Analysis

  • max time kernel
    119s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26-03-2024 11:05

General

  • Target

    FlipWitch.Forbidden.Sex.Hex.v1.5.exe

  • Size

    351.3MB

  • MD5

    be2545bb7f6344d2656d5f5e8f3960b5

  • SHA1

    061531ebea0d8c2ba8161e156d459f03262441e3

  • SHA256

    6c0c2fc979dbc6e783e276e2a9c6a2881363df58f8f3fc3ef9b1871f497ed794

  • SHA512

    67b814aa3850ced7ff8cacf650b2fd8544a182439b7b8b98d43662c8dfe05d3043eb5a7fa130578288a2eb2f5c387b94136a78caf227b8116da31eaca92bd4f5

  • SSDEEP

    6291456:/sV7rEbME48Wzhq38apcRBZf4ia9U4uEefyuRvredJ:/oXEuhJauRBZQiawuuFe

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 22 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FlipWitch.Forbidden.Sex.Hex.v1.5.exe
    "C:\Users\Admin\AppData\Local\Temp\FlipWitch.Forbidden.Sex.Hex.v1.5.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2836
  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch.exe
    "C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:960
    • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\UnityCrashHandler64.exe
      "C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\UnityCrashHandler64.exe" --attach 960 528384
      2⤵
      • Executes dropped EXE
      PID:1700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.AIModule.dll

    Filesize

    44KB

    MD5

    32b4e90cc2ef88580d76b5e5f8a2af46

    SHA1

    b0f31b2c228e55b8e13ef14fad5b6c97a6989440

    SHA256

    b4cccd98f58f44acbb6ffcd288b2a00db009a3aff2192c440f85631006cf1c57

    SHA512

    dc0f745e1efd7279e976ce803626beed27613d84519b9456ef88fc594f4fbb33ca94d460c3233347b285ba4e284a9152102c2e5747ab2242f6c8be342523be9d

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.ARModule.dll

    Filesize

    10KB

    MD5

    321540f297ea123025638acb4404864d

    SHA1

    76205c94de1044597211cb1d6fbeb06f3b8ac0f3

    SHA256

    25d4d74697521ad1adbafc6e1dc042114687af3c02c71700524a7b4fbc5ad144

    SHA512

    5a45abb1c098c01828de4c2dd2ba74f0778229bdc4deecfd044d586b59513d7d9e5a4176888bb3a5a6edbca0f7dbdbdf6bd3e6451edc8ff30fda6f0e0c1ced3d

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.AccessibilityModule.dll

    Filesize

    12KB

    MD5

    520777e0de4fb59d34136782dcc2748b

    SHA1

    6a15fc858410fb9c743ad77e7a9e547dfce9d2d6

    SHA256

    dce574b4adb807ad03c4527104a50285cceeb899fa61bd6b0e43fb83fd369375

    SHA512

    f7aa7391b3ec927ce5c0962c22ce8ccde3b3e79aabe60e724eabc17f497d7235bd096e9b98c2705a3557b2d3cd427579ffbe88774711a017b241617ea3742d0a

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.AndroidJNIModule.dll

    Filesize

    67KB

    MD5

    ec659445d31ee563addc9240219af54e

    SHA1

    e8482524be355ce6c5a1eb23d45b2c826c494e12

    SHA256

    9e08b44dbfcbc2989df58dd0ce50a42dee6488318824409b170d95a7e04c319a

    SHA512

    0621de603bb1a6980b48708570a2a2f51e111b7aa151519d9d84eaf0b6c0f212556a2a1dd13a954c920b478a4e46fa3ddedf2f29f05a4de3f26192059e4a420f

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.AnimationModule.dll

    Filesize

    147KB

    MD5

    bcca80cf6767f8aee1dc602daf0b2e8c

    SHA1

    0d5711aae2a689a2f3d6fd23da7d0fc6f2ef06f2

    SHA256

    0f02d7d189e22c85521625fc406671f84581508656bade125ce77006cfbbf924

    SHA512

    90264db22d804f9dea9332f4fcac8e54868ec48bf6940ade6c72025bad7602e0bd28bc2118d2dbfa145899937134f425783849a0138e917263bf4ac2ef276c2b

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.AssetBundleModule.dll

    Filesize

    22KB

    MD5

    eb1f21e2f7c59646e78e269fbf1aa75e

    SHA1

    aeb30671b452283cf46ffc402bdb52b6ca5dbff7

    SHA256

    27411a1207924134368d82df4870ed00a401f470c3892e279bc4a9c69c4e6ab4

    SHA512

    dd27da3d4bc86729ce2b2b1ac52889c5836a25a1aa577d34888152b337d3b2595f99402a1b01f5170d0b5f1ac189eaf3f44d22517d76958efc2af70c4f2fd2fe

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.AudioModule.dll

    Filesize

    58KB

    MD5

    de024507b658f62dd689d46b4a1728b8

    SHA1

    c32c4dbc9c2d9d6d66be09df8fc4164669a5282e

    SHA256

    8f43ab6f7287690bd386d5a0bf2011419636ec4d364a4e8d43172ba43a7ef1b2

    SHA512

    3fc344a68c5d4a183db9a4d737c37995c5058cd5991db5c64ed3c8f6cfb41fa27b7ffccf7ad4fdf64a3cce7a3af759ae3afe9b466609aac901b3fb46117b64ff

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.ClothModule.dll

    Filesize

    15KB

    MD5

    e822bf7c4ed5a70e73418696674fff2d

    SHA1

    39f9d6531c858bb84551a46633361abdae3e555c

    SHA256

    e2fc86a861c1c92988ce5baaab5e914fa5cffa6732b1fb5730917ceada539abe

    SHA512

    ca0faa70bf0c644cc4e25a28fbadc214ce9162e3d1a939e8c2f71592891e3a605b764a7a0367744ef91de2528c202d6d120c7b8c3ea40c02d3cb06802d2a10a4

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.ClusterInputModule.dll

    Filesize

    10KB

    MD5

    038675db7f634768bc17600f04d68f84

    SHA1

    36f05175d3630b90ab23eb4c99742d5de83ddfb8

    SHA256

    fbf4d5ccdd942932e823165737b395e945d7903d3465b4d02f5eac0b835f0d7d

    SHA512

    7bc5a3e1b172656cdb6982fd121b47e21cc9a6e5dfa8377a853d344eb160bba2576cf43af0a61819fcfe3d7147f9d00d6e2f5c5d989a2ae14d90cd46f76d234d

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.ClusterRendererModule.dll

    Filesize

    11KB

    MD5

    ba180a938002bb7192a7ae970d8c8d4c

    SHA1

    bfa6ebf20254f17d82aa4a4c45fa4a3f0bc24688

    SHA256

    c05cd9c765034fd7319b8d7894c1762eeb01929b79443d1a6b71f187e5e0e462

    SHA512

    f50d9702fbaae2b7f3c644d19c9076f74b51517846578780fdceb83261137c3971f0e5728758e52c01e7db965ad5c2e55507eca6fb6c7c2c30980f2f80a1a21d

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.CoreModule.dll

    Filesize

    346KB

    MD5

    41a49d81ed008cc6192057d22522c7ce

    SHA1

    e0e4a4b68ba2a1187b8f48143c0182e280f523dc

    SHA256

    7b2ffe8eda45e5e19b7727c475ab681d4a45837854a56495e7b04a7588c22f7b

    SHA512

    2cae56cb0dccf3f65333d3d00eb3325c311a42e24d563101fb4f4ed1c6dd6dd9ff179d2b5d9079ce3c21bacb24ad1d78143f8b5d780f6d2545ac54262b83039b

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.CrashReportingModule.dll

    Filesize

    10KB

    MD5

    515f328f0294debc281e3518ad19d8aa

    SHA1

    d672fbce8f8f7a1ac487bb6d45a749d1a53d12c5

    SHA256

    d7715e180eaeebd7709dab07fcf960040b110be54556f7409d82c2757e93c2c5

    SHA512

    f4c5b672b0a091956f2a56107be7617f6e42518a36cce947eb25db123fea53c416328ff6cc4b5dd3bf9fa4e1e7208c30d91cb81ee8370e2c12b6514ea5b58800

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.DSPGraphModule.dll

    Filesize

    18KB

    MD5

    570cd2ace534f50f9d3dfbba2370e2e6

    SHA1

    392afcb9b97189ea4c4c7711a81012eab9b1bf5b

    SHA256

    6af5cfb4890ad54a3dc8e70ce0c688ba70867ef8068d9ab923014cd2980bfe80

    SHA512

    11249e42f0d9f6c76cf12018b6fe718ec087ee69b52fd95c2653e19c49155f353980f1a2eb18432376678360ae8296038845a830fb789f582f28bf42f83f0392

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.DirectorModule.dll

    Filesize

    14KB

    MD5

    d3d060afcd4225ba128b0637a074f4a4

    SHA1

    ce802af9afa590e8e6cd1d72a99d8cf025a06f7d

    SHA256

    6911457deacd75f1f2caebdc4e5be3893a03c47f5aa35024f60ef6dd6baa5333

    SHA512

    fe88f6a32cc59533edfab717d237c03d52bdcbfddf57fc8a47bccf02c94e7e1e1c12131bdc1c77f50cb40ba305568596796c65e4055364d86651487e6ae0df16

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.GIModule.dll

    Filesize

    9KB

    MD5

    f38b2da5a8a3cb2e9b78443fde595621

    SHA1

    cffda0960a26b8cfaa8b71ed2bacad5cc1b09f10

    SHA256

    7eb348034f7587a7624cd9c749a419e7a2456a90814e82e5a163cb51ab0e471b

    SHA512

    b1459e069e4bb498e888858ef6cab2c4578d96327295521403569c4139b5dc483e09bdca72df8843927e80dc1906c6a4ff3aa282141ec7c8021d61cfa08e501d

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.GameCenterModule.dll

    Filesize

    28KB

    MD5

    6bc1e4545ec7c78344606445050d229c

    SHA1

    7a111c709c224181778a53f6d312cd8a911b4faa

    SHA256

    d663b1204d080c8c902b3f033ddb57fbc659016c00ae5d882714d2e56a89061a

    SHA512

    f534381632ca60c276b19a6e707f534ffff919af97828ba36bd0958edfb8790a6f41ecfc5ef9e0f47ece8f6417b2fc3b3ca7fa2c84928d7d32f96a7c354aec9a

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.GridModule.dll

    Filesize

    14KB

    MD5

    7c4c2dd5d61fde4f001266c1346dd72b

    SHA1

    0bb9a7fa1a1a1a8827e927cf0f5849cf26443e93

    SHA256

    30f1a24e7beed971d6d0d62521c6b0d512739f218f1dd31c1a6bc5cdac9ef2ac

    SHA512

    ab75e2f3183677b9875f9ff28d2d63a8ef8251f3efbb8168858cbf607b210c74f56a6c0d0f5f27c8da5016345d144c6981d271e36eb1c12e84e79ca16e827475

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.HotReloadModule.dll

    Filesize

    9KB

    MD5

    15a8de8f4eb08db2768aa69887ef07f9

    SHA1

    8e56a4ee9f7ed1d2cf0d5b25d0315e94d87ee9fc

    SHA256

    e5d90be6e6b4441256b31f7c1ff07ade2d82d554348079aee098de46d828a6f6

    SHA512

    74d69aaaf6962515e32c05b6cb17929a801bfec20260bef951de603b76c7793931de101b82fe57fe53b07f3546392c390cdaf118b4cb9446a54b3c4353e51549

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.IMGUIModule.dll

    Filesize

    158KB

    MD5

    5c38bb55536976c70474006e1c0afc4a

    SHA1

    03274e4295409fc97e2ae14bce61cea799cf166c

    SHA256

    4a50417a5200fd1fe7f6fa2d7d16a322f4e128ff8e8dbbd0fcbd338aee707981

    SHA512

    cf2349a98ec32fbc79c9357f5a2e7f503405ac559bb6273014b08cd9bb361ddb3fce75b78bae64b8f1575b8e0a2f395f3e2bd66de23504ddc121b7340bb31bb6

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.ImageConversionModule.dll

    Filesize

    13KB

    MD5

    f5c46545d0a805c83a83bec4168463a4

    SHA1

    c75469b40805c6c3652b98d80ffc419e0c0a8ea3

    SHA256

    c69ebcd6b3e2cda7dd7170bd4a82875e3871af76adda8f56e54222eb9d306668

    SHA512

    f94ef03db320258d7ecefbe40803b6d9087d73bd7c392ee78a7879977d78d7cabfebc30bb06b73b8d9fd9c8fe36a445eb3ed7d84972905e94758c947bf173ed8

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.InputLegacyModule.dll

    Filesize

    25KB

    MD5

    7be688ed31c966c81e3e0fe89d55fe67

    SHA1

    91579e0c84d0832ba4955d357ae2f74e47f0f8d0

    SHA256

    57e3dabe14d8b91975c8c0fa8fc5e9e9e0e91151275253bd137bd1f13417b69a

    SHA512

    3c15667861f7f692ac7dcd92b0c8d1444cf416270c714083b3f7ca3b8dc79605b8c8ea1753e59de7e31c88270da0b368ac71e13859aef9ededf3bcc489bffcb2

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.InputModule.dll

    Filesize

    12KB

    MD5

    56ec757ee94aced77ca2bcacd4b8ca74

    SHA1

    0b4b8127146e36619c8c309aadf085ec69252772

    SHA256

    d752179c6d296dd3153d89fee5a2548b02cdf47081ab7e8c852acccf602aa9bd

    SHA512

    173199e7f449ac08b4d1dd078cf7386f837fb4b71fedfe86b1c330beca7cd7b85f03f6873a3d900a29f6d00ba6da8a686a6474f665f2b94f3dc0ba3575f28ca0

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.JSONSerializeModule.dll

    Filesize

    11KB

    MD5

    d1bbfdc12bc1aa7c15e4c6cde174b22d

    SHA1

    abe548b172e39dd1f0fce213478a998625ac0229

    SHA256

    0487e41e841399ec6194fd550d42e98e96ae53f3742d781727b81822ab7400ed

    SHA512

    563b9e2be8a97eb4b2364fb9bb7144fbd6a81852b1f803b3b138af3d8b912399c2daaf5fff5301d4408a63163552aad28766dfcf5835f3a53c8f156481231489

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.LocalizationModule.dll

    Filesize

    10KB

    MD5

    e196c990863f229e1d4a4b0765047771

    SHA1

    9c9d746e1add69698170f7c081dc6e34f6d27aa1

    SHA256

    45999245cc9d943dc153819fa5878d95e097bfc7acb0098a24fc2bd377d9387e

    SHA512

    4993893b12b94c15b07a62850f3542a4cc5ea0bb3b5cdc1d10f16e1e88ee78910f687988e838f054f63ec6444349fb7d294bcdd9f9340dcc19a9b89299b5476a

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.NVIDIAModule.dll

    Filesize

    22KB

    MD5

    732a5e0847761e0bbdeb6136c2716398

    SHA1

    b2f16bbf3eb9fd06035c27aeb4f2978813f293e0

    SHA256

    68b8f48399e803e8241b20e79ef7f33bf0cf5d8da591890d0adeadfba0acc787

    SHA512

    d4f468fa3c49eddcdf1f2d6fae7d5f619f7e348ee2bbdd328a6de83290c2baa1e8c078a0927f82a663f34ded647fa1c002d3a79288968f09663854aaeaf839a5

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.ParticleSystemModule.dll

    Filesize

    140KB

    MD5

    32f66655b7d2c1ecb09cd6e2e33d514f

    SHA1

    dc84504cc0787a5ec72ec90a169379836a008442

    SHA256

    98c49a375f057f3bc4b15c313589eb531a57c440a062af1295477358ea044e4a

    SHA512

    f07d395173bcafc29648dbb583c533ad3d4e53fbef201f53f20fa0584646ae9439b2963514e9208af7e88f80c417178f1f6e7178db304e44247d9121e0afb049

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.PerformanceReportingModule.dll

    Filesize

    10KB

    MD5

    b019c619e39674e395654e99283e520e

    SHA1

    c07021cfc4d19fa2dec04388116924054d006bf3

    SHA256

    5cd7bb24260e793ed4b64d3775a32c32310845f9af1e5f68bea3a2c9467dd611

    SHA512

    cf401c9f21ad59ea360da890f6092f7ae09a5939746d1074e3e7ac926bdaab231e9d820d65fe1b507518314cfb15272a746028b60a067ba1a484948f812f10d1

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.Physics2DModule.dll

    Filesize

    120KB

    MD5

    e20b29a97dca456261404cf1d9eff932

    SHA1

    274c40d33c5823ed50878d4f180b8bfcea751845

    SHA256

    f470c8b493a92f0a18f74b9deb3236be364835cc2e2ed47f48e4d9fecb0aef1a

    SHA512

    fa1dc60c3fbfe6ede789a3bfc51edbbf88c9bcf2eca270a97f11c865e48f113129a00be73264d3025fbe81c3f64d005b602ed6a72f87018a0f494eb32ec63a78

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.PhysicsModule.dll

    Filesize

    100KB

    MD5

    92db5a7e164ba6db416e94c50e01e5d0

    SHA1

    b9c0e2245d065e58b6bdadf73b9c59e22698bb4d

    SHA256

    3c7b60492f154eb4607cbb2389b1d1ac4e439a8e6744902d98bd88bf7b6ee96e

    SHA512

    ee69ef1b3ad33e949c874148c59e2ecefe0a3b81455cd26b8b8771f9253034556c7f70dd31f22b96d3aaf7e735a7ea111abce1b57becc66150a02a57fbd8b052

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.ProfilerModule.dll

    Filesize

    9KB

    MD5

    dbdc12657306c902111f2f239da3d57e

    SHA1

    d278b25c22b7b8a4232411e6ca5dca324850e6fe

    SHA256

    1f2482b214da8d7b461a6f58c6602c1ea3d789c23c342ce20c477f16a6c9071d

    SHA512

    2d779f06dae393602a633242c0959c5e8f0655a90302b26a932b470480ae5de802084de4d624c31e715514b1238078208b943383386b103f87c6375104b459d5

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll

    Filesize

    9KB

    MD5

    5e5f34caa8b54fc98c757a74248d5eca

    SHA1

    a09b0e38501c66ed1e6636d0a0a1a1e5f9b600b2

    SHA256

    d07e8e676b3cd21ffb51aa2c4aa2a2827c84941078cfcd8066358f5c448ff523

    SHA512

    e2ed1c704cb684a9fa36da156fa5f7758d30aeb9731736db4d72dec8230d3fac78d09a1e00b961ab53c203575160bc8f91d1c0132b80757067cc71dc63e29fcc

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.ScreenCaptureModule.dll

    Filesize

    10KB

    MD5

    8d5b1487ab104f9cfbab9cac324be918

    SHA1

    3323a19bc041aca260f778818ad63e5897090f4a

    SHA256

    dbb700cb8f228ecd1001a45fd9440b097f857ef484f3e9e66e533ad66e420dff

    SHA512

    9162290a2b0db94e2ac34095f03fc604a0fb15246e81ad15fa4d57e1587e6e0022c8fc20fe7c42f6560ae62c03fdb84d00e2fdbb2bae36c2e91292a6a7cde053

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.SharedInternalsModule.dll

    Filesize

    21KB

    MD5

    a6f11a12c8e8f3c5cc5a2402f6ac6188

    SHA1

    a72a42c2dc76a0876345fb966be1792fd6b4bd0f

    SHA256

    3d1a74cd4608facf25eab22a8d784593f6ec4a75efe594ff8633ed1dabcdba33

    SHA512

    929d25a83b054a3e8d9931f89a3c4f9e5a69af9d999f5f15beb8a8d5232e45a9403463e3c0790d497e3112a333c54525d6170e60baa05a9b40900c6face5853c

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\UnityEngine.dll

    Filesize

    98KB

    MD5

    a1a521055f476ea61fa95c7a8b505a44

    SHA1

    e7af61dc54f671ed31c06b7e51d2dd1e4a81132d

    SHA256

    b4f37d005701f3fcf3b5f0813af4815011b2e53a83e0c4a63cd715a504999dae

    SHA512

    c88bc875a138881cd565d5b7b72cb2e79a269674035cb3831bded42f59fe7df7cdb4bee5789222684c240ae7dfb943102a51042b7515f86fe6ec88c76bfd8d3a

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Managed\mscorlib.dll

    Filesize

    219KB

    MD5

    372abca0478ada4c191d24813abb8797

    SHA1

    4d95d24d94fe5b484bf903f14a17a7d2de3916f5

    SHA256

    fb98a4b56165a7507314fae40fdc68e03cc220b1b2edf3c820742b168cbc570e

    SHA512

    d3fa9a0dbf15febb6d2946dbe05e7b5ab568c0fe331daf40b2c18971ace21efe501b3a0c8f0ce44a8117fc51e7ca08755d2681ebc44309b2c7f146fbe2d0b580

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\Resources\unity default resources

    Filesize

    317KB

    MD5

    0e461c241de6cb4b2f2417e2c9acc97a

    SHA1

    8f6003c23bf571a91af26d58d465ee36d65e3ca5

    SHA256

    c6a4351d90e3226e1bdd87a0020d2986890d39310c5116f93e4fc17fc708d1aa

    SHA512

    869244b102a9e9027866de65fa7d7243e2f31ebe5a41af46f607288df6f759b68342705c15a2e6b73e09bad18964d8f77574c4e683a35c910ee6a5dab56ab041

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\RuntimeInitializeOnLoads.json

    Filesize

    1KB

    MD5

    f9b8d6ce6f70f73fae24666ddeb83f74

    SHA1

    195b346f6477b96163cd9afd8b9079474a77d195

    SHA256

    c0820297f24a8e3dd4d8c70a0a2a53776110d32f6712c343bc0170406f1d2c7f

    SHA512

    fbda6439781b91e8c537780e76c245d77c2cd490d465103e7954ba8677569350d9588b36b7d239fb39a70fb7703fa491e09d8064d44cadd467253e65e48a9310

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\app.info

    Filesize

    19B

    MD5

    3446cbac1d95271604523f9bb895cda9

    SHA1

    a0f6424db82787a8a17911885a079656d0ed6a66

    SHA256

    de1ad1453a7d6577df55b934018016be184f64212f03925ae6457cf205c10d39

    SHA512

    402d1176dd0a4f46198ead1312261412efcd20cda920c09af29e990728b907cba7bfe49a6d6d58863aaf5f571c2c1ac0be7688d60db341e1c66da906a5a33420

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\boot.config

    Filesize

    49B

    MD5

    b9a4c894ebcb56f768e0d0331746af53

    SHA1

    a3c4e5aea8c771b6e38a8905a3ac5e05bf56403a

    SHA256

    c92f81ae694ceb6d2f59ad7b35f14fb34f491afbfd18ed40c5c8b34044b2808c

    SHA512

    9a27e2ff6d9b999aa58439ae500ff9baac8d49665b33707dffb0c4b226e83581a613977c1815940ca7ba6985eae56d5aefc8e6306cb19cc84814bf407d765ba1

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch_Data\globalgamemanagers

    Filesize

    195KB

    MD5

    9d0a775b965de05a759f77f19be812b3

    SHA1

    d9a6210f0ef877e7d4d23cf28f0ab9c0de62c9c5

    SHA256

    ef6076f7d81c9db6224220e8765e94586a6d6d26c9e4bb993e1c87ae047fc7ea

    SHA512

    633bd2a5c7a29ba618899390b681050b383857398c85abd46d8547e52da32bfb2e6e7cc75eca3252859a48b9b9123cc1952690701227c0e35a213b24a872bad9

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll

    Filesize

    264KB

    MD5

    a47dbacb4ff1d5794a90209005ff70b6

    SHA1

    78e571f15e152efa83cdc6b1f7105f3251c045e0

    SHA256

    bcc8702c95a54b77d6f5cafcf34a1a5306791b337a5eda78721523f01a4a5829

    SHA512

    fde2d8242f184e88e92d898a27dcbe75bbf820f0146dbb816741fccf86ca12514b6808d83911de010129d5d24b874f9c49c055551e8438a122134c6d878af5ef

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser

    Filesize

    1KB

    MD5

    0d831c1264b5b32a39fa347de368fe48

    SHA1

    187dff516f9448e63ea5078190b3347922c4b3eb

    SHA256

    8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741

    SHA512

    4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx

    Filesize

    59KB

    MD5

    f7be9f1841ff92f9d4040aed832e0c79

    SHA1

    b3e4b508aab3cf201c06892713b43ddb0c43b7ae

    SHA256

    751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

    SHA512

    380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\MonoBleedingEdge\etc\mono\config

    Filesize

    3KB

    MD5

    ced30438c7663df1f57af23bba624460

    SHA1

    e02a718d8e6efb74bd8bbf70a1d6bc644055f39f

    SHA256

    107b0d888b6169bb0e51205e967d88fa82899cc6f66bde54ef9b70169dc43b1d

    SHA512

    925d2b0c356d86a2a193de997daef501359445df226a386994716867f891255316165e3bfa4c9546a508f29c0b579dd78218a1d96cf4e891e76c74394838920c

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\UnityCrashHandler64.exe

    Filesize

    445KB

    MD5

    23b905633364be8074581eaa1bdb8ec2

    SHA1

    b565143557d28e74e65cd4334025c8d78b74cc32

    SHA256

    19b85b4c8ef0e291f2eae34c7d6d79294179a2c821a72723108218baa1151dc6

    SHA512

    d5f27c9e43c9652461c6aae5029ebfb373b006fd133cc41520627db20660de58ec176a9451ecf79fcaabcb575aac9c62e1cb8e555b5f6950a11b8dfd61122217

  • C:\Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\UnityPlayer.dll

    Filesize

    3.3MB

    MD5

    2b2ba5965ef25ead2c524e3fc939271a

    SHA1

    428b7feb01f7332d9f584939dec9b8fe10012c54

    SHA256

    2ff2ff573e0a686ee29362001f48c81b1295d5ae8d72872a220f99a99ea227d1

    SHA512

    9686863ea79b5d2bf047584eac339eee82acd1360843879f56d0cf2351812238f9a5ea0f386e0e1dd00a6e4d6304051d5724ae68db15899393eca7de4c28ae3f

  • \Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\FlipWitch.exe

    Filesize

    638KB

    MD5

    bed131f24f1f9605002524374145aee5

    SHA1

    f7718e39087f3865adb76c61647ab072b55bbd88

    SHA256

    c7c24ed4f0b338e26c4e5af911c25f321ffb1049bcadb9cb88ac47985746e7d5

    SHA512

    919ed0ffedcf6f3a5c486081dee0b8f70a5762c30ad701d25f2ba9ff3f7e242e934e11ecc2f1211b1d5382d49d7cbb0f19a6865d80e535a7a3fdba41265a8867

  • \Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll

    Filesize

    423KB

    MD5

    0e3f530174037a0f952e72bba320d75d

    SHA1

    90c865558a35379f7a7e39d5119cdd99bbb4385f

    SHA256

    a911e8cffbeeabbd98394c3d4ca9a640c6321fc2e2550690dc0921ab92cfd8c3

    SHA512

    e9a2395c8ef9731e788bf80708b39561961b24e02a617e47368045bef11265a406c8d62a8cb029d23e743ac8ee93f141dd2988ab263d2525a2e791368cce8fb8

  • \Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\UnityCrashHandler64.exe

    Filesize

    1.1MB

    MD5

    8622ea48e50632641e7ea959b4a66207

    SHA1

    9e5344d13737ac62b077352f2082670cc4ea8762

    SHA256

    8a63ba79451b89282ead7e05eed6ec0c2bca63a10e07fc8dd56ceda2ad8b0337

    SHA512

    53de6fd65da2ec64ada0e9123c24b16d4beef83e7e2ff2867a2987ac1f417a0cf1ae4198909fa3532b4042ca3df3c6406afb3250f7a1b6ba3eace4bf3f33163c

  • \Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\UnityCrashHandler64.exe

    Filesize

    585KB

    MD5

    e462d90b052615dfd45481e7b2bcaf51

    SHA1

    bdfe0426f71c7eda40af8808555510f379ed6eca

    SHA256

    623407ab14cc6e7cd7a98410748fddd1f4f31d7da62569da5db2d20713e7c819

    SHA512

    9fd14a5fc9bfb99bf539824826cc86fbbfc18920d5eb970fffdb97e11fe28fa2a398b4f7e444f5611bc64fec1dd3d04347c08061600d2fcebe044c140a5d3356

  • \Users\Admin\Desktop\Forbidden_Sex_Hex_v1.5\UnityPlayer.dll

    Filesize

    1.6MB

    MD5

    f2dfb5449e198144f9e83b7c639750e5

    SHA1

    3fa4efec546a5c231126e128cb581cc3acb82e41

    SHA256

    8cf1a7501aa9ed14567c91e76be05c73af6d7d87dc23a47b7443fdaee4cea763

    SHA512

    984a19142aec2a465014349cda64291d7bed38f5bd44fd86a3b19f492c7d9b5e60ec3a4c7d282adccb6682af2e36d3814941734a64dec284139aff7591456489

  • memory/960-592-0x0000000001D60000-0x0000000001D70000-memory.dmp

    Filesize

    64KB

  • memory/960-625-0x0000000063AE0000-0x0000000063AF0000-memory.dmp

    Filesize

    64KB

  • memory/960-580-0x0000000061F40000-0x0000000061F50000-memory.dmp

    Filesize

    64KB

  • memory/960-539-0x0000000000320000-0x0000000000330000-memory.dmp

    Filesize

    64KB

  • memory/960-582-0x0000000062A60000-0x0000000062A70000-memory.dmp

    Filesize

    64KB

  • memory/960-591-0x00000000632A0000-0x00000000632B0000-memory.dmp

    Filesize

    64KB

  • memory/960-538-0x0000000001D60000-0x0000000001D70000-memory.dmp

    Filesize

    64KB

  • memory/960-593-0x0000000000320000-0x0000000000330000-memory.dmp

    Filesize

    64KB

  • memory/960-594-0x0000000061F40000-0x0000000061F50000-memory.dmp

    Filesize

    64KB

  • memory/960-595-0x0000000062A50000-0x0000000062A60000-memory.dmp

    Filesize

    64KB

  • memory/960-596-0x0000000062A60000-0x0000000062A70000-memory.dmp

    Filesize

    64KB

  • memory/960-597-0x00000000632A0000-0x00000000632B0000-memory.dmp

    Filesize

    64KB

  • memory/960-602-0x0000000063560000-0x0000000063570000-memory.dmp

    Filesize

    64KB

  • memory/960-603-0x0000000063670000-0x0000000063680000-memory.dmp

    Filesize

    64KB

  • memory/960-606-0x0000000063680000-0x0000000063690000-memory.dmp

    Filesize

    64KB

  • memory/960-607-0x0000000063870000-0x0000000063880000-memory.dmp

    Filesize

    64KB

  • memory/960-608-0x00000000639C0000-0x00000000639D0000-memory.dmp

    Filesize

    64KB

  • memory/960-609-0x00000000639D0000-0x00000000639E0000-memory.dmp

    Filesize

    64KB

  • memory/960-610-0x0000000063AE0000-0x0000000063AF0000-memory.dmp

    Filesize

    64KB

  • memory/960-611-0x0000000063AF0000-0x0000000063B00000-memory.dmp

    Filesize

    64KB

  • memory/960-612-0x0000000063E90000-0x0000000063EA0000-memory.dmp

    Filesize

    64KB

  • memory/960-613-0x0000000063FA0000-0x0000000063FB0000-memory.dmp

    Filesize

    64KB

  • memory/960-614-0x0000000063560000-0x0000000063570000-memory.dmp

    Filesize

    64KB

  • memory/960-615-0x00000000640C0000-0x00000000640D0000-memory.dmp

    Filesize

    64KB

  • memory/960-616-0x0000000063670000-0x0000000063680000-memory.dmp

    Filesize

    64KB

  • memory/960-617-0x00000000640D0000-0x00000000640E0000-memory.dmp

    Filesize

    64KB

  • memory/960-618-0x0000000063680000-0x0000000063690000-memory.dmp

    Filesize

    64KB

  • memory/960-619-0x0000000064260000-0x0000000064270000-memory.dmp

    Filesize

    64KB

  • memory/960-620-0x0000000063870000-0x0000000063880000-memory.dmp

    Filesize

    64KB

  • memory/960-621-0x0000000064370000-0x0000000064380000-memory.dmp

    Filesize

    64KB

  • memory/960-622-0x00000000639C0000-0x00000000639D0000-memory.dmp

    Filesize

    64KB

  • memory/960-623-0x0000000064380000-0x0000000064390000-memory.dmp

    Filesize

    64KB

  • memory/960-624-0x00000000639D0000-0x00000000639E0000-memory.dmp

    Filesize

    64KB

  • memory/960-581-0x0000000062A50000-0x0000000062A60000-memory.dmp

    Filesize

    64KB

  • memory/960-626-0x0000000064390000-0x00000000643A0000-memory.dmp

    Filesize

    64KB

  • memory/960-627-0x00000000643A0000-0x00000000643C0000-memory.dmp

    Filesize

    128KB

  • memory/960-628-0x0000000063AF0000-0x0000000063B00000-memory.dmp

    Filesize

    64KB

  • memory/960-629-0x0000000064560000-0x0000000064570000-memory.dmp

    Filesize

    64KB

  • memory/960-634-0x0000000063E90000-0x0000000063EA0000-memory.dmp

    Filesize

    64KB

  • memory/960-635-0x0000000064570000-0x0000000064580000-memory.dmp

    Filesize

    64KB

  • memory/960-636-0x0000000063FA0000-0x0000000063FB0000-memory.dmp

    Filesize

    64KB

  • memory/960-637-0x0000000064580000-0x0000000064590000-memory.dmp

    Filesize

    64KB

  • memory/960-638-0x00000000640C0000-0x00000000640D0000-memory.dmp

    Filesize

    64KB

  • memory/960-639-0x0000000064590000-0x00000000645A0000-memory.dmp

    Filesize

    64KB

  • memory/960-640-0x00000000640D0000-0x00000000640E0000-memory.dmp

    Filesize

    64KB

  • memory/960-641-0x0000000064260000-0x0000000064270000-memory.dmp

    Filesize

    64KB

  • memory/960-642-0x0000000064370000-0x0000000064380000-memory.dmp

    Filesize

    64KB

  • memory/960-643-0x0000000064380000-0x0000000064390000-memory.dmp

    Filesize

    64KB

  • memory/960-644-0x0000000064390000-0x00000000643A0000-memory.dmp

    Filesize

    64KB

  • memory/960-645-0x00000000643A0000-0x00000000643C0000-memory.dmp

    Filesize

    128KB

  • memory/960-646-0x00000000646D0000-0x00000000646E0000-memory.dmp

    Filesize

    64KB

  • memory/960-647-0x0000000064560000-0x0000000064570000-memory.dmp

    Filesize

    64KB

  • memory/960-648-0x00000000646E0000-0x00000000646F0000-memory.dmp

    Filesize

    64KB

  • memory/960-649-0x0000000064570000-0x0000000064580000-memory.dmp

    Filesize

    64KB

  • memory/960-650-0x00000000646F0000-0x0000000064700000-memory.dmp

    Filesize

    64KB

  • memory/960-651-0x0000000064580000-0x0000000064590000-memory.dmp

    Filesize

    64KB

  • memory/960-652-0x0000000064700000-0x0000000064710000-memory.dmp

    Filesize

    64KB

  • memory/960-654-0x0000000064710000-0x0000000064720000-memory.dmp

    Filesize

    64KB

  • memory/960-653-0x0000000064590000-0x00000000645A0000-memory.dmp

    Filesize

    64KB

  • memory/960-655-0x0000000064720000-0x0000000064730000-memory.dmp

    Filesize

    64KB

  • memory/960-656-0x0000000064730000-0x0000000064740000-memory.dmp

    Filesize

    64KB

  • memory/960-657-0x0000000064740000-0x0000000064750000-memory.dmp

    Filesize

    64KB

  • memory/960-658-0x0000000064750000-0x0000000064760000-memory.dmp

    Filesize

    64KB

  • memory/960-659-0x0000000064860000-0x0000000064870000-memory.dmp

    Filesize

    64KB

  • memory/960-678-0x000007FFFFE90000-0x000007FFFFEA0000-memory.dmp

    Filesize

    64KB

  • memory/960-708-0x000007FFFFE70000-0x000007FFFFE80000-memory.dmp

    Filesize

    64KB