Analysis

  • user interaction
    yes
  • max time kernel
    135s
  • max time network
    139s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    29/05/2026, 00:00

General

  • Target
    WHAMB1.1.2.exe
  • Size 101.0MB
  • Sample260529-aatc6aev41
  • SHA256 6393e7aab325b6d649642c0eca2b7d3cd746c9da28b984db72e692115b3abf9f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WHAMB1.1.2.exe
    "C:\Users\Admin\AppData\Local\Temp\WHAMB1.1.2.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:4756
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4204
      • C:\Users\Admin\AppData\Local\Temp\RarSFX0\UnityCrashHandler64.exe
        "C:\Users\Admin\AppData\Local\Temp\RarSFX0\UnityCrashHandler64.exe" --attach 4204 2683164889088
        3⤵
        • Executes dropped EXE
        PID:340
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x504 0x500
    1⤵
      PID:5532

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          mono-2.0-bdwgc.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll
          • Size 7.5MB
          • SHA256 4bdb8fb7bc65be0373807cbddedba86e170a74f8ebdd523c7583a652618bfd9e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Compat.browser

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser
          • Size 1KB
          • SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
          • MD5 SHA1 SHA512 TLSH

          DefaultWsdlHelpGenerator.aspx

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx
          • Size 59KB
          • SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          config

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\MonoBleedingEdge\etc\mono\config
          • Size 3KB
          • SHA256 5776169973a26a387b8b3e5c0f2301a7ab9a6dd7c7d3efa22a96abc47fbf8662
          • MD5 SHA1 SHA512 TLSH

          UnityCrashHandler64.exe

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\UnityCrashHandler64.exe
          • Size 1.1MB
          • SHA256 ace4117a5633b487f504513132537bb2105924acedbea2b19a99c6df9e4238e6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityPlayer.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\UnityPlayer.dll
          • Size 29.5MB
          • SHA256 713f244583376cfb111ac62951b9226b2fe633259bbfdc106b2a73eea8f9dcb9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Want half a Mounds bar.exe

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar.exe
          • Size 651KB
          • SHA256 041c614913680b05a8ea73d91bf72af8afed7c25d1cb084f7d1b6feed1b7669d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AIModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.AIModule.dll
          • Size 57KB
          • SHA256 b42becf982d9c9269afb9ac26c89c721d443cd1528269a4b7e96fdcc9e29c7da
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ARModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.ARModule.dll
          • Size 20KB
          • SHA256 b879777f676d0938bc78a90647bce1939e17309113cbf488bcb14ca29e8c5244
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AccessibilityModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.AccessibilityModule.dll
          • Size 23KB
          • SHA256 a3b7f248710f2ff01dbe0aa55847f836fe7d472938256bbaa4561232ffcf2680
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AndroidJNIModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.AndroidJNIModule.dll
          • Size 91KB
          • SHA256 cfc97684d9c76b2181832c555f5e170d5d38e7be9f93029415c0886e8f0fa842
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AnimationModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.AnimationModule.dll
          • Size 160KB
          • SHA256 e0698b820a85e83ae170ce7ff0034df1e92753b3fa7dff7cf712fe3b3996a4f1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AssetBundleModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.AssetBundleModule.dll
          • Size 32KB
          • SHA256 c46b05ab53a5e462e290325b9b61bafd6a2ce13c3ac3357c4503d6608eb6cf34
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AudioModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.AudioModule.dll
          • Size 69KB
          • SHA256 678d71f4551211e5b9face1f2c49071f6e60061e0d8a1b91c2b0cc70174458fd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ClothModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.ClothModule.dll
          • Size 25KB
          • SHA256 6623b7ccc96f5f603fa91283cb5d62fec0269841887d94b376f2ca78979d8196
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ClusterInputModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.ClusterInputModule.dll
          • Size 21KB
          • SHA256 abe85af0e07113929c168273d8b57c9352141d0fa97c8cc878d46da3a421919f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ClusterRendererModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.ClusterRendererModule.dll
          • Size 21KB
          • SHA256 094b338503547d25a490a7f2113c42d924bea364727fe90b6ea8af138999349c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ContentLoadModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.ContentLoadModule.dll
          • Size 26KB
          • SHA256 3cf5e9290d08c55f3b0b0800617c32c6c74932829184668d46d232b5e22c4694
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.CoreModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.CoreModule.dll
          • Size 1.3MB
          • SHA256 a8d1b2189c540e42a19e2ea774e78d561276090344c9b810f2e692c328167231
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.CrashReportingModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.CrashReportingModule.dll
          • Size 20KB
          • SHA256 a564ac8280c6ee300a651acf1df4e847335dde16dffbc4e5ef6ca25664760ada
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.DSPGraphModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.DSPGraphModule.dll
          • Size 28KB
          • SHA256 04e6f8d5b800e178e140dd7554df90e984700bd4723004300ecfa960925581e0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.DirectorModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.DirectorModule.dll
          • Size 24KB
          • SHA256 ad8694c811be51f0a19c99f0fec34548a3c2a57a7a929ab3c74d90db19c6df78
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.GIModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.GIModule.dll
          • Size 19KB
          • SHA256 04df92d6b800d9ef7037580644840946bb9d3fffb92fe9aa617f27d546011058
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.GameCenterModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.GameCenterModule.dll
          • Size 39KB
          • SHA256 a49f094b75f38881efbb332a0f1ce69b690d41bff01e2e45db260dfe67b2aabc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.GridModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.GridModule.dll
          • Size 24KB
          • SHA256 fe7dec5d3c547e1b75700a40e11b453bfa57a22503bf182f69db6df199a5c48e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.HotReloadModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.HotReloadModule.dll
          • Size 19KB
          • SHA256 c8bd4fe165319cf4fa402039414914486cde54cff5b674a55e5fa656a73a5954
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.IMGUIModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.IMGUIModule.dll
          • Size 185KB
          • SHA256 08ce6950d91fb7c2db25d42d3063139686585da31397a3141e4f1cbcb0caf9c2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ImageConversionModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.ImageConversionModule.dll
          • Size 23KB
          • SHA256 ff1871cadfe59b0e79c892bfccbdc0c0a3a5824c202fcd66123a01e1bbef7114
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.InputLegacyModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.InputLegacyModule.dll
          • Size 38KB
          • SHA256 b39a3dc87650359962e760951974edfdcd55e5572a0d3c83a8f0f1c6f9c633d5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.InputModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.InputModule.dll
          • Size 23KB
          • SHA256 7871f90d484123040ad8f3a46aecd2dd4005ababf95dcc1eb26f0d024b2ddd86
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.JSONSerializeModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.JSONSerializeModule.dll
          • Size 21KB
          • SHA256 6df59d184ac1dd4cc6890039a669148848483d83622ba994cbbeab7b60027547
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.LocalizationModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.LocalizationModule.dll
          • Size 20KB
          • SHA256 00e60d8baf30574a249e558c8ed017a84a4d09813d67df1a9c32dd14b3a06359
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.NVIDIAModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.NVIDIAModule.dll
          • Size 33KB
          • SHA256 9eb11d1dd51a270928bc042772ddfc4555ca7059df9c0787123fbf444f26d3ef
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ParticleSystemModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.ParticleSystemModule.dll
          • Size 157KB
          • SHA256 2088448cd7e04b8388ffb45754732f0b7c776e53ad08fbd67ac308d9703b15e4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.PerformanceReportingModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.PerformanceReportingModule.dll
          • Size 20KB
          • SHA256 4fda388a6d2356372e2b821eede764491e41d9cb0b17d2b81c19d645ec169944
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.Physics2DModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.Physics2DModule.dll
          • Size 138KB
          • SHA256 cd47a8692f5825cb3b677b2066e41d3e4b4b0a807795ef084f0fd012ca833aea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.PhysicsModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.PhysicsModule.dll
          • Size 135KB
          • SHA256 0cf748deaa2b16eec335b1c4c36d829cd35a6998da5ad08f814993c1db259eb3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ProfilerModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.ProfilerModule.dll
          • Size 19KB
          • SHA256 c97ec9ca0191d6c474106c3a7c6dad9afd417ad1dcd283a6cf2f739fc43c81f3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.PropertiesModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.PropertiesModule.dll
          • Size 148KB
          • SHA256 94a65a1d65e55868a39886c97f534c5bdd7f18fa9bc66496226e2e536ff021b0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll
          • Size 19KB
          • SHA256 319977fc44e9452ab8d639ff6a01ff7a4763c5db8aedd249e335b1e8fbf5fb9c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ScreenCaptureModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.ScreenCaptureModule.dll
          • Size 20KB
          • SHA256 d63f617026f9f98302780167ae5c58c2c09c89814fa350961e852883ac480e25
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.SharedInternalsModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.SharedInternalsModule.dll
          • Size 32KB
          • SHA256 1f94ca2f1f0d1d83dc70cbccfd819611b2ee730f1c129caa1f90ba492b0a619b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.SpriteMaskModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.SpriteMaskModule.dll
          • Size 21KB
          • SHA256 5751c7e674528c6204f6af0dece14727d04dc11cc24c026ee1deb97f2e2e401f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.SpriteShapeModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.SpriteShapeModule.dll
          • Size 25KB
          • SHA256 c9c309acbc2e8e2314c6da0d58406aa0b38db69801d9e04b2085373f1c4b4d82
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.StreamingModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.StreamingModule.dll
          • Size 20KB
          • SHA256 285074c340db0ead4b6f59ca245f55689a305f79d72787794b1200a9bb8fa3fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.SubstanceModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.SubstanceModule.dll
          • Size 24KB
          • SHA256 a99d9eb8f0b4ea6b4eda7eb17f78e862e6d975d0f3e8aef68722445dc090685f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.SubsystemsModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.SubsystemsModule.dll
          • Size 34KB
          • SHA256 8b9923aaa8f4c8bb4e1f762a2b6a36265f27b4bc56dfd6260ca324f53933b1c2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TLSModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.TLSModule.dll
          • Size 26KB
          • SHA256 6e9a2638adf7696e4581df221a99d9a1af678e9dbe350122a8705d75142750ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TerrainModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.TerrainModule.dll
          • Size 98KB
          • SHA256 28f5e561e999116ee5c9b8f8bcba77b7ce08904d187c30ea202f2d2d48f59e83
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TerrainPhysicsModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.TerrainPhysicsModule.dll
          • Size 20KB
          • SHA256 2ab29912548ff2484155a818d0db3a8fed22f4bbd5907f5e98b4fcef2466cd49
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TextCoreFontEngineModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.TextCoreFontEngineModule.dll
          • Size 70KB
          • SHA256 8709950c351d779b4f44699bbd4714e010b1c4d047ce8f4df1e42745a182d518
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TextCoreTextEngineModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.TextCoreTextEngineModule.dll
          • Size 243KB
          • SHA256 4ab833d09c2df000cce606f2d2e40fb6074bc135f7776c06e929c2ccd9056783
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TextRenderingModule.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.TextRenderingModule.dll
          • Size 38KB
          • SHA256 07eedc223a3661fbf1c066c256c417f366f891f657c19e580e9e4adafa59df44
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\UnityEngine.dll
          • Size 123KB
          • SHA256 9d47aa4b9a078f33c478f30268c7f9726f7edeb1ffe822be611c122dc1dd8a40
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mscorlib.dll

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Managed\mscorlib.dll
          • Size 4.4MB
          • SHA256 3290d049dd4819ec58f24b431b8b97eae24a7c1a34b955426b4468f9d7549760
          • MD5 SHA1 SHA512 SSDEEP TLSH

          unity default resources

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\Resources\unity default resources
          • Size 1.5MB
          • SHA256 447caf3737cc58e2cf965f9829ae1c00c2c88505c055df2e8be0d8ede76b4da9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          RuntimeInitializeOnLoads.json

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\RuntimeInitializeOnLoads.json
          • Size 1KB
          • SHA256 6c7e11a6a24bbdf4f60dc11474cd4818ab13e49d952f9aad355786aabda67009
          • MD5 SHA1 SHA512 TLSH

          ScriptingAssemblies.json

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\ScriptingAssemblies.json
          • Size 3KB
          • SHA256 4d68199c30ca0e5e55f55684f7cfbcaf9f16df1b5c3b9bb774cf7ba291a96df4
          • MD5 SHA1 SHA512 TLSH

          app.info

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\app.info
          • Size 37B
          • SHA256 2493b6afc67bf1270fb9963c75217c7a42bd1adfcd9565def1e555004a8969fc
          • MD5 SHA1 SHA512

          boot.config

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\boot.config
          • Size 113B
          • SHA256 cbfaf2a278d7372b019d0551c49445ecda74d411001acdad5aa4ce2bb8b09830
          • MD5 SHA1 SHA512 TLSH

          globalgamemanagers

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\globalgamemanagers
          • Size 242KB
          • SHA256 b49fc5c01d5dc897b685157de9214c6135da157a6383cd88d09b2453e3450551
          • MD5 SHA1 SHA512 SSDEEP TLSH

          globalgamemanagers.assets

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\globalgamemanagers.assets
          • Size 214KB
          • SHA256 3ae1716453269d2c4dfd9b83966c7c9f5f206a6bbb16319f6181d02621c32735
          • MD5 SHA1 SHA512 SSDEEP TLSH

          level3.resS

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\level3.resS
          • Size 128KB
          • SHA256 502eef452cb1898a86ed162c77d2b0f248703aa54bb1b659d893192251ed75b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sharedassets7.assets.resS

          • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Want half a Mounds bar_Data\sharedassets7.assets.resS
          • Size 1.8MB
          • SHA256 a705b870396dcd13b798c145c98cfdcf0b22e3226de8dbd45929ca878c449b2f
          • MD5 SHA1 SHA512 SSDEEP

          memory/4204-502-0x00000270AEE60000-0x00000270AF586000-memory.dmp