SillyHack[.]exe | Triage™

resource
SillyHack.exe
unpack001/$PLUGINSDIR/SpiderBanner.dll
unpack001/$PLUGINSDIR/StdUtils.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/WinShell.dll
unpack002/Clutcher.exe
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsis7z.dll
unpack001/$R0/Uninstall Clutcher.exe
unpack003/$PLUGINSDIR/StdUtils.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/WinShell.dll
unpack003/$PLUGINSDIR/nsExec.dll

SillyHack.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 3801946804d9394f4fae094dab353facefdf6f9901aa78373ef2f96905b1516e
MD5 b437b74ea4eef62e054532b1a2cc4723
SHA1 6e43586dcf1196997d656743b91fcca477bca683
SHA512 2806cebcff9b3de2dc25dc0389359d043ed59c6190a57f5cf47fc09c90ec20d1e6c9430fcc48c7f8daf3b53001f71e66186cf2be2fff706491d2d9edb7dd5c37
SSDEEP 12582912:fxuHsycQbSTpj7jHnHF0oTE5AwtsJ94IP6uzXtGNjd:fgDcqS5wub4Inzk/
TLSH
T1606933B1F9F19933F68BD7373B0B0914B978C275E5D2001F8505E2E5B66228D3BA2B94
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/SpiderBanner.dll

IMPHASH 90179d905cdca282880541c826651c15
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
TLSH
T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8560

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/StdUtils.dll

IMPHASH 7b79709c0d5576549eb261e3410f95f8
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

60089

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

iswspace ??3@YAXPAX@Z _msize _wsetlocale _snprintf iswcntrl _beginthreadex time srand rand clock _getpid _wsplitpath iswgraph __wgetmainargs wcsncpy _wcsnicmp wcschr calloc free _wcsicmp _snwprintf swscanf abort ??2@YAPAXI@Z memset memcpy

shlwapi

ord176

crypt32

CryptProtectData CryptUnprotectData

kernel32

GlobalFree MultiByteToWideChar WideCharToMultiByte InterlockedExchange HeapValidate InterlockedDecrement InterlockedIncrement GetSystemTime OutputDebugStringA GetExitCodeProcess InitializeCriticalSection SystemTimeToFileTime TerminateThread WaitForSingleObject LocalFree GetFullPathNameW GetVersion GetFileAttributesW LoadLibraryW FreeLibrary CloseHandle lstrcpynW GlobalAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetTickCount Sleep VerSetConditionMask GetCurrentProcess GetModuleHandleW FatalAppExitW GetVersionExW TerminateProcess GetModuleFileNameW RaiseException VerifyVersionInfoW GetLastError GetProcAddress SetFilePointerEx WriteFile ReadFile CreateFileW GetFileSizeEx GetCommandLineW

user32

MsgWaitForMultipleObjects PeekMessageW DispatchMessageW wsprintfW DestroyWindow SetTimer UnregisterClassW KillTimer LoadStringW MessageBoxW GetWindowThreadProcessId AllowSetForegroundWindow CreateWindowExW RegisterClassW MessageBoxA

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

shell32

ShellExecuteExW SHFileOperationW ShellExecuteW

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

SysAllocString SysFreeString VariantInit VariantClear

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/WinShell.dll

IMPHASH a75c904bad153f5af2c37cfdf66eba5c
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4863

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/app-64.7z

SHA256 83251ef39119183dec762cf671e4159514b5cf10f62ee105ecfb832d68bea9a3
MD5 cad67728a60bef9c6b213b03f0bdcbf0
SHA1 e548dd7e51edc463dccb70229db15f04e27ad34d
SHA512 f43be45bb3f2459e4790da01a1d7066ae6280737211af9ad7a7a23ae97ee9ebbd476edc5c93af71e09ce79864183c4e5d5e51c7f45601de954cca3bc82dc67bc
SSDEEP 12582912:IxuHsycQbSTpj7jHnHF0oTE5AwtsJ94IP6uzXtGNjE:IgDcqS5wub4Inzk2
TLSH
T1446933B1F9F19933F68BD7373B0B0914B978C275E5D2001F8505E2E5B66228D3BA2B94
MD5 SHA1 SHA512 SSDEEP TLSH

Clutcher.exe

SHA256 d84a260e062730cbc87e30fe6126146f304063cb1a61771752f8a6ea685ccccf
MD5 f327cd79b2ac152adda0af332a6a1aba
SHA1 43ec21e749a4918f244b119d05813ebf90e2014e
SHA512 255e6e4ae8e70a54ec77271e95d6052f7d12c7797e65bf1013017913e8c74410912bb98170f98fe5bd3217c6b7cc3e71f2ab0a81a6d03e4a8e17874bf4495a3a
SSDEEP 1572864:p1wDgcq+D0ShE0mKc2Ra+K5/fHvkAKjLxeU+mr2p4qp5buwZe57fMLBH0ahu4nKb:kMcjEw50FymE
TLSH
T16C987C03F2AA41D9C05DC1B95B5A9633FEB1B8444B24B6DF1B5047922B66FF82B3D720
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

51749872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

184.4MB

Virtual Size

184.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

42.8MB

Virtual Size

42.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.3MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5.3MB

Virtual Size

5.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

LZMADEC

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

prot

Size

512B

Virtual Size

179B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

101KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

LICENSE.electron.txt

SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

LICENSES.chromium.html

SHA256 9fa83c7e4d97da72751d56e47a3d5f2f60c4576da6eccbfcbebb657a95ea1531
MD5 080a93941458498c915ad8058ea7430a
SHA1 a2a1d4c00f8248db43a13eddc0999434c064f94e
SHA512 7a4eb7011010ce3a2edde94cde32b6b821b11a5ddfe0393aba815bb76d63ba2f90839e51fc72072c0ffb4de928f23ce55a79dda823c93733d2ef0483b7605b37
SSDEEP 49152:3IfryUUo5TYp2BHuC7jYAFId/Qi4WMEAcqq:v
TLSH
T19A96B46BBA49037306F282626B46A5CAF31F913F375A1654309CD1182B7BD2483FF69D
MD5 SHA1 SHA512 SSDEEP TLSH

chrome_100_percent.pak

SHA256 80481053d4a203ddeea5898d720187bb98cd44727be945a9f23abc03f3bfb757
MD5 4c936f1f1ecdebc5ad50f458b4b270ac
SHA1 40d0b1874ce89ce0d4430fbdc954c95cb3bceb45
SHA512 1e53453fa9ad4fbe4f80f433c8689252b50fddfe6b9a4fbbf2f7e9eac46e4aac9c9a864b9003ae19884e6cfb84808bea9ccf081a4527ffdc14fa10b2bca06074
SSDEEP 12288:pI3HWfJwNjzgsz5B0GDJQrnKs8SNP+QSsEHeilSTe+gnzzmg/YJblIt6YJXCrC:O32Bw7zEEmPLVbTe+gnzzmgwbc6iXt
TLSH
T136E412E77374AC7DFEAB1277826614B0FC735A280A91060E17DAF8795912B48D8D93C3
MD5 SHA1 SHA512 SSDEEP TLSH

chrome_200_percent.pak

SHA256 18d0a9bacdb32ca5ac1ed717f6e66bac2fe70b327196c375f60c80955b8cfc55
MD5 e65c08f004e8c4d1c67c0f58fa1ce14c
SHA1 d42649eed1ec2bedabab889241293b8094ab624a
SHA512 b6b42995b661f2be151b8fd4627074b43f9b9309c4e3b21652bba828ff15b2fc0ef6fc7ce1e83b232a5e3c6e8fc7972b29a08b3897e5da365455af8de71fa26d
SSDEEP 24576:V3WBS9n2zLmmibkFR8+mZiqr8BWhQumesXRvQtgIQwuSXAkpbaHX74:V3P23mNbkFRJmQ+8khQRn1Q68uSXAkKU
TLSH
T1AD4522D7D3B09C3EDD520A77939B20E0FD7610271A71190F0B36AD7A29176C8DA96B83
MD5 SHA1 SHA512 SSDEEP TLSH

icudtl.dat

SHA256 9f48c7f9c7c94d516a14870707e910ab94d75ae640ff6842c4af53276cd26ebe
MD5 c9d17441b2314fe514cd8cb951577c1c
SHA1 15cae4dee805f3e04171e00781da13fe40036439
SHA512 836d4f4fa591ee059dbfb943c2f13ded58a0f5048b5505214ec7105d0963106e0078aa262090d0dac9cca80995c7961a900ffa7a2af8ff315aabad1313bd37a4
SSDEEP 98304:1/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndPj89j:1/cBhORok2HiXUxO/RJk3IWhlYntjdOj
TLSH
T1A9B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

locales/af.pak

SHA256 fee8630804aa37f5f78e675988ae82bae582b3b449148b571bba0d368cd8464d
MD5 33821cb0701d61629a744cc9f0a0b65f
SHA1 ccda2f0933d0ada5adad5153bff0760aadbd4fea
SHA512 21e50743920d7b571fe214441dfa7b69a285a92c4b63c2e48302fd1b89822c9e52dc18f4e07036223bda73ea2a0d4d6942232d914ab3e58058e89c8914cf8423
SSDEEP 12288:5Di7CN7flFOPQPtRGtA/9Yc7ZGzgNGlCFWVoagvd4H2Jyn4Nsmc1AlKfwGozvbX7:5meN7bOPKtRGtA/9YqZGzgNGlCFWVot5
TLSH
T114D41B0BEBC1133D09A07696BA0845F7BB9D626CD770F2BADDA982310966DFC10BD1D4
MD5 SHA1 SHA512 SSDEEP TLSH

locales/am.pak

SHA256 c2ebae2a67649ee16eb6ba7f14ce6cfe0a21dc73fb49a1b3f23dac10abbf9dd1
MD5 695f44bf99ec33d57bd495fb57308d23
SHA1 d63dff6ce295e750ee453743396195930ac7e881
SHA512 ad6b34c72c1766d4d27b97530f90058c402a099f7bf9d32e6b1ab24d348361db782b314813f2d36a0b2c253add3ce16223057553cd81bfe66ff8c100f7c31c03
SSDEEP 24576:8JT31RB18hTCK7yKVt1cRrjFjvTeHzzz6XTNT/qiCgBYV7vOs2P8iV:eB5
TLSH
T18225AB547DF9F7170F8E8A1994221E4F9594AE4692802C38C35AE3FC2B2DF1B4DDE219
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ar.pak

SHA256 877c87e0e3c029e1798c506fff614fbfb4f73c08f15532d88fdab4d85c1f2bd6
MD5 7630960466d2b26a3e237cda1df23f8c
SHA1 9ab6b4b1c6a40965a4b7a460e861f06ac4e33196
SHA512 e4df3dfed1457c89691f99176c4e3d615615132e99467c563f8d5bf7da425048cbd69bae473b5a746c0b7ee1567ab93efbd4a213aad2bda699c92450cfdb8ad6
SSDEEP 12288:XSQouGBtApLACx4G9p8wj3D5i1Y/v4Uz0Dk2QISYdN7EE8R0h45d:XvosEo
TLSH
T177358BE21F2584720B96DF0ED1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

locales/bg.pak

SHA256 e9c1f51cac81595c217c75afed37ebe8b85893d35fe3589fe89a70262ff818d7
MD5 c78cff2f151e3f9c00ae18de7abd3ef6
SHA1 ff9dcedcd7ccfd69175492000242aba7fe226828
SHA512 5207e63cf8a10640b850e6744426024948a8f2909df905f0f8af4428e78f0fdf53e893f68a1db7b770a098561eb59ac61f4ed7c91ca0d56debe30aab1dfc0c51
SSDEEP 24576:uy6JuWtppLYxgCzQkEC1U1Vb6leO7Z373ZDm+kIKxUfVDJ9hd74uOVnaNTuKjUTL:uywuWtppLYxmEU1Vb6leO7Z373ZDmrt3
TLSH
T1163524A15B9A689F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

locales/bn.pak

SHA256 ae1574f3aa3e08aa1d4b55dffc6fee8ff4308186bfc22560c1c4ada638b728fc
MD5 877ccac23970f26ad675569fc5cc1d25
SHA1 01fd6ab529a78310a02ccb87cb21734d13f0b4b0
SHA512 f6f83c39e306ab40cf2742c7096e50710aef280505db37651cd21bb2ca1526a6072bab2e258c5385b5a5a72fb542f61d7a66d42e3fd2bbb65445f49e806f6968
SSDEEP 3072:kdkqcoy072DVlRAOAfTVt3nS2COUzzWyg2fGCARuJtWJaj9GjBbRREQLInwjn3kd:e972ZfA1bVd1aj9GjBbgw8Z5
TLSH
T16265EE209C6E81B6A8D5CDC9434C6370C523AE9B9B61F74DDC17A14938ADC3C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ca.pak

SHA256 8bfa2da6cb313c25e34a902335efd75f2aa0dfbcf4ddd99fdf57315690fa96d5
MD5 848cf926cfa75e483727c9588bda622b
SHA1 1dedcfa3b2a0b0c1ee5c8c44e7a9b9c2d114f7aa
SHA512 e61494aaf3504fb0ad3d1b7d4140752b24ddbfa230a402d2412dfa6f676a1573faf8ba5d017f1ec967ab5208b5c2f55c357af26cc60bb4b3fde89bdc05a9fdd9
SSDEEP 12288:TOP2R6uV7IOeyCiX7ryUpFa8k5PsFzN3Mw2juwwPR9zejm0t3lt6FTAK85n/RwJB:TO26uMwSILBL07TM0BjbCBnCbK
TLSH
T1E8E4F8239BC93B7704D2331EFB46C253B48CA9847B06D254F4AE1B1622CCADCD677A95
MD5 SHA1 SHA512 SSDEEP TLSH

locales/cs.pak

SHA256 8873ba25ec5c10d230dd868d691e431ef143a19cb1f79b7688913ee2052c6eba
MD5 daad4ec4fda6ef8f5d05a7c9a76ee137
SHA1 142b165d16dc6f46b0454f8279234886d29caaa4
SHA512 09096cd5b49ab07ccc1cd0ccaaee460bbf9aaf81814c2a335713a52c6f28197efefdae6d02fed212bbadb48470c23aadc502203f5b99ab4e5983def7e8a0d897
SSDEEP 6144:aBwGzeTZ6/ImPU3J4Ke9uyeC5A0jK2AdeOzB7Z588O4a8QysA:amGaTcPsJ4gpC5A02nzB9588OG
TLSH
T1CBE4491EEAA36425584002487FBE4228BD5E83140B6EF5BB7CCF9D912575B7E8EF0D48
MD5 SHA1 SHA512 SSDEEP TLSH

locales/da.pak

SHA256 d7696c97fd36bde7453f1a67d4df978ea269b9cd18f5aa28d56ec94aa683b91e
MD5 926056324771aa74980e8f4ca126a565
SHA1 f89fa3a12d904a266bf6308944f3830ae3a9581d
SHA512 6df73a9aa12740f130e289ab459872722e790b8e4cfdddc7f1ab09ba5f474e5f8f6da0a8cc676c4d10448ae1968fb460a1cd483b6378dd99a727fa66c62d16dc
SSDEEP 6144:QrdX3hZSt/QXzVmEGH/Qq5znWXyeiriKBE/9yAzAwlEYJwfCbFOSSppzg2PMqosy:QrdjSt/skAjAg2Els6B
TLSH
T1CAD44A4BDD9C732FD9A94729F3108DA7EF6D443CC684664F65D8903A09CBC6096BE2C2
MD5 SHA1 SHA512 SSDEEP TLSH

locales/de.pak

SHA256 cb468b19b713f253093022e30e4511d731d7fd81413de4e4375cdb818a2534d8
MD5 1410882fec246ea4e61e86222d8a8c06
SHA1 48444238be53e3812ac272cada66c2a760a9dd03
SHA512 c83e624dada830dbcf9ba91cf434b4248933f64666ced547a9fb4e2810a14396ecb9def12cad31559eb47635c2708dcf7f3b6c8bd90429ccfc1bfe7b9eea7797
SSDEEP 12288:AbS2ScBHkhRP3K7Up7uigfxbU9w0MCpcEUf9ICt3:AbSphRP3K7Up7uigf1U9R4iCt3
TLSH
T178E41903ADDB625ED786B3617305CDB77B19E36FD346312A98DDC02B650B5B283AC422
MD5 SHA1 SHA512 SSDEEP TLSH

locales/el.pak

SHA256 71c992bd1947f1981d7acab642885e1107674e102257f43c056970a77e5ba1e6
MD5 7de79c87cb6ffc62902df3c70504ae90
SHA1 8df681c056087811123e3e0fe3b2676ff66b480d
SHA512 dc53ed11da83ff7d34b3f2f9fb59a4e5091040bce466bd01fd1bf75076a1c5252e5b8b5199cdb84597fda7d45b2654c4afbd675a1d3a4d52983a09839ec012fd
SSDEEP 24576:sMbmkdSFbrxq5B9bk2tfZucYVJXDsSjsmsBcQyz2bSncgL00LqvMIvioSAvxK4BP:ssdSFbrxq5B9bk2tfZucYVJXDsSjsms3
TLSH
T1BC45C0EFB4582DED8046950785D8B07C27C66D6CE749CBE86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

locales/en-GB.pak

SHA256 7c2c13b2b72b14aa49ae93655f1e04d59afd542c36ce857b2742451f1dd67514
MD5 2d986be6fe30d166ab335bb94c2c4bc0
SHA1 31da8b041ebc31ce6b409b202b099068c2fb6a41
SHA512 ce68ae86b187d8c462d5c4d3ce7d7988e6ff731ad12920bf2b0af4cb5ad263dbe672e4bb3a4d14fd36f0361239e214f3b6e6c329e699d9790d621b1e483265a4
SSDEEP 6144:nZtK6E822QljVs3rjfxh54E0KNOPNE+FSi7MP97hRbifaY1q7lhCDNBc1U:nZtU8LcGxh5PNCMxhRbD6DR
TLSH
T1C2C44D1FF784122A05935162BB0AE5A2FF23D07CB35112667CBD811C33B6766C27B6E6
MD5 SHA1 SHA512 SSDEEP TLSH

locales/en-US.pak

SHA256 158624fea1daaa961889a70c659ea743e6568cc095e15f1e9d04c6d3c665a940
MD5 c63fea8be741dd09fdc0ce35d2fa09c5
SHA1 38747f8d64093b08680d61a085cc76033fb8bfbd
SHA512 dfe67591b5d2821ddc429355b89d761d5479ea7f4332f428972edc22921871607db63846c45968f5018e356982b32960c7be18109c52f72e95d22067a3423164
SSDEEP 6144:sGH3LNWqKXUVC3S9YsHf1KOpeNN3USd2/MP9JhzREfaY+G3DQyyjYng7KwT:aDXU03kHf1INmMfhzRkSjEwT
TLSH
T147C44C1FF784122A05A352627F0995B2FF32906CA36112663CBD812C3377766D2B76F6
MD5 SHA1 SHA512 SSDEEP TLSH

locales/es-419.pak

SHA256 86505a6c26d22dce07e9183781a3032b2ecdb73ce2d28be0faa97e26acaf8efa
MD5 e136b31bc90df84bfe60c44eccf83a27
SHA1 4275c02389dfba8e7bfb7115f8faaa90d8e09df4
SHA512 1ff7cb6aa5cd54de498a5cc1b99ef0817d453bf6fc69d823b9777427d4c615eb774d20f2e8ad922ab099662fc146052442b6fdb1a345036e9269a6868eb1c93c
SSDEEP 6144:s9dTI0HAJS/TCj/K/YRZoZdo7qOJO85AGVCl8hm/0:+M08zTM5OJXAdp0
TLSH
T1BBE4E726BAC81F6310E3A348B343D753E8989545B508D25BE8EF876522CCF8CC967ED5
MD5 SHA1 SHA512 SSDEEP TLSH

locales/es.pak

SHA256 45c905a9da1bfda32270c06b87f901fb8056863ce7aa66c2d25bfc1f61fb25f2
MD5 de7d199235de00574a70919ad816cb0a
SHA1 6a99a4fac34eeafbb74234866e604e60dcdd314a
SHA512 7f8d5301f285a7cb958473df5be3d27bb034ac2a95f5562071ed46f1ed45382d16d0402d9dba786b0842631c7088732a4f559ada1ab18a267bf100c62f72843d
SSDEEP 6144:VlZgAIpZgYvq26TO1t0O56gXNe+9yShFecDz8jXo7hJsnW8PFfek8+6PZCut:NIpZ1vq2Io5Ng4Fesz8j41JSWQffY
TLSH
T132E4F726AACC1B6310E39349B743D753E8D49549B508D25BE8EF876622CCF8CC967EC1
MD5 SHA1 SHA512 SSDEEP TLSH

locales/et.pak

SHA256 c45e62c57b87586aea1f42837616871d8191c859696741f1dea4da72408e28d0
MD5 b9d3553863927e144ba5aa91d2aeffd6
SHA1 0c8d5bb78f1ea0281e36e9887bc4b2f58cbd7bcc
SHA512 479af72e9fe43f8ad25efeda97f388bad8be4464403ab8037aa319cd21bda4b143cb3b52389c9db34fe24beb25297246421ef903a1e2923c5b320053d6ab4e09
SSDEEP 6144:G1AfxKsNrTmD0buBz6Or+vX/nyW0mnFukhOJ44ysjBPOCXy8gXiKV1aBDfNXTqHK:G+hMD0iBuX/hnFukhYA1aBfNjqlr0
TLSH
T145D44C42A27D731B242412F9E737A933DC9FD7D8B4004D9668564A0971EEF8C38B6FA4
MD5 SHA1 SHA512 SSDEEP TLSH

locales/fa.pak

SHA256 10c2495131e34cdb089cadcdd3de727644850ed5ab4eb156abd1ae866c4f9db7
MD5 c9ec40b97aa190ecc9a5040ed1ff8db1
SHA1 c82d8ef7058ca3b1cadbc1e6abfd5c184de5f8c9
SHA512 105cb86e35e3ac0aa5ec180261c932a9301b42571afcc50e18a4e73d1cf37e71105ad1c20ba6f4f2f58a8dffa910261c511c696d124c08b9e35b86db6bbd7afc
SSDEEP 24576:kp5WB8u313uyqoz+sw2LYRmXnloTwCfGk62Yha826JfiM5nMX44OqlUQekI02CTU:SC
TLSH
T1CA25A0957AAC9AB25756CA0341D33438C773EF12D349FE40ACB1076609A5B139B4FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

locales/fi.pak

SHA256 41a502750a5e32f4717a150e6c44d1ecb534d2336ef333f85c319a29db84d45c
MD5 c2580106683d68764088401cb105b55e
SHA1 a04ae0753346947211ceefcabcc0bf2016f6ff7f
SHA512 2bab170c5d0bc54e2414a874cea122ee9cbb847b5540aafcd5f7dfd2e6ccbe82eb7939ed07c22d8377ade6594b7b8f9d6bc31f8bc13f219549703ca1e6252c13
SSDEEP 12288:6czNgVNmMNpC193eNE73aDA/pq6Imp3WaSqAjR:6cxGNlp8eaVIx
TLSH
T18AD45D915215C32137C8D29E7DB0903EF5E5E39CCC288D96E843CBD849EA9887D7276E
MD5 SHA1 SHA512 SSDEEP TLSH

locales/fil.pak

SHA256 509109f0bf480b22706ab48aead4353debef035f52b7876fee6bd8e0e959ce45
MD5 a54dff4ee1fac51a5d650216f3b159d9
SHA1 23e88629a3ef86013267b89173e4ab0b80e41903
SHA512 9391fd807825755514d7984003ff69d57854d96fc2d2f2915faecfa0d7ee5146faf215583b3137dbfef4f6ce75ce2ddc7470f8cc982cbcf9a887e0496028f9e9
SSDEEP 6144:+3ZIS7wgT4qwkSaDQIeRh/HEBvV0gpnHMavvigkWA1nfig:+GS7wgYEBvS
TLSH
T1C1E4C716B3002748DBC352E51264782F6AE564B83F81786E4FFF269B7BA7CD5D270182
MD5 SHA1 SHA512 SSDEEP TLSH

locales/fr.pak

SHA256 7da0599d2b7129a7df6028dcf28d5784734312cdc76821f3bc7e2c221096ef7f
MD5 d4c3f628d49dd6181ede9d84bca50c27
SHA1 1a98e646fd997c2747887cc2cb9911d0827734cc
SHA512 e37903918ca1a2e42f31ba20b712d8ae724344708def7be054eed11cca7f2d00137e3c667cd903b7fcd52a01faf05f49a92e6131d11e1434f8d1b0b4546ea888
SSDEEP 12288:9qRr4sPgZL0dW14PGbVAZgj7iu/WAMnS+6Qua6gV+8DvlyW8KTPFVSiYnYPe38jY:9UGkVJw31aa
TLSH
T13AF4F75FBAC435CB19C602B7FB16D663DD348248F215E300D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

locales/gu.pak

SHA256 a6e1f631ed3882d06a66c39eaafdfb6de527d60da468bc19d5b277eb423c6e2d
MD5 f99782e7201164b01fbaffa88a093d95
SHA1 1d488f3788d35bb461e23de2e55be25b6bf30bb1
SHA512 7909a1bd7ea8bc46a5dcdd618c4cbe88e662f5d6cca3968c03dc91190de37b085740745c079fa19d0b65655b0a1c61e7a64d19ce29730bcbeed03504869be32a
SSDEEP 3072:8bWff1ASKju9AMbJ/34e9HUn+Sjc1+RnJ0zPjAwREJKVMjNiT7llj63rA8lDcSia:8bWjbJX9HC+S3RJRIsa+q8CmsdW
TLSH
T19F6508D0D7B9F07019DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

locales/he.pak

SHA256 3f1c60212d11a83b0bbfc4849df59469d3e3890f23ffd2d10ec1935a12063ecd
MD5 4934fed5903169fa2cdaee86ba5997c1
SHA1 e066def9fea680b767ca899d6b73f3d5b218279d
SHA512 96c28ee057fe8a20aebb7d057a75d4eb78fbfb9537acc88b3f633b74374c8af81426ad4bd3d951cc7945c6e803d663eafe3066ab49ede0505215f3560df2c84b
SSDEEP 12288:uL4tLqh/asGnbUjQ49gEu/roWQrGWq+/6ZN3vy+uiWAEhXRQeQCaj5MsH6g4Ws5I:pLT6U
TLSH
T1531588C4A2E492255131AAC39FA4FA295FF2CAF53CA23512CB14526CAD774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

locales/hi.pak

SHA256 5d216133ad01241aa9a8c33e58a836ced6047a662151d0558993fd7c5d7977bd
MD5 2cd73e33f9cc3d87cbabb3504e21d19d
SHA1 ece1d18d8999eb22cfb7f5bc8250e33a94f82c8f
SHA512 bb0d226a0f712cafae3caf5e2b6aa079854d45501b28b5a43264d9b0380ab598f84986e7949fec422975db1685c38a1f958ceae83f09302f505f4514d9a927fb
SSDEEP 3072:qqUQEmlM4yZymIFwGHeeG//qu967V/B90ZV1dhuBlOvXoCgedYX55nFs4f4/jtRw:qDQEMJyZclvG3qu90aujuBdYAs
TLSH
T14A65F40CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

locales/hr.pak

SHA256 78d6aeca21f250df086f620c12f7666f740ac49e7eb3d09ce28d3b8347074c8e
MD5 368ef0db4a55976a16a60d7eb5c11929
SHA1 e9c4f385772aa6d12ee28c20f36caacf48d0b84e
SHA512 45255d307c3be6430fae205697765fba51aafd9aad968b204a977e5e5772bbc4e17445a697759584f48311a6250238b98a7808d115a0671f89bc03a3aeed12af
SSDEEP 6144:pWmWXjxnmXY9ydtOAIS+1K+X8KA7VOAOCDM2M:omWXjxmXoW9BZO18M
TLSH
T184E43A7DBEF2570A0897B24AEFAA43447DFD089CE56497B7784F522E0003F4D6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

locales/hu.pak

SHA256 f5318a3117f68e70c7a13fffd20b20482b022829375b54cc6cba058d7b810747
MD5 0a5843d4808a0874093883989e32a469
SHA1 44b8d0ac89872f05488233a27b7498c4b48c6f6f
SHA512 ddeff83b2ef2224edb35eaebe69b0957565fc4a07d816b4ce668adc35db3e3497219d40ca973b1093374bb2e7483f2e7995c2ae51b680087cbe139c934c3e05e
SSDEEP 6144:Kw57VVT6xk4HbVx8XlH2Llm3FW3dAGpruS85S8IZ49Ua+YHM9wusx3tCUe5xHnjM:TZqAo85S8y/UAhWDJ
TLSH
T1A7F45BB79376944ABC6C179378643B15592E481BEB2B32FB2C87846D24A178D0DC3CDE
MD5 SHA1 SHA512 SSDEEP TLSH

locales/id.pak

SHA256 372c926e183d03f8a8c75dbeb55fd805a5bb4cbd239a54dd4008ba49581529b2
MD5 89e0cc81cdafb7d91b286eb8c2fbe462
SHA1 9d1ad1e0192cd3bd40ea89838b2212ab20ea4da6
SHA512 d4fe8245e3240fa6d06ff6da817dfc9b0efd1e8a8547bd88102e3fc54114e478b5d68e4c807e3cc9c3a75d2daa4536b1590128b0487ed9de125eebbbd1457fad
SSDEEP 6144:Ocw34dJAkVS2DC/JormQ1qEff4TFjlFVSmBh0hbhyOL6F2XhBw2iTvycPHSV:OooSI/JOI7TFjlFwmj0R6FtvM
TLSH
T1F2D4E8632ECD310C194842D5B2DEA91E3CCE233BAF05B76E8E348F7055A67686716BD4
MD5 SHA1 SHA512 SSDEEP TLSH

locales/it.pak

SHA256 a920bf89247c9f1fb3de35dfe7d574fdc509800b808c292d2f748ce563c8e7f5
MD5 027f4e449576470b4f709ca39383040f
SHA1 a05ccdea0d2e0689e5763631d6c4b7b8f44b954a
SHA512 2b3a9d3748bacee245a1ffc14c965341d04548f978f07b2db1c61976c48eadb8cbc7aa34491491ddbc420909c5bba70664bcff0afe6d078c86d685c99e0549c6
SSDEEP 6144:kOuK5zRX1GULBnaikXz7gN+5aLDSbmCfEs61ltCD5jhOf7+QcrLppzSL9f3woTm5:kdK5zBoUV/S8y+yZYNtPpT5lkpd
TLSH
T1E5E41B3AA5DA212529976359E611F185FB6EFCCCFA41721CC99B031C22CEE40F1ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ja.pak

SHA256 2fd8231e9fc23ab5352e74abb89fb91a6de04a4e76801fc646dd9f7ef04cf913
MD5 56d81025c666197d5e5d01519359a729
SHA1 469406b69dd462f7e5e921eca684c51bb5542941
SHA512 6ac9c16a40f5d2d4d53459c46feec6e746a5167ca8d76dee314c7be1913a7831081cdfd38d527ae04ba58eaace6d915cf7c2a953002af4ebcc448adf0e9f5e84
SSDEEP 6144:JFE4MBXsAFyceYUIQHDl9zpZTQ2uAFnmGbYlSchzoV7:k4fAFveYUxHD7pZTQ2uAtmrSch+
TLSH
T13705407CE3C969369D6153A22C0E36E17506AC5BFCA23A3A443DC074BD70BCEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

locales/kn.pak

SHA256 2cd46493dd1493473a7d7d76a38c1bf36a3d0e676577bfab5a9cc2861368b697
MD5 cd745c7aaa1623f0478228a8feb28936
SHA1 9c95c64eaf88313f4a83b52adb6fe7a0b90616b9
SHA512 52784980109df06b1eccef7bcede027aae74c56537784af3982b7b2de1734c0b57591d876e126428192b71944887a76d789027e196093ddb43865a94cd58c1c9
SSDEEP 12288:Ur66DZe38ScgeWgfc1UlCf/7m74hUM94pF9ZS:DT4MB
TLSH
T1EB75CC18ADBA7D311BD5006B24EC643ECFF16BE29CA907D2F4DDD7802C66C6A90825DD
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ko.pak

SHA256 2a2aaa08a9b6dd189ee06b1083fa71edca69556be0b7205fe7a2e547d3049741
MD5 09ff90f09fb939bb964f0fa83996743a
SHA1 8622d3c48c91d357d690576ebc3e7b634177cf6d
SHA512 e87520d055203aeeb2e15751450e6a0d7c6fc3e3246c8172a6c30e7c8fc8048b7ed0f1b34359bc6e2751ea1733b53838b661faa4427df9db956c7cb0472ac750
SSDEEP 12288:hN/4/3d8gHq2aPkyM1WNiPszcbifYj4ZGRyrDPbIF1jYshXCFeIJ/xESyGGLhwRG:hd4AtIWYh33m6PTp
TLSH
T1EEE4B6F238DF63C91193CD82AEF4FA198382D976F7530294ED44CE449E245D74886ABE
MD5 SHA1 SHA512 SSDEEP TLSH

locales/lt.pak

SHA256 94bc25423534efab642dfa1372eb34de5449a9761a1bb24ab26e97acaea4929f
MD5 3184f77dc013903b14e77033abe910d7
SHA1 f8c51c5510b0f206ab71a5e6228f5a90969af924
SHA512 2d58f9751e8fba42b2f3999a3cb9617be30840996c77ace30bbc8e3f3521cea57aaf3055b1ecfa6f1b8f4e53ca8a8b892af13da479e8d76423d18c1fe71bcfc5
SSDEEP 12288:pmFpHgO/M5Hep50z3dy21hOc7HI9KiNb6S6q:pm3Hb/Mdcqpzl0x
TLSH
T1B5F41C0069E3AEFB9A5467C981A8CA74DEFD50009727BC61EC69C78BC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

locales/lv.pak

SHA256 181cd84ce10d1eb9ce8abdb85471f6dba91c5b4915117479b4e784e451e5c965
MD5 50ded18ed8cb1dbc9c9823b3f000df2c
SHA1 7a28c4eedab5de9d34f1fc5f213d29c981e81d72
SHA512 bc56488b36de3ada001fc0ac23746d528434b3ec44ef8c3d7826b72ead1807723e1ea493cf688e09310d7aad60504ac1c8ef08ac1532402d81efd32b64d46ffd
SSDEEP 12288:AaRisfXWp0LnrcjnmybrBemn/cNTaYXINGU:AaRisfXWp0LnrcjnmyHBemn/cxXkGU
TLSH
T141F42A959AC68FAA4D904DCB733AD122A8CCD740FE06F112DD7D8B3A560F52432B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ml.pak

SHA256 9d39adf179b15182d90085c9b5a623498f09dc4412ca8363d22225df2eea8391
MD5 8eacdf6e94fc748f04448c4d6ccd11a4
SHA1 de4e8b258aec70233be61cc170b5af0849a3bbf6
SHA512 e2e2524f4de5e1037de662397090bf2419b5c18cea22f07eae08af20f24d608d7cc74a9f8ef8c2db185a4358a930f839403cf2bf645b3c6714cba09eabf785bc
SSDEEP 24576:4WnPkN/oZAuuxyYl+9y9XBkx/etmLXKfijHzBAzXdS+v2BiIK3/aBDN3b:r
TLSH
T19C75AE57A036CD3B0FD102167B4E2FABCD5B9FA140AF668B5869F2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

locales/mr.pak

SHA256 8d4af9411589d8352e70f378cee44503a09d408d66464a8eae356b0d63af5f27
MD5 b6f48cc7e4a8201e0d3b087045e7a7c1
SHA1 86f4879252b6f0c7386d3c646fa1f58e97ea9994
SHA512 9080a114b4eb4081b7ad2ad30f3529947d6526a86827d55aa9cbbe26db5709357213adcd21abb29f636f5014301598ed9e7ce39a96b4fecb2b05c76d74ae4b89
SSDEEP 6144:jvn+kGHYJzNNJiXliWUsFBgvaNCYEzQTApmY0fA:71BKgiQYEzQTApmXfA
TLSH
T1ED65D24DF77AF3685DACBC8E36540D3BD8FD31B1C3E9925648E1B3A74884CB401996A2
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ms.pak

SHA256 95147cc634668bef54d478e220f7f6e1379c006219ae9526209c3036a41163a4
MD5 c89b050eef6da3e53366e5953f6f406a
SHA1 454bf18e6744d4169b5de5c61e7d1f633b44c3ab
SHA512 27a4d0b5f1fc70cce92368a8ce9265aca0d140c3c7a06ab265f152365090a14e19e90bd826dfedbbf26d19968b0a2f9aad0c5dfa15f31edba0762c600c6409e4
SSDEEP 6144:RZ0oZyt5/aRWSbEfgpSacaHuqwUdDRbD0y3RKk9aRyUl6hh3h+z7:3PuPgFHuqwUYIol6A
TLSH
T1A8D4C6479EDE311C085843D9E2DDAA1B3CDD3332B705AB2B4DA08FB0166E7A53715B89
MD5 SHA1 SHA512 SSDEEP TLSH

locales/nb.pak

SHA256 564eae12dea5b44a330ec54cc5382bbd1c2bf48c7c0102a0c9fcad1590092983
MD5 de4d1c1e89c2f6d804d61aa4b4ae5569
SHA1 e65c43f18a83dbe7ff05eff4a7fe16ec0f73698a
SHA512 38fe373ac1722d14f2bfbb36bd900a253eb6240f238b24860b8eeba348179085dfbdfde10e28968d19f09e60c75f51314cc4b2fe1245f0511eba622e8540fbe2
SSDEEP 12288:RbN5tTAPQ0XC/Op7fao5CQW3ct5GBs86GWy:RbnZ8XslQW3cXGB8e
TLSH
T1FED40883EE86B32EF69442A8F518865B9B7D942CCE98199B54CCD53E0CC7EF052BD1C1
MD5 SHA1 SHA512 SSDEEP TLSH

locales/nl.pak

SHA256 f6896f39ef412fc4a7687ed8621c39dca2161e7df0f36dacfaf1b94da7168b30
MD5 76850f8a03531aae954080d53af36d97
SHA1 fadff81a4c4adad3ffe8a8df2266efb990195a04
SHA512 3ca1525c87282db1959a0553799df1bfe5c37537e2ccbe55edb7d0dacb65f92eb5f21827e4e6c8d395f0d8a9175e027c8c16a8cdfe73ce51c1a73dede5798129
SSDEEP 6144:nOPs3kdH+2JkdclbJWQustvUnyZ1gbbSHRMBm83caOrxBuvykyLDhqAQ:J3kB+2LlbJWQuslUnc1gmMUiykyPhlQ
TLSH
T147D4F907AC4E253E59C0A349FA088BBBBF1ED22CC26CE67DD4DDD5341843F6891AD589
MD5 SHA1 SHA512 SSDEEP TLSH

locales/pl.pak

SHA256 020b52f23bade566cded9c34c19687ed638cf1b0c8e53a6db87bd0686f5405e9
MD5 3a0c0050e21919629448b1f1ed558fbf
SHA1 cd79849812d1da79a5acb3cd2345109008c01553
SHA512 91f483ec3f25a917561e8550ec661ae052cfeb332efd85622d0bc9196afa598f200af2797159fe41819b4855831e743b24ae3887bfd561e5d2772a8dd1f15bdf
SSDEEP 12288:jqEGxnKht4tfQfuzSJQbZ1brnPnCUdle3mXUXeMAmo1QhaoNRDeLUolMt86:jdGx2tM8eMQ1Qh2qD
TLSH
T14FE44B0E56E59A4E8CA008E5F6EB1B7CACECC808F508D35FE46F452A615B18FC9BD5C4
MD5 SHA1 SHA512 SSDEEP TLSH

locales/pt-BR.pak

SHA256 40a220f0a65ba26f6548e303a0a1b33d9489aa60abab80512d2e19c4ff5a0e31
MD5 3c02b08647c4848c474280d9326cc87e
SHA1 521b64e0b919ad8f6534ea5af3c495fa34fb635b
SHA512 457c19438603fed2ec4bbd68060837fa505d65254ef0a2b6f8bb22d4c9e7b88470bc64fcf1afcba897e58d7559f893f57a39aa0fc093359afcb6b1437e9842c7
SSDEEP 6144:s3EypS3lwVMiktZL9NBXBLr+ibDXyxcAEnsrqdusRYfv:6pS1wublbSELksRYH
TLSH
T15CE43C2E6DCA136615225354B71EEB03E5C80645FE0ADA87DCEF4B06A3CDE40D933BA5
MD5 SHA1 SHA512 SSDEEP TLSH

locales/pt-PT.pak

SHA256 89c5201ea5dbf42d2f35f72403299d75ba45367b821d9292ae03aba568b02079
MD5 6125fb5833181ed0ec022a2133d71b5d
SHA1 7cd2f715af125f0f1d2c90a49878743a0f660e9d
SHA512 1f9baf5c4258a69e8deed6a2ac2ab14ca32bba45a741e02bb36a91dc47ed62b594b23ab85d039e29fa3af6e2bce2695af8f1c14d00ccbf781e3a8f20df4fb476
SSDEEP 6144:/Iju++aC1SPuTFieJVJJxhql0MNLyf8mTnyITj3SRqu:Qju++wVATnyk3SRB
TLSH
T13EE419286ECA136605235355770ADB03FAC86655F809CA87C9EF0B4272CDF84D6B7F62
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ro.pak

SHA256 79dfe69bb48e109d63a2dc69676866a32b396a22f9a1423615481112b5d0a47c
MD5 daa5961ba51650b939002a025da59c5f
SHA1 39a5f84998734353cf448f0eca0f5632e4f47b4f
SHA512 dd5da7595369d52fd75879364aafb7679e8c917bf550eb9cb8f721b03bd7ba04f8f178d04c3c96b57708ae7dc3cd10a74dc1136187e3958c83c6a23a6809be3e
SSDEEP 12288:pwszw+GUlQMk/aoPBpORJE+t+P5aErn/81:Hzy15aEA
TLSH
T11CE43A23A1C82A972D5152B2B33935D3EC8D105DF641E28DA4EEC97910CDDDB852EECB
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ru.pak

SHA256 7df518c8d7c28b29478812eae1a02b1038ee4320d896b4936f02a86f632e90c7
MD5 2f1758d3d78df7cd61d3ca6c76540689
SHA1 568c56251356e17b7eee1eea6049ac14abb17b66
SHA512 99c09ea7ee0503e359a5017d8a3e9bf0b101ca2bb0685af8dfa2cb3cf1a89b7721475569ffc2a05d625ca2cc83100287279d8591349cc459db1822444fad71cf
SSDEEP 12288:kgNuuHfQeRo4Ye7MObzJ9sFMaTj7L1g1qSvYsqCYKki67R3Fo8N5K4uM+MYHeAOu:kcuZtooni
TLSH
T178358860669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sk.pak

SHA256 77a575116c3d51e3a6b82356f1c11b811f1865d7849ff5e7f59bd88ae8000aa3
MD5 4c753973ec85f6cf68a149af371df783
SHA1 9a8c5d9f790c3576984aa34384834f4b90e8598e
SHA512 37e315c111064092ca28661b0bb9acd0b14d7e39381ac300fba37105566d5007d3f11ed20a0ffa452827ad0fb12ae64df8c20c90b9b03da37291d0e622c16bbc
SSDEEP 12288:NrBTr8FL80eAJ4uqYihi2eqXoDnsRYPOwVE:NtTr880hqrdYPRE
TLSH
T176F44D7FDBE6181E8E9D0148FFEA7110FDAE46508A4EB0A5944F334714E26EDCAB4E44
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sl.pak

SHA256 b657c6b9d889b66949e6c908207d61053b5ef681e76fcee4e51edb3362f75201
MD5 536a4fdd7e534240136c4a55bd7cd1b8
SHA1 d8b5cc6ca762d8ba793699b6c892ae90d5d46af8
SHA512 4cc230b01943349164c46b2be34ed9bd36b6f90f751b065f594191f86e1ebb5e3b8ecd58f05b748f209ec6d36e3bd9e2706ee81130ea2985b5c7d2980f8845fc
SSDEEP 6144:uBgMEI4SHL1fLE9RcQ9riefNK+nnbmNjGisq2Xm4ocyxPbPDAoyu2MWCn8af/07Z:FM14A5M02XziMIWHqTL6i/fzynjql/at
TLSH
T1CDE42B39BAA75E0F0C9AA2CFFEA602007EDC044CD256E661FC4F336E5415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sr.pak

SHA256 b6dc72a94c66e7e3703ed1919bb1e88b10d2e9c3fc5677910f22b8d0cdde0779
MD5 2dd85457b0849e8c49db43f33b81f1df
SHA1 ecdb04969c3f80e06a1235ae009ab848bc231c1f
SHA512 6b94393782981d521dd0a00678d203e47b9f9b91bcadbc3d4c7718f01e57b0b0081f7d8f8ff8f8326ee62a284acb2d80850e07426b5cdb6992c08f965e56fc5d
SSDEEP 12288:tANAcJBWs1LcIM/cS8dQKCkti49yJm9oohhPPCHxVev37eYudD/k/W:UjQV2Crj
TLSH
T1683546A19B9E64DB0501F41BD808BE4A3DAF41FE3FAB975211601DBD34E10B847B939E
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sv.pak

SHA256 3c04589a3996a4e76fdf6d8888918071bcd6149ab37d8d5176bcdb47834733c6
MD5 65de761bae7375604d20264f14be5bdc
SHA1 cb053db3d66307e395cb8831ff0b80370534249d
SHA512 4c9666d6fde3677b3ca28688ae8df201374060a2514517d49830efb09166d3f23eeab01d413332133ce76701f484db438ef8c56ec80b09dd6e0a206fb9b1f812
SSDEEP 6144:n1pqDhtSMaAfq8AniqDRq4wJVx2xqFKlTO0y9kRRFczd5RtGmXS32M0hcMSOmIEL:1UD/ST0g8xfWiY
TLSH
T10CD40B438A50F526FAB2530DB608115F0AEDE15CE3F2954EB8DA883DAD8BD5805FE347
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sw.pak

SHA256 8b78529bab49736fdffc80b6da11cd69a7dbaa045264685f96c9e8b573a54686
MD5 5cb8df281cbb868bc435772a402a41bc
SHA1 fe4fcb8c096b722a2ef5d281c853c1f457ea5f39
SHA512 6c8556a1e4194d75d96cf9de192d61e03bf21d3a6504521bc7f76b5fea11d7ac8f264e435c41d1acd4c4717949b6752fc9c41fdf28191cababc3762e584babfe
SSDEEP 12288:J59WT+XuPa86ZOO8exGP2qUOhzd9BGIbJHXnEB5PmedqUtgbycMYthiXPSh7nJF9:/9Wiw567CFJidBU
TLSH
T1D9E4E7629871D0191232618903DCFF732BDCED5C6D2B2D935A46BF0F218F98C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ta.pak

SHA256 5a3fb38d96c45592ac94a65617eaa6cf3866eaecbe4e8eaef601b5bd5d2a3908
MD5 2c3965a85b4ccb6ef9dadd5325c4da5f
SHA1 1eb48e00ffbf1c239f191493e5954ef2a9822c67
SHA512 41b6ba6686bfad159fdea730f756825e32ae2ebf3c8bde34db1b2a44edfd5aa62153182574ab35e3caca469935bba013191486bab8aeed5f0a8b2c5c7a191816
SSDEEP 3072:lz5LqHE72JXDmz2W/1NxZFrjjiAGAE7JLBkuyJgGPaK5qLtRoNP:RhGJXSz2cNXFrDfEpBkuyaGPaoqLtRoh
TLSH
T159751BCE923EEE890F93288F0319536912986155C47BE3A67C766E1198ECC5DCF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

locales/te.pak

SHA256 8a5fdeb139cffd4184ac4f9718b27b01f1c4cbb20f3275663365966c2e49f187
MD5 1fb019acbad58a19cec05a1948d973d7
SHA1 bed2b7bf01990aab6ab0f9c3267a7f960a5fc0cd
SHA512 6497bdbd2f12bf5671e2a82622ece875fbffc461ff8958d25034ed8e1be0925eb4d0de0b96fd8d3e086f8bdaa29c0460a7569ef2fc99c61c8a2f460314ecf374
SSDEEP 12288:tfLYtZK447MZKNOy4cJLISF602FLHgKmoQRT51bDb52CMvRWnB61x3p1Fq9h6R4h:5LkK4B5hdcCY
TLSH
T13D7593023A66D310DBE60273752CF66C49781B8261D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

locales/th.pak

SHA256 ddae33d9bf59d04f6c11ca7db04f2084742c25381987ea99afb6a80b251f01c7
MD5 8e2a571971ebda3b511d0b80c4de1114
SHA1 efbe1cb3edafcc9b756024cc0f0b93fd93594a31
SHA512 063ef5b61a4d3556f7e281ce0d9e557aec08b0cd9b345c1cb64cdce3c0811e571d1cda38253c35ccaff9c3c019ce6178c80e40351a579db714bb3f71aeb01528
SSDEEP 12288:3JEuN9LyZYAbzALazVs6oNhCQskJUsXw+sO5eXwpbDF1uRHKHlPijkB6HsD5UvOx:5E1Ass
TLSH
T1DC556EB37247DDD479441B5B262A7789672DAE693F73F8E000C9215A73F071A8422EE3
MD5 SHA1 SHA512 SSDEEP TLSH

locales/tr.pak

SHA256 f3035b9bce14532de1e462e5679c849db51eb183ba23c23089c230cfaa63732b
MD5 db0f7e38304806daf311222802f08c5f
SHA1 ff1054d3a4b231b50f67f67e6f9cc66a039abba9
SHA512 3e745e532e76f7613f3068813017ed1423c3c5495d6e3cc7aa52c17fa6bd54fa961cfe4bff469ecfd5aa62944e9417d855111f46532f1f07659aa29e2ca218c8
SSDEEP 12288:CiiNTUkZ7QYkElRaRHl6sgwhqlyfFZgIYbyi3+4T:mT1cElDbyP4T
TLSH
T111E4D98178EF281C8FB9278FD6E91666F89F0666B331F4469B1A8636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

locales/uk.pak

SHA256 505286c0d44e2ea48ca71a2a4b849fa68e1e7ee4476b91448795e0b87fcc4f3c
MD5 458edf0797c0f75748d68c0c51f1b603
SHA1 0c1479cf0874b4ca0eae377117f89a8daa96fa5f
SHA512 6ee45535805df5f29b4bf91c940f709d9487d95b93c1ef276f5b30757fdd5d07f83f552dabc0d0b73482587c791833a859ccb65d859e027e168857f8b600b723
SSDEEP 12288:mJmTqub+QKjbMIhwk0Rd3aShGlxsSr+a0n3aBp81h3BqScRdNnGSA6Quqz8wquk7:mJdlg8wqus
TLSH
T1224599A19BAD54DF0105F06BE94C7A0D7DA740FE7FA6871625A43DBF24F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ur.pak

SHA256 8f16c5bfc767b8ffaab5b33aeaea9019e61c47f920d2a9038619cb03aa4b4757
MD5 965fc2bb5542c9d549e3d7e0c9dcee18
SHA1 3331e37dd5977d59d6088cab84eff1a8cbddfde6
SHA512 610e9b74c050589b548d14f3e2a881587f1fe5797b85811b49825724b0bf84bb4953ec0eb65af1210e533f5d4a62d3c3c5badbb9c76d36ff03b84c74854953ef
SSDEEP 12288:U5b1ocNoFu/u6Q58PPPK8A6zqtdQVSidayI5KljtINvTZE88GGOax1QYr1auoco4:UdSYnGq
TLSH
T1D92500D2E6B896B35A21D91780D33C34CB635F13D34AF285E93246C54E9A0139F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

locales/vi.pak

SHA256 08a45c8a21293b59bf4eb4e645feb86dc625b66d7261df258d60318c7a9c926b
MD5 f3252b7475e92a07117bef35b816391a
SHA1 df5efa15fd39143807327c0adbd0a9b1cb9553da
SHA512 c056e6c01ecdd4005b01f3a7fa3813ec39b383dc5f5988ba8f1134ea0a8126e23d59f63ea383d7523051e4ee95cc73a174a7d021bd2364552b9e7f6507a4f337
SSDEEP 24576:zjev08o+cTcV2TeMdoDTWeQlwKNi89q1ljEZ:2ZCNiP1ljm
TLSH
T17705851216E1302680AC553EC6CE540D6FCEE42FF780CFE56FE5297476221A46F25BAE
MD5 SHA1 SHA512 SSDEEP TLSH

locales/zh-CN.pak

SHA256 0a8749203b11ab24ecb552ee90ebc5928b1a91cedcf27ceb6a9725b1898cfd2e
MD5 9b463f6cd4eb30e19e6abbca1b65bc71
SHA1 ea2766376aaa8aaf7ac3b40ad2ecdfe306c2cd3d
SHA512 b5aeee0f14eebb303689659578965071e21cf2e5c411746306ce4ac5afe035cab6a89bcbf80cc9ae7d8b8a2767794b6e44f983d12bbf2e4b9b0b52105a960da3
SSDEEP 12288:9JMLonvfhcWkODOUTL81l8l0qBKYQDMMCl:PMLovfhcWkODOUTo1l60qBKYQDMMa
TLSH
T188C47CE924F9BDEC004A90A03729613D7C40764BF627EF266ED248DD1A92FAD0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

locales/zh-TW.pak

SHA256 9b41750b0ca421bf17569e918bc479583d073da25dbb2824db2fb13017bdf4ae
MD5 d502d9d5a1c37834a26cddb60656d7ab
SHA1 df425e22c27b95a8ba5cc147aa151589c128aea6
SHA512 049bb5c2594512897b4a180226f53996bcb46ba0bbf4f2049606329225f9d0b9c671d38acdb295a4df795d224fb99c730248ff78fa9a4a54e5ab6d344f27e2ea
SSDEEP 6144:bX5v7n8X83NIK8D/hN3ncRfvT9k2NuPtuQwz6LH+DWqor4/dmi1OPYTL:bXJ13T8DQBvJWtuQE6LHVA
TLSH
T1B2C46CB61CFBCBEE0901F484B7CD913ABC8B386DDD377636FC891C942E6AA5409A1145
MD5 SHA1 SHA512 SSDEEP TLSH

resources.pak

SHA256 db2766120c5c74c1f099141845547964ce8088bd4735892e3025cf194296d56d
MD5 cae1ebc7adc490b7c0c03a0b68f485c7
SHA1 5dac7378d0f788ab699fbafa47459f8b9bd3f218
SHA512 fab7f629da93e16f9e9e908bb7390c035d8c06b992e276cd5890016d68e52fb7bd73eb4046a0689d81ff8b89aec45978bbf090ca4fe1f32e3e5b2dd7062b6851
SSDEEP 196608:WRR3ZeqsPzZOgYimq8oR/5e7sbaDbNC7hZ9+a2uYpC6Obhay1Gx3Qk75lfgXd64o:WLZelLgg9mno8sbANCdZ0aouGP5lcd6D
TLSH
T110C633943A75187FD89133B291554633E9ACCC1B1865A4E30D6A3029EFB70ACBFCD17A
MD5 SHA1 SHA512 SSDEEP TLSH

resources/app.asar

SHA256 8f0c6f24baddb46679e4027f5dcfc748d307e276e54531866172024f7c662af6
MD5 c62a0e4de75a53a1cd5551e710ef8e8d
SHA1 8a7c435f511ddfbf9f8623dfda357ea7e86ddd26
SHA512 2bd617cf9293205ac72a4034aa85aef66e17aee57f0b0f33aa5469e5dc5cb48338a71aa5c796235c836d3de9ca08da845d17d9971dfc9feb565250b8f993a393
SSDEEP 12582912:ajREKlC2KnVihkUmwNyFrAu5mIqmkT28gwednVihkUmwNyFrAu5mIqmkT28XjRET:ajRPlCBnykUmwNQtq4PnykUmwNQtq/jO
TLSH
T1B389E05179448F3FD5232B7165D31F67E5B090CCEAF20EA20BA4866D8DCBB5C2322796
MD5 SHA1 SHA512 SSDEEP TLSH

resources/default_app.asar

SHA256 06d4a28be095a80eff94dbd18edcfac5b5805e1b5538e0fb7cee7c7ae81db76a
MD5 b77337fb8603878f51166531d417cc81
SHA1 7633d1649735b8a3b223ff4a31940b3ac9ac4799
SHA512 85a307d774ddfb658956263919ed12cbdf64f4e6d8db7222fb827548c5345427193bfe273aa30ad537ad0b4ea40c1c66e88fa3f6d6fe4a81caf9c871dd2560b9
SSDEEP 3072:ZWHxvTvFRWrjXxs8xbKNkCeF1SBRbFdPQrZsH0L5uRD:ZWHd5R4XxRYmS7orZsH0L8
TLSH
T1B6B3E19112F60231D86B4AFE9FAF16267A39241732CDD0C4722D87609FE15D6A5E3BCC
MD5 SHA1 SHA512 SSDEEP TLSH

snapshot_blob.bin

SHA256 d6196a0ecd97590dc5e5694a5afa6f2581de985a8df77e11275eaa31757ae24a
MD5 7b15d99d416c0c2898912f93dafb7d48
SHA1 0078bc3d89ada13039fd1cb8ee119c563c6d8ab9
SHA512 42cb07085bd95dfb1ea301dc208ecb336d272f50c3895eacab4f7de7226203dcec762f028527bff0767067972d23e0d9bdff73aa1fc5eae55b97e5bbf5f4438d
SSDEEP 3072:gGDdOt+xbRt25rRcPMk9YuHz31OzOsv2QessIn4nGPvLXLiSC6MR03da:3gt+Hi5Sb3igA4af/I
TLSH
T19374FD52F15AC625CDE613384EEDCED82AB4F5CDDE4A821B324047BDB4B96709F9218C
MD5 SHA1 SHA512 SSDEEP TLSH

v8_context_snapshot.bin

SHA256 55c9e89514362413052c16bc96d9e4850a6cd59e8b9480814e5b3432ab6d5877
MD5 36f177ba1401186590132620e6aa2b5c
SHA1 53d60ea4abedbaccc5d75c81bbf87d3131319dbc
SHA512 c367b3edc9ccab2d34ffff50cc34b2b74ea1c99e1aa1f2ecc3419470350ec1ab082809d1c4c33a6e892a883d8a61713f781afc1b238f48f69140cd102ed6d4b5
SSDEEP 6144:mgt+HiOvKgYGxLT/2W6tA6e6nvb1uN5bgxdNXWORAafquDz5AH1/IB+Hzf:O2GFz2W626e65kqm8tNDi7
TLSH
T1F9F4B3B6F10B8B21CDD9173D8EEA8E4A3674F19DEE47C11B3141977CA5BD6A08E9201C
MD5 SHA1 SHA512 SSDEEP TLSH

version

SHA256 eee2fc1f5056a3607caf0257a04dc446c00334c217756d0ab32f3786a80d6783
MD5 b0fce5f2e852849bae16b6cf234878ce
SHA1 a9d6eea75bcc8b1ef2bec49c2c9ba18178086a08
SHA512 57376e527238b7141b02c747bee02373dacd205ac90262bb415dffdae773ac6202eb56a5435a7233808fc4575fda9abe4bcaad684b54ec4b9bfaf2e3e97b4991
MD5 SHA1 SHA512

vk_swiftshader_icd.json

SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/nsExec.dll

IMPHASH d31c5eb927119d00232e4d4b0e32fcdb
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z.dll

IMPHASH 2656ea25cde98f31a490513c2db04ae8
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

268568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LocalFree FormatMessageW GetFileInformationByHandle SetLastError DeviceIoControl GetModuleHandleW GetProcAddress HeapAlloc HeapFree GetProcessHeap GetSystemTimeAsFileTime GetStdHandle WaitForMultipleObjects GetTickCount GetConsoleMode AreFileApisANSI SetFileApisToOEM SetFileApisToANSI GlobalAlloc GlobalFree lstrcpynW lstrcpyW MultiByteToWideChar WideCharToMultiByte FreeLibrary GetModuleFileNameW LoadLibraryExW GetCurrentDirectoryW CreateDirectoryW CreateSemaphoreW RemoveDirectoryW SetFileAttributesW SetFileTime GetTempPathW GetCurrentProcessId GetCurrentThreadId MoveFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetModuleHandleA SetEndOfFile GetCurrentProcess GetSystemInfo GlobalMemoryStatus GetProcessAffinityMask IsProcessorFeaturePresent WriteConsoleW HeapSize GetStringTypeW DecodePointer SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA WaitForSingleObject CreateEventW ReleaseSemaphore ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetVersionExW VirtualFree VirtualAlloc GetLastError CloseHandle WriteFile SetFilePointer ReadFile GetFileSize CreateFileW DeleteFileW GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetFilePointerEx GetFileSizeEx GetConsoleCP FlushFileBuffers GetFileType HeapReAlloc LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess

user32

SendMessageW FindWindowExW SetWindowTextW GetDlgItem wsprintfW CharUpperW

advapi32

SetFileSecurityW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken

oleaut32

VariantClear SysAllocStringLen SysStringLen SysFreeString VariantCopy

$R0/Uninstall Clutcher.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 47643fc068778550fac4fd436ae271ee1cd16aa98d71eda4e7d4feb5467070be
MD5 c13d88e5894ce28ef57dc59ae2e3b66e
SHA1 c5d9bae0467f3ddb27cb9dfa52fd1ebe12b8fa89
SHA512 4d5d2522772c2f6f2c5fcae4384f96489e278c450e2fa0202667827d093add153714b1c30baa5c1221d43d8753001920cc9ed21c6a1d79144d2f84e70b32ecd7
SSDEEP 3072:Mn77v00hEoDEtauAboGo58sNIJcbdOM2Saa12tvhOEA1RJCir86SrSrv+a3l:M740IkoGrsNCcbdKS52t0EyL+3a1
TLSH
T1E6F30242A3E0C4A7E9F61F72077597EB6EB6F11564204F072B802B5D3E93BA1AD1D312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/StdUtils.dll

IMPHASH 7b79709c0d5576549eb261e3410f95f8
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

60089

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

iswspace ??3@YAXPAX@Z _msize _wsetlocale _snprintf iswcntrl _beginthreadex time srand rand clock _getpid _wsplitpath iswgraph __wgetmainargs wcsncpy _wcsnicmp wcschr calloc free _wcsicmp _snwprintf swscanf abort ??2@YAPAXI@Z memset memcpy

shlwapi

ord176

crypt32

CryptProtectData CryptUnprotectData

kernel32

GlobalFree MultiByteToWideChar WideCharToMultiByte InterlockedExchange HeapValidate InterlockedDecrement InterlockedIncrement GetSystemTime OutputDebugStringA GetExitCodeProcess InitializeCriticalSection SystemTimeToFileTime TerminateThread WaitForSingleObject LocalFree GetFullPathNameW GetVersion GetFileAttributesW LoadLibraryW FreeLibrary CloseHandle lstrcpynW GlobalAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetTickCount Sleep VerSetConditionMask GetCurrentProcess GetModuleHandleW FatalAppExitW GetVersionExW TerminateProcess GetModuleFileNameW RaiseException VerifyVersionInfoW GetLastError GetProcAddress SetFilePointerEx WriteFile ReadFile CreateFileW GetFileSizeEx GetCommandLineW

user32

MsgWaitForMultipleObjects PeekMessageW DispatchMessageW wsprintfW DestroyWindow SetTimer UnregisterClassW KillTimer LoadStringW MessageBoxW GetWindowThreadProcessId AllowSetForegroundWindow CreateWindowExW RegisterClassW MessageBoxA

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

shell32

ShellExecuteExW SHFileOperationW ShellExecuteW

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

SysAllocString SysFreeString VariantInit VariantClear

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/WinShell.dll

IMPHASH a75c904bad153f5af2c37cfdf66eba5c
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4863

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH d31c5eb927119d00232e4d4b0e32fcdb
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

SillyHack.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/SpiderBanner.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/StdUtils.dll

msvcrt

shlwapi

crypt32

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/WinShell.dll

kernel32

ole32

generic

$PLUGINSDIR/app-64.7z

Clutcher.exe

LICENSE.electron.txt

LICENSES.chromium.html

chrome_100_percent.pak

chrome_200_percent.pak

icudtl.dat

locales/af.pak

locales/am.pak

locales/ar.pak

locales/bg.pak

locales/bn.pak

locales/ca.pak

locales/cs.pak

locales/da.pak

locales/de.pak

locales/el.pak

locales/en-GB.pak

locales/en-US.pak

locales/es-419.pak

locales/es.pak

locales/et.pak

locales/fa.pak

locales/fi.pak

locales/fil.pak

locales/fr.pak

locales/gu.pak

locales/he.pak

locales/hi.pak

locales/hr.pak

locales/hu.pak

locales/id.pak

locales/it.pak

locales/ja.pak

locales/kn.pak

locales/ko.pak

locales/lt.pak

locales/lv.pak

locales/ml.pak

locales/mr.pak

locales/ms.pak