lumma | cc8e8b89706cff92887a171672f98cd7c403830a401c08c61763182db79c492f

Resubmissions

28/02/2024, 12:37

240228-ptndksbf67

28/02/2024, 12:30

240228-pph83abe4610

Analysis

max time kernel
264s
max time network
271s
platform
windows10-1703_x64
resource
win10-20240221-en
resource tags

arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
submitted
28/02/2024, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cs16_v43.exe
Size 262.4MB
Sample240228-pph83abe46
SHA256 cc8e8b89706cff92887a171672f98cd7c403830a401c08c61763182db79c492f
MD5 1db75d558351403bbb3359c154a0ed83
SHA1 1e4a84dcda1f481d93d467d31660cae8baeb2416
SHA512 1ebdfb09fcea43f8d11615bfec82d43a881739876e2edb03560fddf46c435e2127d211c32d25dbebb87af96dbd1ef686eb29f5390edeb909268b740883f7191a
SSDEEP 6291456:k2PX/RWrd42KagyvvpjlzrR35gdU7e89AubOizpvyb6Bfhc3+:kwsrd4vagwpRV5gd4KizFyeBfW
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lumma bootkit discovery persistence stealer

Malware Config

Extracted

Family

lumma

https://sermonundressolcow.shop/api
https://technologyenterdo.shop/api
https://detectordiscusser.shop/api
https://turkeyunlikelyofw.shop/api
https://associationokeo.shop/api

Signatures

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1990815831-2007029909-3877453929-1000\Software\Microsoft\Windows\CurrentVersion\Run\SteamServerBrowser = "\"C:\\Users\\Admin\\AppData\\Roaming\\SteamServerBrowser\\SteamServerBrowser.exe\""	cs16_v43.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-1990815831-2007029909-3877453929-1000\Software\Microsoft\Windows\CurrentVersion\Run\ProductAuthenticationService = "\"C:\\Users\\Admin\\AppData\\Roaming\\ProductAuthenticationService\\pas.exe\" /nogui"	cs16_v43.tmp

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	bcastdvr.exe

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	hl.exe

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 6632 set thread context of 6400	6632	Instal_ler.exe	164

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 2 IoCs

description	ioc	Process
File created	C:\Windows\rescache\_merged\4183903823\810424605.pri	taskmgr.exe
File created	C:\Windows\rescache\_merged\1601268389\3877292338.pri	taskmgr.exe

Executes dropped EXE 6 IoCs

pid	Process
924	cs16_v43.tmp
2600	SteamServerBrowser.exe
4172	Counter-Strike 1.6.exe
1284	cstrike.exe
1796	hl.exe
6632	Instal_ler.exe

Loads dropped DLL 31 IoCs

pid	Process
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 1 IoCs

pid	pid_target	Process	procid_target
592	1796	WerFault.exe	79

Checks SCSI registry key(s) 3 TTPs 11 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	GamePanel.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	GamePanel.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags	GamePanel.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags	GamePanel.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags	GamePanel.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	GamePanel.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	GamePanel.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags	GamePanel.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133535971524328825"	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1990815831-2007029909-3877453929-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1990815831-2007029909-3877453929-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1990815831-2007029909-3877453929-1000_Classes\Local Settings	OpenWith.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	4	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Suspicious behavior: EnumeratesProcesses 49 IoCs

pid	Process
924	cs16_v43.tmp
924	cs16_v43.tmp
1796	hl.exe
1796	hl.exe
1796	hl.exe
1796	hl.exe
784	chrome.exe
784	chrome.exe
5828	chrome.exe
5828	chrome.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
6404	7zFM.exe
6404	7zFM.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
6404	7zFM.exe
6404	7zFM.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
1796	hl.exe
6404	7zFM.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 46 IoCs

pid	Process
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: 33	1528	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1528	AUDIODG.EXE
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe
Token: SeShutdownPrivilege	784	chrome.exe
Token: SeCreatePagefilePrivilege	784	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
924	cs16_v43.tmp
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
784	chrome.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe
5784	taskmgr.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1796	hl.exe
1796	hl.exe
5836	OpenWith.exe
5528	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 748 wrote to memory of 924	748	cs16_v43.exe	73
PID 748 wrote to memory of 924	748	cs16_v43.exe	73
PID 748 wrote to memory of 924	748	cs16_v43.exe	73
PID 924 wrote to memory of 2600	924	cs16_v43.tmp	74
PID 924 wrote to memory of 2600	924	cs16_v43.tmp	74
PID 924 wrote to memory of 2600	924	cs16_v43.tmp	74
PID 924 wrote to memory of 4172	924	cs16_v43.tmp	77
PID 924 wrote to memory of 4172	924	cs16_v43.tmp	77
PID 924 wrote to memory of 4172	924	cs16_v43.tmp	77
PID 4172 wrote to memory of 1284	4172	Counter-Strike 1.6.exe	78
PID 4172 wrote to memory of 1284	4172	Counter-Strike 1.6.exe	78
PID 4172 wrote to memory of 1284	4172	Counter-Strike 1.6.exe	78
PID 1284 wrote to memory of 1796	1284	cstrike.exe	79
PID 1284 wrote to memory of 1796	1284	cstrike.exe	79
PID 1284 wrote to memory of 1796	1284	cstrike.exe	79
PID 784 wrote to memory of 4996	784	chrome.exe	92
PID 784 wrote to memory of 4996	784	chrome.exe	92
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 2756	784	chrome.exe	95
PID 784 wrote to memory of 5044	784	chrome.exe	94
PID 784 wrote to memory of 5044	784	chrome.exe	94
PID 784 wrote to memory of 4224	784	chrome.exe	96
PID 784 wrote to memory of 4224	784	chrome.exe	96
PID 784 wrote to memory of 4224	784	chrome.exe	96
PID 784 wrote to memory of 4224	784	chrome.exe	96
PID 784 wrote to memory of 4224	784	chrome.exe	96
PID 784 wrote to memory of 4224	784	chrome.exe	96
PID 784 wrote to memory of 4224	784	chrome.exe	96

C:\Users\Admin\AppData\Local\Temp\cs16_v43.exe
"C:\Users\Admin\AppData\Local\Temp\cs16_v43.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:748
- C:\Users\Admin\AppData\Local\Temp\is-U304Q.tmp\cs16_v43.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-U304Q.tmp\cs16_v43.tmp" /SL5="$60208,274388154,278528,C:\Users\Admin\AppData\Local\Temp\cs16_v43.exe"
  2⤵
  - Adds Run key to start application
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:924
- - C:\Users\Admin\AppData\Roaming\SteamServerBrowser\SteamServerBrowser.exe
    "C:\Users\Admin\AppData\Roaming\SteamServerBrowser\SteamServerBrowser.exe"
    3⤵
    - Executes dropped EXE
    PID:2600
- - C:\Gry\Counter-Strike 1.6 v43\Counter-Strike 1.6.exe
    "C:\Gry\Counter-Strike 1.6 v43\Counter-Strike 1.6.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:4172
  - - C:\Gry\Counter-Strike 1.6 v43\cstrike.exe
      cstrike.exe
      4⤵
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:1284
    - - C:\Gry\Counter-Strike 1.6 v43\hl.exe
        
        hl.exe -game cstrike -noforcemparms -noforcemaccel -steam
        5⤵
        Writes to the Master Boot Record (MBR)
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: EnumeratesProcesses
        Suspicious behavior: GetForegroundWindowSpam
        Suspicious use of SetWindowsHookEx
        
        PID:1796
      - C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 1796 -s 1412
        6⤵
        Program crash
        
        PID:592

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
PID:4460

C:\Windows\System32\GamePanel.exe
"C:\Windows\System32\GamePanel.exe" 000000000009004E /startuptips
1⤵
- Checks SCSI registry key(s)
PID:4744

C:\Windows\System32\bcastdvr.exe
"C:\Windows\System32\bcastdvr.exe" -ServerName:Windows.Media.Capture.Internal.BroadcastDVRServer
1⤵
- Drops desktop.ini file(s)
PID:352

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
PID:1088

C:\Windows\System32\GamePanel.exe
"C:\Windows\System32\GamePanel.exe" 00000000000A004E /startuptips
1⤵
- Checks SCSI registry key(s)
PID:812

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
PID:4604

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffcaa369758,0x7ffcaa369768,0x7ffcaa369778
  2⤵
  PID:4996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=488 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1528 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:2
  2⤵
  PID:2756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2096 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3000 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2968 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4448 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3992 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=3180 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3096 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4836 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4960 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4644 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5896 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5356 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:2772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1040 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:3432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=6404 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=6636 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6876 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5492 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=6484 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=2640 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=5500 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5768 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=4828 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5636 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=4864 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=6040 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=4760 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6048 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7616 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:5392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=7956 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=7384 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=8216 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=8120 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=7812 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8184 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:6088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8184 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:8
  2⤵
  PID:5636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7436 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=8276 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=8280 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=8204 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=8288 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=8532 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=8708 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=8764 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=6172 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=7628 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=8336 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=4980 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=8592 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=1652 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=8480 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=8132 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=8608 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=2392 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=7764 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:6720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=3228 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:6748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=1448 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:6828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=7316 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:6912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=9852 --field-trial-handle=1736,i,4518025327823941482,5419966296793701681,131072 /prefetch:1
  2⤵
  PID:6988

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4676

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2f0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1528

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4604

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5836

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5528

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\Easy_se_tup_2024.rar"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:6404
- C:\Users\Admin\AppData\Local\Temp\7zO4097A80A\Instal_ler.exe
  "C:\Users\Admin\AppData\Local\Temp\7zO4097A80A\Instal_ler.exe"
  2⤵
  - Suspicious use of SetThreadContext
  - Executes dropped EXE
  PID:6632
- - C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
    C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
    3⤵
    PID:6400

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SendNotifyMessage
PID:5784

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CSXGuard.ini

Path C:\Gry\Counter-Strike 1.6 v43\CSXGuard.ini
Size 7KB
SHA256 c8ed6d741383ac80426a50876a1210d01f4d9ca80f5a0957912f77127d25f7ea
MD5 d5dd271773cfdbd9d8b57210347252b1
SHA1 edd2a898844ed692cd6cf47130e5d1ac5d59695e
SHA512 5e6effdae33ac1e4b31c855508f572c58aef41aabb2871164c65ba286bedb0959c2f7bde9e996c97422b38e536946f089a9b776260268b41ae95a0263a43c5d1
SSDEEP 192:SqvXjExlv6PAYBxUKUdNaVZllRRUenDavBqLwyIRCgOdxqLQ6FnM:7vXjExlv6PAgQNmbRjuvULeCgOdx2VFM
MD5 SHA1 SHA512 SSDEEP

Submit Download

Counter-Strike 1.6.exe

Path C:\Gry\Counter-Strike 1.6 v43\Counter-Strike 1.6.exe
Size 141KB
SHA256 95f1347f8d87717d543494bb52ee2b45409176fed45a05a69209df4aa96d578d
MD5 3d0c57f3c84f13c208ed673fe2945318
SHA1 f7f5572bfe90c4e2edf3ec7bc25ccc37b78eb545
SHA512 81284876aaf809091e703dcb81e6b38ee875cb22ec48591764d2c42667c78828fd6bf1f7ea3e2c146eada3b9ca055fdef00697f4913e7cb53c1e67672419ea39
SSDEEP 1536:WNOSw5Ht3hstRAfgKct3X1/ev2KiuxZYfZgfv4YwwTVkoUX82+:WNOdxs4oK4HVev2yOZg53UX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Steam_orig.dll

Path C:\Gry\Counter-Strike 1.6 v43\Steam_orig.dll
Size 2.8MB
SHA256 2b8bd1039f80f13de0398a697cc573b582fb54ab4975d2b4d5fb99ed36f847ab
MD5 b4366ceda39b272baff2e6e1278177f0
SHA1 c160d8b08e7f1f30c09ab2dbaa35794b79e423ea
SHA512 46e38a805fac4cc2e096b6e1f4b8a3ea30624e7448fde3ccb0775ea4742cbe574bb0b5c9fc967224d1c3d4de7c0b9147cfdf1967136fe67951f766caa72d0932
SSDEEP 49152:YFNTBgESjll+2D7W50bfDJVUFSBZGCaCW0:sNTBgTjm2Da50bfDJVn
MD5 SHA1 SHA512 SSDEEP

Submit Download

ServerBrowser.vdf

Path C:\Gry\Counter-Strike 1.6 v43\config\ServerBrowser.vdf
Size 191B
SHA256 85743aeaef76a4dacd42d68236a1c17c89f444f364b9444131b8cc3c75bc7f8a
MD5 1a4a3f3c5820e119188c46d3b4b8f0c3
SHA1 06d8bfd91471a50c83dd540aec3dffcdf3625de1
SHA512 9c572358f498e89e8f864ec412abd929cbe8a8a88070b3d544dad8a2c821e94fb9fd43eadbcd8655050cf7a38dec67df1262b63253f04b7626908046e52426b8
MD5 SHA1 SHA512

Submit Download

rev_MasterServers.vdf

Path C:\Gry\Counter-Strike 1.6 v43\config\rev_MasterServers.vdf
Size 251B
SHA256 0fcb7fd0ff8d98597d2555b1e572fe8f0ee602115495222cbd4b1ee09ebdcf20
MD5 73f206fa1edff4eab843d6f6509f1c46
SHA1 7f00a7691394bf0594b2a7e552c4cffc1f198a4b
SHA512 bf668a83cf6417e02b53b4518c8bbfc233cb5577bb5e61dae0fc8434fc8e723a0a5d9b0cdfa0568a4568c71a2ea76d147b5ac22629c678f42cf7711961fc06ae
MD5 SHA1 SHA512

Submit Download

cstrike.exe

Path C:\Gry\Counter-Strike 1.6 v43\cstrike.exe
Size 208KB
SHA256 a60380b02cbd704e9499cef476915c31e163e0f0800c85fd1f7c1f377b2e893c
MD5 9c1813bf016e9fc1fd59647e1d3067c3
SHA1 091357e58c7103407d3959f0d385f19691bcc27b
SHA512 bb424f684f9e61ab0bc026275436785aa0efd52bee36c5c554146e9dcff8dfefcccaa36b1274efce32cb9b9b6b2181aa17106b428a7838951ce99fd7c33a92e7
SSDEEP 3072:7a+/cxjYHn8oJqhdziKmwvxtm9P9mmY5IdOTAU5aHYc:lSjYHnPYf2B9mmVd0AU5Pc
MD5 SHA1 SHA512 SSDEEP

Submit Download

TrackerUI.DLL

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\bin\TrackerUI.DLL
Size 196KB
SHA256 f2542611f0f7df02533105aa0af1cb3a45bd15978b2c291c0d84c0ac70ae7abb
MD5 606cf05b49429e61ebb04eba4c8eb61e
SHA1 d51d50a4a45cf3d6288e112aba279d7b19251e75
SHA512 b6e68b28db788e4035a9d474315430e0b3c383630f0a3c7440e9c4156c823cbebddecda5ecc814df3c3c7d62750cbbdca3510ba6e69ffda683295fd8b502da23
SSDEEP 3072:NHTXBSudFAfzxycAAirA/rXbOxAUU6oCVnA:hBtFAfzIitbcAUU6oCVn
MD5 SHA1 SHA512 SSDEEP

Submit Download

GameUI.dll

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\cl_dlls\GameUI.dll
Size 825KB
SHA256 dec177289c8da8e4fe362911ca436bee1caff67f6cf0d1b3c53f401d2300236c
MD5 8d7d7d90e7a12480224bd1f8e29358a8
SHA1 e1f53233c9bf1adf25e697d0e3dc33b1346b19c0
SHA512 f50b532556d9a522c554b0740616d07642eda17d1073f98d25942becc644344780544a7476af70ecf5edb1b3a11f7c10265b11d15c731a37ced653b383e364ad
SSDEEP 24576:jS6/WAXyjzg1UuakASe87AKoXtLmlBG99:3fCkv89D
MD5 SHA1 SHA512 SSDEEP

Submit Download

commandmenu.txt

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\commandmenu.txt
Size 7KB
SHA256 59399ba2418e0c78981317c66cda47d232797dd9c9e164d4b6c1f10b9269907b
MD5 12555313f55cb9fd5c685e0fd764d881
SHA1 f4bc44bd9f8a9c72f3db3eb1a181b83b139951d7
SHA512 9485f0273dc613708c92ef6b820291db6a984c9a00995ecc757cb739441f95d66c09790f46539b91a6ca4266b8c38fa5b5be16dd37b1ba10ae0ae61ce751ded4
SSDEEP 96:KHuuiBNT7OdvMfdf3hyGZQQrKe+kqV0cdyHL0bBSPHmIJtFwV2O:GuPV9ZQQNFE4r0bVvV2O
MD5 SHA1 SHA512 SSDEEP

Submit Download

elite_left.sc

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\events\elite_left.sc
Size 11B
SHA256 2092e6c9862b42fe817a552f0ecf05a58a2609b2424402404a796c325bdf2098
MD5 e41aa21f57500b1b71802b76fcaaecd1
SHA1 554eaebf267f8aaceb4e9b18e28dfa5131168a09
SHA512 4c2b2e183bb68c16b383532aa03d5dbaebebde35b843ff442b84f6c9dba655868e7e7ba76b5b92d003db1ac73ebdd2aed5933595b35d073c702b1e841d94269d
MD5 SHA1 SHA512

Submit Download

is-0BE98.tmp

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\events\is-0BE98.tmp
Size 9B
SHA256 89a0f0c5f04ea6da99b4a48fb642b968d32350aa3e6697da24d2736b7bb195d0
MD5 d14f11b47b92d829b6ec4912ca7349e8
SHA1 86b8dd77a055a3d1d154022492ed7d7e4ca371a5
SHA512 f19f860c86297921b972338dd0ee73241b3b822d1b9d977cee39e45891f1d57bf144cd676eb2e7e35985969613dff0896473dd8e89ad07c66e79ac94510fb5d7
MD5 SHA1 SHA512

Submit Download

is-NMQSG.tmp

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\gfx\env\is-NMQSG.tmp
Size 192KB
SHA256 cdf4b2c96b5d1366fecdfa2aa764fcfc8d084bc5a682e2a10c41a03ed3ed3661
MD5 9eda1bf021904ceaf1a8c50a76741eb5
SHA1 38f004101eb47ed0dffff757488263d9a2523bbf
SHA512 aead546626ef7dc5a75348760b26f8e187a61b62c7a0a49bda16cf68b280749dfbc87974d05201dcefe6b4fd89401c3537b4f179f3ac5bda161066ae3ca0efbf
SSDEEP 1536:gdmeBZl7MEBhAshek3cqldNQ3BVSSVeZd8z76sMsm8cTVgOidTwUTjE:8BPMEjAycqldSTU2hwUTo
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-1RCV0.tmp

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\gfx\vgui\is-1RCV0.tmp
Size 128KB
SHA256 348584b23c63388045342dc0b79bdd37a8cff904a84215c386492e33273ab725
MD5 1f10813901e2bd255a5ae21026de8b48
SHA1 03a1f78e07952f1876dd431ba4406b534435b920
SHA512 b3fa7d1c675c4ae53ebc506d39234e166392bf6a0f6fa651b4c1a19240915f2423c9b150ccbe429159cebc0fa92135a9940cbfc8c79fa9fa3b353580f93342be
SSDEEP 1536:Em65yVO1XfVQxgauMDTRrUR5J2Cwj1CTetPKzZ2Zz3a0:E7WO1sBFQR5J2CoJPKzZ21R
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-PQM5U.tmp

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\gfx\vgui\is-PQM5U.tmp
Size 128KB
SHA256 4a2460747b60d4b5843bf22a459f6c17f16a9664305b4b4bda182041a0fdebfa
MD5 8c3ff438e747a73255ddb8c3ccbebbc2
SHA1 e81ddb67229feefece8cc5ff4d1b12c4b75cc103
SHA512 869270e4c6adbe4e914c07bc459a7858c50988ede0e75a02ce51a18080f9ba4bc4c483c4ee646e22fed948dafe388e7b908f58b09528b93eb1a87ef57a278b62
SSDEEP 768:PhpIMAGsvAVj3jmjkr6i95HxU9U3T1hWLLm78MLo:brAGsvAB3K06i95HxjphWPU8
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-SN36E.tmp

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\gfx\vgui\is-SN36E.tmp
Size 128KB
SHA256 9d8e087dd823e63f7009907ff1761e620dc5ee64db6a527e2d0ec830d4152437
MD5 13b3a5cf4af8f97cd8a8328ef9952b7f
SHA1 253105b008a8ce333a64f5a66e4b2da0e3a3cb52
SHA512 77f76cb9bb4edadecce9bfcd05031e1def1f4b967b58d8078bb9e6c3b03e3db9917bd2a77314553fb8ee233981683e9b0bad5af30c094344350ad2a1dd034667
SSDEEP 768:s4hW9iYudv8jyqZH+W9N5EZ8ovtp34b+jJ4wGKHE:thWnjyE+M2Z8oVCbehGCE
MD5 SHA1 SHA512 SSDEEP

Submit Download

liblist.gam

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\liblist.gam
Size 315B
SHA256 7bad8ff9ae10dddedf709f728c1709105c948aaec708be7dff74c614c5750be1
MD5 09d196dd55a78d8d2dc64d6ec6657071
SHA1 fa9480a66515e865a2620c53bff8fb99ade2ea8d
SHA512 548fd47a650787880210479a39425d5d7032ac71d4a3d4391509f3a1b6ea12b03ead134de061e659604ab88ab90d6e619d0caa249fd54abd74679e1a0de52c8c
MD5 SHA1 SHA512

Submit Download

GameMenu.res

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\resource\GameMenu.res
Size 1KB
SHA256 eb934b08099c562b84bb533380b206610b3eccfaf4587d71a5ef175dec4631e2
MD5 78c6ea63d22aec2802f985bf26348113
SHA1 bef9880e34aa75f708ae5da74799cdb8502a53dd
SHA512 1678072645b87c3669f3b667ce7fe9bfbc1e22cdbc30351229d0bef8f6dfc3534b2d65b3f826d742aa70224b581660ce8466c4831d079e8ba81922343f3239ab
MD5 SHA1 SHA512

Submit Download

LoadingDialogNoBanner.res

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\resource\LoadingDialogNoBanner.res
Size 1KB
SHA256 63ac1c7f0b7d0d73668df220cc22c9b7d18ec505aa8007505a6d9923b7e5c8c5
MD5 a495a4afb542e78ff4ba0ba8d54227b3
SHA1 026453abf705437eb63cc6fcd3d0edfa3535e1c0
SHA512 e4235d17a07b1eca759aeb8155f5ca553f0778c2ed3766a51a6158db720d33a8ff2b470cee02e73c286d681cbf878016d43c6657ed2732b58a4a6bdb8eb0b814
MD5 SHA1 SHA512

Submit Download

MOTD.RES

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\resource\UI\MOTD.RES
Size 1KB
SHA256 ae995b068cde415df6b34b5629e07ca8764f24d659dd32f15f5756773a08773e
MD5 6ae8af240f3340c9ca31866a8d827329
SHA1 430e1f9ad405b45b418b80016639e14d5049afa2
SHA512 e072597fa180356014f7b11206d93fb7201977f5aa713c52cd34c1c4838409fb31592a23ee5e0e48608fe3d0821d852286d51f4ef8b99ab52f629ee2c6bbb620
MD5 SHA1 SHA512

Submit Download

banner.tga

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\resource\images\banner.tga
Size 55KB
SHA256 85c82662b8b4d53de08e4a72a842d253a1a22af48de67b5a6241fafac14b8c40
MD5 ab11ee3d0f953cb542ac0f1854ff83f2
SHA1 2760048cbdb168a6c67895a487d043af39009e14
SHA512 2e0df3ee4f46420e8383c2b069c21db99282df53e1312286409c99900f8069dcaaf3e3a26cccbbd1eae5637e92ddbb4e9e270c763e0ddd54d4ac0bc6f3806d46
SSDEEP 384:TCd6WpmELIUde+KbPwzor6EE0635062706g0D:Gd6WpFIUdn+PwMr6EE06p062706g0
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-KP61H.tmp

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\sound\weapons\is-KP61H.tmp
Size 10KB
SHA256 ffdaf0a862ce1f47615dc1ac59af868010796eeef50de895414c40a04da3680e
MD5 7e7c4656f8ef80a72ef0d1e41317f511
SHA1 775a6ec4f092b3e8bcb59c21787ef33e9237ae48
SHA512 a257ce57532a8497f8df5860ae08729c78f90477f0b96264f2f98dc31ee034ec2679ace4ddf1ed4ad14ba08170354fa00e984e2dae4a17491fb5f8b7e009391b
SSDEEP 192:B941EgsqWfLeZKuSJwIMcm/CXxo8KZ5JG0XdOsUmFDH+Y13f5WqGeg7oL:kAxewuFIMrChU5JpOatV9GHo
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-KQTC0.tmp

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\sound\weapons\is-KQTC0.tmp
Size 14KB
SHA256 2ebbea31183105b5d305027e960bb89dc2e2582b81ba712b01b1851501b6092d
MD5 2876bbba2adae9cf3456ea95a2c0b546
SHA1 737a3eff26b380e189ada33a028f63d75b8f0e8a
SHA512 5423d77697905521a1718b2209a7e29fc34c94f481bf093f2ea45c3c43eb9dfce38fc8c87802c221a1813c582b626fd84446540178cba918d8e021d1b4b5dcfb
SSDEEP 192:6HhMzfRfWk6FAFPeBaDfa1VXnQomfNVDCyorb/WiiJjrG:6H+zfR+kMeeBofa3XnQX1JvorjWdrG
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-U7HF5.tmp

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\sound\weapons\is-U7HF5.tmp
Size 7KB
SHA256 616e07c58c0d3d332c3c7fe65c1b7e6ef49d5c26d09d8132d1e7c36c3899ea46
MD5 3d352efef15d6f7019168991cff7cf32
SHA1 10030aa93a41d80b35d39e59dda86e4c164f1a5f
SHA512 bc51565450631d2954c0736c7899aa7111aa1584b0cd20ad239a765662d5935aec7fc7b33f3fcb2d43e5a69b1a9c9728a63a5a82134ee4dce7740cfa22e9480f
SSDEEP 96:Te88ynrOmWsEnIZ4bQJyO7HjzqHm8KcW2vILlbFcx0jTAbmvllqVmc/2R3J:0yqmWsUIZ4ULDL8VILlbF00j8PVB/iZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-3T0DH.tmp

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\sprites\is-3T0DH.tmp
Size 361KB
SHA256 aae249f31605fdf3773d0753764dd4865873dca48a58108579923af755122fe5
MD5 324aa00f639ff5f9cef8797a1f862ceb
SHA1 38d8564d31e700625ef0ce35cb681f5a6a34e070
SHA512 d37195b2033c064cf1396e02f9e01f63399196c4de290b0630cb252bc54f9685be98431d0df3ab3c8239b9a585373ae21c224d04d713e20e2b4d21b1720ef34b
SSDEEP 1536:cYzLE8p6PSfXpNRAsuBxCkWUm/ecPmuvul0zNALxMkeEKDhvGHIlb2nYm1LuOiOV:r4pJePExS+Tmap4MWE+IZp
MD5 SHA1 SHA512 SSDEEP

Submit Download

userconfig.cfg

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\userconfig.cfg
Size 554B
SHA256 75644c9e0fa3e9090e86f9edf0ee7a7ab7e4007196ea6547c07c144b72173caf
MD5 c198f92e40da62f2c84f1d92fdfa66cb
SHA1 cc652d0ca9a09ee7c566ffc8783efc537b28119b
SHA512 1e465a0f96cd4c897864494fec3ea287c294840b67002c8349ff1ddfb1637c8bcb25ca345170a8e777165bb98d7076bedc4a969607e37dcc177f3a5a60fccb52
MD5 SHA1 SHA512

Submit Download

valve.rc

Path C:\Gry\Counter-Strike 1.6 v43\cstrike\valve.rc
Size 324B
SHA256 bee6db7c2c0ec69b6b4d9bec43d7357279c3a14117425dddeee89afb38a15506
MD5 22e7b0de3e03ce1067df3feac74451ea
SHA1 aa9330835747834332a32c3b9a1d8292b95ab603
SHA512 711ae557e32bb4bca60591386ecb3e867c8c701d021a544480866ce5f6d9873303c56c4f168a36eff6aec0df51427ac3a9d72e2909aa74c7efeccba9263e2d85
MD5 SHA1 SHA512

Submit Download

filesystem_steam.dll

Path C:\Gry\Counter-Strike 1.6 v43\filesystem_steam.dll
Size 120KB
SHA256 dc9bfd575a29abbe1d542ce41143f388cd56b2280f25af64c1699b43a04c1125
MD5 18d55998df6a48193499f859f8bfebd9
SHA1 1ee59996d6ca8eec43caa7488bcec58c7d4ba5f3
SHA512 b3818e7fea8d2042466774ecd9c8f2bee6444ecfb0f7f56e73e9c9854c5360969de39501e5439bc50dc894aafe5113ea1001d67280e267b024c6ccfc567261c0
SSDEEP 1536:mJsQyXdwJgucECf6zbu073TPKPebjTp1WlfQ8zV98K5+3+GsEUnfqBkNol5J5olb:m1JMf63uYTPKGeft9dU+jfwGK5J5o9P
MD5 SHA1 SHA512 SSDEEP

Submit Download

hl.exe

Path C:\Gry\Counter-Strike 1.6 v43\hl.exe
Size 84KB
SHA256 4a899986a879ffd4b7e2d819c49b47cb362d849e86917da1f1931ef476b414af
MD5 2098ccf443433129b556c2849fe99e26
SHA1 074ddbaff48c88b3b5c8f881c35d2be2bb19a249
SHA512 fb4dcfd5371c89af775367d9f2ba72bfd42f8b483ba31b0e839b66f065e5e7a1ec34bf4504aaad17e38502be6917f0b3e415add81dc84fc6942996c0a8f95a10
SSDEEP 1536:rUEtXr0hFBKexYTMUD9dRqTjG/0OxkkV1gx+7iBkO6ESmooNmIaSq:r/tbwFRY0w0iZV1O+7iBZpSmooNmIO
MD5 SHA1 SHA512 SSDEEP

Submit Download

mss32.dll

Path C:\Gry\Counter-Strike 1.6 v43\mss32.dll
Size 343KB
SHA256 fe62f1eb6ba407df77619d16927abbefad3c726014f6bd1f8c37a7c3d6b781cc
MD5 f520185e02e8a5d85860669176bc4adc
SHA1 cea8e9ff14994c89ad86cf891c89fea42a39250a
SHA512 b434e77a17cdac0109b698d0fccdd25dcdb15090a9fd0427504cc7f616673fa6c7307f07fb22cc2fc1e915887c0f9dc025aa8d38f51503f91df6a9ccee5ebe58
SSDEEP 6144:zP/1qeom4nrYNQvvHCkVvH0DMHvZW4aHrmtcitczJ3v:zn1qesnr3vHfdUDovbaHrmtcsS
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-SMSFT.tmp

Path C:\Gry\Counter-Strike 1.6 v43\platform\Friends\is-SMSFT.tmp
Size 1KB
SHA256 50443605d94d7bedbb03c2200d7cb7e98b0eaa91e3489cd7d77f69a407b73e0a
MD5 08091f474e938ea73aac90c9773a6013
SHA1 c4ff881bf1c3f0f0db3bd58f47d666df6a0ff885
SHA512 7f569511d12a36fdcf6193aa52a2845b53f6d2a2e075426708f542f0012360a48cdc520ec6b26b0d1dd9f86c0ba41c8205483d340963aa0acfbaaca03a7ee0f5
MD5 SHA1 SHA512

Submit Download

is-BJNJ1.tmp

Path C:\Gry\Counter-Strike 1.6 v43\platform\Steam\cached\is-BJNJ1.tmp
Size 2KB
SHA256 7f00fc14809350a11d04cb655e996beb4d829ae7c2d7ca320968661961e18fd2
MD5 18581b2844d1b35bd0dc170f8557bc42
SHA1 05e8657b8f73f2608aeb07edd8f469f3639d29b7
SHA512 cb2be96b5ae7cc5c593f954092ec663b8ff41e06f2597b24bbec8883a025baa75bbc6c15cb24fa29389e05b7bdb0d017bb47ef747a524eea53b77fb4a479087a
MD5 SHA1 SHA512

Submit Download

is-77HCD.tmp

Path C:\Gry\Counter-Strike 1.6 v43\platform\Steam\games\is-77HCD.tmp
Size 1KB
SHA256 e136089e82c2d98a7283b55dcd93c5332a332149e7119d015bb7c353435ea9c6
MD5 200380f4259d09ec3f433e421cd5a55f
SHA1 9afc9cf71fd5949198b77bf7ec396a89058d6dee
SHA512 c77a433055077420eae1fcae302fc0738f592b8081ba2bdcae2015a3296672f1df2518934821d424e3a8c9535bf1891cbe7394c16ac68520099a3d7dfb4c50cf
MD5 SHA1 SHA512

Submit Download

ServerBrowser.vdf

Path C:\Gry\Counter-Strike 1.6 v43\platform\config\ServerBrowser.vdf
Size 771B
SHA256 f6d214fd92060af1e97ba026e7ae294875ea67c6634128beac91678f3d6bd4aa
MD5 b0bb1c0ac767eb6b9dbfdbc31104d1f9
SHA1 fb0e696a51e2357abb4a020b8ae39cc03dc3b51f
SHA512 34fe38cf932ce23ae49417b595184bbd9dc23433e4a661983977dbff5303cb0767f1b0b2ed67cdf118addd313389c995cf70b07927f8035d8be624f36754d9db
MD5 SHA1 SHA512

Submit Download

rev_MasterServers.vdf

Path C:\Gry\Counter-Strike 1.6 v43\platform\config\rev_MasterServers.vdf
Size 249B
SHA256 37037c6cc8ee67d768274d08b74ddb56ef8c04d803c2ec648528bd850c47e503
MD5 3a62da3cbfc7cb238419c43e9680a807
SHA1 267a4f1df4234795aa80d8f2145991126fdd46c7
SHA512 a63f6f713e119668b197b8a32b783e8c0a0459bf9230436298d3821f3352421964187bffe762e052a4824a8ac5b204d61c13b7b422f7d30d12565c12ff05a144
MD5 SHA1 SHA512

Submit Download

rev.ini

Path C:\Gry\Counter-Strike 1.6 v43\rev.ini
Size 3KB
SHA256 8cad85fd446ab9ae9e9a2232b7c069ea0f29f029dac495ffb4010c3be0f9711e
MD5 945132ab2b11fadb2cee7851deed37c5
SHA1 5268d8ca9649685029f0dd6f1e40ccb5fa2f362c
SHA512 2c740a5af643252c88d6ca7bb239087c23c2dd7a37b8a52cb1b10e3945827cdf1f6141573e084e82653304a81f55a7580199dc851203bb41a351011fec0d377c
MD5 SHA1 SHA512

Submit Download

settings.ini

Path C:\Gry\Counter-Strike 1.6 v43\update\settings.ini
Size 32B
SHA256 84f6171e8fb58b3ad51131f325441ea7d2eb80b6a0f76ecebce8eecb7c06410b
MD5 e09fcf58db4d907e91298a77536f896b
SHA1 fd864ecd7b7d58c0c599f7684c4224a7e6b4adb3
SHA512 030620d2337db2902a6947e04fa935d482ae14f0040c8147cd8e067cc7efe6491276f22a33fc448e96bd580e31376b39c9e37f1e25d9c29b541d2aa79b5a10f7
MD5 SHA1 SHA512

Submit Download

client_setting.ini

Path C:\Gry\Counter-Strike 1.6 v43\valve\client_setting.ini
Size 7KB
SHA256 11d73981b5772f4cf3fd4815283ef19699152cc31dac584a8a45e52ef0d1f08a
MD5 9ad8b8c4d6cde8adf3244034d68722b9
SHA1 55cd476e316af914e902fe52ea0ed92fc14d0377
SHA512 46f90228cc42036731cad82e4c0901bcde871bf8ad3fbb667e05466369647fb88ceea2e841512716aa1871f1967b20c94a2ce7d183e23b8accfa63ff3d5db4fc
SSDEEP 192:SvkjExlv6PAYBxUKUdNacrBe10y6gQD87dxqLQHFn+:SvkjExlv6PAgQNHrwCg37dx2eFn+
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-66GT7.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\events\is-66GT7.tmp
Size 1KB
SHA256 2c7d43b8dc6ea01a32acddb7798b9dabf0ec44c7a6dcf75160539a7fe53e029d
MD5 8cfcc0a84d0b6b51995ce17bc9f194f2
SHA1 f86d5edad7e5a3e2d994517da5ebd7d748a8c666
SHA512 5f75243ff3e13b557859d89593432f5e29f014f2bc527bee363be3369e884feccb15ee593094c7eb0f8e4786b6a352cdf9fc6039636782cd23712cadc114ee1b
MD5 SHA1 SHA512

Submit Download

is-49TPM.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\fonts\is-49TPM.tmp
Size 34KB
SHA256 824ad8824e4d05319556d9c08dd0d4c90fecd6150a0dbcae8c946740cb4e2c56
MD5 46f3cc3d5ca0f0e80d30ec38a3ed9702
SHA1 2b7902e73522c60bb4e5a6d7905f91967ec54b46
SHA512 9f85b11a9479af47963155fc823a9390794b3db05fb50011efaa87e1adcf772d18fdc1bd57f3ca556ded84d5fc5671236ee0705043771c83663612cd2b0f16d3
SSDEEP 96:mSebRogBVUfa3j07cWZdViPWzPhOkdMfCIDbpEvpj56Jo1VQjIeVJaSV7nacbuJx:mjG+TTKczP1qIfdi1xKJj7m3h
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-678UH.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\fonts\is-678UH.tmp
Size 27KB
SHA256 60946960e36a56fe17b02ab7c618e3ca0d61b7412acbb9967271ff309a76b5e0
MD5 8148e0f0a6679ced3ca04fd6c258d478
SHA1 9afc1daad5e004bb9481147ec5fac15693897f2c
SHA512 918c03891b46c645ff9b1a497a77bfee752befdbc2e82b882ca3d665dea21d3de1b112848ebb9b996b201c14bc14a70231838eece3df04a431becd0852417bed
SSDEEP 48:P/1nXqaW4/9/sXwqsWGO73EX6P9O7w6AN5iFFReLnFhGG7777uaEyPFb9kWXCSHt:4aM/poRCgEK6l8kzJuAGppRE/P1omt
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-99FSG.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\fonts\is-99FSG.tmp
Size 24KB
SHA256 fad8e72511e03ea0b215e491da1ada731d7474a03d43c26a2f858c8fcee9beac
MD5 07306c3fa68e4b5bb4fd4da515adfdc1
SHA1 ae0203c50a3ef107992d61f4b135efd6fdc809ba
SHA512 d6d1b8f13d9263932f8757fed790dcbcdca681ca51a7581ca552631409b8c65de212436f8e161c60463edf8589067118d15537789e8aead85eeb156af5c29a7a
SSDEEP 48:zUoDb+o2coX3PhhN9MFaEu8ruVoEvAjo76iMlHTqLzO7lh1i2222EoPhEmyCt7DQ:wQhuAsVxvL31IxRXIf/pc6wgsTVVx
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-CLO02.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\fonts\is-CLO02.tmp
Size 40KB
SHA256 93eba9e5ba94654d73d76944cb9860e4fe8db92a6c734fcbc57864cb766caf1d
MD5 910e7f920f59348e20f787d9240fe2a7
SHA1 9f85998b0a73efbf34b2e732942a0caada57925d
SHA512 a19fad5b08875df9f16993d48562cc2cb4bf5d918b5f102b0439c6d6d6fdb862783762d586393b0e0b6c324de3c38c27fbf09d4b48c55affd44aad2c1ee9726d
SSDEEP 96:D8oyG8aua7Rm2suaqsTU5n2f/f7XAjz3hWnDNxwvai1ciTa6PatRjOY5zbkl5Q/k:Ubdf/mw6tFml/kyry5avp0oHBqqMzBJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-D1P4B.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\fonts\is-D1P4B.tmp
Size 44KB
SHA256 dff807e488eee92c3f841de1f330bac00b42c36e34320e6335ed6e5d926243a8
MD5 ec8766ea06b999dab276c2ed85397067
SHA1 d043859519210810ab69bc4172406511b0391728
SHA512 5b69d36450816306ba280d2690c65f7478b84a4b1d8eba37b8a4baf8631d767859599e1b20bcabb930dbb7ebbfd07d89bb3336c9999809c50e20fc0661cfb77c
SSDEEP 96:AMrkdOiZxMd8NnapcWGBOnwHEqLkTcoIFEXLeFL22ScH/sOPW0OcckOQp8cCxSCh:AMrj07fOKNDxuZL50e409Iz3g
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-IK4KP.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\fonts\is-IK4KP.tmp
Size 33KB
SHA256 4eb392f4136f1a4b255ab26772947e62b80615ca8b1ccea93563c3f33539a8bd
MD5 bca82506d597eed9b5507ff7ba16567b
SHA1 55ad94cc92b95ce8e2adf62df94a6a8244980e8f
SHA512 e817036968d39d3f86c2f6f241c6f80756bf139a700adf018feb870542331b230cad6369652eb2a26b26e94b14c3e27dc0112d3ccd1c512f73e8b056ddeb12fc
SSDEEP 96:08byNeVLAY8XLCOXsi77lsO/b7W8gA3wiVIUvcRZX/BCYmdZEuhT2Bfnch2efnP3:T+0AYkJgm4WBtAAZUKMo
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-J302D.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\fonts\is-J302D.tmp
Size 45KB
SHA256 f472485bdddb0f7acdce7ba6dfb1520dfdab6b2e870b37f77f61714533c5fe79
MD5 d3d6c70dd23590745a0f691c28f88848
SHA1 b46b4a8427c59e590f8adace2ab659da2f4f4e9d
SHA512 06a400b5462c9a307bb281cf725358a8bc64a27e34b5f6b95748d3006703e66c4a756ad86fc5e2de9c2a2eba534921234fc2ec422b6107ef7264f7344a258a92
SSDEEP 96:G3QB+DzgQ5ULElau2i8acppRftt7ItJkNykV8QG88Mb7jWilpX4qAXH+Bq4voV0d:qsg8Q5UFi8LPDliLs6opaXoHJX
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-UITTE.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\fonts\is-UITTE.tmp
Size 24KB
SHA256 3988ddbea3e6fd927933a698d28d66572d51e59938ea16624f644afe2021818d
MD5 ebc1b6a271bf99cdadc78dae5e9a29c4
SHA1 afddb10163d0cacf30f7a2e9f9e4f534c8425586
SHA512 ccbc9f59f59c46187954d5e8a70513542471a40e8653f59c8d58279777c9c378f2e1891c4949d8d5b104117410e991f756d768932fd5353dfcbdca3c37d6ac1a
SSDEEP 96:+fQ/8Xl3jpdvqPulk5h84f/onvy6cY1RxFoH0ZObMSo3yGtNb4KIOYvS:+I/2XWG1RX1aXN6
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-2QQ69.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\is-2QQ69.tmp
Size 1KB
SHA256 99986396ea8ebd9ab4eb1221b52db2a8a024e67c748e0b8080d8dad24e4e9cd2
MD5 1926ecbcf1b403f0c4a30426ea74276c
SHA1 24d8e0d5f3477f85e76985a0fc579e392482c402
SHA512 8e944a0304620fb7428acbe883049167c0bc1596d8f294b1ebcb383899e6881c5e54221ea5a60fa7c14210e5cfd91831a8481020608c22747f43c2f9d7e45060
MD5 SHA1 SHA512

Submit Download

is-CR7EG.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\gfx\vgui\is-CR7EG.tmp
Size 2KB
SHA256 1efacc8931f4e6558fc9f854527e25e004d8c3fd90f1f5209273236924a9241b
MD5 6deae390d10e5faef07cb793138a4ea2
SHA1 0e1b89e5e5e61f5e8959d3d6e17fc874f3d14a8e
SHA512 70c1ab592e46440f759ffdaa2ba1bbb9206212670762fbdbeb04f85da2304120e0a052ea4164fc0e0326e82c013924d0db0ea27fc21041489fc6d6d69b69d93a
MD5 SHA1 SHA512

Submit Download

geforce.cfg

Path C:\Gry\Counter-Strike 1.6 v43\valve\hw\geforce.cfg
Size 63B
SHA256 a24489c2874c359ea1fe5faeef7d9d6b5df74a744fbb15f65693f971c72288bf
MD5 a488b1fd9328a51d54f46a925c0224ab
SHA1 6d19d6ecaf2f80d03f0bb5c6b650ac8e652f86f6
SHA512 4f693eb36521438c1befc273f5ebd46a8849647645ca950c26a8c418b5f5036e98541a0cb2e987684e7f095ded072df9755d589dedd451825b9485f95a73dee6
MD5 SHA1 SHA512

Submit Download

is-59IUI.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\is-59IUI.tmp
Size 4KB
SHA256 01491c012c29f4706f0cc8f1117eb0f882b54f720bfbf320a3271ffac6c929dc
MD5 f02c1d45a1a86f5d60ce9e310e24d144
SHA1 d991f95d96e1c76d2acb944bb09447628cd96caa
SHA512 88dafe4039264818c4193f563376db890ecea2f8f67df7902dd76aacd08be4cb47197257d02217eeec1a81295615b30b89e91d097837193a8fb64e72d03d7334
SSDEEP 48:rZry58nP0pB/ewjcYzrd67tCtvStCI9xNr33ry58nP0pB/ewjcYzrd67yZIhQ1Q:rZOQGJ6ktcCI93rHOQGJ62ZIi1Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-AMVRC.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\models\is-AMVRC.tmp
Size 22KB
SHA256 47b5e88f5cc25627e8dc76b85eb6ad64d8613b00838d0cca6a85f118af81c7b0
MD5 5f394d005ec12f63949d0c6a62c1b7b3
SHA1 957d1d0598c7bd0079db345db2006d8e4b755096
SHA512 c51142a1e7902d720154378a7b8e01808fb4683e5a12c77516fa474b4eb05c0d2cc37aaf1b3b0a33757aecdc9ff8008333df66ed0e254b01cb5640b8646e6fb7
SSDEEP 384:WQw6SEz0cMzWIpbN/LAg/nBlbR6BYvhjzWvu:2ICzWwbCon8yz1
MD5 SHA1 SHA512 SSDEEP

Submit Download

is-MJGFL.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\models\is-MJGFL.tmp
Size 3KB
SHA256 748e6fb4465843238519d56774643c2d4fb3f77131ba49ee9ca2d700c42acb70
MD5 ab9f1bf1f7d14ca0032df954e1dd5212
SHA1 d51ab73cb33e1737b86ea0bf6db28aa895bb86ab
SHA512 c5dcb61363551755beaa4732a21ec870c9b077a44eb0e810029f056a7c89b7be4d6e2d4e48b860a4eedc707d057ba55b2b45c238cf4a99ec167a1c07686710bb
MD5 SHA1 SHA512

Submit Download

is-S7STF.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\sound\plats\is-S7STF.tmp
Size 1KB
SHA256 5271b9aa2961809f47fadecb693be2eebde2dbed62fbc4f5f4889fcd8c4a65f8
MD5 811989e09124f54cb27fe6154b0f1018
SHA1 90c22fc3b248588e2d9759e6ef395303a86b7b60
SHA512 560d26fdbec34ab687e40b8be6144b0f586449bd3a0eaf286ab972ad60b1eb1fe002649daacad36039a298ad24aae96e3531404ac2d0d7b0b47e194b8169e18b
MD5 SHA1 SHA512

Submit Download

is-9BBTO.tmp

Path C:\Gry\Counter-Strike 1.6 v43\valve\sprites\is-9BBTO.tmp
Size 4KB
SHA256 5603d52c5f089950f372e2b00845738746abebaa2796b0b3e2f6d8d2f4111760
MD5 30c0c19f5c5226225ac3959dfe1f1428
SHA1 5c7be5173586da26dd730a790a151b8a16611106
SHA512 c71799d84798c2e2a82dbde7ffa5a2c8698eaac615e77d337de7dafc9239c4b59bc2794b2ccd5740d3e19957549257bcd468660d0696f09fdca37485150c233b
SSDEEP 24:pDiIsQAQ8Ic44Yo4bo4Y4ofXQLo4LoXgMXI7gAgXIL/:pu3nfXP3nfXfX/HXPX/HX
MD5 SHA1 SHA512 SSDEEP

Submit Download

valve.rc

Path C:\Gry\Counter-Strike 1.6 v43\valve\valve.rc
Size 287B
SHA256 344e281260d11730107beca333d620afa05054c78bbc60b2d66c2a0b960807b2
MD5 72862a593594526c1625b4661b496074
SHA1 effbfb9307afa3f654e64462a7a6c3fb424834c3
SHA512 5e2c7732cd2b77c493e153aacbc1825df3dfbef5f0da30bb9bb007eec354702ed86a86ab5b0e37a6645eb722617451664cc6bd388eff54116a0039039fa3ba71
MD5 SHA1 SHA512

Submit Download

voice_mp3.asi

Path C:\Gry\Counter-Strike 1.6 v43\voice_mp3.asi
Size 8KB
SHA256 ee82699133743266399721dadb609173e10a4086fc9d7606fac6e945c0c15ca2
MD5 74eff016634d14461e970dffaefbe710
SHA1 4ff4366349e0a67a3130f4781393f846935b1540
SHA512 3544c78ab4526552aa3b03a68e55d4a999067312061717af777c133c1ceb0baf023be97ce338551107c2b9b79a14b980b2852cf3abdb224cb08bced3393c8c75
SSDEEP 96:nP/o/LklguvtRfkwtHSc1ZSQoIOOT+9t9eSjcW5BDLMaFPpwB:nI/LovtO0DvfKvwSjcW5B0au
MD5 SHA1 SHA512 SSDEEP

Submit Download

voice_mp3.dll

Path C:\Gry\Counter-Strike 1.6 v43\voice_mp3.dll
Size 106KB
SHA256 27e875e24b20a45543c7c7599a387ae72dda39864f52485129bb34db0c96000d
MD5 7c3f7624dd077b4b9289df644b8a63ac
SHA1 4924f453a17dcf6be30d8b480b16d9f00e7d20f6
SHA512 de88a816c615f3baada9f807c80d8d61e876b07cf772ff490688a0042b413d57c94eaadfb3112183f9ccd78f282d63d0de917f2974fcc5eef68d04d3cb31515c
SSDEEP 3072:6SPX11tNSLy3MF9RMlsQyw4e/RiFGco95:TPXBNSjasw/R
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 6e2997705f2585039b27a2d92ca679df3f222b7dc22e918ed044bd07e1816c60
MD5 7e040e0108380239aee8c630910fa104
SHA1 88b3c774709870b7854a747072c417ccd0eec089
SHA512 c58b6c53b5850f9290d49cdf8ba35f210d3181a2800ba8a85867c2ff4f932f04ae7436822fabccbf6094bfb6c4b4889635faf50e4f3a33506011e6a94f74a410
MD5 SHA1 SHA512

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 46KB
SHA256 5613334893d384a0c3035330400aa1650664d3de338ca6c2f50620fe4b35bd35
MD5 beb08edfbd4cf5f33420d07d14b25dc8
SHA1 41506b1a418dbedeffb522f2ddc63275f6c3c23d
SHA512 3041000b5b55d30147295d8ab938ea16df464c599ef5821fe5b0f62770fef2993732d4d250b97ae38f6a6cd1c2ddc36c1d76da21b18dcdfa8d5c6f3170be234e
SSDEEP 768:DKy135SoygUdiqRk5AdoCOeZWGLXgoJLbjWiUl+oUj90ZpHORBI2:GiJSoygi9W5YoCOAsoJP0lvcyZgM2
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 776KB
SHA256 b134567ea4fcb0d7f140c222685a9d562e857c5bb9de7224a84483a7dad1f27e
MD5 5be227a5fc524c81ea9b20d4e6919794
SHA1 edf6e1c1bad7452084e36da7ae6ea7f39beffeaa
SHA512 7a47ef3671c2e0451f80720b8b2aa93be285ca040bcc02ae9f7ed1e90b60e5e68cf04afa088800fdd361019a4d10cfbce049aef83876b5351c9353087fad71c9
SSDEEP 24576:AWZ1IaukK0C3gniLTvXXVa53tYlZp1OW5Iuu:iauhGn+TvHVagX1g
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 31KB
SHA256 3eff474ce25e4841ca83cd660f3cf7a9c937530bcdb4b5127b9e9f2240b6bc68
MD5 f9b2a269dfc1177cccc192c9025b938b
SHA1 4e25c822fa9bbbb12535bfbca34506db1a1153f9
SHA512 2c18dd03b0f4360c5d037b372552541474c0546bbf531940c674ab85133b6572fe64912ee21167dfbb0dbddcc97fc03186d9536b35228564f88d2cf44e0899b4
SSDEEP 768:S+5JzoCgs0k0DHWxjp4gEV6N/wv3eyLbKM+op9SUVUumrh:S+5JoOZsHWx14gE4QOyLH+Q3KTh
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 33KB
SHA256 d658da642bd44937ba21eef58518f12526e9b48ad4c961b9b08c77ff97694ac3
MD5 7aa44902838aac2882f2c21cc0a31969
SHA1 1eac4183e008bc84cc0b530354ef332015d9da35
SHA512 8f3e707781d121ca683a6d42cb53d91f9f5531eb7ca8d8f6a556a9bd77727fae1f5019b1ff5a8e85e799b1d0b1b8071f51740c6ef6c52a4a5ac2bf6f90f47382
SSDEEP 768:xSpG2PoUVvFSO/I4f1E06OkzP2pmNcZny4c4ZoLJ3AMluZ:/VUF/x+06hCpmNUyf46wguZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 19KB
SHA256 cdaa78207bebc1e8a5c56f0c7a509b794d6375ef91d1f776d460afaf980c8f45
MD5 3135b35a3e4d7f7d624a4a2d00652e9c
SHA1 2d6539c241e97f3a11b4d49ba3881fcf5fe3490f
SHA512 11b1b4927797cff94792f58e739260bdb602868cbe6d5ff27146cfa0471e17b693a4fa3d2b9da4f5aeedfb32fc6f23aac81148c8f35dd19b4e21cfa118f0cb16
SSDEEP 384:S0WUCyjleVkJNmkuDjG4UH+HtaTlhWcqc5v0xHxYy26FkudjwDOFhPjLdsnob:/WU/heUmbiWtGhT58xHI6FtKOFhPjJQE
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 55KB
SHA256 9b26788e4a4720b03ed0d4ed0f5d08e8741ae34224cd1eef205506f0a75fa9cc
MD5 ae46b78478d398b955a2e77ec33fc2b3
SHA1 5af773b2e30e632499ede982b6d26d9832ac3475
SHA512 cfbd47da4bfc6b1f45e3c5d198fe380daf4fb7b4c2cf15cc8e5e40e492c61d882b14ea2863801ffea246db2041ce64176b05093720307b33cd434dd2c4f985a4
SSDEEP 1536:gToWLwX0HlR9RG+oFEfhzV3kPE8mMliCAU:2oR0HHjG+AEp53kPXbi+
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005f
Size 20KB
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8
SSDEEP 384:tC7niyi/By45+9iBV538WjAC8jNe8qUo4DdsmPMb7lV2bzOAZo1Csk/r:wrfi/BNY9iR80AC8jNdBsJb7A6Woe
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 720B
SHA256 6895251318b10ffcb3108b8af6e1eafc9b95e4608610d91c539578e736632637
MD5 ab94bf872a040efbb03068301a73f9da
SHA1 84575f211ea31d90ef7f11d0fe77abfd2d75e0c6
SHA512 aa0ae0126587cd78bf2fc7c8d178554e51a49389fec6c850238c3132e0fb4accf4c77584111d2a8c3c46c7a17e1face9768d8f3308b70b45002ac364c17b2408
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 acc5c3681880dbb89d1c7e94f6bbbb21f7ce8ef6cb5e4d4d3f73d9a25042983a
MD5 f27c319b291d978ab6f54cd07f718028
SHA1 250cbd4ffd9730481e895ded76392ae58973cb6a
SHA512 026495646158b170eec018c36dc19196e73ba141df1a554b535a5d0d176df7930dac46901fef5cff3be5aaa11c0e329b3b65aa7670cbe96db274b383ebd57436
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 bb0e2bb18063af4d5db7e9c12e986c09bf0925c621a3216ea123cebdac163ec9
MD5 a0b25e9589818b44c1d82dc61ef55fcb
SHA1 153dbc228633f074ed348cdf21bbbe46e5077108
SHA512 c5a8c4d6adbf76ec0bd22b8a109debcc5a7f85c1238a1fbb7c69b3e740342ea46edc48dc20f383385af2a81f4c8ba6df7ec167bba319750f653eaa811e5e5528
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 52745d1bd4ae1790f23f1f5574b5e0cb84f442e2d9a4249dc2875f66a93807ab
MD5 3fea431d438feff54b7859c8f0578bc0
SHA1 411acd74d1a0108c0c65abf40395b77ed968fedb
SHA512 e214b497b7b0baae245bae4fee64f37fcf303f174a37b30b7636337d86c977721197ea04000d75238304863b23360d4587c6c1bb3227a5b49f5b4808d5de92ba
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 5156426140d8a53892a7098a43f13587e2f3e5ebe67c66c48e781ac939d31905
MD5 7342c61632ee414c53be0e8df1968a9a
SHA1 d9fc111947943ae53eaf726300ca362ebeff1a6f
SHA512 c5366241da64fa8b6458e1da03048db4d46bfe5702eee95897b68b27ba50df8bccd2e463edfe23a793f86e6a7eaa828f2f185dab555c136d7d4db641ad778165
SSDEEP 96:iru6rNGMSsYfiG2GjGiG1ESGdMVyfFGLG5G2kGrcGyGPEDcGGGh0PcYAb:i66rNzSsYfit4fwDFVyfFCkgGcbRQ5KN
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 3f380be8f709e1f97545a8569ac32d9de4d21d89ecc9e7da7fcceae6126edc64
MD5 4f7ff248eaff3778299c9a56319a049a
SHA1 b2a75775aaee0a9cf2f575d9f74fe371285504bc
SHA512 441d9adfc12f24cb94f79736f0f05c3f54c5dfdb493d35dd56748a84d32a5e7234c6dcf5826b570c2c0ca31ca3e24c50cc78f3f699d28f5670a22cda5306e151
SSDEEP 384:iw+sYfTeCkgTK6rF/IiYx641B5u6Thi66F6lD1f8HMhcrhXr6j6o6PIqcn6ij60k:YYX9wu2DVdh+nrS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 67cbb19a4aef75b5b22a5ad97952603c6eacc399cccf1dd68f9a5b3bc8a76871
MD5 83add97e128d9e26a0d6552a4b8fbcd7
SHA1 a61dd921cf8f46c8506e6e705c56344c4c64a00b
SHA512 9d3fa6578814c5b44f8c6a0287af8afa882c3217f3b603086a0d1dc1c39f8b4ffd9c28e9580fbdfde13e870013ff223d75b4b3306304ed897925eb2ff2aa1106
SSDEEP 384:icfTeCkgTK6rF/IiYx641B5u6wi66F6lD1f8HIcrhXr6j6o6PIqcn6ij60/1soUO:hYi9ku2DVda/JCLpY
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 874B
SHA256 33e953ac706a52fdd04324daff9a701bb0aca8cb31833c8a4e8b54e5fc24173c
MD5 b1c0b2a7c80d360d824e1ad479dc724a
SHA1 90d8171fe24b5aeca8cdb9546cfea323d8b1140e
SHA512 b1f651f2204dd95ef49402d19e61e0c0f7438363c0694e403559cdd54695860dcdee15149cd17ab1f3948d636a6968a28b3e1cf8f55da8c3e745bfd08892b9f5
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 5KB
SHA256 5086735f200b41588d6dd4931785df3122fe89571a85fede07797779a8ba0ab1
MD5 ac2307af532efc695255c4f8a1fa9406
SHA1 63f3bc75c0a92076e08669fac34a99ce82cde930
SHA512 ebbc8ba4c8b3df4691de314c72a2d71e0568e50c0a87f4007e07898beb0c5d22d827a3382665c64af5e6c0c3a99c7f7c0931065246a0460c03fe2796e682c257
SSDEEP 96:EUJOAU5UUeUy+ieUcsUiU5UDUKUiU1iU2e2URoUiUeUUUqUe0UKWUQUDKUuNcU9V:EU8AU5UUeUyqUcsUiU5UDUKUiU1iUn29
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 5KB
SHA256 6497e0183aa88d87ba2543bb2757b61046c63bdb49efea24b6a06a6d01af33ff
MD5 77777d1a29e6b0e3d1684a220effeb53
SHA1 851b35de7b778d177f96a903a055d6e36d1726c7
SHA512 a80245054a488d57e8a58d48f5c5fe9d24bba09d09064cec09bf87801c5ca52127e991f8a056230afb55d6612dfb7e19652d520d5a3d108ce38022aafd941e09
SSDEEP 96:fOAU5UUeUy+ieUcsUiU5UDUKUiU1iU2e2URoUiUeUUUqUe0UKWUQUDKUuNcU97Ua:2AU5UUeUyqUcsUiU5UDUKUiU1iUn2UOX
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 cefd9830bb2e5c4359ae04f0f9b0bfb9fa555aaa2aef3443c677e16f57cc35d9
MD5 9801d8bf0aaee50fad08748b6628f2cf
SHA1 1520f89b3dba4ad34b781547937ccefcd915f515
SHA512 c64c14bf01ec0e55fe1cbf444b097e7709eab08674dca9c75a8e1301c5b87233b51aecf5d62bd7ca3bc6ac42b1cc43d2743f03efa83762a015e35ab1c0016a74
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 5KB
SHA256 9ea56adcff7bd2c2fa9b70d14d8c8699c683a14322603c6a52f8bf98c154bef3
MD5 07101345018d280e2947133584b83a6f
SHA1 9be3ac449560e35515f2e35ee36c57cf33850e75
SHA512 a4d46141c8d0adef8f8bd7332a437f1f1cd83e052db8bd5ff1818b5ca966866cbdaf69c3397cc4f43e8e4e1034dc5c653ca95d87fcd253dda086dc15b0713032
SSDEEP 96:GYOUUUJOAU5UUeUy+ieULsUTU5UDUKUiU1iU2e2URoUiUeUUUqUe0UKWUQUDKUuZ:TOUUU8AU5UUeUyqULsUTU5UDUKUiU1iJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 874B
SHA256 27a4c8059d5f30192df9cbc0a862cd04e40360e20d655194475812b8d8865c0b
MD5 d9ef501a636e9e54aec5c537a77c6f60
SHA1 40de181e283662451ad32bc8ed09aacf18dc7012
SHA512 6a93b5cc1b3e246ee231bfa6b92c65ec13069c3a04f17dc163f8bbcc734f3beadb79c21417b121cd52385cc1dc1b94c53f3eb150b808b60372d144a83b925fb9
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 43a42dc7a9968b21f51f18b295633004d975aaede924cd067cf08e05283416f6
MD5 16d3449d6c601dbb292953e1144e9731
SHA1 4a74f741d871505eada52ab00b0dc91bc179f285
SHA512 4369833d68fda8300b108bc669f5f4491333ca003e04449e474df4a3a30f8421dd3f197b0baf9fec805235d1f874b5f23c4a13845dd5a740ad21117a2a7227b5
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 9d66c00bddcf05a89668278dcf876fde993cec7c0441c85108c16231224ae2ab
MD5 b1652e76331a92bd86bc5a626bbbded0
SHA1 383ce3e1693e28787f98a6c43ae5c3037cf36287
SHA512 44d3e23e719da35a6a3ee7969a16ea5433fc402607ed96e17cdf873a4dcb2be20382ca8f3c1d2bf08a4258ab41d49b89e932072c1b9b27d34e49b27d7c508a11
SSDEEP 192:7b6sL7QA8E8l8+yy+FRky1KwiQY3tjEsXtScPS:7b6CSyxz1KwiQUtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 4f81ca1cb9772ff1672cf159a8a4ea05e2acdb05f275814a37bc55922aab7b81
MD5 e326ac4b4ba679f23a3dec625fd4df13
SHA1 67237f6df1856d9efe8341f600ecbac801b83176
SHA512 5c708d9d2d82141bbdc47c415a442a0d1749e6951bfba82832f3a9b3b0dfb59ad769db20f6ef4be856b74da735aff5364b5394583d5c3612ffbe613e111a00cd
SSDEEP 192:7b6sL7QA8E80N8+yy+FFkqt2wiQY3tjEsXtScPS:7b6Cryxrt2wiQUtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 8c3418e686f49b18d6b59bffd7a88ad4bf54bdd48237f8c365dec84b93a1cc4f
MD5 b8a9a57a67d884ea71eca630dc8e98f0
SHA1 fc83f4cb11c82528caa1349eb37130123a4bfb58
SHA512 60b9376c54b0ffd0342d9dfd569fc7f0cedfff59fc512967c91de26a4f818ebca25b8ee8c58ef4606b6aa57be0299397003ca4e5e03c04c5ffc1925894ea14c2
SSDEEP 192:7b6sL7QA8E80N8+yy+Fj4kBnbQwiQY3tjEsXtScPS:7b6CryxjznbQwiQUtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 2078b584b8196f248930e30f4320a3a67e8eb75fd82dc1137162667531c7a272
MD5 8fa8c647c01bee480c08775a8c3fc313
SHA1 0a2b161445786611bca644124a81a8ce39f7a987
SHA512 7969dd5483740fc0e1ad1f31efe7de87bce650eef54133d67c99d574d046a4a86a871c84c92d32f9e0298cd301815398d994d13c071db42daa1f2be00e2e1995
SSDEEP 192:7b2sL7QA8E80xD2/08+yy+FrTPskxVkt/Z7wiQY3tjEsXtScPS:7b2CZyxrTvQ/Z7wiQUtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 47240222ce7c0a163dc4fe031b3eb201070b517743b9f91972bd73dcdb1c4b48
MD5 d030b9b813690782375b96bb916330a9
SHA1 b657f9190874956b1e69fa72fca2e5edaa7f6255
SHA512 e9ea6b141852dc8f4cd4ba5a6bf9f1aec2bcd9d9399a644ac5ac633e00416d9df11d56e649d7c8be68e26182fe74b0e2d1f207b9d58da1b170ef0b72c743144d
SSDEEP 192:7b6sL7QA8E80V8+yy+Fokt/KwiQY3tjEsXtScPS:7b6C7yxr/KwiQUtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 9077faff1c87fb501ce79c52df5dde002768c15547706ca0ac6e970b744b22c5
MD5 711ad2f3efef00564758b151bdbb8167
SHA1 f2a4acbf78ee72c837c5d5452fb0a0ba067e01f0
SHA512 402220e2a692319890890a82d3ed98464199cd59b39d5f21c227a6ddedd96efb4e9952fbf5f894b6071fe30f0903f832e086527d4c7baaa11ded1ae1d328c7c2
SSDEEP 192:7bMsL7QA8E80xD2/08+yy+FrTPa5+skxVkt/Z7wiQY3tjEsXtScPS:7bMCZyxrTy4Q/Z7wiQUtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 12KB
SHA256 307ff925d11deb1e195038e4f6921d9b037c6c265cc083d08f568166b96adaea
MD5 0cdba51cb571488a6007b7200b3a93ff
SHA1 8bc799e8ba21f2890a868123f79c81dcafd86290
SHA512 b3874b3260e023f751d18379dca786117e8ae741a315c98d3b19fc38859b8ac7616bf79914a5d558bcdff0d2384fe495894897ed7c13859c1206f57a92acf827
SSDEEP 384:N1CXcXS41kXqKf/pUZNCgVLH2HfkRsrUuTHG3dl5JaeXhF:bD1kXqKf/pUZNCgVLH2HfVrUWGLqGz
MD5 SHA1 SHA512 SSDEEP

Submit Download

9105b8ae7f548641_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7a9722ea-18a7-4c1a-9636-73e3a19c2f57\9105b8ae7f548641_0
Size 2KB
SHA256 8547598ba2121bd4dad166262cfe7279f098422aa4d64d5442c7d437eb93fb74
MD5 a3126d8afb3814a2c254fa6ae9c34c7a
SHA1 0d5fcdd4be1b4a94112b975746c46f870e0a25fe
SHA512 d3e9e5f7557b242702f61f19d5fbafae7e8f07d8c94231a3f6206de7c45836dc67b37900f20b91abc238f79b548c0180ef348e31c65b8eacacc1596078f6d6c4
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7a9722ea-18a7-4c1a-9636-73e3a19c2f57\index-dir\the-real-index
Size 624B
SHA256 c0b87bc4391d573150c4b469399ca7deac308c00524565fe795f969bd0517b05
MD5 dff17d7486959bc6b594fd283da5eaeb
SHA1 d5fa7a104bd2eee091afff906cc6a4d7848a9ea8
SHA512 3fa0e013820ca6e89ce0ef9097211fbcdcd02ab51ed6fe2db8cb0ba335229ac9061b5b8aed40444732d2eb9580e41de0e889da1d446f8de80dc6d8f606cfbcf6
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe58f315.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7a9722ea-18a7-4c1a-9636-73e3a19c2f57\index-dir\the-real-index~RFe58f315.TMP
Size 48B
SHA256 a9204b6afc134be47242c089bc1a577c61d3df4a3d7df7a059e0dacb6e2e42e0
MD5 c251dd256a9873b43ffd934c0825130d
SHA1 ebafd219f3c36e569416e287e61d6f5823ee79e6
SHA512 835479b3f33f78a70a44b60d9d072b223cc3b470b53c60c895be3581db29a4d71aedcd5beb5c5c2b4aa8366fcfe3cc83aa30f64bedfbce50c8b19ff12bc4eab9
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bd871331-78fc-4d40-82ec-c8f0e978647a\index-dir\the-real-index
Size 2KB
SHA256 2a75e65287e95f68578dcd3eec1752bcfa01a90737756f275d76960d4cbaccd4
MD5 be767e6a83d30e6ca29d9256f48d8465
SHA1 508a1fa745bf2f62e5afe8d8f0ba7cea93be0d50
SHA512 5bd27eda67e19ea63226f02c02eb4066a17bdf844e3e7ceb23d40a06a9dbe1784dd20f1b5298fee6571ca012e70b13821fd11cd7af4f443b28a2f737281d865f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bd871331-78fc-4d40-82ec-c8f0e978647a\index-dir\the-real-index
Size 2KB
SHA256 8f512f5c483a00ee8cb56d03a3a4faddd79b3b4620b23f76d5ea73997d52fffc
MD5 ee398f9478ce546dcfaaf21006181b3b
SHA1 ebc5ddc198566f9c907d36756e6a026dc47b1ab8
SHA512 af15f3bd7135f21bcdb6b1590397d249be8490af8b249f5ff47b4599836a794ae55684f4f073cd6baf7385a3ddf5b8ad748e72ec051e3539b892ec23bdc08399
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bd871331-78fc-4d40-82ec-c8f0e978647a\index-dir\the-real-index
Size 2KB
SHA256 0ef867b78437accbacd69ca1baeab40b9a47cc9ab8a8ff6309d8f19a2063fc2b
MD5 df40091b6fc82d53b5f558ea97155f8b
SHA1 87134a381eb28bb1700a7a60cbab86b890d03e0b
SHA512 51f4a844add082ae2e9d7322d774d395638d29096850db639ba9651c6058bf1024818021d4442456e17555d583a3f3eefed0447ed990cdd1c8d6638f1b824a90
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe58964f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bd871331-78fc-4d40-82ec-c8f0e978647a\index-dir\the-real-index~RFe58964f.TMP
Size 48B
SHA256 f04036758cbb98de05f2943c441440b6f6be4fc58c98ccf98750415c04ba5e41
MD5 01bb191dc1b866eba686543cfd7036b7
SHA1 29f43507bf5940466642930eb3caafc0412ed62c
SHA512 34bffb75902f967c0d9aad8eb6d095da21baa3c6e13ee3502511750da5404ac8502af10888214e2ab5f30872eb30a2a7227c2d0aea135f48788679d8d7e40f04
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c350dcb5-017f-4112-8e3c-aa120d613c04\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 176B
SHA256 a817f796f2c58a05df44c0dbac67ee9ce47c41a8d72febb017f0d066af966e61
MD5 63360078ecea57a04925e8c8bd521423
SHA1 fec592bc72e1e193beae762269f5ccc6346c614b
SHA512 22e4c0d0adb2a4aa90dddc941fce732ae79cdad8823d0bcb6d4a6222344d7675f3d550ea1423d853e52ef8d83be260b7faf6f63f77ee051f6324675feb572d63
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 183B
SHA256 ec90b2b6d52cc16b6bc3323f255adfa58d84f73616514d798b76621abae10d17
MD5 ddbf11d8763848137f00a62fee3134c0
SHA1 077b2db7331844acf15cd22fabbfa5f314a49bd0
SHA512 ca65f50a7b8368671c6eba22e86bdd417c4e233eb8bf2b75c50f9e040226bee70729a9a69116f588d50c8e532e783e9d962f79145a6ad79fe44685f90338231b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 247B
SHA256 a3cff0ceeada298bb3e09e2eb448f469373e50fa5d0a5a61f5b0fdc96b5efa81
MD5 7cff243da06c07f7f5e1e6ed5a9fc15a
SHA1 05ee230cd1742ad7e97a18c9860d5f6fdaafd0d6
SHA512 adccdecbd7b5c370c7107f7564ab0fe3dd26a06b126a26c5ed278f7acfbc401513c96d6c3bf63046325b6018c4a5d1372b55ff72f16a841dae8e386a56fcda04
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 112B
SHA256 a6a792c773a85a59f3de1f99df62084e8dce036ece91cf723791620cc9d36067
MD5 09fe45ad7462511d8ea39ae594f67407
SHA1 5766b09ddbd3129026418b1cc22d811f1969d9f3
SHA512 2334b9f5c2733d078113a5048e807ebd94df8a42573edd1caa619a8a94800f2cbb094e88ec07e1692d4dbda8b56dac9075fd3181dd2513b632eed51c86a4329f
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 178B
SHA256 f45eec3aba9f0db5c0d4f927593cd453762ad9d1b7234cb2a057ff0fdb7a7a2d
MD5 39fc9bf564138d8f33494a90ea172d80
SHA1 67f32c901a98786ceb4190050f45b908bd8dad74
SHA512 e7dd81c7167fbce7b9c015c1382fcc13d1a971b31080d6a3b94c8e70e724c3e977f9485ee94900b2d4259ac6814ad31f7f75046b7fb7bf1f3c028485acc6f627
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 187B
SHA256 8ea608476ee64fa15cf3fe4976e90a02c1b236c0ca562fda2f2c15f88acb7e08
MD5 3f852500bca031b29219122518352163
SHA1 0b1b9c10e6ed68c0b96bef99c3b7d22c6728732b
SHA512 506a1fe22957c764a9b74e230b59d81cdcd1e868dcad58de923679b1e9e6763ce2ab51ad04ad5e83292c173597f886f2ce46b01927cc2f5e357d0a946e396662
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 183B
SHA256 d9e211a19bf54ab816873da676a674d23ec44fa240a31f04078c95c6ecfc07f6
MD5 7f16988c918ffd089eb1bfc3b848397f
SHA1 8303792681ef4636703d3c66b80f0b95892dc7d2
SHA512 0ba20e50c7afea651ea03d8415656a31000cbfac41f1f06c924dc8ad892fab3a06c3a7f3400c2ab3c3d37699e64fb72699671b5bdae0be484957be443eda582a
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 114B
SHA256 d99e995435bfab1f5b068084dd03932a24a562a91c86ee2298a78449d6e83f83
MD5 375940448788d137829fc47cb83f912d
SHA1 69590773c53dad67e22e14e55c0cd366181871ff
SHA512 cffcc1bdf0508332cde182fcf33188bb2cddcac98d77d5e32cd7362732b84e2de7514ff82e07aaaeb5159384936ca8a2c5ba7283c4fb8e82a1f736a9e24dee89
MD5 SHA1 SHA512

Submit Download

index.txt~RFe5886a0.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5886a0.TMP
Size 119B
SHA256 a4df1f84ea5910336b616458de30cf367ec258401e5a8404ad39d840e5aabc08
MD5 09041663596bc04bfb241cfacf36d1c6
SHA1 886dc09f447b8c65f15509f8a293daf131d198f3
SHA512 57ee8ac51dd893ef1ef26bb8ca88bc877b9be61e4ae1e53ed9af620768b61b31e6988bbaf6ad651a65db61149c8ffb3e58687dcdc66a6fcefaa5fb7d2b23698e
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 314d28a0d42a1c525be04da39d6c7b57ff0cbd48f6a1e93a7c9ab5dadce2ec0b
MD5 72abd5d2aad9a7602af17e3313f9da4f
SHA1 70a1fe40572e58687319c27d69f024942c313ba5
SHA512 c7f0c24b38925d5884b604e7a40a699a2f8088e52b3fc6617c21b3770b3e7892fe1d560b7583ad208929284349209024be7c992c2e3846e0c7bbe413b5b2dce6
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe58ea7a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ea7a.TMP
Size 48B
SHA256 78ebab41f7702dc80eec387fbb2f2db077b17ff61ed9ff5d811cfd5c41d53a93
MD5 120825d2f1b62df62a9902ab1af2f756
SHA1 535a69d767c3888840da9225657dc53182d7f801
SHA512 dbf1d9d7efec320cca32b19427a15b8312cec513a0ddd7550e8577d65f6b26741b0cf852637ca32ebf2905366b151af8b8d39ac3ea15b39252499e6de053f3e6
MD5 SHA1 SHA512

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir784_2136979061\Icons Monochrome\16.png
Size 216B
SHA256 c659d57841bb33d63f7b1334200548f207340d95e8e2ae25aac7a798a08071a3
MD5 a4fd4f5953721f7f3a5b4bfd58922efe
SHA1 f3abed41d764efbd26bacf84c42bd8098a14c5cb
SHA512 7fcc1ca4d6d97335e76faa65b7cfb381fb722210041bdcd3b31b0f94e15dc226eec4639547af86ae71f311f52a956dc83294c2d23f345e63b5e45e25956b2691
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 255KB
SHA256 2fb3d5d201913685ec73bf3ffd493a6044af965fc8a46b30e38c558e7b02426c
MD5 fdbfab2da4db9a6e5aa035960f235bfd
SHA1 b4566ee68ca1478625792b2a70063e30390fd6dd
SHA512 a8154c248bf0bafd29241c80cb7cb2fc8e6e5e512443ff5f79d92379820cc9b9dbe6a0669a56aa32b77cbc529d8d5b5afe26dcc481d1a68360863ecbf9036d58
SSDEEP 6144:JQtUWTwA3qaXhTrJ6d7Yj3Ua9jHThM8fNHK9K5p:8LTX3IsbUYHTqwNqo5p
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 255KB
SHA256 76081135d093f3f6fb499603cda8548a40df8157f58b1738bdca2754869f4190
MD5 affbcdfc1cdb0b95f6ba810001805853
SHA1 12dce156c4a593e9c3010311f30d2e8d3169d7e2
SHA512 84ddd413ea05b052e3ead63be98cfd26524f53726a42386852358caa39f7a63d925a1dd5e720c69aaab408763a21563a76a74bc9d4595ea832327d45260d0430
SSDEEP 6144:7QtUWTwA3qaXhTrJ6d7Yj3Ua9jHThM8fNHK9K5p:OLTX3IsbUYHTqwNqo5p
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 255KB
SHA256 0657fec3f45eeb6207e6354f5a13d6de4a49d80aeb29a5c57e17e7c6868f8223
MD5 0263e1ea55f759c785ae1ae4de040387
SHA1 a56d67d1ac360b8f5050831dfa00822f189304fb
SHA512 caccac498b96241436522393cc204ef28a80c3cc24d9edbad931c25b8aed3fb24af949ce7c9d337487931c0496f06e3866fb02ae0cb39700bc3fd9db82da9042
SSDEEP 6144:tQtUWTwA3qaXhTrJ6d7Yj3Ua9jHThM8fNHK9K5p:ALTX3IsbUYHTqwNqo5p
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 111KB
SHA256 f9c02bce9d5d065fdad7d4286a789fd941754d01c99349c9d5004d43c3733392
MD5 e1aabaf33c74118fffb0793f84979ddc
SHA1 a034764108fffbc99840b07e28909c2e59350827
SHA512 f1315a359cb4fea839a4e6e9efc6456fe31fe956258c2f93d1f91646e8338d82ec84c70b40d213b88de9e1b91503ef9f01e882c2b3b1ac75d1695fb71650770e
SSDEEP 384:ON8Ja+YMMnKX37ZvN9zISAhgqV2pcRdtOL+EEv+QwbyZT+qX22iL8komZ26v0oHK:Ov+YMF9ay7w9fHUMG8KF3Gyct
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 94KB
SHA256 2cff940495831ba8fc9da1c8e1d6ceb749af68448f9f7bff7aee21549e548421
MD5 d957b5df50d3db96540f1b0e744ca1dc
SHA1 dfb07cf22baf58d1bfb7dbcdffce1d8bc13eedd2
SHA512 a736164328bba8bc58964a0175808d6e4849ebdaf2bacad7772f93c2eb1867b9237f2a3c34e46e5a4be94a328b1f78727bd109180d11c20cbdc5f15584a114b2
SSDEEP 384:xN8Ja+YMMnKX8vN9zISSgqV92C+xawlyZT+qX22iL8komZ26GoHqeQLsLR9CSbRQ:xv+YMG9qvGwomSUKG8KF3Gyc2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 101KB
SHA256 0158167f223e7f8cbd9fca3f94aaf02f5be2a93fb8a29cffb17b398e85bebf52
MD5 ec8698890cad1233724a3e47c848f5b8
SHA1 9885c8f366c85331a27d0289b972314bcc24b1d9
SHA512 6760892816fd31573277042bf67178afed454a28837366d01b8f20792240bc6e0ac0cb12255d44a47cb7107917e7cfe7ec178d48044b8260fafc10db61a4e485
SSDEEP 384:ON8Ja+YMMnK97ZvN9zISAhgqV92aO+AawbyZT+qX22iL8komZ26GoHqe+QLsLR9O:Ov+YMz9avAw7mCU7G8KF3GycJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 108KB
SHA256 757cd87f0179e449122db689789d2dbe37c13ef73a221f72f38d93db57eba7fc
MD5 23e6288bf8703743b6844b20a038ad6a
SHA1 465f643dd5d04ea4671d764e25313430cd98519d
SHA512 748a600d77e09068c348af8589e12b07433630d8352a911adba522c90e504c85bff5c373a0996fe11d6afbf53537a655f9d935e857b09e40b9bd284f5a31801d
SSDEEP 384:rN8Ja+YMMnKX37ZvN9zISAhgqV9c7aL+EEvawbyZT+qX22iL8komZ26GoHqe+UL2:rv+YMF9avSw7fHUMG8KF3Gyc3
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache~RFe597a28.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe597a28.TMP
Size 93KB
SHA256 5bb6cf82d23ea48e7d30910a97f1a611b07e6ffaa91bdd62b2b43804925e9768
MD5 c9e724dea35e0ef37ecce4f92d51b868
SHA1 63645a0bfed4913bdb2853b6204007ca5df575cb
SHA512 6084ed8f8bf893645320ae79b2b3b22c2745c5fb723959155172eee3668ab4331d1dc2472b6bf5018ef9960cfb2d5a53ff28b9a792c5fc4943735fedd960947c
SSDEEP 384:1N8Ja+YMMnKX8vN9zISSgqV92C+xawlyZT+qX22iL8komZ26GoHqeQLsL0CSbRQA:1v+YMG9qvGwzmSUKG8KF3Gyc1
MD5 SHA1 SHA512 SSDEEP

Submit Download

persisted_first_party_sets.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

pas-64.exe

Path C:\Users\Admin\AppData\Local\Temp\is-AQRMN.tmp\pas-64.exe
Size 980KB
SHA256 9b9e362814beb417b4d49bbef933dcca2b16d6bcc877e6fa8d291c26a9dc3904
MD5 6ba92c1d0fa12701beb2c35b8a0ca6e5
SHA1 ee02a7477172ddddad7d5d664d00f30cc8551d44
SHA512 da22914e1ca988edb825c65835a40eb21b78f6c1d4a3c1bf098a6515669b4d3f380d8235a7cca42df8faa80fe18416070225d0a46b36c4b78fc5899094c95145
SSDEEP 24576:V0CFBg7otF6CcVGKj/D1vp7oxjrVKWAxpA:V0C477CcVGKbhh7gjMW0pA
MD5 SHA1 SHA512 SSDEEP

Submit Download

cs16_v43.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-U304Q.tmp\cs16_v43.tmp
Size 1.3MB
SHA256 68d8cd852738342c2d3963b3ceafd89f142edac3842b6159fd0ca37eb962b095
MD5 b7f87ca2b74475400e612ef44abc4f25
SHA1 709787d5027456e621337141d4b6cf7ce763a551
SHA512 df580392f346aad03ac4b7f5e56ddd732a349f80dc9114f7322182892138d7d7563ea5862108f404eaee74c51aae5d23be9d67ba2f5e32b749e0351bfddf9495
SSDEEP 24576:HnbbPImgK4brDi4IxgRqzwqNb+Yz73P2EMZbG0JEtd+yqx9N:HHeKh4nqzF3PYdStd+/
MD5 SHA1 SHA512 SSDEEP

Submit Download

SteamServerBrowser.exe

Path C:\Users\Admin\AppData\Roaming\SteamServerBrowser\SteamServerBrowser.exe
Size 168KB
SHA256 63a6c62d7d512b311fae2490f30f52279101ae9440e347565a98fe916475053b
MD5 d361d500b11be589e33ec8018be27c4c
SHA1 30e1e7b39e1520fee510a38dba0b440a89ae5c48
SHA512 68e742445de246cdb513dbb0bf3bda138a890334d4d3b3b1a93ae120dc974272a69932265497cce0cabd22615ba1134e854296a046fe84df9476996ce91decfa
SSDEEP 3072:DJq+r4cento4qHjMT0gNR6i5XIAEqO/9VUEtiMs5w6MvnGFapF1:Fq+r9entorHgpRlZlO8M6mwaP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
MD5 SHA1 SHA512

Submit Download

steamclient.dll

Path \??\c:\gry\counter-strike 1.6 v43\steamclient.dll
Size 383KB
SHA256 e230f88243228352a64f10bd4722b7b05780d9960878ae2500a2a83b61f1c0a9
MD5 e5fafd6d98999bf75085b07077b069d8
SHA1 664023712dd930d845637a7c7d99bdefa0c27268
SHA512 05827b0913bb34aee84640d770b26810c14b8a808e35f6e7ad0f2d2e5bdbfdc1da0cf54bb9e953bc43cef6555db1c78e7137d26b28a9df01cdf29802e932774a
SSDEEP 6144:Lrtry6t+Mf+wmnrR1JNhlZazHbPcz9Keg0RFecMcmVlUkK+uZWLe/50xnRP8aHXF:Lrtry6t+Mf+wmnrR1JNhlZazHbPcz9Kx
MD5 SHA1 SHA512 SSDEEP

Submit Download

Steam.dll

Path \Gry\Counter-Strike 1.6 v43\Steam.dll
Size 322KB
SHA256 88f7c7fe458ec238599dc57063a69b6417902f1e3591c6239af7c400954f764e
MD5 94d9e620da6bd5fe5a4d20aebb15ec6d
SHA1 3c63d12fd2fda36048461c3a74ef228bb58da61a
SHA512 d1fe188954b45d2db40dcb06b44fb60dfe09fd0e0118ddebb27cb294202c2f59b49009e99d28e200078b22061d48d5b3de6251f255426087337c9fc462a74af7
SSDEEP 6144:N9qT45lPNNKeQHW0h7FKGOviTB2wp1PyJ8Ma:N9qcFS2OKGOviTLpSJa
MD5 SHA1 SHA512 SSDEEP

Submit Download

hw.dll

Path \Gry\Counter-Strike 1.6 v43\hw.dll
Size 1.8MB
SHA256 7802a1fcc2ab1749399e455faae907c0df3194386160dc4fa0164c427662fdc2
MD5 a0bc2e53bb55121719af9386ac2ff588
SHA1 1642aa1bfd63585fb324b8d23806efead856a3c9
SHA512 e3a2b2ed965d15833ded927c6566a5facf11d1d654b65f2bbce70405013f2fe13009fe61b5488821f0846fd6cf0a5c5f2fd15a1a93c61c97540c917bd5040c92
SSDEEP 24576:MavbMAInXRc306cwaacDV0iSk7INlLH0U/TDKV39URt6HNpB1+x1E+7TkoHt2auU:fIX23063HsvTCb0olu6lYsDK8
MD5 SHA1 SHA512 SSDEEP

Submit Download

hwpatcher.dll

Path \Gry\Counter-Strike 1.6 v43\hwpatcher.dll
Size 69KB
SHA256 ad16e56157ceae1169edb1bfa6c902ce85d3f5e23815403d27ccff32efb1a4f2
MD5 3531565d73be13ffdeabc638d0d32ece
SHA1 59e17ec1365012e143b559a5e33ea1792f5264e0
SHA512 5dc99ef4a12f0feb05f78b911fed456cb81470caf011ecdc5b75485b29e3b4025ff9ae6a51870a9752cbd66f13971b06dd74e6c803ede7c5a4dc0371a2d18235
SSDEEP 1536:GotDLjT3pyw0qkbRspl61r5QMDU5Qr2p:Lzl695QMDU5Qr2
MD5 SHA1 SHA512 SSDEEP

Submit Download

revSrvBrowser.dll

Path \Gry\Counter-Strike 1.6 v43\revSrvBrowser.dll
Size 145KB
SHA256 c1a779915040b6a8a6323ab64f38bb4445e03f56bbdfcd2a9ef82d45bef3b267
MD5 d4475d63166a7b186b462f223c47ab00
SHA1 cceda74dbcb6956fa4df6b3ef56ba0c2c1baf5f6
SHA512 509ea6d48473639739879188add2508e431ae986d7ec8d2659b08e92a5f49c63e76786e7c0b650a0fdc2c9a1a727f3e56b0ce8236694665c674c76f0e2cd7e2d
SSDEEP 3072:A3+l4gm6J3Nk8H5o2ptwInKW8d7Mc5tp3:A3+l4gm6JK8ZHfTc7d
MD5 SHA1 SHA512 SSDEEP

Submit Download

steam_api_c.dll

Path \Gry\Counter-Strike 1.6 v43\steam_api_c.dll
Size 68KB
SHA256 02fe1504d1ff75a0ed34e4cd8000639711d0481b9ad888dc96ccf8eadddc4753
MD5 6baefb250616105b06438d6742d1ebde
SHA1 bd5b8f0113ab76dd8e35d6c446ab0286450f5666
SHA512 4389235cd5077f5fa9774f5ef2b4a2122de357c897b30658ad3c581e8d8991cf987159849392fd6776a80bc57ab563eda5b0c1e6e167e4a61954e117ac963a45
SSDEEP 1536:zZaOM6RgL75ajIzBDgnwtzlB56uMlCpH:4EgL7SI9Dg6zlBouMc1
MD5 SHA1 SHA512 SSDEEP

Submit Download

vgui.dll

Path \Gry\Counter-Strike 1.6 v43\vgui.dll
Size 344KB
SHA256 0d4472d21443de839080860a300cca6b9436508f329d33d712e5c9bc07d4d998
MD5 d44ee82601ae62ede3e224269a0bbf53
SHA1 2d00b1d5e052584c6c86ec08795d56d2181a91ee
SHA512 00dba1a1d88bbc8f77f86ac45068d3f071805a13bf30c7f5c3f3168d3b799e773a1a3a7decab7931a9104bfe91dc8d60cc54b9e82a12e01b29dfe13c4fd1d398
SSDEEP 6144:5gp6m5oP0Ua57JVDJu41LhG2Uzk7lkMd0FZA6EUW1SdNGcs:Opoip8zy5Z15
MD5 SHA1 SHA512 SSDEEP

Submit Download

vrzXFjj3.dat

Path \Gry\Counter-Strike 1.6 v43\vrzXFjj3.dat
Size 40KB
SHA256 6ecef9ef0f62491d595b2f32c69b53c53a1b3a8a7c9dea39d56c6861f5b93bdf
MD5 e1cd35bbc28f73b7481e8835ee0f0b13
SHA1 ef40d489c61b178b54f8116548662ee876e0133f
SHA512 baf6f9063f95e6d699088ec4c0611825e030382ff913084feb7f913cc8f011d079b6c7143359391d8e30a5e26ac5a5358882b20e3ac31c5afdbe8867ff6f62a3
SSDEEP 768:qCpqOQ/wHAlqcoX56iQt9ZJBW0mhlnSwQu4mtN8xnL8x:NpqOQR8npEJ0jl78xn4x
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/748-0-0x0000000000400000-0x000000000044E000-memory.dmp

Download

memory/748-12855-0x0000000000400000-0x000000000044E000-memory.dmp

Download

memory/748-115-0x0000000000400000-0x000000000044E000-memory.dmp

Download

memory/748-2-0x0000000000400000-0x000000000044E000-memory.dmp

Download

memory/924-5159-0x00000000007F0000-0x00000000007F1000-memory.dmp

Download

memory/924-12853-0x0000000000400000-0x0000000000554000-memory.dmp

Download

memory/924-6-0x00000000007F0000-0x00000000007F1000-memory.dmp

Download

memory/924-194-0x0000000000400000-0x0000000000554000-memory.dmp

Download

memory/924-4102-0x0000000000400000-0x0000000000554000-memory.dmp

Download

memory/924-12706-0x0000000000400000-0x0000000000554000-memory.dmp

Download

memory/924-6525-0x0000000000400000-0x0000000000554000-memory.dmp

Download

memory/1284-12776-0x0000000000400000-0x0000000000439000-memory.dmp

Download

memory/1284-12991-0x0000000000400000-0x0000000000439000-memory.dmp

Download

memory/1284-12718-0x0000000000400000-0x0000000000439000-memory.dmp

Download

memory/1284-12716-0x0000000000400000-0x0000000000439000-memory.dmp

Download

memory/1284-12725-0x0000000000400000-0x0000000000439000-memory.dmp

Download

memory/1796-12844-0x0000000005CF0000-0x0000000005CFF000-memory.dmp

Download

memory/1796-12919-0x0000000004950000-0x00000000049A8000-memory.dmp

Download

memory/1796-12822-0x0000000001310000-0x0000000001368000-memory.dmp

Download

memory/1796-12921-0x0000000001350000-0x0000000001365000-memory.dmp

Download

memory/1796-12854-0x0000000004920000-0x0000000005B4A000-memory.dmp

Download

memory/1796-12785-0x0000000000C10000-0x0000000000C1F000-memory.dmp

Download

memory/1796-12794-0x0000000004920000-0x0000000005B4A000-memory.dmp

Download

memory/1796-12913-0x0000000000F10000-0x0000000000F1F000-memory.dmp

Download

memory/1796-12917-0x0000000004D70000-0x00000000058C3000-memory.dmp

Download

memory/1796-12828-0x0000000000F70000-0x0000000000F85000-memory.dmp

Download

memory/2600-12704-0x0000000001230000-0x000000000125B000-memory.dmp

Download

memory/4172-12711-0x0000000000400000-0x0000000000428000-memory.dmp

Download

memory/4172-12992-0x0000000000400000-0x0000000000428000-memory.dmp

Download

memory/6400-14679-0x00000000004B0000-0x00000000004F8000-memory.dmp

Download

memory/6400-14682-0x00000000004B0000-0x00000000004F8000-memory.dmp

Download

memory/6400-14683-0x00000000004B0000-0x00000000004F8000-memory.dmp

Download

memory/6632-14659-0x00007FF721210000-0x00007FF725514000-memory.dmp

Download

memory/6632-14647-0x00007FF721210000-0x00007FF725514000-memory.dmp

Download

memory/6632-14678-0x00007FF721210000-0x00007FF725514000-memory.dmp

Download

memory/6632-14680-0x00007FF721210000-0x00007FF725514000-memory.dmp

Download