Analysis

  • user interaction
    yes
  • max time kernel
    110s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/04/2026, 01:41

General

  • Target
    Packaged Games/fungame/fungame.exe
  • Size 6.2MB
  • Sample260427-b36dvsa18x
  • SHA256 69796bfdb431a77b39ba8a992050ab1092ac777d4267623f4ec896c7d8490524
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 27 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Packaged Games\fungame\fungame.exe
    "C:\Users\Admin\AppData\Local\Temp\Packaged Games\fungame\fungame.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3380
    • C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\autorun.exe
      "C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\autorun.exe" "SFXSOURCE:C:\Users\Admin\AppData\Local\Temp\Packaged Games\fungame\fungame.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3120
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\hide.bat
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4404
      • C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\fungam.exe
        "C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\fungam.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:1364
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 1364 -s 628
          4⤵
          • Program crash
          PID:4104
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x414 0x2f4
    1⤵
      PID:3324
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1364 -ip 1364
      1⤵
        PID:4036
      • C:\Windows\System32\rundll32.exe
        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
        1⤵
          PID:3520

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              dbprocore.dll

              • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprocore.dll
              • Size 239KB
              • SHA256 4be96d4a2149b0204e2a28a2066afd2958d572865ea0cb8d9d46e4a86e26a477
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dbprofiledebug.dll

              • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprofiledebug.dll
              • Size 121KB
              • SHA256 7c22135471b352161e6e1838448133182242e13dac13403f23e0cbe0ae4fbf2b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dbprosetupdebug.dll

              • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprosetupdebug.dll
              • Size 118KB
              • SHA256 e1cd1f61033fdfb50ab1774527cf0293ae10a1b4f79bb4930c2587b1d13b8dd1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dbprosystemdebug.dll

              • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprosystemdebug.dll
              • Size 160KB
              • SHA256 7b607d36d8b342669fa855bdc72ddb212a9e5bc8121b070028b28951ccbc360b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dbprotextdebug.dll

              • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprotextdebug.dll
              • Size 95KB
              • SHA256 dbdfe87fba3ec7e326e71368289b824b21220f4777df7b4f9dfe560521dc6cfe
              • MD5 SHA1 SHA512 SSDEEP TLSH

              matrix1util_05.dll

              • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\matrix1util_05.dll
              • Size 82KB
              • SHA256 43450a7140987d6f9e70bb77b205f792ecfd87ad4316ec9202bffc09b92e9d74
              • MD5 SHA1 SHA512 SSDEEP TLSH

              FadeOutApp.dll

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Docs\FadeOutApp.dll
              • Size 4KB
              • SHA256 619103db9706368df9c5d8965ec02bbf805ae71ae65665a43c24c2acfe5064e1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Mask2.bmp

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Images\Mask2.bmp
              • Size 263KB
              • SHA256 494acf679294c9814dadfee42deb68fb35c6877c6c0963f454e58ded51b8812e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Mask3.bmp

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Images\Mask3.bmp
              • Size 263KB
              • SHA256 765f4484b6fd13f0c2ea634c4e9220eb8b21a6e16a8fcf462c18b2361893fd67
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bg.jpg

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Images\bg.jpg
              • Size 50KB
              • SHA256 07ae0a065597f6484edf2a8e6f21d2b765a13d5c14c96a9cf7ead198144af86d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Clipboard.lmd

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Plugins\Clipboard\Clipboard.lmd
              • Size 1.5MB
              • SHA256 ed696486a267df27c3d16e1c360ab0221f6dda9c76e70fce0ca4b74bdd22da6b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              IRDissolveTransition.tns

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Plugins\IRDissolveTransition.tns
              • Size 136KB
              • SHA256 6315b5d1869c3b4cbcbead77ad63da3a60d86ede287eccef338f74178ec181f2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              IRSlideTransition.tns

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Plugins\IRSlideTransition.tns
              • Size 132KB
              • SHA256 a251f8506a4a57b1d3b8c152fb64b5a7734de6d604426a248f3b5ea285f16a71
              • MD5 SHA1 SHA512 SSDEEP TLSH

              WinApi.lmd

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Plugins\WinApi\WinApi.lmd
              • Size 312KB
              • SHA256 f1166c24279cd83a4bdf7bfe4906113b31db005608dcf688f62b53467807e65d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              autorun.cdd

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\autorun.cdd
              • Size 1.0MB
              • SHA256 b399465e480ec4cdee48b93860a75d533f3c25a6b558e06810f66598ce7a5f47
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ambience-voice.ogg

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience-voice.ogg
              • Size 1.3MB
              • SHA256 5d3c9c609d70b43f76bf046acce53dd9150217ce5726a0c1a2e64f3a3aaedf99
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ambience10.ogg

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience10.ogg
              • Size 879KB
              • SHA256 864c69de8c263b52a5da094a6e26c9fc1f02a2503ca52a771d8adaeb3b0ff386
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ambience2.ogg

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience2.ogg
              • Size 455KB
              • SHA256 778568f6e6a7682592ffa4aac2ee2b5cf1a4235aa9389377de4b56aea8051653
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ambience3.ogg

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience3.ogg
              • Size 479KB
              • SHA256 ea9a126607a7ea73c4494f131b030d86d0546fc6ef8a632bc86b4df9a47b96c1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ambience8.ogg

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience8.ogg
              • Size 2.0MB
              • SHA256 546bc9bacbc35bb182ff17b5894095cb718d98a462947b604bb939851fd60ce0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              barclose.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\DungeonItems\barclose.wav
              • Size 110KB
              • SHA256 7e98cd5e2d330454cbb58cf2ea78ce8c5a197b2ddc7559abb7f153119b64c1b4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              baropen.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\DungeonItems\baropen.wav
              • Size 110KB
              • SHA256 ac1ff25d4c5deb38f0d74228c2e364ff51aa4c53ed2e2949cb4e5a1c70efd55b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              firehum.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\atmos\firehum.wav
              • Size 173KB
              • SHA256 83bc689321f42e63514c545af38f949917badaef6b1278834cf30539f2080b06
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sparks.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\benge sprites\sparks.wav
              • Size 32KB
              • SHA256 e7187a1ac534afa68bbfc09a978bd8777bf80732599dd1d00b1fc3e7feaa2c73
              • MD5 SHA1 SHA512 SSDEEP TLSH

              healthup.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\items\healthup.wav
              • Size 95KB
              • SHA256 ed6945937517efef32e287e7638dfcb036fee615f118f1ea06b71510502ea642
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pickup.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\items\pickup.wav
              • Size 78KB
              • SHA256 8d9425bde0f1b06a6c1835a8cf6550f90a7552cf09957926d7dfbace4d95191b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pickupweapon.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\items\pickupweapon.wav
              • Size 92KB
              • SHA256 982b4532b107c607b90c305d03bb9506127afc475e71e0d8703f694835cae983
              • MD5 SHA1 SHA512 SSDEEP TLSH

              RollUpDoorOpen.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\m3\RollUpDoorOpen.wav
              • Size 293KB
              • SHA256 a03f951bbf8637b059c80341cbdf76c93c0f5f0e41b85c740cd320a2b05f4324
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0groundA1.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundA1.wav
              • Size 37KB
              • SHA256 b142bd8df8441eb693aedd974a66b967c7c2c078bde068aac39e6c22b7ede5e0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0groundA2.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundA2.wav
              • Size 41KB
              • SHA256 43db378af771f9c6ab1c70d0abc5000df80476fa8731be940604f9054fc7631a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0groundA3.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundA3.wav
              • Size 39KB
              • SHA256 8f702c77627c2f81562511db2b472488fa813a28c401919fea519188f890cc9d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0groundA4.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundA4.wav
              • Size 36KB
              • SHA256 3eb7624e111bd624f427d70ac5a7aedd6d84de94884b2812cf1e5e989ffaec6b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0groundD.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundD.wav
              • Size 41KB
              • SHA256 d215cb45b97364c911adf66f44adce9508fc6ef246c3eaa7d72c346037c61fb2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0groundI.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundI.wav
              • Size 52KB
              • SHA256 af263e560479704a82ee47a36a93a09cae6b3a6adf3fcc62e376fea93ae59e28
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0groundS.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundS.wav
              • Size 79KB
              • SHA256 81d8788b0d70825d5dc71707c9ebaf5a3e13a9e80ba0ef207f92e2cfd9367c2f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              14metalA1.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\14metalA1.wav
              • Size 56KB
              • SHA256 d2bc2f1443eb2f7f9c42b4e4aaaa18fb2630f17f1e05a82f59ebd3ce65316be5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              17WadingI.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\17WadingI.wav
              • Size 298KB
              • SHA256 a6f7730bf8f909a302f7904b7b79245d6d6a0679a67d4ac016efea6fd44eaf65
              • MD5 SHA1 SHA512 SSDEEP TLSH

              6clothA3.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\6clothA3.wav
              • Size 11KB
              • SHA256 98b5f08657f9d16699601cbcdd905409f51698d6f91881ce9d0d994c5cb548bf
              • MD5 SHA1 SHA512 SSDEEP TLSH

              talkping.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\misc\talkping.wav
              • Size 87KB
              • SHA256 e8f8d58c2d890cce3aa6d0b5961e710c64a3e801f5bcd5ec3337de75ed019ca3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              title.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\music\generic\title.wav
              • Size 669KB
              • SHA256 038024022ceedb7a09f153cc39a7766f19ccf83a4149ee90d484675100c611e5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MetalDoorRattle.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\thestoryteller01\MetalDoorRattle.wav
              • Size 184KB
              • SHA256 7ad7000efc497fdcad5ee36c65aad7e0e0d98dcba52988912cf51fd2f51cc5ad
              • MD5 SHA1 SHA512 SSDEEP TLSH

              creakydooropen.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\thestoryteller01\creakydooropen.wav
              • Size 168KB
              • SHA256 0784b2809bd5b0cbe5894fd495d8d96fdd330c131a7aac61edb73b3840492cdc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              wooddoorrattle.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\thestoryteller01\wooddoorrattle.wav
              • Size 152KB
              • SHA256 1a1ee4789815f333589f8db73e237e5c363e6e347620d98054e5d467cf4451cc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hurt2.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\voices\male\hurt2.wav
              • Size 72KB
              • SHA256 2688d0f1eb64d444a8973f524d225dc4198cc9e8da43d5f33f393f3e2dcb8231
              • MD5 SHA1 SHA512 SSDEEP TLSH

              spawn.wav

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\voices\player\spawn.wav
              • Size 125KB
              • SHA256 f5b4f0daadfb9872cc21577feb83ea4a70997ee6bb0e04fb129d5161314b984d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              phong_bump_specular.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\The Scary Thinker\phong_bump_specular.fx
              • Size 6KB
              • SHA256 4caa129cb0aa6b5ade7369466d9407e21ccec0c28ce90e945941bc58025c5e43
              • MD5 SHA1 SHA512 SSDEEP TLSH

              spec64_normal.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\metro theater\entities\dynamic\spec64_normal.fx
              • Size 5KB
              • SHA256 92b21be10058bed275186ec0fb5d46f0839142c6b087bc731fdee1aa77653261
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lightmap_herospec64.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\metro theater\entities\static\lightmap_herospec64.fx
              • Size 5KB
              • SHA256 5d613cd5877c91ac4e192eb5f0e1a0d64d88e06e6c70a724ea59a58858d8a337
              • MD5 SHA1 SHA512 SSDEEP TLSH

              character_flat_persp_none.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\characters\character_flat_persp_none.fx
              • Size 10KB
              • SHA256 a382557b47161829df8a0c913307837a70f33ec733a1327a93c8429d132835aa
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dynamic_lighting.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\entities\dynamic\shared\dynamic_lighting.fx
              • Size 7KB
              • SHA256 5811374b1075a2d18723cee8cb5c65246eb49e703cba234938d1371c316cac71
              • MD5 SHA1 SHA512 SSDEEP TLSH

              segment_spec_norm_alpha.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\segments\segment_spec_norm_alpha.fx
              • Size 8KB
              • SHA256 e2086c605bbd46fe36bc3fe70c91875bb28045f5ade52c7c3e757a47017005ef
              • MD5 SHA1 SHA512 SSDEEP TLSH

              segment_spec_norm_ambient.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\segments\segment_spec_norm_ambient.fx
              • Size 8KB
              • SHA256 410a6590bb7373bc047be526ba2bf5b90d7a98484778ca25e936b871eccad59e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              segment_spec_norm_parallax_ill.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\segments\segment_spec_norm_parallax_ill.fx
              • Size 11KB
              • SHA256 21708c996b2a65d8dbc045db23f1fae602f85b6a73668277fdbfe38782a6766f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              monochrome.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\postprocess\monochrome.fx
              • Size 15KB
              • SHA256 65723148df30396d55c8f8a3f4d00103cf8bd37f23c93c488ef96c72c8798fc6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              post-bloom.fx

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\ps_2_0\post-bloom.fx
              • Size 6KB
              • SHA256 d5dcd6d56eb33ef39c573298656692282422b0cfbfbbbbc27855e6cd82b4bf87
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Painting1_3_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\MysticLibrary\Painting1_3_d2.dds
              • Size 128KB
              • SHA256 3b7bfd1174d4d484780dcfee8b0884301a2e682416016b8ddda751a950f7dc5f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Painting2_5_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\MysticLibrary\Painting2_5_d2.dds
              • Size 128KB
              • SHA256 74eaceea4c2065a2bc67c4599404fff17af867e72cede64edb0efc44518c6eb3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pic1.x

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\ar-deco\outside\pic1.x
              • Size 4KB
              • SHA256 0d335b05973f9c61ce67cf42ad16ab64944ec8d338ba7298e5c568af42dffb4c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              particles_e.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\generic\decals\energy\particles_e.dds
              • Size 140B
              • SHA256 dc8b22c6356ce5fbe0495bdbec88388d933811b5c3e1f230c60cf6ac8b1b62a1
              • MD5 SHA1 SHA512 TLSH

              cube.X

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\nomadmod\huds\cube.X
              • Size 33KB
              • SHA256 634d573b63fbedafc00773866668f8979e68a197ad9acad3d68aecea024efca0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cube.dbo

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\nomadmod\triggers\cube.dbo
              • Size 11KB
              • SHA256 89a1c234ad62f1a126747ffbf4099c8ea3044bbca09c20a48d5ee8abd134c560
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Flashlight.bin

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\triggers\Flashlight.bin
              • Size 716B
              • SHA256 a6208145c007b5c1730a2ba6c1f69976564c376721aca4f896e24f771f9e0911
              • MD5 SHA1 SHA512 TLSH

              flashlight_D.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\triggers\flashlight_D.dds
              • Size 64KB
              • SHA256 af1dd308f5691bf65019f275d68d1ff7dad61130c5f510f576531b0a005a962c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              decal.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\glowred\decal.dds
              • Size 1.0MB
              • SHA256 32053983afacb839245b3ccbe458c2370b81d91da144a12a563d58c96794a149
              • MD5 SHA1 SHA512 SSDEEP TLSH

              decalspec.txt

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\glowred\decalspec.txt
              • Size 104B
              • SHA256 550cfa6ce6a1641b14aec6cfecbd39adfdd02fea88f972ef71d7a6db90dac6bc
              • MD5 SHA1 SHA512 TLSH

              decal.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\plasmabeam16\decal.dds
              • Size 1.0MB
              • SHA256 99aa0e214ff509200b4ae4a09da737b8a07dcf5bc573cde9eee41ba02fc8807e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              decalspec.txt

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\sparks\decalspec.txt
              • Size 104B
              • SHA256 165d89931344d8cd82017e02e3e19ab805d346f3004a3f3eaa708786825d2481
              • MD5 SHA1 SHA512 TLSH

              decal.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\splinters\decal.dds
              • Size 1.0MB
              • SHA256 965f60e427d3e3a85e4137fb60c1499d27e355fb35a072e40e65c20bd129620e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              flakspec.txt

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\flak\ww2\millsno36\flakspec.txt
              • Size 477B
              • SHA256 e70694713a2c73f9196f95e1234105fc6723a469f08022845749b3ce14d662f8
              • MD5 SHA1 SHA512 TLSH

              crosshair.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\guns\modernday\mossberg\crosshair.dds
              • Size 4KB
              • SHA256 63168804c98431fcd5a1a516cb259cb9da3a8071d6ff6470e5c5e33bd45c1b63
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hud_icon.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\guns\scifi\assaultrifle\hud_icon.dds
              • Size 32KB
              • SHA256 f52b30654e8680b5d85eb257f0a36988adf87f26f8e9e1f8cbe0bbd29b8d2869
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ammo_n.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\guns\scifi\tavor\ammo_n.dds
              • Size 256KB
              • SHA256 c617f984357acfd452e3a752dfcdbd5c7dae36719de9ab3f7e30c30da678c0bd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              01.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\huds\artdeco\notes\01.dds
              • Size 283KB
              • SHA256 11033721a541e120e08d1efd1ba6463ab32d9b7d73d9c6b8f996f730f9ed5331
              • MD5 SHA1 SHA512 SSDEEP TLSH

              10.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\huds\artdeco\notes\10.dds
              • Size 442KB
              • SHA256 50724bc334a86451d6d8985734a40cd819e8d8169e3a432b50987b8646ee725c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pointer.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\huds\pointer.dds
              • Size 1KB
              • SHA256 a58178bd1000602d90051e037288a5e5a00001bb97737223945d059c9ff76597
              • MD5 SHA1 SHA512 TLSH

              pickedupakey.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\languagebank\english\gamecore\text\pickedupakey.dds
              • Size 64KB
              • SHA256 5353c95420a0b4a90eabd5f484bb782768faf3200d23f3c30c3ce920869bdd3b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              map1.obs

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\levelbank\testlevel\map1.obs
              • Size 79B
              • SHA256 92892b79f3bd0cb84c73b037a1187521b59551c0bd82a2ee562605dbc504fa45
              • MD5 SHA1 SHA512

              explosion.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\media\explosion.dds
              • Size 5.3MB
              • SHA256 c182b720a3c7ee66d0de14b1e95e3a8dbb1ff4b83b5a9af4a9a63e5e33adbf0d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              overlay.x

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\meshbank\common\overlay.x
              • Size 965B
              • SHA256 d5e3a2e74f7fc70ce5711615fdcddc84ebc920cfa337ef9eed2f04fa99df5d7a
              • MD5 SHA1 SHA512 TLSH

              light_b.dbo

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\meshbank\ww2\scenery\lights\light_b\light_b.dbo
              • Size 13KB
              • SHA256 36a7403f8e5a76cc65940282e2eb7cf830caded06475a0a6275728d9336e65d9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              light_b.x

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\meshbank\ww2\scenery\lights\light_b\light_b.x
              • Size 37KB
              • SHA256 031e14e56d0fa6833c224db17a75f8651e999dc6ba400c211d0ce9891830a81d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ChestEmpty.fpi

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\scriptbank\TheStoryteller01\NewScripts\ChestEmpty.fpi
              • Size 1KB
              • SHA256 777d1473a853a7f594d5c787f3ea88c8d53245e2ebfe605c178cf260faad2f34
              • MD5 SHA1 SHA512 TLSH

              WardrobeOrnateUseles.fpi

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\scriptbank\TheStoryteller01\Updated Scripts\WardrobeOrnateUseles.fpi
              • Size 1KB
              • SHA256 502d55744d7ad66c0b45bed1e92cd4b70e0b650cecd5d1faab3be14ba40f3302
              • MD5 SHA1 SHA512 TLSH

              NCDocks_001_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\segments\NightCityDocksPack\NCDocks_001_D2.dds
              • Size 2.0MB
              • SHA256 0d06aa000a73c8b75595b65a5dfb1a680cc9540a2d5c8eec5aa213ae3687d2f2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              p_p1_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\add-ons\p_p1_D2.dds
              • Size 128KB
              • SHA256 e8d00719fcc59ece17b3f80198bbcb33df721c254cdffd96971c27a228650532
              • MD5 SHA1 SHA512 SSDEEP TLSH

              p_p5_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\add-ons\p_p5_D2.dds
              • Size 128KB
              • SHA256 7c2ae1b67e8032d919aec6070f239d7c5c79b80d885d375c6bab7ffca95bf066
              • MD5 SHA1 SHA512 SSDEEP TLSH

              wall6_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\add-ons\wall6_D2.dds
              • Size 128KB
              • SHA256 d637e4bb83b10a7678ed40d1bbb5bac50fc6226c977ff0b2bc0794ecebc5137d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cabinet2_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\cabinet2_D2.dds
              • Size 512KB
              • SHA256 65157edd4fb082f54de12b97408c3ba9d2878af872f4eb19c039eae8d207806c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              candle_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\candle_D2.dds
              • Size 512KB
              • SHA256 6d5ef46a832f8c8e39f43832cd152066f235a6b17a9c766c13158cb91bddbcb6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              desk_lamp_I.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\desk_lamp_I.dds
              • Size 2KB
              • SHA256 df3a8b1faccf7460c75c1638f7b7a9fed9d5b41a6b01bdfbcb9ab9a0b14ba60d
              • MD5 SHA1 SHA512 TLSH

              rob2_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\rob2_D2.dds
              • Size 2.0MB
              • SHA256 3845b8929149c8281c6fec37e6de80a67ebccd481c72bba7f26b9cdda05fff45
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Mansion-2-Normal-Down_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\Doomster\Old Mansion\Mansion-2-Normal-Down_D2.dds
              • Size 128KB
              • SHA256 3f59fac1755c357dc96fc50bbcb6caf785a29a50c32156fc1dc759b44b2aa3d3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              crawl02.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\DungeonItems\doors\crawl02.dds
              • Size 2.0MB
              • SHA256 4260ec2c6f8f9cfa8aa90607cbc6e6470d3c96bc1fbedc11a355341f2d8af355
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mez_ceiling_light2_N.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\metro theater\mezzanine\mez_ceiling_light2_N.dds
              • Size 128KB
              • SHA256 196d71106b029132912f69021b75e1408d4877e8f8deb8a92cd93347d84020e6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sink_N.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\metro theater\restroom\sink_N.dds
              • Size 128KB
              • SHA256 92c6541f909da8fdd076c6757129f8a655b9ddabe8e1e78fb60292896e8becb5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              stalls_N.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\metro theater\restroom\stalls_N.dds
              • Size 512KB
              • SHA256 578b9e3aa07227a36512edb425b2b84dfc84e81abd76c1fb7a11092ef8b959e2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              toilet_N.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\metro theater\restroom\toilet_N.dds
              • Size 128KB
              • SHA256 31f9aa878a3ec30b007c6a6e0ef47380ab6cc6456ca2f3bb87d8d78149c61676
              • MD5 SHA1 SHA512 SSDEEP TLSH

              crate_h_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\scifi\scenery\furniture\crateh\crate_h_D2.dds
              • Size 64KB
              • SHA256 6c9c01db208aae2eaf9f71c825f71d85ee68b1ff934e3be94834886d58147d33
              • MD5 SHA1 SHA512 SSDEEP TLSH

              equipment_B_I.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\scifi\scenery\furniture\equipmentb\equipment_B_I.dds
              • Size 256KB
              • SHA256 34a8cd2656a9253cb9dba4c8280a0cea6ccbdd353e665b9c11560b280ceb25cb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              c_i_01_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\ceilings\concrete\c_i_01_d2.dds
              • Size 512KB
              • SHA256 5985798247ac66dd2f9ff103a522e7b77866daac4a89acb5c5e7b10327c35450
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cd_f_02_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\corridors\concrete\cd_f_02_d2.dds
              • Size 512KB
              • SHA256 43a694a10899b5ae417f7c2b8df0af80533b33e391b6b6ccf1f40431b5c273ea
              • MD5 SHA1 SHA512 SSDEEP TLSH

              f_i_02_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\floors\concrete\f_i_02_D2.dds
              • Size 128KB
              • SHA256 434d9a7d3bbc9dd9057c04953af017f1f1466e67c451e106af091b1ae73ab852
              • MD5 SHA1 SHA512 SSDEEP TLSH

              f_k_02_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\floors\concrete\f_k_02_D2.dds
              • Size 128KB
              • SHA256 975268890f5f869315f6b68b55189aca119d214691830ab7700f71b365a3567f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              crate_f_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\scenery\furniture\cratef\crate_f_d2.dds
              • Size 32KB
              • SHA256 4c48204a6eebecbb0527a79aed4cdaf950cccdf6bbebc522b5b54502d35bbd55
              • MD5 SHA1 SHA512 SSDEEP TLSH

              crate_i_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\scenery\furniture\cratei\crate_i_d2.dds
              • Size 32KB
              • SHA256 a9665d15e4658ecf247a8a0165254cf5faa0d6c5082d18ef0bd826f4fb5e14b1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_c_all_03_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_c_all_03_D2.dds
              • Size 128KB
              • SHA256 e7b0bc2ab084b03ddeb23cdd93c076e64ef1abd6f48540dfa473f821de840939
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_c_dn_02_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_c_dn_02_D2.dds
              • Size 128KB
              • SHA256 50bb20dc14d3b93563b7f0c6e411f306264699c05f3cc8e8b97a1fd20c62cda1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_c_mid_03_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_c_mid_03_D2.dds
              • Size 128KB
              • SHA256 7571f4190a52dd81d6a9b3bf0f50a5f81f1e58ae93bd675f30c764681703f5ab
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_e_all_03_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_e_all_03_D2.dds
              • Size 128KB
              • SHA256 2cac6720ba274a1e4a9e8587455e6630a1452d52177cbdd1ce9e96d31bd19bc6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_e_dn_01_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_e_dn_01_d2.dds
              • Size 128KB
              • SHA256 4d9de1093dc20f2b91dbe641716f1bf25985f95f321de6592098527bec58f694
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_g_all_03_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_g_all_03_D2.dds
              • Size 128KB
              • SHA256 ce798e51ee89ad2a61f290f8f064fdcee0b0dc1a83f3a60f55857a37fc60c3c2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_g_dn_03_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_g_dn_03_D2.dds
              • Size 128KB
              • SHA256 9a91a71d2c82e7b09617e6d5c1c0da3f53f617b2e8de1ac97d57fc948783297a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_g_mid_02_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_g_mid_02_D2.dds
              • Size 128KB
              • SHA256 f0e98871664ffa923c3e211e710284525688c68117d55dab0c489d1c94223a28
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_j_up_01_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_j_up_01_d2.dds
              • Size 128KB
              • SHA256 83518094ca14c2afd8fa04a8853edc764ddf095b1c51c2b8dc880fa5a07b5c54
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_k_dn_01_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_k_dn_01_d2.dds
              • Size 128KB
              • SHA256 99e9c464ea19a7b34949dc2aa48ce96ecc78e12044470a15f7c08e7fe81f18c1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_k_dn_02_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_k_dn_02_D2.dds
              • Size 128KB
              • SHA256 dfabbb40356a5a89618cda0251460288d895bdef029f454770a26e56d292f0ac
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_k_dn_03_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_k_dn_03_D2.dds
              • Size 128KB
              • SHA256 74d5c833a786b0f8dd5d3cc30f7f3e670c55eb43261bb7483833ff6ac96b88ff
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_k_up_02_D2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_k_up_02_D2.dds
              • Size 128KB
              • SHA256 55442ef6662e9e2de270c858698baede15f968aecfee9bd4c69314a83ab68768
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_l_dn_01_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_l_dn_01_d2.dds
              • Size 128KB
              • SHA256 dae25d6d4633d52299c110700985942675f6a86cdb5038b8a87ff258d3a22ee5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              w_l_up_01_d2.dds

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_l_up_01_d2.dds
              • Size 128KB
              • SHA256 91f2751e447e9c1c7f678b260b93ccc43289e7b71e589e41c0e4c8aacddde53e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fungam.exe

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\fungam.exe
              • Size 21.2MB
              • SHA256 23c32fc17b19a6b988a9763c5c2f85a009f7308b296aa7cf72b5cc27bceeb00c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              msvcp71.dll

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\msvcp71.dll
              • Size 492KB
              • SHA256 6c483cbe349863c7dcf6f8cb7334e7d28c299e7d5aa063297ea2f62352f6bdd9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              msvcr71.dll

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\msvcr71.dll
              • Size 340KB
              • SHA256 c4d4339df314a27ff75a38967b7569d9962337b8d4cd4b0db3aba5ff72b2bfbb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              setup.ini

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\setup.ini
              • Size 3KB
              • SHA256 d4ea1d0de2bb8e1d5bfe78e5cf12e929823bd3096e0ad01c1957a6f39f486406
              • MD5 SHA1 SHA512 TLSH

              autorun.exe

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\autorun.exe
              • Size 6.1MB
              • SHA256 a1b549ffc3daebc3633edb11c69647a2aa02f2fdd70e2ea6a4ffbbf0419538a3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lua5.1.dll

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\lua5.1.dll
              • Size 322KB
              • SHA256 f26f4f66022acc96d0319c09814ebeda60f4ab96b63b6262045dc786dc7c5866
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vishnu64-2.ico

              • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\vishnu64-2.ico
              • Size 16KB
              • SHA256 16a3f85ae85a77d5c4dd169a4c2005c95b9559b9058dbf7274d89b523ca45f45
              • MD5 SHA1 SHA512 SSDEEP TLSH

              memory/1364-6548-0x00000000033A0000-0x00000000033CA000-memory.dmp

              memory/1364-6559-0x0000000006F60000-0x0000000006F79000-memory.dmp

              memory/1364-6527-0x0000000003340000-0x0000000003364000-memory.dmp

              memory/1364-6576-0x0000000000FE0000-0x0000000001076000-memory.dmp

              memory/1364-6572-0x0000000006FA0000-0x0000000006FC2000-memory.dmp

              memory/1364-6538-0x0000000003370000-0x000000000338E000-memory.dmp

              memory/3120-103-0x0000000003BA0000-0x0000000003BC3000-memory.dmp

              memory/3120-114-0x0000000003FA0000-0x0000000004084000-memory.dmp

              memory/3120-94-0x0000000003BA0000-0x0000000003BC4000-memory.dmp

              memory/3120-6582-0x0000000000CB0000-0x0000000000D46000-memory.dmp

              memory/3120-3700-0x0000000000CB0000-0x0000000000D46000-memory.dmp

              memory/3120-6580-0x0000000004090000-0x00000000040B7000-memory.dmp

              memory/3380-3696-0x0000000000910000-0x00000000009A6000-memory.dmp

              memory/3380-6621-0x0000000000910000-0x00000000009A6000-memory.dmp

              memory/4404-122-0x00000000014D0000-0x0000000001566000-memory.dmp