0f4ef4cac70036bc0f0d95b6533427d4a93ad162d96

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\LICENSE

    Filesize

    1KB

    MD5

    7bd114b023fa6209fb7b02150a202ccc

    SHA1

    4451515f9d7b16ce8983abb4e85609fe4162c4d4

    SHA256

    455dda47a3fc2f58ab06d8e526f490ec43d0fc23a5ea80dd0942644397316d9b

    SHA512

    87ee4dc1da13937055eade250f1f8a357f549c709b9659258c137009060080aca5cfd979890a7b2d662083f4c646cce9af6e20774b58541af9e712fb5f4f1c60

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\dist\index.js

    Filesize

    412B

    MD5

    0b33e83d33b01a51625a0fdcbef42ce3

    SHA1

    1c29d999ff7da39426b97f2eb31a3d83db8f5fc7

    SHA256

    a7ff0225cb5ebcbef8499c6c8ac2be924f584eb375dacb1d8bd3dc6540b510f2

    SHA512

    1d04caf4fc2e876bdf2a089ae938a41fe4d3f2928aa846709bafd2de236fa8c754fcc84d7e8a5f5734bc1cecc04b395ab9d2114945b35e8c85cd3b9ee8f9799c

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\package.json

    Filesize

    934B

    MD5

    83a6b767cd4ade2116654eb0a90fec3c

    SHA1

    07a0f29ddb1c8a48947ee05bb4d6ec3d2abe1df9

    SHA256

    59f4704391d2247b2a8d029d7338566d47d2ff0cd7477c49343efe93475f7a12

    SHA512

    404ed15686b7d611ba8aeac12e706af75a876502c51e40e48a598d05a9ac89f88902b2830a5c679f9bb7931f5c33bb10da3a32753fdb8c71a9d7b4346a1be8d0

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\prebuilds\win32-x64\node.napi.node

    Filesize

    137KB

    MD5

    04bfbfec8db966420fe4c7b85ebb506a

    SHA1

    939bb742a354a92e1dcd3661a62d69e48030a335

    SHA256

    da2172ce055fa47d6a0ea1c90654f530abed33f69a74d52fab06c4c7653b48fd

    SHA512

    4ea97a9a120ed5bee8638e0a69561c2159fc3769062d7102167b0e92b4f1a5c002a761bd104282425f6cee8d0e39dbe7e12ad4e4a38570c3f90f31b65072dd65

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\dpapi_addon.h

    Filesize

    206B

    MD5

    ea1e5899ec0210d7de4ce325d1d94022

    SHA1

    464da48d40547cb08a67a1ed38cb0ae8369f2f42

    SHA256

    18280b1135123aff82fbf4188a5aadfc9a5d6fffad9309f72f347f380f2da550

    SHA512

    6dae672ea822a7dc5e42914def21c019c0fa8aeaf1c27c155b78312d8a33a63ae9a1910dd32b72760578671780b8c37b91ff5e1f6588f08c7fbaaff80d8fb6fd

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\dpapi_not_supported.cpp

    Filesize

    327B

    MD5

    c510e65ebcb2fa7c00712e770ec8c692

    SHA1

    ca1ea3c8340dcf69f344d5eaa884631eef37472b

    SHA256

    7c03cec11c438b6d2512239477d9f1b45d6e16763122a3a36458ab339f50d3c4

    SHA512

    b0b312426b4409c80b45a0f3337069be9870e050dc8b55184fb2bc63532c247089c8d35cbd1f12f0bd2bd38d581566faa74a6469b548a1ad7d837285ad37c178

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\dpapi_win.cpp

    Filesize

    2KB

    MD5

    4a55597a2c7466278439452bb708b822

    SHA1

    eaadcda8f410f2dd1fd9522fd7a2221624dd1713

    SHA256

    da37b02fb0babb651244479ea019d229fff1c41ecde74bc06335b5e603d9b30e

    SHA512

    b20efe8026de41dd8c13c6f844455cacc13fa80bc3dd41fef422fb178054a7c8d6f14af8b1d6928e52648ab95a793aee1f996dc2aceead3aa8d317a99aad23bb

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\LICENSE

    Filesize

    1KB

    MD5

    79558839a9db3e807e4ae6f8cd100c1c

    SHA1

    ae3dbcee04c86fbc589fcf2547d4aaaeb41db3c2

    SHA256

    7686f81e580cd6774f609a2d8a41b2cebdf79bc30e6b46c3efff5a656158981c

    SHA512

    b42c93f2b097afa6e09d79ed045b4dd293df2c29d91dda5dda04084d3329b721a6aa92a6ad6714564386a7928e9af9195ac310deecd37a93bb04b6a6f744be46

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\build\Release\node_sqlite3.node

    Filesize

    1.8MB

    MD5

    66a65322c9d362a23cf3d3f7735d5430

    SHA1

    ed59f3e4b0b16b759b866ef7293d26a1512b952e

    SHA256

    f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c

    SHA512

    0a44d12852fc4c74658a49f886c4bc7c715c48a7cb5a3dcf40c9f1d305ca991dd2c2cb3d0b5fd070b307a8f331938c5213188cbb2d27d47737cc1c4f34a1ea21

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\common-sqlite.gypi

    Filesize

    1KB

    MD5

    0ad55ae01864df3767d7b61678bd326e

    SHA1

    ffedcc19095fd54f8619f00f55074f275ceddfd6

    SHA256

    4d65f2899fb54955218f28ec358a2cad2c2074a7b43f862933c6a35e69ae0632

    SHA512

    aaee895d110d67e87ed1e8ed6557b060a0575f466a947a4f59cc9d111381e1af6aa54d432233716c78f146168d548a726fed1eab2b3f09bb71e0ae7f4fdc69e3

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\extract.js

    Filesize

    224B

    MD5

    f0a82a6a6043bf87899114337c67df6c

    SHA1

    a906c146eb0a359742ff85c1d96a095bd0dd95fd

    SHA256

    5be353d29c0fabea29cfd34448c196da9506009c0b20fde55e01d4191941dd74

    SHA512

    d26879f890226808d9bd2644c5ca85cc339760e86b330212505706e5749464fafad1cb5f018c59a8f034d68d327cd3fa5234ceac0677de1ac9ae09039f574240

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\sqlite-autoconf-3440200.tar.gz

    Filesize

    3.1MB

    MD5

    c02f40fd4f809ced95096250adc5764a

    SHA1

    8398dd159f3a1fd8f1c5edf02c687512eaab69e4

    SHA256

    1c6719a148bc41cf0f2bbbe3926d7ce3f5ca09d878f1246fcc20767b175bb407

    SHA512

    59ad55df15eb84430f5286db2e5ceddd6ca1fc207a6343546a365c0c1baf20258e96c53d2ad48b50385608d03de09a692ae834cb78a39d1a48cb36a05722e402

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\sqlite3.gyp

    Filesize

    2KB

    MD5

    0e4d1d898d697ec33a9ad8a27f0483bf

    SHA1

    1505f707a17f35723cd268744c189d8df47bb3a3

    SHA256

    8793f62b1133892ba376d18a15f552ef12b1e016f7e5df32ffb7279b760c11bd

    SHA512

    c530aba70e5555a27d547562d8b826b186540068af9b4ccd01483ec39f083a991ac11d0cc66f40acaa8b03d774080f227ee705a38995f356a14abe6e5f97b545

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\sqlite3-binding.js

    Filesize

    59B

    MD5

    8582b2dcaed9c5a6f3b7cfe150545254

    SHA1

    14667874e0bfbe4ffc951f3e4bec7c5cf44e5a81

    SHA256

    762c7a74d7f92860a3873487b68e89f654a21d2aaeae9524eab5de9c65e66a9c

    SHA512

    22ec4df7697322b23ae2e73c692ed5c925d50fde2b7e72bfc2d5dd873e2da51834b920dea7c67cca5733e8a3f5e603805762e8be238c651aa40290452843411d

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\sqlite3.js

    Filesize

    6KB

    MD5

    275019a4199a84cfd18abd0f1ae497aa

    SHA1

    8601683f9b6206e525e4a087a7cca40d07828fd8

    SHA256

    8d6b400ae7f69a80d0cdd37a968d7b9a913661fa53475e5b8de49dda21684973

    SHA512

    6422249ccd710973f15d1242a8156d98fa8bdea820012df669e5363c50c5d8492d21ffefcdfa05b46c3c18033dde30f03349e880a4943feda8d1ee3c00f952b0

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\trace.js

    Filesize

    1KB

    MD5

    e5c2de3c74bc66d4906bb34591859a5f

    SHA1

    37ec527d9798d43898108080506126b4146334e7

    SHA256

    d06caec6136120c6fb7ee3681b1ca949e8b634e747ea8d3080c90f35aeb7728f

    SHA512

    e250e53dae618929cbf3cb2f1084a105d3a78bdfb6bb29e290f63a1fd5fbb5b2fab934ad16bc285e245d749a90c84bdc72fdc1a77af912b7356c18b0b197fbe5

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\package.json

    Filesize

    1KB

    MD5

    174bf28fccd7fdb6f0766f31fac3060d

    SHA1

    655f465658957fbdf935fcb7df0b97c93807147b

    SHA256

    91008a93e604674024bd65569670af5b01f1e4caf86cde50835ee58f59a5dc61

    SHA512

    fa1be386a3d74767731aa5ad44ff4d89fb456e7feabde2a6e6f238ed4608a80962cadd6b7ff96f15e306a8e819221b66051fa5a7b0658ad52a2efb488492ff83

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\async.h

    Filesize

    1KB

    MD5

    e8c5e5c02d87e6af4455ff2c59c3588b

    SHA1

    a0de928c621bb9a71ba9cf002e0f0726e4db7c0e

    SHA256

    cce55c56b41cb493ebd43b232ff8ffc9f5a180f5bab2d10372eca6780eb105f6

    SHA512

    ed96889e0d1d5263fb8fed7a4966905b9812c007fbb04b733cadbe84edc7179015b9967ff5f48816ff2c97acf4a5b4792a35cee1f8fce23e5fdc797f8ee0c762

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\backup.h

    Filesize

    6KB

    MD5

    29dd2fca11a4e0776c49140ecac95ce9

    SHA1

    837cfbc391c7faad304e745fc48ae9693afaf433

    SHA256

    556ba9af78010f41bc6b5b806743dc728bc181934bf8a7c6e5d606f9b8c7a2e9

    SHA512

    5785667b9c49d4f4320022c98e0567a412b48a790c99569261c12b8738bde0b4949d3998e2b375540ede2ff1d861cad859780ade796b71d4d1d692e1ed449021

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\database.h

    Filesize

    5KB

    MD5

    de31ab62b7068aea6cffb22b54a435bb

    SHA1

    7fd98864c970caa9c60cfc4ce1e77d736b5b5231

    SHA256

    8521f458b206ed8f9bf79e2bd869da0a35054b4be44d6ea8c371db207eccb283

    SHA512

    598491103564b024012da39ac31f54cf39f10da789cd5b17af44e93042d9526b9ffd4867112c5f9755cb4ada398bf5429f01dda6c1bbc5137bea545c3c88453b

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\gcc-preinclude.h

    Filesize

    861B

    MD5

    55a9165c6720727b6ec6cb815b026deb

    SHA1

    e737e117bdefa5838834f342d2c51e8009011008

    SHA256

    9d4264bb1dcbef8d927bb3a1809a01b0b89d726c217cee99ea9ccfdc7d456b6f

    SHA512

    79ed80377bfb576f695f271ed5200bb975f2546110267d264f0ab917f56c26abf6d3385878285fe3e378b254af99b59bdb8bbcab7427788c90a0460eb2ee5b77

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\macros.h

    Filesize

    10KB

    MD5

    b60768ed9dd86a1116e3bcc95ff9387d

    SHA1

    c057a7eebba8ce61e27267930a8526ab54920aa3

    SHA256

    c25be1861bd8e8457300b218f5fa0bba734f9d1f92b47d3b6ab8ee7c1862ccbe

    SHA512

    84e0670128f1d8712e703b6e4b684b904a8081886c9739c63b71962e5d465ac569b16cb0db74cb41dc015a64dcc1e3a9a20b0cf7f54d4320713cc0f49e0f7363

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\statement.h

    Filesize

    6KB

    MD5

    0b81c9be1dc0ff314182399cdc301aea

    SHA1

    7433b86711d132a4df826bae80e58801a3eb74c9

    SHA256

    605633ba0fb1922c16aa5fbfffed52a097f29bf31cee7190d810c24c02de515b

    SHA512

    9cf986538d048a48b9f020fc51f994f25168540db35bdb0314744fdec80a45ba99064bc35fe76b35918753c2886d4466fdd7e36b25838c6039f712e5ac7d81b3

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\threading.h

    Filesize

    388B

    MD5

    f2a075d3101c2bf109d94f8c65b4ecb5

    SHA1

    d48294aec0b7aeb03cf5d56a9912e704b9e90bf6

    SHA256

    e0ab4f798bccb877548b0ab0f3d98c051b36cde240fdf424c70ace7daf0ffd36

    SHA512

    d95b5fda6cb93874fe577439f7bd16b10eae37b70c45ae2bd914790c1e3ba70dfb6bda7be79d196f2c40837d98f1005c3ed209cab9ba346ada9ce2ed62a87f13

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\resources\elevate.exe

    Filesize

    105KB

    MD5

    792b92c8ad13c46f27c7ced0810694df

    SHA1

    d8d449b92de20a57df722df46435ba4553ecc802

    SHA256

    9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

    SHA512

    6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\snapshot_blob.bin

    Filesize

    158KB

    MD5

    ac47bd259a01da6c51f750ea210b52bf

    SHA1

    d6682fc4a07ff2313bc8428137f533e8947692a3

    SHA256

    e87fb952df8e36a5461f328c37afd701f20c427810824e9541709cccb87c22b3

    SHA512

    9bbd6e39597181da2cdaa0e3b4569e0a7a67b44f37be20b0bbe7cb6323501835427ce84044203c66c98b98fcf4e8e356e983be0e085f3020df93022d9c7e0135

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\v8_context_snapshot.bin

    Filesize

    466KB

    MD5

    4d89b46abac43cfaec5c80ab2f735e15

    SHA1

    8985d96af0017b78c9b3791ea2ead72f3e32c844

    SHA256

    4f69d3512c141d88a6137b08a1da04ab80d8e685bd5e9378865d6de828f0cb5a

    SHA512

    477a676586b066813f1d469be6891b2cbd9575528d4279fd7da34f359057ee6025f82ce31c57a9e90658d52fd2e94779bd5a8a9c3d8f2283874450f4285da3bb

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\vk_swiftshader.dll

    Filesize

    5.0MB

    MD5

    30d193f1976035cebec2c2d8f071c556

    SHA1

    97b1d811743f03e888c22d975c9eb77ba92142b9

    SHA256

    600e158b7d7fb95eb63552da1ae8159a6eb9bb04ff6341d11db2d10bd6c30c8e

    SHA512

    4eb6ec91fb060f67ea126c9c7dd7f672161d86302db41c7d999f33239a7c18062cc020c06ab9571f8023c846d22bd0fa5c020fb4c710bf6a21472002dccb6226

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\vk_swiftshader_icd.json

    Filesize

    106B

    MD5

    8642dd3a87e2de6e991fae08458e302b

    SHA1

    9c06735c31cec00600fd763a92f8112d085bd12a

    SHA256

    32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

    SHA512

    f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\7z-out\vulkan-1.dll

    Filesize

    899KB

    MD5

    7fdd1bec727e2b389c8ca84c407446c6

    SHA1

    a91343d9f52883325f52f28c5dd142f4ae07b3ef

    SHA256

    d04035c59f49444bd3cafd71296afd70bad5daa6e28bf5d7de3ffd0e36a85938

    SHA512

    2fdd95185507be9bcbf6cfe1f05ba47e71203b1dc3ce4cc1553e5fcfb576ab89bf018a8927fc5e6e451b00f56f7abb5f2efd504e1a674b42dbe80deeb13d669a

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\LangDLL.dll

    Filesize

    5KB

    MD5

    ab1db56369412fe8476fefffd11e4cc0

    SHA1

    daad036a83b2ee2fa86d840a34a341100552e723

    SHA256

    6f14c8f01f50a30743dac68c5ac813451463dfb427eb4e35fcdfe2410e1a913b

    SHA512

    8d886643b4fc24adf78f76b663227d6e61863f89e0cbd49548f40dd040666ca94ea46bec9e336850e4f300995d56e6dc85b689c8e09ff46758822d280f06b03d

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\StdUtils.dll

    Filesize

    100KB

    MD5

    c6a6e03f77c313b267498515488c5740

    SHA1

    3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    SHA256

    b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    SHA512

    9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\System.dll

    Filesize

    12KB

    MD5

    0d7ad4f45dc6f5aa87f606d0331c6901

    SHA1

    48df0911f0484cbe2a8cdd5362140b63c41ee457

    SHA256

    3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    SHA512

    c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\UAC.dll

    Filesize

    14KB

    MD5

    adb29e6b186daa765dc750128649b63d

    SHA1

    160cbdc4cb0ac2c142d361df138c537aa7e708c9

    SHA256

    2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

    SHA512

    b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\WinShell.dll

    Filesize

    3KB

    MD5

    1cc7c37b7e0c8cd8bf04b6cc283e1e56

    SHA1

    0b9519763be6625bd5abce175dcc59c96d100d4c

    SHA256

    9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    SHA512

    7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\nsDialogs.dll

    Filesize

    9KB

    MD5

    466179e1c8ee8a1ff5e4427dbb6c4a01

    SHA1

    eb607467009074278e4bd50c7eab400e95ae48f7

    SHA256

    1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

    SHA512

    7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\nsExec.dll

    Filesize

    6KB

    MD5

    ec0504e6b8a11d5aad43b296beeb84b2

    SHA1

    91b5ce085130c8c7194d66b2439ec9e1c206497c

    SHA256

    5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    SHA512

    3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

  • C:\Users\Admin\AppData\Local\Temp\nslA28A.tmp\nsis7z.dll

    Filesize

    424KB

    MD5

    80e44ce4895304c6a3a831310fbf8cd0

    SHA1

    36bd49ae21c460be5753a904b4501f1abca53508

    SHA256

    b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    SHA512

    c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df