b97bec6c15a33ff4392e204ba19727631f98aa6aba62ba5584757aa684c55174

Analysis

max time kernel
94s
max time network
104s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
13/05/2024, 17:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

COUNTER STRIKE 1.6.exe
Size

227.6MB
MD5

a176ca285438038ce9b5f7dd29f6d1ac
SHA1

1e931dc7e08592298cbc8d3dc1612b5967a9581c
SHA256

b97bec6c15a33ff4392e204ba19727631f98aa6aba62ba5584757aa684c55174
SHA512

a72d527f22a6827d802a932ecd71f79d67208f5a75720abf01afee7c7901c5223eeae65c69e87fb8ee1a709e53602f3c49e29b8afd2c548934475217d5fca2d8
SSDEEP

6291456:dJrWC2GFEgv/Egj+I+2H/WWVMGcgjpkyEsKCv6Bb:/SndWXx+2lVigdc

Score

7^/10

discovery evasion trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
2636	is-3SQ34.tmp
2004	hl.exe

Loads dropped DLL 44 IoCs

pid	Process
2644	COUNTER STRIKE 1.6.exe
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe
2004	hl.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	hl.exe

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\D:	hl.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Counter-Strike 1.6\reslists\Half-Life\is-B0KMF.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\ambience\is-V9SO5.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\barney\is-FIMU9.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\vox\is-L6A1I.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\is-GNU9G.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\models\is-MBPGC.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\misc\is-C8U3C.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\ambience\is-3J3UF.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\barney\is-QGK3V.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\hgrunt\is-2GJAU.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\weapons\is-RPH5A.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\ambience\is-J1EVQ.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\scientist\is-5CTQ8.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\hgrunt\is-U5G6R.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\platform\AddOns\checkers\is-9SVMV.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\items\is-J2R8U.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\player\is-UQ3AG.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\scientist\is-9251O.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\maps\is-18T50.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\models\is-UJCQC.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\radio\bot\cooked\is-F307B.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\env\is-SPKIE.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\models\is-90LAG.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\zombie\is-F5H7C.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\radio\bot\cooked\is-29M3R.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\barney\is-DRU2E.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\vox\is-MRDRK.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\is-GU2LS.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\logos\is-R5E2B.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\vox\is-G4IMR.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\env\is-4P658.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\fvox\is-IUPRR.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\fvox\is-T86KQ.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sprites\is-E281O.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\models\is-FF1UB.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\barney\is-ISDAU.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\gman\is-3EH0V.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\vox\is-92IKD.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\media\is-CB1L3.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\ambience\is-NCSO6.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\garg\is-HAO8I.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\platform\Friends\is-8DFS7.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\vox\is-8OTIB.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\player\is-H1GQU.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\radio\bot\cooked\is-B9AQF.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\scientist\is-S9FTN.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\vox\is-NLEDJ.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\hostage\is-9O842.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\radio\bot\cooked\is-9QTUF.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\roach\is-GLF6P.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\vox\is-4PSRL.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\turret\is-RVC6A.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\classes\is-NTB37.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\cstrike\resource\UI\is-1F4BQ.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\env\is-BPII1.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\hgrunt\is-MT0RO.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\hgrunt\is-EK9BU.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\scientist\is-A146V.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\env\is-4UNNS.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\ambience\is-VIDI0.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\vox\is-RQ8UG.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\vox\is-7MJ69.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\ambience\is-R1F9K.tmp	is-3SQ34.tmp
File created	C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\hgrunt\is-CGILT.tmp	is-3SQ34.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeRestorePrivilege	2636	is-3SQ34.tmp
Token: SeBackupPrivilege	2636	is-3SQ34.tmp
Token: SeRestorePrivilege	2004	hl.exe
Token: SeBackupPrivilege	2004	hl.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp
2636	is-3SQ34.tmp

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2004	hl.exe
2004	hl.exe
2004	hl.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2644 wrote to memory of 2636	2644	COUNTER STRIKE 1.6.exe	28
PID 2644 wrote to memory of 2636	2644	COUNTER STRIKE 1.6.exe	28
PID 2644 wrote to memory of 2636	2644	COUNTER STRIKE 1.6.exe	28
PID 2644 wrote to memory of 2636	2644	COUNTER STRIKE 1.6.exe	28
PID 2644 wrote to memory of 2636	2644	COUNTER STRIKE 1.6.exe	28
PID 2644 wrote to memory of 2636	2644	COUNTER STRIKE 1.6.exe	28
PID 2644 wrote to memory of 2636	2644	COUNTER STRIKE 1.6.exe	28
PID 2636 wrote to memory of 2004	2636	is-3SQ34.tmp	32
PID 2636 wrote to memory of 2004	2636	is-3SQ34.tmp	32
PID 2636 wrote to memory of 2004	2636	is-3SQ34.tmp	32
PID 2636 wrote to memory of 2004	2636	is-3SQ34.tmp	32
PID 2636 wrote to memory of 2004	2636	is-3SQ34.tmp	32
PID 2636 wrote to memory of 2004	2636	is-3SQ34.tmp	32
PID 2636 wrote to memory of 2004	2636	is-3SQ34.tmp	32

C:\Users\Admin\AppData\Local\Temp\COUNTER STRIKE 1.6.exe
"C:\Users\Admin\AppData\Local\Temp\COUNTER STRIKE 1.6.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2644
- C:\Users\Admin\AppData\Local\Temp\is-J62EB.tmp\is-3SQ34.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-J62EB.tmp\is-3SQ34.tmp" /SL4 $301F0 "C:\Users\Admin\AppData\Local\Temp\COUNTER STRIKE 1.6.exe" 238137020 209408
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2636
- - C:\Program Files (x86)\Counter-Strike 1.6\hl.exe
    "C:\Program Files (x86)\Counter-Strike 1.6\hl.exe" -nomaster -game cstrike
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Enumerates connected drives
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of SetWindowsHookEx
    PID:2004

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Counter-Strike 1.6\cstrike\events\is-FBQLI.tmp

Filesize
11B

MD5
e41aa21f57500b1b71802b76fcaaecd1

SHA1
554eaebf267f8aaceb4e9b18e28dfa5131168a09

SHA256
2092e6c9862b42fe817a552f0ecf05a58a2609b2424402404a796c325bdf2098

SHA512
4c2b2e183bb68c16b383532aa03d5dbaebebde35b843ff442b84f6c9dba655868e7e7ba76b5b92d003db1ac73ebdd2aed5933595b35d073c702b1e841d94269d

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\events\is-PIFLK.tmp

Filesize
9B

MD5
d14f11b47b92d829b6ec4912ca7349e8

SHA1
86b8dd77a055a3d1d154022492ed7d7e4ca371a5

SHA256
89a0f0c5f04ea6da99b4a48fb642b968d32350aa3e6697da24d2736b7bb195d0

SHA512
f19f860c86297921b972338dd0ee73241b3b822d1b9d977cee39e45891f1d57bf144cd676eb2e7e35985969613dff0896473dd8e89ad07c66e79ac94510fb5d7

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\gfx\env\is-TL7QH.tmp

Filesize
192KB

MD5
9eda1bf021904ceaf1a8c50a76741eb5

SHA1
38f004101eb47ed0dffff757488263d9a2523bbf

SHA256
cdf4b2c96b5d1366fecdfa2aa764fcfc8d084bc5a682e2a10c41a03ed3ed3661

SHA512
aead546626ef7dc5a75348760b26f8e187a61b62c7a0a49bda16cf68b280749dfbc87974d05201dcefe6b4fd89401c3537b4f179f3ac5bda161066ae3ca0efbf

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\gfx\vgui\is-ED1N5.tmp

Filesize
128KB

MD5
13b3a5cf4af8f97cd8a8328ef9952b7f

SHA1
253105b008a8ce333a64f5a66e4b2da0e3a3cb52

SHA256
9d8e087dd823e63f7009907ff1761e620dc5ee64db6a527e2d0ec830d4152437

SHA512
77f76cb9bb4edadecce9bfcd05031e1def1f4b967b58d8078bb9e6c3b03e3db9917bd2a77314553fb8ee233981683e9b0bad5af30c094344350ad2a1dd034667

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\gfx\vgui\is-LD18P.tmp

Filesize
128KB

MD5
8c3ff438e747a73255ddb8c3ccbebbc2

SHA1
e81ddb67229feefece8cc5ff4d1b12c4b75cc103

SHA256
4a2460747b60d4b5843bf22a459f6c17f16a9664305b4b4bda182041a0fdebfa

SHA512
869270e4c6adbe4e914c07bc459a7858c50988ede0e75a02ce51a18080f9ba4bc4c483c4ee646e22fed948dafe388e7b908f58b09528b93eb1a87ef57a278b62

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\gfx\vgui\is-PE3N5.tmp

Filesize
128KB

MD5
1f10813901e2bd255a5ae21026de8b48

SHA1
03a1f78e07952f1876dd431ba4406b534435b920

SHA256
348584b23c63388045342dc0b79bdd37a8cff904a84215c386492e33273ab725

SHA512
b3fa7d1c675c4ae53ebc506d39234e166392bf6a0f6fa651b4c1a19240915f2423c9b150ccbe429159cebc0fa92135a9940cbfc8c79fa9fa3b353580f93342be

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\logos\remapped.bmp

Filesize
5KB

MD5
8b055c11130bcd5e0c8767148f88bd65

SHA1
79b36b96a4091e9ce2adf29ff0eb9a8d710cb2b9

SHA256
67b3ac5bea982eb1ef0109a23e7d0034482c3bf7cd6dd716f08c860b3c42f3e0

SHA512
d3fe76870e01c48580fc8c3d6640fa3eeb3147ce614158590904f651f748d486a81666b937659963e5cb7859fffe8fadf6e9d5f28a6e75b47ba95df5b73f8cf7

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\models\player\remapped.bmp

Filesize
33KB

MD5
bfbcb68225a2ad2a22b5f30e5ec47cd7

SHA1
c4934ce02807c8999e29a805b88aa1bf83c994d2

SHA256
b811d46adee27c4f1a33f2fd82c53361206bf1facb88e8a6be37c1e917cb3c35

SHA512
a226dd59f7e3d31eff51f560cfaada99b9c669e1cb8d80bec88fa556ae332d210cd657596323a9f4346acb374fbfcb57d841dd8a8709b1693d614f0402e98e48

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\misc\is-J32HG.tmp

Filesize
43KB

MD5
28ccbcf72b65f2dcf27e6ea22e34cfd1

SHA1
2c398971c3f51ae18f96846a3b33ca6337e53364

SHA256
c75f0091bb55fc3dadda598674f0efa05b757b7a1cb779a404b2d18b982a1c92

SHA512
a4c2461572ad4f559e4f293ed6f2a6e875363dda789b6147a91433d4365ca3c3b845421879750d9aa3873f08a3d828b6946d481511820ab0733f8068c3ae1c19

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\weapons\is-889K5.tmp

Filesize
14KB

MD5
2876bbba2adae9cf3456ea95a2c0b546

SHA1
737a3eff26b380e189ada33a028f63d75b8f0e8a

SHA256
2ebbea31183105b5d305027e960bb89dc2e2582b81ba712b01b1851501b6092d

SHA512
5423d77697905521a1718b2209a7e29fc34c94f481bf093f2ea45c3c43eb9dfce38fc8c87802c221a1813c582b626fd84446540178cba918d8e021d1b4b5dcfb

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\weapons\is-OGCOH.tmp

Filesize
7KB

MD5
3d352efef15d6f7019168991cff7cf32

SHA1
10030aa93a41d80b35d39e59dda86e4c164f1a5f

SHA256
616e07c58c0d3d332c3c7fe65c1b7e6ef49d5c26d09d8132d1e7c36c3899ea46

SHA512
bc51565450631d2954c0736c7899aa7111aa1584b0cd20ad239a765662d5935aec7fc7b33f3fcb2d43e5a69b1a9c9728a63a5a82134ee4dce7740cfa22e9480f

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sound\weapons\is-QJMSS.tmp

Filesize
10KB

MD5
7e7c4656f8ef80a72ef0d1e41317f511

SHA1
775a6ec4f092b3e8bcb59c21787ef33e9237ae48

SHA256
ffdaf0a862ce1f47615dc1ac59af868010796eeef50de895414c40a04da3680e

SHA512
a257ce57532a8497f8df5860ae08729c78f90477f0b96264f2f98dc31ee034ec2679ace4ddf1ed4ad14ba08170354fa00e984e2dae4a17491fb5f8b7e009391b

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\cstrike\sprites\is-V0L28.tmp

Filesize
361KB

MD5
324aa00f639ff5f9cef8797a1f862ceb

SHA1
38d8564d31e700625ef0ce35cb681f5a6a34e070

SHA256
aae249f31605fdf3773d0753764dd4865873dca48a58108579923af755122fe5

SHA512
d37195b2033c064cf1396e02f9e01f63399196c4de290b0630cb252bc54f9685be98431d0df3ab3c8239b9a585373ae21c224d04d713e20e2b4d21b1720ef34b

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\platform\AddOns\common\cards\is-N0QG8.tmp

Filesize
17KB

MD5
fedeec806033ab73e7dbb5ed2c06f4be

SHA1
8c77b9c9842e8a04322094b3fb21c2d78af43c1f

SHA256
40c583c8740eb42349f7ba5fe0c34b8cdc06bfc16153e26880d1620acaada5ad

SHA512
4059086c97b3322607f9b40e8c2f3eb744032d45848b1d350e814aca1f539a107974997c3d43ec56b9a5ca002f776463684ca13bfc75f908c6a4f232ecb26bf7

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\platform\Friends\is-8839R.tmp

Filesize
1KB

MD5
cb39e3a0efcba5cf43adb241e03f3c53

SHA1
2ef3b884c136b66e0b6acee1a5a201506bf3deb0

SHA256
b490e7f1176c6b61610f6db010efb9dbd200b54ae09026654a96bcfb12aa3470

SHA512
30b7dd4a3b927d16df6ce7d76f0b2a5aa78efb53b418ec80dd287a38ea8512981a0743202fb673b2097dbe033caf10254a77c5b0497cb24340998bb31e770a72

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\platform\Steam\cached\is-N6256.tmp

Filesize
2KB

MD5
18581b2844d1b35bd0dc170f8557bc42

SHA1
05e8657b8f73f2608aeb07edd8f469f3639d29b7

SHA256
7f00fc14809350a11d04cb655e996beb4d829ae7c2d7ca320968661961e18fd2

SHA512
cb2be96b5ae7cc5c593f954092ec663b8ff41e06f2597b24bbec8883a025baa75bbc6c15cb24fa29389e05b7bdb0d017bb47ef747a524eea53b77fb4a479087a

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\platform\Steam\games\is-CS7FT.tmp

Filesize
1KB

MD5
200380f4259d09ec3f433e421cd5a55f

SHA1
9afc9cf71fd5949198b77bf7ec396a89058d6dee

SHA256
e136089e82c2d98a7283b55dcd93c5332a332149e7119d015bb7c353435ea9c6

SHA512
c77a433055077420eae1fcae302fc0738f592b8081ba2bdcae2015a3296672f1df2518934821d424e3a8c9535bf1891cbe7394c16ac68520099a3d7dfb4c50cf

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\platform\Steam\games\is-G1BMF.tmp

Filesize
1KB

MD5
0b5cc5aecf0b47e2886c384908532dbe

SHA1
add589f862a5fb871f8c84871501791b5dfb3c62

SHA256
e5972753625daccf5bd9b735261b60375b5f46cc5adcc8d1c18fd36cde5d7d1c

SHA512
859647325ab25bb1d412001bf425babbc720c7cb72c3255768fcd03b29b34908f68946478f5855e96358de74230aac396559411d71860c0e5bf5414929a69d6f

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\events\is-JILHQ.tmp

Filesize
1KB

MD5
8cfcc0a84d0b6b51995ce17bc9f194f2

SHA1
f86d5edad7e5a3e2d994517da5ebd7d748a8c666

SHA256
2c7d43b8dc6ea01a32acddb7798b9dabf0ec44c7a6dcf75160539a7fe53e029d

SHA512
5f75243ff3e13b557859d89593432f5e29f014f2bc527bee363be3369e884feccb15ee593094c7eb0f8e4786b6a352cdf9fc6039636782cd23712cadc114ee1b

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\fonts\is-09NHV.tmp

Filesize
33KB

MD5
bca82506d597eed9b5507ff7ba16567b

SHA1
55ad94cc92b95ce8e2adf62df94a6a8244980e8f

SHA256
4eb392f4136f1a4b255ab26772947e62b80615ca8b1ccea93563c3f33539a8bd

SHA512
e817036968d39d3f86c2f6f241c6f80756bf139a700adf018feb870542331b230cad6369652eb2a26b26e94b14c3e27dc0112d3ccd1c512f73e8b056ddeb12fc

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\fonts\is-21V68.tmp

Filesize
34KB

MD5
46f3cc3d5ca0f0e80d30ec38a3ed9702

SHA1
2b7902e73522c60bb4e5a6d7905f91967ec54b46

SHA256
824ad8824e4d05319556d9c08dd0d4c90fecd6150a0dbcae8c946740cb4e2c56

SHA512
9f85b11a9479af47963155fc823a9390794b3db05fb50011efaa87e1adcf772d18fdc1bd57f3ca556ded84d5fc5671236ee0705043771c83663612cd2b0f16d3

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\fonts\is-4UDQ3.tmp

Filesize
24KB

MD5
ebc1b6a271bf99cdadc78dae5e9a29c4

SHA1
afddb10163d0cacf30f7a2e9f9e4f534c8425586

SHA256
3988ddbea3e6fd927933a698d28d66572d51e59938ea16624f644afe2021818d

SHA512
ccbc9f59f59c46187954d5e8a70513542471a40e8653f59c8d58279777c9c378f2e1891c4949d8d5b104117410e991f756d768932fd5353dfcbdca3c37d6ac1a

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\fonts\is-53Q2M.tmp

Filesize
40KB

MD5
910e7f920f59348e20f787d9240fe2a7

SHA1
9f85998b0a73efbf34b2e732942a0caada57925d

SHA256
93eba9e5ba94654d73d76944cb9860e4fe8db92a6c734fcbc57864cb766caf1d

SHA512
a19fad5b08875df9f16993d48562cc2cb4bf5d918b5f102b0439c6d6d6fdb862783762d586393b0e0b6c324de3c38c27fbf09d4b48c55affd44aad2c1ee9726d

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\fonts\is-9VM8S.tmp

Filesize
45KB

MD5
d3d6c70dd23590745a0f691c28f88848

SHA1
b46b4a8427c59e590f8adace2ab659da2f4f4e9d

SHA256
f472485bdddb0f7acdce7ba6dfb1520dfdab6b2e870b37f77f61714533c5fe79

SHA512
06a400b5462c9a307bb281cf725358a8bc64a27e34b5f6b95748d3006703e66c4a756ad86fc5e2de9c2a2eba534921234fc2ec422b6107ef7264f7344a258a92

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\fonts\is-BKOMV.tmp

Filesize
27KB

MD5
8148e0f0a6679ced3ca04fd6c258d478

SHA1
9afc1daad5e004bb9481147ec5fac15693897f2c

SHA256
60946960e36a56fe17b02ab7c618e3ca0d61b7412acbb9967271ff309a76b5e0

SHA512
918c03891b46c645ff9b1a497a77bfee752befdbc2e82b882ca3d665dea21d3de1b112848ebb9b996b201c14bc14a70231838eece3df04a431becd0852417bed

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\fonts\is-C9D4M.tmp

Filesize
24KB

MD5
07306c3fa68e4b5bb4fd4da515adfdc1

SHA1
ae0203c50a3ef107992d61f4b135efd6fdc809ba

SHA256
fad8e72511e03ea0b215e491da1ada731d7474a03d43c26a2f858c8fcee9beac

SHA512
d6d1b8f13d9263932f8757fed790dcbcdca681ca51a7581ca552631409b8c65de212436f8e161c60463edf8589067118d15537789e8aead85eeb156af5c29a7a

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\fonts\is-KTG57.tmp

Filesize
44KB

MD5
ec8766ea06b999dab276c2ed85397067

SHA1
d043859519210810ab69bc4172406511b0391728

SHA256
dff807e488eee92c3f841de1f330bac00b42c36e34320e6335ed6e5d926243a8

SHA512
5b69d36450816306ba280d2690c65f7478b84a4b1d8eba37b8a4baf8631d767859599e1b20bcabb930dbb7ebbfd07d89bb3336c9999809c50e20fc0661cfb77c

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\is-H6KV9.tmp

Filesize
1KB

MD5
1926ecbcf1b403f0c4a30426ea74276c

SHA1
24d8e0d5f3477f85e76985a0fc579e392482c402

SHA256
99986396ea8ebd9ab4eb1221b52db2a8a024e67c748e0b8080d8dad24e4e9cd2

SHA512
8e944a0304620fb7428acbe883049167c0bc1596d8f294b1ebcb383899e6881c5e54221ea5a60fa7c14210e5cfd91831a8481020608c22747f43c2f9d7e45060

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\gfx\vgui\is-HGRDA.tmp

Filesize
2KB

MD5
6deae390d10e5faef07cb793138a4ea2

SHA1
0e1b89e5e5e61f5e8959d3d6e17fc874f3d14a8e

SHA256
1efacc8931f4e6558fc9f854527e25e004d8c3fd90f1f5209273236924a9241b

SHA512
70c1ab592e46440f759ffdaa2ba1bbb9206212670762fbdbeb04f85da2304120e0a052ea4164fc0e0326e82c013924d0db0ea27fc21041489fc6d6d69b69d93a

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\is-EHKGO.tmp

Filesize
4KB

MD5
f02c1d45a1a86f5d60ce9e310e24d144

SHA1
d991f95d96e1c76d2acb944bb09447628cd96caa

SHA256
01491c012c29f4706f0cc8f1117eb0f882b54f720bfbf320a3271ffac6c929dc

SHA512
88dafe4039264818c4193f563376db890ecea2f8f67df7902dd76aacd08be4cb47197257d02217eeec1a81295615b30b89e91d097837193a8fb64e72d03d7334

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\models\is-42HPJ.tmp

Filesize
22KB

MD5
5f394d005ec12f63949d0c6a62c1b7b3

SHA1
957d1d0598c7bd0079db345db2006d8e4b755096

SHA256
47b5e88f5cc25627e8dc76b85eb6ad64d8613b00838d0cca6a85f118af81c7b0

SHA512
c51142a1e7902d720154378a7b8e01808fb4683e5a12c77516fa474b4eb05c0d2cc37aaf1b3b0a33757aecdc9ff8008333df66ed0e254b01cb5640b8646e6fb7

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\models\is-962LT.tmp

Filesize
3KB

MD5
ab9f1bf1f7d14ca0032df954e1dd5212

SHA1
d51ab73cb33e1737b86ea0bf6db28aa895bb86ab

SHA256
748e6fb4465843238519d56774643c2d4fb3f77131ba49ee9ca2d700c42acb70

SHA512
c5dcb61363551755beaa4732a21ec870c9b077a44eb0e810029f056a7c89b7be4d6e2d4e48b860a4eedc707d057ba55b2b45c238cf4a99ec167a1c07686710bb

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\fvox\is-L7C9K.tmp

Filesize
2KB

MD5
299c3e28a49757ecab2e84ca9b220e62

SHA1
850cbc182e7000b6caa8b6af9986161a2554dbce

SHA256
0ffbcdb3466691fbc1043c69abe50434df646f997c52856a509de43cae501eee

SHA512
2caa0f84686df85905b355107ce2d50c1b8b6debadc50d49327330855e3ed2cea05768c1394cec746ddf90f7087a08ff98eda51272f89d7450923a5e41a13bf8

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\sound\plats\is-GAS1K.tmp

Filesize
1KB

MD5
811989e09124f54cb27fe6154b0f1018

SHA1
90c22fc3b248588e2d9759e6ef395303a86b7b60

SHA256
5271b9aa2961809f47fadecb693be2eebde2dbed62fbc4f5f4889fcd8c4a65f8

SHA512
560d26fdbec34ab687e40b8be6144b0f586449bd3a0eaf286ab972ad60b1eb1fe002649daacad36039a298ad24aae96e3531404ac2d0d7b0b47e194b8169e18b

Download Submit
C:\Program Files (x86)\Counter-Strike 1.6\valve\sprites\is-LAVR8.tmp

Filesize
4KB

MD5
30c0c19f5c5226225ac3959dfe1f1428

SHA1
5c7be5173586da26dd730a790a151b8a16611106

SHA256
5603d52c5f089950f372e2b00845738746abebaa2796b0b3e2f6d8d2f4111760

SHA512
c71799d84798c2e2a82dbde7ffa5a2c8698eaac615e77d337de7dafc9239c4b59bc2794b2ccd5740d3e19957549257bcd468660d0696f09fdca37485150c233b

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-J62EB.tmp\is-3SQ34.tmp

Filesize
796KB

MD5
8535bf33ec74a738eb87c20393ea3fb4

SHA1
76c89805be4c7623f2b15e9c701421d6902bfe61

SHA256
f80191c6d74ddf142d6cde8136bbfdf17d3b46bcde724e7b3755f60d0314e8f6

SHA512
199c6250e951d901ce1d6d47bbf46d0ea67734f5f2488e054f8c961dd0f61d5b3f2596fc2a4a813d46b93ad9354f5ea9a57d0eb3e9feaff3bbd0bbd69552a7e6

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\cl_dlls\client.dll

Filesize
928KB

MD5
d53f2889abf9342e8a59fba69d1509b6

SHA1
f67ce6af4c9b6be3b7a785ac30c8b9c476028570

SHA256
1dbddceb74daa150921db3f201c9ed66c2e399884bd10f5674b06e5133c455f2

SHA512
3650d096effcb522faa11f20ddf577f1d5c00b032dd9103e18e2690e94a63dc11b9da365f742964e266d57dc9c10f53ec073b81c80b82a9724025b4af91cbdec

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\decals.wad

Filesize
937KB

MD5
4b2cad46eccbceadeb82cd4c417e323b

SHA1
fa3645c164cf8eb3c258715da9eea002b7cdcc4b

SHA256
c9e852b60197177f1e6f54992c3f0e886425ab6e6cafe9f1b1e5e6b3bf80850c

SHA512
756355c1790ec36aa31093d73b26ed0747f74441644c6c7cc215e39e9fb5f9045db6fa0155a7aa7dd3c5f4df8a12774476bdd8e84d6d164f5d10c7f739c1836e

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\delta.lst

Filesize
11KB

MD5
ba4c1afc46c58072199da91373d6bc07

SHA1
6216d9fde30b7c01efce41d07a1c6d4faf1ebb55

SHA256
22313453a4784015c4a73f7f6b21e8d15082a4d0497fd12eada5e104fb650532

SHA512
c98b86c44ebbdda605c5d8768b5d83dd73ae057e9edfe1143e361306b27c038e9cee501200c301cfa0977a9579fd0a06d2a4797b20a43c5b9b20d50fbf6713ed

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\game.ico

Filesize
158KB

MD5
51ce242b4996fade5d978202470cd9fa

SHA1
80e60af84397e78a5fcf5825e6538334933ea288

SHA256
bc38d7bbb43fbdd2889f9962b79a318f59e6a0571332c0cb0ad0823a2756eca7

SHA512
2491ba8407e0dbd2095aa79bde5e38cb25d7294a73919fe61ae66f0bbe7c9d7081ce87ee178dc48208fe801dabedc362dfb9cd74f2e37d8636324243d819fed9

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\gfx\palette.lmp

Filesize
768B

MD5
5fb93560c8ae637ba463d084b0ec505e

SHA1
1b2a6a5bb0a579b0f3df9cb6c6152a9c65cb9e62

SHA256
036b7ea3c8c03be214bb7d22b8d63ac27f63d547e42ca677fef344ddc780961e

SHA512
0883834f1150791b4e060e080e7a07eeb60310b88e0334db094c64af5f5b147ebd51cb1e3baa514ea53d286df9876df86d7d463c7e2675c14a5050d0be4003a9

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\liblist.gam

Filesize
313B

MD5
00934a842a8b4cc88dac77036f4887b9

SHA1
40121ae00c7db4355edee6039d4a02c626a53df8

SHA256
27d99db11be94733eed6dc674f5aae57fe1b9b0efe4b6981ad3c76b7b39d6dc6

SHA512
ca77bf2142b124f20532800b2e77c19775bb2a463f894c2ed699346408df94dc302d8bc94d74a0243f3832960d47ae2d62d2576f00742e5ef0d03b72610902eb

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_1_a_loading.tga

Filesize
192KB

MD5
b7a56d00124b089cd1633632478a12ae

SHA1
fd4fca3aad970868a209f13204b09ba56f1df575

SHA256
c55efedcae6fc7782889166b4727b7189bd6e9d721ffb1e1c9bfaec861f60f69

SHA512
d75147f3704409128a3cfb39c20f423008b87b7a0e8dfc2f0da88751a287b661e1a7319c15bea102071c0e260d360b480dbc9e393593fe13e16bc8bb330e98a9

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_1_b_loading.tga

Filesize
192KB

MD5
81560a6be0a3ff694650c60150bb0580

SHA1
5d724329ad04ff85fafd6a40aa45e1b1e8a2e084

SHA256
7f36623408898201fa6ee836aa13c91a2d1436e0b846f2994fc7238bb255e0f0

SHA512
16751f050b5038485ebf3eae94afd649d978f2bf6ff6baefb1f62c6b1c6170a18fb06ad07f5cee09779184e4f284d087c20032e081b8051e01a0b408b5f00bb5

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_1_c_loading.tga

Filesize
192KB

MD5
1e97021c25463fa222206730f49bd096

SHA1
7b8e51cee73981db0c208dbd6d860aeb10066756

SHA256
80e9489996b9979c8565d1197a089adb12ae35592ff46fc63b960edfd109bb07

SHA512
683cdd3e97db8ac14a8c4892bccf4b9bd3853c7b9599e5cc647332c19970380a9b2baa3b20262921ba81a5a48298e1521a5753f4bb72ffdefe4b87da8f272699

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_1_d_loading.tga

Filesize
24KB

MD5
5e7d7efd31feb731b23301e861863483

SHA1
ebbe1eceb733d22cf7138ed64d49192f53d8ef46

SHA256
c762fdd3e790069866aff6e4701707ce03dfe5f5012ffc75f8a47c897f306a3c

SHA512
1e22b36823b9d0fcdd73a646a85b9c5d05645f1ddb95983e232e9fa61bdaf9c331e84ec5576c26103be917b9316a9a861bdc01645c2296fb3665f8df79ff0e2e

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_2_a_loading.tga

Filesize
192KB

MD5
9ea7c4380d1ec52794d7dc127955ce18

SHA1
f6dba12782153b96845f3ba03d87c4012119ba68

SHA256
fe52e1f9ba55d2dcc780909af0ad800f165421c79ad3712ac64c8e1a59a783e1

SHA512
76420eb37381b9cabd807d72c98c62506ac65a4d5715c88426f9fccefdb048fc98afdecdfce59642bb934c5b3d0809c25144f825fc672aa2cc5254da429ab626

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_2_b_loading.tga

Filesize
192KB

MD5
298275828b9ce5cf05ed5dbfffa06c41

SHA1
e0401f626dd43a725e997b47e04a4ce961d9fb30

SHA256
5e00d24840241f8f92fe9bd6bb43095677d17294d727ab21dc16df728c1f58fb

SHA512
fcaf359ea5a5cc2a6c5f7584dd6e48dff10069935b47efec2f525ddf1d016712721e5f90722fb99372b736b96f8de9d6f1127da1942fdb9a27f3845af5b0e520

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_2_c_loading.tga

Filesize
192KB

MD5
a388fe91133ccf4471f801a5cbf26af7

SHA1
85c497beb9892fdc6ef05bbc55c24d6b86775a47

SHA256
0cf3b4414d91dc4bc61e460bb2ab99ab4bc7a2a357f0be625df3274704e799a8

SHA512
a60888b0ae2fa46115686bc605351e48832e9979cc006e7082c894ac7d19f99297c3fb031222f29ab707c5273bdc2353efed1c52cb96b5a2a509fcee04a0f08e

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_2_d_loading.tga

Filesize
24KB

MD5
6eac2d343d58d358c4488aa0d1136225

SHA1
bcdaeaae85e85502fcfbc977c4b6696790f03357

SHA256
6d7160deb904ef2f4ebbb6c9b1569630203c93ebce69d8ce204ffc57d05a55f7

SHA512
d6d239b4395f14bf91c2ddd72b99bd8189cc83883851e451470b2195641572b5e8dd68ac017981d4b87bd5bcb66fee6fa2e6fa0a28d1a8b3ff595fc0ccda73f5

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_3_a_loading.tga

Filesize
66KB

MD5
3d5514aaacb2bfe1fb2f78be9b998b97

SHA1
4e45110d525bae8e531b6ffcb2025e8b6412facf

SHA256
30d02365383affb1baab87cc4be50fc20c91928bdad7a226c8740d059792c34e

SHA512
b657142d2b4bd00a87a23b68354400d7a615a54a31a3d444d7d51b7dcd4d4bcafec87d5c7f8ab7dd904f776503bb9ae95de2627ffec0c235f111d695acae0b2f

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_3_b_loading.tga

Filesize
66KB

MD5
f6d8acbc7b9dca0c0b509153aaf6c4bb

SHA1
c7b2632a1e60b2c7b253358d5e4f547129319c42

SHA256
305add1f2876ff296c015d8ffd65c44ad75b38bdbbac196d97c7b20e6bff0c58

SHA512
29d12c83da901c9a438ccd4c0f06e4bbfabd4c9c47295a633b29226a8848b6961c392579badf1506c3a68645ca19f1172c22b38f27960086ceba879bc9631f50

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_3_c_loading.tga

Filesize
66KB

MD5
386221efc38d174504d844527fbe5a7c

SHA1
05869b2726c5146649a28775aab3f68677fea8b4

SHA256
55f325a2f6d03e2fc976927d2a87a50b2d03de7fc32e7a349773b739df4cbd19

SHA512
b50b20e4b62e274618ff85a92989f72f070fff579f971104c077f7c5a74a52a6360814c2b5b23cc5a6fb983354d9400f2bfe753f646d538e1a06d7c240cdb894

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\resource\background\800_3_d_loading.tga

Filesize
8KB

MD5
2b4f20924c00865da19989829f130f08

SHA1
3ad9336f4055ba3009507ccbec9fc1b498330f2e

SHA256
9ed9b9792bfbe068e3386075a8978adaf027bbd3eaccdead447f20d44a085d33

SHA512
069b833539aacf556b15300f40fc51a856ef242fe5a0e7e5aa530276a7e8c98c7626e28b9cacb07b00219b1472d0e63f31adc6b058d49896c6c858b4af4a71b3

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\sound\materials.txt

Filesize
11KB

MD5
27f04f561ab6171e88e0139ae5eacff4

SHA1
4da2694f713a474313aa2031c2547133d806677e

SHA256
af841038031f2c9ca133bddada406e03d7c7daaeb6dd13692ed9d6d621c27f11

SHA512
e444ec9f332c262ffe28e38752800666325c2f31580e61f6d2e42d0798eed663158a67c70267c861600ee9f2973628bd34d4001bb27f39d3fd9a72d721ca737c

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\sound\sentences.txt

Filesize
21KB

MD5
2e1f0d6eceae61d0285ca51932277491

SHA1
e4543e52bcd806dfb3ed83adc769e1c578022768

SHA256
ea850d30fc680f87c0cd09684e910ed75c174c28fdf1944725a924c43c4bc8f0

SHA512
06295dbddd1b939c228e34664f59abcdda249f96dc24f38801871dc12568f44e05fb76d55642a86ed806cabac83bbbacbe10910e1f841bfe75a6f353dc9c0f32

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\cstrike\steam.inf

Filesize
43B

MD5
7b96c38bba7a5f2084df6096ef1d381c

SHA1
f3ca9efc873d5c02c328ac632cb617738680aee9

SHA256
0cb4299a57cbf77f55780a5dc4f29f646582947b07fd9590fab18c079c492039

SHA512
a81d5f961d40f424e5b22537a0174706fb3f25a659e8ba39160aee71df6bea274c4e962a14f1068b564556b6aaa564da8378de04e28986c659e6308a07f92ce7

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\hw.dll

Filesize
2.0MB

MD5
9bd50bfc62c882491293822132db4781

SHA1
1b5627731ea450a8e8c6898c0d81f300a9381f1b

SHA256
e3faf0b5f1f694b02208ee905148d7febcde9eb8ea093c1251ce6a3dda1bb65e

SHA512
264fb0947097cf5e18541553a16ca70cdc22bd26f4c153a199b1bbbfc9b123ccc82f4f4b8c75e12e9f3a30c0af1688383ec313f8b8816056c2733f13f2910605

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\platform\Resource\TrackerScheme.res

Filesize
14KB

MD5
4e00542ba3e7c3e602b58b5fb707179a

SHA1
51a6be57406cb1cf9b30986581c204b1b520ee69

SHA256
7400197b4ba0e024037cd7502bac9fb31c677053fb7d88056d80f367bb450e74

SHA512
e00062784cc226ca010aad6fd5fe6c9f91c15311ba57210c001be5085981732c574d6a7cd4f698dff7b27e1606dabea0228af0ece921136ac7cc6c1ebb522a03

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\sw.dll

Filesize
1.9MB

MD5
ab1740ae3ad565b72df1ca3418366422

SHA1
8274584eddee5154fae7d1c1bcb925d856de4ee2

SHA256
91007f05a4fc6bac6d2dbfb2262561eec0da7deac21129342e76be46696addfe

SHA512
c39da0c1bac1b357d77a3f34ce25ff7f7b57b050d48e99213b45da188c502b5466260def737e641892a0d97a6ae04eb584c8f802a3c94c4754164cc865fe50ee

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\valve\Resource\valve_english.txt

Filesize
12KB

MD5
2f072ac18adc2dda29b3543e7172f5b8

SHA1
ae9c86117a06c22e5bca7c30961866aa3f721df1

SHA256
b0a18a990b7877c9a92a69b3e77b86f0df154baf08f18b9285571108aae87c97

SHA512
134c7ff475791b4e7518787f2aa544f86e3365250f83d2c4deadd8579d001118b62b8206ef61b65daf18331e506ba392a489a4781ed224c844c9e19b6ab46d99

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\valve\decals.wad

Filesize
903KB

MD5
72918552c9e1c8f19fb5667eb06b171f

SHA1
dfaae5baa75081f930e3dfed004e4a8efcc1c37d

SHA256
17726e8174729011c7ea4e1e37b4ccfe7a9aa4abb82c2aaca87872cbe0c106d0

SHA512
dd0b910a818d2558b1b7d39420c5edc0dde1a8849a3f46c6838ee56db1f3fdbb37d9800e517780787ac0f62bc1e3d1f6fdb35e756ecc3a47583b8903025498ed

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\valve\fonts.wad

Filesize
101KB

MD5
ffac10d555a864f16de86928ac5025c4

SHA1
3bdc2ba931a07052e1e5ae5aad30fe93e3f735db

SHA256
d6989bb9fc90c437f9957cc7bceb8f2550b38b8791df679753b7c08c98632b80

SHA512
dc468aff83bdec609f6a54d3a57dc1658f621c2032cab87bd64dced9f2be7646a3d647869c5989933e9870a26158fa9310495ac68e4c34dead5d81473250b53f

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\valve\gfx.wad

Filesize
84KB

MD5
4aa832b05c000366fcc03467a5875d44

SHA1
73aef47a6aa92390d1121adeb150fb4be877893f

SHA256
6fd53d6ef8d704299734018e3069ec12551e7fb2065804a1d4e5c936ac4033bd

SHA512
b5d0e825d28b88c52e4948a848971a0c8e317ff7ab92f6541d885a512c842c80d41718408eb77ce924dc17ce5a8d968d8dec658b91fb15c3670cedd982189ba8

Download Submit
\??\c:\program files (x86)\counter-strike 1.6\valve\resource\BackgroundLoadingLayout.txt

Filesize
714B

MD5
11136b7cff2358ebf01fb0d8783fa793

SHA1
05f5a267828975d2c43f90b73962b971b9672954

SHA256
f1d2461e3936ab6397a852f4efb971ad807bea0c6c99ca8377886ccd88ada750

SHA512
b8dbb295b7d5a9b5f811d4c63f9dfd6dba232269f5b04c259f817ed7c915bfd12d2df0b71efc2442b40db677f3c16a8c12e8135da7b76dc55a607949599caee4

Download Submit
\Program Files (x86)\Counter-Strike 1.6\FileSystem_Stdio.dll

Filesize
116KB

MD5
86a55b947a49117ea78c8d3b24b2bbed

SHA1
60522a7a9ae8c05be7790c5efd75fab4e8d63334

SHA256
e8e9c75a3b7a3d7d7b6b41e44f32c2841e8e40dd97b522707f9dc727eb86a13d

SHA512
92aabb1a4f5aec1b945201e2db18835ea775822e7b9f97d3e88efc0efff9bfad8dcba217b25f8d9dca7c271b3393fcfb84030ab84e945d8f7f415bcd506f0101

Download Submit
\Program Files (x86)\Counter-Strike 1.6\Mss32.dll

Filesize
343KB

MD5
f520185e02e8a5d85860669176bc4adc

SHA1
cea8e9ff14994c89ad86cf891c89fea42a39250a

SHA256
fe62f1eb6ba407df77619d16927abbefad3c726014f6bd1f8c37a7c3d6b781cc

SHA512
b434e77a17cdac0109b698d0fccdd25dcdb15090a9fd0427504cc7f616673fa6c7307f07fb22cc2fc1e915887c0f9dc025aa8d38f51503f91df6a9ccee5ebe58

Download Submit
\Program Files (x86)\Counter-Strike 1.6\Steam.dll

Filesize
3.5MB

MD5
90c985ebde33249fc7817a7efae2c31c

SHA1
60439b4ff474e2f8567eeaf7bbaa1b6dbe011dc3

SHA256
cd7a2cc4bd64f6b96adb01b4b6a936311ed52e7fb1514aab19a14652be95387f

SHA512
dbb7f45d332b6b64b3feab0d6b1e0f2d14f388434bb9f9d8efa49e1aa5dd12a07ffe1b66f23a667468f2a6baf8fc20d97c99a410f1c28470dc2d58a600cc82ca

Download Submit
\Program Files (x86)\Counter-Strike 1.6\dbg.dll

Filesize
68KB

MD5
99b5e21dfa5e26e9e1ebbbd7a44a6a66

SHA1
87812a6f2aeafeac828bed5cb05b1a842c48803a

SHA256
8564b2f4c76aac5eb645514bd8fb82a1f57009557c506c0fcef3ce5b2ee078cf

SHA512
3b8bfbac7cf32778e146cb51f9d215fa02f21e848c0669a9abe181a4383e10d6c85e5b73d86791ac8736a0d246dfb2f79f9c04e2a0a1eaba029d34f0ca75b9b6

Download Submit
\Program Files (x86)\Counter-Strike 1.6\hl.exe

Filesize
80KB

MD5
eb767e434413779f0c9260a9a2761b2a

SHA1
73927e9915f8bb15157011f8fe0a86bf0e4d971c

SHA256
aebc2327f2fb8c26340377b717eee79194d411e1ca6e4239c5c9c629dd6447c9

SHA512
3446a79e22e6cd4b60e446b8e0b0e0804c83b6f6d4c58482cf215afcddd7fa320a7a57d019046288fb31b208c4b88d7e5ef2baea7a4b7e885c24c2efc7ffe237

Download Submit
\Program Files (x86)\Counter-Strike 1.6\hlds.exe

Filesize
388KB

MD5
976717f76f70ea73d51117ca5a13318e

SHA1
b13041026cc416612bc3b659c7649a57eea83537

SHA256
bcd35ab8e7c1f56b4354567e8e5ca74efa9ecbf60dd84a820e50cfdfb1f4dcf1

SHA512
f0a2f5f004f007df8aabd80f2e02981bce59f4087f9c05e6eb0deffd53d5d33052acbf6462435becd7cadebaa89916c0e32f146c853bbe0c2de93ccab0267285

Download Submit
\Program Files (x86)\Counter-Strike 1.6\steamclient.dll

Filesize
388KB

MD5
51dbdd74f5bdf5452d95c90d0814e527

SHA1
89e69fc49111f83f3f283b88705d5e7944c8c228

SHA256
8a6e0db0ba6b3485d82128ed629d9c4f930ab83603c11d32690de6385cac1994

SHA512
3da2c75379602c2480bba9a71979c53bf83b99850506a0b2dc9ae9391c5b0e89c7263c8f89c0b438dad5664b06747500f279b00b1c6c09200a950e294130ab52

Download Submit
\Program Files (x86)\Counter-Strike 1.6\unins000.exe

Filesize
808KB

MD5
72a6d58f9882a2e071bcdbbc111fddb3

SHA1
31009c13ff6d10a721e85dd7beff32fde140bc62

SHA256
4d96abc3b38762ee2f1be7d78dcb12bdb09cfd548293701f5155845b1a57c23f

SHA512
5fd617d21f2972b1357551922471666f52d7a846e1c8c531410315996d0274b23c146f130277e9bdc810bd27c6737cb93ae6e8b2310ffc7f045e0a457fb0b095

Download Submit
\Program Files (x86)\Counter-Strike 1.6\valve\cl_dlls\GameUI.dll

Filesize
1.5MB

MD5
20c23fee31b40a4561b09167574b513c

SHA1
b019e008805e618e057fb6a0d7cfbf98756c4a94

SHA256
2f113b556c4c1bb5fda9b03ef2048059f841065bd36df004e0450207a9c6e7a9

SHA512
142c5ca2bd2f94b9edfdaec953b88339508690070f098d1c49dc06324b51846734de1c6014d2752419f88704842618b28e54eb1a2c48d4d91e2aa54c36bd06de

Download Submit
\Program Files (x86)\Counter-Strike 1.6\valve\cl_dlls\particleman.dll

Filesize
80KB

MD5
f0ab4c734cbaf25b5bea698c054af768

SHA1
bc765e7bcc4e368110aff07c813a146380bb87fc

SHA256
efe9673812f2603612679327ac2312cdca68317821d977f8986174e6dd062bdf

SHA512
d9219fffe1e531126a89feb3a79e50bac59a2fcb337dd72a50e50a0aae948ecc109bc738f66b35a4256e18072190f14315753f15673f731cceaba69600c0f953

Download Submit
\Program Files (x86)\Counter-Strike 1.6\vgui.dll

Filesize
344KB

MD5
d44ee82601ae62ede3e224269a0bbf53

SHA1
2d00b1d5e052584c6c86ec08795d56d2181a91ee

SHA256
0d4472d21443de839080860a300cca6b9436508f329d33d712e5c9bc07d4d998

SHA512
00dba1a1d88bbc8f77f86ac45068d3f071805a13bf30c7f5c3f3168d3b799e773a1a3a7decab7931a9104bfe91dc8d60cc54b9e82a12e01b29dfe13c4fd1d398

Download Submit
\Program Files (x86)\Counter-Strike 1.6\vgui2.dll

Filesize
252KB

MD5
738ae89125281fd9a4bae93922b51020

SHA1
c0525355e3128337f5d8944185ee076335c37c32

SHA256
526731daeb22fa7b4b4831f16064119847eaecd9dd7f1457a287c9c81c48ac31

SHA512
7aa3268e036b1d53e03e6899d5598f2708f5332e5315c098001f0dbde28bac2dd8abb8551824866f748f69b9379a3fb65d21916408d93e1587f724f745b330c3

Download Submit
\Users\Admin\AppData\Local\Temp\is-BM1CG.tmp\_isetup\_shfoldr.dll

Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
memory/2004-12503-0x000000000C030000-0x000000000C1C9000-memory.dmp

Filesize
1.6MB

Download
memory/2004-12519-0x000000000DCA0000-0x000000000DCE4000-memory.dmp

Filesize
272KB

Download
memory/2004-12520-0x000000000E850000-0x000000000E8C6000-memory.dmp

Filesize
472KB

Download
memory/2004-12524-0x000000000F270000-0x000000000F2A9000-memory.dmp

Filesize
228KB

Download
memory/2004-12508-0x0000000004C20000-0x0000000004C63000-memory.dmp

Filesize
268KB

Download
memory/2004-12463-0x00000000002C0000-0x0000000000318000-memory.dmp

Filesize
352KB

Download
memory/2004-12522-0x000000000E4D0000-0x000000000E505000-memory.dmp

Filesize
212KB

Download
memory/2004-12517-0x000000000E620000-0x000000000E741000-memory.dmp

Filesize
1.1MB

Download
memory/2004-12515-0x000000000E3B0000-0x000000000E443000-memory.dmp

Filesize
588KB

Download
memory/2004-12500-0x0000000000BE0000-0x0000000000BF5000-memory.dmp

Filesize
84KB

Download
memory/2004-12513-0x000000000D900000-0x000000000D91E000-memory.dmp

Filesize
120KB

Download
memory/2004-12514-0x000000000D920000-0x000000000D960000-memory.dmp

Filesize
256KB

Download
memory/2004-12512-0x000000000CFF0000-0x000000000CFFF000-memory.dmp

Filesize
60KB

Download
memory/2004-12471-0x0000000000260000-0x0000000000276000-memory.dmp

Filesize
88KB

Download
memory/2636-16-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/2636-12452-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/2636-122-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/2636-5242-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/2636-12439-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/2636-1320-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/2636-9336-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/2644-15-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/2644-12455-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/2644-0-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/2644-2-0x0000000000401000-0x000000000040A000-memory.dmp

Filesize
36KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads