Resubmissions
19/07/2026, 04:09
260719-eqvndabt8r19/07/2026, 03:17
260719-dtdzcsdv9x319/07/2026, 02:57
260719-dfxvbac17t7Analysis
- user interaction
yes - max time kernel
177s - max time network
214s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
19/07/2026, 02:57
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Deltarune.rar
Resource
win11-20260513-en
11 signatures
900 seconds
General
- Target Deltarune.rar
- Size 572.6MB
- Sample260719-dfxvbac17t
- SHA256 c742c71b84cda3affd4c128da5bd3c6d6fdb657437cdf08c3bc91a488cf27c79
- MD5 375195f9834e5b384cbd41b59dc03fae
- SHA1 a77c16e4da9381cc6ce1d2090d9bcaff021836ba
- SHA512 14865fa66c6e44fa9516e7ace485bb72ac41d04214b6ecc103d9ad59331d46fcd1592a01674abb87776de8b7472cac53c611d681beec06388b6aa6e3b0690552
- SSDEEP 12582912:DTKStJFwrzr0OK35XKUr01miIoDFfVeWTqmscV1xMBHCTOG:DPIzrxK35Br0ZxDFfVeWHH1+BHGOG
- TLSH T12859337BE34050C7913993ABABFB7A65CA72D161198787F0EFDA060569EF1CC40D6CA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 4 IoCs
pid Process 3444 DELTARUNE.exe 4528 DELTARUNE.exe 544 DELTARUNE.exe 428 DELTARUNE.exe - Drops desktop.ini file(s) 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini svchost.exe -
pid Process 4224 GameBarPresenceWriter.exe - Checks processor information in registry 2 TTPs 8 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString svchost.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 svchost.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString svchost.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 svchost.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString svchost.exe Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 svchost.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz svchost.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 svchost.exe - Modifies data under HKEY_USERS 3 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D svchost.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "1" svchost.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "2" svchost.exe - Modifies registry class 3 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2824035265-2271499813-2042964211-1000\{F8150384-EA5A-4462-AC0A-CF007F861FEE} svchost.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2824035265-2271499813-2042964211-1000\{832B27EE-C738-4D0A-BD8C-2C16FBCAF71A} svchost.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2824035265-2271499813-2042964211-1000\{9BCE5E2A-68A7-4E16-9EDF-1521E12DEB91} svchost.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4404 7zFM.exe - Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 4404 7zFM.exe Token: 35 4404 7zFM.exe Token: SeSecurityPrivilege 4404 7zFM.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4404 7zFM.exe 4404 7zFM.exe - Suspicious use of SetWindowsHookEx 9 IoCs
pid Process 3444 DELTARUNE.exe 3444 DELTARUNE.exe 4496 OpenWith.exe 4528 DELTARUNE.exe 4528 DELTARUNE.exe 1556 OpenWith.exe 544 DELTARUNE.exe 544 DELTARUNE.exe 4056 OpenWith.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 544 wrote to memory of 428 544 DELTARUNE.exe 93
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Deltarune.rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4404
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4452
-
C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\DELTARUNE.exe"C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\DELTARUNE.exe"1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:3444
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
PID:4224
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:4496
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:2540
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵
- Checks processor information in registry
- Modifies registry class
PID:3384
-
C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\DELTARUNE.exe"C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\DELTARUNE.exe"1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:4528
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:1556
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
PID:4372
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵
- Checks processor information in registry
- Modifies registry class
PID:2996
-
C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\DELTARUNE.exe"C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\DELTARUNE.exe"1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:544 -
C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\DELTARUNE.exeC:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\DELTARUNE.exe -game data.win launcher switch_-1 returning_02⤵
- Executes dropped EXE
PID:428
-
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:4056
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:236
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵PID:4972
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\DELTARUNE\dr.ini
- Size 247B
- SHA256 43c16a227ccc808714e80690e64a6a7a6bf7d308cc2be9fa377e1e3c7db992a9
- MD5 c28d1fcf093516d230871020427fae8d
- SHA1 4a57a3d0733293f636ace6796697490c207cb1cb
- SHA512 4385d9239fc4324880435493a785929a622fc4a37d7d5af14a3a0faba07ce6e773377373ed92e767f11fb114b807d0cc11e812c422cc5270f72112c3fe5d5a28
- TLSH T1B5D004C40905CC94DDE68C670812B1002A3DF7DF4CC0C4D102E83B2E8A5DC318B0E062
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\DELTARUNE\dr.ini
- Size 247B
- SHA256 d023fec6e5037d096a3e58716cacd93a9630412e3b04f854be2c50b08f39effc
- MD5 75048ac0fd72e5c120f5f9cbd7136199
- SHA1 04be34946d4c021c03d2d0ffca2ac872fa78f5d5
- SHA512 9c4c22de4ed8f43ef7b26f25bb2236e84683b9fc359eb0eb6a4a09eed51faea500b449d69725904aba06521540cce552eb09d70046352bfd5756685487f492a9
- TLSH T12AD004C008058CA0DDE68C270802F2002A3EF79F8CC0C0D102E43B1E891DC308B0F063
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter3_windows\AUDIO_INTRONOISE.ogg
- Size 253KB
- SHA256 39e9dd180519d1929d280799ea8bff77ba899653de79e0954221fec14b1eca7b
- MD5 b918e8a58a182e585f600d51155925af
- SHA1 f2d74872892dc877dd8d3729aa3f74d563efd7bf
- SHA512 e36d2647a48425e37ecfca24eaf31e52f88e875ad96683dcf3f66c349508d773301470c424d2c13ad982995d211c8cb3eda144d1b83bdc20231c9dfe177d45c2
- SSDEEP 6144:UzZeLWdUvibJO49P4cd0pjHtlbiun6dpSiOa2rVEQAmdPO:UzZelKjPpd0Ftlbiun6Sjru5oPO
- TLSH T1674412758D212E57E3D39939342742CECFF53C7804207AFA102BBA5F1B7B2952DA8265
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter3_windows\snd_closet_fall.ogg
- Size 116KB
- SHA256 49ade98cb1534fad9ff07b18b448d1b67563365f606275a8a230b279d1b5a3d2
- MD5 063bd2ff1f1911c99b0697d14308c1c1
- SHA1 82370dcf1c6864205027edfb3714edc5dbfe45ae
- SHA512 d44a4be6cff8e542a8d892f575b4549b50fda026bf7c796cd2be7f6a98b0ab798d613ea9785f8a028a89f8ed51696a62628f1946dd7c0f43f0412b8c8facf953
- SSDEEP 3072:t6Q9OFELSLuD3rk4mDtSDpexQSRu7EyuvfcT/QKFCbDGK7OXi:kQ9MNLGhmGpwQ5ElsL7FCbpEi
- TLSH T102C302E99D168BF3EE8E187044BB63B53EF15E3866C113A2C261B0791EB6B256031C84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter3_windows\snd_closet_impact.ogg
- Size 78KB
- SHA256 a041d05cf35d235e2bf9fde25a71e06d6e11efce33d4246b30c5d562556d848f
- MD5 c7ed25446d9d34af39b7582d8986c6b3
- SHA1 3fd1b13fdbd11ce06eaaf1f55d443baea3f89d16
- SHA512 d3f7f1a9c17225e6e58f7cad7bd002cdc6462cfd232d63e1c41b4fbad9936dac84096e34f9b63d61fe69e95c678b6af209e184ce330eee4113057e6eeae15a2c
- SSDEEP 1536:Vp7JDmbGG6VRDpav+72cWLpSrjGLkZLOQcG7o99ToRJBZzKtbO:jJKbr6h72cWLucG7W6Yg
- TLSH T16773026F8215A3BAF472B4B279029161347E3F2ACBB4CBE1B3C535BD29F4A185840771
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter3_windows\snd_paper_rumble.ogg
- Size 30KB
- SHA256 2a063a900e21794fadf11f7d8f3d17c7bcbf8cc90dec11975163078ce084e6ff
- MD5 40d9fb6cd468b63073854b11b8162ae5
- SHA1 547462ef3ea62cfa28c239d1715fcbbdab8e3ad0
- SHA512 9c0b1ebc1507720010e52330cd739d4c57742d95e387633e0e3701fa03998d34ec1436a6600f7d4e0c9ffb2c166f8ab57ddbc98bf49d48ca24daf10c2ec1d2b3
- SSDEEP 768:4giyQrBxf/CYBfTUoaghYsb/6l2mNWIK9:C7f6YBksuEIK9
- TLSH T1FFE2F1CC8178D184FD234472E2B47741CDA7768845A361CE3A5C90EF0AF6635F9EA6E1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter3_windows\snd_paper_surf.ogg
- Size 30KB
- SHA256 8bc383e9cd6d40891304bee271da152af16a2293af1289f66d222a48c592a1b3
- MD5 1c469264e56d565596e9b5cc0165eb77
- SHA1 8066b21e59328e62421e9e4fca4cf89e3deb4234
- SHA512 1e2802fd8dca140cf700fddea0442902caaeea3a02d81cb51c8d285a21d8dd1d04daa7a910d60e6e2bdd11184baa0d9b503add563d486e0015b1a7dcea1bd52d
- SSDEEP 768:rgi21JOoq5rBQwtuKq/yAyEs3qpcdMg9K048h0NBZQ1VvP8F:UXOh5rBQsuKOdKq6yw4vBe1mF
- TLSH T135E2E14ECD50946BF80941F6982EDB7DCAFAF8544AAC03FD8332B16D49A0672A0399D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter3_windows\snd_rurus_appear.ogg
- Size 60KB
- SHA256 a55f77023e0bcb6181094cbc844cc04a7130aaebcaa07766a0a7afa7892223fc
- MD5 46f88c456820cb4d2f6b34635ba4942c
- SHA1 677580359b80e2b38ddcf821bfed02a5beea1c7c
- SHA512 0484a224e152112acc43176c143b3f6720ca89682ac8ec6327f71643af9369f0700feed1a42d85734f68292627d7d7e91818ad8b420f98203d56868a96fa7902
- SSDEEP 1536:LTTikY4tW03yBpjJyklxnuRTEHB+GT9gPCIEs544tKe:ukVw0iBVJxnuRTEHB+GBkdx5Fl
- TLSH T11B530217776C1A58CC1FF17E55334D3A42493CFE93A08BEF96A51A7E1AB3A34A834124
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\options.ini
- Size 63B
- SHA256 9661cdf7dd64de452729351b70833d24ca37ab80b3254c0a52b08c28bdca2e49
- MD5 4e554f6b4b521be7ed253b013cff5d84
- SHA1 26bfc481755ba9c3fe2270fc12a9429d3a418ab7
- SHA512 1aff52ca99ffaeb5dc47ce90df972b7ae9f1bbeff1972793ee573a72f859f0cda239135f35f8396f8c810070c6eac88a183400937b6c2c76e49078276e7c82ae
- TLSH T1A4A0025016308F8A517870B4949653B90BD25A181229511C9E1039C71F96E13506D0BA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_bigcar_yelp.ogg
- Size 7KB
- SHA256 7227d899a1d8712dc069f3b3bc7229899865e425e21256636bc8c5605ea77ba8
- MD5 5702b26db546b5fa9c26289b9bc43b93
- SHA1 c1137e9a277734366bfb5ba7970e14eb2a266f8f
- SHA512 2aa88fb385cb24eec6037413c3cc9f7c441cc541e712ceec5ef83391086ef5551bf57e8f1af1d65fda673debbb50e168d0549cf579bb0d94c013fff96ecf09e4
- SSDEEP 192:tDJopTxIXg1fnEObzc4akbTC3cUwl27LQblj9RfyzH5nvmhp:xiJKXg1/E6c4tbTCsa7LQb19NkHpm/
- TLSH T198F18DE8C5F4EE97F4BA38B464141B913FDA752C33BEA1D2FF49122E0297814CD402A8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_dtrans_drone.ogg
- Size 188KB
- SHA256 f800be1425e584bfb3a602401d7213a83a137d2dd3872ae6cd062aece8eaef2b
- MD5 0b597daa614408ddbaa1975842a9b3b3
- SHA1 b9bc54a8fde24d4e136f25027b0b8f541bcbf43c
- SHA512 8dc4f5225951862c9bec8e4fae47c1a501af2ef0e9d3a23fcfa8d50def2f83a4a2756b4829f7fe5d1c326ecf566b1eca15675eb21ca9bb3feb60517521bac192
- SSDEEP 3072:7roSIEIBsNi1zgMpWcQA+Qv7Btu7b4Q+Syzh1Et+m0BkJl1bX8XPCm8ZyL:7kSAsNi1zTpWh78BgbNqh1Ol1T8XPCji
- TLSH T173141223EC9E6FCAD144763602B75B473503BDE50FE285E7FAF0A814161A626E4BF148
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_dtrans_flip.ogg
- Size 37KB
- SHA256 53c83f9a19ad956a22312941dcf6492e48bd43bf7de22fc2683dded6ac0e35b8
- MD5 51048bb67d91c9164fb7bc58e927288d
- SHA1 899d4ec459cbd8817c72daa342f760de042f5499
- SHA512 591d0b96bfcd2bc0381d3866c1c7ec122d2273fc7c918c22b1fe94f7cc8f5a209e9ba6cdbd803266975ad0d1b7f3cf486acab14053134561176879b7f422200c
- SSDEEP 768:M4PHdqdXMDoTwJHOddgd+QX4gPrUJm3BlgGC+IC:4XMkTyOIlX4wgUxyaN
- TLSH T12F03E11ABBCA08ADD116A9B5CD31C6563348B7B8BF7615C3BB458F61C5728B264B30C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_dtrans_heavypassing.ogg
- Size 27KB
- SHA256 7af68ffbf6fff282f839e40dbb6fd0cc44f72a0c48d372aaf4d6ca39b908b8e3
- MD5 95b41929ccb24c2b07bcf3a5fbdb7ebf
- SHA1 1de68642e473b4aff1cef63578d8fdacf5764ca5
- SHA512 f716d1499f903f249bdec22c4f0db49f5cf6c002f719558a7370d0b1f44a7d48d2c7b21a1b6f64c6ad67639e78bd8b6b2da84c3ffe3823f0414bc5383dfe1fe0
- SSDEEP 384:YtDzCPWKkeRCKjk4RZwa+gJvzj3Jgqhr3FurfU4vMK4NsjW3aAKtpy+A8I:Y4PzkeUWw8zLlV+fUpKFjLhnyf8I
- TLSH T14AC2E019D53DEB77F15E29B7F1786A62684022F33AE887C76308A33509DD509B8930E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_dtrans_lw.ogg
- Size 80KB
- SHA256 693a127d51c1ffdf2c196496cf0b95aefe0c8365bae39ead34a20645882ce5c5
- MD5 17c3b4b7050a4a496ec3053452298c69
- SHA1 1fe870ae818d1ae0fb61eef0bac263a15c6f2576
- SHA512 33745693ff2327a7266563b36bafbd8fa398e5a91cb53953a69abd64f93987f45fdabc9ead5ead97924899e9b457af5990886895a725695df392232bd9bc65aa
- SSDEEP 1536:Fh78r1C8X2w6PLZLY8GWhOQ0VeXgvhepQxT+THrm+hZ19qeRTRZCQdw4uR:n8BCTFLYFWhOQBwvh9xSHK+hZrRlZC2o
- TLSH T1F4830266EB9A8E80F4265E31D0780AF5293491A4C7A0C7EE739D16079FF9D603DC05BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_dtrans_square.ogg
- Size 26KB
- SHA256 bed1ee68a913c8900ef63fe6032728833362706f0e98b72e7a5b53965bc9b1cd
- MD5 8a711625145c06aecfa1ada89f96da8d
- SHA1 7733d4a6efcd3cf15788e42efece74eb6d996b20
- SHA512 baad1620d022e50a2d0d792ec955086c1e40b9bb8c72f9d9d647a7a5097dc08ae536b063691801a0cce90034445e08c4a0a27eb2124a4b0c09b171dec376d122
- SSDEEP 768:r4PDXo1vn6C5Y6bnQ4oUFFVbE6dNz+tLPHL6BVkA:FRdeUFFe6dNitbHmUA
- TLSH T1E5C2E087D5ECDB66DC0784F00978238B165072B86A31D3FBEB1B96F94FAE71156A06C0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_dtrans_twinkle.ogg
- Size 52KB
- SHA256 af31b48ba91d8932728027d5f5fac8e4a47e4f0ca88e68827ccb1be1376209e5
- MD5 5a6f6cd8f8cb29ca0e0c94f4f69bdcf8
- SHA1 f27d99c86a94ce4feef11138788dd4f8be106776
- SHA512 323c145474a12aa0035651f8fcbf473d96ad3a7097efa31e972299c6eaf73009df8ada080d940ac07cc8c7975b7d7e4428ef358baa906c5caac55470af20aff7
- SSDEEP 768:EVf/u8/UUkC+vIbEJmWkdsltwPwJDrNt7+h91jXANplSjnQmk/pTManX:ExRsxcuRkdsl7FZ1SuZT/X
- TLSH T1BB3301F8D9484BFEE8CF24F97812D34474F81834709463E99568F94A9DBAC207E539C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_fountain_make.ogg
- Size 84KB
- SHA256 523da55498ad60313855e2befefb6659ef7eb79c78a5e0b9e194bb4027e66379
- MD5 6e9d3ebc5443326e112226932cd94561
- SHA1 301f7b2a89b0760bc728f54f9ba273ed2cce2e80
- SHA512 f856c0f50e00c2212a1132a6961058b2411e399c39ee396e79c4a9e2a7284e18a506a9f73b005cd65c2f4cb7f7934daacc0e05599a4d7442f2065b8c7df8677e
- SSDEEP 1536:kMYxvl6/84QExxIIsjK/XpGimB0DaGSNCKfC2m+Qn2I1EV6G/CFCGfmndO1+rIuF:kvNkWjK/XAimB7G6CR2m+Qnc6wCUGf+j
- TLSH T10F8302BFFE84E868F54656F70ABA211DD2F94180029C98EE94D1F650E5F28C218065F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_fountain_target.ogg
- Size 4KB
- SHA256 aed05ae33c93d24da26f34b13b477c194ae963a2a1b511a232a61c5496d90eb0
- MD5 67a2c565f995865a1db09be83a7f1bd1
- SHA1 ef716c42c972e556037771e3d18977d03146c8b2
- SHA512 d327dc516c81ddc6be081571c94f230566b2aeddac0c094bb0c3e299d507173999f3395716000bcbdab307cafc13e8e8edc5ad2df6c6caefc1f6375c2f18bb52
- SSDEEP 96:qMuLAfY5gK6f9bJN0ctsp8OOSKPPPJeslbbTZhcWGz2s:oAg5oV9N0cB/DRjjcWG2s
- TLSH T11A911AD9A8A0F043DC0328FB566F0A1C27D2A409EC3BD5DAAE1019FC8E63DD564E05C8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_ghostappear.ogg
- Size 17KB
- SHA256 aa1855e7494c691056ebf8db149fc8cb292fbaa925f547e1373f761964432ca3
- MD5 9712eb470af1b2341031baf436e433da
- SHA1 2144a5a89c1ea68998269645b019c96e9be8ce5b
- SHA512 5f2fb3a827d8dd351b73a6551d3369b17755b42f09296fac774e15faf4c9b9765ea8fadb377d98b16e671fda20b86e3e08bdca1de2d524441ba580a897e06f48
- SSDEEP 384:3YFQJi+oFu7qgMfISs8d8Vo2cQGm7d3GWGQdf+dYp0mWrkiMCTQc0XB:3YFLTFuhMfvslMmhJRjWgBGQX
- TLSH T18982C053D12EF506C00388F63BFB120A95C1B5ACA7FAD5D6C884D4F8EA7499D81A90C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_great_shine.ogg
- Size 20KB
- SHA256 8f5a5053cd175683cdfa3830b73f7fe1b7203b679c4809dfdc08b4c761624de3
- MD5 29b9e9be74517abe7cd0cebda0100213
- SHA1 3cb0bd2782d3d6b3cdf65d7a5009f6f29979cec2
- SHA512 28a918ada16ae66bdbbb6c1491ed12ad201e8190a06c1e17d7787371f12faf2115b804b8c482b11657aa6c6d926f44fe38102fc09291b7e02609a8d067e0064a
- SSDEEP 384:xiJKXg1/E6cZGV8mRLysmBMZijlhjDJVZCWCOyqVQRkZyqjAC6mCwDnGeEousSUD:W/E6iGBmBrdDEevMk4qjt8AnGeEvS
- TLSH T11F92E158E8F6F89DE2103DBCA40D2A69F3E312132D7A6DC5F7EA175E4892BE0C435108
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_him_quick.ogg
- Size 34KB
- SHA256 0ef382d5298b2d8daba246a46db398cb4dfc626a57c9c6f9595f1d9358442d36
- MD5 597ede9cae463224df535f7903a314d8
- SHA1 b1d07da3ea3f5e49c15e1745bd9dd66454af83e1
- SHA512 47bb56b51397bb6639ec709fcf57be755b7e4b6627bfb07214d1650671b8d0e0be724ec33732579e5a2f75b6a13099c67b12ee729f6da7d021219209624ecc92
- SSDEEP 768:J4PK2u6hLDIrvKg7AyerhFzQS+1DW4tQdjaNsfzpOsU3X1:au4HcSgUrPj+1DWYUj5zzUH1
- TLSH T168F2F18EFE88F20ED4B3557E18A06FFB02C816E4965244C1C70957B98DED00E7A614FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_hitcar.ogg
- Size 10KB
- SHA256 b86b266cc572933a8882d26a0729225d6e308f5daefbc5fdf3a28c2e645992e3
- MD5 108ef3f257635a11357145914e7e7d7f
- SHA1 511e25f67fdb912b3f70ff5f73f477a7d7ff4d10
- SHA512 811c8edee9e3d99eed06a06daa41a72bf9aaa4281797d67257888821450934b4d8dd90a108b5074b7512922a1be51da3f1a656e65ba7b97f9b1c39ad4bee7e62
- SSDEEP 192:pDJoVt04HsbS9aw8wmuGPzq3cXSJRdmalBjJ6r8FQnM+:1iVO4SS9awbvDqS0alBjgr8FQnM+
- TLSH T1E3227FD9B5F4B467EC337076B63D162D168E1EC81D35D3CAFE74343A097984D84A4868
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_hitcar_little.ogg
- Size 8KB
- SHA256 559bed038778c622a85aa718fdc7ed713a8316b62ee84acccd56dfeaea2aee6b
- MD5 46a371150de31b6fa26e9a0665783628
- SHA1 3263db8f9858261f3b9e8476bc65310d5d3ad856
- SHA512 8ca3b057d72482bdc9d68b85662aebbfc43e1f057f98a2a3bcc72810c68f00ba823e8f43a1699f9136c90eb52f305b72d3a0f8da3e6e33db548a614a8fdd0971
- SSDEEP 192:gDJoVt04HsbS9ad3SPxcCgoVm3P27tGmT/C+FuC6CPA:CiVO4SS9atmLgoh9FuN6A
- TLSH T1A1029EC4EDB8F260D9257034366696F127742A0C12384BC2FF647229C677D0E48D4CC1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_icespell.ogg
- Size 34KB
- SHA256 b1768b33d89ef31c72ea113d46cb6d4cf7038dc81490aca3efa7c500c633ce43
- MD5 f73b8638c7fa295d2d101dd9d4a5da73
- SHA1 fc9e741277c0ff97131528fab5b42c9146a237f8
- SHA512 efa9a141af6faf04a5f929cc2c1e6f8b25bdff139a4ea8d151014dcc6309d693141b473606fd3cede6c4f98e4f0f22c4dbc675dada6a2ecb0f1c7c10a5f9f53a
- SSDEEP 768:ngi5OTO69F0eDCYQ9/XmONO3Ikzuu8Bm0TFp4bfXSL:mb0eDC79vLc4Nuo7I/E
- TLSH T19DF2F138813E5264EC0B12F5959DCF33CA59BD844452DAF6B2CB401F42F670A99539FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_revival.ogg
- Size 44KB
- SHA256 e9dc59893281d2fd3cd06b38376f1d3de2f060ae1e144cb0f584916aee73b0b3
- MD5 c7173576340af49fe80c1dd733d4501d
- SHA1 ce02b42c1c6140f63971c96086de67b9cef960af
- SHA512 a5645c4982b8fbecffab9855dc8e9ce8b540b1e48fae0dcf95a349c5417772ade7de3e26c949e3151090f24878c44e057db1ca5dc19dd8ed4159445e822a3562
- SSDEEP 768:W/E6EN2PcRW73Rp8yc6yd4xQlWwLQNYTX3krTwMccwhjB0baDZUPhy5rpS:ORLccoyc6yd94wDTHywZwG/vS
- TLSH T10C23F192E37DCCC1F13B3578E2150FA23D654C9A3AA43DE0F53B25115AEAF976803129
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_smallcar_yelp.ogg
- Size 5KB
- SHA256 7bbb80dc81429345569d7eb6567f1068015cfa12012b85ee954d24b73458cc28
- MD5 1e5291165d0c0fed2cafea09d4831583
- SHA1 9e4378d717313dc11f23882060921f30e7e1d360
- SHA512 733a171c13120fd0c5758f159cfb99d6de31c5c584f583cb269102b766c69869a8529f0e5db251a40a9b8def9e9be4ea3ca4fcad86de1f48c106a9538391f3a3
- SSDEEP 96:IzOrVko1BJoQSHThf5mfXgFjQq6eno3ObmkP6PePQ3p/DSnY5UQF9dlx/L9lCXdo:tDJopTxIXg1fnEObzcMQ3pbSZMhzeO
- TLSH T1DBC15DE7E1B8E446D46930F461150B627FB5B9782026D6D1FB8A137E0492F91C9202EC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_snowgrave.ogg
- Size 43KB
- SHA256 e34f9737fb330ca8e32e10842b1fff51fcf19d94ddb3e63294864d2ccfcefa34
- MD5 4ee930c5506a1d4059330b4197ab1b41
- SHA1 a7b0240b88cbfdb175322f0b15fa888ef5ff4c7d
- SHA512 0dbf34e3043730cefc7c696582c3cca52b7fd33be9520f35f6964b293fdd60a5d4ae0326961ad61b527db46fe6ea35f9bac1e157efd1f3683f5faf3d1038874b
- SSDEEP 768:fFCJwblIrblVVOcMev5l59WOD3/gA38zdKHaZLN7ZXd+6XaOncnfZqor/YYSZRGE:fzblIrbDVOcDv5l5cOr/F3VH6XM6XVnn
- TLSH T1581301676BAC8D0DFA0534FACEE98C10EB496F76087CD7610128DA700CE388B84903C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_spell_pacify.ogg
- Size 17KB
- SHA256 7cdd4890c8c6e134f5f37f4635447fe3ba0d108545ba030f968c212b0c119752
- MD5 03dfa5d2499ac3ff64379b30e87c9765
- SHA1 86cf0009fe669557e0ae7bdc8cfd7a40a3a8bfe6
- SHA512 920d660c9282a3e6b2ad658cd6d659394654d4aa8f361983bbf1d2c8f089f5a204925499c417055aa9a6a3b0832b6b6b83191ef8b83e2899dac9ead864bcca9f
- SSDEEP 384:MYFQJi+oFuRxu/SP+4boH1e/gKfSpKAR2sBr5/8pna3HQ:MYFLTFuR871KfQR2s958qw
- TLSH T15D82C0E28564B013DC2149BE25FF4A0533673766DB4AE9E9CCC56BF8087689718320ED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zE43179FA9\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter4_windows\snd_usefountain.ogg
- Size 109KB
- SHA256 f1aa3197d0ee44afe3c58fb72dc9daf18c2a92abeb9e5cb0b11bca49445fbc3e
- MD5 d69b08e2917175936e148719397a6d7d
- SHA1 e49ecf54f9536813d6041b47538b2aed0d5ae4ba
- SHA512 610f29188e401bb5dee9107be7a852eb078811a2b674f4e6df09b7b1e920c889360659a7697115edc63f2365628ed1eed16bfc65fc911cb764511b76bba9d769
- SSDEEP 3072:65CVS8r8TmbmvsY/XoqDovFMaS9Y+EHDiK9aDJ:65CVS8YTmyvsQoq8vDS9iDl9w
- TLSH T166B312E3FB3B918FDC3A74F99E125F81767F85E183A90C26760C42BD60A4D25A990247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\DELTARUNE.exe
- Size 6.8MB
- SHA256 b882cc1879ad8f24c63fa6e4f47a8fef9a01065ee61ad6220beed9932b04e7ed
- MD5 7bf3cccc2e54481ced3a149e1a083684
- SHA1 ddd9992ca1ae2e7eb8f63b4b20c63b430dba4026
- SHA512 9e29c01120c1f145363c1d0e2cdbd764a50dbe875191b98839ea37a7cafaed160a654d88cfbd84b73c5e3e5cc4bea863373d2a3062205f768191fe6ccec843b9
- SSDEEP 196608:nbP4YyBOMDt0q3LM76lz38SmJPcZoOxCeW00q+Ux/agp:HE8S2P5Dhgd
- TLSH T108766B8632A4C1DDD167803CC55696FAE2713C41CF5197CB2AA0BF6E3F37AD409BA621
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter1_windows\audiogroup1.dat
- Size 8.2MB
- SHA256 f007d82c5e133b56b9c068fac8e83211c9b6b6b4a4264a956c83edf929132182
- MD5 d3be22a0384784cbe28d1461b2207a31
- SHA1 630a1f14f4d86fa0ace6f2d7fcc5055350a6bb32
- SHA512 d46c5f294e95b7e0c484c79a8a7a448310f8c5f5080dfecb60b172864d74c49db8d88ca15cad85dc6bec1add3f141e807c1c7ac7ab898f761ccdfcb369733a0b
- SSDEEP 196608:7580I5inIquXnXrR/02U/hD7ZnyPvLWhVWc9BfO1dNjCEjai:980I58IqWb+/hxyPKhVWaBfO1d0Ejai
- TLSH T174968B82F342D940C556BA3A4D53DBE04732FE59AF06431B3051BB3E3EA36C15EAA6C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter1_windows\data.win
- Size 11.6MB
- SHA256 4b19ab7d5790655c703cdba63d0ab7067d77aad1cbc08d9d7f9dc1e8f75b4b77
- MD5 72d3cc23bd2e4040088c37b0e2896535
- SHA1 6fafbff89d7b7ffff712d88178cf29b04d9399fe
- SHA512 c4f18d268c7b110ec28c1ca477e4cb5dba6b6bf754493d4833c5833f6586ca086a949abe7f33b50f004d34316823d60a05ad03a9c282bd0338f176a0aea6322d
- SSDEEP 196608:TRK3KONgNmdCEcdZgsaupUPZFNtAfsOjoPIr:TU3KnmYdZgsaupUP3NEsur
- TLSH T107C64C37B482ADF5C920A236CC56AD4AB011FC039F5406173995DF5DEEF261C890EAEB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\chapter1_windows\lang\lang_en.json
- Size 530KB
- SHA256 6a1d6cfd166bc7220a8440e19a4dfbde923056e2af333bc00b1084a11953c08f
- MD5 9bfc053526938db6239093d35f1c96fa
- SHA1 10d4ed9d5d875bb8d398aac6b8d35e315e096742
- SHA512 c961aa8df868fd84bb1d61abca54d0f4c1bf8ac4aedfc73a39e0f8e2d890fa466d2515658cb54656298b228d45ac4de0942ea7ba590de2bab1d445486de823f9
- SSDEEP 3072:XkVAtcJP6RfpZh0YNcAotsjOoeO1SRXyiJtrB4XY4r+hr5YVs+zB8JifxxQotoTD:DN2L27bjIv6VSt5Kf4
- TLSH T1E4B4DC3FD6052C0318229919D90B53503A815F9FC4FE5A2A66BECC1ABE7A71805DDFB3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\data.win
- Size 2.8MB
- SHA256 609c603a54cf0b89797bf39422a32ca7b4dcc00df3a72fa11afedf36929739a1
- MD5 ddedbbd10ff129b49c64dbefaa763c6a
- SHA1 d6234c818655b05d73593f5d728a4b8fbc83330f
- SHA512 3da5e090ef2171e36f37e417a3bad202d75de3c4578b9377566097f755341c7e18cd0167a96a271095609cbfce0a98aff8dee68a77809ddc6663cfb5ddf895f2
- SSDEEP 49152:f5DZWPfLUOQDK3BkBm5ojwLhuTpkLQ8uMQObCa4RfUk:fRZeLU03WB8ojwcTpR8uMQObCa4Rf5
- TLSH T11AD5BF92F442C950CC374B3ACE62AE9142327C15FF1A521B3484FF1D75A33D1EA667AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\mus\AUDIO_DRONE.ogg
- Size 182KB
- SHA256 2775a00f8fe492efe5ecc7a513e32b0ce407d1848db16ef9686caf9a2c8f54f2
- MD5 163fb3286bc2b230da452acfb277dc12
- SHA1 10c9275b962402fa50c3ecb7840e843f0a123bf7
- SHA512 c173defe913a518cb8bce05b9311bf655d70dec17946c7c8d0404e1ca752362e51eb3dd6a136118e66c2ca7f6729c07e2721044566e01fb16baffaf8fdbf4691
- SSDEEP 3072:hZpNq73zho5rdhsfkRsdk3V7P7Udk5/GVFGIj23UTHssQZOwdMYHrn9M1aZzp:LpNyohRsdA7PZ5GDaWsfvLnrF
- TLSH T1480412442BBA614AEA0EB2F0476D0F625F9FF27C42718FC63ADA66EC57760215641CC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\home\nottherealsocksfor1w\Pirated_games\Deltarune\DELTARUNE\options.ini
- Size 40B
- SHA256 26e34ad8f1f4d5aabe3b32a44847cdbe86adbf94a5c05eefb1f3e578c53a64c6
- MD5 ef900b6dd54f275fecffda75fe8fde76
- SHA1 719141a1327500304add951f2b7a422e8fc28b52
- SHA512 af3908d0fe22fc77f5e3d22a37484595c5cd5f95b45e7eadb509fa0ab6e1d1d4fadeda1fce2616a9da547ac8f05f428ac4ded91506dfe5cc88c09a6651e1e626
- MD5 SHA1 SHA512
- Path C:\Users\Admin\Videos\Captures\desktop.ini
- Size 190B
- SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
- MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
- SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
- SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
- TLSH T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
- MD5 SHA1 SHA512 TLSH