Analysis

  • user interaction
    yes
  • max time kernel
    124s
  • max time network
    93s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    27/04/2026, 01:41

General

  • Target
    Packaged Games/fungame/fungame.exe
  • Size 6.2MB
  • Sample260427-b36dvsa18x
  • SHA256 69796bfdb431a77b39ba8a992050ab1092ac777d4267623f4ec896c7d8490524
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 27 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs
  • Views/modifies file attributes 1 TTPs 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Packaged Games\fungame\fungame.exe
    "C:\Users\Admin\AppData\Local\Temp\Packaged Games\fungame\fungame.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1040
    • C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\autorun.exe
      "C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\autorun.exe" "SFXSOURCE:C:\Users\Admin\AppData\Local\Temp\Packaged Games\fungame\fungame.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1084
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\hide.bat
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2312
        • C:\Windows\SysWOW64\attrib.exe
          attrib +h +s XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}
          4⤵
          • System Location Discovery: System Language Discovery
          • Views/modifies file attributes
          PID:1692
      • C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\fungam.exe
        "C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\fungam.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:2676
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 2676 -s 540
          4⤵
          • Program crash
          PID:4716
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x00000000000004C0 0x00000000000004D4
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1012
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2676 -ip 2676
    1⤵
      PID:432

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          dbprocore.dll

          • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprocore.dll
          • Size 239KB
          • SHA256 4be96d4a2149b0204e2a28a2066afd2958d572865ea0cb8d9d46e4a86e26a477
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dbprofiledebug.dll

          • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprofiledebug.dll
          • Size 121KB
          • SHA256 7c22135471b352161e6e1838448133182242e13dac13403f23e0cbe0ae4fbf2b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dbprosetupdebug.dll

          • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprosetupdebug.dll
          • Size 118KB
          • SHA256 e1cd1f61033fdfb50ab1774527cf0293ae10a1b4f79bb4930c2587b1d13b8dd1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dbprosystemdebug.dll

          • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprosystemdebug.dll
          • Size 160KB
          • SHA256 7b607d36d8b342669fa855bdc72ddb212a9e5bc8121b070028b28951ccbc360b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dbprotextdebug.dll

          • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\dbprotextdebug.dll
          • Size 95KB
          • SHA256 dbdfe87fba3ec7e326e71368289b824b21220f4777df7b4f9dfe560521dc6cfe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          matrix1util_05.dll

          • Path C:\Users\Admin\AppData\Local\Temp\dbpdata\matrix1util_05.dll
          • Size 82KB
          • SHA256 43450a7140987d6f9e70bb77b205f792ecfd87ad4316ec9202bffc09b92e9d74
          • MD5 SHA1 SHA512 SSDEEP TLSH

          FadeOutApp.dll

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Docs\FadeOutApp.dll
          • Size 4KB
          • SHA256 619103db9706368df9c5d8965ec02bbf805ae71ae65665a43c24c2acfe5064e1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Mask2.bmp

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Images\Mask2.bmp
          • Size 263KB
          • SHA256 494acf679294c9814dadfee42deb68fb35c6877c6c0963f454e58ded51b8812e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Mask3.bmp

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Images\Mask3.bmp
          • Size 263KB
          • SHA256 765f4484b6fd13f0c2ea634c4e9220eb8b21a6e16a8fcf462c18b2361893fd67
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bg.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Images\bg.jpg
          • Size 50KB
          • SHA256 07ae0a065597f6484edf2a8e6f21d2b765a13d5c14c96a9cf7ead198144af86d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Clipboard.lmd

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Plugins\Clipboard\Clipboard.lmd
          • Size 1.5MB
          • SHA256 ed696486a267df27c3d16e1c360ab0221f6dda9c76e70fce0ca4b74bdd22da6b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          IRDissolveTransition.tns

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Plugins\IRDissolveTransition.tns
          • Size 136KB
          • SHA256 6315b5d1869c3b4cbcbead77ad63da3a60d86ede287eccef338f74178ec181f2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          IRSlideTransition.tns

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Plugins\IRSlideTransition.tns
          • Size 132KB
          • SHA256 a251f8506a4a57b1d3b8c152fb64b5a7734de6d604426a248f3b5ea285f16a71
          • MD5 SHA1 SHA512 SSDEEP TLSH

          WinApi.lmd

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Plugins\WinApi\WinApi.lmd
          • Size 312KB
          • SHA256 f1166c24279cd83a4bdf7bfe4906113b31db005608dcf688f62b53467807e65d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          autorun.cdd

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\autorun.cdd
          • Size 1.0MB
          • SHA256 b399465e480ec4cdee48b93860a75d533f3c25a6b558e06810f66598ce7a5f47
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ambience-voice.ogg

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience-voice.ogg
          • Size 1.3MB
          • SHA256 5d3c9c609d70b43f76bf046acce53dd9150217ce5726a0c1a2e64f3a3aaedf99
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ambience10.ogg

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience10.ogg
          • Size 879KB
          • SHA256 864c69de8c263b52a5da094a6e26c9fc1f02a2503ca52a771d8adaeb3b0ff386
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ambience2.ogg

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience2.ogg
          • Size 455KB
          • SHA256 778568f6e6a7682592ffa4aac2ee2b5cf1a4235aa9389377de4b56aea8051653
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ambience3.ogg

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience3.ogg
          • Size 479KB
          • SHA256 ea9a126607a7ea73c4494f131b030d86d0546fc6ef8a632bc86b4df9a47b96c1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ambience8.ogg

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\Aeralnu\Ambience\ambience8.ogg
          • Size 2.0MB
          • SHA256 546bc9bacbc35bb182ff17b5894095cb718d98a462947b604bb939851fd60ce0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          barclose.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\DungeonItems\barclose.wav
          • Size 110KB
          • SHA256 7e98cd5e2d330454cbb58cf2ea78ce8c5a197b2ddc7559abb7f153119b64c1b4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          baropen.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\DungeonItems\baropen.wav
          • Size 110KB
          • SHA256 ac1ff25d4c5deb38f0d74228c2e364ff51aa4c53ed2e2949cb4e5a1c70efd55b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          firehum.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\atmos\firehum.wav
          • Size 173KB
          • SHA256 83bc689321f42e63514c545af38f949917badaef6b1278834cf30539f2080b06
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sparks.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\benge sprites\sparks.wav
          • Size 32KB
          • SHA256 e7187a1ac534afa68bbfc09a978bd8777bf80732599dd1d00b1fc3e7feaa2c73
          • MD5 SHA1 SHA512 SSDEEP TLSH

          healthup.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\items\healthup.wav
          • Size 95KB
          • SHA256 ed6945937517efef32e287e7638dfcb036fee615f118f1ea06b71510502ea642
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pickup.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\items\pickup.wav
          • Size 78KB
          • SHA256 8d9425bde0f1b06a6c1835a8cf6550f90a7552cf09957926d7dfbace4d95191b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pickupweapon.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\items\pickupweapon.wav
          • Size 92KB
          • SHA256 982b4532b107c607b90c305d03bb9506127afc475e71e0d8703f694835cae983
          • MD5 SHA1 SHA512 SSDEEP TLSH

          RollUpDoorOpen.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\m3\RollUpDoorOpen.wav
          • Size 293KB
          • SHA256 a03f951bbf8637b059c80341cbdf76c93c0f5f0e41b85c740cd320a2b05f4324
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0groundA1.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundA1.wav
          • Size 37KB
          • SHA256 b142bd8df8441eb693aedd974a66b967c7c2c078bde068aac39e6c22b7ede5e0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0groundA2.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundA2.wav
          • Size 41KB
          • SHA256 43db378af771f9c6ab1c70d0abc5000df80476fa8731be940604f9054fc7631a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0groundA3.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundA3.wav
          • Size 39KB
          • SHA256 8f702c77627c2f81562511db2b472488fa813a28c401919fea519188f890cc9d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0groundA4.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundA4.wav
          • Size 36KB
          • SHA256 3eb7624e111bd624f427d70ac5a7aedd6d84de94884b2812cf1e5e989ffaec6b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0groundD.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundD.wav
          • Size 41KB
          • SHA256 d215cb45b97364c911adf66f44adce9508fc6ef246c3eaa7d72c346037c61fb2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0groundI.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundI.wav
          • Size 52KB
          • SHA256 af263e560479704a82ee47a36a93a09cae6b3a6adf3fcc62e376fea93ae59e28
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0groundS.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\0groundS.wav
          • Size 79KB
          • SHA256 81d8788b0d70825d5dc71707c9ebaf5a3e13a9e80ba0ef207f92e2cfd9367c2f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          17WadingI.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\17WadingI.wav
          • Size 298KB
          • SHA256 a6f7730bf8f909a302f7904b7b79245d6d6a0679a67d4ac016efea6fd44eaf65
          • MD5 SHA1 SHA512 SSDEEP TLSH

          6clothA3.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\materials\6clothA3.wav
          • Size 11KB
          • SHA256 98b5f08657f9d16699601cbcdd905409f51698d6f91881ce9d0d994c5cb548bf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          talkping.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\misc\talkping.wav
          • Size 87KB
          • SHA256 e8f8d58c2d890cce3aa6d0b5961e710c64a3e801f5bcd5ec3337de75ed019ca3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          title.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\music\generic\title.wav
          • Size 669KB
          • SHA256 038024022ceedb7a09f153cc39a7766f19ccf83a4149ee90d484675100c611e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          MetalDoorRattle.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\thestoryteller01\MetalDoorRattle.wav
          • Size 184KB
          • SHA256 7ad7000efc497fdcad5ee36c65aad7e0e0d98dcba52988912cf51fd2f51cc5ad
          • MD5 SHA1 SHA512 SSDEEP TLSH

          creakydooropen.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\thestoryteller01\creakydooropen.wav
          • Size 168KB
          • SHA256 0784b2809bd5b0cbe5894fd495d8d96fdd330c131a7aac61edb73b3840492cdc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          wooddoorrattle.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\thestoryteller01\wooddoorrattle.wav
          • Size 152KB
          • SHA256 1a1ee4789815f333589f8db73e237e5c363e6e347620d98054e5d467cf4451cc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hurt2.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\voices\male\hurt2.wav
          • Size 72KB
          • SHA256 2688d0f1eb64d444a8973f524d225dc4198cc9e8da43d5f33f393f3e2dcb8231
          • MD5 SHA1 SHA512 SSDEEP TLSH

          spawn.wav

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\audiobank\voices\player\spawn.wav
          • Size 125KB
          • SHA256 f5b4f0daadfb9872cc21577feb83ea4a70997ee6bb0e04fb129d5161314b984d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          phong_bump_specular.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\The Scary Thinker\phong_bump_specular.fx
          • Size 6KB
          • SHA256 4caa129cb0aa6b5ade7369466d9407e21ccec0c28ce90e945941bc58025c5e43
          • MD5 SHA1 SHA512 SSDEEP TLSH

          spec64_normal.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\metro theater\entities\dynamic\spec64_normal.fx
          • Size 5KB
          • SHA256 92b21be10058bed275186ec0fb5d46f0839142c6b087bc731fdee1aa77653261
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lightmap_herospec64.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\metro theater\entities\static\lightmap_herospec64.fx
          • Size 5KB
          • SHA256 5d613cd5877c91ac4e192eb5f0e1a0d64d88e06e6c70a724ea59a58858d8a337
          • MD5 SHA1 SHA512 SSDEEP TLSH

          character_flat_persp_none.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\characters\character_flat_persp_none.fx
          • Size 10KB
          • SHA256 a382557b47161829df8a0c913307837a70f33ec733a1327a93c8429d132835aa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dynamic_lighting.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\entities\dynamic\shared\dynamic_lighting.fx
          • Size 7KB
          • SHA256 5811374b1075a2d18723cee8cb5c65246eb49e703cba234938d1371c316cac71
          • MD5 SHA1 SHA512 SSDEEP TLSH

          segment_spec_norm_alpha.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\segments\segment_spec_norm_alpha.fx
          • Size 8KB
          • SHA256 e2086c605bbd46fe36bc3fe70c91875bb28045f5ade52c7c3e757a47017005ef
          • MD5 SHA1 SHA512 SSDEEP TLSH

          segment_spec_norm_ambient.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\segments\segment_spec_norm_ambient.fx
          • Size 8KB
          • SHA256 410a6590bb7373bc047be526ba2bf5b90d7a98484778ca25e936b871eccad59e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          segment_spec_norm_parallax_ill.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\nomadmod\segments\segment_spec_norm_parallax_ill.fx
          • Size 11KB
          • SHA256 21708c996b2a65d8dbc045db23f1fae602f85b6a73668277fdbfe38782a6766f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          monochrome.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\postprocess\monochrome.fx
          • Size 15KB
          • SHA256 65723148df30396d55c8f8a3f4d00103cf8bd37f23c93c488ef96c72c8798fc6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          post-bloom.fx

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\effectbank\ps_2_0\post-bloom.fx
          • Size 6KB
          • SHA256 d5dcd6d56eb33ef39c573298656692282422b0cfbfbbbbc27855e6cd82b4bf87
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Painting1_3_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\MysticLibrary\Painting1_3_d2.dds
          • Size 128KB
          • SHA256 3b7bfd1174d4d484780dcfee8b0884301a2e682416016b8ddda751a950f7dc5f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Painting2_5_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\MysticLibrary\Painting2_5_d2.dds
          • Size 128KB
          • SHA256 74eaceea4c2065a2bc67c4599404fff17af867e72cede64edb0efc44518c6eb3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pic1.x

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\ar-deco\outside\pic1.x
          • Size 4KB
          • SHA256 0d335b05973f9c61ce67cf42ad16ab64944ec8d338ba7298e5c568af42dffb4c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          particles_e.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\generic\decals\energy\particles_e.dds
          • Size 140B
          • SHA256 dc8b22c6356ce5fbe0495bdbec88388d933811b5c3e1f230c60cf6ac8b1b62a1
          • MD5 SHA1 SHA512 TLSH

          cube.X

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\nomadmod\huds\cube.X
          • Size 33KB
          • SHA256 634d573b63fbedafc00773866668f8979e68a197ad9acad3d68aecea024efca0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cube.dbo

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\nomadmod\triggers\cube.dbo
          • Size 11KB
          • SHA256 89a1c234ad62f1a126747ffbf4099c8ea3044bbca09c20a48d5ee8abd134c560
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Flashlight.bin

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\triggers\Flashlight.bin
          • Size 716B
          • SHA256 a6208145c007b5c1730a2ba6c1f69976564c376721aca4f896e24f771f9e0911
          • MD5 SHA1 SHA512 TLSH

          flashlight_D.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\entitybank\triggers\flashlight_D.dds
          • Size 64KB
          • SHA256 af1dd308f5691bf65019f275d68d1ff7dad61130c5f510f576531b0a005a962c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          decal.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\glowred\decal.dds
          • Size 1.0MB
          • SHA256 32053983afacb839245b3ccbe458c2370b81d91da144a12a563d58c96794a149
          • MD5 SHA1 SHA512 SSDEEP TLSH

          decalspec.txt

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\glowred\decalspec.txt
          • Size 104B
          • SHA256 550cfa6ce6a1641b14aec6cfecbd39adfdd02fea88f972ef71d7a6db90dac6bc
          • MD5 SHA1 SHA512 TLSH

          decal.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\plasmabeam16\decal.dds
          • Size 1.0MB
          • SHA256 99aa0e214ff509200b4ae4a09da737b8a07dcf5bc573cde9eee41ba02fc8807e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          decalspec.txt

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\sparks\decalspec.txt
          • Size 104B
          • SHA256 165d89931344d8cd82017e02e3e19ab805d346f3004a3f3eaa708786825d2481
          • MD5 SHA1 SHA512 TLSH

          decal.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\decals\splinters\decal.dds
          • Size 1.0MB
          • SHA256 965f60e427d3e3a85e4137fb60c1499d27e355fb35a072e40e65c20bd129620e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          flakspec.txt

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\flak\ww2\millsno36\flakspec.txt
          • Size 477B
          • SHA256 e70694713a2c73f9196f95e1234105fc6723a469f08022845749b3ce14d662f8
          • MD5 SHA1 SHA512 TLSH

          crosshair.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\guns\modernday\mossberg\crosshair.dds
          • Size 4KB
          • SHA256 63168804c98431fcd5a1a516cb259cb9da3a8071d6ff6470e5c5e33bd45c1b63
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hud_icon.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\guns\scifi\assaultrifle\hud_icon.dds
          • Size 32KB
          • SHA256 f52b30654e8680b5d85eb257f0a36988adf87f26f8e9e1f8cbe0bbd29b8d2869
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ammo_n.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\guns\scifi\tavor\ammo_n.dds
          • Size 256KB
          • SHA256 c617f984357acfd452e3a752dfcdbd5c7dae36719de9ab3f7e30c30da678c0bd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          01.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\huds\artdeco\notes\01.dds
          • Size 283KB
          • SHA256 11033721a541e120e08d1efd1ba6463ab32d9b7d73d9c6b8f996f730f9ed5331
          • MD5 SHA1 SHA512 SSDEEP TLSH

          10.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\huds\artdeco\notes\10.dds
          • Size 442KB
          • SHA256 50724bc334a86451d6d8985734a40cd819e8d8169e3a432b50987b8646ee725c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pointer.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\gamecore\huds\pointer.dds
          • Size 1KB
          • SHA256 a58178bd1000602d90051e037288a5e5a00001bb97737223945d059c9ff76597
          • MD5 SHA1 SHA512 TLSH

          pickedupakey.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\languagebank\english\gamecore\text\pickedupakey.dds
          • Size 64KB
          • SHA256 5353c95420a0b4a90eabd5f484bb782768faf3200d23f3c30c3ce920869bdd3b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          map1.obs

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\levelbank\testlevel\map1.obs
          • Size 79B
          • SHA256 92892b79f3bd0cb84c73b037a1187521b59551c0bd82a2ee562605dbc504fa45
          • MD5 SHA1 SHA512

          explosion.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\media\explosion.dds
          • Size 5.3MB
          • SHA256 c182b720a3c7ee66d0de14b1e95e3a8dbb1ff4b83b5a9af4a9a63e5e33adbf0d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          overlay.x

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\meshbank\common\overlay.x
          • Size 965B
          • SHA256 d5e3a2e74f7fc70ce5711615fdcddc84ebc920cfa337ef9eed2f04fa99df5d7a
          • MD5 SHA1 SHA512 TLSH

          light_b.dbo

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\meshbank\ww2\scenery\lights\light_b\light_b.dbo
          • Size 13KB
          • SHA256 36a7403f8e5a76cc65940282e2eb7cf830caded06475a0a6275728d9336e65d9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          light_b.x

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\meshbank\ww2\scenery\lights\light_b\light_b.x
          • Size 37KB
          • SHA256 031e14e56d0fa6833c224db17a75f8651e999dc6ba400c211d0ce9891830a81d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ChestEmpty.fpi

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\scriptbank\TheStoryteller01\NewScripts\ChestEmpty.fpi
          • Size 1KB
          • SHA256 777d1473a853a7f594d5c787f3ea88c8d53245e2ebfe605c178cf260faad2f34
          • MD5 SHA1 SHA512 TLSH

          WardrobeOrnateUseles.fpi

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\scriptbank\TheStoryteller01\Updated Scripts\WardrobeOrnateUseles.fpi
          • Size 1KB
          • SHA256 502d55744d7ad66c0b45bed1e92cd4b70e0b650cecd5d1faab3be14ba40f3302
          • MD5 SHA1 SHA512 TLSH

          NCDocks_001_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\segments\NightCityDocksPack\NCDocks_001_D2.dds
          • Size 2.0MB
          • SHA256 0d06aa000a73c8b75595b65a5dfb1a680cc9540a2d5c8eec5aa213ae3687d2f2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          p_p1_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\add-ons\p_p1_D2.dds
          • Size 128KB
          • SHA256 e8d00719fcc59ece17b3f80198bbcb33df721c254cdffd96971c27a228650532
          • MD5 SHA1 SHA512 SSDEEP TLSH

          p_p5_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\add-ons\p_p5_D2.dds
          • Size 128KB
          • SHA256 7c2ae1b67e8032d919aec6070f239d7c5c79b80d885d375c6bab7ffca95bf066
          • MD5 SHA1 SHA512 SSDEEP TLSH

          wall6_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\add-ons\wall6_D2.dds
          • Size 128KB
          • SHA256 d637e4bb83b10a7678ed40d1bbb5bac50fc6226c977ff0b2bc0794ecebc5137d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cabinet2_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\cabinet2_D2.dds
          • Size 512KB
          • SHA256 65157edd4fb082f54de12b97408c3ba9d2878af872f4eb19c039eae8d207806c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          candle_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\candle_D2.dds
          • Size 512KB
          • SHA256 6d5ef46a832f8c8e39f43832cd152066f235a6b17a9c766c13158cb91bddbcb6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          desk_lamp_I.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\desk_lamp_I.dds
          • Size 2KB
          • SHA256 df3a8b1faccf7460c75c1638f7b7a9fed9d5b41a6b01bdfbcb9ab9a0b14ba60d
          • MD5 SHA1 SHA512 TLSH

          rob2_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\BSP-WW2 Models\Aftermath\rob2_D2.dds
          • Size 2.0MB
          • SHA256 3845b8929149c8281c6fec37e6de80a67ebccd481c72bba7f26b9cdda05fff45
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Mansion-2-Normal-Down_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\Doomster\Old Mansion\Mansion-2-Normal-Down_D2.dds
          • Size 128KB
          • SHA256 3f59fac1755c357dc96fc50bbcb6caf785a29a50c32156fc1dc759b44b2aa3d3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          crawl02.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\DungeonItems\doors\crawl02.dds
          • Size 2.0MB
          • SHA256 4260ec2c6f8f9cfa8aa90607cbc6e6470d3c96bc1fbedc11a355341f2d8af355
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mez_ceiling_light2_N.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\metro theater\mezzanine\mez_ceiling_light2_N.dds
          • Size 128KB
          • SHA256 196d71106b029132912f69021b75e1408d4877e8f8deb8a92cd93347d84020e6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sink_N.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\metro theater\restroom\sink_N.dds
          • Size 128KB
          • SHA256 92c6541f909da8fdd076c6757129f8a655b9ddabe8e1e78fb60292896e8becb5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          stalls_N.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\metro theater\restroom\stalls_N.dds
          • Size 512KB
          • SHA256 578b9e3aa07227a36512edb425b2b84dfc84e81abd76c1fb7a11092ef8b959e2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          toilet_N.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\metro theater\restroom\toilet_N.dds
          • Size 128KB
          • SHA256 31f9aa878a3ec30b007c6a6e0ef47380ab6cc6456ca2f3bb87d8d78149c61676
          • MD5 SHA1 SHA512 SSDEEP TLSH

          crate_h_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\scifi\scenery\furniture\crateh\crate_h_D2.dds
          • Size 64KB
          • SHA256 6c9c01db208aae2eaf9f71c825f71d85ee68b1ff934e3be94834886d58147d33
          • MD5 SHA1 SHA512 SSDEEP TLSH

          equipment_B_I.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\scifi\scenery\furniture\equipmentb\equipment_B_I.dds
          • Size 256KB
          • SHA256 34a8cd2656a9253cb9dba4c8280a0cea6ccbdd353e665b9c11560b280ceb25cb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          c_i_01_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\ceilings\concrete\c_i_01_d2.dds
          • Size 512KB
          • SHA256 5985798247ac66dd2f9ff103a522e7b77866daac4a89acb5c5e7b10327c35450
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cd_f_02_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\corridors\concrete\cd_f_02_d2.dds
          • Size 512KB
          • SHA256 43a694a10899b5ae417f7c2b8df0af80533b33e391b6b6ccf1f40431b5c273ea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          f_i_02_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\floors\concrete\f_i_02_D2.dds
          • Size 128KB
          • SHA256 434d9a7d3bbc9dd9057c04953af017f1f1466e67c451e106af091b1ae73ab852
          • MD5 SHA1 SHA512 SSDEEP TLSH

          f_k_02_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\floors\concrete\f_k_02_D2.dds
          • Size 128KB
          • SHA256 975268890f5f869315f6b68b55189aca119d214691830ab7700f71b365a3567f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          crate_f_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\scenery\furniture\cratef\crate_f_d2.dds
          • Size 32KB
          • SHA256 4c48204a6eebecbb0527a79aed4cdaf950cccdf6bbebc522b5b54502d35bbd55
          • MD5 SHA1 SHA512 SSDEEP TLSH

          crate_i_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\scenery\furniture\cratei\crate_i_d2.dds
          • Size 32KB
          • SHA256 a9665d15e4658ecf247a8a0165254cf5faa0d6c5082d18ef0bd826f4fb5e14b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_c_all_03_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_c_all_03_D2.dds
          • Size 128KB
          • SHA256 e7b0bc2ab084b03ddeb23cdd93c076e64ef1abd6f48540dfa473f821de840939
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_c_dn_02_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_c_dn_02_D2.dds
          • Size 128KB
          • SHA256 50bb20dc14d3b93563b7f0c6e411f306264699c05f3cc8e8b97a1fd20c62cda1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_c_mid_03_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_c_mid_03_D2.dds
          • Size 128KB
          • SHA256 7571f4190a52dd81d6a9b3bf0f50a5f81f1e58ae93bd675f30c764681703f5ab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_e_all_03_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_e_all_03_D2.dds
          • Size 128KB
          • SHA256 2cac6720ba274a1e4a9e8587455e6630a1452d52177cbdd1ce9e96d31bd19bc6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_e_dn_01_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_e_dn_01_d2.dds
          • Size 128KB
          • SHA256 4d9de1093dc20f2b91dbe641716f1bf25985f95f321de6592098527bec58f694
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_g_all_03_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_g_all_03_D2.dds
          • Size 128KB
          • SHA256 ce798e51ee89ad2a61f290f8f064fdcee0b0dc1a83f3a60f55857a37fc60c3c2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_g_dn_03_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_g_dn_03_D2.dds
          • Size 128KB
          • SHA256 9a91a71d2c82e7b09617e6d5c1c0da3f53f617b2e8de1ac97d57fc948783297a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_g_mid_02_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_g_mid_02_D2.dds
          • Size 128KB
          • SHA256 f0e98871664ffa923c3e211e710284525688c68117d55dab0c489d1c94223a28
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_j_up_01_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_j_up_01_d2.dds
          • Size 128KB
          • SHA256 83518094ca14c2afd8fa04a8853edc764ddf095b1c51c2b8dc880fa5a07b5c54
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_k_dn_01_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_k_dn_01_d2.dds
          • Size 128KB
          • SHA256 99e9c464ea19a7b34949dc2aa48ce96ecc78e12044470a15f7c08e7fe81f18c1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_k_dn_02_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_k_dn_02_D2.dds
          • Size 128KB
          • SHA256 dfabbb40356a5a89618cda0251460288d895bdef029f454770a26e56d292f0ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_k_dn_03_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_k_dn_03_D2.dds
          • Size 128KB
          • SHA256 74d5c833a786b0f8dd5d3cc30f7f3e670c55eb43261bb7483833ff6ac96b88ff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_k_up_02_D2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_k_up_02_D2.dds
          • Size 128KB
          • SHA256 55442ef6662e9e2de270c858698baede15f968aecfee9bd4c69314a83ab68768
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_l_dn_01_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_l_dn_01_d2.dds
          • Size 128KB
          • SHA256 dae25d6d4633d52299c110700985942675f6a86cdb5038b8a87ff258d3a22ee5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          w_l_up_01_d2.dds

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Files\texturebank\ww2\walls\concrete\w_l_up_01_d2.dds
          • Size 128KB
          • SHA256 91f2751e447e9c1c7f678b260b93ccc43289e7b71e589e41c0e4c8aacddde53e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fungam.exe

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\fungam.exe
          • Size 21.2MB
          • SHA256 23c32fc17b19a6b988a9763c5c2f85a009f7308b296aa7cf72b5cc27bceeb00c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp71.dll

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\msvcp71.dll
          • Size 492KB
          • SHA256 6c483cbe349863c7dcf6f8cb7334e7d28c299e7d5aa063297ea2f62352f6bdd9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcr71.dll

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\msvcr71.dll
          • Size 340KB
          • SHA256 c4d4339df314a27ff75a38967b7569d9962337b8d4cd4b0db3aba5ff72b2bfbb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          setup.ini

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\XrPkTcW6V9.{20D04FE0-3AEA-1069-A2D8-08002B30309D}\setup.ini
          • Size 3KB
          • SHA256 d4ea1d0de2bb8e1d5bfe78e5cf12e929823bd3096e0ad01c1957a6f39f486406
          • MD5 SHA1 SHA512 TLSH

          autorun.exe

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\autorun.exe
          • Size 6.1MB
          • SHA256 a1b549ffc3daebc3633edb11c69647a2aa02f2fdd70e2ea6a4ffbbf0419538a3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hide.bat

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\hide.bat
          • Size 62B
          • SHA256 90f748defc2897e22922113e84d998db4f63068746d0da7b0a2a01b76c91128a
          • MD5 SHA1 SHA512 TLSH

          lua5.1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\lua5.1.dll
          • Size 322KB
          • SHA256 f26f4f66022acc96d0319c09814ebeda60f4ab96b63b6262045dc786dc7c5866
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vishnu64-2.ico

          • Path C:\Users\Admin\AppData\Local\Temp\ir_ext_temp_0\vishnu64-2.ico
          • Size 16KB
          • SHA256 16a3f85ae85a77d5c4dd169a4c2005c95b9559b9058dbf7274d89b523ca45f45
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/1084-104-0x00000000041F0000-0x0000000004213000-memory.dmp

          memory/1084-6574-0x0000000004360000-0x0000000004387000-memory.dmp

          memory/1084-94-0x00000000041F0000-0x0000000004214000-memory.dmp

          memory/1084-114-0x0000000004270000-0x0000000004354000-memory.dmp

          memory/2676-6544-0x0000000001090000-0x00000000010BA000-memory.dmp

          memory/2676-6567-0x0000000001130000-0x0000000001152000-memory.dmp

          memory/2676-6554-0x00000000010F0000-0x0000000001109000-memory.dmp

          memory/2676-6533-0x0000000001030000-0x000000000104E000-memory.dmp

          memory/2676-6522-0x0000000000FE0000-0x0000000001004000-memory.dmp