1529506620__QuantV_3.0.0_.rar
- SHA256 d14e74ea5057b0a8da407332c9adc1d1006d87cfa29c137c0b5194516b4e29f9
Password
123
Overview
overview
10Static
static
3QuantV3.0Setup.exe
windows7-x64
10QuantV3.0Setup.exe
windows10-2004-x64
_INSTALL (...up.exe
windows7-x64
10_INSTALL (...up.exe
windows10-2004-x64
_UNINSTALL...ll.exe
windows7-x64
10_UNINSTALL...ll.exe
windows10-2004-x64
manual ins...tV.dll
windows7-x64
1manual ins...tV.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
QuantV3.0Setup.exe
Resource
win7-20231129-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
QuantV3.0Setup.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
_INSTALL (automatically)/QuantV3.0Setup.exe
Resource
win7-20240221-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
_INSTALL (automatically)/QuantV3.0Setup.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
_UNINSTALL (automatically)/QuantV3.0Uninstall.exe
Resource
win7-20240215-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral6
Sample
_UNINSTALL (automatically)/QuantV3.0Uninstall.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral7
Sample
manual install (files)/Main GTA folder/QuantV.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
manual install (files)/Main GTA folder/QuantV.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target 1529506620__QuantV_3.0.0_.rar
- Size 18.2MB
- Sample240416-rf1svsbh78
- SHA256 d14e74ea5057b0a8da407332c9adc1d1006d87cfa29c137c0b5194516b4e29f9
- MD5 667fc5d297c45f83415fe5808e284b8e
- SHA1 30c43125d129ab791ee4b1e3b01a1ad45a64da12
- SHA512 308ab312581e52554db84ce23a615f7124cba8fcd62a806121e28c39a753caae590defaab8a97ecaf61ca32e9474b9e7240f0d3e291127e1e26448274cee7b8c
- SSDEEP 393216:F01NGJ+h3ApdiwuVBcvPdUiwuVBcvPdBiwuVBcvPdn:+NGghQpAwuVBwRwuVBwMwuVBwn
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/QuantV3.0Setup.exe unpack001/_INSTALL (automatically)/QuantV3.0Setup.exe unpack001/_UNINSTALL (automatically)/QuantV3.0Uninstall.exe unpack001/manual install (files)/Main GTA folder/QuantV.asi
File Explorer
-
1529506620__QuantV_3.0.0_.rar.rar 18.2MB
-
QuantV3.0Setup.exe.exe 4.7MB
-
_INSTALL (automatically)/QuantV3.0Setup.exe.exe 4.7MB
-
_UNINSTALL (automatically)/QuantV3.0Uninstall.exe.exe 4.7MB
-
keycodes list.txt2KB
-
manual install (files)/Main GTA folder/QuantV.asi.dll 2.1MB
-
manual install (files)/Main GTA folder/QuantV.ini39KB
-
manual install (files)/update/update.rpf/common/data/hbaosettings.xml.xml 504B
-
manual install (files)/update/update.rpf/common/data/lensflare_f.xml.xml 49KB
-
manual install (files)/update/update.rpf/common/data/lensflare_m.xml.xml 49KB
-
manual install (files)/update/update.rpf/common/data/lensflare_t.xml.xml 62KB
-
manual install (files)/update/update.rpf/common/data/timecycle/timecycle_mods_1.xml.xml 585KB
-
manual install (files)/update/update.rpf/common/data/timecycle/timecycle_mods_2.xml.xml 79KB
-
manual install (files)/update/update.rpf/common/data/timecycle/timecycle_mods_3.xml.xml 188KB
-
manual install (files)/update/update.rpf/common/data/timecycle/timecycle_mods_4.xml.xml 413KB
-
manual install (files)/update/update.rpf/common/data/timecycle/underwater_deep.xml.xml 71KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_blizzard.xml.xml 72KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_clear.xml.xml 71KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_clearing.xml.xml 71KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_clouds.xml.xml 71KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_extrasunny.xml.xml 71KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_foggy.xml.xml 72KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_halloween.xml.xml 72KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_neutral.xml.xml 73KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_overcast.xml.xml 72KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_rain.xml.xml 72KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_smog.xml.xml 73KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_snow.xml.xml 72KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_snowlight.xml.xml 72KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_thunder.xml.xml 72KB
-
manual install (files)/update/update.rpf/common/data/timecycle/w_xmas.xml.xml 73KB
-
manual install (files)/update/update.rpf/common/data/visualsettings.dat36KB
-
manual install (files)/update/update.rpf/x64/textures/frontend.ytd74KB
-
manual install (files)/update/update.rpf/x64/textures/graphics.ytd2.2MB
-
manual install (files)/update/update.rpf/x64/textures/skydome.ytd1.7MB
QuantV3.0Setup.exe
- IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
- SHA256 b8226adbff1beb13504ba38cefcbe665d3684a16ce313ad780f324ef9159d361
- MD5 ae6d005c50c5c6feb87f95c51bf7ca8f
- SHA1 5ef06e79d8d738c61f1ddd6d7661b622d11a5404
- SHA512 6792f87bea7e1722156e13c6a933ac670cd6abf0ba6b370a26ea6fba8144482ed5dc99fca3be5487a5b91de4e76cb885d03bcf321c60bfee5994a1c7edc0fbe1
- SSDEEP 98304:eXGtwAG9xZGAUYpYmtvDnCjTZlyqJwuc7GV3LDSvPYZhCBb1Q:eXcwAG9x2YpYm9e5l4MVXmPYvCBJQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
0
Major OS version
4
Entry point
5425
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
msvcrt
malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
shell32
ShellExecuteA
kernel32
SetUnhandledExceptionFilter
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.7MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
_INSTALL (automatically)/QuantV3.0Setup.exe
- IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
- SHA256 b8226adbff1beb13504ba38cefcbe665d3684a16ce313ad780f324ef9159d361
- MD5 ae6d005c50c5c6feb87f95c51bf7ca8f
- SHA1 5ef06e79d8d738c61f1ddd6d7661b622d11a5404
- SHA512 6792f87bea7e1722156e13c6a933ac670cd6abf0ba6b370a26ea6fba8144482ed5dc99fca3be5487a5b91de4e76cb885d03bcf321c60bfee5994a1c7edc0fbe1
- SSDEEP 98304:eXGtwAG9xZGAUYpYmtvDnCjTZlyqJwuc7GV3LDSvPYZhCBb1Q:eXcwAG9x2YpYm9e5l4MVXmPYvCBJQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
0
Major OS version
4
Entry point
5425
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
msvcrt
malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
shell32
ShellExecuteA
kernel32
SetUnhandledExceptionFilter
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.7MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
_UNINSTALL (automatically)/QuantV3.0Uninstall.exe
- IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
- SHA256 b8226adbff1beb13504ba38cefcbe665d3684a16ce313ad780f324ef9159d361
- MD5 ae6d005c50c5c6feb87f95c51bf7ca8f
- SHA1 5ef06e79d8d738c61f1ddd6d7661b622d11a5404
- SHA512 6792f87bea7e1722156e13c6a933ac670cd6abf0ba6b370a26ea6fba8144482ed5dc99fca3be5487a5b91de4e76cb885d03bcf321c60bfee5994a1c7edc0fbe1
- SSDEEP 98304:eXGtwAG9xZGAUYpYmtvDnCjTZlyqJwuc7GV3LDSvPYZhCBb1Q:eXcwAG9x2YpYm9e5l4MVXmPYvCBJQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
0
Major OS version
4
Entry point
5425
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
msvcrt
malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
shell32
ShellExecuteA
kernel32
SetUnhandledExceptionFilter
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.7MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
keycodes list.txt
- SHA256 ccae2dc831c46d9f8e619ff0803ba50ff72fe1cb90023f26c944fd190da61773
- MD5 4701edfc86663ac5bc38eb38bb5966e5
- SHA1 de8abdb7fad1ab664980f71ce6a6205f32720a36
- SHA512 5ce282d8ec34dddf51a5961d04ffee316110c8e2b68a02ef0c428de402e7c3559061cc604b424aea84d9af502687d0328293a51fdad2361f66d5e58c19e1d028
- MD5 SHA1 SHA512
manual install (files)/Main GTA folder/QuantV.asi
- IMPHASH 3e8537301d4b0da4190c5f3b49dddd16
- SHA256 9544c723c2d94689dbdeb5cad79fc3e268e641d9174f9111376d44e2dcdd4c0a
- MD5 0bac3b20c149497386fb1fc22196afb5
- SHA1 da794faf90ee7e660878dc5d107e88ca67ff7d4e
- SHA512 1acc0a9aa200b0f6047464a41fb05d070595aaee8231aa07ea7f816f84a8a9e26ec6351498f68b0f6437ab4c6e96f29c00becc54222f306cbb05a7b6a7319113
- SSDEEP 49152:QeXFBlmhwi4+wrTLPFoSGv8SJ2u5prrlp+NpACst:X5ilTvkmplp+bACst
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
0
Major OS version
6
Entry point
966772
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
EnterCriticalSection
GetCurrentProcess
FindNextFileA
LeaveCriticalSection
InitializeCriticalSectionEx
FindClose
GetModuleHandleA
HeapSize
MultiByteToWideChar
GetLastError
LockResource
DeleteFileA
HeapReAlloc
RaiseException
K32GetModuleInformation
WritePrivateProfileStringA
FindResourceExW
LoadResource
HeapFree
HeapAlloc
SetFileAttributesA
GetLocalTime
HeapDestroy
RemoveDirectoryA
DeleteCriticalSection
GetProcessHeap
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
FindFirstFileA
SizeofResource
FindResourceW
GetTickCount
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetFileType
GetStdHandle
GetTimeZoneInformation
LCMapStringW
CompareStringW
GetModuleFileNameW
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
ExitProcess
GetModuleHandleExW
WriteConsoleW
user32
GetClipboardData
CloseClipboard
OpenClipboard
keybd_event
GetDesktopWindow
gdi32
DeleteObject
GetObjectA
scripthookv
?scriptRegister@@YAXPEAUHINSTANCE__@@P6AXXZ@Z
?nativeInit@@YAX_K@Z
?keyboardHandlerUnregister@@YAXP6AXKGEHHHH@Z@Z
?nativePush64@@YAX_K@Z
?getGlobalPtr@@YAPEA_KH@Z
?scriptWait@@YAXK@Z
?getGameVersion@@YA?AW4eGameVersion@@XZ
?keyboardHandlerRegister@@YAXP6AXKGEHHHH@Z@Z
?scriptUnregister@@YAXPEAUHINSTANCE__@@@Z
?nativeCall@@YAPEA_KXZ
shlwapi
PathFindExtensionA
PathFindExtensionW
gdiplus
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipDisposeImage
GdipGetImageEncodersSize
GdipCreateBitmapFromScan0
GdipSaveImageToFile
GdipGetImageEncoders
GdiplusStartup
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
724KB
Virtual Size
723KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
71KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=25711,
count=151, id=261, version=25711,
count=1, id=263, version=25711,
count=10, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=33, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=17, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=221, productName=VS2013 UPD3 build 30723, version=30723,
count=13, id=260, version=25711,
count=11, id=257, version=25711,
count=141, id=1, productName=Unmarked objects,
count=3, id=265, version=26430,
count=1, id=255, productName=VS2017 v15.7.3 build 26430, version=26430,
count=1, id=258, productName=VS2017 v15.7.3 build 26430, version=26430,
manual install (files)/Main GTA folder/QuantV.ini
- SHA256 90807dd2f337f310431cdd494ab8434716d909494a7ec4cbdffbb39b8d649b47
- MD5 e118ae73fe1158ae71ffc90afae1b2c1
- SHA1 783268e2f761d849ebc5039c7272a79de1e2498c
- SHA512 1de1ba1e1bb21933ab4faacecc053ca1902f6b1c589468b0eac86f99d6c1008801b7e0c587b29fe6476b985e6c6b3f03659fcab5524488001c160656b47af82d
- SSDEEP 384:4usYlvP14SOTlo9oCwdyWDT/tlmI4skiiispste3D:ZsGF4XTwwdDT/tlmI4s+irt4
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/hbaosettings.xml
- SHA256 1d4b513e4c67d9fe8ca6363d53df5c6ba80251961b98dd429c96211a260c480a
- MD5 436d98132577594e707994908f950a67
- SHA1 9953504ab55370a6d2414434b6f2a166812ff0dd
- SHA512 88a17daba464b91a8f88b666cd81e8d649c4a11d559c6956ba8354004bb06daa61417dc11a1eeb16a93a9a8a3dc9318b18d34c3bf341b4a09a545a2d244bfad6
- MD5 SHA1 SHA512
manual install (files)/update/update.rpf/common/data/lensflare_f.xml
- SHA256 6f69a0ba3cfa3b6417207cad55cc1c96b4921ca66fc2c7a693f2e752fc64a8a5
- MD5 ec6a79f90379dc56e553639d725f565a
- SHA1 d6d4a6457bf1a84f2f885840960dbf2f5900e6f0
- SHA512 07e0423183488a3f614eb8ac68dc1b7f8d4af538c6c0b3e5377d0a7dfe128b9645706fd993c55a6a62e171ad97a8455703ae4cc35125a5b8ccf162cdeb549135
- SSDEEP 1536:BrYCYlyzblIDsXaDBRE0mVCwGoe0gBoGbP/E0947Ezir3fR+HM4pPOjSB7PxQW56:UDG
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/lensflare_m.xml
- SHA256 6f69a0ba3cfa3b6417207cad55cc1c96b4921ca66fc2c7a693f2e752fc64a8a5
- MD5 ec6a79f90379dc56e553639d725f565a
- SHA1 d6d4a6457bf1a84f2f885840960dbf2f5900e6f0
- SHA512 07e0423183488a3f614eb8ac68dc1b7f8d4af538c6c0b3e5377d0a7dfe128b9645706fd993c55a6a62e171ad97a8455703ae4cc35125a5b8ccf162cdeb549135
- SSDEEP 1536:BrYCYlyzblIDsXaDBRE0mVCwGoe0gBoGbP/E0947Ezir3fR+HM4pPOjSB7PxQW56:UDG
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/lensflare_t.xml
- SHA256 2a3a9455c52a140db107e82b322c41aff0d9b8cca67785d5c5357cf90f861965
- MD5 36b142188c476c054a7fba35ab5d2acc
- SHA1 e6dd25f7daf0be653fd0c2163d7c61f4884ba6b8
- SHA512 6e00b14694fa0990e8965983588ea3a931761a8372921453d5cde6c934eba2e98e639ee4bd092f98a236ff521fd7c4b06650f5ca362e4c34003a1bd8bc1d58f9
- SSDEEP 1536:BrYCYlyzblIDsXaDBRE0mVCwGoe0gBoGbP/E0947Ezir3fR+HM4pPOjSB7PxQW58:QDG
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/timecycle_mods_1.xml
- SHA256 217339bbf1fae89fd43b1d8bdc40347ad79ee501b6038bb2b4c78d71c8537b12
- MD5 eeb0a2025a6de185a2da3332d9053607
- SHA1 10bcc3b512e8b8e22c9a3962717e5b33b969193f
- SHA512 d582dbebe23d48d1bca8dad344d13e367f1acefd6fd0b8739d1669123bb3ca6cda290283483f21e580a97f83cbe8068b2a0525c277b6ebd8bb0d348c0b387e4f
- SSDEEP 12288:rlPCOpFBuEPpOGFV+JUUyLRlJtO2F9CBGLLLulilyl/SYEOcFLOuOFFhxlyLilEv:rlPCOpFBuEPpOGFV+JUUyLRlJtO2F9CE
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/timecycle_mods_2.xml
- SHA256 2884fedb793c42cca211c4fcdb93160de16b006764bff94d3b8ee5de7955a47d
- MD5 5f6337fcd12327411ebff461b9ee50ba
- SHA1 bd99e74abafacc5356ad74abdf49de81b99d14a3
- SHA512 40599e90ef2556dbe6dfb250904fd30a752a7d1d7ae79dca98f7bed0bfd2043f4c5895f191d19a45034a2a8977b614578836c9d1eff3df281c3ec0bb6f3fd52b
- SSDEEP 1536:lQLQhYlWCQVh4UNOIFMbIh4blQkhjHlf+508khkhSOIFMU7IhjYVhhFHK4okhU8d:Yl6NOIFM9lllCSOIFMeHL8iL4i5
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/timecycle_mods_3.xml
- SHA256 8f29060cbf31ad7a4d8e9ee66b7b841f6f27e23c95e464a535f157c9c9e04f1b
- MD5 e7323033ce337f30724d2acbe20307de
- SHA1 57e8abde34bcb4a06f5a29ab94f32931d3ff6bb4
- SHA512 2756d64cc996ea88763631ed1dbe420b1ca86cb892b25bf767dd29608864e02929d3bdedb7a1d7b755410a4f242d7c6ffb9a59e428a7b48c5df386391ebd2fc9
- SSDEEP 3072:NHPHMHfgRgnBPeOrFZ4SpSmWPeOsFM+PggRL4SmjoHpHtg0HPUYZRgxHUl0SQghh:NHPHMHfgRgnBPeOrFZ4SpSmWPeOsFM+p
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/timecycle_mods_4.xml
- SHA256 43e4e49ad322e8a6749cc3c7e011770b52183063d7d7842810689029bfed38ab
- MD5 b385091c092d2763b7cd7221be4de1ea
- SHA1 cfe97071565f423c9701a45a6a50cc20c8f8a42a
- SHA512 f23a03e08c12e303b4ce1d82af0434f8a52186afd48727f4f4af1898f67ad843e915fb6a8263431f15af69146883e14dfd5d565d65b71d13eaeaed76cafdce50
- SSDEEP 12288:QH7HCrOsF4fH7HdXOeF/KlbVOhFj+IgUOhFF+smVjSdFPUTZPUiUOhFF+s7vavzI:QH7HCrOsF4fH7HdXOeF/KlbVOhFj+Igk
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/underwater_deep.xml
- SHA256 d532b97f746dcb7f2c8ec17875f00f9c1b876ae057bed53573d7011dc3106794
- MD5 39acf48d284cb736c8eb7ff1560f8d1a
- SHA1 e01401268526751cf1a495ac148c8a5298e18e7b
- SHA512 65e713a9158544cf6049b1547050d22cd687fb49b961d2dc2e07b0fb69928589e4ce0043c0d9b63e45da5d81787744d176544e5525f256104dff15bd564d3c97
- SSDEEP 1536:lYPjO7Fl+EL3sbmX6fugYzdF/iAVWmt3h1eYPjO7Fl+EL3sbmX6fugYzdF/iAVWn:lYPjO7Fl+EkfKiBYPjO7Fl+EkfKiJ
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_blizzard.xml
- SHA256 440257fd33da819375d4a282c840370fc4e6aa6a20814e71b9949eb4fb2835cb
- MD5 880b875f5cbf29f6e02c6e7bef5a93fd
- SHA1 0026239e59f8d2cd532dc7cf29e9c0393cff777a
- SHA512 deaf683f7da63ddc554b7bbd88b927b48a59b14a7fccb73d927cbc41b2178ea020d2e97799ea7aab1ef3675fe6a9e73d9687421df0bc00e2fb0d5b781523cece
- SSDEEP 1536:NzPaOnFF+pAONxUUNBf1uI3PiaCou93Z3h1ezP7ObFe+dSONJUUNZfEQ73PiBCAm:NzPaOnFF+pVfJCkzP7ObFe+dDfkCV
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_clear.xml
- SHA256 f0a8f042a586d4249b00173a057283161d25e3b37019a230c03f3a904e9e47fb
- MD5 f283f3753d8c03ab8e1597d7449066a9
- SHA1 cdf5bb2ba5b58fcb513d51343d38f527668b0c66
- SHA512 86c0c66754014b6baa78264a68beafa5a09383766c72bd424af48194f71decc2616af133f09d0a983890b310cf3e963d71b5c71ac90c85fbc6c7e01579caa832
- SSDEEP 1536:ctPZOBFF+oGPSU0CNf6shwwG7iAuWR/s3h1ZtPZOBFF+oGPRUU0CNf6shwwGNiAH:ctPZOBFF+o4fYiYatPZOBFF+oIJf0iYD
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_clearing.xml
- SHA256 b7c1db977a20e00f5e3806e35c6972ded89d305f96908d242d4fe55374a10e79
- MD5 19804b5ade599967a03fe4f6ef94acc0
- SHA1 338851b26e7a36654b97fb1e0d64e99788d5d616
- SHA512 f3846cbecb5dd5ffa6403d4f6d8d29a3e7a6b919b888f603c0f14ab8becd540503e0cca801603a104d16f6e2ad0e5992e058b4bcb8edcafd6b10c182dbc392d9
- SSDEEP 1536:F+PZOBFF+X9PvUXWxf6sowwGdQAurtpd3h1P+PZOBFF+X9Po5UXWxf6sowwGdQAq:F+PZOBFF+Xlf1QpF+PZOBFF+X+pf1QpJ
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_clouds.xml
- SHA256 d455b7f14e20cd4e50d4888ddf5b95039d05194c7dce2b38db3e99ca68b47497
- MD5 b1c8d1c15303ff01886da55d403fccba
- SHA1 20852ceb0853bb1bc524d7208005b1e15114aad8
- SHA512 5f4b155349a580d30cf8451ba929e44f5fdbe0d8cb0d7312a4c8d39860386e90d49605ce5ee911e049d57720663a06b5bd7d2c73f4f8f8c9f9002beb6420934a
- SSDEEP 1536:wzPmO5Fp+5cNgUXW3f6sPRBNSP4sAul4e3h1OzPmO5Fp+5cNaUXW3f6sPRBNSP4N:wzPmO5Fp+5PfLa4sSzPmO5Fp+5LfLa4N
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_extrasunny.xml
- SHA256 da7a1e9c605df1b9d0e251973e8d737c7e977c320316fb27054b0db0a68c4d50
- MD5 ed289870f74744e268f6d207afa26326
- SHA1 ae2daf2fc3c0bb5dec8aec09881616ac4fb74283
- SHA512 bcb405530b2fce087f3dac4224451099a8959bae77126c099e5560572bca4965bd2b020f3e40bdd331927ddaf900d02c3d1e06dadbc91fc89dfbdeec4edbecb4
- SSDEEP 1536:9gPZOaFQ3+9WP7UU20f6sFwwGIiAuSkKJ3h1cgPZOaFQ3+QWPWYUU25f6sFwwGUG:9gPZOaFG+9kfLisYgPZOaFG+Qvtf9isK
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_foggy.xml
- SHA256 41ea86cbe4b53b469064a966ad11ab0f6ff46e2d020f60fca995d4bfbfca4e6d
- MD5 2b5e911dae9b8dde4ac57ab46a8e408f
- SHA1 f7836fddd8ccefc401c933dff14d093a4a125866
- SHA512 932933f1e87c57659d3ba1af0219bb6a513d0b9b2260adee97e803a0ae25452974ce57315ae9aa0103c79745d98698b39d0950cbffa08cafe27645ca41917e51
- SSDEEP 1536:LjPAORFR8+w6N6UXWaf6s5z7nUFAuW52b/N3h1CjPAORFR8+w6N/UXWaf6s5z7nA:LjPAORFa+wUfiFmjPAORFa+wBfiFd
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_halloween.xml
- SHA256 8eb550d70af5fcab3296a88dc973f5899fba4383a85f2b562711204d5d023bf1
- MD5 3af63f430c52883608fa5290c7a22411
- SHA1 20d4987b4af1795e9e95e35e192fb7d20d42248d
- SHA512 6c0ed54997c5787d321308b22c9f66161f23e7759b9e4084a7464ca5e4bed59b7aadbc9b29ffacddebcebd7264c445ab26de656519824ef437806f292abb9324
- SSDEEP 1536:+SPUOWFq+oxBcUDGnfWs7yXVD70sYusCEz3h1VSPUOWFq+oxBcUDGnfWs7yXVD7u:+SPUOWFq+oufsF0sutSPUOWFq+oufsFu
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_neutral.xml
- SHA256 4b490db00f967ca42141d83ce70652259feac7a486cd190bacf5e7edbdfbd9db
- MD5 bdb9dd1e56736cbf9ad27162cd2f0fd5
- SHA1 7ccad9d721e3d673712d79e9cd30c8148e799280
- SHA512 d37943e992c86c3071fc728eca1e82e7e41ac8dcf504bdc2fa8950772788d1ee5a7dbf09c73faa54c023b3bb344e6e2b41db02926453a96d40986113eb67749f
- SSDEEP 1536:VzPaOnFF+pAONRUUN9fZ803PiOsNu93I3h1YzPaOnFF+pAONQUUN9fi273PidsNI:VzPaOnFF+ppfVswzPaOnFF+pyfss6
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_overcast.xml
- SHA256 04164facca905977124b2860ddc3b60d2a3b2a9364499e19bd488b9b1d5a8ca2
- MD5 177bbc512c4813ce4393f93e55c57412
- SHA1 8f3faf05924da2eed1a9ea8d56997f06aaf77f71
- SHA512 9d0c8acd221956523ed2d3eeadb8eef0040ce9ef7f20cd7b7f8d27b591de5743a3c2e90f7f45e120ae14e73dda7d0831691b7bb98fb36a3cf4410999a9cc6398
- SSDEEP 1536:bjPAORFR8+wTN74UXWofGspEFW1JFAuG83k3h16jPAORFR8+wTNC4UXWofGspEFf:bjPAORFa+wBzfFFQqjPAORFa+wEzf5Fe
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_rain.xml
- SHA256 331a3a24b769971b5365a04433b4da7eb3ce3cf5173a1fbc0d15ee8ca17c1d35
- MD5 e3ffa61f7b49e3e265c0c4bcba1ed91b
- SHA1 a18452330d05240e5fb749f16dbec8bc31e63ac7
- SHA512 c7b3f5f98fb5e0f339338eb1957e9c250b86d6567a5c994116a4c2e9370009998ccf0f60ec2d0c9ea3e99f9913547c87c95430d271e3f05e5c4e72ca7842e951
- SSDEEP 1536:cUMPAORFR8+wQNaUXWefjfPIgihRAucC+z3h1zWPAORFR8+w1NLUXWefusTHglfD:cUMPAORFa+wGf+RmTWPAORFa+wUfiRl
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_smog.xml
- SHA256 54242ddaf837fdfd9faa4b873d7ec6d651223950088dc38b92d93913b49993b9
- MD5 02903d62b5080f86b9ed02d850a49bf2
- SHA1 f681a9575e8c2f1349e281637043d7c852b163fd
- SHA512 0edfeb00f9b9bf6938348f4c94bea88be02548c6b7bc599fbc70a1742977a262cf23cc2490eeb7f32cdf7892f674215e25e4586f7e404ac35ae424cc1259c29c
- SSDEEP 1536:szP7ObFe+w9BNYI3NyfZ8QFu5d0ZAutAj3h1uzP7ObFe+w9BNxYUNazfi2D7R6yt:szP7ObFe+wmfPZ9zP7ObFe+wozfXtZ9
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_snow.xml
- SHA256 5ee447473f5d57e6bf141e2776a5290db3cc549de2d0d791a1c728f6e484a11b
- MD5 90ddb6e790a79c99c682ac0319244466
- SHA1 8f38f027642049dc8aee20226b753ef8a26779e7
- SHA512 e6521e1b316f88550d5bfd49d4dcb29872e34bbbe63db0f6294c14c32b157de72a7d594d413b8d2948502b749a8d641ed1566dc5dffb5f06a051e82a0fa3158a
- SSDEEP 1536:IrPAORFR8+wLNuUU9Wf6sWCoiGsAuP3F03h19jPAORFR8+wTNhUU9tf6s5z7ngsH:IrPAORFa+wbfcsPCjPAORFa+wTf6sH
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_snowlight.xml
- SHA256 43130485fa03276537ef4a8ff81b1703e6ecdf332d313864179a9f4d98f9d4ee
- MD5 0e0f9fb9cbaffb5d83fee3a12bb0f025
- SHA1 43b2ca445b8f20d3ac3d809a2295c8d6f5d09ff8
- SHA512 979c2fa9817cf815f1a13897534d36bc955b969616159a6b95713d6c67e6d408b17a379dbccdc320968ae5e005af961f3ea7172bac74fabd16632e9ba39c7f02
- SSDEEP 1536:QrPAORFR8+wLNxUXWAf6sWCoiGsAuP3FQ3h15jPAORFR8+wTN3UXWHf6s5z7ngsb:QrPAORFa+wefcsP4jPAORFa+wHf6sb
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_thunder.xml
- SHA256 c8eeed80d4326889e3112790e054e17eca6c20a4e548a4db73f3d6914e0e8787
- MD5 d191c0645a41c3e9a5cf65f84aaa842d
- SHA1 681148e49d5e4f07a2cd164ce06835d7530f35ed
- SHA512 6e20298d9073f311015affeded367afb93d596e79f2e23403905cf9a5d8be74df538ce0510dda867a0a0fcaefb6d0b9f82393433a10ed55891d47c85cbdfd983
- SSDEEP 1536:hZPAORFR8+IBNeRUXWEfusHacljxAudXP3h1QHPAORFR8+mhNTIUXWifusHe8T6L:hZPAORFa+IS0fhx0HPAORFa+mvrfmxh
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/timecycle/w_xmas.xml
- SHA256 6a6c44aa9f2de58869652e7584be406f45d2df50de283c1d1d70ddcc30f9f70e
- MD5 6f3958bb19f590b6531cbe9325786fb9
- SHA1 42b53d0a697174fdc84eb2299ab53143cf0d1f6e
- SHA512 c2760a7c0d8de85d0ac38fdb8002af525d4dd95e05518f4e1a19a842e964082b400b25ac2a34c21120deeec20da868620d6efb0c09802a105e3088f46519481d
- SSDEEP 1536:WrPAORFR8+wLN5UUNzf6sDCoiGsAus3F63h1gjPAORFR8+wTNnUUNef6saz7ngsF:WrPAORFa+wJf1sANjPAORFa+w6flsF
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/common/data/visualsettings.dat
- SHA256 e70e28d533657b5388e0c08d0b49ba8710ee375a98d1bec1758dbdfba612d6e9
- MD5 72093c206d39683d5376e5dcfc20ffc9
- SHA1 7830f3010633e9b4dc0712a4f54431ac108ce68d
- SHA512 0cc951eb04699cbdf0dd9fd5dc53b4ae4e06c51e57701534fc66b2b8be0a2ed3e53dfcc20997ead5c9fb9b833e6a7716026a95ecdd76098d8d7ac8d548143839
- SSDEEP 768:anJC6y+Vi/GwkBB+8+ey6TlEVmdnUIIffqF+c6zhFX5DADFNFZUpb4Ti2zAJ5X2V:Qzy+Vi/GwkBB+8+ey6TlEVmdnUVc+nbM
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/x64/textures/frontend.ytd
- SHA256 50f15b3285913a245f500ebf3b6b08027b8240080c39c78800c48cb3d5ec0d14
- MD5 3ba3b5798f5f7b866a0eb32c77642967
- SHA1 782b604b46fbf1fb05b7e9b4c0f81e9fb4b3194f
- SHA512 b1618013fe3208fefebd34111fca8b454cb4a426cda4256668bb18bef9379cf8e08605752233f20d79ce2829a1e7ca6a285621536751f4a7036fe476a7cd22ce
- SSDEEP 1536:oUKM01T5Sw0CTNKAj6frmMf05MRAAd11CgOoH+TofzNPaDpY9M/wCHOFTc:oUp01NP0WKAjormE0+/11CgOrTob5atX
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/x64/textures/graphics.ytd
- SHA256 f9e4ef06d078ec74a676a3ed78acda39b7556edceec9998ea08706c6dc195609
- MD5 dcf2b31c5bcf0b5e1fcf41af1dec1bb9
- SHA1 60d9578b3887d69a310cc8f71ad180d11f594564
- SHA512 d9f3ffbbbf7898d472f4744065d26a74cec9f05b062c19a27d2cbc9ddd0d5c7b1e6fedea5888328a4078973747bcee4d5e39d12c16d7a986eb373f691f5aad63
- SSDEEP 49152:GVoKjuRPaFeTmkOIOyA+DsLljywFJNlM3BKXftqVjX4V2U5NXfF8Z9nTKx:GVoDRPWeTmjINQUw9lM3BKX4VjXVU5Np
- MD5 SHA1 SHA512 SSDEEP
manual install (files)/update/update.rpf/x64/textures/skydome.ytd
- SHA256 e793eea806343c93bf8eff2eab9fa3c73a84a929c479d3d3290c9e051e45bc02
- MD5 f9ce112f4f66798dcc328ae110f866b1
- SHA1 9483f343a42008cce7e7b4588699fd037f1f919e
- SHA512 1f8e8664b674a1ebab68d3daed223db3b05ef0ad462d0772b4b5ea17992df6dd79726e226af40d8a97c1c5391a4247d1586f7d7e96cef41e01110013a847e6ed
- SSDEEP 49152:60OIRQ2YfBgTgCoRIiKqB7ICrUHaqHkhcBSHcvk:pRQYECk7rU6qHocTc
- MD5 SHA1 SHA512 SSDEEP