Nok-Windows_x86[.]zip

resource
unpack001/Nok-Windows_x86/Nok.exe
unpack001/Nok-Windows_x86/Nok_Data/Managed/Assembly-CSharp.dll
unpack001/Nok-Windows_x86/Nok_Data/Managed/Mono.Security.dll
unpack001/Nok-Windows_x86/Nok_Data/Managed/System.Core.dll
unpack001/Nok-Windows_x86/Nok_Data/Managed/System.dll
unpack001/Nok-Windows_x86/Nok_Data/Managed/UnityEngine.UI.dll
unpack001/Nok-Windows_x86/Nok_Data/Managed/UnityEngine.dll
unpack001/Nok-Windows_x86/Nok_Data/Managed/mscorlib.dll
unpack001/Nok-Windows_x86/Nok_Data/Mono/mono.dll

Nok-Windows_x86.zip

SHA256 22c1a3f70bddff7620733349236cad54c869c685f8e3875a38b4ae9e8153f51c
MD5 02175029aa59894c5d9bd216ad05bbd2
SHA1 2486e5685b605f8d84e11463fe01458e10875198
SHA512 62674e3f186bb6d46b03364e04999dce39184d7f32fa5366e24b8c5d06fd670969cbdb11a2a0a30318e0482a552ece811ed346b8d9bacfcf9908c83991afbb0c
SSDEEP 196608:qSKvKwV2bKCfg4dRn6nyOcPT1EY1qjo+PYKn6RY4aNyXCTo9w+CE0QFCY:q5KwV2bKIg0nQ8PptMj8Kn6ztfRblQY
TLSH
T160B63335D3FA0622E013BE722E43BAEAF4889565D11C4D4776027376DD9B098E3D878E
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok.exe

IMPHASH d95d6ea9375a00177f1911909ce801e6
SHA256 a8306d925d37eb725b59a8b8259bcba6a710adccd2f02ab1b55df93d1a43a68d
MD5 2ce8a47525f96ad3d2180012ea39dc10
SHA1 5a0ccf497eb4def1a464c24037fe22a45c142c88
SHA512 623710a3ed5d7adad2bd761022a6625ac47c80b23b54564ba13d4e563d6c7bda774e68e5f7229b8c349703f47c465debfc474321c4b8643eed9199212a81fb51
SSDEEP 196608:oKx81sE0EZgkLKNFcLhHw3MUoczZPm7TK0YfJW6HKRpzr91KFuK0qIxewx3kowTe:oKx81sE0EZgkLKNihH+MUoczZPm7TK0P
TLSH
T1E6C6BF21B980C0B1EAD65176B57D3B7F987CAE22072D41C367E835589F702E17AB9383
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4856259

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\BuildAgent\temp\buildTmp\UnityPlayer_Symbols.pdb

hid

HidP_GetButtonCaps HidP_GetCaps HidD_GetProductString HidP_GetValueCaps HidP_MaxDataListLength HidP_GetData HidD_GetPreparsedData HidD_FreePreparsedData HidD_GetHidGuid

ws2_32

htonl inet_addr closesocket WSACleanup getsockname connect gethostbyname htons WSAStartup WSAAsyncGetHostByName WSACancelAsyncRequest gethostbyaddr getaddrinfo freeaddrinfo getpeername getsockopt send recv shutdown listen accept ntohs bind recvfrom sendto __WSAFDIsSet WSASetLastError select setsockopt inet_ntoa ioctlsocket gethostname socket WSAGetLastError

kernel32

WriteFile FindClose DeleteFileW RemoveDirectoryW FindNextFileW FindFirstFileW GetModuleFileNameW lstrcpynA lstrcpyA lstrcpynW FreeLibrary GetCommandLineW GetProcAddress LoadLibraryW CancelIo GetOverlappedResult CreateEventW ExpandEnvironmentStringsA CreateMutexA GetCurrentThreadId RaiseException GetCurrentProcess GetModuleHandleA GetSystemInfo GlobalMemoryStatusEx GetUserDefaultLangID GetVersionExA GetComputerNameW LoadLibraryA GetTempPathW GetModuleHandleW GetCurrentProcessId SetUnhandledExceptionFilter WaitForSingleObject CreateThread OutputDebugStringA SetLastError GetEnvironmentVariableA GetFileAttributesA GetModuleFileNameA GetCurrentDirectoryA ResumeThread GetThreadContext SuspendThread GetCurrentThread IsBadReadPtr GetWindowsDirectoryA GetFullPathNameW CreateSemaphoreA Sleep WaitForSingleObjectEx ReleaseSemaphore InterlockedCompareExchange SleepEx InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection SetThreadPriority CreateEventA GlobalAlloc SetEvent ResetEvent FileTimeToDosDateTime FileTimeToLocalFileTime lstrlenA GetFileTime VirtualQuery GlobalMemoryStatus GetSystemTimeAsFileTime MoveFileExW CreateDirectoryW SetErrorMode WritePrivateProfileStringW HeapAlloc HeapReAlloc HeapFree RtlUnwind EncodePointer DecodePointer ExitProcess SetConsoleCtrlHandler ExitThread DuplicateHandle GetCommandLineA HeapSetInformation GetStartupInfoW GetStdHandle HeapCreate IsProcessorFeaturePresent InterlockedIncrement InterlockedDecrement HeapSize GetLocaleInfoW UnhandledExceptionFilter TerminateProcess GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount InterlockedExchange GetConsoleCP GetConsoleMode FlushFileBuffers SetHandleCount GetFileType SetStdHandle LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CompareStringW SetEnvironmentVariableA CreateFileA WriteConsoleW GetProcessHeap GetFullPathNameA lstrcmpiA MapViewOfFile CreateFileMappingA UnmapViewOfFile VirtualFree VirtualAlloc GetProcessAffinityMask OpenEventA GetSystemDirectoryA GetDateFormatA GetTimeFormatA CreateSemaphoreW CreateMutexW SignalObjectAndWait ReleaseMutex FlushConsoleInputBuffer GetVersion GetFileAttributesW CreateProcessW SetFileAttributesW GlobalLock GlobalUnlock GetFileSize ReadFile CreateFileW SetEndOfFile SetFilePointer CloseHandle IsDebuggerPresent WideCharToMultiByte FormatMessageA LocalFree MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetLastError TlsSetValue TlsGetValue TlsFree TlsAlloc InterlockedExchangeAdd FileTimeToSystemTime GetFileInformationByHandle PeekNamedPipe GetDriveTypeA FindFirstFileExA GetTimeZoneInformation ReadConsoleInputA SetConsoleMode GetCurrentDirectoryW GetDriveTypeW WaitForMultipleObjects TerminateThread SetThreadAffinityMask HeapValidate CopyFileW HeapWalk

user32

EnumWindows SendMessageA SetForegroundWindow ShowWindow IsIconic RegisterWindowMessageA GetUserObjectInformationA GetThreadDesktop GetParent SendMessageTimeoutA GetWindowLongA SetWindowPos GetClientRect CreateDialogParamA SetWindowLongA GetDlgItem ChangeDisplaySettingsA GetWindowPlacement AdjustWindowRectEx EnumDisplaySettingsA GetDesktopWindow UnregisterClassW GetRawInputDeviceList GetRawInputDeviceInfoW GetRawInputData RegisterRawInputDevices wsprintfA GetCursorPos GetWindowRect OpenClipboard EmptyClipboard CloseClipboard SetClipboardData CreateWindowExW DestroyWindow OffsetRect DefWindowProcW DestroyCursor LoadCursorA SetCursor GetSystemMetrics GetDC ReleaseDC CreateIconIndirect GetUserObjectInformationW GetProcessWindowStation wvsprintfA MonitorFromWindow GetCaretBlinkTime PeekMessageA GetMessageA DispatchMessageA ValidateRect EnumDisplayDevicesA EnumDisplayMonitors GetMonitorInfoA LoadImageA DialogBoxParamA IsDlgButtonChecked CheckDlgButton CreateDialogParamW PeekMessageW IsDialogMessageW TranslateMessage DispatchMessageW MsgWaitForMultipleObjects EnableWindow SetWindowTextW RegisterClassW PostQuitMessage SetWindowLongW GetWindowLongW SetCursorPos ClipCursor IsWindowVisible ScreenToClient GetClipboardData IsClipboardFormatAvailable SetCapture ReleaseCapture UnregisterDeviceNotification RegisterDeviceNotificationW SystemParametersInfoW ClientToScreen GetAsyncKeyState ShowCursor GetFocus SetFocus WindowFromPoint MessageBoxW RegisterClassExW DialogBoxParamW GetAncestor LoadIconA SendDlgItemMessageW SetDlgItemTextA SetDlgItemTextW MessageBoxA CopyRect GetKeyState EndDialog

version

GetFileVersionInfoW GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

ole32

CoCreateInstance CoTaskMemFree CoTaskMemAlloc StringFromGUID2 CoCreateGuid CoInitialize CoUninitialize CoSetProxyBlanket

shlwapi

PathFileExistsW SHDeleteKeyA PathCanonicalizeW PathIsDirectoryW

advapi32

CryptGetHashParam CryptImportKey CryptVerifySignatureA CryptDestroyKey RegDeleteValueA GetUserNameA RegCreateKeyExW RegQueryValueExW CryptDestroyHash CryptHashData CryptReleaseContext RegOpenKeyExW RegSetValueExW RegCreateKeyA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey RegisterEventSourceA ReportEventA DeregisterEventSource CryptCreateHash CryptAcquireContextA

gdi32

SwapBuffers GetObjectA GetDeviceCaps ChoosePixelFormat SetPixelFormat DeleteObject CreateBitmap CreateDIBSection

shell32

ShellExecuteW CommandLineToArgvW SHGetFolderPathW

opengl32

glIsTexture glGetTexParameteriv glTexSubImage2D glPixelStorei glCopyTexSubImage2D glDrawBuffer glReadBuffer glDrawArrays wglDeleteContext glBegin glVertex3f glNormal3f glColor4f glEnd glHint glLightModelf glLoadIdentity glMaterialfv glMaterialf glReadPixels glFinish glFogi glFogf glFogfv glLightModelfv glLightf glLightfv glTexGeni glTexGenfv glTexEnvfv glScissor glViewport glColor4fv glLightModeli glColorMaterial glGetFloatv glMultMatrixf glMatrixMode glPolygonMode glFrontFace glClearColor glClearDepth glClearStencil glClear glIsEnabled glStencilFunc glStencilOp glStencilMask glDepthFunc glDepthMask glCullFace glPolygonOffset glColorMask glDisable glBlendFunc glEnable glAlphaFunc glTexEnvi glTexEnvf glDisableClientState glEnableClientState glColorPointer glVertexPointer glNormalPointer glTexCoordPointer glDrawElements glGetString glGetError glDeleteTextures glGenTextures glBindTexture glTexParameteri glTexImage2D wglGetProcAddress glGetIntegerv wglShareLists wglGetCurrentDC wglGetCurrentContext wglMakeCurrent wglCreateContext glLoadMatrixf

winmm

waveInOpen waveInStart waveInGetDevCapsW waveInGetDevCapsA waveInUnprepareHeader waveInPrepareHeader waveInAddBuffer waveOutGetPosition waveOutReset waveOutWrite waveInClose waveOutOpen waveOutClose waveOutGetDevCapsW waveOutGetDevCapsA waveOutGetNumDevs waveInGetNumDevs timeBeginPeriod timeEndPeriod timeGetTime waveInReset waveOutUnprepareHeader waveOutPrepareHeader

oleaut32

SysStringLen SysAllocString VariantChangeType VariantClear VariantInit SysFreeString

msacm32

acmStreamConvert acmStreamUnprepareHeader acmFormatSuggest acmStreamOpen acmStreamSize acmStreamPrepareHeader

imm32

ImmReleaseContext ImmSetOpenStatus ImmGetConversionStatus ImmGetCompositionStringW ImmAssociateContextEx ImmAssociateContext ImmGetContext ImmSetCompositionStringW

dnsapi

DnsQuery_A DnsFree

iphlpapi

GetIpAddrTable

winhttp

WinHttpGetIEProxyConfigForCurrentUser

??$Transfer@V?$StreamedBinaryRead@$00@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@Object@@IAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@Object@@IAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Object@@IAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@VProxyTransfer@@@AnimationEvent@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@Behaviour@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@Component@Unity@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@GameObject@Unity@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@GlobalGameManager@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@LevelGameManager@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@NamedObject@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@Object@@IAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@Renderer@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@AnimationEvent@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@Behaviour@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@Component@Unity@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@GameObject@Unity@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@GlobalGameManager@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@LevelGameManager@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@NamedObject@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@Object@@IAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@Renderer@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VSafeBinaryRead@@@AnimationEvent@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@Behaviour@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@Component@Unity@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@GameObject@Unity@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@GlobalGameManager@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@LevelGameManager@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@NamedObject@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@Object@@IAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@Renderer@@QAEXAAVSafeBinaryRead@@@Z AgPmDestroySourceConnection AgPmEventEnabled AgPmEventLoggingEnabled AgPmSubmitEvent NvOptimusEnablement NxCreateCoreSDK

Name

.text

Size

8.4MB

Virtual Size

8.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

185KB

Virtual Size

816KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.trace

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

553KB

Virtual Size

552KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

370KB

Virtual Size

370KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=2, id=149, productName=VS2008 build 21022, version=21022,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=402, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=23, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=29, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=38, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=543, id=1, productName=Unmarked objects,

count=8, id=152, version=20115,

count=68, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=177, productName=Unmarked objects (old),

count=876, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=1157, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,

Nok-Windows_x86/Nok_Data/Managed/Assembly-CSharp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e9251b39fe81b375ef72c119bfb70803e730c0de2f8acb6ac393ceccdd2eadfa
MD5 74d8b0b2b903b5fec425796702040854
SHA1 b2c7dc0e44704d70e2627218f9c9c4288d42e078
SHA512 0010c933f20fa112217404df49059a495d9fa90ebfc1893b10af75f2923257b3b86c3501d3e8f0b9e6f4447bb19c3a4ea97c760728d520b92720761dbb027261
SSDEEP 384:w1RZjUrmTtP/cJwIgvMVGx1+Q+ggFjK/:qTysvMVGx1kk/
TLSH
T19B72F8466EDCC533CABECBBA21E31A0053B4612BAA62E74B4DD890E61C437C45D457EF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Nok-Windows_x86/Nok_Data/Managed/Mono.Security.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 771b880c88222293b8b7d42d5739fe9715f1781e8fbd03df0c5895456b1663b9
MD5 1e6dd1d6ee5957c1b9784bcac60cce48
SHA1 d963df0552785c6b84c5b217179621016d93edba
SHA512 786e80aace3b12f8d053267fd05796c6208b017f30652e677bbab7a1cbb624998dfeb15df41f54f8d4cc5454bcc96140b8e29f63d1037c3ede5c55c48518be94
SSDEEP 6144:FyH9c7SO2eZzIaY7HJR80wopCgtwGu37NZhmH7O:QSvsaYs0woIxGuLd
TLSH
T1775439086BE8DB67F1BF63B8D0F05414CBF8A156A1AFFF5E1C8610E818537519A01A6F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Nok-Windows_x86/Nok_Data/Managed/System.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bce32628839b438a6d2ca761e76441036ea42b88e8045e7ff8b8f80baad12904
MD5 d51f6bcdbbd1c98b2ad213753e4a4886
SHA1 06de557b35d3e7f2bfdf87b42babc46a65a88279
SHA512 0c2ef5aa416bfbfea35a0a93d06d8614ee51d87ca1ca781ed38111d6e155850115a8ae5d13c64a9ff1ad4abc70cea051e9dec5d9a1d367f2fe8ad48c51322359
SSDEEP 3072:qpHBMkH/a1xU5aV2JkMeztKlRbCuoy7ytyOygjqVwnGk0E7ENAbGCkbwfAXM6Obk:qphYIk0lRbMOfrE4KyM
TLSH
T11C444D9497EC9613E3FF93B1E870070507F4B4A6B0A7E30E589851F65C4BB816E463AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Nok-Windows_x86/Nok_Data/Managed/System.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6d8c5632b9bf153e4d0adfe66002d9664ea42e23b8d1150d6f42fbf02662c241
MD5 73012040e1c97f6a40c9d7596d090aba
SHA1 05a7a0fb4329ef28c6fbeb47c299cf3a3e9b2942
SHA512 227774b8388a63809873bfd740ee2b9feeaccf25a8d155691ee58829dedeb2fb949a2596109119d40237d32c31c4c1b64a07b984db3b3d43c833da3e1faf23d1
SSDEEP 24576:iCXZPkxkUE+UY+Dqzogz0yTJG8zAFPMwSRw:iCXZSMDqIyTJG8zAFPMw
TLSH
T14B354A2467E4CB2BE1BE67BDB0B210115BB4E045F3A3EBAF559865981C83B405D063BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Nok-Windows_x86/Nok_Data/Managed/UnityEngine.UI.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab307b110e5dabb01259cae0136baad736ff6fe527da4f7c1be056a93ee7fda1
MD5 68519cabcf1471451857a94af3a09bf2
SHA1 cf33a5a230297931a2a24487bba2354bc3a97a8f
SHA512 7f1b85495d03b6e69c671988c4e51f82e77e72ddc8de2a30bfec1ff8b9325eb4107a68754a6c0d1bb03e20038f538932f41ccefa937c1249d4391527124f0094
SSDEEP 3072:osufnfNVLUeSXhmxOWV3b+dd3tg23rSSwSGVRy9OnCQMn5e73/X7YF7I9ya:4NVLHOWpbadLbyR1CQMn5e73/UF7I
TLSH
T10EF319A46699CE7BD3AE0BBFD0D0555187B4835AF68AEB8D58C0A4ED2C4335059023BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Nok-Windows_x86/Nok_Data/Managed/UnityEngine.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 09059125883c6d92f01923610de96621e846e6ec3e06cc94a1b7c41cd184971d
MD5 ca765bb8fb6997d5cae382f18d6e6061
SHA1 da71d367dc554c9ec415a2b845a2ef583eab5c65
SHA512 4268afa6e4c2ab99e0721366ba177c636f76c281d74ca8f423cc661fe7faa92d96db3d58b712b40f72a5c8db111e3f1eca504571ca24e537da983eb8d89dbf74
SSDEEP 12288:1pF6NR1DerfA8f+skiipyfdvg0rCOxoua:kOfBfbkiipylZrCOxPa
TLSH
T18ED41A7E33F4995BC8AE9375E0A746209234C10662CEF7CB2566916C3CD335B4E36AC6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Nok-Windows_x86/Nok_Data/Managed/mscorlib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d3e940034039795bbcc39f1f56b481000d1c99fa26c74f8ea4957e78230e89cd
MD5 5279cde1af35d54b9e1d2de7f5d52a77
SHA1 814e1ad50c0da8d1fcaeec681fae00ce5849f7ff
SHA512 904b26b71ebcc69c55d8b71579f0b40a9b4edde661c37c6bbd8f1cd57ad6b715c5879c8e3d06496c3f78c091408ebec9303c0736e6e643538d259d762a405159
SSDEEP 24576:BzY6J4MVrdw/7icW4Eir8bghNg0UnGE5VVX3URpZM/E+JizBU:Bt4/7icrr8bg+bVVX3URpZMs+J0
TLSH
T12BC55B50ABF5CA2BF57A6775E8F101145BF0F842B3A2E35F361812B80C93744AC56B6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Nok-Windows_x86/Nok_Data/Mono/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx

SHA256 d87d5196b2ae2abf4e673315e1fd22c3a44df80192f23e89b78108579c287524
MD5 66fed2411c14a0fc8ce4c593ef601bfb
SHA1 4680a34aae1193f1e4a6aac1a5dd3c307de257fb
SHA512 331874a9956c87db0646e4d21937a88009804a59fdf5f5882ea5b1dfb7dd7ef17724e09877d98f52e7327bbf38a46dde0c54d5c85f1e860b88322bdfad64679d
SSDEEP 768:M28utHkOFpMgMwP9h5Ij7khsp/6JtEZwMxVtkUI353cXyEyk3VbNb1gNuoT1y:ZDF6CdsCOZwMx3k5JYyklhxgRw
TLSH
T17743C4A0EF5C8D36499A52D9F88140CCB9BDC43291199CF3FCCDA12AF09CD6DA274766
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/Mono/etc/mono/1.0/machine.config

SHA256 1ba3755323483de257587a7276180c65d96824d441f95feb28f819e77a0cf767
MD5 8dccd9a98d2575162aa366224a983c08
SHA1 4eedcaa785182201857134d8432807bc30742f6a
SHA512 96b6beb2bf56334ad5e7d0b95079107ce736b45011679bf9a2ecd295636ceb7f0748e84bdebfdde37cfe45ab28716e4cc5fe2441e986777369a319cc0c5ecfc5
SSDEEP 192:lhUisXjWXWEeEe90sEG9+RbwlP/waMGyR29yaDVPpAayW2x02GFGyC2xI2nb2kZX:lhU/Dvmbw5t/
TLSH
T1C1721230670DBD1ECA4126629870A9D1067F7B4E96ACED4CA5FF232EE917087D3521E3
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/Browsers/Compat.browser

SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx

SHA256 ae044cd9cc2c7c42f8864195125ab440472d657e5f0d55e131f7890bd45c518a
MD5 3b3452c399f27a24ea5a589c7bfe750b
SHA1 b06cb1d09ad3bbdf1d8214c910e3da2a228d113c
SHA512 41c099350159e942be8bc04c8f59c7fb0fd4bd99db46f1c0158f0fa053c08ae0c73e9d169f6816b77376283cce5beafdcfe5d3d5e3b98e8b358d67c34b954a04
SSDEEP 768:6CEPutHjWpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/q6CdsCOZwMX3k5dWyklh+Dvbw
TLSH
T19F43D4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/machine.config

SHA256 2d2fccb3f1afe931f7f4df289caf9fcfa31578b4fb4e1f610d3530832848e70a
MD5 603173d56ace47a2d90b87ffbc3bfa91
SHA1 889d20428d2f8a60f7aeead5d0da4009200e5365
SHA512 7b8b8073ebae8a31605ab127e2549a013f59da5d4de0fba933aeca7119cfc937111e48a2354e41c794dc0082b6c08ad50724ae806fde8f95a946d55d2ebdb7f5
SSDEEP 384:PbBtBtWR5RwRqrR2RN3RPfRaRvRyRaRIKbX/yeRpQXWBnj3g:DuU
TLSH
T1DCC2F0703609BDAE494227235C54FA8046BF57196BA86C0CB5FF622CFD2688BD3132D7
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/settings.map

SHA256 ca89036b7d7f1ae9311a6a2fbcf05fc5b997bd43fd21dd54e11c18018ef65f08
MD5 55dac562878b7dd98ee8a7ad203a26e6
SHA1 d16baa15e7d3042bcf9d7318209c696f4daf2cb0
SHA512 987c5cd86a9825953de670e5c15404694feb15cd5fa9afa8af4c2d5bda9d805839c9695d44122b32e0ffafe08d720c3df58000e89c8822fd9a5eb28eaf2ad478
TLSH
T1BB511138F344B5F50782052EA45B95D243B6053FA77A499C31ACD13D6F2984B83B32DD
MD5 SHA1 SHA512 TLSH

Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/web.config

SHA256 3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
MD5 2b6303c4f12762b71051db6e947f90a4
SHA1 a4d7e05516f63d6ab67327b299d4fb2852cb840b
SHA512 80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86
SSDEEP 192:wcedeaZ0sEMYaWN5bs6yyzEVkEYEG/Z1f5v6CuCCrtQzPwkP/waeKjy:wj5YaWPs6/1zwya
TLSH
T1FE32BD34171DEDDD8B9066530420ABE162BF9B5A2744CD4CF1EF2329EB5548BE3611E3
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/Mono/etc/mono/browscap.ini

SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
MD5 378be809df7d15aac75a175693e25fbb
SHA1 2d5454e161de8a5b65910f27bd70d9d0ad8fa476
SHA512 d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363
SSDEEP 1536:D+dN5JLXlU4XteKJeYPMxBUm9huPj3bkeoO3cTKr0AzhjRzi0v5XfDlVlvr778BN:DYPEBOPjLkeOTA0AzhJMutEbbt0oK7M
TLSH
T18364FCC27495A47A9135DF3234F2D34957B39B9A8CBF9C4CD8628810DE61C0653BBAF2
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/Mono/etc/mono/config

SHA256 b585c70c70c88b3e03489361558f5d711c2ef71df9baaf37d92dbf95fbf6cd92
MD5 f95c345c1c53b820487f6b72e62d5485
SHA1 957e4e50e74c50347af92abf240c2c7aab3f3f79
SHA512 6b06434d07ee51be064a3efdca65b73e6c8e7560b43fb61633b08c7d2a0d792fe0670e57088c1dabd23929e0b7f7a27f65f503f2b640587042c8bbe98946368b
TLSH
T1FC318CDBE16C9DF9B071276592FEFBDC04B380A4CD1E31099E12DA411D25F9788439CA
MD5 SHA1 SHA512 TLSH

Nok-Windows_x86/Nok_Data/Mono/etc/mono/mconfig/config.xml

SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
MD5 f34b330f20dce1bdcce9058fca287099
SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
SSDEEP 192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag
TLSH
T1E9C25025B9FC9DE7050240236E61A1969F7383B7527C3808B0FD63989FAA54743932FB
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/Mono/mono.dll

IMPHASH e71f17aabd51a32437c625f2a9ded4af
SHA256 39c973c194e1e7267f87d89d108d716b33675394f964d323e5389bcd5ce40690
MD5 54abb7d839651acfe5a63b5a5d87ee2d
SHA1 62c3ade3cbf7bfdd10e704b03d93a15efe08733b
SHA512 04ad029ce8b411c9a6a2a71da5e59371e712a97079ff442c486769bf650af22a8e8f08bb5b5ed46aca4e53ec63bc43efaf46521b6f316c8250a3ea03532714ed
SSDEEP 49152:lUQlr0e+C/KtXF9RAfBbRrhApCHeT+eHPY5B2r5P7DS3SaNOz:TXCF/AfSHJrU3XO
TLSH
T1A0A57C51E952D332C082007E4025572A1ABB6C62FF3658D766D8B48FE9742F0A79B37F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

1144069

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\buildslave\mono-runtime-and-classlibs\build\builds\embedruntimes\win32\mono.pdb

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

ws2_32

__WSAFDIsSet WSAGetLastError select WSASetLastError getprotobyname getservbyname inet_ntoa socket WSACleanup WSAStartup gethostname gethostbyaddr inet_addr gethostbyname shutdown setsockopt getsockopt sendto WSASend send recvfrom WSARecv recv WSAIoctl connect bind htonl htons getpeername getsockname ntohs ntohl listen accept ioctlsocket closesocket WSASocketW getservbyport

psapi

GetModuleInformation GetModuleBaseNameW EnumProcesses GetModuleFileNameExW EnumProcessModules

winmm

timeEndPeriod timeBeginPeriod timeGetDevCaps timeSetEvent

mswsock

TransmitFile

kernel32

WideCharToMultiByte RtlUnwind IsValidCodePage GetOEMCP GetCPInfo GetStartupInfoW SetHandleCount IsProcessorFeaturePresent HeapDestroy HeapCreate EncodePointer IsDebuggerPresent UnhandledExceptionFilter FindFirstFileExW HeapReAlloc GetCommandLineA DecodePointer ExitProcess CreateDirectoryA MoveFileA LocalFileTimeToFileTime FindFirstFileExA GetDriveTypeA InitializeCriticalSectionAndSpinCount SetStdHandle PeekNamedPipe GetFileInformationByHandle FileTimeToLocalFileTime FileTimeToSystemTime HeapFree HeapAlloc GetFullPathNameA CreateFileA VirtualAlloc VirtualFree VirtualQuery Sleep InterlockedCompareExchange InterlockedExchange GetSystemInfo LocalFree FormatMessageW GetLastError GetCurrentProcess GetProcAddress GetModuleHandleW SetLastError LoadLibraryW SetErrorMode FreeLibrary CloseHandle MapViewOfFile CreateFileMappingW UnmapViewOfFile VirtualProtect WaitForSingleObjectEx ReleaseSemaphore GetTickCount GetSystemTimeAsFileTime QueryPerformanceCounter QueryPerformanceFrequency LeaveCriticalSection EnterCriticalSection SetFileAttributesW CopyFileW DeleteFileW WriteFile CreateFileW ResumeThread InitializeCriticalSection InterlockedIncrement InterlockedDecrement DeleteCriticalSection GetFileType GetModuleFileNameW TlsGetValue TlsSetValue TlsAlloc TlsFree LCMapStringW FindClose FindFirstFileW GetFileAttributesW GetFileAttributesExW CreateDirectoryW RemoveDirectoryW FindNextFileW GetCurrentDirectoryW SetCurrentDirectoryW MoveFileW ReplaceFileW ReadFile SetFilePointer FlushFileBuffers GetFileSize SetEndOfFile SetFileTime GetStdHandle CreatePipe DuplicateHandle GetTempPathW LockFile UnlockFile ResetEvent SetEvent CreateSemaphoreW CreateEventW SystemTimeToFileTime GetTimeZoneInformation GetComputerNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetEnvironmentVariableW GetLogicalDriveStringsW GetDiskFreeSpaceExW GetDriveTypeW OutputDebugStringW GlobalAlloc GlobalReAlloc GlobalFree DeleteFileA OpenProcess GetCurrentProcessId VerLanguageNameW CreateProcessW GetProcessTimes GetExitCodeProcess GetProcessWorkingSetSize SetProcessWorkingSetSize TerminateProcess GetPriorityClass SetPriorityClass GetCurrentThread GetVolumeInformationW WaitForSingleObject SleepEx CreateMutexW ReleaseMutex OpenMutexW OpenSemaphoreW OpenEventW OpenThread GetExitCodeThread ExitThread SignalObjectAndWait WaitForMultipleObjectsEx QueueUserAPC LoadLibraryA GetSystemDirectoryA FreeConsole GetThreadContext RemoveVectoredExceptionHandler SetUnhandledExceptionFilter AddVectoredExceptionHandler MultiByteToWideChar DebugBreak SuspendThread CreateThread GetVersion RaiseException GetEnvironmentVariableW GetACP GetFileAttributesA GetConsoleCP GetConsoleMode GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW GetModuleFileNameA GetProcessHeap GetFullPathNameW CompareStringW SetEnvironmentVariableA CreateProcessA WriteConsoleW HeapSize GetVersionExW GetCurrentThreadId

user32

SendMessageTimeoutW WaitForInputIdle MessageBoxA

advapi32

GetEffectiveRightsFromAclW CopySid AllocateAndInitializeSid RevertToSelf ImpersonateLoggedOnUser DuplicateToken GetTokenInformation OpenThreadToken OpenProcessToken LookupAccountSidW CryptReleaseContext CryptAcquireContextW CryptGenRandom CreateProcessWithLogonW BuildTrusteeWithSidW FreeSid GetNamedSecurityInfoW SetNamedSecurityInfoW GetLengthSid SetEntriesInAclW

shell32

SHGetFolderPathW ShellExecuteExW

ole32

CoUninitialize CoTaskMemFree CoTaskMemAlloc CoCreateFreeThreadedMarshaler CoInitializeEx CoTaskMemRealloc

oleaut32

SysAllocStringLen SysStringLen SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayCreate SafeArrayDestroy SysFreeString SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetDim

g_free mono_add_internal_call mono_alloc_special_static_data mono_array_addr_with_size mono_array_class_get mono_array_clone mono_array_element_size mono_array_new mono_array_new_full mono_array_new_specific mono_assemblies_cleanup mono_assemblies_init mono_assembly_close mono_assembly_fill_assembly_name mono_assembly_foreach mono_assembly_get_assemblyref mono_assembly_get_image mono_assembly_get_main mono_assembly_get_object mono_assembly_getrootdir mono_assembly_invoke_load_hook mono_assembly_invoke_search_hook mono_assembly_load mono_assembly_load_from mono_assembly_load_from_full mono_assembly_load_full mono_assembly_load_module mono_assembly_load_reference mono_assembly_load_references mono_assembly_load_with_partial_name mono_assembly_loaded mono_assembly_loaded_full mono_assembly_name_parse mono_assembly_names_equal mono_assembly_open mono_assembly_open_full mono_assembly_set_main mono_assembly_setrootdir mono_backtrace_from_context mono_bitset_alloc_size mono_bitset_clear mono_bitset_clear_all mono_bitset_clone mono_bitset_copyto mono_bitset_count mono_bitset_equal mono_bitset_find_first mono_bitset_find_first_unset mono_bitset_find_last mono_bitset_find_start mono_bitset_foreach mono_bitset_free mono_bitset_intersection mono_bitset_intersection_2 mono_bitset_invert mono_bitset_mem_new mono_bitset_new mono_bitset_set mono_bitset_set_all mono_bitset_size mono_bitset_sub mono_bitset_test mono_bitset_test_bulk mono_bitset_union mono_bounded_array_class_get mono_check_corlib_version mono_class_array_element_size mono_class_data_size mono_class_describe_statics mono_class_enum_basetype mono_class_from_generic_parameter mono_class_from_mono_type mono_class_from_name mono_class_from_name_case mono_class_from_typeref mono_class_get mono_class_get_byref_type mono_class_get_element_class mono_class_get_event_token mono_class_get_events mono_class_get_field mono_class_get_field_from_name mono_class_get_field_token mono_class_get_fields mono_class_get_flags mono_class_get_full mono_class_get_image mono_class_get_interfaces mono_class_get_method_from_name mono_class_get_method_from_name_flags mono_class_get_methods mono_class_get_name mono_class_get_namespace mono_class_get_nested_types mono_class_get_nesting_type mono_class_get_parent mono_class_get_properties mono_class_get_property_from_name mono_class_get_property_token mono_class_get_rank mono_class_get_type mono_class_get_type_token mono_class_inflate_generic_method mono_class_inflate_generic_method_full mono_class_inflate_generic_type mono_class_init mono_class_instance_size mono_class_is_assignable_from mono_class_is_enum mono_class_is_generic mono_class_is_inflated mono_class_is_subclass_of mono_class_is_valuetype mono_class_min_align mono_class_name_from_token mono_class_num_events mono_class_num_fields mono_class_num_methods mono_class_num_properties mono_class_value_size mono_class_vtable mono_cli_rva_image_map mono_code_manager_commit mono_code_manager_destroy mono_code_manager_foreach mono_code_manager_invalidate mono_code_manager_new mono_code_manager_new_dynamic mono_code_manager_reserve mono_compile_method mono_config_for_assembly mono_config_parse mono_config_parse_memory mono_config_string_for_assembly_file mono_context_get mono_context_init mono_context_set mono_counters_dump mono_counters_enable mono_counters_register mono_custom_attrs_construct mono_custom_attrs_free mono_custom_attrs_from_assembly mono_custom_attrs_from_class mono_custom_attrs_from_event mono_custom_attrs_from_field mono_custom_attrs_from_index mono_custom_attrs_from_method mono_custom_attrs_from_param mono_custom_attrs_from_property mono_custom_attrs_get_attr mono_custom_attrs_has_attr mono_debug_add_method mono_debug_cleanup mono_debug_close_mono_symbol_file mono_debug_find_method mono_debug_free_source_location mono_debug_init mono_debug_lookup_method mono_debug_lookup_source_location mono_debug_open_image_from_memory mono_debug_open_mono_symbols mono_debug_print_stack_frame mono_debug_print_vars mono_debug_symfile_lookup_location mono_debug_symfile_lookup_method mono_debug_using_mono_debugger mono_debugger_breakpoint_callback mono_debugger_check_runtime_version mono_debugger_cleanup mono_debugger_event mono_debugger_handle_exception mono_debugger_initialize mono_debugger_insert_breakpoint mono_debugger_insert_breakpoint_full mono_debugger_lock mono_debugger_method_has_breakpoint mono_debugger_remove_breakpoint mono_debugger_run_finally mono_debugger_unlock mono_declsec_flags_from_assembly mono_declsec_flags_from_class mono_declsec_flags_from_method mono_declsec_get_assembly_action mono_declsec_get_class_action mono_declsec_get_demands mono_declsec_get_inheritdemands_class mono_declsec_get_inheritdemands_method mono_declsec_get_linkdemands mono_declsec_get_method_action mono_digest_get_public_token mono_disasm_code mono_disasm_code_one mono_dl_fallback_register mono_dl_fallback_unregister mono_dllmap_insert mono_domain_add_class_static_data mono_domain_assembly_open mono_domain_create mono_domain_create_appdomain mono_domain_finalize mono_domain_foreach mono_domain_free mono_domain_get mono_domain_get_by_id mono_domain_get_id mono_domain_has_type_resolve mono_domain_is_unloading mono_domain_owns_vtable_slot mono_domain_set mono_domain_set_internal mono_domain_try_type_resolve mono_domain_unload mono_environment_exitcode_get mono_environment_exitcode_set mono_escape_uri_string mono_event_get_add_method mono_event_get_flags mono_event_get_name mono_event_get_object mono_event_get_parent mono_event_get_raise_method mono_event_get_remove_method mono_exception_from_name mono_exception_from_name_domain mono_exception_from_name_msg mono_exception_from_name_two_strings mono_exception_from_token mono_field_from_token mono_field_get_data mono_field_get_flags mono_field_get_name mono_field_get_object mono_field_get_offset mono_field_get_parent mono_field_get_type mono_field_get_value mono_field_get_value_object mono_field_set_value mono_field_static_get_value mono_field_static_set_value mono_file_map mono_file_unmap mono_free_method mono_free_verify_list mono_g_hash_table_destroy mono_g_hash_table_foreach mono_g_hash_table_foreach_remove mono_g_hash_table_insert mono_g_hash_table_lookup mono_g_hash_table_lookup_extended mono_g_hash_table_new mono_g_hash_table_new_full mono_g_hash_table_new_type mono_g_hash_table_remove mono_g_hash_table_replace mono_g_hash_table_size mono_gc_collect mono_gc_collection_count mono_gc_enable_events mono_gc_get_generation mono_gc_get_heap_size mono_gc_get_used_size mono_gc_is_finalizer_thread mono_gc_max_generation mono_gc_out_of_memory mono_gc_wbarrier_arrayref_copy mono_gc_wbarrier_generic_store mono_gc_wbarrier_set_arrayref mono_gc_wbarrier_set_field mono_gc_wbarrier_value_copy mono_gchandle_free mono_gchandle_get_target mono_gchandle_is_in_domain mono_gchandle_new mono_gchandle_new_weakref mono_get_array_class mono_get_boolean_class mono_get_byte_class mono_get_char_class mono_get_config_dir mono_get_corlib mono_get_dbnull_object mono_get_delegate_invoke mono_get_double_class mono_get_enum_class mono_get_exception_appdomain_unloaded mono_get_exception_argument mono_get_exception_argument_null mono_get_exception_argument_out_of_range mono_get_exception_arithmetic mono_get_exception_array_type_mismatch mono_get_exception_bad_image_format mono_get_exception_bad_image_format2 mono_get_exception_cannot_unload_appdomain mono_get_exception_class mono_get_exception_divide_by_zero mono_get_exception_execution_engine mono_get_exception_file_not_found mono_get_exception_file_not_found2 mono_get_exception_index_out_of_range mono_get_exception_invalid_cast mono_get_exception_invalid_operation mono_get_exception_io mono_get_exception_missing_field mono_get_exception_missing_method mono_get_exception_not_implemented mono_get_exception_not_supported mono_get_exception_null_reference mono_get_exception_overflow mono_get_exception_reflection_type_load mono_get_exception_security mono_get_exception_serialization mono_get_exception_stack_overflow mono_get_exception_synchronization_lock mono_get_exception_thread_abort mono_get_exception_thread_interrupted mono_get_exception_thread_state mono_get_exception_type_initialization mono_get_exception_type_load mono_get_inflated_method mono_get_int16_class mono_get_int32_class mono_get_int64_class mono_get_intptr_class mono_get_machine_config mono_get_method mono_get_method_constrained mono_get_method_full mono_get_object_class mono_get_root_domain mono_get_sbyte_class mono_get_single_class mono_get_special_static_data mono_get_string_class mono_get_thread_class mono_get_uint16_class mono_get_uint32_class mono_get_uint64_class mono_get_uintptr_class mono_get_void_class mono_guid_to_string mono_image_add_to_name_cache mono_image_addref mono_image_close mono_image_ensure_section mono_image_ensure_section_idx mono_image_get_assembly mono_image_get_entry_point mono_image_get_filename mono_image_get_guid mono_image_get_name mono_image_get_public_key mono_image_get_resource mono_image_get_strong_name mono_image_get_table_info mono_image_get_table_rows mono_image_has_authenticode_entry mono_image_init mono_image_init_name_cache mono_image_is_dynamic mono_image_load_file_for_image mono_image_loaded mono_image_loaded_by_guid mono_image_loaded_by_guid_full mono_image_loaded_full mono_image_lookup_resource mono_image_open mono_image_open_from_data mono_image_open_from_data_full mono_image_open_from_data_with_name mono_image_open_full mono_image_rva_map mono_image_strerror mono_image_strong_name_position mono_image_verify_tables mono_images_cleanup mono_images_init mono_init mono_init_from_assembly mono_init_version mono_inst_name mono_install_assembly_load_hook mono_install_assembly_postload_refonly_search_hook mono_install_assembly_postload_search_hook mono_install_assembly_preload_hook mono_install_assembly_refonly_preload_hook mono_install_assembly_refonly_search_hook mono_install_assembly_search_hook mono_install_runtime_cleanup mono_jit_cleanup mono_jit_exec mono_jit_info_get_code_size mono_jit_info_get_code_start mono_jit_info_get_method mono_jit_info_table_find mono_jit_init mono_jit_init_version mono_jit_parse_options mono_jit_set_trace_options mono_jit_thread_attach mono_ldstr mono_ldtoken mono_load_remote_field mono_load_remote_field_new mono_loader_error_prepare_exception mono_loader_get_last_error mono_locks_dump mono_lookup_internal_call mono_lookup_pinvoke_call mono_main mono_marshal_string_to_utf16 mono_mb_free mono_md5_final mono_md5_get_digest mono_md5_get_digest_from_file mono_md5_init mono_md5_update mono_mempool_alloc mono_mempool_alloc0 mono_mempool_contains_addr mono_mempool_destroy mono_mempool_empty mono_mempool_get_allocated mono_mempool_invalidate mono_mempool_new mono_mempool_stats mono_mempool_strdup mono_metadata_blob_heap mono_metadata_cleanup mono_metadata_compute_size mono_metadata_custom_attrs_from_index mono_metadata_declsec_from_index mono_metadata_decode_blob_size mono_metadata_decode_row mono_metadata_decode_row_col mono_metadata_decode_signed_value mono_metadata_decode_table_row mono_metadata_decode_table_row_col mono_metadata_decode_value mono_metadata_encode_value mono_metadata_events_from_typedef mono_metadata_field_info mono_metadata_free_array mono_metadata_free_marshal_spec mono_metadata_free_method_signature mono_metadata_free_mh mono_metadata_free_type mono_metadata_generic_class_is_valuetype mono_metadata_get_constant_index mono_metadata_get_generic_param_row mono_metadata_get_marshal_info mono_metadata_get_param_attrs mono_metadata_guid_heap mono_metadata_implmap_from_method mono_metadata_init mono_metadata_interfaces_from_typedef mono_metadata_load_generic_param_constraints mono_metadata_load_generic_params mono_metadata_locate mono_metadata_locate_token mono_metadata_methods_from_event mono_metadata_methods_from_property mono_metadata_nested_in_typedef mono_metadata_nesting_typedef mono_metadata_packing_from_typedef mono_metadata_parse_array mono_metadata_parse_custom_mod mono_metadata_parse_field_type mono_metadata_parse_marshal_spec mono_metadata_parse_method_signature mono_metadata_parse_method_signature_full mono_metadata_parse_mh mono_metadata_parse_mh_full mono_metadata_parse_param mono_metadata_parse_signature mono_metadata_parse_type mono_metadata_parse_type_full mono_metadata_parse_typedef_or_ref mono_metadata_properties_from_typedef mono_metadata_signature_alloc mono_metadata_signature_dup mono_metadata_signature_equal mono_metadata_string_heap mono_metadata_token_from_dor mono_metadata_translate_token_index mono_metadata_type_equal mono_metadata_type_hash mono_metadata_typedef_from_field mono_metadata_typedef_from_method mono_metadata_user_string mono_method_body_get_object mono_method_desc_free mono_method_desc_from_method mono_method_desc_full_match mono_method_desc_match mono_method_desc_new mono_method_desc_search_in_class mono_method_desc_search_in_image mono_method_full_name mono_method_get_class mono_method_get_flags mono_method_get_header mono_method_get_index mono_method_get_last_managed mono_method_get_marshal_info mono_method_get_name mono_method_get_object mono_method_get_param_names mono_method_get_param_token mono_method_get_signature mono_method_get_signature_full mono_method_get_token mono_method_has_marshal_info mono_method_header_get_clauses mono_method_header_get_code mono_method_header_get_locals mono_method_header_get_num_clauses mono_method_signature mono_method_verify mono_mlist_alloc mono_mlist_append mono_mlist_get_data mono_mlist_last mono_mlist_length mono_mlist_next mono_mlist_prepend mono_mlist_remove_item mono_mlist_set_data mono_module_file_get_object mono_module_get_object mono_monitor_enter mono_monitor_exit mono_monitor_try_enter mono_mprotect mono_object_castclass_mbyref mono_object_clone mono_object_describe mono_object_describe_fields mono_object_get_class mono_object_get_domain mono_object_get_size mono_object_get_virtual_method mono_object_hash mono_object_is_alive mono_object_isinst mono_object_isinst_mbyref mono_object_new mono_object_new_alloc_specific mono_object_new_fast mono_object_new_from_token mono_object_new_specific mono_object_unbox mono_opcode_name mono_opcode_value mono_pagesize mono_param_get_objects mono_parse_default_optimizations mono_path_canonicalize mono_path_resolve_symlinks mono_pe_file_open mono_pmip mono_poll mono_print_method_from_ip mono_print_thread_dump mono_print_unhandled_exception mono_profiler_coverage_get mono_profiler_get_events mono_profiler_install mono_profiler_install_allocation mono_profiler_install_appdomain mono_profiler_install_assembly mono_profiler_install_class mono_profiler_install_coverage_filter mono_profiler_install_enter_leave mono_profiler_install_exception mono_profiler_install_gc mono_profiler_install_jit_compile mono_profiler_install_jit_end mono_profiler_install_module mono_profiler_install_statistical mono_profiler_install_thread mono_profiler_install_transition mono_profiler_load mono_profiler_set_events mono_property_get_flags mono_property_get_get_method mono_property_get_name mono_property_get_object mono_property_get_parent mono_property_get_set_method mono_property_get_value mono_property_set_value mono_ptr_class_get mono_raise_exception mono_reflection_get_custom_attrs mono_reflection_get_custom_attrs_blob mono_reflection_get_custom_attrs_by_type mono_reflection_get_custom_attrs_data mono_reflection_get_custom_attrs_info mono_reflection_get_token mono_reflection_get_type mono_reflection_parse_type mono_reflection_type_from_name mono_register_bundled_assemblies mono_register_config_for_assembly mono_register_machine_config mono_remote_class mono_runtime_class_init mono_runtime_cleanup mono_runtime_delegate_invoke mono_runtime_exec_main mono_runtime_exec_managed_code mono_runtime_get_main_args mono_runtime_init mono_runtime_invoke mono_runtime_invoke_array mono_runtime_is_shutting_down mono_runtime_object_init mono_runtime_quit mono_runtime_run_main mono_runtime_set_shutting_down mono_runtime_unhandled_exception_policy_get mono_runtime_unhandled_exception_policy_set mono_security_enable_core_clr mono_security_set_core_clr_platform_callback mono_security_set_mode mono_set_assemblies_path mono_set_commandline_arguments mono_set_config_dir mono_set_defaults mono_set_dirs mono_set_find_plugin_callback mono_set_ignore_version_and_key_when_finding_assemblies_already_loaded mono_set_rootdir mono_set_signal_chaining mono_sha1_final mono_sha1_get_digest mono_sha1_get_digest_from_file mono_sha1_init mono_sha1_update mono_signature_explicit_this mono_signature_get_call_conv mono_signature_get_desc mono_signature_get_param_count mono_signature_get_params mono_signature_get_return_type mono_signature_hash mono_signature_is_instance mono_signature_vararg_start mono_signbit_double mono_signbit_float mono_stack_walk mono_stack_walk_no_il mono_store_remote_field mono_store_remote_field_new mono_string_equal mono_string_from_utf16 mono_string_hash mono_string_intern mono_string_is_interned mono_string_new mono_string_new_len mono_string_new_size mono_string_new_utf16 mono_string_new_wrapper mono_string_to_utf16 mono_string_to_utf8 mono_stringify_assembly_name mono_table_info_get_rows mono_thread_abort_all_other_threads mono_thread_attach mono_thread_cleanup mono_thread_create mono_thread_current mono_thread_detach mono_thread_exit mono_thread_force_interruption_checkpoint mono_thread_get_abort_signal mono_thread_get_main mono_thread_has_appdomain_ref mono_thread_init mono_thread_interruption_checkpoint mono_thread_interruption_request_flag mono_thread_interruption_requested mono_thread_manage mono_thread_new_init mono_thread_pool_cleanup mono_thread_pop_appdomain_ref mono_thread_push_appdomain_ref mono_thread_request_interruption mono_thread_set_main mono_thread_stop mono_thread_suspend_all_other_threads mono_threads_abort_appdomain_threads mono_threads_clear_cached_culture mono_threads_get_default_stacksize mono_threads_install_cleanup mono_threads_request_thread_dump mono_threads_set_default_stacksize mono_threads_set_shutting_down mono_trace mono_trace_cleanup mono_trace_is_traced mono_trace_pop mono_trace_push mono_trace_set_level mono_trace_set_level_string mono_trace_set_mask mono_trace_set_mask_string mono_tracev mono_type_create_from_typespec mono_type_full_name mono_type_generic_inst_is_valuetype mono_type_get_array_type mono_type_get_class mono_type_get_desc mono_type_get_modifiers mono_type_get_name mono_type_get_name_full mono_type_get_object mono_type_get_ptr_type mono_type_get_signature mono_type_get_type mono_type_get_underlying_type mono_type_is_byref mono_type_is_reference mono_type_size mono_type_stack_size mono_type_to_unmanaged mono_unhandled_exception mono_unicode_from_external mono_unicode_to_external mono_unity_class_is_abstract mono_unity_class_is_interface mono_unity_liveness_calculation_begin mono_unity_liveness_calculation_end mono_unity_liveness_calculation_from_root mono_unity_liveness_calculation_from_root_managed mono_unity_liveness_calculation_from_statics mono_unity_liveness_calculation_from_statics_managed mono_unity_liveness_has_parent_class mono_unity_liveness_mark_classes_for_intptr_scanning mono_unity_seh_handler mono_unity_set_embeddinghostname mono_unity_set_unhandled_exception_handler mono_unity_set_vprintf_func mono_unity_socket_security_enabled_set mono_unity_thread_clear_domain_fields mono_upgrade_remote_class_wrapper mono_utf8_from_external mono_valloc mono_value_box mono_value_copy mono_value_copy_array mono_value_describe_fields mono_verifier_set_mode mono_verify_corlib mono_vfree mono_vtable_get_static_field_data mono_walk_stack set_vprintf_func unity_mono_close_output unity_mono_install_memory_callbacks unity_mono_redirect_output

Nok-Windows_x86/Nok_Data/PlayerConnectionConfigFile

SHA256 7aa607b7a916abfbd1c730e9947b4038d84720b63dbd1a14edddd96eac951f8e
MD5 b938d899af9bf76471d4159ebdbfdacd
SHA1 1810efb9602c165624f6aec9ad8d2ec83190ba1d
SHA512 d7ca9693ef5e43720aed62a5e4cc04591b2b883e17c7f2c93ac6ba15367de674d00d359ae68383577f2154602e04ca6a1db69e05f4375d0feac37497a776724c
MD5 SHA1 SHA512

Nok-Windows_x86/Nok_Data/Resources/unity default resources

SHA256 d2d253bd1a60bf3579d0a24018fc0375788447015aac5de969d18117c3076b71
MD5 4700401d24dc0db0d73c8d12c99b24ae
SHA1 bcd7b7e51573bb1d86d5d6235b21351053e04f1e
SHA512 76a14ccab6df1888423050802221e94ac52751a53d71225351b2254de55d9c4015c44c66f9fcdb00be7adb2a2742ba816b29e079722388a1c80336efc656b478
SSDEEP 12288:xi/4xM/4sZ/48hzJNuK3aB7kJAiDmrvsfTP2:o/4W/4a/4cQByAiYvii
TLSH
T1FE755FE1D215FF3CCE22B0F686519C18D1A1BC961D3B8146BD0EB59E7871A94CA34B2F
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/Resources/unity_builtin_extra

SHA256 a79a9fbaa4ba8a4b3c60ec216793a71221ac908b2742aa4d2669f5d0a162fb4b
MD5 2a193f87d432cd044b5a279ebdd88bd7
SHA1 4184bcb714c710ce1440958742eabc55d0de808e
SHA512 9a2e97ba882a35e549daf402d4460ec0d9ece1bb8ad34b639a19847263e7af642d9c6d618f88f77f512a391d4afd74ad20cf4eb7d3c83b23d12625ba63650e5a
SSDEEP 3072:hWG7ZVyG+X59Brjrngt8sCQbN/eAzxhyZ3R7:hWG7ZVyG+X59Brjrngt8sCQIAzxhyZ3V
TLSH
T1D38453F5D704BF3CCD33B1FA86809C44A1A6B8565D3BC185AD0E819E6471AA8CB34E5F
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/mainData

SHA256 5de5aec4e5db4c758e5c0951bff15ca4371deb5c4a440f05512b120ff5d4a6fd
MD5 6fb6a9969ec4af1e859ad2d28d3d5a93
SHA1 871a3cb8e64b821f408ee796fc9924a5626553b9
SHA512 1122773b2c187331553351b7efe0d2e44c23fbeadee8920980888011edfd629961b44476ef369c0e54639aad54cc40d9d8c8183305d09b0a50ca1792a4b60e9d
SSDEEP 192:DfOM7bRv4bfCNV1SvKupQo1A7+3Y8+kB1rk4RqFNcdaj1wOs7Sa:HZ4mNV1SvKusC34kvrrQFr1OS
TLSH
T1999274459B924E9AC423EBBA25D34F40E631FDD4D703972721A0785D2CFA3EA2F59209
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/resources.assets

SHA256 3acf8b33e98ebf14b9508eb588d70deaf005efb09d175a3cc2573a1f19bb4a7e
MD5 b1c61f486e327fe33feade70ba67049a
SHA1 f338ec23418d338dd74111eaef4753f502e65266
SHA512 ae84cf7ecad0587f71e3584df8680d5f9ac60cebee595599dd75f4c38066650f04ca0c1120b060ed1b7aea57ab4f49e9d8b24f9f55690ae1248cdb9ebb74d9f1
SSDEEP 12288:YXJY6t+lDgwRGTy9m6ttLFSt7YpWJ5hIhCjVPgcp2ZDIOlQ1Vj+HY+:YiRlbVU67i7Y8bWCMZIr+HY+
TLSH
T1E1F402097A5DCE85E15EB2BB44636FA3C16FDCF009FC4D666A22330E9EF41C56D0126A
MD5 SHA1 SHA512 SSDEEP TLSH

Nok-Windows_x86/Nok_Data/sharedassets0.assets

SHA256 d2e68305040f42f372e87860e7da96b627a9f0bda13dd3c0a7489508da9ed3af
MD5 6185b6e0c4c7fd0922a8605e4f6dc49b
SHA1 e0525e4f8e627f73a1f4e595a6e5aacfbc29a493
SHA512 767b6e9932bbd01a98bf15dfa200376cd926d7f400b7f95117ab3f421cb9c5d15bf43dea810ed84174567464cabc1d0a4b026c838b503fc8b602c2730ea5fe2b
SSDEEP 98304:ncRE/DKhXlPY7UhSSlKxaPVHnDB3Trr9KQBmvAjLNvx1non+IqwU:z7U
TLSH
T16C8652A3A740FE38D82664B58DC0D934D267BC756D678243BCCA4F4B39736A58E3058E
MD5 SHA1 SHA512 SSDEEP TLSH

__MACOSX/._Nok-Windows_x86

SHA256 a669811f06fcb8c43e54e3d128e727caa882476183748241b62cead59215cc86
MD5 b989a0961fb2dfe8966924bbc8fdf385
SHA1 2991ded8185889d4b4b8abe272f8856aab171525
SHA512 f896c6dc45ef036572b0dad27300160fb340fbddb18627e112e51ef5e950d33f5c3ea4fdaf08f6c43c9d7e040277ea0ce0fd735b2db5219e94ed950eda551769
TLSH
T1ECD0C03832100425CC607030F98C0309F5AC44241217122F72FFC319034210100C4123
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/._Nok.exe

SHA256 cfb8216d6991fcb992c621a553baed1f8312c849063cbe2ecf9c114b82fb74c9
MD5 34bede8831a716075bbcacccc1c41e76
SHA1 c1f20f9b2f8ea5d4806d8bb8d1570881316365ba
SHA512 b5dc75e7dedbbee551ef21d752e72f0332e05f2fbe1c8a76049a64fdd2e25e4719a07be686d59f1dd8e500f42b5700172ffae3487a7b9654dbe4d71614814570
TLSH
T12BD01279221851A6DC647130A5D90346B9AC9824152B262B79AFC219076114214D912B
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/._Nok_Data

SHA256 3c244a2788b122b6cd354827a517c1aa76ed97f22b6f32b20d8d2d779eaea907
MD5 dc22ab7b499f4320d9a12fa28d168bf1
SHA1 0b07b02f73bd84c4e738bdbaa43b143d73983dca
SHA512 22b9b3f1fad85eafbb76a0ec698a1c59a2c11c5161a03af41122af7388efda6fb0f8ffb1395b177f429ac0212a9188882aa738bd0ae261f13b409a6fc6d78fbd
TLSH
T14ED0227922240220CC74703069880381B6AD89311217122AB1BF820D035120214D4113
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/._Managed

SHA256 3a5904faa114c2f7570fbf8a0ee0283a2eac79200aa94b0d39146f9f98929dd7
MD5 5831f411235e4045d702932f6e5fe4fc
SHA1 aa2d49eeb33342eee893ffef8a90e626e4fca886
SHA512 cc34b6762e5aab8a81afb10ec8f3f5ef20738455d2e50fe33357fd17f2aaaea68c67f16c47803ce2be784f694107e8b474e9f7c4a92dbc21b12e885053f67337
TLSH
T18AD0807D27344175DD70B030B68D0347F69C5835121B561F75FFC315075310215E4517
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/._Mono

SHA256 e2e7f85f9d529d80af880c74ad2a6004a1d15979399009f68e27699605dbf2c2
MD5 7653091ee21345c52bf3c58e4681154c
SHA1 1bd3ac9eba7172679924260ba177b5c3fa2187fd
SHA512 0f1c034ee77a30ff801c30b12a0c45c4a96626d4f6d50fa7909d41dfe7e17c81e9a5bc2a5c35144ed2c2c857c522079e2b9808208209ff523998c36bfca446bf
TLSH
T148D0127963141561CC64B130B6894345B5AC9535123B162A76AFC31A065670118D8167
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/._PlayerConnectionConfigFile

SHA256 4285888774ce17f73b89b88339e57cf85b5f2ee2f7e8ea0e44e8e4462e8b6535
MD5 c5f24f1ca471f76386d672bef66ca2f7
SHA1 4a9001025727bbf2094dc5c5356fd7b8165c2604
SHA512 9e89f5833f40858ef2b0f265b82ba86d7b139fa939811e2860e129bc40f1b0d67f5ec5831d99e71396ccafec00fe1dfaa27bdd53172dd71f5b656d884dd2fe9e
TLSH
T138D0807923545575DC60B0307E8D0345FFED4425511B162FB5FFC31A079611214D5157
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/._Resources

SHA256 96804e26b4bc8e4ee2a3533b0980856bf3687074648df5caa07343bcd6c04b8d
MD5 b0b47ae352cf8798248c6c45386d48ae
SHA1 dbee0de35a5ca6589b01bcba75aa0620108be19a
SHA512 579359dd8ff1f189b702a21f66acec5035943ef6e6ee6d85a7f8858c0bf30fce7e8bb0b22089711d2d04269512f73488b42cd75ac43355e91d03f6362cb1df2e
TLSH
T1DED0807D32541165CC61B0307ECD1345B9DC49255117666F7FFFC315035231115D4167
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/._mainData

SHA256 e8122ce7098cffc4d5ec4af041c1d22c06cb3842bc4b873811c3607be5851f5b
MD5 794d0601db9996c648c898c3434a6115
SHA1 6b07422a7f13c237787b0947a14d4645081a0ce9
SHA512 a96e7c2cdda6a39c515e47264fa34969211174b3a2fc88648203d4e5df2e922e343d77e94fe7014e8f1a7c35e8c4132a3e01327d6d1af8182e64aa7184ace12d
TLSH
T13ED0127922144571DD6470346E990345AB9C9524221A172BB6AF821A069221315D4117
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/._resources.assets

SHA256 9643c052228fee5bd0ede98a3bdb96904e3a5d7372059ac14adbe77dcda955c5
MD5 05eb85c823a2c0afb954432fa0533209
SHA1 5b5cd08f8674445552da30c7f90fdb8fa2ff2782
SHA512 e77d3fc4ea57ee2ef5f895552dfe86ab9e5cf0f799ea227aff5196e89abfe4aae286b3a690cc9c24d13286eee0514021bc7df5d16ae4ff664c038e64b36996a2
TLSH
T1D2D0127922544565D860B2307589034DAE9849245117162F75BFC217065621225D515B
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/._sharedassets0.assets

SHA256 36cdb5cfaacbbfde8bbeeac1617a60b51b5d7eb6dc76d2fc0ce5fac089b10eae
MD5 4893f9c1f850690459765993cb7edd09
SHA1 c9d3edefb50ce59a1fe60a83f9d70b1094eb42e0
SHA512 834b8346b4071c163b9445f1028471899d7b047b22c7b3d672d4e4b14e110917cfe23d0c20801ec752deb53f2c188eb69d669113cfae50a6c30a9bc1eb48401f
TLSH
T13CD0807D23140675DC707130B6D90349FBECD8241157661FB6BFC319039A10714D4117
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Managed/._Assembly-CSharp.dll

SHA256 a3885f045c439e3a9381dd9403a9f15edfe7a45f5f4057ef70e8f8abd4cf4d82
MD5 b1befc451e58b60cdddf8433f676e482
SHA1 a39adbdbc13ef744b6fc1508c8b8236cfca788d9
SHA512 6f589dbfee42ce0ceb6fbbf5c041f1b1d9c270f0d1f7de482e561986cfb8ee2be301d7b8c4953cc5f3914beb39ae4eeae3d3dc6674f5e9af77a2dee31d31bc74
TLSH
T1A4D0807932180165DC717030B5CA0346F9ACD5345567173FB6FFC31D035620124D4627
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Managed/._Mono.Security.dll

SHA256 d84498f5a47af678266f4cb8990536efc61ca8c5be205732b119974a6aeb72b9
MD5 b930c4b1075769cde16216197303489e
SHA1 49fff4dfcdacb9951b45b6ea1d1689ede143dbd7
SHA512 4f52876084fc8287c022dce1560abb4e113b828d8f3db9d90819022273a5d210464f7611d8941f548aa9f0f4e991154dd8d86a5d7b148774b70817b02150c792
TLSH
T12ED080B93214A5B5DDB0B030B5990346F59C5E655217161FF5BFC71A035210528D8127
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Managed/._System.Core.dll

SHA256 4b7ab42315e09f08a78bd25d285481441277e06af758d51d5f70a103357547bb
MD5 ef231bcad7762d68a0e0a02334e257e0
SHA1 7a49813d69b60abd14b8c3195923ad7011f4e9bc
SHA512 096c197f92ed0d1ec7eb74a5aaff1a3e3704cd6cb8d206e1d53e5c1836cf7a59924b72866a5ff7dc59dc3468c7874eccc52a7af0e364dc2eb6e987bcf893ea10
TLSH
T1C5D0807D22144175CC707131B5D90355B6DC5825121B162F75BFD3560BD250514D4257
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Managed/._System.dll

SHA256 f1a1556c1803c02db21b5c42c50089bb54cfcd1711594c3170b5bbd2fd49dd8f
MD5 5a93cc46a696da55d09506b5c8813814
SHA1 d64555e5f805b6588f40a1c3ed6cc72469e3bde4
SHA512 18ba2ea7aebd0fdfe2ccc732e866c79506712b0c945304042b9b7fd4e5e64ebc9a8a53d1f6903679d9e39898243e38f94f8c6970ac912165cd3f3f0d49f8101e
TLSH
T174D0807D23150571CD64B0307FDA0396B6EC55249517162F79FFC31907D510115E5117
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Managed/._UnityEngine.UI.dll

SHA256 fe15fb479c3f3eb4538adf4f25143b9c7cc6e125fe941380de23630382172d49
MD5 33f30c0f4eb8e3e212797796527a4c10
SHA1 b3240911ac4b22e6d21d3b1662c2fb77711fe446
SHA512 d8bd3c77d88eb4597ae782ea7ffa3c980d77b9075d93db4699f2a8c79e87be823015f0d38aa836bc20e946096261dd923d78bbaf96264ebfd88a84c559fd60e4
TLSH
T135D0127923180165D860B13079990345A99C9964522B161FB6EF821A069561224E9267
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Managed/._UnityEngine.dll

SHA256 7111c6b4dfda031707bf1bafaf2ea3dcc2128f49ec567edec25d8d5978b8b967
MD5 d599982436ee8f72ef64f0345e92d169
SHA1 35647333c8b060c5e2e7ca3167c163e33a2a8137
SHA512 25f34b68b44eae124d8a0828aa94e8216615c5f44a1203f9e055201f1f9e08623ace13fa23803fce925eb7a690b32edb80fea1ad29e6ee949facfca42f91cbd9
TLSH
T195D0807972141175CC71B130BAD90345F69C9C355127562FB5FFC329036215114D4537
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Managed/._mscorlib.dll

SHA256 a8d3e469f18f7d83a5001ded1a64292948b5d69a31f310b1237cc0627541d972
MD5 b1de735ae8e56b93e62e1b426881ade5
SHA1 b45bd848f1c96e57ccdd5ea61dd6088d2962ae79
SHA512 fa521af6d6125f2d6ae170646b708eff91c8f31c8399d041c164416e029f64edaa84e743e66fb5a5024625f1fbf25c7c3e216d9d661716dece3efb1e4b8e8f66
TLSH
T10FD0127F22148161C86071307689034BAAE85924111B561A75BFC235079651515D8117
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/._etc

SHA256 2e1911301ebd1126769d50bf1dbfdcf0e98360bdfe7e337c76da3e32e5dd3c1b
MD5 1b398c6f0a0daf7bd05413b597f7ed94
SHA1 0621933e013b028c37f573e177ccefadd6e8def9
SHA512 42feaf25d11d1ddbb586869c5bd862cede485c4ff8063bd3ffd16aaeacb1ae77d9ed91616654ea1f15ff61949dd5629fe0db7e1ebbde5db4ef705959ac83ba22
TLSH
T179D0227822084120C920B130B48A030AB59C48615117033E72BFC209024228519C8113
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/._mono.dll

SHA256 8f1c0265ee80ca3e561a293bba36b0cab338b9afec01f5857eede2eb19d2793f
MD5 5d320ceadb9dffcf303968cefbb3def3
SHA1 13d989bb227a7382fe2e0f2272800098d17069ba
SHA512 4a9904dc721ccecf28322d6cee700cc4207d52dc457b291c3934d9c99dc231b6541a4605926f2b1a43b8b0382d584f5e2493052647f00fb6b54b8805e19d2c83
TLSH
T123D0127A23144561D96070346AED0347A5988474151B561E76BF861506D511254D5217
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/._mono

SHA256 451113617a2df09a2be45137cce77bc04df4f4340e70745e137deaa201c0d479
MD5 3add621c3eb675d07153f84105849b6a
SHA1 814f98cc88099bb53cd251ec2455451a5fdf3278
SHA512 e33e2fc29bdcb58ff35be11b9cac71dee836c09c9e16c69cee3f626cf8803f2409bf96c111693d0e7dd33caa501d36e9d8b5b466dbda7015a27fc20241076917
TLSH
T10AD080F933145165DC767030758D0349B5AC4564151B162F76FFC31A035370614D916B
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/._1.0

SHA256 d9c5343e5eae5cdd10d86d22fc718e4852fae05dfb0bbc7b92324bda2f6a2ddc
MD5 44364f1504280f34ece6dc71e6e2f9d0
SHA1 02e631eeb6b13fa57e747ee3de735313dd08c7b4
SHA512 0a5daa7106c38363841ed3799b5267f10704ecf94b0b52633282f50d7efe9e00543a5b49b9874bccd37943e7beb6a15af56e2a4e4f80185cbc11aee7d895bbdf
TLSH
T160D0127923141165C9A0F0307A890745BB9889291527561BB5BF8217029662215E9567
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/._2.0

SHA256 bf9d25bc03f2493d8caa35fa6ff30856be295c26dc9c39edd9f90ac6ca6e6361
MD5 cdb3687085b6437bfe725e2ff6a00f01
SHA1 29fcced1c22adda0024fba8d0af0eeea86c4eba1
SHA512 c96ebe70e482f4bb343875b0e2990bc599645be1628cc24b4010de02457189fb2c18170ec2d0b7690198fdf1f8f42b5949c28559de955a9096248e4868a17786
TLSH
T130D0807923143765CE70B030BBC94746B59C8435515B662FF6FFC316079291214DC117
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/._browscap.ini

SHA256 4824606c247626cf687b7008f4878a374fb19039fa4c7a097bc02109c6e186d2
MD5 a2350ac7ec85e341f3f5df1f5e1a5476
SHA1 583467ee60f2a18e44e6e0efe57988f009c577f1
SHA512 d622c0c1a84d4c6de99c6a044c52f3ad55c1ab81a8e2d9aa0ed7b580877909ea6fa5988abcf203df4fa59ed459f4b38fd984ea3940879ca20e92272694fd9ab2
TLSH
T1D2D0127A22148562CCA07030AA894756AAA88828A11B161EB5AF831A039650614D8127
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/._config

SHA256 1cd3bc0b02a437c87d121844fe81941603b186db100c380c5827e7003df1d829
MD5 c7d2abd78911fb5388cac4c07f855c41
SHA1 42c8b989cab031f86fe95992a4859bba8a032b0e
SHA512 73b3cc66493fc4e498cad2517a45f3e27d9eea5fee22c78803f4c352b7a9ee7206758e49d34fff2d879265595ef30b971e429e654cae56a11fbf5a49d444b1a6
TLSH
T1E7D0C03C22000171CC3070307EC803C1B69C84A01107133F72BFC307078351204C4013
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/._mconfig

SHA256 c49624967671105a685a98d9b86f92b69eb03c9283ecad070e43af387f24e1ff
MD5 93d04b9d43a4379a58aa06f7323758b6
SHA1 edac2e4cddcbe251b73aad5b3f3108ae1af1d336
SHA512 917164cc2fb17bba7f81efbb968078b0371a896bc08de722690ff883255ae1417ddb2ca230f0ddd06e8a006583343f9b8f455b5b171e5511556f1de758db7b6f
TLSH
T1CAD0807D22191175CC70B030B9CD0345BAAC4964521B171FF5FFC31A079610214DD177
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/1.0/._DefaultWsdlHelpGenerator.aspx

SHA256 ca31297edd5d322a035710d1db8903c146a09b2d705df8af4ec459f8caf0b02a
MD5 1eaaebade1515bc22028a7431d8ab143
SHA1 cc11b1ed9adebec1119343edd6c9d01bbd20a4c7
SHA512 e565aaa0f5c4091b72d263c10fd1b755a049f2a7090ae9299f5b4b98c72c99fe27c0859e074e7375c3e6849f8f55da6b870307a0a2dea16e72438e2a1969c40f
TLSH
T1F0D0807D22540171CCE1713075CD034AF99C98741557565F75FFC3570B5254114E561B
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/1.0/._machine.config

SHA256 7b591de5be18262c7461cb0ccc13e5fd0dbd33b83af7d864ce3ad7e61e9c0472
MD5 a9f79ed84aae05e3db21ffd48b7f06b7
SHA1 9857cd67a34e878051b533940e9577828ad5d972
SHA512 b52dff04a6a3a7bd9b99e86fb175d7f81a4c63729d1e2fdefd568a130a1263c1c1593032024d46afe5c640375b9d991871a3cbea21d6e9e2f39974bc55a8bafe
TLSH
T186D0127D32144165D860B030E58D0346A9DD9425521B161A75AF92150AA161115E5117
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/._Browsers

SHA256 9e37c54159716c8ec9c1110a9a78876990193079da9dbe696cd5b25fc289c7fd
MD5 2b5dbd5bf7f722bdb7e499fc1dc8328d
SHA1 d51c96887b20562ec18a0f4b1ec62d687426c09d
SHA512 072874ca913eb6212d78b2ee02004612aafd2378ae914fedcbb6f5910b6de7167f1038e917d98695b167dd17d4e40d4a2be3eea88d12b65ead4de25d0ddf8cf8
TLSH
T18BD0C07923000124CC6070307D890309B99CC8650107861F72BFC30903C110108D802B
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/._DefaultWsdlHelpGenerator.aspx

SHA256 d4175fa4caa079fa3b2264465be9193bbb6d13bbdda50a6d6b2d5709044ba166
MD5 e405422e0e3c6efc4b1a587c277f9bc5
SHA1 8cc48563732a4cd59948e423fdabac334f6f9a8c
SHA512 4ae235a335c0f188a7ac61d7b151468907ad1d14f13af275f85c5f835f5d9c3082bfca1ff31045a1fa726a516f4c350d1468ffcf26480551470eae69e1a46c29
TLSH
T122D0807922241171DC61703079C90746B99C9874621F261FBDBFC31703A214318D6127
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/._machine.config

SHA256 367bc2aa7b91533b2891efd83c3f019d3179fb3464eeded5ba8613d944afcc00
MD5 07b9cd4d6178c02c25feaacc229975ee
SHA1 254bb2930eb283c8784ad625e70a0db929319d97
SHA512 428ed2f6dcf5d4ca129004a5b7f2e489d66e533ed1a111c5c9d51065885e6103dd9ceb9159ab3f682f4e380966f79bf2b969bb7ebf15b95f9e84ebf6f178afda
TLSH
T16ED0C07833304164DD2070307C8C0303F5AC8420010B171F39BFC30603423010AC5013
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/._settings.map

SHA256 27086b7d813a3e5fabb132901bb626cb4f22230d12d2b623ce2b6509347693d9
MD5 5df674d41b728e2ceed1b957f677d0b7
SHA1 29c6ae3b183ebb87521d25b4883188a88dd1da10
SHA512 0038edb50f3b09e809a7803ff98db01ec12f8f8b5a6793a035e24946736b9462b6661d2b62b754d080c5e650551de68694af0fc43d105038b9d25f6557cc1c55
TLSH
T171D0807D26144165DC747130B5890355FAEC9535151B561F75BFC32903D560214D8117
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/._web.config

SHA256 95f34010ed68273dbc854bc5954a18c582b3c7b2de96abbe9ff948a0a60b0ef9
MD5 f85d44d4c2068cf38e6fa8bd753810d0
SHA1 303dfe7ec2a9ef26eb46dcf993551e0c2a4958a0
SHA512 8925eaf1519174a8c0c2dea75717afc8cfa04cdaa182b1fd1d47068d82348752774c7eac3964cbf65fb7daf49abb4e2f1123733d8c9846dc9a04f0bcb84492e8
TLSH
T1E8D012B9222405A1CC64B130BA8D0356F99C85262516162A76AF821A075260255D8517
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/Browsers/._Compat.browser

SHA256 1f730adc20a8719b67fb7f41ff65c76a15d150eec8064e81ac12635b39961fb2
MD5 ba7639e8143f39223e04779cb021c256
SHA1 5438a1f55bbcbc7a64f3e1f0c5238259b253306a
SHA512 28c85c7407a98a121f18b63bbbe74846c49d72593ec5ace9ab4abd32c3b8dd7e47d636e1d283dcb88c2605e8b258f0b61034efe1da9912ee168e174a89074813
TLSH
T1ADD0C03A22000030CC70703075AA0345FBAC4434011F331F75BFC306034221110C4227
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Mono/etc/mono/mconfig/._config.xml

SHA256 f576f89b64cfecf0ca1b1b333a432276d3cc8e0c7767974f77f399743408ba38
MD5 1b88430cc423cead42a27b4aa7bf83fa
SHA1 af9eafea0feba8632d0f2e8a5eae2f03040a455f
SHA512 1cb711c2d9311f3364efb547962955545fbfb541e62922bcfc35cf3fea1e4f4a65f00a8c1c7b3e81e475ffa72a75683472d61417af63bce2d39add5c5d2faaf8
TLSH
T135D08079225815A5ED60B034B5D90745B6AC9C351217571FF6BFC319036620114D4517
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Resources/._unity default resources

SHA256 bd16e98c5a0b6a1b5c1ec075adc33dd36ad787e0b0a40c12339357fb2986c4ee
MD5 0d763ead163a9f6c2e5767300e65e13e
SHA1 5abe54582c4cae4a177cdc318a0d88f0e2a2d5a6
SHA512 ece6b2c009427caf3d01caf2a62269373c903fd2e838f773191ded196bb7593972180cbc86d559569dcd8280bf70871e961b123756be53b9133972824198d03d
TLSH
T14CD0C03932004166CCA0F130B4CC0342BDDC48242A07222F31FFC30D034321511C4023
MD5 SHA1 SHA512 TLSH

__MACOSX/Nok-Windows_x86/Nok_Data/Resources/._unity_builtin_extra

SHA256 3a5f7e2cc176816cc2923b0d2c52cdcf811d1c9b11b2769d2aaff461f9495de8
MD5 4cec54e3bfc8f8932e01a3c51f9a36ed
SHA1 53ffb34d2b4143d89a3cee0421111a6ddedc4e68
SHA512 951023a604ac6392ceeb16902028d9e8f577a44f7a1dabb2503d07cc753907252ecd0db646a0684c133674c80b5c877bb0c5b90d99b0f556a6eb7465eb9be8f2
TLSH
T149D0223822008534C820B030B58C0301BEEC8424110B032A32AF820A039220120D8227
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer