Malware Analysis Report

2025-08-11 06:04

Sample ID 240222-wyafvadf2w
Target Jump.King.v20210222.iso
SHA256 a557a851939c4612307ce4ed1584a5129c7b3425cf601206f709eac2c7188215
Tags
discovery
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

a557a851939c4612307ce4ed1584a5129c7b3425cf601206f709eac2c7188215

Threat Level: Shows suspicious behavior

The file Jump.King.v20210222.iso was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery

Executes dropped EXE

Loads dropped DLL

Enumerates connected drives

Checks installed software on the system

Enumerates physical storage devices

Unsigned PE

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of SetWindowsHookEx

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-02-22 18:22

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-02-22 18:19

Reported

2024-02-22 18:28

Platform

win7-20240221-en

Max time kernel

144s

Max time network

41s

Command Line

"C:\Users\Admin\AppData\Local\Temp\setup.exe"

Signatures

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\setup.exe"

Network

N/A

Files

memory/1580-0-0x0000000000270000-0x0000000000271000-memory.dmp

\Users\Admin\AppData\Local\Temp\is-2KG43.tmp\_isetup\_shfoldr.dll

MD5 92dc6ef532fbb4a5c3201469a5b5eb63
SHA1 3e89ff837147c16b4e41c30d6c796374e0b8e62c
SHA256 9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
SHA512 9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

\Users\Admin\AppData\Local\Temp\is-2KG43.tmp\_isetup\_iscrypt.dll

MD5 a69559718ab506675e907fe49deb71e9
SHA1 bc8f404ffdb1960b50c12ff9413c893b56f2e36f
SHA256 2f6294f9aa09f59a574b5dcd33be54e16b39377984f3d5658cda44950fa0f8fc
SHA512 e52e0aa7fe3f79e36330c455d944653d449ba05b2f9abee0914a0910c3452cfa679a40441f9ac696b3ccf9445cbb85095747e86153402fc362bb30ac08249a63

\Users\Admin\AppData\Local\Temp\is-2KG43.tmp\ISDone.dll

MD5 4feafa8b5e8cdb349125c8af0ac43974
SHA1 7f17e5e1b088fc73690888b215962fbcd395c9bd
SHA256 bb8a0245dcc5c10a1c7181bad509b65959855009a8105863ef14f2bb5b38ac71
SHA512 d63984ee385b4f1eba8e590d6de4f082fb0121689295ec6e496539209459152465f6db09e6d8f92eec996a89fc40432077cbfa807beb2de7f375154fef6554bc

memory/1580-12-0x0000000002250000-0x00000000022C7000-memory.dmp

\Users\Admin\AppData\Local\Temp\is-2KG43.tmp\wintb.dll

MD5 9436df49e08c83bad8ddc906478c2041
SHA1 a4fa6bdd2fe146fda2e78fdbab355797f53b7dce
SHA256 1910537aa95684142250ca0c7426a0b5f082e39f6fbdbdba649aecb179541435
SHA512 f9dc6602ab46d709efdaf937dcb8ae517caeb2bb1f06488c937be794fd9ea87f907101ae5c7f394c7656a6059dc18472f4a6747dcc8cc6a1e4f0518f920cc9bf

\Users\Admin\AppData\Local\Temp\is-2KG43.tmp\callbackctrl.dll

MD5 f07e819ba2e46a897cfabf816d7557b2
SHA1 8d5fd0a741dd3fd84650e40dd3928ae1f15323cc
SHA256 68f42a7823ed7ee88a5c59020ac52d4bbcadf1036611e96e470d986c8faa172d
SHA512 7ed26d41ead2ace0b5379639474d319af9a3e4ed2dd9795c018f8c5b9b533fd36bfc1713a1f871789bf14884d186fd0559939de511dde24673b0515165d405af

memory/1580-28-0x0000000000400000-0x0000000000556000-memory.dmp

memory/1580-29-0x0000000002250000-0x00000000022C7000-memory.dmp

memory/1580-30-0x000000006B080000-0x000000006B08D000-memory.dmp

memory/1580-34-0x0000000000270000-0x0000000000271000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-02-22 18:19

Reported

2024-02-22 18:28

Platform

win10v2004-20240221-en

Max time kernel

152s

Max time network

206s

Command Line

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Games\Jump King\JumpKing.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\setup.exe N/A

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeLockMemoryPrivilege N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\setup.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Games\Jump King\JumpKing.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Processes

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\AppData\Local\Temp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\setup.exe"

C:\Games\Jump King\JumpKing.exe

"C:\Games\Jump King\JumpKing.exe"

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x528 0x524

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

Network

Country Destination Domain Proto
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 203.178.17.96.in-addr.arpa udp
US 8.8.8.8:53 9.228.82.20.in-addr.arpa udp
US 8.8.8.8:53 41.110.16.96.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 140.71.91.104.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 61.179.17.96.in-addr.arpa udp
US 8.8.8.8:53 65.179.17.96.in-addr.arpa udp
US 8.8.8.8:53 91.16.208.104.in-addr.arpa udp
US 8.8.8.8:53 galaxy-log.gog.com udp
N/A 127.0.0.1:58265 udp
N/A 127.0.0.1:9977 tcp
N/A 127.0.0.1:9977 tcp
N/A 127.0.0.1:9977 tcp
N/A 127.0.0.1:9977 tcp
N/A 127.0.0.1:9977 tcp
N/A 127.0.0.1:9977 tcp
N/A 127.0.0.1:9977 tcp

Files

memory/3744-0-0x0000000000770000-0x0000000000771000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\_isetup\_iscrypt.dll

MD5 a69559718ab506675e907fe49deb71e9
SHA1 bc8f404ffdb1960b50c12ff9413c893b56f2e36f
SHA256 2f6294f9aa09f59a574b5dcd33be54e16b39377984f3d5658cda44950fa0f8fc
SHA512 e52e0aa7fe3f79e36330c455d944653d449ba05b2f9abee0914a0910c3452cfa679a40441f9ac696b3ccf9445cbb85095747e86153402fc362bb30ac08249a63

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\ISDone.dll

MD5 4feafa8b5e8cdb349125c8af0ac43974
SHA1 7f17e5e1b088fc73690888b215962fbcd395c9bd
SHA256 bb8a0245dcc5c10a1c7181bad509b65959855009a8105863ef14f2bb5b38ac71
SHA512 d63984ee385b4f1eba8e590d6de4f082fb0121689295ec6e496539209459152465f6db09e6d8f92eec996a89fc40432077cbfa807beb2de7f375154fef6554bc

memory/3744-13-0x0000000003390000-0x0000000003407000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\wintb.dll

MD5 9436df49e08c83bad8ddc906478c2041
SHA1 a4fa6bdd2fe146fda2e78fdbab355797f53b7dce
SHA256 1910537aa95684142250ca0c7426a0b5f082e39f6fbdbdba649aecb179541435
SHA512 f9dc6602ab46d709efdaf937dcb8ae517caeb2bb1f06488c937be794fd9ea87f907101ae5c7f394c7656a6059dc18472f4a6747dcc8cc6a1e4f0518f920cc9bf

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\callbackctrl.dll

MD5 f07e819ba2e46a897cfabf816d7557b2
SHA1 8d5fd0a741dd3fd84650e40dd3928ae1f15323cc
SHA256 68f42a7823ed7ee88a5c59020ac52d4bbcadf1036611e96e470d986c8faa172d
SHA512 7ed26d41ead2ace0b5379639474d319af9a3e4ed2dd9795c018f8c5b9b533fd36bfc1713a1f871789bf14884d186fd0559939de511dde24673b0515165d405af

memory/3744-34-0x0000000000400000-0x0000000000556000-memory.dmp

memory/3744-35-0x0000000003390000-0x0000000003407000-memory.dmp

memory/3744-36-0x000000006B080000-0x000000006B08D000-memory.dmp

memory/3744-40-0x0000000000770000-0x0000000000771000-memory.dmp

memory/3744-41-0x0000000000400000-0x0000000000556000-memory.dmp

memory/3744-42-0x0000000003390000-0x0000000003407000-memory.dmp

memory/3744-44-0x0000000000400000-0x0000000000556000-memory.dmp

memory/3744-47-0x0000000000400000-0x0000000000556000-memory.dmp

memory/3744-54-0x000000006B080000-0x000000006B08D000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\unarc.dll

MD5 2ced17f02b24372c166faaf7da2dffb3
SHA1 8e2e6d6855095cc032eb5a9c8e1ed975d60ea5df
SHA256 89952411324163a635942db33dd0087508e20d112e1e75403dc1d5e852927dd7
SHA512 8aadcf0249ef17519c329ce586a2d29ec7dde7898bb2b88650312ae4098010cd351bb45bad703ec69a14507ef87fc37317b9d8eb8a6068fb61fd15255807d4ea

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\cls-bpk.dll

MD5 d31067a2843518379a3166d031be68e5
SHA1 555646cf61ca4beefc0aba44337c614154ebfef8
SHA256 20c1c8f1a70470e18c898d35136fcade1fa1cabdd069c564415debfd1a26c403
SHA512 102ec7aa932a6ada90a167a5c7f32ba76b693ed5b0f57923ffa23b833e42146aa890092b2beb6ffd0cb51caea09179b1d7fbc1b2336f50acabc03d4da1f72701

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\cls-lolz.dll

MD5 9e1e200472d66356a4ae5d597b01dabc
SHA1 8d93246907a422d2333697cfe999cd9aeaea764c
SHA256 87df573ac240e09ea4941e169fb2d15d5316a1b0e053446b8144e04b1154f061
SHA512 dd16e9c0831e72d19b1bf1431a2c8c74bcc183cfa16f494b5f11f56168209948744e0add7f2afe62db7f34adddf940fd570e28d60bebf636e07f57a0bf0346cc

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\CLS-MSC.dll

MD5 67a3a34ecafc68afdf05f71657ee0009
SHA1 2ed842e3244992dc2d5d36e5c481d048f433329a
SHA256 6d3d6b0ff25fd2ac2c8d478b068af55cb053d9b2c08c53964d6559c7c8b8047d
SHA512 a673ff2c79d59cc2c02ffc79269bf4ea019a19f5b7766f375ccb4d5cda68335ea1f36c4875ebaa0f390f1abb37494cb13c075359a1735982621c61e42f34e3af

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\CLS-srep.dll

MD5 522d2fe95820798431e59bd982c373c2
SHA1 e04def966208b662eed6b548d2c5e0c4d9e84bcf
SHA256 af4379f3d8e12938a2f4e6d8f7d8f135181c415fa6c443b27eb44c3be173b2ef
SHA512 9e2afd800fcae018ed6ce3ccb32a9f73c2874a8cd5133112c346feb5009829dcd1b0be3d13dc0be046b68b40bf5d11e4165f6bab736588bc6e999fe9f4f2a6fa

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\facompress_mt.dll

MD5 002508839634e56d43e4fd56e3df2757
SHA1 0cedf5289c102e75554c08f56361a294767b8fca
SHA256 7eeb2c50920e30544e2f180b0c39488501372a8f8bd8393bcb095353e9114cde
SHA512 2f35fe7e2ceb64fa7fdda0db704067ab7144a62709044b88d2f203b48046a8aaa270673dc14c1c61d1b961e03874c616f21df1bee7ae104f19eb6b4330e31a0c

C:\Users\Admin\AppData\Local\Temp\is-8RQ0S.tmp\facompress.dll

MD5 d43845f28651a42ba2105fcfcca5253f
SHA1 9aa415b9e8039caf6e07bc074185d5e8a9f486ed
SHA256 17a9ffdf381f7a9f6cdfc85b157fc6cf80cd4b45ed8ad43edac73008923501a0
SHA512 16ac57254b81d6cc26c8c07ee07ee9b648c2b2b167c380da2fad87e3af9e85c7dbb0795f696ea5083f06af424ddb6c319eec5799771a9a7887cf02116e7737ec

memory/3744-81-0x0000000073430000-0x0000000073437000-memory.dmp

memory/3744-188-0x0000000000400000-0x0000000000556000-memory.dmp

C:\Games\Jump King\Content\screens\scrolling\scroll98.xml

MD5 c56c1e7d5ba521abc5c14f6ca3a40cea
SHA1 eb768692a033461c8d23641f8c917b337e42a625
SHA256 825d9a71300fe1d0e967f4e86173ffecbb55f7c9f16b2f8c382b9e676dfd3d71
SHA512 ef6ff5d6c07f5238794bf6448e144030a96d5f40b6dd1b53f3471d0378ef185f033cf79e45f7cbfb49c103ee150cf6e98e8fd1666bfc14510898de9a60137bde

memory/3744-914-0x000000006B080000-0x000000006B08D000-memory.dmp

C:\Games\Jump King\Content\screens\scrolling\scroll93.xml

MD5 27603c621ab6b043addebfe64270bbf7
SHA1 b21748001dab1b0ce222ae2ef35a9079a52b2572
SHA256 b52776ffa627ca0fabe7d2c0b9a0302f5d9061815423a69c9010fb6a01a46ad1
SHA512 ff9f737c80d1ddacf74b13c6133c0d88fb11a4ea7bab9f8bbabe2ccfeee72c51c83be8da93b867785d2cc716c1d9570021e1010e5a10d01b6d40dda1a5c85ebd

C:\Games\Jump King\Content\screens\scrolling\scroll73.xml

MD5 b35444a3175093ef6897ee520ddef4d7
SHA1 e011cda041c9dddb823e51296c28df19fbf58f59
SHA256 1adabb9d937a72d9bbaec268362abb05c1ac6eba7999f1df8beb424224eafb4a
SHA512 550cc307a5939e273d974bdb780cbb657e819a8286f14710f59073cf3828bc2637d2984a405143137663f22b5bcafdd78c9b19c5cb8e1ab6a74b1ae455514c9b

C:\Games\Jump King\Content\screens\scrolling\scroll66.xml

MD5 00fab338eafece728600e90672928940
SHA1 b1aa8607a891d9ca39a7782a9b31d930597c87ed
SHA256 48ca16629177827f079c7b1d301a4442c8290b08970a5774f7a47af44c2e008d
SHA512 8180beac4edbddacbbad84d790b2d8c133f7b533f40e5b16778c3addc4d57f014097857d2737420bd51235edbec0ef4af3669aa77d76a7e6646d33e14c0431bd

C:\Games\Jump King\Content\screens\scrolling\scroll62.xml

MD5 c06279939be0bd23d32c805b21108c13
SHA1 de05f1a79c3cc1289c929fb825bc05711c85883e
SHA256 22f351dc86165efb6eb2644009907dab4f585f9bb7436e27d488678a7d72cb67
SHA512 ab0db097b1f49e57fcb676fa775e511606f2fcf5b02b373b54f3097fde587b7806cd864675d6e1fe3bb89474a497f2ba863aa0c9556cccdf2687206f2921cc0d

C:\Games\Jump King\Content\screens\scrolling\scroll150.xml

MD5 5e85d05962f13adfcf4d4f52a5e2d86f
SHA1 c1513302ef83a7b431d300f0e0d03e75cb3b2e54
SHA256 48989b2f026690e437aa18a64212349e10838a1a1fb3f23a033f03643b2063db
SHA512 5473bec1f45da22b010d5e7251085777db3b4d1f836ce9a3c186de0c3403980565d22255b2016baa320116400adb9e1db03d7edd2c70b68ace624e263c41d6b6

C:\Games\Jump King\Content\screens\scrolling\scroll142.xml

MD5 c19ebb028b674ce759c3fd99afa6608a
SHA1 d970100c6fa62063faa81f9908294027ca760faf
SHA256 f8182cc6b896d1b0c377f5cc7de91b98d25841df2c1c6e0ffcbc01d2ec21e463
SHA512 614bbf3f20daf0b366a6dcf697e7f189d35377a71d55e17f8011e3c9746fe62425951bd8ede0d29accf1c4fa9921f3c1969c9999a9f32d2ee3476d89471297d2

C:\Games\Jump King\Content\screens\scrolling\scroll119.xml

MD5 e0a63f68bf16bf4dcfcd157c083922c5
SHA1 2823bbbc13a4e775581159d527c541d4f609c514
SHA256 a7f6c68e37a519d091774516c3422b350669838ac5280f2ff52ef17accd49c7d
SHA512 f73f3786c95e6fb579c5563483426289f5c7d89b0dae2bc6fdc83a815141a011182b180fe17cbbbd9a77f997c745b93678f0830685f727004f17074b1d4640e5

C:\Games\Jump King\Content\screens\scrolling\scroll112.xml

MD5 ae3949620e009f8b1a308dc9283c3a11
SHA1 823bfad93524db159742fa08d8cd3c4fbea74b01
SHA256 db2af75d4af546c965c0226e69d2638f73634e3dd7ddb22e73e30b6a43087059
SHA512 8cf245204e49a30207d0ce35e5e183f4a8e65160a4f890a71e4c81fc3cd1d42d96427c9763b3ecb4629a8b597eaa8568d100357614210eb66c221556751c4e7a

C:\Games\Jump King\Content\screens\scrolling\scroll104.xml

MD5 a58f5a4a03b6bb6ae215a9b6bbe530f2
SHA1 ea271b5bbdc3afaa93d231822ab6e151bdfcb042
SHA256 b35e5d402be063f1472bda01ad8e49da7876046819aa38b4b6c7875abc33936f
SHA512 74f95e006ecad0880d803b3c971f25590a852fc240f5db18c3e345f331e6c67ab68875a53c40e36a320ef1e79f3387173d9be86af56dc7831aba23c18ef1e49a

memory/3744-221-0x0000000003390000-0x0000000003407000-memory.dmp

memory/3744-919-0x0000000061080000-0x0000000061115000-memory.dmp

memory/3744-930-0x0000000003910000-0x0000000003969000-memory.dmp

memory/3744-931-0x0000000000400000-0x0000000000556000-memory.dmp

memory/3744-933-0x000000006B080000-0x000000006B08D000-memory.dmp

memory/3744-932-0x0000000003390000-0x0000000003407000-memory.dmp

C:\Games\Jump King\Content\screens\masks\ashmask70.xnb

MD5 5e4a25a8350080a3f073db848316abc9
SHA1 a685edd63c1eba424eb2cd8870cb8f74d61a3476
SHA256 c234d386a1b476035c9b4e2998fed3b26c7d674284a4fb6ee326ac7fc4475979
SHA512 00919e3288c276b1dd7bd45a5a269347438e7fca9ca9d6307e3bc7155531d9e230c45f20606a6bed281caf3321175998336f70829cd6e5b24106d405f8c7a846

C:\Games\Jump King\Content\screens\background\bg114.xnb

MD5 cb32a9fa2d9fde5214be2923446e32f3
SHA1 d53264332780d2b9d8250cd7f75a3e1d8b6176fd
SHA256 5e52fc904ebb5e292fe8e3ee4d511a84313f208a2b15952f233b54703492933d
SHA512 9638c3f3011fa5d23b8ce49c83fd4a6a9f0f78d390a2bb72ff8710674e72ece9650737ce9d2471e97e7080b76f390c9823637e4aa6c5ab30c9cbd75e7c292045

C:\Games\Jump King\Content\screens\background\bg126.xnb

MD5 ae1869de62bfad81c59e5950ebf4dbda
SHA1 d59d36000188e35384efcc01f443a65c939e542e
SHA256 88332c536b08aae181808f1ae78fd09586bb2b3f31ff21b32cd1a9e5abd18b29
SHA512 a54e94af1aa11e03421afe2cca655a94535bc93962b67fb8bedacb968f587964f5e37954ddd17ef4176839175170b38a2206983ea3b8689ef528a20ce756182a

C:\Games\Jump King\Content\screens\background\bg137.xnb

MD5 de85c269254f60ce39262bf4aa129585
SHA1 052d88c55ede1bd61b271e5be4a8295f5e01fd77
SHA256 2a4362cbe716eabe6729e65039be6cab5b413eb48d580908d04c617dcb0f2daf
SHA512 6a7b6f659caa7399432e2ecc0101ebc7c57451d8e299e21ded32b9d111e919e7ef91c7577e45a0a19f6a66a131d6a015467e65625655cab1dfbc5547282d3da7

C:\Games\Jump King\Content\screens\background\bg147.xnb

MD5 4d018bbb5b6a6b61d0df4204930df95d
SHA1 aca47cb34a0a6b90f012865317307ab92e8b9404
SHA256 741b97d3e5aebd3b58ddf38be7a9e564ed3fda32378de1479a9634a238bd5b64
SHA512 85f3e826a36269fd406d42498518b17722629135de7063b25a2ee1d342c31406f3ba6faf7c9677a35ccd03e73b4d92183d76d5ab9ceefb66d2d6fd78ff7eb3f3

C:\Games\Jump King\Content\screens\background\bg159.xnb

MD5 4d84d1a176b12949351749c80a87cfe3
SHA1 5fdb3ce499cb661314810417322bb62c4d0c5158
SHA256 eb827d45956493bf0534f1d00dac1185ced99b2f5dfe84395c9a54ccf5facbc4
SHA512 3b657f3a76594f6e0316b58ed2ca006c9118be75f6fcb26fb140297a2616f0d493d3154a3fd725dcf0d40858062fa6d9844736c1e933a309a456c4af7de806e7

C:\Games\Jump King\Content\screens\background\bg74.xnb

MD5 35ab70f47bfc909144dbd608ec0d7818
SHA1 a0fb0ff0a6b4e29da5c045f3f7a2d2005c90c144
SHA256 d95c7ae34b9d8ab556083129f133483bc8bf9dbbe5520d4976b1bcf68b584a75
SHA512 7d783c63c36d6ef2381e2ba1eab24c81a550a4f02ff1219348b057513d2aff3dc02c2ef2e14839a2bda675c9083d82f8ab56a12a0a6cedcafe6df7357d7053cc

C:\Games\Jump King\Content\screens\background\bg93.xnb

MD5 e605b73a87c80bd8aa8f36f2fcf8f688
SHA1 cd0e262dd3d90d77c4cd9f2c8ec0397b9a8364db
SHA256 c59d724334dfd0e09d256c693a2abd506ce27e4a9064999f952f7bc84f586b53
SHA512 c75fb8a0ed4558aa382476f923a2c26e94ca07f29060424e811f6473f9d39cf0c22e00bdeb398223fd9150e0fce4774a892e6868915385f5332b8709047ee555

memory/3744-1673-0x0000000003390000-0x0000000003407000-memory.dmp

memory/3744-1681-0x000000006B080000-0x000000006B08D000-memory.dmp

C:\Games\Jump King\Content\screens\foreground\fg112.xnb

MD5 eaf44079da6a34ce7011e893483a0602
SHA1 8e49cef882bf86c9d352daeacfdfff6ff5140b3d
SHA256 0bdb2340890a5bcf75f5af9d4fc06dc76ab1ecc0c295d3eaf8f556ad0962a585
SHA512 596df70f0fd4a5520f79dd91ab7900fa95bd05907df6f676d7f218a99339b9ab8fba729dfbb77d8c611c783b6824c88d32380c5d2960499e145d1da2751aea37

C:\Games\Jump King\Content\screens\foreground\fg154.xnb

MD5 5ad6eec0ba2a64b2a409fcdaef1e1be2
SHA1 32fbe1160ac6f5ab205c2fe0f8a7c2df74c94e94
SHA256 351f1bf6724662918e6c018520cdb39fbb0e3f9fb792a28eeec4ff93b3d2a8f8
SHA512 21b26804fcad652d6e645582817021e7b79ed228fa8eab263a96833bbab2a7ae6b5cd681c87307363738fb3f0f5a92b2ad81e3212a0872854b9a362a7766a404

C:\Games\Jump King\Content\screens\foreground\fg89.xnb

MD5 932f07502dd6c6c1e9703de9ffd3634b
SHA1 69d3596670bba7337d2eef7f54cfe4968de8686f
SHA256 df1e689f4049fbc74ee770a3dbd1fb8e9768d90b28a6b80e3150b95e5b456344
SHA512 6a1963a8a563f6efe8c5e0153c1931e5ad87541a1f3d546834f072b79e773533871c6b39333697b410aa356242f5bfeb951500eb80b4f0fd6acf0480e1dfdc36

C:\Games\Jump King\Content\screens\foreground\fg94.xnb

MD5 96fb453bc65bfaed535191be52932176
SHA1 110ac6a572c5bf41bff38a46fba31c01ddd11150
SHA256 a4b60e9a30abdac4ca78701bd5d7408478a1549a1674f22960209ded747e0688
SHA512 e0664ede897cdeb5bb7322e160e5e2338c352e3837ca199fa282f7477f5ee9a6c8d6b7fcfe5af1e83a7aec1550b26b86be95df63b5fd4495b38b744e05b46904

C:\Games\Jump King\Content\screens\foreground\fg95.xnb

MD5 39868492476b73d64df404d34824f133
SHA1 570544ab3bdbd234c782e433b020ff15c27cc3a2
SHA256 45aca6ce5ca11c1bf9114fb739bc832fe1890fd451f44b3f0da1881dc39fcf97
SHA512 a91d5b061563f9dcb23264069278ca5bdb12f0f23c205236308a988ac711c83d6bd5cabcb963304a2efe305de4449057ce9b47fb242972ac96b4eee6320e7ae8

C:\Games\Jump King\Content\screens\masks\qsmask154.xnb

MD5 f1cdf262f6159a1f9de313c0a59b1d42
SHA1 cf2dc2b2be2057f2009cb7b055e4a68297bd9585
SHA256 97191de4a36b3d09be4c7c9b3c180a0bef7ca25db1b2eff5f58e3a33cdce9e5b
SHA512 e164d49636d45993392e4cc61e230559f4fa43235a8403ede18c7e97120fdb635e003fef10b9cca77654d84bcb3f2ea28f0f7fad27d647142e8e9b0034ea6977

C:\Games\Jump King\Content\screens\masks\snow_slowmask127.xnb

MD5 f6758a5f349739571584d1a26396f10e
SHA1 5209fb303e03b055f6276c98d08eaa1a61cf9dc2
SHA256 a357628b6f9b464630762829b66afded45d625e6e6fa96a91837f6c8f5c7a4e0
SHA512 37e2f164e7dab84bb20ff8a279009fb44e3451e33d7cceb539d51dd9c672e553b69474c3bfdcf622d96092058e58f794520046839327956d64f425e603d47c1f

C:\Games\Jump King\Content\king\crown.xnb

MD5 d11f7259414ccb9cd8b2ce2d5b9a83fb
SHA1 0ee6edd3e2ffe6f6d7fc55b3a6bfa29a1bbf98ea
SHA256 fbd145a0629806704243644aaa535f56b05052def49cef4df5a5e2c700c28470
SHA512 cb8caec6c3b81decbc7001bc76d2f910348dc95da3f76a6b97538df1eca90118104be09a7a400e3cf1378903e83a6612d2b2616260c95b927443c412cecf7080

C:\Games\Jump King\Content\props\textures\old_man\owl_chars\cat7.xnb

MD5 778bfb8a10faebf178e8f216c748d0a4
SHA1 7ac20152c1849efac29c717603b42fa64bccb8e3
SHA256 802ef4a3aab8a6ac198d69c7a11d299621f3a53d8ec9699595e17a0672338807
SHA512 9496b8f94ec4aaf757e74f78dca5c5c87859845004d60f904e02602d41baf571ec7fd9ccd4980e318725412ff9a83837b00af73606262574806a0bbbc3d42bc2

C:\Games\Jump King\Content\particles\bubbles\ambient bubbles0005.xnb

MD5 f464c33409ad8ddb2da7285814da2b0c
SHA1 2c1c434fd9ab1cc8d2747db90f5eb87a3ae79d75
SHA256 8dcb5a7dea7aad98566f3d5ee76ce93cc45fd3faf7678f6cb79dbcd513a77d1e
SHA512 2df1284484a7a9115d0d1932b0803baaed9b86514e2e7ff6c38d123d0df999613361c98bab6756b61fa32a28ee09656b7c6f1d2f300a5d9034ea8c6c717b0aeb

C:\Games\Jump King\Content\props\textures\old_man\fairy3.xnb

MD5 9a3e2f72e6fe941c68c18dc4c4b013c0
SHA1 80fcc6c278bf6d69e32f9e97a1c5999e03798c69
SHA256 64de1ef4dfd9f117e615f84a06fce60913d624eb792369c67487d97dcbeadf94
SHA512 290a989d43f01b7f3ec97ec04517d7fd438cb6027ca8a6aac47d554be28dabc314e26bf71b7e45854ca0031934ab142c988e1492981066971a32c92ca2746ff3

C:\Games\Jump King\Content\screens\masks\snowmask29.xnb

MD5 f2227f62b7adcc6b30688828e368708a
SHA1 34ba92588e3c38794312464fd87b6f4e299e14b8
SHA256 06b1a158955f0d48d94cdbf801ea810cfeb3f701e34f0deac45a76f39a5c9c34
SHA512 e53fe7153128f983289cd4d5f72ab414a73beedc63b508c3097df37505327680f44504115774e49b1b18ee313c84288a4b17d03b51fe9ce379c7a4fbafc9fbc0

memory/3744-2605-0x0000000000400000-0x0000000000556000-memory.dmp

memory/3744-2606-0x0000000003390000-0x0000000003407000-memory.dmp

memory/3744-2607-0x000000006B080000-0x000000006B08D000-memory.dmp

memory/3744-2608-0x0000000061080000-0x0000000061115000-memory.dmp

memory/3744-2639-0x0000000000400000-0x0000000000556000-memory.dmp

C:\Games\Jump King\JumpKing.exe

MD5 6b057454b1785417cf2ecb72012a4fec
SHA1 ddf411afa5cb702c3f7ff0956ab5c0fa40e486d0
SHA256 7f1c67a17903d5275337940b247ae7d7c6bf9eeedb70c975e496a2da200db40d
SHA512 6f030afa318c8e2ea1bf23218232b7c1bbf44e0549f28266192fe892a89682d3d061aa0bebbd51cf6654874b70cc1a22aa55c24fa5efea98bbd7bb8d9c0e281a

memory/6972-2643-0x0000000074990000-0x0000000075140000-memory.dmp

memory/6972-2642-0x00000000002B0000-0x0000000000356000-memory.dmp

C:\Games\Jump King\LanguageJK.dll

MD5 5b591ff81947b234b35fe3c3a0991ac8
SHA1 c3d767de915af0dd46822292e210b94025e7b151
SHA256 51a4e9ef96ca40a9011391730b5f40d9c7fa0b026d81b6c892887cff97d62b66
SHA512 22fca848a838dedb29203b4bc1f74e2c6e51d4b19d6cac252d6d9305d18a8a8eededd7bf150b785bdc55e25207d4a1e16c122e1f52130d613ac837c6d0ff8f7f

memory/6972-2647-0x0000000004C70000-0x0000000004CDA000-memory.dmp

C:\Games\Jump King\MonoGame.Framework.dll

MD5 879dc17b0038ee2422cb4fdd09c28cff
SHA1 3e3fe22085d7af405d53672fa221b7a3b2c89698
SHA256 95f10eef03dbe6c0f318fdb8930a1cbfcb8e7f5a8af4c6146dbd5c873b0359a7
SHA512 81cbfd5c044df21871a878681c2daf3df26463d93837e7d814ea5f7ad39572cbf6abc0ea21c613bc7440730961560ecc2edb34a513d38e03c2b5d4f0cfa499a5

memory/6972-2651-0x0000000005160000-0x0000000005248000-memory.dmp

memory/6972-2652-0x0000000005800000-0x0000000005DA4000-memory.dmp

C:\Games\Jump King\language.xml

MD5 0bf9a5a2350aac72545ecf1b1ae20e53
SHA1 1a91ed0b4a894e1f911fb9be6a474d1ee81289c2
SHA256 3da83aef5007c87bf37ba9e474422f61caae50f5e0fe9fe1d1e08e408178e5d7
SHA512 55547f196e8180de23d331c180d5c16369a33b5f89afaf6e7af848de01d3de68b7b0032e5e43d348d2535a7c7a56c77ea6a67e641ca11dd23db75b4ee642182a

memory/6972-2654-0x00000000050E0000-0x00000000050F0000-memory.dmp

C:\Games\Jump King\GalaxyCSharp.dll

MD5 541a6739b2c56e2ce6282a821f83b24f
SHA1 4a03010cfe0cb68c0f618d05376f981981436f79
SHA256 477e083c52f8424ee172a725f5a8171a245580e41fe57adfeed7915e29ce288d
SHA512 e112d4672bf69b9fe2a43e977a1c364422aaf957a836c1e3ad3658c99b285f8260a8cad851c1a667000aa509feab44d71552c67c6242a32bd053613572a78067

memory/6972-2658-0x0000000005400000-0x0000000005466000-memory.dmp

C:\Games\Jump King\GalaxyCSharpGlue.DLL

MD5 6da577c284a2201e91b1f9aeb26f33ab
SHA1 3c2fca9fb7885628af0c9894694cd65a72fb0005
SHA256 4f6ffdb4314d7139f49774e48fa46c0d5644617bd5a18f71b97a4826ae71edfd
SHA512 308f4b4475422943b779223a34292f3ff4b3e8a96a369e574e4f3e121292170749f7ee8331ba22a77c90630715d6b16c9353838e9f7e7c28d413d577de4c3dd2

C:\Games\Jump King\Galaxy.dll

MD5 78cfaad2d489067808c031538dcd2fa4
SHA1 0b473beff866fbcf5b0437fd96f6755360895200
SHA256 0078e38b0b49cacedf3110354fb1fa47d619f8ff05556a83ca5c6faeba4c1430
SHA512 cb61b45ce0d3fbf7c233f6927853ef0f98e02571569e2529653c2e03afd0325c67715750185e6beed01ae3461cf9c028ddcecdc7e7b5c862ab4439de3dbee84b

C:\Games\Jump King\Content\props\worlditems\worlditems.xml

MD5 c0830229823210f92739f6c9979d85ac
SHA1 a7c40682b8362bc0f43442940fc17994f0f35d19
SHA256 a414b7c4bd415355cbda5bbb6f131f8c8aeaaa91cba6d7b21148ca3dd9590d97
SHA512 341e7f3620e4fe6c682656c10800cd8a6ac29d5c6976388292058f541916f1d990362c98f18a8cfbd48e17b6d4bfbcd20e5b94b7e612cc672d2e5a1a841d28c6

C:\Games\Jump King\SharpDX.dll

MD5 ed3c047cdefc2da7d7a2435e1cfc3b91
SHA1 3cb1bcc6fd7f34b0cac4ae3e03ab9b18a29bfcec
SHA256 76ff554922da6a2d38085a231109398539264126e29fc9ebffd9e0d1b86212c7
SHA512 f40eb72a1ae578d5833d67f694208f6165786d0aded8b78731cf39315dec36cd766b62691a2c38af48aae1767a86b09ff092dcd897bef49e211ad0855a078b94

memory/6972-2669-0x0000000006C50000-0x0000000006C9A000-memory.dmp

memory/6972-2670-0x0000000006D40000-0x0000000006DD2000-memory.dmp

memory/6972-2671-0x00000000050E0000-0x00000000050F0000-memory.dmp

memory/6972-2672-0x0000000006CE0000-0x0000000006CEA000-memory.dmp

C:\Games\Jump King\SharpDX.XAudio2.dll

MD5 3fb1183cd4fb22752bc996cf6c96030f
SHA1 722b4c6d44f883055292eadcc33c0bfb9ff59ed8
SHA256 ef0742952ade778ea71d939de8163c354498e421f43bd4315076782a7d058b27
SHA512 e17e1e40c899dd882587e7618864139cb7d2458a2183545c2376068d8d2a707aa7068d4a8b591f23d204adc8e278f3b196b68ae0bc628ce6d6b00b242bd48689

memory/6972-2676-0x0000000006EF0000-0x0000000006F0E000-memory.dmp

C:\Games\Jump King\en-US\LanguageJK.resources.dll

MD5 7fd8986826bc71a305af8ad94f01ebe6
SHA1 fc1ef997bb48b16672977e16e0ba0f7e387bfa15
SHA256 be62422695ea4c6adba2a8091d411cc654fac0d4d1c838123fa50941dd520771
SHA512 c1dace09e5e1a3a548731f65c9781b9abf6b4c1e505ecb51069573824596fb5c420dbab27c8be58a541f2b09b307f1523f3c47c5a13411946447bdba86987271

memory/6972-2680-0x0000000007160000-0x0000000007192000-memory.dmp

C:\Games\Jump King\SharpDX.DXGI.dll

MD5 aa1dc8820e4f0d42d6f707ecf0ae1b3b
SHA1 4e3293ddea6c14156c65fc0a17a39aea8f259b0d
SHA256 a0813c69150661356588abcde98ee52ef9559e8cc4c9ff6b7a90df45a0844762
SHA512 d8279ac915d88baa280299e16b087a17c610bf38aa30248f819a6db8a2de7b561d4425f49321e811420f4eebae709bf661908bb786597afad687e471862abfbd

memory/6972-2684-0x00000000075B0000-0x00000000075D8000-memory.dmp

memory/6972-2685-0x0000000007140000-0x000000000714A000-memory.dmp

C:\Games\Jump King\SharpDX.Direct3D11.dll

MD5 ac572e67fd55a402c17431181ee715ea
SHA1 16feecca27008338ad2fd3e8f6307e4150dbf8de
SHA256 2c216761798af9ea3ee6f12df926d2cc811887c98c807232fa77cea4cb3bfccc
SHA512 a897c7de87a707fa5b6af15d8ba70b706902474093a9d767de2cab59bf98e563c14d94f684d07496ee6a986d82d9979d7c99e4c43da2135164fda30f3b56b3b7

memory/6972-2689-0x0000000007680000-0x00000000076CC000-memory.dmp

C:\Games\Jump King\Content\level.xnb

MD5 e7dfa4a96a89b4f97954d50e413724c1
SHA1 f0e4598fed26ca1879ce45be76dcf4eca4fcef47
SHA256 95d37854e5f4cda05e5eaef59f06a8774c56df7c09301e1bd93bafa182cbee6d
SHA512 16481eb5eab941a41504d668c3b03d967bfd6c681df311eedd0cc32288350f4e72dcc0d5173f2a56c639ad17ea80bd8ecad216c99da1df3e1415a86fd747e284

C:\Games\Jump King\Content\props\textures\old_man\lines\archaeologist_quotes.xml

MD5 09c5f7780bb4e59c97cdde2d8e51d242
SHA1 314c3a64a7342d0cb4873278c83868efb9ac85c8
SHA256 a498bcc75f600090bc1c6bdfd356c51425b06c69aef6d34a99e231e54d6f10aa
SHA512 655f8741fbeb37285a479a8e41439c0eeedda9eb2ddb8517ea1be54e671989737edab2d730ac3761abc2da4c26d988f524e0be7ced52e4fa7e3c637f340df606

C:\Games\Jump King\Content\props\textures\old_man\lines\fairy_quotes.xml

MD5 dba72129b960f04c94e70f807ddb983a
SHA1 a43a471c1c0ff362561090ce1ecd05efaf9fe61f
SHA256 53c4ea88b1204c5c71d4333ecb7ac0c880ba9e4bcbbf83ea1fa4d2627ab35325
SHA512 520adeba8443af914fb1091cccfa7ba06b06ee99a2464cdd2173c6ce49d4f307745e3d1a46cfdf8e3c97aa57b5570009539623cc111936dd4fcde322d8c9ae6c

C:\Games\Jump King\Content\props\textures\old_man\lines\fairy3_quotes.xml

MD5 58b4f2d07f26f054db15108947246c84
SHA1 860b9e3683d6a1b6fa411b5b813692a31da1005b
SHA256 4f20d8f538a32e32ee5ed4b5609530d4c3e40edcb7c25df2c084cca383d4a4a8
SHA512 ce2f2ba6adc4a6c675b13481df9e983381de676f0fac36f18cfcc12552ae9c2284be691d3d47284a2d0e8da3662558d1222fa98c60ffa8a6582abbf7891f02d1

C:\Games\Jump King\Content\props\textures\old_man\lines\gnome_quotes.xml

MD5 8b8914eb712a9db07ea43ea0859f087c
SHA1 fae2cbe96ed5f96241d9c93e11d5d1bbeb3549b3
SHA256 866f8462023d1279a86686e62e2229dd6f318d56971f15547d8a0695e127217d
SHA512 47233c734c1d8bec5964f5739dd34334a309782a9ee53c32727100ecfb338ea0360fc9af23d40a0de157523a544c9e4c945b44d99cf30e4045bd5f330a58d451

C:\Games\Jump King\Content\props\textures\old_man\lines\hermit_quotes.xml

MD5 7b50a47d56ab0df55856e36945ce5e50
SHA1 c2448f5965edf2b3e598c9205d364d27ed9d1a0c
SHA256 cb40336d32c20a6812afb23bf4b26827a01fc966035f1dca681b12f662c3df22
SHA512 0c3dc2c51188448f9189f5d7a7c39dc48a37f0daaba4a3192e6e29ced8104ac110f6396d4255b41cda581889915186ecbbbe3d9e21db1caca3578af94d9e3bbc

C:\Games\Jump King\Content\props\textures\old_man\lines\fairy2_quotes.xml

MD5 e62631b14ec06b24aa8fc1243e0d055d
SHA1 6bba06ee78b524f149e913ce91d2c17f3f8177d3
SHA256 fb79e18b59fd46613703bf8a70ac463cf8ad7039f9b4af6d92d71116b9192839
SHA512 4323becad2efb010cd6fda20a14dd15fa1af087424bbd3b1340f992c0d61f68c2f6d0fbca02302b9784c0373abed11c1b8a206afe27a08c2c1a6f5b35f6e0620

C:\Games\Jump King\Content\props\textures\old_man\lines\imp_quotes.xml

MD5 abcfbe2fa25d32625c4eb2216076b976
SHA1 d60b12bc4a8a2655be7e4caa0186f5468a3c4712
SHA256 59fba2612951430c14f75759317d7fe3f073146f7927a8d9cd1c336e2d6ecd78
SHA512 569492644b6e6be8837f9e0e48cf9ccc476eaa67ceccd7ac8ab17ace5c05c5eb77b1567425a002ad706ec9e8e8cf785fdc503d31fb6e72e56d24ff69277b09e3

C:\Games\Jump King\Content\props\textures\old_man\lines\old_man_quotes.xml

MD5 736f60797fb3666eb15f09bcaf36626a
SHA1 91b13b2ac221a5351751783da771b282ecedc01c
SHA256 12c425acdef2b54944182875ab51abc071598052604c1d41a4b9af885a286914
SHA512 e7f8418f4838da4738ad5d03d5a64ad44fba61593f2dd5fa27473174233fafd382b35289c4a95886af70d5d9dec97e8d295e0ff7f75929e6aba67117cc13e2ab

C:\Games\Jump King\Content\props\textures\old_man\lines\owl_bogman_quotes.xml

MD5 a21e6a90197b6e00d3a5addb589f4b06
SHA1 d2af4c0a7da6cd8e00f2b99efda18c2e88abfd84
SHA256 a5d8108a5b92eed775c3007a5749a6c51cf27882acc5e72b4c0c1c05e1db151b
SHA512 48f20554429eefe53bf0a236332ebf651c2d94433f837d221a7491e61e54d1338ea8e2df1ce88b48adb3eed7943013424826948b5b927cf72c4d82d8947501d8

C:\Games\Jump King\Content\props\textures\old_man\lines\owl_cat1_quotes.xml

MD5 5858dcc213b1ee20d7ee49fe0b4cfb9a
SHA1 e78f994aea567b46d9f9e9b5228f6fef71399578
SHA256 707b9324b6700afa06d01290aaed0f93e8c448e7ff7f440e7d9e7b0a18ee6413
SHA512 c92fdbb457e2f287a00b014075a664860e09ee2227bced25ecf40c2b5ee69bea079c887dcf565dd32ef9d6b6ea243848a562691f0a7679666ac1d847c13eeaf4

C:\Games\Jump King\Content\props\textures\old_man\lines\owl_cat2_quotes.xml

MD5 cec7cbe07a06a3a6aa123df08c92fbe6
SHA1 5e9960b29e7d46b641686261b27a74dd1f8330a7
SHA256 e8e561f923c9baae673d0904f488c3992f0e2cbf40c2ac046d9c26bb9b397f35
SHA512 6dd1de27c476ad4685972b973b1546b04ebc56b9242558b25e3761a02831ac6b52ae8e297a93a144a260c9e7e564d7216901609671a7c36de3859cb2541b6cb0

C:\Games\Jump King\Content\props\textures\old_man\lines\owl_cat3_quotes.xml

MD5 02b09b9fd876ce87cd664469f7477e42
SHA1 4eca28302c2700b0b6bef1800b73120f31e854a6
SHA256 00a81eec7a5602590e665977edaea592c5e7b30dc2e371a497dfd5ee42f31053
SHA512 735e10dabf232aa69a389e72e50f390479607a3df243787b6b574fc5cda78e4f68cd700781b25880e79103770e00e5c89e66e9418cb30118fa5f93d5181ba080

C:\Games\Jump King\Content\props\textures\old_man\lines\owl_cat4_quotes.xml

MD5 f64198e350f4f3e70f52b1c50d0acb8c
SHA1 7301ecbe1993462e60aff52743e443e0deb4e335
SHA256 0401d499bc83e2ccf5cabb1df548d8d1a2917d310031ffb1b68b953c1fe9f4ff
SHA512 d8d0fd317596ee2d922eb1c02f98ddef34cdb5eac02ed7c2c5dc3e7443e6d4ba098a312669a7d66e26107682a8d8210f9f107f8818cb04b4c65daa7e921fec0f

C:\Games\Jump King\Content\props\textures\old_man\lines\owl_cat6_quotes.xml

MD5 ab2680b0d5582d54c91a7897f72bff39
SHA1 977af11a34fddf5497878d16cb5993ee71f1ee5a
SHA256 ee66223816613b0dd6ce9077a6709c3b69873c2197962816cca5b975da05d17e
SHA512 305c4f97ffafa087777a35236223202a4d10c4e55e4c132dc7391aa8204089c433788d704ede6bbde56c7814446bb1c44b1be3e7ffc08c72ca697759d7176b3d

C:\Games\Jump King\Content\props\textures\old_man\lines\owl_cat8_quotes.xml

MD5 000c142968de601d8de998e919318907
SHA1 e71c40c003245d1ef35ff94509612fd0070f12e2
SHA256 6feaec2e27cf2c0dd6e82be8c6200a8fb14e04fe78d9d533a3a9dd261eb16d8d
SHA512 0504b46b7c68f7b007a1a0f5ee7d7b40ee8a7099d21bcf51231ffcbc89610f14cfbc7e56f1de99195d15c122879b60897a401e137b6e90581144eec9e7b5651c

C:\Games\Jump King\Content\props\textures\old_man\lines\owl_cat7_quotes.xml

MD5 453b579d6dfc8b0f6ad8b9170bf64387
SHA1 618079bf1d4295b17037b14797a74e8d20ea15b2
SHA256 98980f3224e582fb88be0aa85405c931e696916e11cf7b6c61463224c1201018
SHA512 05ef61009816c7bdfc9eb0d854fa3dac39fd71ee3a3b2caf04a5a54986274d6200e4840c42c9edcf1fe1a0e853e89d7e6487b1e4a204f3eec6535bbfa42b1f0a

C:\Games\Jump King\Content\props\textures\old_man\lines\owl_cat5_quotes.xml

MD5 815b4ad30e546323abccbe4904c99f08
SHA1 6186c222b65eb9b642f620a4e9c46f37c1b2eee3
SHA256 3ae29d4a1b2c6cd8dc1db855f6b0e31d0a561bf9126e31229196540061b71c1a
SHA512 d3870ba00adbe0befaf2037253f136c27d396dbf2b7a1f057e0873268af3400de53c4c270904fa923d06fc4d4e5c7626b9d38451d3b07166c12d39fc5024d2f5

memory/6972-2708-0x0000000021700000-0x0000000021A3F000-memory.dmp

memory/6972-2709-0x00000000216F0000-0x00000000216F8000-memory.dmp

memory/6972-2710-0x0000000021A50000-0x0000000021A5A000-memory.dmp

memory/6972-2711-0x000000002B160000-0x000000002B168000-memory.dmp

memory/6972-2712-0x0000000074990000-0x0000000075140000-memory.dmp