Overview
overview
7Static
static
3another-fn....5.exe
windows10-2004-x64
7another-fn....5.exe
windows11-21h2-x64
7$PLUGINSDI...al.ini
windows10-2004-x64
1$PLUGINSDI...al.ini
windows11-21h2-x64
4$PLUGINSDI...er.bmp
windows10-2004-x64
1$PLUGINSDI...er.bmp
windows11-21h2-x64
$PLUGINSDI...rd.bmp
windows10-2004-x64
1$PLUGINSDI...rd.bmp
windows11-21h2-x64
SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3SP_ANIMTRO....yytex
windows10-2004-x64
3SP_ANIMTRO....yytex
windows11-21h2-x64
3Analysis
- user interaction
yes - max time kernel
759s - max time network
787s - platform
windows10-2004_x64 - resource
win10v2004-20260513-es - resource tags
arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows - submitted
19/05/2026, 02:51
Static task
static1
Behavioral task
behavioral1
Sample
another-fnaf-plus-fan-game-by-ehanix-3.5.exe
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral2
Sample
another-fnaf-plus-fan-game-by-ehanix-3.5.exe
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ioSpecial.ini
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ioSpecial.ini
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral9
Sample
SP_ANIMTRONICS_0.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral10
Sample
SP_ANIMTRONICS_0.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral11
Sample
SP_ANIMTRONICS_1.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral12
Sample
SP_ANIMTRONICS_1.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral13
Sample
SP_ANIMTRONICS_10.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral14
Sample
SP_ANIMTRONICS_10.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral15
Sample
SP_ANIMTRONICS_11.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral16
Sample
SP_ANIMTRONICS_11.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral17
Sample
SP_ANIMTRONICS_12.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral18
Sample
SP_ANIMTRONICS_12.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral19
Sample
SP_ANIMTRONICS_13.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral20
Sample
SP_ANIMTRONICS_13.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral21
Sample
SP_ANIMTRONICS_14.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral22
Sample
SP_ANIMTRONICS_14.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral23
Sample
SP_ANIMTRONICS_15.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral24
Sample
SP_ANIMTRONICS_15.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral25
Sample
SP_ANIMTRONICS_16.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral26
Sample
SP_ANIMTRONICS_16.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral27
Sample
SP_ANIMTRONICS_17.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral28
Sample
SP_ANIMTRONICS_17.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral29
Sample
SP_ANIMTRONICS_18.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral30
Sample
SP_ANIMTRONICS_18.yytex
Resource
win11-20260513-es
windows11-21h2-x64
Behavioral task
behavioral31
Sample
SP_ANIMTRONICS_19.yytex
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral32
Sample
SP_ANIMTRONICS_19.yytex
Resource
win11-20260513-es
windows11-21h2-x64
General
- Target another-fnaf-plus-fan-game-by-ehanix-3.5.exe
- Size 738.8MB
- Sample260519-dcf3dsft5s
- SHA256 023a6b63a9adb9518dd666c39a385c9313b327a3e8082c375d973bc8e74a2b4d
- MD5 73f1e1d4d30cc79237aae620e0882fdf
- SHA1 79f7ce0eb1857f7c49ad1e2df546ac5d6d57fa9c
- SHA512 79158d833fb16476e580ca1ca3efc3c0b3e5756952a5f4a11ddb0465e986e563be21a95cf0ab3a27837aa7001e45971c0c177e5f3cae488096265491581dc32e
- SSDEEP 12582912:GiGCbNN1z9BBqWEb6uPXvd4zcwuIBDBzvQqUnIM/OdTOJ1TQsimy84H76:GiGCthQjdScwfBhX5O7xW8y76
- TLSH T1FF8933ADE1EA2F1CD4736D3886719B5453F4852AC817DC38B76A07428DDB7C7B26C288
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 2 IoCs
pid Process 1324 vcredist_x86_2015.exe 4696 vcredist_x86_2015.exe - Loads dropped DLL 48 IoCs
pid Process 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 4696 vcredist_x86_2015.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 42 IoCs
description ioc Process File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_16.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_23.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_6.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_9.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_30.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_31.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_18.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_20.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_24.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_25.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_27.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_28.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\FNAF PLUS.exe another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_14.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_21.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_32.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_33.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_5.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_8.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_1.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_10.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_26.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_3.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_35.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_37.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\options.ini another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_11.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_17.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_7.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\data.win another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\license.txt another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_0.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_13.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_15.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_34.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_36.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_4.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_19.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_2.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_22.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_29.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe File created C:\Program Files (x86)\FNAF PLUS\SP_ANIMTRONICS_12.yytex another-fnaf-plus-fan-game-by-ehanix-3.5.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 3 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language another-fnaf-plus-fan-game-by-ehanix-3.5.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vcredist_x86_2015.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vcredist_x86_2015.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3828 wrote to memory of 1324 3828 another-fnaf-plus-fan-game-by-ehanix-3.5.exe 84 PID 1324 wrote to memory of 4696 1324 vcredist_x86_2015.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\another-fnaf-plus-fan-game-by-ehanix-3.5.exe"C:\Users\Admin\AppData\Local\Temp\another-fnaf-plus-fan-game-by-ehanix-3.5.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3828 -
C:\Users\Admin\AppData\Local\Temp\vcredist_x86_2015.exe"C:\Users\Admin\AppData\Local\Temp\vcredist_x86_2015.exe" /quiet /norestart2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1324 -
C:\Users\Admin\AppData\Local\Temp\vcredist_x86_2015.exe"C:\Users\Admin\AppData\Local\Temp\vcredist_x86_2015.exe" /quiet /norestart -burn.unelevated BurnPipe.{F0F044BA-7967-4489-84D7-7482DA9431B6} {387B1204-B6DB-4983-872A-10AA745A4818} 13243⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4696
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsi8CBB.tmp\InstallOptions.dll
- Size 15KB
- SHA256 f90a0893c0b0ce2ae3f8bb65f383bf656ce33381d6cbac2b25a7d82b34fde9bd
- MD5 6f3098fb5f3db26f3bb84f5481109e39
- SHA1 9270793e404cc42c6f5be1eb1eb4305f166c656d
- SHA512 0462beae0fbd882dc0b6a09547a7959c051928b828e28125b433794de0258f90f3dec8f1920290f114970d2540a113224b8ab372fcee4dfe87f139be4ac0c0d1
- SSDEEP 384:lgw9eYfMCU9oJNJJjL3bhLNdSDL6o5VrSRLmCvl:39AleJNbf3tNgDLn28wl
- TLSH T14E621A527AC120F2DDD6A53037E77F236FB2B52094D58C1B97633E4B5922212BE39362
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsi8CBB.tmp\System.dll
- Size 12KB
- SHA256 60d4a86f65e141d4b6b778e5f448a0c818bd2fa28db7b9dabc1395d354b19cc5
- MD5 ea00e2678e4679ba28b0f560baec9776
- SHA1 f9b647b1ab50cc2de981757ac914a5787bccd95a
- SHA512 2ee7a4a0af955ba376c66d13e626ca135b2afd13277a006f523eb2fdc1133a12ea35b065a8c119843fbe82f89190cdb2b769329af14e4313a2419b739b27337a
- SSDEEP 192:UA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6gn9Mw:MR7SrtTv53tdtTgwF4SQbGPX36g9Mw
- TLSH T110425C496B618EF2F62A463729B77F264B38EE1411E446DB8FD38445E8A01E721363C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsi8CBB.tmp\ioSpecial.ini
- Size 1KB
- SHA256 a0f66ebfa67fb5004dc0bc21ac17b228859eca00f031f155c721c1f119d366f6
- MD5 ca49ea20b96f0b09c6f239c89b4fbc61
- SHA1 75b5f85396c0dfdb5f0ba703cfdce02006306f7d
- SHA512 944560455464ee7b8226a7892c435df70ab46278956ac166ab0d5462804a8a3a6e0d0fd06892085c56a77ce3c91235171dff8771cea0c06795aaa1ee11ac0a7f
- TLSH T19F118F027EF81018E2AAFA08EBF98075873978521829D51E90D10B0E48E5B818537BAF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\vcredist_x86_2015.exe
- Size 13.1MB
- SHA256 fdd1e1f0dcae2d0aa0720895eff33b927d13076e64464bb7c7e5843b7667cd14
- MD5 1a15e6606bac9647e7ad3caa543377cf
- SHA1 bfb74e498c44d3a103ca3aa2831763fb417134d1
- SHA512 e8cb67fc8e0312da3cc98364b96dfa1a63150ab9de60069c4af60c1cf77d440b7dffe630b4784ba07ea9bf146bdbf6ad5282a900ffd6ab7d86433456a752b2fd
- SSDEEP 393216:S1RPq5dCsKSR65cX7Eyd/qnejOFxP7OEnl4L/Vvc:yP5iw56oyleej2OEnlwc
- TLSH T189D63336A3648126C5E30573EE15E1206F687329BB1488FBD3447E1D3E69587A3BB34B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\logo.png
- Size 1KB
- SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
- MD5 d6bd210f227442b3362493d046cea233
- SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
- SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
- TLSH T1CF312CF34748B7A7D30581351471819AD242FFD8F9CE291E35CD5307664018115C75CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\wixstdba.dll
- Size 118KB
- SHA256 a9295ad4e909f979e2b6cb2b2495c3d35c8517e689cd64a918c690e17b49078b
- MD5 4d20a950a3571d11236482754b4a8e76
- SHA1 e68bd784ac143e206d52ecaf54a7e3b8d4d75c9c
- SHA512 8b9243d1f9edbcbd6bdaf6874dc69c806bb29e909bd733781fde8ac80ca3fff574d786ca903871d1e856e73fd58403bebb58c9f23083ea7cd749ba3e890af3d2
- SSDEEP 1536:nw7WzpopAuJhsVuThs5cXyeM6JUOfPGSpeBxm946ITADDwYkH/1d9chyP7iN6p:pmAuJhAyZFpem90iw//1d9chwG6
- TLSH T17AC35C113BF08072E2E6163D5925A3215A7FBA3199B0D9CF6B484E6E2E711C1DF76323
- MD5 SHA1 SHA512 SSDEEP TLSH