bdcebe6b1337d638c2570d9781583fffff590c060afca21ede8493b7174de412

Resubmissions

30/08/2026, 23:08

260830-242p6stxfy7

29/08/2026, 00:22

260829-an59wavtcz

29/08/2026, 00:05

260829-ac7nkaed727

05/03/2024, 08:25

240305-kbamjsbc9310

Analysis

max time kernel
1772s
max time network
1819s
platform
windows10-1703_x64
resource
win10-20240221-en
resource tags

arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
submitted
05/03/2024, 08:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
setup_katana_zero_1.0.5_(30035).exe
Size 175.9MB
Sample240305-kbamjsbc93
SHA256 bdcebe6b1337d638c2570d9781583fffff590c060afca21ede8493b7174de412
MD5 275a3642a506819785178b133848fe36
SHA1 7af438e1754c7a8f277edb03ab05f6f22331ca67
SHA512 c660cf70d55773c3769b765de0e5ff16fe00d8746ab0179ef3a4fb5bd0044c6b43d9a38489579951351676d7b8146dd90324ccc1511d5f8decf1012be0c53b6b
SSDEEP 3145728:NpIC3SSlwLXoA/EIjpDai1L7BJfmiGn2RMWAPBsFsMGrATwVhO12lBzOHBKjjtB2:NpICicgoA/EIjd9ff5WWA81Ue2l1OHB1
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 6 IoCs

pid	Process
1232	setup_katana_zero_1.0.5_(30035).tmp
3736	vcredist_x86.exe
3408	vcredist_x86.exe
4684	scriptInterpreter.exe
4488	scriptInterpreter.tmp
3980	Katana ZERO.exe

Loads dropped DLL 9 IoCs

pid	Process
1232	setup_katana_zero_1.0.5_(30035).tmp
1232	setup_katana_zero_1.0.5_(30035).tmp
1232	setup_katana_zero_1.0.5_(30035).tmp
1232	setup_katana_zero_1.0.5_(30035).tmp
1232	setup_katana_zero_1.0.5_(30035).tmp
1232	setup_katana_zero_1.0.5_(30035).tmp
1232	setup_katana_zero_1.0.5_(30035).tmp
3408	vcredist_x86.exe
4488	scriptInterpreter.tmp

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
880	icacls.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 32 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\NodeSlot = "4"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\KnownFolderDerivedFolderType = "{57807898-8C4F-4462-BB63-71042380B109}"	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 = 14002e803accbfb42cdb4c42b0297fe99a87c6410000	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616193"	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\SniffedFolderType = "Generic"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\MRUListEx = ffffffff	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0100000000000000ffffffff	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4	firefox.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance	firefox.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1232	setup_katana_zero_1.0.5_(30035).tmp
1232	setup_katana_zero_1.0.5_(30035).tmp
4488	scriptInterpreter.tmp
4488	scriptInterpreter.tmp

Suspicious use of AdjustPrivilegeToken 30 IoCs

description	pid	Process
Token: 33	4752	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4752	AUDIODG.EXE
Token: SeRestorePrivilege	3708	7zG.exe
Token: 35	3708	7zG.exe
Token: SeSecurityPrivilege	3708	7zG.exe
Token: SeSecurityPrivilege	3708	7zG.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe
Token: SeDebugPrivilege	4844	firefox.exe

Suspicious use of FindShellTrayWindow 7 IoCs

pid	Process
1232	setup_katana_zero_1.0.5_(30035).tmp
4488	scriptInterpreter.tmp
3708	7zG.exe
4844	firefox.exe
4844	firefox.exe
4844	firefox.exe
4844	firefox.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
4844	firefox.exe
4844	firefox.exe
4844	firefox.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
3980	Katana ZERO.exe
3980	Katana ZERO.exe
4844	firefox.exe
4844	firefox.exe
4844	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4464 wrote to memory of 1232	4464	setup_katana_zero_1.0.5_(30035).exe	73
PID 4464 wrote to memory of 1232	4464	setup_katana_zero_1.0.5_(30035).exe	73
PID 4464 wrote to memory of 1232	4464	setup_katana_zero_1.0.5_(30035).exe	73
PID 1232 wrote to memory of 3736	1232	setup_katana_zero_1.0.5_(30035).tmp	74
PID 1232 wrote to memory of 3736	1232	setup_katana_zero_1.0.5_(30035).tmp	74
PID 1232 wrote to memory of 3736	1232	setup_katana_zero_1.0.5_(30035).tmp	74
PID 3736 wrote to memory of 3408	3736	vcredist_x86.exe	75
PID 3736 wrote to memory of 3408	3736	vcredist_x86.exe	75
PID 3736 wrote to memory of 3408	3736	vcredist_x86.exe	75
PID 1232 wrote to memory of 4684	1232	setup_katana_zero_1.0.5_(30035).tmp	76
PID 1232 wrote to memory of 4684	1232	setup_katana_zero_1.0.5_(30035).tmp	76
PID 1232 wrote to memory of 4684	1232	setup_katana_zero_1.0.5_(30035).tmp	76
PID 4684 wrote to memory of 4488	4684	scriptInterpreter.exe	77
PID 4684 wrote to memory of 4488	4684	scriptInterpreter.exe	77
PID 4684 wrote to memory of 4488	4684	scriptInterpreter.exe	77
PID 4488 wrote to memory of 880	4488	scriptInterpreter.tmp	78
PID 4488 wrote to memory of 880	4488	scriptInterpreter.tmp	78
PID 4488 wrote to memory of 880	4488	scriptInterpreter.tmp	78
PID 1232 wrote to memory of 3980	1232	setup_katana_zero_1.0.5_(30035).tmp	81
PID 1232 wrote to memory of 3980	1232	setup_katana_zero_1.0.5_(30035).tmp	81
PID 1232 wrote to memory of 3980	1232	setup_katana_zero_1.0.5_(30035).tmp	81
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 2980 wrote to memory of 4844	2980	firefox.exe	89
PID 4844 wrote to memory of 1780	4844	firefox.exe	90
PID 4844 wrote to memory of 1780	4844	firefox.exe	90
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91
PID 4844 wrote to memory of 1884	4844	firefox.exe	91

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\setup_katana_zero_1.0.5_(30035).exe
"C:\Users\Admin\AppData\Local\Temp\setup_katana_zero_1.0.5_(30035).exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4464
- C:\Users\Admin\AppData\Local\Temp\is-J3G1C.tmp\setup_katana_zero_1.0.5_(30035).tmp
  "C:\Users\Admin\AppData\Local\Temp\is-J3G1C.tmp\setup_katana_zero_1.0.5_(30035).tmp" /SL5="$300E2,183845417,192512,C:\Users\Admin\AppData\Local\Temp\setup_katana_zero_1.0.5_(30035).exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1232
- - C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
    "C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe" /install /quiet /norestart
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:3736
  - - C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
      "C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe" /install /quiet /norestart -burn.unelevated BurnPipe.{4F7EC050-ED96-49E8-B186-2457E302C397} {BFE713BF-7111-4EE6-BDEE-34B0E5BB98F6} 3736
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3408
- - C:\GOG Games\Katana ZERO\__redist\ISI\scriptInterpreter.exe
    "C:\GOG Games\Katana ZERO\__redist\ISI\scriptInterpreter.exe" /verysilent /supportDir="C:\GOG Games\Katana ZERO\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Katana ZERO" /productId="1557080015" /buildId="52336036425347663" /versionName="1.0.5" /Language="English" /LANG="english"
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:4684
  - - C:\Users\Admin\AppData\Local\Temp\is-K33QV.tmp\scriptInterpreter.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-K33QV.tmp\scriptInterpreter.tmp" /SL5="$40300,572759,192000,C:\GOG Games\Katana ZERO\__redist\ISI\scriptInterpreter.exe" /verysilent /supportDir="C:\GOG Games\Katana ZERO\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Katana ZERO" /productId="1557080015" /buildId="52336036425347663" /versionName="1.0.5" /Language="English" /LANG="english"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:4488
    - - C:\Windows\SysWOW64\icacls.exe
        
        "C:\Windows\System32\icacls.exe" "C:\Users\Admin\AppData\Local\Katana_ZERO" /grant Everyone:(OI)(CI)F
        5⤵
        Modifies file permissions
        
        PID:880
- - C:\GOG Games\Katana ZERO\Katana ZERO.exe
    "C:\GOG Games\Katana ZERO\Katana ZERO.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    PID:3980

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x3e0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4752

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3476

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" a -i#7zMap19249:72:7zEvent5871 -ad -saa -- "C:\Users\Admin\Desktop\Katana ZERO"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3708

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2980
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4844
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.0.769741941\881606892" -parentBuildID 20221007134813 -prefsHandle 1680 -prefMapHandle 1668 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {22f7fcb2-79bb-4068-8254-770affe53dc2} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 1780 1f0762d2858 gpu
    3⤵
    PID:1780
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.1.1169678725\393944297" -parentBuildID 20221007134813 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70ca6757-e6d5-4fe8-a5df-8fa31f403807} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 2152 1f075ff9258 socket
    3⤵
    PID:1884
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.2.1256143027\179768248" -childID 1 -isForBrowser -prefsHandle 2884 -prefMapHandle 2704 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {070df89f-8e38-40ec-8052-6b3a8c9428df} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 2980 1f07a39f058 tab
    3⤵
    PID:1752
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.3.93875649\1071065115" -childID 2 -isForBrowser -prefsHandle 3116 -prefMapHandle 3120 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9055f917-2a06-4850-b14b-035b12970c9a} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 3440 1f063d62258 tab
    3⤵
    PID:1984
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.4.1817263871\1736257454" -childID 3 -isForBrowser -prefsHandle 4392 -prefMapHandle 4388 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2c55be9b-fa97-44d4-8abf-e52673cbda14} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 4400 1f07c3fb258 tab
    3⤵
    PID:4592
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.5.2026748135\987242457" -childID 4 -isForBrowser -prefsHandle 4740 -prefMapHandle 4744 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7328a284-ebb8-4e1e-8a6c-49f2ad136ec1} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 4708 1f07a359958 tab
    3⤵
    PID:4840
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.6.1267482507\224013487" -childID 5 -isForBrowser -prefsHandle 4952 -prefMapHandle 4956 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c9723ba9-eec2-4c0b-a900-9a7c55bfd72b} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 4944 1f07cb48258 tab
    3⤵
    PID:1472
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.7.634803272\1679143298" -childID 6 -isForBrowser -prefsHandle 5144 -prefMapHandle 5148 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3a1760af-a8e4-4ae5-a255-8fb15dcfa823} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 5136 1f07cb49758 tab
    3⤵
    PID:4000
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.8.964847039\1100052138" -childID 7 -isForBrowser -prefsHandle 2720 -prefMapHandle 2904 -prefsLen 26328 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a439ac70-e8e3-43dc-a760-7dcb0138ebda} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 2608 1f063d61c58 tab
    3⤵
    PID:4244
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.9.1893381540\478108984" -childID 8 -isForBrowser -prefsHandle 5764 -prefMapHandle 5800 -prefsLen 26807 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ad17be19-0637-4e8f-8b37-4161e4de2277} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 5808 1f07da49a58 tab
    3⤵
    PID:3132
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.10.326857910\832927686" -childID 9 -isForBrowser -prefsHandle 6836 -prefMapHandle 6868 -prefsLen 27459 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e08c75e1-2fa4-4e35-8017-83195b9c58fc} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 6856 1f07c43eb58 tab
    3⤵
    PID:2176
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.11.607293351\1401192074" -childID 10 -isForBrowser -prefsHandle 6888 -prefMapHandle 6940 -prefsLen 27459 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a334b108-0ef5-447b-8f8a-6aaef4248791} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 7416 1f07c440058 tab
    3⤵
    PID:68
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.12.463758893\272581185" -childID 11 -isForBrowser -prefsHandle 6908 -prefMapHandle 6620 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7d3d0594-7126-45d8-9c5a-0175a0e9b085} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 7264 1f0765c9558 tab
    3⤵
    PID:1916
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.13.1327494005\1380528656" -childID 12 -isForBrowser -prefsHandle 4380 -prefMapHandle 4728 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b41c2a90-21bb-43db-b48b-e6fce5e46a9f} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 5416 1f07c5e2d58 tab
    3⤵
    PID:2952
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4844.14.1002106076\45744036" -childID 13 -isForBrowser -prefsHandle 6876 -prefMapHandle 6852 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f5cfaf36-29f7-4324-8b0f-716904cf9e55} 4844 "\\.\pipe\gecko-crash-server-pipe.4844" 7624 1f07658a758 tab
    3⤵
    PID:2992

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Katana ZERO.exe

Path C:\GOG Games\Katana ZERO\Katana ZERO.exe
Size 8.8MB
SHA256 504161e27b9fad8451a21b715fae267770a98591ff65ca893e8d405559fdf59c
MD5 6377a66b55021480076add69055f8418
SHA1 36d6b722f6bad32867e1b00891cb7fa107387db6
SHA512 daa8870601be3c58c7ebb5479a091dcd4e58555e718e6f58d53cfbe9e360d01e90df90f7b09f5cb6f0738aa20abf3a9b8f1457f1bade2508563d8c41a2d6f14f
SSDEEP 196608:QZX3Xs1fzBtuW2Ah9jD6DsDoaw2m0M42Ysqar56Fg3fFVLvIDYOALIv5qRAWUY+M:/Ucd+2M
MD5 SHA1 SHA512 SSDEEP

Submit Download

Katana ZERO.exe

Path C:\GOG Games\Katana ZERO\Katana ZERO.exe
Size 12.5MB
SHA256 dc6598eadc66d566a8e66e1bb2ca1329a99d002d3b96b5bef8634382c02761bc
MD5 acf3a082f0105f84333ff5a6b0709655
SHA1 27b8a270728efa9da3baa261ffc9e6bf189db159
SHA512 bf9dc0c878bce8a6ff9a1b16b46165ac791daee4acb0a9a0b7efa63beea5b7dede9b9d1034b4fb883a5f70b408b58be52344bcaca259e63a667dd39cd42a393e
SSDEEP 196608:QZX3Xs1fzBtuW2Ah9jD6DsDoaw2m0M42Ysqar56Fg3fFVLvIDYOALIv5qRAWUY+A:/Ucd+2mGE
MD5 SHA1 SHA512 SSDEEP

Submit Download

scriptinterpreter.exe

Path C:\GOG Games\Katana ZERO\__redist\ISI\scriptinterpreter.exe
Size 1.1MB
SHA256 b895f6999c4b7ed7eb3f85c17af9167d12017cd1f5ebc8755adeb969ef4b7fb4
MD5 2e87c207550a0577279abc82aea68b14
SHA1 6ee0b9e5914c742b3e3c5ca626ac79eb4c5866f4
SHA512 dfc48e023dcfd7bdf519961bd3d787c1dffc85dee39861db83638e2ee99ae32bb3d9a66aeabdf27df65e2079d844490af1c03fe7a0b4e110dd53018a90fe936c
SSDEEP 24576:UEft1NCyRWXQ7CwloeMGJW+5jdIWhwdpP8xsH:xLgPQpoeMGxLImIbH
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcredist_x86.exe

Path C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
Size 11.6MB
SHA256 fce6f61ddb0e76d580e11c79e2aebac524de9c2df1a6e0066240140adc0e180e
MD5 a66360b996bd759a2d8ba480205335af
SHA1 040db796524c43f3f9824f0546bf50fb696210c4
SHA512 710442bdb2f3a51d8628467a80c8560a5f7664091bebe06a4745f384e89d4e63b08a242a9cf0d120e7b0c5bb7f5507dc81aba286390fb630199b85e4090134f7
SSDEEP 196608:yguOzjCPlpdcdklRRvc5wIsj5MSBP8STr/URFMq6cZs7WekAs9If14WWcEiR5mzJ:ZLglp+dkBSuF2SfUfn67qekA7fVswB6
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcredist_x86.exe

Path C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
Size 10.6MB
SHA256 d9d3ed9a4726f0149254a464a2e04e45b09712dd77cb8798d346ea6ee56d0636
MD5 79e1375669f3a53dced192ace2ece072
SHA1 ef9e482275f013117d5024678d7fab7fef4961af
SHA512 edaaab93282b3557e329d535b460954c519a4fed26e9814c9954c2c6b4f55a168150a458ec8bdf6e8999268e734d28fc7f27f107deaa93b6ce1941268408b3da
SSDEEP 196608:yguOzjCPlpdcdklRRvc5wIsj5MSBP8STr/URFMq6cZs7WekAs9If14WWcEiRM:ZLglp+dkBSuF2SfUfn67qekA7fVM
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcredist_x86.exe

Path C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
Size 10.1MB
SHA256 5fea2a562d488287b7609d74061dcf3882d176099bd06efc8e08b92a77d1d059
MD5 142334372167f1b49c91c158b27a8f30
SHA1 dd9bb0f2a30b0c37ea959e63c4af440291cd6602
SHA512 763ca6c377ebbe208d71c6b0c26c2e03fd5bb4cae91368960a08c81c3d1ad670a35c4db09d757c22d4de8eefeff4b7f4b3eaef727bb9a1af0552fb2fd3cf6b39
SSDEEP 196608:yguOzjCPlpdcdklRRvc5wIsj5MSBP8STr/URFMq6cZs7WekAs9If14WWcEW:ZLglp+dkBSuF2SfUfn67qekA7fX
MD5 SHA1 SHA512 SSDEEP

Submit Download

audiogroup1.dat

Path C:\GOG Games\Katana ZERO\audiogroup1.dat
Size 1024KB
SHA256 83d2b2e5cfe75ab3addf3a25e9132f1600f28189b08add7197cf575916cf8104
MD5 dd2271bdd619004839fc75910178a579
SHA1 96507fb3284e37b77c6ef0a267a859353ad2e667
SHA512 6eaeb6137f4e54949cfb809e7cf30866b7c4457f826514282ce364ccc183d84fc0d49052a091f2240f0f4c66cdf4f169274b9ac20a866cbf9511809ac372dfb1
SSDEEP 24576:YKc8blZYJ9wvhoAbuaUhG9r/v9dVToFrrs8eMZF:Y7gG9wveajxpeXow
MD5 SHA1 SHA512 SSDEEP

Submit Download

audiogroup2.dat

Path C:\GOG Games\Katana ZERO\audiogroup2.dat
Size 1.8MB
SHA256 a977e02576e73ee0d6c0129e670adcb20471f624510f0a71972036c3815f8d69
MD5 0366d3e3203cd87c5966545df309c28b
SHA1 d4711011947b2ff4bae2401faf99badf34cc1263
SHA512 1a3ba826cebec4bd40662dcdb6555940b1b9f6718a07102df15deeddff4f0d83011b2a0b5732677f349d3aa10c0fd0571802fda3222b9244b3b90c54c069a231
SSDEEP 49152:hGQOQxBL89GoVpbSv++EQQsQdJtC+apy77xlbLtsSV:hXOaBgIo3EUQVQdVyyL6SV
MD5 SHA1 SHA512 SSDEEP

Submit Download

audiogroup3.dat

Path C:\GOG Games\Katana ZERO\audiogroup3.dat
Size 1.9MB
SHA256 9429fe484aebf2e1bfa93c45d9c80423987d2b9488a2c1448fe234f902341937
MD5 99e6e93a7db5006f72704012b815cf72
SHA1 c7f0fe37b1c1d3d72af15b5733e74e1dd761ca2c
SHA512 60261743b8f0ea0b21857569947d9b79918db08a29acb10f53d2f90d85f8255b6f5ee1867562b9b6428fed9c7c9ca14e6521d6850c62a8f11c049a649ea2040f
SSDEEP 24576:BPL+kpfhJ11mlQH5VgtR6oJlc6FFsPlczYX8OSz463pAtCXw5h4/S3bz9n:BDBthIlU73ynsezYMwKpAtRg/S3bzN
MD5 SHA1 SHA512 SSDEEP

Submit Download

audiogroup4.dat

Path C:\GOG Games\Katana ZERO\audiogroup4.dat
Size 1.8MB
SHA256 93659ef6d59579ff6b9ef680351a32b1d349e0f0d37f9e5a176c2c690c71ea80
MD5 e88958fbef4ed501f885e3026e0b4589
SHA1 7b0b1dac869298b1e635f04cca8965e46d24c45a
SHA512 f438c69a2cbdcdf575bf76fdac13962b84ea050fdd1598c26069e7343f8694eff000556f670db3f2bab612b6c006985e127101db4cb9ff8f008d6e7370dafc8b
SSDEEP 49152:RX+Y+z8R6aKAevk2+Nbv72fegrc3EqR+kREm:RQ06abej6v72mm6XREm
MD5 SHA1 SHA512 SSDEEP

Submit Download

data.win

Path C:\GOG Games\Katana ZERO\data.win
Size 13.9MB
SHA256 0c7d12bde1fb3d5635c7ecbbac74a5f5d682ef4ee59a683845f1346c7e9e0f0c
MD5 d96b2cde18f14c286734905124d0c5ef
SHA1 dde5de14eb247ae5e95ad0b75118e5233f22ca40
SHA512 257d5e14080c615aa887b2f436d9370d5bbde5b76049e2a1f627db57ab6b6a89d9f4b5df2aa37c18accabb0f5246bec90c90366a6d5ec5a32d5365636b03862b
SSDEEP 12288:X9q+OEJzFcaJjERbihaSWWZzD7E6K098w+njmuqNqRr5e96KW7:txcmjkbeHNK+oY2Kw
MD5 SHA1 SHA512 SSDEEP

Submit Download

goggame-1557080015.info

Path C:\GOG Games\Katana ZERO\goggame-1557080015.info
Size 767B
SHA256 94dd82645544adce43123cf3f1d741871969c81d4083ba1acc4889b6375d2c98
MD5 f01988a46044d8b8a6fcd5142d78543b
SHA1 d66e3540e68f45baf5d392a4e57ccdf26f480398
SHA512 b72ee86e15583b41f0824c4636e07b1cd06e759705a35eed02ff3bf957e670089e99dad17704b8ef83e1e1d8bda635529c822ec3123e9082663106876c185f98
MD5 SHA1 SHA512

Submit Download

goggame-1557080015.script

Path C:\GOG Games\Katana ZERO\goggame-1557080015.script
Size 399B
SHA256 ed0d0692bf89808121c3bc32b6b4016ce3ba9e6a4d43e199fef802f83cbcf9d0
MD5 53e7ecc9498f87f0195d25207fc4b09f
SHA1 40736cb8d001ef6ed611a67d178f208ed5b9f642
SHA512 c6853cbb70e9b1791d62f2e7f3cc0a385dd1f4327a635fc1bd098776edce1473b1a07c59549730811b10879c5b55ecb81c87167da39036b388dffe5cd3fbd862
MD5 SHA1 SHA512

Submit Download

splash.png

Path C:\GOG Games\Katana ZERO\splash.png
Size 637KB
SHA256 0ee0e3e046da7600eb7323f9e9af22712894a0b5e946c2943ed9032a57781579
MD5 ec9531aadbd3ec6a03eb4e7f68f6f75b
SHA1 b3040cb7254b9cbcfbfda05c1866870c73ef1d73
SHA512 7ec3dd5195b1595f1c3fff9a37b67a9f552378d3329d118c1eda6b599c5effbaa7f455b4f35d88ce40ca6e57c89aefdea2e9b56868eb0ae14ced3a5f284f6665
SSDEEP 12288:9Qxrux4YMM7CTsNUyDKIoPNfjScVL8tm9AtfAMtvKg:9CF2U3NNfLL8tmStvKg
MD5 SHA1 SHA512 SSDEEP

Submit Download

unins000.dat

Path C:\GOG Games\Katana ZERO\unins000.dat
Size 368KB
SHA256 f39456e70a74975d98ec7196fa9b4607bdfba10247201aec5dd24867784c8f43
MD5 050169e26af7d1c52658e6a7d5067c43
SHA1 da169140755601c443382fc9517f986f27d23e86
SHA512 d0dc37a80cf3ad36bceb329286f04b7af7c15b2dd656db685ea47e314a600eb0e342a8a33feea24607f01752cb6fa3d3a695688139f5fc7ef5b43a464ac0fa4b
SSDEEP 3072:usgKpZOaKhNkC+7uFNpmbKa/x2SvmaUoX+o9/X7DFSBdFu:OKp9H2an
MD5 SHA1 SHA512 SSDEEP

Submit Download

unins000.msg

Path C:\GOG Games\Katana ZERO\unins000.msg
Size 22KB
SHA256 e43d06ec2b3dbe3d81bcd6b7880d28d074dac54b38646a605cfc5c809939da16
MD5 668a2187f89c993485bd46382ac682aa
SHA1 abeefe05d6d6f64c0ef1f5e023f1861000aadb55
SHA512 4f056b8c69c0674ba725450bb6242625389f23043a46ad95c6452893da02e1349f6067a1e19e86c8182867b08b8e78da98bedf02d2c94c3aa647b45ec6da56e0
SSDEEP 192:N1Ejmgkg3Sqf8sfr69FT0AKanzLYfMgGzPL7Vzo+Fc51U84QDztMqbfbKJUfvo:N1Eavqf9r6fKVfM/Ro+y1URQDztMu3o
MD5 SHA1 SHA512 SSDEEP

Submit Download

Support.url

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Katana ZERO [GOG.com]\Documents\Support.url
Size 127B
SHA256 1d7db258e3f147ffb737a0f1e0fd7171a8518643599b4d004af93226d0626e0b
MD5 c9c3b8e5d6c79671aaa084f9f3ae0477
SHA1 84ca321dcce7f58c1475df189703a60264e041d5
SHA512 2fe7150fb703752b27ff2b266a2ffd1a644052ebb90d7945d3c16308deb128d9286219b7eeb4e379fc38d1e2670522e227c9c92a99236229f4507260ace52096
MD5 SHA1 SHA512

Submit Download

11013

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\doomed\11013
Size 9KB
SHA256 7c79bf41c3a4e5e00fd86ce458522bf0ffb1b022677bfcc17ed37e42bd9d6ae3
MD5 c2dd8194ab3e045ada031838d3e81e5a
SHA1 88e4c396025cb1dee4fc201c69aa0fa80da23192
SHA512 5448498d18ad0fc18a7c74e7db6c11efe998560a96a9cbf5f47110b8391a8f5ebb833f18839ed11208639056f9c231cfae6cab96e4fb9103d0f4e8e8fa4327a5
SSDEEP 192:rd7M8FMJGmpOb8ohsMJGmpOb8ofC2rAl7YNCW2P8ro15j75ywpskCGd9YItduYIT:rdXzmm8oszmm86CmAl7YNFU8rIVy8eKg
MD5 SHA1 SHA512 SSDEEP

Submit Download

setup_katana_zero_1.0.5_(30035).tmp

Path C:\Users\Admin\AppData\Local\Temp\is-J3G1C.tmp\setup_katana_zero_1.0.5_(30035).tmp
Size 1.3MB
SHA256 87c07a864e6608f629d76350d65b6f43b603512ad2c8b2f8a2d3fb97d82d1e8f
MD5 03082a6a1e000a77be6a5b921c69bbe9
SHA1 1b9c52a40198158f0cb85ff3f48af0d6416fac8d
SHA512 75d6aac90c3d698158763567b584bfce2c52d64e50b95b6e04aa36a48198f1a6b4125a3a2bdfab68a945d61c2ef45b1fe94755c39dfdf6b9b57b24225934edd8
SSDEEP 24576:pgNfn7OOXeL7dJ/oOP9pjA0fY2Mqz9JT7ytfsxjHElkLD229Oqkipt1NCnqxjVx:6tTX6THjACMq/xCaaMksgiv
MD5 SHA1 SHA512 SSDEEP

Submit Download

scriptInterpreter.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-K33QV.tmp\scriptInterpreter.tmp
Size 1.3MB
SHA256 58ad7a547fa9eb89919070abe14cd50c84cf319157a22c887a8995d648e91c0e
MD5 8bdaa3d205950989c707989e7a8e150e
SHA1 287508181c084f164f4ca20eb9657a36bf9fb81e
SHA512 2e901868bd5010b207ffa378358cd7c4034ee0640d0f5a7096349bf9c97b2e4c0145c8331c5bb2fe621c466c93856f9ff5c838c1a68fabfb9dc3397658e838bf
SSDEEP 24576:4gNfn7OOXeL7dJ/oOP9pjA0fY2Mqz9JT7ytfsxjHElkLD229Oqkipt1NCnqxjVk:ZtTX6THjACMq/xCaaMksgie
MD5 SHA1 SHA512 SSDEEP

Submit Download

1207658714_english.jpg

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\1207658714_english.jpg
Size 124KB
SHA256 8f6df008e27df617376646721d5389139129436c52d68cc64f4ec0f5a2b1805d
MD5 cba5334ecac271f33a050df6d644c304
SHA1 3e258d71996acd5552f912aa6f9b593d561ab87d
SHA512 0ca264fb211f8288e378eb285d5ae906a1939de9edac2268ea6e84a63181914e507741f7bf3ffb2061f4ba26c658acfa9696b1cfffff1039cf29c0e6af760503
SSDEEP 3072:vHGRzbq42L+ugCELH16UMDRYgK51KXRLeDCmxxE9m46i/v:62mCE1NzgKYs9n46mv
MD5 SHA1 SHA512 SSDEEP

Submit Download

1439474400_english.jpg

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\1439474400_english.jpg
Size 176KB
SHA256 238b1588b7d66ee14cbe0d411bc5cc1fa59591cb2c00c7d52ee75658e8fcf701
MD5 edb88a8e8f8af6703ea1c56d0d1d5f27
SHA1 7103bcc99485fc1cfb62026665795f00949e6616
SHA512 0dcb3b768214449d12311b91e99e8f2172c95dd5b91919dc98a0ec3e5e417e8adedcfccf4dc354525e1830779bbbed1f5afffa5a1a0f4e8ef0dcc3e4d018d014
SSDEEP 3072:OsSJ3N0Ybaf7k6pcwn4xHS7q+HslxEmLD34t+qm7dvrXNV3hzd5Nw7/Mudw/AxXJ:dSoYbaf4oZn4xy7NsBD34t3idjDtnezf
MD5 SHA1 SHA512 SSDEEP

Submit Download

BigOK.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\BigOK.png
Size 3KB
SHA256 59d8bb3e87a89ef523c0495addce38d69560af42aaa82f56dd41b12e6612c13a
MD5 5b43a5d975a53f4fc1da67ce9f7784c1
SHA1 8543fa1e471030049942252b23cb22e0880c3af5
SHA512 5dd5c4e9859a555a4a32da76f5231b44f7556274c6501da530b2cdd570bcb4675f710bee708322a40ed3ef9280c0d652b4e7ef0e9eaf128c08534f59291917f5
MD5 SHA1 SHA512

Submit Download

EULAAccepted.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\EULAAccepted.png
Size 2KB
SHA256 0de278f5ca6d8570d9bda592268a14a28b87d3631fea2d25721947397aaab79c
MD5 461dfeb75927bdb39f9db5348612a611
SHA1 b7893b1fff6801e37ee7337d876962a09184941e
SHA512 68528cf45c81c2c024a672f42c2cd6d4f72c015b443f103ca21deb8ee2bec4f4027490e7f33b5338a87537b5bf7f255f2828aed149f622155ec89cc81687651b
MD5 SHA1 SHA512

Submit Download

EULAShow.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\EULAShow.png
Size 1KB
SHA256 6112851daea2aaa7174e8cfac4a0f61c968bc090342503804c476eff47cc2462
MD5 c596bc9111edc702bbbb29b70984254f
SHA1 d4712c7b91ff4f8994e7907d31357c42eb47c738
SHA512 db50d0a39ec644873a03d64552fff1776cc94f016e8dfc8918e65aee94f7529a6de4637567b5e65c4ea988f3775785c4b52c2d96fe8dbc52b1e21ff59c737c2a
MD5 SHA1 SHA512

Submit Download

GOG_new.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\GOG_new.png
Size 3KB
SHA256 0804b385c1736e009fe8c3b1b14085b9b9abb40ce487360002ab4a8f3505f4e0
MD5 d5b63bdfa47ef5954917c148bacf7b13
SHA1 5302c6715d9e9b5d2768b130f3e516e175684cc9
SHA512 b5cde681be9ad1c1211559dc4b363003bf547e8dc965dbb9560fdddfc28ee1d8f27cc534dd00864d800fd351c48694d7dc8df55fc3d8d69acf8b702c7b421aa9
MD5 SHA1 SHA512

Submit Download

OpenSans-Regular.ttf

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\OpenSans-Regular.ttf
Size 212KB
SHA256 e64e508b2aa2880f907e470c4550980ec4c0694d103a43f36150ac3f93189bee
MD5 629a55a7e793da068dc580d184cc0e31
SHA1 3564ed0b5363df5cf277c16e0c6bedc5a682217f
SHA512 6c24c71bee7370939df8085fa70f1298cfa9be6d1b9567e2a12b9bb92872a45547cbabcf14a5d93a6d86cd77165eb262ba8530b988bf2c989fadb255c943df9b
SSDEEP 6144:Y6pzdD/rIJXiQTutgCNktQFvmnoxXTS4ubCl:n9FrIJJaqCNktA+SXfUCl
MD5 SHA1 SHA512 SSDEEP

Submit Download

background.jpg

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\background.jpg
Size 383KB
SHA256 4bb388de79ab74a81ffdab24b6969d63245fea259043ff3d8da44969f78d03ed
MD5 f2d4829d52037321c5ddea452034fea5
SHA1 871a5a48fc3dfedfac08eca3d6e865a853d62202
SHA512 923c7ff925fcee7e2342a4a1ab93fd4da1482607da0313c3c78c229aa4555ba79d308d85f04805d2db19ce634afd08594e7de7f7903a6268f4a4b5a53871c613
SSDEEP 6144:FGCsxs2/ZcUbneeY8rFty7aRi9MjwKFXLqWdF5gX4NX91d+FUnsU3HEC9N9pbw5s:oxs2mOneN8rFuaRi6ZqWv5Q4NXLMLU3J
MD5 SHA1 SHA512 SSDEEP

Submit Download

btn_md5.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\btn_md5.png
Size 8KB
SHA256 b0193ab375f604fa4a25cabdea8f713babde1c07ab562ffc5679352c8e01db47
MD5 3befe9739354ee24a0b1ea8df05ce274
SHA1 ab0bda986a8c46aa19f57b75a2b7b22445a3c625
SHA512 ac016a59e0bfc9b22c376ae5d498c5660893a983d932b2bd502dabe032883c69e79ea8d93c2db49f95415c3cdb068e9f7d1d85527a4f9e68e065a989852d09dd
SSDEEP 192:+CgAPOTLq6/bkYNuQJA6hcxuGcjMTch2kmBm/5o:+IPOTLq6oAANOjTh2kmE/S
MD5 SHA1 SHA512 SSDEEP

Submit Download

error.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\error.png
Size 726B
SHA256 142b16dc6239421691fa6e619d1a61e61176d89fa018a88b46893c29a57aad8b
MD5 df10adc25b673e74e19971c17bee5a98
SHA1 ee16fb1cf9491f5e611282f0574b27d76fede412
SHA512 dc3de10e0321966cbbfb2e57b3b41da6f26dff0c7233a47469da58775b5c471e6b5181e4d4ffc81ef8b83dbcad74ccc1aad7678518f99c9185a441d2a23e010f
MD5 SHA1 SHA512

Submit Download

error_icon.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\error_icon.png
Size 1KB
SHA256 acdf96ee4261fae138e6350a0ad50b367022ed5b908fa168baad92644f566ee8
MD5 263720c4b8bb111567a2a49989b8f467
SHA1 cf346fa3c70164648e0eaf72a37c6f4920ab4792
SHA512 94f06a81dc735cf264abde86e6169e5fd78d873d2e926fd48287d2ac5208fc930c3c432186e3510add002bd1b4ae32ad8d35270b17c3ce5f18c43764a8e9de43
MD5 SHA1 SHA512

Submit Download

ok.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\ok.png
Size 1KB
SHA256 0d37d4421a39ca8852eb6760b8e914302bdc6cfcc7b170dc1b6c9bb9be148b7e
MD5 103c1368e60806b1b7995a0894eacf87
SHA1 971392527f6e4b655044773132505c901a6b5469
SHA512 652177e94438aff102f2ed873b26f0985ebed134763852b49b1ca2698463c1dbeb85152f19c8e18d397229ec5cb2cd1d17c61d454ab7c425a2cab540adc8228a
MD5 SHA1 SHA512

Submit Download

progress_center.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\progress_center.png
Size 1KB
SHA256 2b9dae87340e66b67ab1d8247d4a137628e324969f92fe1098f95a7c5bab2f43
MD5 ad7fc1e37e40da38dd57adc446cc6c0e
SHA1 08033265deb9b45243cfa0065d98ffe13a039e26
SHA512 dd715d74f8e1ed6ab75b7b6530b383ac47040d8baa7728be160f6d230bf485a9cc54f15f7dc85b122ce56e54d63fa4890e510dfc89d9c9344e31f789ebac8756
MD5 SHA1 SHA512

Submit Download

progress_left.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\progress_left.png
Size 1KB
SHA256 85e39d909a7300fa2043ec42818582867b981401264b14fc5408e477ae0b4668
MD5 290c7612ad7a077028cd3dc78ce99673
SHA1 18995fbe39d05e4a1cafc7cc2e0f6fb745442f77
SHA512 799841f5b8a1056e78a49c823009750e4b93af130a6c4ff9dc6d386c06b88614e53b46a6df62f5a217d5c99da01cf4e2fe8392c73d39e81000045291cf24205a
MD5 SHA1 SHA512

Submit Download

progress_right.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\progress_right.png
Size 1KB
SHA256 396a3351fe409328782ab138282cf9cec061a5a9540a3506700a620db1f54e7d
MD5 c25a41f022a74308d944d1e807d72f44
SHA1 83c6bbec3fb373fcc78ce0e737742100994cd6d4
SHA512 d2f4449195f3e60c826cfabb52a083d829eb9d0509272977d8fdb33bc5214678949cd27d0594684594e0a3eda2351c39cec8d91923cb716ad144ccf2b966c8e6
MD5 SHA1 SHA512

Submit Download

slideshow.ini

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\slideshow.ini
Size 261B
SHA256 3614059e549ae87a8130e785bdcbf88e44754c6d1ab458969fbce119a4eda6cb
MD5 2332fd96a1f83a3c31e4ebe6e540adb9
SHA1 6442cbc120e8da8751f21b4a880e9038cd25b9f0
SHA512 4be2f5ca70843266fa21e1a045037823e0f4211358daae544f44f348819bec0070285a1e185aad0da94ea07dc0f2223f00ab6fc73e93583d0fbd30c1f7acf207
MD5 SHA1 SHA512

Submit Download

track_center.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\track_center.png
Size 1KB
SHA256 794f9eeca7fd99846968376b76a296c927532cef1271325cbf555caa0d0d5860
MD5 3f2b0c22f8ea28dcbb82b39a16a039aa
SHA1 b3f4dfc2ea86fbdad05877b4c356b7fa8016731d
SHA512 b4bf65d751717e85418947662d315ae3bcb177f60914832fefeeb95da9eddb75eb5531c62e5a5a70ff03c8a025b5a03e61ffbdecc9f483bea9684454ca9362d3
MD5 SHA1 SHA512

Submit Download

track_left.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\track_left.png
Size 1KB
SHA256 a8340fb5380c922b60ea40043590dba067dcfed6e22636851691df38156a3aa8
MD5 55dacb00cbe2825a8540236c5777a205
SHA1 18a52ac6c741b558500fbc1716d46b4fe4471982
SHA512 2ea444cc1080f20761c8d71d96fcd04ef48254cdc1dc41d1d139f459ea5613fe12f6e4bd026bf33a5c01ff038e72e05dae2f8fba33ff517dd395e1911f10ff10
MD5 SHA1 SHA512

Submit Download

track_right.png

Path C:\Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\track_right.png
Size 1KB
SHA256 f54cd6e42f2b2bc5cb8a15f6a28f1499abf094a519ebdf39f4c4e167312c9c16
MD5 ddec70b6c49be3e8c3a7d01c2f6ff1c5
SHA1 5383271999f787c36b1dc8f3cc13c8407b195439
SHA512 f43f94b194b5a7eafcec9e831f61042859c30e1af2e2447195bdd06b12c90982181161a1c1be5aa5223ff664f88e4891bd71cfffb7ef672d6fe4f614030e0e01
MD5 SHA1 SHA512

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 442KB
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1
SSDEEP 12288:tESTeqTI2r4ZbCgUKWKNeRcPMb6qlV7hVZe3:tEsed2Xh9/bdzZe3
MD5 SHA1 SHA512 SSDEEP

Submit Download

tmpaddon-1

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
Size 8.0MB
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72
SSDEEP 196608:945hXmP7/cvflwtf0FzVC/5lHevzc8XZbivwEiw3cFTx7z4zV:9tP7/cvflof0FzVgKRF9zw3c9x4zV
MD5 SHA1 SHA512 SSDEEP

Submit Download

logo.png

Path C:\Users\Admin\AppData\Local\Temp\{e2803110-78b3-4664-a479-3611a381656a}\.ba1\logo.png
Size 1KB
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
MD5 SHA1 SHA512

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 7KB
SHA256 e08240f53420a4457e3cbd80ffff2451db2480e95cf30788b7c1a01771b6c55b
MD5 3770e59391fa1f2090e7fa1ec5381d8f
SHA1 024ae284bdf0a612ba7a490cd05c2dea5c6d42ff
SHA512 b6651bd167aa275dafd98e0628b177ad0ac14e85c083af4a324e1ad15302260d0fdf1af06e62ac707b8f9097f345da06fe26be6bfebe2231a9dc8c3445ab9eaa
SSDEEP 48:jO4pdKWQJ5UgdwJHzu74pdKWQJ/6BdwJhud4pdKWQJ/adwJjD6Glz4pdKWQJ20SC:jO4mDOy74mD/RId4mD/BSGlz4mD2nYyQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks-2024-03-05_11_nS8Go9mVfVZwbMdsBUM-aA==.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\bookmarkbackups\bookmarks-2024-03-05_11_nS8Go9mVfVZwbMdsBUM-aA==.jsonlz4
Size 946B
SHA256 ac2a48f0654940e1d7a87d20cd289e74c754e6c494be4ade519ffb9901933896
MD5 617b39dc4c46a925f5c66fe298512813
SHA1 9cdce6af32243d154d99181090e2a014eaf46796
SHA512 74cf706ae1534f3774c1fdc9dd232c76d051ffb5c36609273bdea089cbea6ae5a9e4a42fa8fa9ae76291c93ede3b56dbbd620f597970edcbb3bd9d6168bf221f
MD5 SHA1 SHA512

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\broadcast-listeners.json
Size 204B
SHA256 9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa
MD5 72c95709e1a3b27919e13d28bbe8e8a2
SHA1 00892decbee63d627057730bfc0c6a4f13099ee4
SHA512 613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182
MD5 SHA1 SHA512

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\datareporting\glean\db\data.safe.bin
Size 2KB
SHA256 cc22439e41ac9b0497ec09cdd38fcd18df05868ffe1e20453939c2ed7c06c279
MD5 ffd87a9edae2dd9526173a58f71d69c4
SHA1 0748f423f3401bbc62d08b516b17db7c150f5a36
SHA512 349bf7a02eaf9f687fd32556a2808ba77888c3576e01f190e27f680845264e582df9713ff5e55652c31f10b14d6344547cabae190344567c96e63912a042b76d
MD5 SHA1 SHA512

Submit Download

87aa595f-e517-4453-a96d-5d67686bb74e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\datareporting\glean\pending_pings\87aa595f-e517-4453-a96d-5d67686bb74e
Size 746B
SHA256 0794f14eb74263f3c3ce086196385c9c4a1952778a377c04ebafc71b035b4495
MD5 1ec3a138ff919525dd45d681723644ad
SHA1 34747c365c9b44664a196ed1b3f3085ec71db441
SHA512 604adcca3adf8f7489e3814a6599fbc602ddc822c9c7348d3a9ba29241acc5ef1aad331d131e04a86ef7b8ebdbe7bcba9f5e165025d21b510b09559c4e85adfc
MD5 SHA1 SHA512

Submit Download

e5bbcf48-1278-409e-816b-5f9229d1f2cb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\datareporting\glean\pending_pings\e5bbcf48-1278-409e-816b-5f9229d1f2cb
Size 11KB
SHA256 967ff2bf25813e458faf1dc8d8b5a6f748b066849331984d1111cc57000da9fa
MD5 1dc5e7fe7638f33ee349bc8ffbb8224a
SHA1 9b4cf817b413077fbae4a29343b70fed92faa3a2
SHA512 8a8354a869ddcb6c06c17ef7c8e7c7783947e8bf0ef7011061909ed4b7e994b63b481ce1160ec1d3f040e4ef947ae570dd190a3b3086253fb6964507d77d04b4
SSDEEP 192:/TH9Om1429602SXCLtseqkAqeFbmxG7XjMiwmGJsN0aVpjaeXHRQL7afI3dkCTGK:LH9OZ2KSSeYeC
MD5 SHA1 SHA512 SSDEEP

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll
Size 449KB
SHA256 214c8e2eb0a1316fd87dc4009b8151b78d1128922f5f43331cb033a8d99b3db1
MD5 70ec567dc13537297adb875103454b21
SHA1 310a4292bf7106043e484fe46b5b7f52fa10ba88
SHA512 03cdb1972622b2f046dee1617171bd8de4cbc41d05b8cd8f5e736c73720f1edbd459731be11d157a214d5507361f77c3ff484cabfa8ffe9df01168a23490a92f
SSDEEP 12288:vYLdTfFKbNSjv92eFN+3wH+NYriA0Iq6lh6VawYIpC:vYLdTZ923NYrjwNpC
MD5 SHA1 SHA512 SSDEEP

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info
Size 116B
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1
MD5 SHA1 SHA512

Submit Download

LICENSE.txt

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt
Size 479B
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json
Size 372B
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7
MD5 SHA1 SHA512

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll
Size 11.8MB
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275
SSDEEP 196608:lP4/vkvbdjMq4ytbko4qIUcXkhrVp1HSTDsoTn90lcGeFaxJI3qLaLhFT7Uc:lPcvyiXSWxRU/OpZXJFee3qGhFMc
MD5 SHA1 SHA512 SSDEEP

Submit Download

widevinecdm.dll.lib

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib
Size 1KB
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776
MD5 SHA1 SHA512

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig
Size 1KB
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2
MD5 SHA1 SHA512

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\prefs-1.js
Size 6KB
SHA256 262c56a4beff56fd959ad1dc87af5ad4fe2c2ff9cfb10a4d87702672a81f2bef
MD5 74257f1e2276e6051db73931e6c59735
SHA1 08beadbae1175eaecba30d52b7ca4d986fc0cae1
SHA512 e3b749c278a258956d4a9e9c3d815aff88511b42ab7520784a7b5acade55bd20b4c3fdaee9c918041de1b66503a880def7b9693c130bd9c419e5b7dcfb096897
SSDEEP 96:xHPRocnUTeqGqUYdGtFeOTzSQPXAnpjDmHH+0OBwBw8HJ3LGS:12cnIRrdGtFe2PXOE42Bw8HH
MD5 SHA1 SHA512 SSDEEP

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\prefs-1.js
Size 6KB
SHA256 fadf59195f8186ed12fc37495629cb9ede1c62cd795713e617d1c19a09cb8eca
MD5 35493499cd27ae06357c48ade7d4bf28
SHA1 af3a426c753297cedb8e55b412372d60511c3557
SHA512 d389a92acb9350bb9c1791d5b0582fc3dfd0ff64b23836a3506db1d39ce7f42112c07afe0da065118e5de67c9782bdb3cb23e120d027f108eb3d8ccdad0202cc
SSDEEP 96:xH85nUTeqGqUYdGtFeOTzSQPXAnpjDmHH+0OBzBw8HJ3aGS:K5nIRrdGtFe2PXOE4FBw8He
MD5 SHA1 SHA512 SSDEEP

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\prefs-1.js
Size 7KB
SHA256 426873bc7f6e9dacf536b33a40d0cd27a59434367c34de8e9729056d57fcb538
MD5 6819f6432277d6e273421cbe15135f6f
SHA1 d965e4e3a63ccd56e375b0327796d1d3a1e4d997
SHA512 4087d6808ed9698204aafe90e512cf9f119eb38c02faeca0aa33fba4ca841a54e525e94d955e2603c93ff493bba1e57eaa1ff1ee45beba77f1a5b214ef2198ec
SSDEEP 96:xHPRoAnUTeqGqUYdGtFeOTzSQPXAnpjDmHH+0OBHRBw8HJ5LGS:12AnIRrdGtFe2PXOE4NRBw8HR
MD5 SHA1 SHA512 SSDEEP

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\prefs-1.js
Size 6KB
SHA256 0937ad36cdac2f3138bbd8b65e5fe672af6f6ed8b8d3fa436441088f7271b456
MD5 afdfc0dbf2c3cd824900a5c24caa50e8
SHA1 8e89bcda7cbaa9245672619cb96390905c54f1c8
SHA512 7b8ed62c55b58c28e57f53991d089cf525eca89d313829da8d9ea62e0aec3ebf1fd211d0b7f6b6cf13c437ae6b707b18c99ce3c1f23dda84ea3b00bd75e47716
SSDEEP 96:xH8cnUTeqGqUYdGtFeOTzSQPXAnpjDmHH+0OBzBw8HJ3LGS:KcnIRrdGtFe2PXOE4FBw8HH
MD5 SHA1 SHA512 SSDEEP

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\prefs.js
Size 6KB
SHA256 f295df75da03ef953e1fce556a34cf05002660c5390366bb8431d55c3ea0976b
MD5 1d23e43f012bd457cd272718dfacaac3
SHA1 8fe59922e5699743c25d68a179ef20d24ba69031
SHA512 f3072209788ee432a6dfb22745c0f6dee5f2c67c8c6aca4c7f113bf2adcdba59576eba1c8f302aa6caa44a41d9bd5d8e0e0e481459b8f6d570d684aa53c5863f
SSDEEP 96:xH85nUTeqGqUYdGtCeOTzSMPXAnpjPH+0OBzBw8VJ3T:K5nIRrdGtCeGPX84FBw8Vl
MD5 SHA1 SHA512 SSDEEP

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
MD5 SHA1 SHA512

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 0a9a25eea7198b34fe040cf873a656b323064f8f4c0c880ee695177910177ba0
MD5 cde888686a6f994aa22f331fcae39833
SHA1 3bb2523a082f99744dbf1a160a8d95138c4e586d
SHA512 df1c755fe3b2bd6c449f41cd28165277eec876cc62fecceddff25b25ed49614f9601c671b86c3eaba45b4ffb3b459a9bb0e93bda88d268a3b15941264f308123
MD5 SHA1 SHA512

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 5e3c04610a96c1ef47168596adc4fccbc9e6f82c33e63d5c611166532747441f
MD5 519e3c40c99e1486fc3def581583262e
SHA1 fc6a91fb9bcdcf4036d008a2dbfa0ae9ac8ecdec
SHA512 152dcde533943da9e6a9ce21f662eef97562d36a1629e1368bb17fbd12d0ce387c4cac15c1e8fb7d9e61dd39f2894b38d04b9c6b7a8f63e105886bbdc09bc081
MD5 SHA1 SHA512

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4
Size 5KB
SHA256 e0e7b37393ef71d7252620d1795b0f968ef32999cf26c8f1d94a93c382c6ff34
MD5 dd276e1059f06dd3c6fe59c90fa1bd7b
SHA1 d92eec044a1f842de38da126497d62498ee177e1
SHA512 79e477772f9ac242b43fae328a756b9a11731609f9a24f47efc658313174f3d74785c75ae84b90c1ab871dbc4ef812c4487f5e862e2996d2d5c3075e0eb857ef
SSDEEP 96:85DfqMOvwEoPXVUP5WJW6wba68yXXT9CjPswfxYvcKhmjTgW5TI9OQVEr2wZQtLU:GqMOMXVc5Wo9m2nT9zwfmCR5TUjE66AA
MD5 SHA1 SHA512 SSDEEP

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4
Size 5KB
SHA256 eba583fe791110b535e7f586d8d2b4e402abc633fe1e40132a4c7750a0466e3b
MD5 90a86557a3eb45b663ce67da29e59808
SHA1 982aba23acea20a15f45182f2165906a56cfcbf0
SHA512 59701036b93c52061a0d16bd35b7d28135be1eea43492531f08ea2c5ef2fc493dcebb34cabf0cd4a2595bc14e215e1ede64ec22f0f66202a878bbea40ef8c437
SSDEEP 96:85DfqMOvwzoPXVUP5WJW6wba68yXXT9CjPswfxYvcKhmjTgW5TI9OQVErZwZQtLU:GqMOhXVc5Wo9m2nT9zwfmCR5TUjEV6AA
MD5 SHA1 SHA512 SSDEEP

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4
Size 5KB
SHA256 ca1129fa5bfc8bd764eab2cd7d109ec90db98da3abef6efa6cccefd35724144c
MD5 d058b459daee37b01656c7f484a5fd77
SHA1 abe362dcbd8465d7441d7b9d13b47516620592ec
SHA512 84704662cef7c46d9ca634939bc4ddc60fd3a925fc7495b9ed2f4d6aa8bca3206e99dbe41c2dabd2f5110d6877aa8fc17f43e3bc619d10d8ffe5e4ee32941a33
SSDEEP 96:B5DfqMOvwTl/EPwVUP5WJW6wba68yXXTuCjPswfxYvcKhmjTgW5TI9OQVN4nRk/z:DqMOswwVc5Wo9m2nTuzwfmCR5TUjN4gL
MD5 SHA1 SHA512 SSDEEP

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4
Size 5KB
SHA256 3b6c16541050069a7a457b9c8af2a7a921c2d53d8525bdd37b61c154a71585b2
MD5 91405f33bd858f89876565ecaa67eb73
SHA1 a83290de14b7a9c763df15ce6229a4ccb191283f
SHA512 0c26f6fab9923c96e3bd26676a9ed77c377f158bfaac40caa6d2f9cc15a06feae244da0d7ae967d42c56bdafd551e9ee56babf3e724a0c1c60354368f6273e8d
SSDEEP 96:85DfqMOvwX8oPXVUP5WJW6wba68yXXT9CjPswfxYvcKhmjTgW5TI9OQVE+PlwZQK:GqMOYXVc5Wo9m2nT9zwfmCR5TUjE+N6V
MD5 SHA1 SHA512 SSDEEP

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 192KB
SHA256 54ae89a2715df381906114d9bf4f3e8ad824afb29ad1da0869393960aed85bf4
MD5 af919ae6c9d274291d4cf39d9ea0628b
SHA1 2806f3dfaa93c5af354031bd92a3f987ac359cc1
SHA512 90716a3f0fdb1fe45110a458b18a30e29d0cb50741d6070e543b56b526c340902de296e0dbdf34991e2e39529a194466e4c737edbfe38058c2e408ecf3109fa0
SSDEEP 3072:O0cH6EQRuFPc3y3e396X6uaZ3zeH4xcDew:O0cH6rR0E3y3V6uaZ3zeHpDt
MD5 SHA1 SHA512 SSDEEP

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\targeting.snapshot.json
Size 3KB
SHA256 5c050b512023088080a5c4010e14b6498c88414c64e72c38b4c6dfba0b53ad92
MD5 c582650c04573695ba0218c398378886
SHA1 1cd619856f88829bcfe02bdc7f98e4241c6afe84
SHA512 ba35feed96b8755a2b51b541f2c35a2561dae5cbfeff7b36bfc762b738f23370edd0f51f58cec95a09090fa824be12bade3bc1f57f93b0df7bbf478a4783e052
MD5 SHA1 SHA512

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\xulstore.json
Size 141B
SHA256 87835b1bd7d0934f997ef51c977349809551d47e32c3c9224899359ae0fce776
MD5 1995825c748914809df775643764920f
SHA1 55c55d77bb712d2d831996344f0a1b3e0b7ff98a
SHA512 c311970610d836550a07feb47bd0774fd728130d0660cbada2d2d68f2fcfbe84e85404d7f5b8ab0f71a6c947561dcffa95df2782a712f4dcb7230ea8ba01c34c
MD5 SHA1 SHA512

Submit Download

EULA.txt

Path C:\Users\Admin\Desktop\Katana ZERO\EULA.txt
Size 44KB
SHA256 83a931f641bf017f0ec9c722f24110e5421712683be1117b2e5cc68b56cc4c94
MD5 b732bafc1139132ed848559e1bedfb53
SHA1 28b36e2703411e7cffa405dcf381b9e68f8b413a
SHA512 c73dff60b4af3638cf7411a869e2ec9cec215d6b8688c360594e0607647e1e393cd64193ce81ac51829ac422e2697c568c8072799807a5e8b539382fd78d5325
SSDEEP 768:B9MyjKpFqQ/K2Oj5p27mnsAtoC1NUEQjxAgUxYcekvraOWsX0/2PCCyllEn:B+q8AtoMUe5ic5vuz9CyllEn
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launch Katana ZERO.lnk

Path C:\Users\Admin\Desktop\Katana ZERO\Launch Katana ZERO.lnk
Size 1KB
SHA256 811c8d081a11e199aea91e8b28a1de3b367c8f9e03fec95c687073fafa74da1e
MD5 0c3bec1cb93bc0cdba34af330328a668
SHA1 982a798f345732f491672a8d13610a082f1702aa
SHA512 cd940264fa973ce6d6b451f59671346e19574376de7911fa3291dfb0725307c069a57bfbc2a21f066e53c748b0043af5c1a9df22a0b8308d403041723e721078
MD5 SHA1 SHA512

Submit Download

buffer_sfx.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\buffer_sfx.ogg
Size 5KB
SHA256 08f8f59461e28b427d3ae9ecc41c8e001c0d2a3b915718df6d65be564bdb1a5f
MD5 78b417e3da9c6e398425547cbff9042b
SHA1 f90a8b722e7cd0cdb6180a4a2431c6e971c79c18
SHA512 3e0fd4cec992a162e5106c30bea7f837f78f62f28b3c917bf792e6e29b5606a45235812f9a815fda373881974cba43d3c0aa05e068d4471c9238b97aa81f8d0a
SSDEEP 96:pzOrVko1BJoQhri4BXOYwgucPaMN+BPPPPPnQYyMeBrLKPf/AtcVGTHC:ADJomrimXOct5g6koMHAtzbC
MD5 SHA1 SHA512 SSDEEP

Submit Download

gog.ico

Path C:\Users\Admin\Desktop\Katana ZERO\gog.ico
Size 67KB
SHA256 f6a71321521ba89713f0bd38b21f809e87e8a789cb172e8e4693f9479e30b1e4
MD5 88cbd6c016021b7b4a4b15879476ec6b
SHA1 b6d0919b43934b29a550369370de069ed569b36e
SHA512 47569c2a3e5bd791c59423e31abfb3777acf5a0a53a8b3170084324010349c2a60e6e14f945390e9f256feb30fabe8c50497123d393f7b6408dc8f4bf362dcb5
SSDEEP 1536:sz0rvN9JsX6D54Qcn6V1dpEJL8G+9N213fF+x8IsH9uBz2p72mP:2IvN9JDLc6HoJc78fFwCH8Bz2p72e
MD5 SHA1 SHA512 SSDEEP

Submit Download

goggame-1557080015.hashdb

Path C:\Users\Admin\Desktop\Katana ZERO\goggame-1557080015.hashdb
Size 2KB
SHA256 d2d6164042ee26744a834339dd602084dfd6a6b1335439df8cbbf26fb9c25107
MD5 e338bd0c9660e3272cb14d45d97c1564
SHA1 47041a300beae3301c4242cd9af9484718f44d43
SHA512 3989e0a74bd63a732e46ca9d6cb0e76dc1e111a6ca886cdadeaf9485c39562c5f1370fec7b382fc1a0ce185d23a867ef9ec5876d0a165f0659c7191536fb5f25
MD5 SHA1 SHA512

Submit Download

goggame-1557080015.ico

Path C:\Users\Admin\Desktop\Katana ZERO\goggame-1557080015.ico
Size 142KB
SHA256 63d735ce6cea5aceaee0f1eb6ba5ab01208a2e56046e895198fb576d89879757
MD5 28ce5fc6023c68bafecbe4e2e6f86d7a
SHA1 7bb1b3003f944fe200a3beab99efe836b550e23d
SHA512 6ecf41af2767fc173114047c36980c36363aa7675918ed9fc0635cd72b05592b5fd0cd882be7f12d6969b06c8829f281a54eb5c0a4da05c84083204c264afb9a
SSDEEP 3072:O0IaVX3h8q43ubFFYIn6vZ6MMUlxsBVjuCtqObrX8nSQqNGOwMXQ:ONceMFFFn6vZznlCBHtqOb78SQq8O9Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

goglog.ini

Path C:\Users\Admin\Desktop\Katana ZERO\goglog.ini
Size 73B
SHA256 7717249d156093d2317654fb37989f1b42eee8ef97bc6c9c34cc6c820cbb1e16
MD5 0f051df70cb5272baffe35260a1a1609
SHA1 2f5a782662a87d35577a990bd5f29ba5caeeca2c
SHA512 f2a1a3cfc4d664aa217d5dc72a9cf83f4dcd06debdb623381070364e74c3861ca45bdeed30d44434094da12f9a4d3bad81d6fd8603806ff492f813f794aff3e5
MD5 SHA1 SHA512

Submit Download

license.txt

Path C:\Users\Admin\Desktop\Katana ZERO\license.txt
Size 2KB
SHA256 d7fa6ca4077f5319942b079113e918c12099866b4d74b1fcc0c74437463aafe8
MD5 e1c64620d09a3ea5b6e40a64d79b8e59
SHA1 a6405105345eb6fcc3eb58148e3f1e9574bafc3f
SHA512 c9f90f274094019d30ab6e9840ab225588f404aa514fa5fc13361576de85b5bfdcb02eb81572799ffaac0184351182478ad48cda9af710dd384e8169cc6c4eec
MD5 SHA1 SHA512

Submit Download

song_bossbattle.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_bossbattle.ogg
Size 960KB
SHA256 7925c879c8f85ff371f3ed73189b6c0f448c7fefa7178c5ac397883e1b34f518
MD5 e0724881a84127aeb2ba5a78e99cd57d
SHA1 d4d2fb52d0caeb624e9822895c25cacd6aaccc46
SHA512 156d0d2867235a2b0a5cc4fa03af4c3cb1ad834df79de84cf1d145486deaad0385d9e13130872b75bbca31a977ffbc8f2e660d9a1bba8debc44c1a09db934bac
SSDEEP 24576:bR0sH0j4VgOvnyKzCzdL7CpyYAd+J4E5EGGV7OAin:btH+a7PzCRL7CpyaJ4E5EGGV6Ain
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_bunker_1.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_bunker_1.ogg
Size 3.5MB
SHA256 f9952e2ae3be4d916630f1a8797da65bd96e238a53d576ee04b6ad9a1236b6e0
MD5 2ee6c353e5c79772f39220e431bbb4a3
SHA1 db63822c535258456f0def9b6273d25bf52d7565
SHA512 e999326e18b02f99c42dfbca19a04485770bc32fb1d0c7bcc9e409c95de79f1ed530c1cc18aa3f91b59ccfbc142877bef6431aa1da70ed199a3eb42b9859469e
SSDEEP 49152:HKw85l6xaser7qyqvX5TGWOi6py0QwLaYyYSLrNKTrLFOl4FRFwh3SXRlhDhcPGi:AsnGWOvy7wLxbSLrkOl4AShfOPtIN2t
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_bunker_2.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_bunker_2.ogg
Size 3.4MB
SHA256 e7a53d77c8eca2796ba444ca3a6b093ca2447378d3d9a743d397b829f5d4722c
MD5 2c0986c3057725ebfe3fe576fb8b518e
SHA1 10eca1d485b6a77a0be0f81eee37d72f94cc616d
SHA512 85af8675f68b217550028030de3fed699117bffb9a02e2ce7e584361f2f84174f3e22f7094ddae4fd58ee105f2e60f7758610ee0c43b5f2fec34bdc5b40068d9
SSDEEP 98304:xsmT0XSxGF21I3B2qToS2c8S3EV2p133V:/4XSNIko2cN3Tl
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_cathedral.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_cathedral.ogg
Size 1.0MB
SHA256 54c63fcdf6ffb5d3895c5ff66e32b0734c33eab202d6852f2b08696990db167e
MD5 2d757c00ecd9d006356da875b3ec624b
SHA1 e9967b3acc882d2771a58c83572c48d25596eb31
SHA512 77bc056ae1df2d25cf084a0248c9052a9a3a720ac1838ef077f28c754b1c3112382faae377ce70deff7890cad6b5f41a0b705376540894d1ad4d1b4a4afd8b23
SSDEEP 24576:FyYOCA2r9vAyVThqHvPag6/dtuS5DzWwGwkHMTTAQ:FTOCAKF3evPagg8G+wG9Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_chinatown.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_chinatown.ogg
Size 1.2MB
SHA256 6957ca6a69a3722385d67b191b6a88e2283f46769a8428dafab2a7cb36abef1c
MD5 8bedf89e0e4a7475c4f80c32d4e5de31
SHA1 3ece5f30c6f3ee5ff507ec45ea4aa5c3c33d4d5a
SHA512 67ec493e6884f12e724beec1d3185fdbcff85399d5b69c42f22993826dddb2cf64324923b6607f7d49ecc615e2a9616f37508221920fc4adf7229d92b4e8922e
SSDEEP 24576:4cvHqRlNwQTP8jxfx/+PValgTvDKr3AHMhv0vE2KxVSE:HENZT8dfx/+PVa2TbKzvhvmJKLf
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_comingdown.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_comingdown.ogg
Size 1.6MB
SHA256 e0868e4aff6a7bfd464c00ab7ee022539dda46d9969991c6ee52215fbf61bade
MD5 bc5c4253c4a019b6d357298ae34eeff9
SHA1 0bcef792909e875b6cf1391c9f088e8e94de21fe
SHA512 99a39f86d3b377aed4a74e311c7c4b23fdb6c831c34fcc52b550e387fc34e53812555c1381b90b1a5f7974182e760c3877aacd1742f678b76890778e337d94e3
SSDEEP 24576:PqHs6nnLQ3PsLjgR0v5poRKvUykTwjTV+f8Db6fiJcSWS0Dppp3stOt08:yHtLQf6kConwjwf8DtJcSWHh3sMf
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_dragon.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_dragon.ogg
Size 2.4MB
SHA256 25e970ec4e75743fc05253f05e9364e0392cdea5ed272a9cd905690476992439
MD5 1cb43b29acfba7946ee90b76f27e23b6
SHA1 f20e206a940a418db55e5a9c59cc81887b59a5a1
SHA512 ccbd2cc81ae85b0940b4bd44acdb278585421f396d4c0bbd9827e68c18f6a3fd2e29746fc26829390bcbd9c4b988654aba4c9a65cc10411a8edd29d3dc8c3d72
SSDEEP 49152:wfAizkvgg2FkP4hf4srAKY0aajDshna7YwufN/zceluf/6:KAYkvGp0vajDx7Y3N7BluH6
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_dreambounce.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_dreambounce.ogg
Size 425KB
SHA256 09e85b7f966b3bb1601ea3d641ea40bf0000cb3095c4564a91d44b03a4390727
MD5 5cc9f8d74eec7fa1decfcc6f548c587a
SHA1 f6e7753c4c02aeb9922cbb71c17104d8cff3bfef
SHA512 e140a61c1afd54efada504fe761c8712f5068b7fe35a045902f4c126c66abf4ab37859a833bed2a63674a6f7cd4c1b68da1a9ac9182271aa196da2ead6292588
SSDEEP 6144:oPrcIeOzpZlJYxtGhVR6HeZ4SVzP8HO52vM1PzRfaK/VImNGLyEZBzW:ggvO1RYxtafZXVz0u8SRkmETBa
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_drivingforce.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_drivingforce.ogg
Size 2.8MB
SHA256 4517b04dd018a5cf74508fa9cfbb26c9397157aaa9fc50d29be8a9d974ad3a5d
MD5 d60a02587e599d2570be03a8ed21a27a
SHA1 cdc415223b5d00dd2570df636564f11c79f26946
SHA512 d2c7a0d8865c7aff89b4322d7b6058d4343c81ff56b27123f441837fb85bf4511f83522bf0305bbd7e4d83829842754ebc056a839775debd630e3b32f3b2fd04
SSDEEP 49152:Iryw0CkD9Zb/UAwH7fbjBWtUmFMh9CCmWYqOPv59/jgbcBF/kSr0CW40F8Y/gkfW:fw0Ckb/UAy7fwFeCChYqOPB9EbcBF/k2
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_edm.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_edm.ogg
Size 2.5MB
SHA256 44a76a45d2d99816bd219575ddc3709fbe74c10c04d45acd838c6714735288ec
MD5 ea55db157fa880d6530520b7d25181da
SHA1 5c14c46924cbcc09dc3e9677ae469ae624bfa6bd
SHA512 ccb255197b56e1d808e2279e5915fecde915dd5aa366dfa30d9042d12cf2295af6258fb77a0e371297ee37e016a163d07d293050986dcb9335ea65b766de2e1e
SSDEEP 49152:IdZmmpPFgeybRBTTKLgfVOTOUm1aLF5l7vcOOlmAZupp5xRDst2YIhFpWYLI:IdZmmIzbGUqEaLF5lJAZMDxRwt2YIhFu
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_edm_far.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_edm_far.ogg
Size 243KB
SHA256 18d1ef81c611eceb3ff309d0d8c9d9231a0ded2b4688bbe96b261ab77261fddd
MD5 ebb31a2127d3aa83fb7ce68d15d99c29
SHA1 4cb6adcab0d2597ba188c00cfb976ff0d9c7b861
SHA512 e61c6ddbc78d094260d1db179468af832d4006a91769e6b1241a503372dd89676f8701372d3c8304477ffd870a3f293a3a8dbfbdb719780f1cebb84d1a4b8884
SSDEEP 6144:D9QEFEVKLp8Tatem3IjmoeXsBfh98Y8/jyGa:5L/N8Tat+uX01Ga
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_edm_headphones.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_edm_headphones.ogg
Size 52KB
SHA256 af6f425d8cf44ba9e3a6d4cec5df1f6be306781d2f00b689d8ce70ad8d2e5ad6
MD5 8a354c3cc36b10c576fd5eaa00e3ddd9
SHA1 7ef4a41b31532e3747fa6ba1a466895f6cc33819
SHA512 187d7793d4adb659f11b31face1e8bfa0e749bc289cf03ad476e0468771c9e3ee74707b7d52b06f01b19c57c4fd72bddc9addd4ba65a6da2f54224c7e6f788a0
SSDEEP 1536:Iy7mEIZFqZjL1/xuE+oJGJl6WbiZzIX+V7uiaVZyh/Vn2Y:IMlI/YQloJGJl6jO+ViiHV5
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_end_of_the_road.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_end_of_the_road.ogg
Size 1.6MB
SHA256 8bfb90e64c3b26415c8cd993362b108828832b76d2cd83faa6a8d10aa081e3cc
MD5 23d04094f6170804fbd1e085d5ec1b5c
SHA1 65dc27dff0ad3c35ed2eaa2fc734362715913995
SHA512 90239413132dd03bce2c85346214d9bb88e4534e01c733622db955f01f4aba55a6c078bff53f2040a192618a48159edad79d3b0f402223e1075feb2fa31bf219
SSDEEP 24576:mlpuFLc94EV0P6LemL4FyZAcrVxBOyUukDC/hRgRQ/Go3U6DozdW+jx+k:wc4UP4zLQAAcrVx/1kDRUadDp
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_ending.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_ending.ogg
Size 312KB
SHA256 474f6ab3dbfebda09e6a9a2972cd507215711759b09bc4bcb3cbb05077ef5320
MD5 58549d1fa379b12fd8404c04a60a251f
SHA1 ea050adff959790a1fc23714098c638307fcf1b0
SHA512 c284c0267f84740795ed3551ca7c57eea1fa35d3da69856a4bbc8b6d47efa80063f839684d42d1ce1113b61636ea96bea878e8c9b8cfe7130221c2efd873cc3f
SSDEEP 6144:oKim/JWmt8ivAImEIsk+w+OL+oMxsIybb9UK4DlNc482bPrH8clayHMyrFWPJHp4:jd/0mtfvAOjkDDMxsZn9UKyEF2bjLlRT
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_ending_2.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_ending_2.ogg
Size 759KB
SHA256 9befe6b9a4d8008ea3f41084453179be35fcd6ffb110ec96dd8020938a52b6a8
MD5 17c57806df32f8f0c4a4334a34c73596
SHA1 29c9e93350b9e58d51d27e6ca8800353f171257c
SHA512 4442a7160de90947b4e7b4e871b826d8db113b7d4c1fde9708da3ff024da8bddb160bbf06bde430325f29237c0115f8285ec57a9b7c97eb4f83a839328d6d176
SSDEEP 12288:NMPPKHORX+53ftk+9o5tx2eBr2oLvIFRdzyyfGRWsgiqxrXmM:eXKj31Q7lBrbLOLzCWsox6M
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_fullconfession.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_fullconfession.ogg
Size 2.2MB
SHA256 52002eb3655478b53a59e239997a575cf865a6d57f5d15c9f6a1147419e8e576
MD5 ce9e223b37b70851382442b170f0bf6f
SHA1 440317efd53a31197702b8348125d0126796732f
SHA512 7c6e5294ff55e347b1da7b2f1b7023220e972aceb26a83a949b943b44ebf7982337a5435cbc3790161f5ea7f95bc0f42a1f7629ca067b10b0b3ab7c26ad39d72
SSDEEP 49152:FObPV7Ci2v1cATCNibLizmQw8/j+P1sJyVTn:FGPRZ2vaVdmQw87+P1Hn
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_graveyard.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_graveyard.ogg
Size 866KB
SHA256 826c43853678300b869adf45b7fc27fc94671528a33d44874f62ab3606412bb8
MD5 a00af8aeb967498111b8874c5e309cf3
SHA1 b6deedfba7f376bc87816dd30c21bac4e7af13ef
SHA512 989ef80520b1224a75e88443a5d3607111065b7e86258d157d1842c10f626219b56232015807df50027226cedb9a05891750e151c5a527c97f8f10a6bf9bdba5
SSDEEP 12288:IOqdjJPwZwhnz3upIXPw/OII/F9wL/roIi5/oxjHC8ZyWkp3dBEfpgxB8+bMTXA:5qdVPwZwB3NIO3dewI4+tZe3Apae+0XA
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_graveyard_2.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_graveyard_2.ogg
Size 1.3MB
SHA256 a688ce7d6203c3255008d794e4529a36fcbcec95b9f6c953441a02080c08fa2e
MD5 4b92f9ce0ea864cb3f793b00a776fcf9
SHA1 d76c5fa94665797fa80a51f2167463f35342026c
SHA512 64e11868b0134287d51e81efa54e9b42524dd7e83414f6fad5f78cf0625116c8e313d78c9bffef6125929693dd344c62fc44166fc92a3b8a1aec79f06e76d009
SSDEEP 24576:IpN1qtzSX5P8mkuERp9cQ1KSNoHGtD7T/9+c3zClG8Mj60R0EIxyXGZZUdkIPh9t:IctwyPuE/9XwmoCD7T/QxlG1j5UukoGA
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_katanazero.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_katanazero.ogg
Size 2.6MB
SHA256 75c3ffca50bdf7ade752305303717ec0464ce1e898773ea8a93cc4224e911ef8
MD5 2d1e451b6ed1e097808c54e31eb143e4
SHA1 4b88ac05c7ede795df05c5863ba447d2c3719fa2
SHA512 b072b517bdcb8543de8bf295ad58bedcb687a681e3f69d87d1fa6cf64561ac89f0a2f82be0f9cedcf9a18371d453332e905e8fc5c0002727176487c346cdb695
SSDEEP 49152:ukdH/cX864htIa7FhgX8pP1EUMmQzt4AQisYNRpLNydgXon889ut+6P:FZ/kyIa7Fhu8/E8C/QMJL0gXo8Z+6P
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_killyourtv.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_killyourtv.ogg
Size 926KB
SHA256 92a4f509f3fc659125971d2c252a32666c45de1e9a20f074c7bc3baa457b2f92
MD5 1add590e610e78ec6a8a4c1784fbe66f
SHA1 6c9a6359318660424566b272418b58a1e0e29153
SHA512 2a8b0e656b9d62b2cdb2e9c9ee8f88a6366c859dd04ecbdb674572bcb87a4626296ebd42d25f85c6f1616cc56ce2bc2ab9657a7fbe10f8b346a4ef2b3a0b54a8
SSDEEP 24576:j3UzU3x+oXgqm7pEf76RZV7nytHNgmZtIo45k:j3tx+kS+in+6N6
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_levelselect.ogg

Path C:\Users\Admin\Desktop\Katana ZERO\song_levelselect.ogg
Size 1005KB
SHA256 f643e903b4aaefe750881d9cbd235042c66f48efa794e48cf80f2d14a774801c
MD5 0d5eca20015f58e342406450f5de53c7
SHA1 55b164b551d79f767aa2c9e3a7e4a4262e8671aa
SHA512 8d05e281e555936bda22898d519858ad66720a8e36daa6e4483a9ba2ba4f138c8b0a78699b5d9f8cd379fb58236509d2d761637ce838bc7f19759635b61db54d
SSDEEP 24576:fi+E7ywlhxPjiiqKsDgyd9EM34j6rsIpTIeCGIqSLejqmvrLsm:zQnVPN88SEMI2rXTIetrLV
MD5 SHA1 SHA512 SSDEEP

Submit Download

steam_api.dll

Path C:\Users\Admin\Desktop\Katana ZERO\steam_api.dll
Size 210KB
SHA256 64eb5531bbee05db713dcd47e4a74c59e27bf067b0cfe9603eeaea5a4601fe90
MD5 111b4505eab5f342d9292dd592e6940c
SHA1 6562c7f856f5ba1bb390474d925f7a79ae432122
SHA512 176ae878132081037a81d313407cdb99b66a1a79ea86d79ccc7cf0dad333cf21753b0e885af06ec3e9e5084315ae645c9184bee46eeff0fb487545d55b60aaeb
SSDEEP 3072:1GqYVbRkudWS/0AvM/29pNpeAA+2C+48IaD7+drNVRICcCB7Pa7Orx4I:1GqYVVk4Wa0Ke290xUXqCcm7v6I
MD5 SHA1 SHA512 SSDEEP

Submit Download

uninstall.dll

Path \Users\Admin\AppData\Local\Temp\is-69OQQ.tmp\uninstall.dll
Size 712KB
SHA256 d88bcf910e7a5ce4d76ca48b263ef226911b455d3a8db80c9fa69aeb2b3898a1
MD5 f3a88277fc7e0c057c40e47a7e43f9ad
SHA1 78ae0052b323139a4de7a5361a40503a39339f4c
SHA512 3c40377600fbb814fe19423404d2fb29f6342ab2a3a6d5dc50f42086fc0f59174184a0870d7f04fb6ee5f84828e1ed282396bfcb70842084af25f5af15cc8a1f
SSDEEP 12288:S5buPksTwKAZ1BVcvDEmwQT9KT/whp90r2pYZnaTmH7BR888888888888W88888j:OmzEKAXMvDECaY50r2pMaTmb9
MD5 SHA1 SHA512 SSDEEP

Submit Download

botva2.dll

Path \Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\botva2.dll
Size 35KB
SHA256 a4b61626a1626fdabec794e4f323484aa0644baa1c905a5dcf785dc34564f008
MD5 0177746573eed407f8dca8a9e441aa49
SHA1 6b462adf78059d26cbc56b3311e3b97fcb8d05f7
SHA512 d4ac96da2d72e121d1d63d64e78bcea155d62af828324b81889a3cd3928ceeb12f7a22e87e264e34498d100b57cdd3735d2ab2316e1a3bf7fa099ddb75c5071a
SSDEEP 768:Aoi9qZO9Q4rAJa4debLTMkUuzXIu53w4eGlV:Av9qZMQVGLyu5r3V
MD5 SHA1 SHA512 SSDEEP

Submit Download

crcdll.dll

Path \Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\crcdll.dll
Size 69KB
SHA256 23e90ce5a1f2d634a7bf5d5d0522fafeea6df9e536e16f5ce91035d5197128ec
MD5 1d51fac9e2384eeb674199cfd5281d7d
SHA1 861dfdc121357d605d0cc3793266713788109eb2
SHA512 921b00adfe43b883200960e8d0958d4e6b97f6d5cfc096ee277766a3e44cc7805a20877a4edf8bd4d9102bb71a20ac218a9a512f4f76bd751d3ef14f4e0a6eda
SSDEEP 768:tCrczqrdE7n1KuGUlKTs3RLflC7ZWL/sebzx7jMKkkg8dODMh1MK/N58n:tCrczqJ8U5s3R7lYZWbzx7jPgRE5
MD5 SHA1 SHA512 SSDEEP

Submit Download

innocallback.dll

Path \Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\innocallback.dll
Size 63KB
SHA256 6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f
MD5 1c55ae5ef9980e3b1028447da6105c75
SHA1 f85218e10e6aa23b2f5a3ed512895b437e41b45c
SHA512 1ec4d52f49747b29cfd83e1a75fc6ae4101add68ada0b9add5770c10be6dffb004bb47d0854d50871ed8d77acf67d4e0445e97f0548a95c182e83b94ddf2eb6b
SSDEEP 1536:+VqUE7JhgAzj/ZuhnOwKWSAXvze/V2C0mswp91:gWgAnB3XDAqt/p91
MD5 SHA1 SHA512 SSDEEP

Submit Download

uninstall.dll

Path \Users\Admin\AppData\Local\Temp\is-MAC5J.tmp\uninstall.dll
Size 691KB
SHA256 cc685dbcf798549ad1a51c1dde45462e2a451ec59f48ee91219182a3871cd5b0
MD5 7db706c324cc9b6fda497d081eed6e26
SHA1 ca97392e573af0cf61bfa3301801a85f2beea44c
SHA512 8edf1494d57d5e708faaff4170f21f435658be897a6fe0acf243ced0701a7fd574b3c973c5bc5e8d92815e966c98977e69ac1e3083ab00c11b072115527ffa19
SSDEEP 12288:9YKdxak+D9/RPZ3GrBBIgk19USw7dffODcHCG0OMnaTVW/Rt888888888888W88c:iea1D9jgBBIz+ZDiG0BaTVW/
MD5 SHA1 SHA512 SSDEEP

Submit Download

wixstdba.dll

Path \Users\Admin\AppData\Local\Temp\{e2803110-78b3-4664-a479-3611a381656a}\.ba1\wixstdba.dll
Size 118KB
SHA256 a9295ad4e909f979e2b6cb2b2495c3d35c8517e689cd64a918c690e17b49078b
MD5 4d20a950a3571d11236482754b4a8e76
SHA1 e68bd784ac143e206d52ecaf54a7e3b8d4d75c9c
SHA512 8b9243d1f9edbcbd6bdaf6874dc69c806bb29e909bd733781fde8ac80ca3fff574d786ca903871d1e856e73fd58403bebb58c9f23083ea7cd749ba3e890af3d2
SSDEEP 1536:nw7WzpopAuJhsVuThs5cXyeM6JUOfPGSpeBxm946ITADDwYkH/1d9chyP7iN6p:pmAuJhAyZFpem90iw//1d9chwG6
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1232-467-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-783-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-927-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-870-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-6-0x0000000000A20000-0x0000000000A21000-memory.dmp

Download

memory/1232-12-0x0000000002C40000-0x0000000002C55000-memory.dmp

Download

memory/1232-857-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-850-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-840-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-834-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-833-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-832-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-831-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-826-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-825-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-823-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-822-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-820-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-819-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-807-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-806-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-797-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-796-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-18-0x0000000004BB0000-0x0000000004C67000-memory.dmp

Download

memory/1232-788-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-63-0x0000000004FA0000-0x0000000004FAE000-memory.dmp

Download

memory/1232-140-0x0000000002BE0000-0x0000000002BE1000-memory.dmp

Download

memory/1232-779-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-690-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-686-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-649-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-587-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-528-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-141-0x0000000000A30000-0x0000000000B82000-memory.dmp

Download

memory/1232-450-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-434-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-370-0x0000000004AB0000-0x0000000004BB0000-memory.dmp

Download

memory/1232-155-0x0000000004FA0000-0x0000000004FAE000-memory.dmp

Download

memory/1232-153-0x0000000002C40000-0x0000000002C55000-memory.dmp

Download

memory/1232-150-0x0000000000A20000-0x0000000000A21000-memory.dmp

Download

memory/1232-144-0x0000000004FA0000-0x0000000004FAE000-memory.dmp

Download

memory/1232-142-0x0000000002C40000-0x0000000002C55000-memory.dmp

Download

memory/1232-143-0x0000000004BB0000-0x0000000004C67000-memory.dmp

Download

memory/4464-0-0x0000000000010000-0x0000000000049000-memory.dmp

Download

memory/4464-946-0x0000000000010000-0x0000000000049000-memory.dmp

Download

memory/4464-139-0x0000000000010000-0x0000000000049000-memory.dmp

Download

memory/4464-2-0x0000000000010000-0x0000000000049000-memory.dmp

Download

memory/4488-789-0x0000000000BE0000-0x0000000000BE1000-memory.dmp

Download

memory/4684-784-0x0000000000AE0000-0x0000000000B19000-memory.dmp

Download

memory/4684-858-0x0000000000AE0000-0x0000000000B19000-memory.dmp

Download

memory/4684-860-0x0000000000AE0000-0x0000000000B19000-memory.dmp

Download