Analysis

  • max time kernel
    150s
  • max time network
    110s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/07/2026, 03:00

General

  • Target
    2026-07-11_699de98f851bf242fe5f40260e3bf8dd_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
  • Size 40.5MB
  • Sample260711-dhfc2sc16v
  • SHA256 a09fb2cfcf9e822e4ea38683493ddff9db14ac78e1d14600aeff25f299065afe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-11_699de98f851bf242fe5f40260e3bf8dd_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-11_699de98f851bf242fe5f40260e3bf8dd_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5804
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks SCSI registry key(s)
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4892
      • C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\UnityCrashHandler64.exe
        "C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\UnityCrashHandler64.exe" --attach 4892 1829250142208
        3⤵
        • Executes dropped EXE
        PID:2132
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x0000000000000504 0x00000000000004E0
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:5476

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3D12Core.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\D3D12\D3D12Core.dll
        • Size 4.5MB
        • SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mono-2.0-bdwgc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll
        • Size 7.5MB
        • SHA256 86a5a4de6bcd74a637d63c96d822dc989d4ffaed6ef1c15c0e6e1f528ae6708f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Compat.browser

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser
        • Size 1KB
        • SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
        • MD5 SHA1 SHA512 TLSH

        DefaultWsdlHelpGenerator.aspx

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx
        • Size 59KB
        • SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\MonoBleedingEdge\etc\mono\config
        • Size 3KB
        • SHA256 5776169973a26a387b8b3e5c0f2301a7ab9a6dd7c7d3efa22a96abc47fbf8662
        • MD5 SHA1 SHA512 TLSH

        SexLingo.exe

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo.exe
        • Size 652KB
        • SHA256 6265a1cab1fe87d0166e9eac08f02f700e141f12aab70e77b52cfb50ca51450c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.AIModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.AIModule.dll
        • Size 75KB
        • SHA256 ce7c0a35bae8b0dbc7ae41166e0b367839c884d29212b05540adf3de4f1888ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.AMDModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.AMDModule.dll
        • Size 21KB
        • SHA256 bbf0302d8dfc13cd3f0f4ec87985997102635cb1f74766dec5a34d384d8f905c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.ARModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.ARModule.dll
        • Size 24KB
        • SHA256 554041ac5da7437a06e04f90c8391ea0a55cda3d48ca79af77c91919d6a3e815
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.AccessibilityModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.AccessibilityModule.dll
        • Size 48KB
        • SHA256 eb277989d6ae6570afe4e8dda0f7694fb8e4f833f42275e5f61faef0b1fbac30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.AdaptivePerformanceModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.AdaptivePerformanceModule.dll
        • Size 121KB
        • SHA256 d8d0076d973e86d5709e3d281b4933fa9a15382c279cf86415ad9390b803d166
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.AndroidJNIModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.AndroidJNIModule.dll
        • Size 118KB
        • SHA256 b420611d602745242f4368805f0a5fe33b7236f0bf48a5db52ae45b100d466bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.AnimationModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.AnimationModule.dll
        • Size 219KB
        • SHA256 17596c5d92e0365f1cdc02d4cb5639a3d98ab86cd2292afa54837de017c3225c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.AssetBundleModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.AssetBundleModule.dll
        • Size 40KB
        • SHA256 acd68e4d551780ec89bfefe9ec268456eb687d5030f8a3d713d421c62e32f8e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.AudioModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.AudioModule.dll
        • Size 138KB
        • SHA256 40eaef11885f9b8025ac4ec9fef7e71e2c7f61ed882967c827ca9e275d3d98f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.ClothModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.ClothModule.dll
        • Size 35KB
        • SHA256 616a99e976810ef118334513cee0e1ea4c8cc7a194ceed6b29786d86d341d0d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.ClusterInputModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.ClusterInputModule.dll
        • Size 27KB
        • SHA256 9b3feabda206964c153fb1ce0fee11c00c0e065cdfb513fd9f0de084123f1a3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.ClusterRendererModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.ClusterRendererModule.dll
        • Size 25KB
        • SHA256 f22f3ce708903cb14d0e2a492278a41cb05674bdd0e72733c8a4f6c92068b1d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.ContentLoadModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.ContentLoadModule.dll
        • Size 31KB
        • SHA256 0be1950e3d8aa4b9ebed31b70d4ec89f6e846306851d55ee6c82045c23ba60d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.CoreModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.CoreModule.dll
        • Size 1.9MB
        • SHA256 a70c1f154a8994c5d3d9ab486fc663c1c71f69ec8f5e8971483e0872ec5a97f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.CrashReportingModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.CrashReportingModule.dll
        • Size 25KB
        • SHA256 2894b2cf8b68069d714bef7040c87fbb12b6099615e1072c14be002dce27cfc1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.DSPGraphModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.DSPGraphModule.dll
        • Size 30KB
        • SHA256 e2789a44a5a4f7099d5ef7a492bf2df5dff00313af71fd7fc92a8eda25098f4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.DirectorModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.DirectorModule.dll
        • Size 40KB
        • SHA256 8364ec694be1a16ed78fd39fd9501c0a4ada329fe1ea46755abbf64125623672
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.GIModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.GIModule.dll
        • Size 23KB
        • SHA256 fd7605653fa25ab17fa60cf54dc2970003ff3b2399d544433276a2932c2c13e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.GameCenterModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.GameCenterModule.dll
        • Size 44KB
        • SHA256 d2b67c0e40a1db5eee612f5bef9866df2850df14e3ef73e08caf5c3664c5da75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.GraphicsStateCollectionSerializerModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.GraphicsStateCollectionSerializerModule.dll
        • Size 13KB
        • SHA256 636147adb204791c650b142a6b9dde24a6994f3cc209f5f2cbcf746bc22aee79
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.GridModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.GridModule.dll
        • Size 29KB
        • SHA256 de45ea2b8fadb715b3b1f6e20952b081be81cc3903b4883195199e65406433f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.HierarchyCoreModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.HierarchyCoreModule.dll
        • Size 106KB
        • SHA256 ac6faacdfe13e6f0389a4f5e96895700ca2e3eef906f8d7a8557b108a9a262ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.HierarchyModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.HierarchyModule.dll
        • Size 99KB
        • SHA256 f251f8370e2d9e2138b6853c31cff64defbb1d69839b8aef3e7e15d7085de8fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.HotReloadModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.HotReloadModule.dll
        • Size 23KB
        • SHA256 03bfa3fbc0067476269346aed3b1375450cdc7f295d8a2d3947afb3ced94e68f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.IMGUIModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.IMGUIModule.dll
        • Size 208KB
        • SHA256 fb7f945d2cb65fcaee0c82551b0dc2ca278a6db4de3d1ac31c850978f01a17a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.IdentifiersModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.IdentifiersModule.dll
        • Size 14KB
        • SHA256 7a22026b92e20162e60af471d9b716eab92adf3bc1b649b1d56e34583346eed8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.ImageConversionModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.ImageConversionModule.dll
        • Size 30KB
        • SHA256 4160a47eb2100d16316989cf5c4ab1fd08add1d670312b13d162d66ec14f823c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.InputForUIModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.InputForUIModule.dll
        • Size 56KB
        • SHA256 c824d115878b40adc70de3b89e90eca3a385c292aa45d10020921a75a1527a5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.InputLegacyModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.InputLegacyModule.dll
        • Size 44KB
        • SHA256 8bbfad954b6974658204688933912330dad582e5bd4952f9b8dd6555a2277521
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.InputModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.InputModule.dll
        • Size 27KB
        • SHA256 25aee4094389081ce9b5e41370ed0af9a78c19e2507e147bbe985a5c2dd61eb9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.InsightsModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.InsightsModule.dll
        • Size 13KB
        • SHA256 7526e8a60810e94175fc56c108b7c837be517660c20977e88f1b30b9d4c473ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.JSONSerializeModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.JSONSerializeModule.dll
        • Size 26KB
        • SHA256 4ce151f41d3d8535dc24681f07b9b012d6e5cabcf530c321a3e3474de7cb4a76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.LocalizationModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.LocalizationModule.dll
        • Size 26KB
        • SHA256 151cc33909df18677670bb7b5a3cd46379412b5aaedc410a631a53d9a2827042
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.MarshallingModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.MarshallingModule.dll
        • Size 81KB
        • SHA256 cc256c3680b4081749d4a3e4f3d2943b3a98176711aee4a31af54ede2fc9863b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.MultiplayerModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.MultiplayerModule.dll
        • Size 17KB
        • SHA256 d924529d9f486fe14d44f339f62e7b83b6adb79a9270c060791d8fa7cee5eb22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.NVIDIAModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.NVIDIAModule.dll
        • Size 39KB
        • SHA256 2dc914502d224ae8dff7ca96afb441e53318f22321ae3cb21838aba1125f150a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.ParticleSystemModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.ParticleSystemModule.dll
        • Size 167KB
        • SHA256 d350cc166eb610592699d2f72e22576f0881646874352f813318e93aa14963fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.PerformanceReportingModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.PerformanceReportingModule.dll
        • Size 24KB
        • SHA256 12a3b90d24f921a77fbfad61216878c672ccc6528097434bf71883eafab15120
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.Physics2DModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.Physics2DModule.dll
        • Size 565KB
        • SHA256 9343ad720947120fb6c4e07b3e60d4d22e5d3e9488476e834cf39e7cf219afb0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.PhysicsBackendPhysXModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.PhysicsBackendPhysXModule.dll
        • Size 13KB
        • SHA256 1edf23c0bc9c5daab74a8a9e21d41024f445a6a8ecce675b930d1ea8c31cb172
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.PhysicsModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.PhysicsModule.dll
        • Size 177KB
        • SHA256 f42b3a41b153871454a45f01d56edfb0c23b5f6a015babe9ab422e4ee768df8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.PropertiesModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.PropertiesModule.dll
        • Size 129KB
        • SHA256 205a2b8f2e148ff1ba0851cc60d4398fdbb25514b619cefc51376c8d247f3ece
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.RenderAs2DModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.RenderAs2DModule.dll
        • Size 24KB
        • SHA256 49432469ae14700fea7a2753ef3fc4e14206cbc2918beac89c56a052ac4b563d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll
        • Size 23KB
        • SHA256 73234ea5e05281a0427382af552151926d29eed881b3bd983e8908a9827b68de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.ScreenCaptureModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.ScreenCaptureModule.dll
        • Size 25KB
        • SHA256 073f991892652a1570ba18eb9425e3ecd4295b099a0e0d0385264f68fec7fb95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.ShaderRuntimeModule.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.ShaderRuntimeModule.dll
        • Size 24KB
        • SHA256 42037af16bc9215b20ff9231f5df9842b1d79ed9cc9e64a0496e6465a60f413d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityEngine.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\UnityEngine.dll
        • Size 192KB
        • SHA256 95d13d61a2a035537d1c5ba55a91233789dd27407ec600b4543980f045bde201
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscorlib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Managed\mscorlib.dll
        • Size 4.4MB
        • SHA256 6c76e06e6d44cf0f39bf59e6a90770968b70093ad4c1572dfbc5e46e431c5fbf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unity default resources

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\Resources\unity default resources
        • Size 5.6MB
        • SHA256 fb2492cd1ad7c38dda8a4ce5f1a1fb57edcff44e3ae250b263e44beae3660ec4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RuntimeInitializeOnLoads.json

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\RuntimeInitializeOnLoads.json
        • Size 4KB
        • SHA256 91f1245255c4c66604a672179d7df714a887aa282d70364ce49fbd826f895fa2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ScriptingAssemblies.json

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\ScriptingAssemblies.json
        • Size 4KB
        • SHA256 61707c34340cbbb40297c75664d98ac589eb4e7eeb31c68a8c7fbdb97e6a484a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.info

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\app.info
        • Size 23B
        • SHA256 998328cc16d106e024558184aeaee6c4a0113850cd98cbb4e926b80bba25e116
        • MD5 SHA1 SHA512

        boot.config

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\boot.config
        • Size 156B
        • SHA256 292affcfaabd8e92ec90b6465a5c2fc1c9fa6a24213bcc05c83d4923e2e0be2a
        • MD5 SHA1 SHA512 TLSH

        globalgamemanagers

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\SexLingo_Data\globalgamemanagers
        • Size 218KB
        • SHA256 6dda1003db9592fc9c1827ad47995a1fff51612aa7fb58e632f14c694ec59136
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityCrashHandler64.exe

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\UnityCrashHandler64.exe
        • Size 1.5MB
        • SHA256 043996479f30c535c580c4286d517400ce8408ec9862fc86baced42c78c9d9c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityPlayer.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\SexLingoItch\UnityPlayer.dll
        • Size 34.2MB
        • SHA256 a2022611884470ddab23927a3eb7bbaef3924c18972d30ba7b5330a8fd25bcc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4892-406-0x000001AA8D3C0000-0x000001AA8D3C1000-memory.dmp

        memory/4892-413-0x000001AA8D3C0000-0x000001AA8D3C1000-memory.dmp

        memory/4892-414-0x000001AA8D3C0000-0x000001AA8D3C1000-memory.dmp

        memory/4892-412-0x000001AA8D3C0000-0x000001AA8D3C1000-memory.dmp

        memory/4892-408-0x000001AA8D3C0000-0x000001AA8D3C1000-memory.dmp

        memory/4892-416-0x000001AA8D3C0000-0x000001AA8D3C1000-memory.dmp

        memory/4892-415-0x000001AA8D3C0000-0x000001AA8D3C1000-memory.dmp

        memory/4892-417-0x000001AA8D3C0000-0x000001AA8D3C1000-memory.dmp