Analysis

  • max time kernel
    365s
  • max time network
    368s
  • platform
    windows7_x64
  • resource
    win7-20240708-es
  • resource tags

    arch:x64arch:x86image:win7-20240708-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    02-08-2024 00:37

General

  • Target

    Bejeweled 2 Deluxe Install.exe

  • Size

    22.4MB

  • MD5

    8c622e1063f17f03b2144247b2976ded

  • SHA1

    994b1b122d4d4bdfaaa7183fd97c032918f8ef5d

  • SHA256

    3b0a120990c0b5d4e14d0f2db667100fcba4c7e4bcd89f37d136f777852044d4

  • SHA512

    41cd6a3cde288f99e557a529346c6f3059e7e4bd56d78668b58ce464dd84f28ba7398b8e664538d16b2f84af40884a37e2100eb6e551948da2550d450a9c1793

  • SSDEEP

    393216:MCalNjd9qeANMrW31SCB7VNuPa/UBQ914RbMKA7AWHdHehorFUoG1vEXx5na3wc0:3and9xA2613B7/ua4Rr09dv+78hs3T+r

Score
7/10

Malware Config

Signatures

  • Checks BIOS information in registry 2 TTPs 1 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 8 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Bejeweled 2 Deluxe Install.exe
    "C:\Users\Admin\AppData\Local\Temp\Bejeweled 2 Deluxe Install.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2792
    • C:\Program Files (x86)\Bejeweled 2 Deluxe\WinBej2.exe
      "C:\Program Files (x86)\Bejeweled 2 Deluxe\WinBej2.exe"
      2⤵
      • Checks BIOS information in registry
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of WriteProcessMemory
      PID:2700
      • C:\Program Files (x86)\Bejeweled 2 Deluxe\WinBej2.RWG
        "WinBej2.RWG"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: GetForegroundWindowSpam
        PID:2592
      • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\RAW_003.wdt
        "ReflexiveArcade\RAW_003.wdt"
        3⤵
        • Executes dropped EXE
        PID:3032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\Arcade.DAT

    Filesize

    502KB

    MD5

    14253ce3135184476ed63aca49d86096

    SHA1

    bc0b510e69ef9d300fcfd0485143384b74ab6fd4

    SHA256

    60b64b6bb4cc6f71392bbcba1d3b9e48d435055960fd8a39a7de24d24fe97c2b

    SHA512

    93b2e7f345eb284e2e901ba4f81fe6ef0d80c53f965fe58ff695e7c0fd2229de06ad1fd2589b30a32cf8910dee8370767d0f266c5ae9963bd2e5c1ed0dfacbb6

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\Background.jpg

    Filesize

    97KB

    MD5

    7ee818aacb938b461feacd584905c2e2

    SHA1

    d362574701629611fe75df0ce7339775a4628b6d

    SHA256

    a8033f803368447bf259be9381e999acbf3cd056d810275decd35b0bd7e03c4b

    SHA512

    bd9ee0f9f4da8c683bb85909fd7b0e3597b2f19fbf80eb1ef7d1af6e27d4f4b7469cae5daa1c72fd7307d4c4a67872baa3f475eb41e8f13ac15ea0e68e141d75

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\RAW_002.wdt

    Filesize

    802B

    MD5

    a6a39a8c6e34c97da8d9eeced25f905d

    SHA1

    22e1d0ee439687877e63b34757901da26915a2bd

    SHA256

    8b77694be76476ef918f1724efd590ae0e0ff2434d197445da804d63b859d3fb

    SHA512

    ac69e4dbe821dae0a9daff70f34c29b83a1202a2a4f63c7e4def7c6a1f3202c875e63c3f51bb2267273352562ded477480846e93388ca39001b762168d506539

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\RAW_003.wdt

    Filesize

    44KB

    MD5

    28fa893ded284fa807abf99e1c0bcd8f

    SHA1

    bf2ad7f777ba06bde5567c368513e4847a434586

    SHA256

    09437e51bb2b38af87017810717ad9f0e100d1d0c57ac6aefba82c7a6e64c9ce

    SHA512

    8c92fbccf4f66fed32d0ebcfdaa57564ea54c9b04e9b3ac09e546147e57124e265c9fdec81bc533098e03ebb6452ef5ec624b5a88bd57b888720870983bac79d

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\RAW_004.wdt

    Filesize

    8B

    MD5

    e3af949bd0827641b684faa123ad63c0

    SHA1

    442a5a68d91b05de2e6e57a786312b109c4316cc

    SHA256

    e27d4ec241abecdf6613390e1d968f12b06928c2a890f0dc7ec0db911c3d4b2d

    SHA512

    4655513bf669892062756ec6735ddf0d59545d92c353971346e6a69c914237d11611a2bae70702a221d432568c051ad2dd8f3fdd6cc3e32c7e8a773a107956da

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\ReflexiveArcade.dll

    Filesize

    948KB

    MD5

    d67ae0f2a1a2b6d1b65518adda01c1c9

    SHA1

    6a746916f28b12fa1c37b9175d337d65e3fca500

    SHA256

    5b985eadd57cdac25e595626b0d4a72fb9351f1417ee5db520a85b7babf0f2b0

    SHA512

    60ab95bdd3271cb9dc39e68d4760424625581b799e0c403a13ee1de8f9b873c3ae4447215ecb12d3d57a8ba5e284bfa3e51ff5fcc180de8421ef55bdc8a2bd3b

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\button_hover.jpg

    Filesize

    2KB

    MD5

    4debc4abac68abdfbd30aa9f9345730c

    SHA1

    448ed3e95846d536f86fa62901ffcc96f9f0d73f

    SHA256

    63790177d631deaf1b5b808ca247f1021026a5f339ab8e691d19035e26d4d7c9

    SHA512

    bc8eafb72c671152b77e00a073616227ec01b159127ea763325f8358885e2d45caa92910c4ed1d3b580619ab541b649c116a4284d7528729d9ae05b08b8acaf5

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\button_normal.jpg

    Filesize

    1KB

    MD5

    6e8aac46bcf3456db004413fb1d098f5

    SHA1

    ddfb402055b249170ffe9ee29bcc0d4307001b85

    SHA256

    1be30f46c5a5632712888312c7add2c5628f92411c36011c7bad2d7eafe088fd

    SHA512

    f3be8ea852a87dc912fb7d61459e6535ecfc025ecd1177d8ef266915679c9151084f22ef9ec834943b52a8c504320d2be7ea6ab10a85521166e25101858f3f72

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\ReflexiveArcade\button_pressed.jpg

    Filesize

    2KB

    MD5

    229ffaca2759b5ce68cf4eb11c4caefa

    SHA1

    691c91a01ce8baa2061f68e37d7c565a02e63320

    SHA256

    96228fac36cabe5326caf56612e3a6e4539181431729d35c615c07472e600c05

    SHA512

    6cad06aadb5e6cb7d2b912f8337532a42ae6a57c70c0205b2369854ffc7d6f83b81c58f84a4a6a2116b654d38abcd719cb856e506770d40eaaffa5be8c472a1b

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\WinBej2.RWG

    Filesize

    1.6MB

    MD5

    1fb51a65cbe9c80f0229a2020ae81bfa

    SHA1

    4f35e40a2ad2649f8f15b19357f69a9c91427398

    SHA256

    81c396370de443c2126ab8b556b59632d7a2a1ec03eb639ce146189383885527

    SHA512

    cb054b19b2af1c77ed4a427bca347c48d2e03e5a5c824bedbb0602e48084d35643bd7e1550c640c863e96dbcdae4c5df9f2542b3a45ae5a9740f99fdeefddb83

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\bass.dll

    Filesize

    95KB

    MD5

    fedd2cea478da0d6d9d6799d4ec350af

    SHA1

    150a3e20173f84afad54652233f4fca9a545d9f5

    SHA256

    4e7b44ecfada6d59290b28ad5262a686e34ebf50ac859493c511bba18f38ad06

    SHA512

    123ef3d85fec64962db8bcef96116f240fad919c8dddb802d3ed78d34aea60c4ca518b620c89da1e7b4d85dcbcd6524a7bcf3924488a53376130152ab940c898

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\ContinuumBold26.txt

    Filesize

    4KB

    MD5

    2bb11357572db3b8c638b77a1c3cbcd0

    SHA1

    5a7c0e4122097a195f62bbd6741ce296017ec34f

    SHA256

    413ea3d72156818ec2533d420c89705f7849f9b3085ba2d54e72abc5167ade4e

    SHA512

    fcea9e4a962c183e502e03fbc07336912c796e5073aff94514f0030db06283a7d43d4d08d1b5c1daa916ea7e8c1f1e58baa441b0bddd3d174a266b7feac2d43b

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\ContinuumMedium12.txt

    Filesize

    4KB

    MD5

    a76eaa9b646f254b87870556aeac62e3

    SHA1

    657997f42fc379f9ee3ddd54022fe361fa0dda73

    SHA256

    d664afc16655cbd81d2a9b7d6af654dc24e246bd87e612b0f3a9bf7cb42d5b95

    SHA512

    64c39ae2b1de4becb756a6fe5b09447ce0829ca5070f0b51e8bea7791b583b70ac37adf496af0720f6a2983370a83719c25948ce4ac41cf70ba757d96d8c8480

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\ContinuumMedium9.txt

    Filesize

    4KB

    MD5

    e006147bab4127bc8bd083412af95e28

    SHA1

    db7b1e275ded4976706e53445e2e44864e9363ee

    SHA256

    a3ee70070e665ea65f936037b5bc531a9cc3af066e2ddb2847b622d3cd84e7d9

    SHA512

    bb00f0294aa26207951ede560c6a3c9d53b05ea3d6e9125bd6040d8ef99735a17af35b78db19b251b5a1b43c3cdc125ea111394df266394ddf5bb6cf63afa740

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\ContinuumMedium9glow.txt

    Filesize

    4KB

    MD5

    9c218d5344e5cf0e64fcaf6fdd3206da

    SHA1

    c2ea850cbcac0ec0a29c1711a0bf6daa053aa806

    SHA256

    72edd4a2ba3a30f7b0cdf482bc844f2c96782f91731da408ec169dd4f8ad2e63

    SHA512

    827e97c5de0243b66222fd391e518a580a53f3f58e1c99fef6b3428329aa8277d10689f9f6eb1658e0da4e5cbca4882aeb96035c4d59b21e06631b996cc00644

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\Halfmoon30.txt

    Filesize

    8KB

    MD5

    6ae7dcd38268f9939406521ccf579300

    SHA1

    e0aa2dd7c3236e2eaa0695c4d5c2656a1e9dd3e0

    SHA256

    e695b1ae78829caad87b75830a49bd0ca7d380eeb8c4f98597c531840900ff2f

    SHA512

    2841d4bafa5d85d574a0039c96b36fca083829fca9cbdd40fa7fa637883f3b97d1a4f8814d1eced6b9835a889702e332c79f121c0e914def409c4b636320fb4b

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\_ContinuumBold26.png

    Filesize

    18KB

    MD5

    04396b8f2c14c6e4755e8a64685a517e

    SHA1

    d7883773bb550a395c5d74d2640272bc4de214d1

    SHA256

    182baa08a02e81805e9ba574f7d2504933c2db105f98491b18bcf792ea19035c

    SHA512

    c543e88bcbe84169773802fe2e7f7c348abfd32f710461ca4a061ede04391df02085c39077ce1ccf018f015b09b053beaf043d0ee9ff93f590fd28bf871eafb4

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\_ContinuumMedium12.gif

    Filesize

    4KB

    MD5

    5acb8d0c891dad65a12b70d24c5ce900

    SHA1

    be2b5162a8dedcc3ee4fad69ac09997eaef1c0cb

    SHA256

    c27685eb1c89a1cdae0b8ffdd29f8bc548a6af27f9a5a29e6d7b011b6ad791ab

    SHA512

    20d56c6a01eed26073018618bbca3a7538c5a82cc9792c8b950fb47d2dbfa541d47adf86e23b01bdbe122499eebcb81b82c78e9ec3d1d49eea6ddaa6e7b7e4f6

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\_ContinuumMedium9.gif

    Filesize

    3KB

    MD5

    6c9e75b60782371776f76e74c21393df

    SHA1

    d723cf6de45208bcc2bf9aa00b29eaebf67f9770

    SHA256

    d914a093f3a61707e17dc5ada63b886c8ab3d9b9e26c286d2023a9b1fd4477ae

    SHA512

    06f9865cfd761e7b1af894505744267db798cd20a9e354bb09c3d5c4c53ed4d118cc9a59a1f04721144807cf060c5f970c5590a43995474287551146d69d49a1

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\_ContinuumMedium9glow.gif

    Filesize

    8KB

    MD5

    5895d4193a7abd71abb9eaae9fa44228

    SHA1

    91bc5240e6ad4c8fad404bfc74b0e8fb6e589639

    SHA256

    89ae1823f87d4be3d7c1d9bb80f5f9f2c745e7faafffbf35e3f765524dfa19c6

    SHA512

    d2c6344ea4e1dd7476a097ab023ca23048db2210801e1786e2e7eb2e6c5502ce7e7ebbdc8cff40d0a42aed2713d9d8157fa061b10832cc53d31204586d9a1898

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\data\_Halfmoon30.png

    Filesize

    31KB

    MD5

    1462bebde9185a83df59fa00292b9d8e

    SHA1

    3585f3e4dda51167943a468715e3f4a2f7662f4a

    SHA256

    95a83119a0e2ced4650717b31f0f029759ad854dc765389e402ca007a8fdc2af

    SHA512

    91a720edc6dbbb04361f2235d40a47d509e6617008da947683d7fad7e05464d1abdc5d39884ff4f79bab93ec6ab46515e974e9a1e1005a383b6d4bbf92a9b923

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\backdrops\backdrops.lst

    Filesize

    204B

    MD5

    393add5cfc253cd3874a72c5ca3be7ea

    SHA1

    839525137105965c0f80c5efe8d35782ac28b9d2

    SHA256

    2b1e12b873bc8852f936a2c856798dfb5f50dd4003cde2b61ca44928c3772d38

    SHA512

    009ade6c8741e953da460efe5fa971475f912919ec23e08589ed07509a96e7c62210a807f5b21ca08f68519afe4fe06bfccf664df6840e3cf85b315b3764731f

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_cursor1.gif

    Filesize

    1KB

    MD5

    dcbfff8c73efcbe7bdeba0107efac086

    SHA1

    1b8efac52175cbca7a2ca151abb00274f85da3a8

    SHA256

    5e2ce069e2527eb4b1287304d93e3d40ae99aabb83fcf3ebc48125f7b1f50d18

    SHA512

    ff5e94e27a1dac0fbec5ff9dbcfdb54593cd79ae46632589adc98a386c94a69be02b039510817d57b3b8cee67f9f615b99a6d466b7afec925ad856f76a0be001

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_cursor1_.gif

    Filesize

    1KB

    MD5

    b62d77c2325efa38d4d33490f788f712

    SHA1

    800b4d9f2c73ce9de56d623478e1b3bb834e908b

    SHA256

    a8c62c4da5b18ee9c8c8c97900ce5d3fca20b51ee1beac4d423473f8e04ae2c6

    SHA512

    13c0524d6b16b9073036eff4d2c040126a6e2ac2dbda198176cfe3548aab812c407b2f012458da88c4c3c4acfc8413bc19354774f3c86320e8b3628c84fb7505

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_overhand.gif

    Filesize

    1KB

    MD5

    fe2d9da0c65ec81a4df4c51acb6915df

    SHA1

    0b3253d0ddd9cd46b4519386224f2f67037f5eef

    SHA256

    568505aa0492538f53c69f0e56e0b7b4b562f5868bf6f34be734a937d3949563

    SHA512

    b02737c04051c14fab71093507ac16a7bf1066a5c62515fd6dd0f43d9511f5c90bb078ffcb343ebbca2f8d97a4b9665acc4d4b53f370b04e2c09294145ea8dfd

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_overhand_.gif

    Filesize

    485B

    MD5

    578fe7b225d27ff23cbe3aea0d7c2ba1

    SHA1

    74b30ee2bc12031a3b59e65275458459d73c2014

    SHA256

    bee35d0bbb80d178610232fefbc4ff554c6b7e689bba21cf69b3cfd088b90c88

    SHA512

    08858be4f215d9e3658c84ae9bb6be57b051008d321bdf0b0c3ec513df7afb472c1485f0fa5819d9462dad618c13373010acf8595080058bd33e3acd68059e1b

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_pointer2.gif

    Filesize

    501B

    MD5

    c66a77235b3d2852f42e3ed9ef02c3ac

    SHA1

    479276d13af8498fdf527e154096201a34f29fa5

    SHA256

    b695c19573ace2ca1873e2ee36d20fca0f6a2a3e214deb1f27c7d1aa2351920d

    SHA512

    00758962fc7dbb742a45d734f0ec58277ca7a41dfc66f28c653a7a0a5041cee94ae552d3274021aeab733fd5da4457705066166f015e757b032ca4181b151f2f

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_pointer2_.gif

    Filesize

    533B

    MD5

    e3c2fdd56c4f5b3bbd3a6abab28dcb70

    SHA1

    1217fa2d20c03611758e17e59db1683f49b2f0a6

    SHA256

    e35815e336ee0a92aae0cc4fb42bec3c8de5a25c14dc9e93fccae00109e9829e

    SHA512

    56ccbca6c7c7093f03c551334520d58c711da65d08a3105a4ead5e988ab0659a1de93635b4bbf55ca38326afc3af0b842ade50ba749bd5d64ab68824ccd936f4

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_reloader.gif

    Filesize

    108KB

    MD5

    ca67920a9fbf0651ba453b7c1112db48

    SHA1

    e0fb1b9c9f1489e7c866a2d4269aedd18c4ebfed

    SHA256

    7e5b6f79b3d8834cd5dcf1e12d0b2edca2ecf71a7ae9d330df270ca9417813de

    SHA512

    2176651efbe90704dd2ad133072553fdb3d94542bb962e0634f03f294f731ea303d99280055ed789c3d14f418c56e97bd47219722f093db29b0536928e1b5cdc

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_reloader_overlay.jpg

    Filesize

    11KB

    MD5

    1e8c6df5dce084502f38a1df527af5f8

    SHA1

    9e67a6663b9c10f5c493d0e7cdea4465be01e626

    SHA256

    517bf9c8bf6ea9bf3c2f5b1fccf987ddfa618aa21834fd26e822417cb06a2774

    SHA512

    5f1d38296a24ae84111d750aa47bbf3072c81e4d499cab34c6950f4b1dc1a5f51ef2cb3fa6aceccce4e347b0c81d66590dc2d483b14bba61de380e1b161ce5cf

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_reloader_overlay_.gif

    Filesize

    3KB

    MD5

    d5f45a413ab4055ba0a352e6845eb670

    SHA1

    4ab3ad337bca29d585f820a31c231fe54e4b60e1

    SHA256

    e34c23afb32111fe1f9a3abf9833892402cb1ae7547f2fd783bc2f325788a9ac

    SHA512

    e3a716d021bb6a52dfd5e81f0adca859fca7794fb7a7e55b65d9ab51c44c437ae8bf4370e6ebef3292ce8663f2502129e399733691109ceb5df291a6679e53c3

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_reloader_overlaylit.jpg

    Filesize

    3KB

    MD5

    3d5ba78e1914634b39468185c0ef4876

    SHA1

    5d1bcecc24141be6b4d41eccc674dd0df5d846c5

    SHA256

    652f61278fac109020b86abc82cf1e9df27e3edd81ef0b616b9f9f30a5501e6a

    SHA512

    ce9a614799367355ffe5421650c66cc3039bdfdd49d6c109e170ecda6e719831792f575017c83361a8af2234a6db8d8f3333d719f3326a997b2f6407f439143b

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_reloader_overlaylit_.gif

    Filesize

    1KB

    MD5

    69876889119a7aebe43cd30c7d7a7cf8

    SHA1

    4c7e548d164309461122381cbb65aba219a52cdd

    SHA256

    3d34d4f9f2d87ebeb5fe2bf69d5098f4a524c211eb2b69150b7ec59ae0d3a375

    SHA512

    ee4f56cb2daeeb5f24f42f32e2057c4699aadf7d8eecd9f099379845c2863dcea5a49ea419b98a2e9741a1064cc8eadaab6e7c7ef96c9d2ed59ba7b3bc1f3fc6

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\nr_typer.gif

    Filesize

    956B

    MD5

    0f7612a5794b351d979326126ffa290d

    SHA1

    e19586ed894f7d2e7ca6f672dc33a7371e3b7496

    SHA256

    37a4e5bc39d24d81e23c245dbe22097cedad5ea0394115e0bbe07715b3755e1c

    SHA512

    0014adb355e69be9f16f4482a4e21f2fadd0232a60480c9e73ceb8592de08c8f8f1f8098e3a96d90f3eba445936807ce05f1128821ef0305cd3d0f01a006bcf8

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\images\sm_gameselector_bg.gif

    Filesize

    38KB

    MD5

    8d8a290b7fc85b28f3170d0cb9deff5f

    SHA1

    1719c738bf05f04a3aba0630cbed691990276a2a

    SHA256

    f4af83467acf1eb31d3aa9352daab605223268f32ab591b2ac8c1431091e76c4

    SHA512

    868977a029707858f76f567b9f21c4d95031168ad4416f28f91ebd5a3b94867b5bd51d3a9b275f8af6f4cdca0113c01aa5e4e7c327b7e05e3d1af7bfba28ea99

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\properties\backdrops.xml

    Filesize

    1KB

    MD5

    ea6bacd12d631b22d95c3c8339755c12

    SHA1

    bc550893038397e8e6de9675e226c10758863db1

    SHA256

    60edf35df24e7fdace24f059a35b7147998dfb07f9cbc13d9f70fb19270853af

    SHA512

    fe32e027ff1efdf982c06cf3a0e1200dcac883a6a9b201870550717d45f79222b0160ea74563903f8730df74e2fc9b99cfcab708d5226dc6ba08eb24716c861e

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\properties\config.xml

    Filesize

    3KB

    MD5

    dc300c665ae22b50d84bcb331ff7652f

    SHA1

    28a5a2ee7335b78e28b539c6c1352c4f0bb8d463

    SHA256

    14bd83ae4d19b969e361ade6de9fee810fef12ba15b3cc01c1c4c25833835319

    SHA512

    6b33eb0a2830358ef15d19ea4066f5a6061493882b3802086286d3b7a2b1c2a6a43bd89f1b56456028eb37e373e7b924309c2140e35301882578f12a1d795f67

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\properties\default.xml

    Filesize

    10KB

    MD5

    37dd1d2242dfd0d0b838083cd3215443

    SHA1

    89b6f406cc515e30b9be19c96b03a8f2664224ea

    SHA256

    e58c302da4560643f1eb5873e5bad35d04fe09319e539d4ffdaa1bba5284d7e4

    SHA512

    54b4a2ba37378f5fc96217ff942d6969e57c72da86ec15f6c6a992c460583d3a8ebc0ea72592a0f2fba98a1bcd93a68295db6a7ac615e1e1f2080bcbb8b98eee

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\properties\music.xml

    Filesize

    499B

    MD5

    753f61fbf65b17c26d9b6fdf498d43c0

    SHA1

    7e8aaf69fe4d355156fe2632ecc15bff64ffc9c6

    SHA256

    01e7cd3b92193cf62da3dda1454f58440a594b692d07b1cef966722f42ea8287

    SHA512

    29b0e8d0b22d4f48e357cc6af77e8a8d7c630ab1d412188b48d80a375f42cdf43c8686cdd7e9000abca026cd8940280b006f3b53b6d5a23c43968d30a2395f7d

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\properties\partner.xml

    Filesize

    195B

    MD5

    0247bf2c263f60d94dc4dd3f822b45f7

    SHA1

    b5686d9f2f53e83067fbb9512314297348dfc07d

    SHA256

    e4f5c07be3a72e8efe64dcfb866f1d66edd64c465f0c71c423bcc9b760e3cac7

    SHA512

    9f313ad4c83875d775357f966f38cefe13d338e640881bbd5e2df59362dc3caf52f2f32c2066cbed0f160ea6e21092ca5f39b6fa1fecf5f2d1170d604ffc8d60

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\properties\partner.xml.sig

    Filesize

    24B

    MD5

    e07b571831a774618351ce895c1c01da

    SHA1

    1374e2eb5355f4ff15684ad4cf7a0cd8215c7ff5

    SHA256

    ac8b3ade237d116d9ecdd9d00b2e69ef2edd164771bfad977a63cc83be8d9ca2

    SHA512

    4a213c91b4d85d75b803a1bac369f8057ca186e28b74132fde9e27f00eca9c649bbed67adeebeaecb247b1c1c8fcf5d825089abaed9118df53d38af4358295c9

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\properties\resources.xml

    Filesize

    13KB

    MD5

    dd1ed9a184ad52326957e4c18ad51020

    SHA1

    02ac91bec2c27e862b3e318b1ebd45f6f1f88c77

    SHA256

    4acec50d98a86a62f5f2747d101d7b786d1c21aa116eeea636ae7239bbf4fcb1

    SHA512

    20e9086fb6a81a8949dd24527535a7c558b3c9edb57a216b85c0d063670edca2758856da738d0354e21c29969439316ae7daab95a981dd78768da9097ebf8ebe

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\puzzles\Galaxy One\galaxy.xml

    Filesize

    13KB

    MD5

    a10eb6c86f49325b530bb6c5a9464484

    SHA1

    8138a56ee8b600145cd6842373cf650a1814494e

    SHA256

    a0814aaa9e5e8793343c4cd34fda2606417ef53f40d9dd4325655cad68a39965

    SHA512

    6a7c63c5a3a26f45f7e90d0daf88217253edcf4305dda755aeaf8e5597ef0b4d73b0b4d7021013e215fb77b32680543d5b6c9db38b4216a9521368b89f5be07c

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\sm_images\Click-text.tga

    Filesize

    71KB

    MD5

    17b13fabbc7199b6d7ea7b012108fa59

    SHA1

    bd9a3dc8c2a4cd8e838df64834863cda8ba12c8b

    SHA256

    14c552a99a268a2f2988b03736b8157f0965c90f38fe789b2c73016a71f2c0ca

    SHA512

    c27d4a4c6200be23b68a26a49dea013d3571472b1437923abc8e1269e7c66d89bd62b16c31f18e2789afaa87ee3b1b32a5ccb731f7a9eb013cf87df2f1802b14

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\sm_images\Loader.tga

    Filesize

    72KB

    MD5

    f958d4eb51121690c3e25914c6346076

    SHA1

    b1a18cb9ddbb407c34f58b69eb16030631588949

    SHA256

    6e6129a6247d1f6fb54cd887220c80aff002ad9e3eac59d7d5737e79285d1341

    SHA512

    652595dbe522fe5929e75b0ddf1baf4ee5e649edb869257091f1952e9742237ea5bacfd95262bd00d183c7c80ac79e7bb29eceb2dbfb663ab0b83b85fc790cdc

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\sm_images\blue-Loader.tga

    Filesize

    12KB

    MD5

    1332ab1b6e97f959ea7fa671a339b161

    SHA1

    03381e4a3afa08d217cff04df98fffdf8e7240e8

    SHA256

    3c551260d45ef298150498cc7059185092462bec93341fc7946ec964baf87a88

    SHA512

    ef25ab87dc360bcaee05dd3127bf3225058a0cac1d0643925915809c0f3c6b3526eb44aab350e46768e904a5321c17c040277943dcdcf5363242465f5ff8bf70

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\sm_images\flash-Loader.tga

    Filesize

    257KB

    MD5

    bf9882f7a7a1ab12c06cfc174f97dd0a

    SHA1

    a7c541703f49f518fd41e2efd61e680de8848608

    SHA256

    fc975aa3b3750e07329985567bfa6f166b30a80058b32565159bcb58533c494f

    SHA512

    52943685dbe5c4d3d5db180e01751d071c70acdc01240befc53cd7716f0259f3a0502595d50ac29fad3e792d167f39d4ecf9ffdff2e8e0fd2b038aad766f2eba

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\sm_images\purple-Loader.tga

    Filesize

    59KB

    MD5

    ed34e5fa38d7c6b0e0fa98bc250fed6a

    SHA1

    e746e06e5d6e330f72a7d4e1f6536ef2ee25addc

    SHA256

    695215cd2dad3f7e8e6fbb7e05ed8364b7cc514b17a7d227835dc88275d291de

    SHA512

    e8f694337f0d6802703b20ddd79b975399ea175d89596f7921e0d809c46442b4e3c60eee1c902df65e635086e19216f960cdaeb450370b55b08279fb12695bdf

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\sm_images\title_deluxe.tga

    Filesize

    37KB

    MD5

    00b0d209b606a41b8eb2cf2d82f3255d

    SHA1

    e0169eca69fa275238b8b5992547a3865b30a20a

    SHA256

    149ef771e34b39e607025600215096e3836c8e85abf4d96c153d8b6d605bbf28

    SHA512

    13493bd916b0c471cf33d70619b1a031603ca9ee1ac04ae3381a18fe0d5af5b80f7a70cf402f0de9c6b51e92ed1064c2daaf94c53424b34d9970fbb4d38cff22

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\sm_images\title_logo.tga

    Filesize

    277KB

    MD5

    0476c22d8e5bedff2515f79e0a96b9ef

    SHA1

    74c7fed4f38ed4cd8146d62f8b1fba77e185b0ed

    SHA256

    ec64dce996a821a46e80b48493d0d16ced140505bd10e9ed41ab86e1f20a4404

    SHA512

    cc4bb47c68a6464c7ddcd42c04a8f3cdb58164eec08e92906b93d8d6defba42b041a11b855fd5ffe230ccf2868d937d02f525bee2f95465b7e24ec05c2853f4e

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\sm_images\title_logo2.tga

    Filesize

    28KB

    MD5

    9336e19fc133bd5f81b24922590c6dd4

    SHA1

    704573d047fb93efacd5e054b71f7efa9fc7a0a1

    SHA256

    5b0ae0bd6eb854848aee15fc37b60599578561bed6ae76aa4f11aef30140acf9

    SHA512

    6aae188dc08c10c8f326c5af215625acb215e4052489df52ba9b6aa8d1d031624549d22f684be4fdfb8757836a45f217aa679aa034d7b7d9c57109338cfbe08d

  • C:\Program Files (x86)\Bejeweled 2 Deluxe\sm_images\title_popcap.tga

    Filesize

    37KB

    MD5

    ebe872e4740cc78517dfc692b99fbde5

    SHA1

    30c6fe740a9b7dcc05ca508da871d68cc03dffe9

    SHA256

    3796b9bf7d7c9dd879e74ae2b20897883262ce3fc3f2c02bb269cd3ab0b08652

    SHA512

    59c1505baa9f44e6713ae9b3ac25f916cf623b725bddd9259434891c0688caea5a71e8cf39a2ce238e69937020e5491c1561af3b4390381dcca5fb28b00adc5b

  • \Program Files (x86)\Bejeweled 2 Deluxe\WinBej2.exe

    Filesize

    272KB

    MD5

    f44965906d6c0fdfccdcb747a67148df

    SHA1

    26a1bc9ea4df7e2a20ee4f031f843268bf31ab3d

    SHA256

    e1e95412ab0c6fcf0c9619cda31006784c0cba6e363fd2820f3c04f4e325d463

    SHA512

    e3da62b433b9a306ba01013156a0acc58223399b1069c01ab52b373701c2dd015b955e0dd3ff47fb6cb48157c319b4384f65ca1e8aa1f6b919215cabc612b8fb

  • memory/2592-1982-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1998-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1971-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1972-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1973-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1974-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1985-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1976-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1977-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1978-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1979-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1980-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1981-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1929-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-2000-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1970-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1975-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1986-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1987-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1988-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1989-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1990-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1991-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1992-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1993-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1994-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1995-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1996-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1997-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1984-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1999-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB

  • memory/2592-1983-0x0000000010000000-0x000000001005A000-memory.dmp

    Filesize

    360KB