1d5be49b6564120bf6b5491a0af7690733480ccf31fd6187e6eba3c1d3b7a777

Analysis

user interaction
yes
max time kernel
141s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
badpiggies.exe
Size 32.1MB
Sample260723-sd558sep4y
SHA256 1d5be49b6564120bf6b5491a0af7690733480ccf31fd6187e6eba3c1d3b7a777
MD5 cc33b62fd8166f8e3b02e5374e659585
SHA1 f1f5ba6adacf1435c91814b89324d80ed8528d0e
SHA512 be45fcd33861582110bb440a08c6ddf84180980eec3baf2e0e76f79241a2aaaff242221286cb6d3f3f87837dc9215ac483147c44126a3086fd80ea6792f569e3
SSDEEP 786432:oienDOQJehpFymvL59rva+kQXa69xMApeng:oi6ThmD59DAUaXmeng
TLSH
T1A7773301F7E080B5F272ABB98932127A6B35FDB2E421894F53D1350D1933197ADB936B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation	BadPiggies.exe

Executes dropped EXE 2 IoCs

pid	Process
3864	BadPiggies.exe
4964	updater.exe

Loads dropped DLL 15 IoCs

pid	Process
1688	badpiggies.exe
1688	badpiggies.exe
3248	MsiExec.exe
3248	MsiExec.exe
3248	MsiExec.exe
5032	MsiExec.exe
5032	MsiExec.exe
5032	MsiExec.exe
5032	MsiExec.exe
5032	MsiExec.exe
1688	badpiggies.exe
1688	badpiggies.exe
2664	MsiExec.exe
3248	MsiExec.exe
3864	BadPiggies.exe

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
10	1820	msiexec.exe
15	1820	msiexec.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets2.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets24.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level4	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets3.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level0	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level11	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level9	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\Assembly-CSharp.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level14	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level5	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level15	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets13.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level23	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\Assembly-CSharp-firstpass.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\2.0\DefaultWsdlHelpGenerator.aspx	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Resources\unity default resources	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets26.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets6.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level10	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level24	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets0.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level19	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level25	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level8	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level16	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level18	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\1.0\machine.config	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\2.0\Browsers\Compat.browser	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Plugins\P31RestKit.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets18.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\config	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\mono.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\resources.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets1.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets12.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets4.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets7.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level20	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\UnityEngine.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets15.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level13	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\System.Core.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Plugins\Common.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Resources\unity_builtin_extra	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets5.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level12	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\Mono.Security.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\System.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\2.0\machine.config	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\browscap.ini	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level2	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level21	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level3	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies.gdf	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\updater.exe	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies.exe	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets20.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets21.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets22.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets23.assets	msiexec.exe
File opened for modification	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\updater.ini	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level1	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level22	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level7	msiexec.exe

Drops file in Windows directory 16 IoCs

description	ioc	Process
File created	C:\Windows\Installer\e5876f0.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI7BE6.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI7DBC.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\{6A062CC2-747A-455F-9892-5CF7F86EA451}\BadPiggies.exe	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI900C.tmp	msiexec.exe
File created	C:\Windows\Installer\e5876f2.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\e5876f0.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI779C.tmp	msiexec.exe
File created	C:\Windows\Installer\SourceHash{6A062CC2-747A-455F-9892-5CF7F86EA451}	msiexec.exe
File created	C:\Windows\Installer\{6A062CC2-747A-455F-9892-5CF7F86EA451}\BadPiggies.exe	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI7915.tmp	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI77DC.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI79E1.tmp	msiexec.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	badpiggies.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BadPiggies.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	updater.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1212	chrome.exe
3872	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 14 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft\Windows\CurrentVersion	MsiExec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft\Windows\CurrentVersion\GameUX	MsiExec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292925684940649"	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft\Windows\CurrentVersion\GameUX\GamesToFindOnWindowsUpgrade	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft\Windows	MsiExec.exe

Modifies registry class 25 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\ProductName = "Bad Piggies"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\Version = "17104897"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\Assignment = "1"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\A148C9B28A3050442BC4BDC6CA6D2FB6	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\A148C9B28A3050442BC4BDC6CA6D2FB6\2CC260A6A747F5548929C57F8FE64A15	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Roaming\\Rovio Entertainment Ltd\\Bad Piggies 1.5.1\\install\\86EA451\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Media	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\PackageName = "Installer.msi"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Net	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\Clients = 3a0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Roaming\\Rovio Entertainment Ltd\\Bad Piggies 1.5.1\\install\\86EA451\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\2CC260A6A747F5548929C57F8FE64A15\MainFeature	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\PackageCode = "52F0D2F324FA6B6498F025DCE8F41C2E"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\DeploymentFlags = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\2CC260A6A747F5548929C57F8FE64A15	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\Language = "1033"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\AdvertiseFlags = "388"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\InstanceType = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Media\DiskPrompt = "[1]"	msiexec.exe

Modifies system certificate store 2 TTPs 2 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD	updater.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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	updater.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2460	msiexec.exe
2460	msiexec.exe
3596	chrome.exe
3596	chrome.exe
1764	chrome.exe
1764	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1820	msiexec.exe
Token: SeIncreaseQuotaPrivilege	1820	msiexec.exe
Token: SeSecurityPrivilege	2460	msiexec.exe
Token: SeCreateTokenPrivilege	1820	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	1820	msiexec.exe
Token: SeLockMemoryPrivilege	1820	msiexec.exe
Token: SeIncreaseQuotaPrivilege	1820	msiexec.exe
Token: SeMachineAccountPrivilege	1820	msiexec.exe
Token: SeTcbPrivilege	1820	msiexec.exe
Token: SeSecurityPrivilege	1820	msiexec.exe
Token: SeTakeOwnershipPrivilege	1820	msiexec.exe
Token: SeLoadDriverPrivilege	1820	msiexec.exe
Token: SeSystemProfilePrivilege	1820	msiexec.exe
Token: SeSystemtimePrivilege	1820	msiexec.exe
Token: SeProfSingleProcessPrivilege	1820	msiexec.exe
Token: SeIncBasePriorityPrivilege	1820	msiexec.exe
Token: SeCreatePagefilePrivilege	1820	msiexec.exe
Token: SeCreatePermanentPrivilege	1820	msiexec.exe
Token: SeBackupPrivilege	1820	msiexec.exe
Token: SeRestorePrivilege	1820	msiexec.exe
Token: SeShutdownPrivilege	1820	msiexec.exe
Token: SeDebugPrivilege	1820	msiexec.exe
Token: SeAuditPrivilege	1820	msiexec.exe
Token: SeSystemEnvironmentPrivilege	1820	msiexec.exe
Token: SeChangeNotifyPrivilege	1820	msiexec.exe
Token: SeRemoteShutdownPrivilege	1820	msiexec.exe
Token: SeUndockPrivilege	1820	msiexec.exe
Token: SeSyncAgentPrivilege	1820	msiexec.exe
Token: SeEnableDelegationPrivilege	1820	msiexec.exe
Token: SeManageVolumePrivilege	1820	msiexec.exe
Token: SeImpersonatePrivilege	1820	msiexec.exe
Token: SeCreateGlobalPrivilege	1820	msiexec.exe
Token: SeCreateTokenPrivilege	1820	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	1820	msiexec.exe
Token: SeLockMemoryPrivilege	1820	msiexec.exe
Token: SeIncreaseQuotaPrivilege	1820	msiexec.exe
Token: SeMachineAccountPrivilege	1820	msiexec.exe
Token: SeTcbPrivilege	1820	msiexec.exe
Token: SeSecurityPrivilege	1820	msiexec.exe
Token: SeTakeOwnershipPrivilege	1820	msiexec.exe
Token: SeLoadDriverPrivilege	1820	msiexec.exe
Token: SeSystemProfilePrivilege	1820	msiexec.exe
Token: SeSystemtimePrivilege	1820	msiexec.exe
Token: SeProfSingleProcessPrivilege	1820	msiexec.exe
Token: SeIncBasePriorityPrivilege	1820	msiexec.exe
Token: SeCreatePagefilePrivilege	1820	msiexec.exe
Token: SeCreatePermanentPrivilege	1820	msiexec.exe
Token: SeBackupPrivilege	1820	msiexec.exe
Token: SeRestorePrivilege	1820	msiexec.exe
Token: SeShutdownPrivilege	1820	msiexec.exe
Token: SeDebugPrivilege	1820	msiexec.exe
Token: SeAuditPrivilege	1820	msiexec.exe
Token: SeSystemEnvironmentPrivilege	1820	msiexec.exe
Token: SeChangeNotifyPrivilege	1820	msiexec.exe
Token: SeRemoteShutdownPrivilege	1820	msiexec.exe
Token: SeUndockPrivilege	1820	msiexec.exe
Token: SeSyncAgentPrivilege	1820	msiexec.exe
Token: SeEnableDelegationPrivilege	1820	msiexec.exe
Token: SeManageVolumePrivilege	1820	msiexec.exe
Token: SeImpersonatePrivilege	1820	msiexec.exe
Token: SeCreateGlobalPrivilege	1820	msiexec.exe
Token: SeCreateTokenPrivilege	1820	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	1820	msiexec.exe
Token: SeLockMemoryPrivilege	1820	msiexec.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1688	badpiggies.exe
1820	msiexec.exe
1820	msiexec.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
3596	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe
1764	chrome.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 1688 wrote to memory of 1820	1688	badpiggies.exe	87
PID 2460 wrote to memory of 3248	2460	msiexec.exe	90
PID 2460 wrote to memory of 5032	2460	msiexec.exe	99
PID 2460 wrote to memory of 2664	2460	msiexec.exe	100
PID 3248 wrote to memory of 3864	3248	MsiExec.exe	103
PID 3596 wrote to memory of 5104	3596	chrome.exe	108
PID 3596 wrote to memory of 3552	3596	chrome.exe	109
PID 3596 wrote to memory of 1212	3596	chrome.exe	110
PID 3596 wrote to memory of 3552	3596	chrome.exe	109
PID 3596 wrote to memory of 3872	3596	chrome.exe	111
PID 3596 wrote to memory of 3872	3596	chrome.exe	111
PID 3596 wrote to memory of 4144	3596	chrome.exe	113
PID 3596 wrote to memory of 2148	3596	chrome.exe	114
PID 3596 wrote to memory of 4144	3596	chrome.exe	113
PID 3596 wrote to memory of 2148	3596	chrome.exe	114
PID 3596 wrote to memory of 4140	3596	chrome.exe	115
PID 3596 wrote to memory of 4140	3596	chrome.exe	115
PID 3596 wrote to memory of 4284	3596	chrome.exe	117
PID 3596 wrote to memory of 4284	3596	chrome.exe	117
PID 3596 wrote to memory of 1056	3596	chrome.exe	118
PID 3596 wrote to memory of 2664	3596	chrome.exe	120
PID 3596 wrote to memory of 2664	3596	chrome.exe	120
PID 3864 wrote to memory of 4964	3864	BadPiggies.exe	121
PID 1764 wrote to memory of 3956	1764	chrome.exe	126
PID 1764 wrote to memory of 224	1764	chrome.exe	127
PID 1764 wrote to memory of 3872	1764	chrome.exe	128
PID 1764 wrote to memory of 224	1764	chrome.exe	127
PID 1764 wrote to memory of 4656	1764	chrome.exe	129
PID 1764 wrote to memory of 4656	1764	chrome.exe	129
PID 1764 wrote to memory of 4796	1764	chrome.exe	130
PID 1764 wrote to memory of 4796	1764	chrome.exe	130
PID 1764 wrote to memory of 648	1764	chrome.exe	131
PID 1764 wrote to memory of 648	1764	chrome.exe	131
PID 1764 wrote to memory of 4608	1764	chrome.exe	134
PID 1764 wrote to memory of 4608	1764	chrome.exe	134
PID 1764 wrote to memory of 440	1764	chrome.exe	135
PID 1764 wrote to memory of 1128	1764	chrome.exe	137
PID 1764 wrote to memory of 1128	1764	chrome.exe	137

C:\Users\Admin\AppData\Local\Temp\badpiggies.exe
"C:\Users\Admin\AppData\Local\Temp\badpiggies.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1688
- C:\Windows\system32\msiexec.exe
  /i "C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\Installer.msi" AI_SETUPEXEPATH="C:\Users\Admin\AppData\Local\Temp\badpiggies.exe" SETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp\" EXE_CMD_LINE="/exenoupdates /exelang 0 /noprereqs "
  2⤵
  - Badlisted process makes network request
  - Enumerates connected drives
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:1820

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2460
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 865EB13ECB00714373AB1101D0BAF523 C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3248
- - C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies.exe
    "C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies.exe"
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:3864
  - - C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\updater.exe
      "C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\updater.exe" /justcheck
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Modifies system certificate store
      PID:4964
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 3DF7E9035C488CD63B67C37DBAB34695
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:5032
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 97E1CEFC8753D69B9CE02A584969BF9C E Global\MSI0000
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies data under HKEY_USERS
  PID:2664

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc0cabc728,0x7ffc0cabc734,0x7ffc0cabc740
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1792,i,11565006292749387352,10736074135694722537,262144 --field-trial-handle=2040,i,9720713946256258083,3801654367082934486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:3552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1676,i,9314138588846634794,12001080037585356054,524288 --field-trial-handle=2040,i,9720713946256258083,3801654367082934486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,7076873814953381685,444846602044869793,524288 --field-trial-handle=2040,i,9720713946256258083,3801654367082934486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2428 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,1128876192190242561,9479224552482669593,2097152 --field-trial-handle=2040,i,9720713946256258083,3801654367082934486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,10960288775741818077,17536711407153487834,2097152 --field-trial-handle=2040,i,9720713946256258083,3801654367082934486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4496,i,16709182074204256283,10601975592514640896,2097152 --field-trial-handle=2040,i,9720713946256258083,3801654367082934486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4464 /prefetch:2
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4736,i,6167779759825976736,4744280403570309970,2097152 --field-trial-handle=2040,i,9720713946256258083,3801654367082934486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,8164271685250521358,9896954693733056637,524288 --field-trial-handle=2040,i,9720713946256258083,3801654367082934486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5924,i,15262536510492508830,12162219741443276433,2097152 --field-trial-handle=2040,i,9720713946256258083,3801654367082934486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:2664

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1288

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5004

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc0cabc728,0x7ffc0cabc734,0x7ffc0cabc740
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,6158025211570153476,8480892196915214229,262144 --field-trial-handle=2036,i,590277176484354413,10636963293724211137,262144 --variations-seed-version=20260723-010045.936000-production --mojo-platform-channel-handle=2032 /prefetch:2
  2⤵
  PID:224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1976,i,2935572036316479503,2109218652133601666,524288 --field-trial-handle=2036,i,590277176484354413,10636963293724211137,262144 --variations-seed-version=20260723-010045.936000-production --mojo-platform-channel-handle=2092 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,9663386134819998861,1564056666231192132,524288 --field-trial-handle=2036,i,590277176484354413,10636963293724211137,262144 --variations-seed-version=20260723-010045.936000-production --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,17769513790806759978,4223341618254783875,2097152 --field-trial-handle=2036,i,590277176484354413,10636963293724211137,262144 --variations-seed-version=20260723-010045.936000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,3050707453989760202,8954152307070127571,2097152 --field-trial-handle=2036,i,590277176484354413,10636963293724211137,262144 --variations-seed-version=20260723-010045.936000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4556,i,4883066397201413323,11132579260487944850,2097152 --field-trial-handle=2036,i,590277176484354413,10636963293724211137,262144 --variations-seed-version=20260723-010045.936000-production --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5292,i,9875046625215759079,7448379687183244710,524288 --field-trial-handle=2036,i,590277176484354413,10636963293724211137,262144 --variations-seed-version=20260723-010045.936000-production --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5556,i,12940889332518441825,3765200757204219401,2097152 --field-trial-handle=2036,i,590277176484354413,10636963293724211137,262144 --variations-seed-version=20260723-010045.936000-production --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:1128

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5876f1.rbs

Path C:\Config.Msi\e5876f1.rbs
Size 213KB
SHA256 6f942c94e206dc7ede1ee03a83a6ff3e117735096af1da0052f10e1dec4f32a3
MD5 e8e5ca019849f3e7512249896f6abdb0
SHA1 dd0246fdc51045757e0032294b59f3ddf6f97392
SHA512 7ae25c9a77a01bd3ebc059141a38ff960ad36c86cfe57d784973629d0c6731e075694accc889f86110225600aa41dad7910cc16bff53636150480b8a66d1aed7
SSDEEP 3072:G00DPg2Ycx05L3vC9Vnym7tzZhUDFvOYE034aOqkmSPwF:G0Y94vHm7dZEL34xqkrwF
TLSH
T12D247D227598C07AD21F1B715657C2B172B9B8711A21C50F77D88E2ECFB1EA29E39703
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

updater.ini

Path C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\updater.ini
Size 221B
SHA256 e18af890d10d6f609f55bd1eeb23fc77671a2a270201ffd10bf5d80e3a61e005
MD5 f3c5c485baceea6c37726cfb0dfa2931
SHA1 4657ca6949521455da70ef6ed915c934427cb7b5
SHA512 22cdba1830275967a8965393670b26d9ecf1ade7381bbaca17e45f065ff26f313702cf3b6ff70abba985fd2c9b4c021d6c638bfde0cde22bcfa3b50bd3785f0d
TLSH
T154D0A7E79D15DAC953196E766383409230908C681251423EA5917D9D8582C31070E594
MD5 SHA1 SHA512 TLSH

Submit Download

46DE64130271B61D13A0FAFD9465377C_84EBB610FC8D8EF3B7713A6E829172A4

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\46DE64130271B61D13A0FAFD9465377C_84EBB610FC8D8EF3B7713A6E829172A4
Size 2KB
SHA256 5431a98f65499ce68cef67f6483cd5e0242aac700115b7ee42e157d07b736aef
MD5 789a4951b0a164e04b370da86fbb1f4f
SHA1 91032ea3394a3d3cc19a4564cc0d915571241c3b
SHA512 ee23b3ecd337e068fa0ba31ddc2d5b31ddf8711a35ef2fb27e8694ba86dedf4d8ef33b68ce3b542194b1c1903ce81d1c1ab38871cdcdc61a3b667504b45ebc2d
TLSH
T13E41E9DB639424B43F434F00EAF5D6A20C7E76B160C1105268E5CEC264DD7EC2A3B48E
MD5 SHA1 SHA512 TLSH

Submit Download

BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF
Size 1KB
SHA256 ddb894b1089149c7032b67691b91de2a92f81e4c68355624a456a357f9b6c1b0
MD5 ce77b05cc5e61a7eae9cbc1bb8c510c6
SHA1 298a2f11ce88a56d0e637de47e74da881b38018d
SHA512 e09c985c5c981bad18c91a0aac59fdecb231e453db575c6a7d5eafcd1f004ebd164002435926db6a74002953f0756c378aaa5f666de2d4c82d97e91f41e80f5e
TLSH
T1E4412A876B48A0703F22CFCCA5BCE0366C7FB35242D2A19A7CF4C4B39555398190688F
MD5 SHA1 SHA512 TLSH

Submit Download

46DE64130271B61D13A0FAFD9465377C_84EBB610FC8D8EF3B7713A6E829172A4

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\46DE64130271B61D13A0FAFD9465377C_84EBB610FC8D8EF3B7713A6E829172A4
Size 466B
SHA256 59a9fc37062334c2c9ff1fbd01655f1d25b7ccf31ec1620824d9f95adc7e2b0b
MD5 82067d883533f0bb1016f5befb0e6e3f
SHA1 6abd9008f11ea4ae98d97966eb62b97f8c40243d
SHA512 698c4dccf80bf16cbafb8bc5aeafcf4def6a1fce52713aad56c9cefad4716886af50775fabcc37b9e1c871964066699b90fdc44d07bfdc827479a7889e0bb7f0
TLSH
T12AF02B1476769119F0BADA3845D14DE1CE75B007741066BA7FF2074AAD05F016E63A3E
MD5 SHA1 SHA512 TLSH

Submit Download

BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF
Size 444B
SHA256 e55ebc282a0098cf19cc54b3a0d3f11d23458e00ba33b102dea1bc9d5ef21342
MD5 06afbc2c751e4fb0caf79cfe52f1d326
SHA1 d0ad430da29ce467f538b7670ecbe92512faaa9b
SHA512 dfa596a2485294b09648a944da0617739e3bd03d5bb47735d511fcf2ff3a281d39b4c32464b49f8d99bbcd83159ebac656304dafcfb70ac0797dc3bafe817a4d
TLSH
T1AAF0611C52F24129F477D039C3DA57271556B1127611167D06D14B44AE0F6425C66C58
MD5 SHA1 SHA512 TLSH

Submit Download

Progress.dat

Path C:\Users\Admin\AppData\LocalLow\Rovio\Bad Piggies\Progress.dat
Size 548B
SHA256 43c5805958cae3a5e784ee69b8357f4725b0e329cc482a766831af6ca223dfde
MD5 54eda19007299224d476b7add30446b9
SHA1 71ad16a08ac859c5b452a1bafe50700b71f13cab
SHA512 1c82ede20f4f2fce21365b6ad3980a2cd8eaf76cec30ee04946382e5c554cbeb7b6ea5ad515298b07f94ee4e807a36c70abd5462f3681f78321a020c4f415a9e
TLSH
T12EF0EBF32E86862E9908762A50C83567AEEE11170D97D4394102BB29B7C426D839CC24
MD5 SHA1 SHA512 TLSH

Submit Download

Progress.dat

Path C:\Users\Admin\AppData\LocalLow\Rovio\Bad Piggies\Progress.dat
Size 500B
SHA256 cfb77ce0c8a95e6425e06b53a27999ceaa473f39099fa96c8a9a91c72476bc2a
MD5 3c93dd24e8a2b0cf81abb27a1053e43b
SHA1 59b9d7b379ab1aa51fdc27914fb1b5537f6a564e
SHA512 970f582b4e2f8b23281c24d5896d8136d1d4125ee0826aa05d3b799017b930a771fe4b228a36edffc006f53909661eb29145a7ecaeba5725cc3e7fce3d96fa0e
TLSH
T108F00EE33D57875D96086E2A60D9246AAEAD01070DD398284243BB25B7C43ACC34CC24
MD5 SHA1 SHA512 TLSH

Submit Download

Progress.dat.tmp

Path C:\Users\Admin\AppData\LocalLow\Rovio\Bad Piggies\Progress.dat.tmp
Size 308B
SHA256 34730339989a675ba1c64766528adc92c89673f7eeb2e61de6a7734c84e3be01
MD5 4e410f1e1ecd81aba45c601619839009
SHA1 17c0fa89ab91abb0b29270b6da2695b514656792
SHA512 cfdaa7b83ad6da9b661db0c4f3a482279c4103735928b62be38a64eb59012e6468128585b06e690ddd4cf5307e4880144b3b4d95b253c6dec55c6c24e83b743b
TLSH
T175E0E7A33847451DD60A1E1444DF0279E7BD45D60CD3E13400826B7073803BCD31D93D
MD5 SHA1 SHA512 TLSH

Submit Download

Settings.xml

Path C:\Users\Admin\AppData\LocalLow\Rovio\Bad Piggies\Settings.xml
Size 180B
SHA256 a7f111ac46f6e5aaa34b9b4f41bad5a7e07889c40c860ef66fe808aa23d67ec1
MD5 de0e12f83a45a200c56628b4325e0d65
SHA1 65b7960af398b9309bcd67d863e979c30f2831a5
SHA512 e5604fde96bbfa8f55b2fda21a84e8c178605a9e688f80798549ebbc6da7a0548e46ffcd123f1c7f60424099b5a2ffb5c27d235ad8c94c11c27b76380cf919dd
TLSH
T1F2C080253DF4A531A9794A1F69D6C428576C71CB44841CC5311060370B7E5445D1F01B
MD5 SHA1 SHA512 TLSH

Submit Download

Settings.xml.bak

Path C:\Users\Admin\AppData\LocalLow\Rovio\Bad Piggies\Settings.xml.bak
Size 122B
SHA256 e5f4bc4a67878d0133d017f0458b8898d4dac7427536755978ab5f7331b8e24a
MD5 8d0c83bbbaa1a88b5702b98bc76df566
SHA1 3027205b37d528a1e17bd8c035f0dab5fffb85e8
SHA512 99b57c079f35dda6ca1f9b1966f4baea872c5d3371d00d50d1a1d2ed57ca0bac1e925e52e84d049f5b3d6aeffaa8f5faa0dd62ceb0dbe9e9e8416435aac9fd9a
TLSH
T100B02B1039E4943159240A191695C4181328314700800CC420102023073E0041E17007
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 9218ece111fd7ff74a91644cada428358010583f7d85a50d1bdbef3b50efc442
MD5 3e641733b1a52c94b6e46b29c94e9f4f
SHA1 9659d61cd39a026d85a1deac797c6b01638b489c
SHA512 3fa76eae69ae74d841926a27e0424de807b23d89d422264957daa69fa5b2a395eee61edaa0154f5cc9cc7d27b3fd53c6eb0a8d6edfc8fc7a1c1f19ceb5d8a542
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5df5df384456a57cd154172ab26cad4c052bcdf67abb3b9150637a8cad4c9c6e
MD5 68c62b90331e9a7afc58d998bc750990
SHA1 40323ca6048661803a31aa43de0f794666ba28d6
SHA512 11ac8008183c7918e6ed15a8c64c7512b492df56bcf755565bbfac89f9e26d78bbd20f8b766ed292694586e1a4d57518b0db37d3552701e59c1758461c2d6827
TLSH
T1C4E02B9AC921EC271DFD471D60540E46DA2023971B61C49B773C8108CFB066703C685C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0af724f3be6863bcf774872d54c33a109111c07e6b2241422b6ac7fb1724a075
MD5 74a4294361cdb92b40d5f2b7bebedb7e
SHA1 f5bb8dcd8a763f1e877888674d1d9bb9b08fdc38
SHA512 922ea7af9d28613f89d12935e7023d16bb48a97b68178aabe77f106128b807eb57cac9615821fe7bf6f17eb05a4ce5649db923fe9f7c1c95ebe47eaa6412800e
TLSH
T127518AF3C7E48A6D8511A6F4AB247E1FDE2D0A14532C3C56C9D4AE1F53E28B2D20079E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 b15ad597cf7ec1fbcbc5b7ec28889f612363f18b8e1d41c9b700b5e4804d1480
MD5 e0f332885fda99d2307d9c86455b4fb9
SHA1 f254d14d195d1fbe0d038f7c92897e2bdafe43b4
SHA512 a615abcde589cdb220bb2c95b5527fb30b3205d76176bb1bf92d630f4aeeb2b9c0a3c4b85917b8748303a252bb2d8fa722a945c184af0e537866f999b8d58b9d
TLSH
T19B51ADF3C7E4866DC51596F49B147E1FCE2D0A14432C3C56C8D4AE5B53E28B2D21178E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 100d467b2b0ce5135882ce850da7b5784e6483c6b5df75d885af446ec5acbe7b
MD5 d1687463ea927bfa7c505e1da35d0082
SHA1 b617e173eef2b0102c2952bc3fc1cb80d03f45ac
SHA512 9f0e0b7e4713b5ad9223fb982c98e7f32d7048a5a96f4d82fcf27ca7ba228fb8c893f87527a02fc19c89739d84e2d480d8c096de3c37c61f86009d3d029ffea9
TLSH
T10BF059BF976B706740BE84AAAF01BC096971B4310181B8F4DE5B81BD9084CF30F07893
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 c2eea9720cc7cd94dca03f1241eb7caf2aaa18a75ff60e66e07d6a57d1162eb2
MD5 b194571ae27f381a7ec7094bb1c29380
SHA1 3c5fad8e0ebdccffddd8716c8278421c55ae38a8
SHA512 5f14779d9ab05fbee531e884b1a7cb4f96f43bb470e0efeb0d77a085fac14bdd5076fcbaab0f99bd241874605c019a56ebed65da3ab7a5226d057993221fdc31
TLSH
T148F0506B977A70E740B904AB5E0078099973A430458078E4DF9A417CD0C29E32F1640B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1f3e3a51b17d0f4588d9da46074cd5f0e651fbec3a40afc1544c20183cca913b
MD5 7d697a4bf1b55d4d4c8ccdf9c39fdff5
SHA1 c7191bfb6275399f9b6e1551bc8aced536943e49
SHA512 012a2636d89fc884c28dd3c427f28524853da113702dd32edc3ca5080d3032cea3c32ded8e1edc98aea9009bd1454c12b45061dd677ba30396cb2b80ce60f068
SSDEEP 192:ZRf2tjsW8nm0v7ApAPRp2l9qHsb+WNnm10+dE+BuBVyIsnAUgtaJ:ZRf2h1wkUXmkwU0+6P8
TLSH
T12652A62EEE106A7BACDBC225F9157B53E7F5202971952EC4D6FC8A1C28D75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2d5337c10077a1931a8861b617e1dec588f2f723880c97447d1c9b27fc5af966
MD5 595c68b622af60a8a433da185e76e7b9
SHA1 538237c61bd4deb22d9f5ea8ce3b03a2a5e75a2c
SHA512 6587901f05b67ada0d25b9c30d9f8d8a2f80c3905180b0e66ff8ca70ec3b2466cddf88691966589fb845f141a5c10b0a2c61843970cb0cf37060dd5b55b07efe
SSDEEP 192:ehRf2tjsW8n7Mv7ApAPRp2l9qHsb+WNNoMLVnMn/jE+BukDPyIsnAUgtaJ:ehRf2h4YkUXmkwNTyn/oe8
TLSH
T11152C82EAE106A3BADDBC225FA157B53D7F5102671952EC4E6FC8A1C18D75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 59d92af9bfc67fe68f637f0547a71eac4baeba164515e579b65f7381260877d3
MD5 2e5ff8fbf842ac5d3dbe0b85a8c4b704
SHA1 e58630b00d5323de796ffcf9f25a23bfb2a0398b
SHA512 11bfc9292873cb256ac9f5669a12b1a90a9d022fb059e7e92daad32d7394df1e76f470911a47c0402e7a7819ad5260768ffa643c29ebfc6efb6912bc78712d9d
TLSH
T1D8B0124084015242D14202F4119314887124AF109B0A1B0243E0797288395518425091
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592253.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592253.TMP
Size 96B
SHA256 7ccb6aa7ed54c6562f60ff2c8e23b02c88d1d4fd5483ecce5bd560c8587b3331
MD5 d293e6fdba0550b6c796f7d55e23bb96
SHA1 63b22fe6e4d9e4d7ff7111f701272c371b47263c
SHA512 9ee27538542b291f80484a80dde060d4d0e2d3a2b72aba951f9051264d43cb4cba9d7a2df9407caf34298a546291456cd517b2cbd708f7f31ee435bab75aec0c
TLSH
T13BB02208C202F203C00203F02C8080C8F230CF22CA030203C2F00F22CC2A320082C220
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 125KB
SHA256 fba4a58bfbf0655c9ba79616225b8bd7068c2080befa2061b7083601a8fe46b4
MD5 1fc2152511e4320df5707b42ae2b5c47
SHA1 daabc99600893938e56e32fd385a4db1203b2719
SHA512 c51546708cffcfb3b65fa0170e27867703d79e1158efa8a88e65103abd5ec47d741543b7ce62e36de6115f8f4caf209e9da888d510e0460f9f8e468ac5185119
SSDEEP 1536:jydcqNB3jVVhUPPEp/DtzHpoqDqZ/QjYx97ork0QCwutK3oKIDe5+gTKNYHliELX:2dcsjV/r5lUZF6rk0QCs3vI68Ncl1NB
TLSH
T168C312F5844C2CE356DB8259B676284A32B247201CEED2F1BC885CA756F58CC1791EEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 aa32befc9012ad645de5dd2ba9eec554ed9ea750987ae56980cfa6ff92808967
MD5 87e14fddca260ea8a199ad2a6d54e49e
SHA1 910f001e5866bcbc94dfb5576dd1a2041674348c
SHA512 158b457ff280e44fe0c2488992ed851d59399b7d9ed8e63683d0d0f0f3d24e95fadbceb45caa2aed3ef4a30c3ae378f9ad51998e00eb484b566fdc5c22e79543
SSDEEP 3072:2GcsjV/r5lUZF6rk0QCs3vI68Ncl1NGGm7D5Lk17ox1tIpud63U8BehbCBi9fTr+:5cTYgoiyNcl1Nxm7Rkm1tYpBeh2BAoN
TLSH
T17A34233B4C58ACB3599B935EB14E191E36F24A304C6DD6F2DCC8594467F49CC1B84EB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 eed246ab22ff7ea3485684d234c53e7b7d283eccf577f9f2d8d953025d76de76
MD5 75bb9b0e1ab5747e6b5e1cc95559fadd
SHA1 4b64a3be9db715b467e132c5a2b48676d53ab33e
SHA512 4f2e01aeccd517cecd158674bb4f57a7995038faac92734d3914378eb32f7f3cc416d2ed1cd87bcc2b9208efaad377ef3f4ab2ca3ea3aab961013c4ed84342f4
SSDEEP 3072:ArGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Vm7Rkm1tYpBeh2BAog
TLSH
T1A5C3023B5D75E83B5CB9A74EB08E0B1F2EF149A6C920DE92C8D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 f17a16886ab0e3b7aab567209a542c25cc14d48b909753a7a6d7340f91a92246
MD5 ea20603bc359b504c2401b7fd9fc4759
SHA1 6a1ca1cf2e90468210bab646b65367a03ac4af54
SHA512 7496f8681c1389ab4ad0875c705610519b7c7d1c43212a5e3576d3094719db3e41d3b9b7386e1ad884af46df0c0db1a393b1a91a8e8941472f310ddc8a0ad311
SSDEEP 3072:2lcsjV/r5lUZF6rk0QCs3vI68Ncl1NGGm7D5Lk17ox1tIpud63U8BehbCBi9fTr+:8cTYgoiyNcl1Nxm7Rkm1tYpBeh2BAoN
TLSH
T1C334233B4C58ACB3599BA35EB14E191E36F24A304C6DD6F2DCC8594467F49CC1B84EB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

MSI4F54.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI4F54.tmp
Size 70KB
SHA256 b35d6e32394b3564e53d7fb06607e11f27d43509357dbab22e34bc062f300a10
MD5 c643de187c73581aa9ee1a9ec162b675
SHA1 c55c8d613e19e87111e993c8342a472fa316fdf3
SHA512 9515196318b2d4ea1cb501934eb6167778766da64343a790088cfc8703cda96deb43fe7e75fa801ad913256fd20406a0714e5d9778c52c58e40bb8e0bc43aabb
SSDEEP 768:jYv0EJriB5jUxFBvmOcT5EtfSJElaPxakM/qbt2WU/DyQ3c0/z9RkdfQ2DeVxIiF:0v0EJri5GBvqgaPxal/3/t5/jz2o+U0
TLSH
T12A634C9271F484B1F1A635717FEAC529C377F8A929B2851B8B5509071AE0982FF36333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BadPiggies.exe

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies.exe
Size 10.0MB
SHA256 1c703adc47e9f3563b22b443352105de89dbeba358298970a40e624af1c88c89
MD5 bcf35b0744113de9b39cc77376f202fa
SHA1 73031083e318d2860dd81b9b1ec8bedde56f309b
SHA512 01f30f07e34057a1cb5da4744631880d30ae47c3075c7af65dda9c1cfd8f4e3024134f88553f388c9e8f1e94228198fe35e60b9b4b4bb010166d7f22ea8fee4a
SSDEEP 196608:R0oFgDgSJp0WxH9IgoUierf5lJl+dGJVPqmURKyRkWafYY3AQV8Y8Aa/KQM/7lS8:R0oFgzp0WxH9IgoUierf5lJl+dGJVPqO
TLSH
T149B6AF21F951C0B0E8926176B53E7B7F987CA722072C45C377E42955DEB06E22ABD383
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BadPiggies.gdf

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies.gdf
Size 258KB
SHA256 f66905952ca4fadead2fa08400ac5c64d6e23caf64ec3216c918ca44e5ef56d7
MD5 a4c31bc67fa9063227e2aa293ece2508
SHA1 cd307251528042a65e3f56835ebb5f2e284e2a79
SHA512 55c185e58359ae1932286fd85f85b3c270ac68a7e2eb7da8374df1838b586ccea1119a93dcec2bbcc0de42db20921b905e589472943d36fabedf7e03ec012bbe
SSDEEP 6144:jIKVhdAfxiX9AGiPTJ1IP9fnuBxVDbz5fSYsqUTx:2iX928puTpz5fLsbx
TLSH
T19644AE60F9A8B0ABD6421DFC0395A0B1771BEEB26A089CB5B1817F5B723385778F550C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Assembly-CSharp-firstpass.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\Assembly-CSharp-firstpass.dll
Size 38KB
SHA256 d13a0c673481292d9b2429223f0be5a138b1f0eb8b8bf56a34529e4f48ea9118
MD5 e2bc142804020e63246086c0a0ee565b
SHA1 1c093cbbebe9c526305c43fe517a1eee890b1566
SHA512 22356681fdde7cdc00c4d20b1e2b46bf7e4d5ab60352f8d27f8037e036dbdc53884227f6ab874256874d00909c602acae9ad70ebc862843198854a3da5930010
SSDEEP 768:dVwov/fBqkccMOcE36FOplvL5qQfrkxcq:lv/lJZ36gpXfIiq
TLSH
T1C203D7056BB9CA57CE9ED7BDD1A202010331B017E602FB8A1DC860E52DF33D56D96A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Assembly-CSharp.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\Assembly-CSharp.dll
Size 673KB
SHA256 322881cc31d3602d00a6a6616808c0ab3019803dc48796312350cb9b1dbddfa1
MD5 31858f063ce75571352215159bbda1f0
SHA1 ae951a2f887ba5656ee8aeb8dd1fc5ae992249f0
SHA512 75e31d59dd62be0ecda94108356fc35be179220fdccb9e9e8beeab0d8871f818c8bfad1dfcdfcb6f694b9cf0a10f5dfedfb25d0acba90d933898cb94f72eaf9f
SSDEEP 12288:IYwdZaGo2SBOZa6uclItdYg0bXD2oN3qrtsMNC/B8p3BuY:IYg3qrtbpRuY
TLSH
T100E42A643BB8EF67D6AF47B6A4A14805D7F19543E682FB8E0CC1A4F818877506D031AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ionic.Zip.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\Ionic.Zip.dll
Size 451KB
SHA256 3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd
MD5 6ded8fcbf5f1d9e422b327ca51625e24
SHA1 8a1140cebc39f6994eef7e8de4627fb7b72a2dd9
SHA512 bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4
SSDEEP 6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9
TLSH
T155A4BE0023DC4A6AE2FE5775D4B782A5C3F2B815793ECB8F9D8464EF191A780D6107A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mono.Security.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\Mono.Security.dll
Size 286KB
SHA256 e19a96bb825b13ddefba0000d69f77ab098cebc992fa48288d1695905734bb3d
MD5 c4a2f882fa501d942005c9631a284d10
SHA1 440da0788c79f121f58f6c9a99fed010d52d699c
SHA512 507988b8f5f395e3a389a6123559ff82df99d4d02bff1fe8d253d9cf128e510579c7214788bee532d5dad451aa38b5c8d3dae69e7999ce3b7aea363f05d14466
SSDEEP 6144:2yH9c7SOEtITswi6JRR0/oGUmzuT8CaePmH7F:VSkyswj0/opSuYAg
TLSH
T1D75439086BE8DB67F1BE63B8D0F04015CBF8A556B1AFFF5E1C8614E818137519A01A6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

P31RestKit.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\P31RestKit.dll
Size 53KB
SHA256 ec7e8a0d18c0ccc86d2b4bc4309268064ec638366a8e6ac875a4ff011aad7079
MD5 7cc867426641b7a2891db1aab8776ef8
SHA1 a72ac61af527123511308c5ac5ab12fe7a792ba5
SHA512 086662287986d376260576be48a0f08f3ec7d2f939022560201986ff6c7713b3718abb463e4706fa9c1b14ba2e0bfe32086c18c3eff625bc51490cdbfff888eb
SSDEEP 1536:gOoGHbkUGQszSaC/N1uAgBV0WSE4rfog:zCU0zPC/N1uA+Scg
TLSH
T1C333390973ECDF17C2EDABB955F150008771A566A623EB8A0EC055FA09633E05E613BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Core.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\System.Core.dll
Size 262KB
SHA256 421413b3d094a771f2c8abf82a6f028601e169bc3b8f549f92d2ce04ba7e181c
MD5 f6ed1d1723402e6969ad1e4293d7f063
SHA1 462ff35a951e347df116f2e346180e151175274f
SHA512 660c4f3b6d1c9897d5544d4e8bcfc39c50cb99c01fbb8d64beb41160f6e18747d8cd29e9dfe1d831587c6f77b535a1f9984255262e04edc8539647f7b521cfd4
SSDEEP 3072:LpHBMkH/a1xU5aV2JkMeztKlRbCuoy7ytyOygjqVwnGk0E7ENAbGCkbwfAXM6Obk:LphYIk0lRbMOfrE4KyM
TLSH
T1C7444D9497EC9613E3FF93B1E870070507F4B4A6B0A7E30E589851F65C4BB816E463AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Xml.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\System.Xml.dll
Size 1.2MB
SHA256 e09e2e51c72e0e7c83b5a62ed583a1625c1df76ffbc032e54033959eab2004f3
MD5 6a3a0009e42944772852a393a244848a
SHA1 f6effa74a810f3aaef2514dd6166c24363fe69e5
SHA512 80a9d5cde4390f607345be213a4ea321af3ec937179d5dbd6c8cd2063406c39b810147804a2ffb6018b28b49eb25521232d2c9ba6bfbfe097c6cd52fd528c575
SSDEEP 12288:EnDZg/nOqY0eFICO72v+FGm+gr5tsJ1SZZfd8yFGzQ9frHIGWxewKz4B2:EnDIOIeF22i+gMJ6Zfd8wlmxdW5
TLSH
T15B4507007BF4DA2BE2BEA7B494B111204BF1F906F26AE78F188125D95C53B019E5277F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\System.dll
Size 1.0MB
SHA256 c54cfd699740c2bd2fa8908c0332906909ebc351039cbdec7ee1758a4a25c165
MD5 7f6594f55430d58bb2047d74194c82ca
SHA1 cc132acb3058580d99b4df7e8983d5baaac900eb
SHA512 2615adcddf983e001dcf6dd60330dc9155f5407ca7aea0664ea22dc25227e5dc16aa75278dc4b4e803dbdd1f9999d1e5f6284bbb271401e2ed0eb4f5f889c640
SSDEEP 24576:4CXYNCuQkxk+WEUaxzUU7/oBxVgRxTJG8zAFPiwSRA:4CXYNCuxtz8+xTJG8zAFPiw
TLSH
T1AE354A2467E4CB3BE1AE67BDB0B200115BB4E045F3A3E7AF5598A5981C87B405D063BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscorlib.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\mscorlib.dll
Size 2.4MB
SHA256 926c8364b1a4131975867475c951e1569dd139aee1e0f1fa68dbe37fd0aa5855
MD5 493af8dadba984a43b9f5c95a4ace5ee
SHA1 a414e75fc89a257c636be8d17128820f6e0642cf
SHA512 fe4ddb517d00933aa72cffdf10849d3cc6bf00a712a921afeb0400adf51249feaef2b74df7123583c1fd299e2b072d3e0ba4472961702e4ff8f3ba6387d43bf4
SSDEEP 24576:D2jXXRMVrd1H7iciLAM/bghrf0UnGE5z4X3URpZM/bOJizBi:DcyH7icrM/bgHbMX3URpZMTOJ0
TLSH
T1F4C54B50ABF5DA2BE57AA775E8F101141BF0F842B3A2E35F3618127C0C937446C56BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level0

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level0
Size 167KB
SHA256 c7fcf12f84ccfa7fe5f4b422a9c277b4c83719e0441fc6fd3fc0bdce44d6a92e
MD5 e1d2aa85fab131df676e2df56879c966
SHA1 5074ad787e3bfece6eeef9ab2ca55b98183ce5c7
SHA512 eb47303a619c6d00fd90275e84db90697781b1c4fe4c6faf4518c9e908f97905dae202d39472074ff4b691c563588681e0eadc5321724432bfad107300c79b87
SSDEEP 1536:unYekRd2FguKLWBDnRRGRJGRrQQakf8xOvk:uY732FgubRRjRrqkf8t
TLSH
T149F3314677898C8AC8392B3618636F408B75CCD50BB7936B0771A6AF3FF13964F481A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level1

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level1
Size 6KB
SHA256 852639190e46d019b4befce0fcbfc68f85c0fa1c763d63aeaf5eaf7935ef98b3
MD5 5375b63aa6945f2f7e5796d65d1ccc4f
SHA1 52a3e73a34c7c18de8c5ae98014b20b83bb54ee6
SHA512 334629fa084f67224164276d66675142a92ca94e84e901d941f473083987603843b244438c35c44acb002b39d0c7212defe75dfeafab4e51837d01edc904f390
SSDEEP 24:APdUY+c8GG4foS8bjV9N36tBKZM/6AkD6Pclp6IzeL8tb2Uv6ylaHsaARuEfdUTY:APdxFG4wKSD5cDQ4AoMapQs0S09tF8i
TLSH
T127E15D0ABF458E9EC438333264A35F50E771D4455B6E836B1338A1BD3EE23950F425A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level10

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level10
Size 60KB
SHA256 87396d050ae0614b88bdc8c87766c1d46c3c382ce64f59e5f1c273446ea08ea5
MD5 c621b464e9137476a11cac82c9c1cf47
SHA1 00a6c6ee8b0dc3d710cfb1b30f745628393c0cb8
SHA512 2bede6695925320224b94941f7693b33229d03d19b395e6afaae0de0f79a91bf5227921b7e25ddaad1a452cffedf0b93fe6db2ab9dc6672099f92d863fbab133
SSDEEP 384:MZy+O3/UsqJIui7ROCKGgWPZ1EzyRRoWWmqSmgoO:E0+ibvPESmgoO
TLSH
T186537C46BB458E88C42A2F7324632F408BF6C9950EB2472F1734919F3EF53EB8E55991
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level11

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level11
Size 53KB
SHA256 3ed90ed8049096a01a77c8a7f1c54615cb7d3ab6dbbf3c91d8164e1e471df144
MD5 84b21edcdc6b7071d7ac0c6c65b3f2dd
SHA1 4e53bdb2a4a1b4b2ea9ba83b4d7deeb27c6e9d51
SHA512 f0e4ef0ed6a3ce187a71d1f76751cc52783fb8359c5cbda438a46b6da6f0a8b50e14799c735e369a7904381901f7d739c3f69f9250f67739377f6ad51b974f18
SSDEEP 384:bMe9MuUOe2xp/O6WJJX98sUyjxulz0mmYWk8V:bUOe2xpdWHXPjcByYWk8V
TLSH
T12733AA82BB85CE89D02A3F3760A31F50CBBAC5990A73036B1731929F3EE67974F45591
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level12

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level12
Size 111KB
SHA256 e397aaca1071ad81f135681b7c179c7bf1a3832c8a696f69c36752b18c48ebc6
MD5 dc21fa63c30b3438ee69326e5b01868f
SHA1 5acb22b2159f5c370b1a78c04935ac90602a7b28
SHA512 bae7e7049dfd8500a51d286d6002e87a0d1d3f034467e71db857e8f03037db0ca36a0f3df66bef0f9c0d13c803f9dd0b5543a26be7ded36613325f85902bcae3
SSDEEP 768:LIFmZ/lC4F5S81ffiNzDNvNNsA3qCnlNS3KUQ5FaY05FbZsTMN:BzCWs8lY8bZsTMN
TLSH
T133B39C067B48CA56C8352F3214A36F509BB6C996077313BB0321D1AF7EE63E61F5A163
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level13

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level13
Size 7KB
SHA256 14695cd50cd2b756100c7d62069572e42e23f9a37005ae27a38d059f4728d99f
MD5 01f652cb6fe57c530a092717b804a981
SHA1 750e846ac9dd3f91e5e5c1dcab06356a4af50435
SHA512 402bc139cb9b5b705c78b8bc322e7df8f84bbe8fcc4a0128cb9f1b6920d02ac0ed44129a8922ba0b2c87934a258e27146d57e3341ddfa80a2f8407e363683f27
SSDEEP 48:sY903mlXV7M2sQ0H8ItENbPMd9xESoMapRmvwTtzj8T8i0ty5yotfDMS:sYK3m45rKPi9xESba5Ggi5z
TLSH
T1F9F1FE17FFC1C8AED1653B3398A70F90D3A0C4554A2C636F22946B2D3DE236A1F061B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level14

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level14
Size 22KB
SHA256 7a71512dce768cb871d73da660e3b72f9b61e288a7c07c0d3cc27724394e7dc2
MD5 dbdb09b401992dceeb3a3d58ef6de1ac
SHA1 7f90242cd77059fd81d0e72cc59f6324c5a70138
SHA512 f78e16fe282cdbc167cbe7e3cab5a127983981ed9959a1f062cc88a36c709606a00014dc46394c07dfb82e0d6a3d00dc5d03553aa32bcf42121a28f439b53d9f
SSDEEP 192:tgG014Qlba73gVbfqiPdTb7h23zM+D8+0:K7lmUoilTb7h2jM+Dt0
TLSH
T161A2EB3623FCCDEAD03C6F7751075E00976AD28A8435708F8395249FDEEA722AA45E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level15

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level15
Size 156KB
SHA256 04991b1bec32c42410220c89681fcca0c278ce2bff9e82980cf5337a11789c1b
MD5 f3a0b2365824e47d45647aa93d3b41e3
SHA1 582b8220e57a4549a733d7550926ee700651f7e7
SHA512 eb653bc04c2063839685b764b8d7e64484178ee78f4e6b46a0d76f3c7797a2e0a7d62a7cc848bb87bf4443383b99cdc20cec22ed33f1186db66d4742f0287817
SSDEEP 1536:oEGlq281L4PFBiuT4RECh3AZTRmJU5qi4Y54Ij:oLl42MqZTRm+
TLSH
T178F3670277858A4FC8362B3715D39F80FBB5D9944BB7937B2370A2AE3EE139A0E45151
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level16

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level16
Size 167KB
SHA256 c22e20e69fda02a028642376e8d094f40a837f2c59cdc8c6702f07432392ead7
MD5 d8c3ac567e1a05f6638480aaa6d3e61f
SHA1 7e4f05b29adbe69201a82a85208cd00796fabf72
SHA512 af52eb6c17fefe183348d9dd01838692a0178e9881add0178ad8d891e840acd05c4d8c9a63a9e5ab14aa7b9aafec53db31872f6bdc780776daac3ee3f0d9a59e
SSDEEP 1536:UirZEHays56+QEOrinOyTuA2mrRJbCFm4Ny9Y:Trq6z5TQEOrEOytCFm4Ny9Y
TLSH
T154F34306B7858A4FC8362B3754A35F80FB75D9A44BBB937B137052AE3EE13AA0F05151
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level17

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level17
Size 5KB
SHA256 695c7fdfa74332352ffba96e8d2016453445766f82d7cc8bdb29210219f936fe
MD5 70bdfc0962211710daba9af1f2e6213a
SHA1 d233e13866fe12b2051d422bcb9ce90717320ddb
SHA512 7947ce2134fe6e723a2842037571a2eb95fe7f1affede579d71226ce8e0803eb2328ef4c85ea757977f232b9c8e3d3c03757e6ccaa516388378294a7f7054da7
SSDEEP 24:LEPrurLiOjoHasCnu+Gh60zYTR94EGCtbpe9xO+ylaHsaARuEfP:wPrurLljoHCnWzYTR9+CJyYoMapW
TLSH
T132C18816BF82CD07C8A9333298970F52D775DD580B6D83272374723D3EE23990E89994
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level18

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level18
Size 6KB
SHA256 e0a6730fa4c3ef30d19750c1a2f66a18c93bcf6779477511a2e771bb918d96a9
MD5 8894b219f7cc582bce7c0affc337cf52
SHA1 8363010190043f903e0b05bc3bc7c310db9007aa
SHA512 68486436517dc4dc657d9919766e3a6ab91fcceb863e0fa06ffd538b1a661c801ea47cd6b77bf86186a024781c60c27cb226da8f9c60b349d5219a7ef1bf338b
SSDEEP 24:+PdUYhzMI46qjQLwGXO5KW06FvrfFc4E6XeklU0KSHuTWl/ll1f7al9y7O5RDltE:+Pdxn2jR2ALFlpa8uCl9bP7OfxSXl
TLSH
T1B8E1205ABBA08D1BD438373644D70F51F336D6842B6B832B1320A17C3DE23DA1F466A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level19

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level19
Size 8KB
SHA256 ec6a536a79c598d6bf4d1e40718536d3b9c7ab34bb1c2b156e328500b7b12098
MD5 76ebba579440a779bcd6d06311039b9d
SHA1 3d45e5e5faf3e335c1faac55577e907c02fe0f8f
SHA512 fb07de02193ff8cfc7c4eb235db24ca76c75ebd79f97eb21de566e03a4b9d6136b4facf88eae4b96fe5a59e9d3f00fdabd980dc1573069258a608abf4a39b9fb
SSDEEP 48:QDPdGO9yaQC1bUbbta7lftsQXYEt66w5oMapI50u09t9wE:QDsaQfE7lftsQXYa/w5baU14wE
TLSH
T1ED02894BBB41CF9AC434373218E32FA0D2B1C4515B6B172B2774A1AD3EE23AA1E45598
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level2

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level2
Size 8KB
SHA256 8d90d75793e611e145c76f3080ac8cba3224184c65596b50b8c910de4b1b94c6
MD5 5c2bc7445995d0ea4af382d6747c4d32
SHA1 49476cab75cabec0d25e07ffa7c39a9019b5a403
SHA512 77c70a120c596c03739adca9966fee8c370390c7a847fb1a7b8ccf5e2a6898913f59d698215e09032e59c28f2cea5b8d047c83e26553201871cd7f7ccdfff68a
SSDEEP 48:3PdGf4Sw+Hq3d9QV5Nh4a+byMms0Z09t6E:xSViax5sik
TLSH
T11602AD0B7F498E5AC8352B3304E70F90F772E4911B6B572B172891BE3ED23E56E06254
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level20

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level20
Size 73KB
SHA256 9980057091b8ae716381cece15f8a42f0f732e3a3b47e089935c1ddce0a197c8
MD5 46f71cc6883ca10b814bef8f3e973798
SHA1 cdcb1d634c87dd45a1abe8f2c7a4d84f578d879d
SHA512 3efd56857e8243be320fa00b66c8c500b2e96fae3433d3dbc40166788d9056462aed69810ab4bba9e09c29dca516b1bd78bd714e00b0877cd0498f07491396c2
SSDEEP 384:WUpSMTg49QWkN7I1NhqnuqtcEIq3um/C0c/Ws/WakNS3S1oRaH2Q2q2nT2N1oRau:G4wIN/Ih/E/7/WaBoZ+b1leGEO
TLSH
T1B5737646B710879BC43B273758CB8F84F775EA664B3B537B27A12A2D3DE53AA0E40051
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level21

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level21
Size 7KB
SHA256 be0836718a9e42fd134cf705a92c5b697b7b39c3b38cecddc6b70883281504d1
MD5 c7b037b1f5394989c5b526fef0679c64
SHA1 353554729cd0b1c87ee65a9a974edf62975628c9
SHA512 e144e6abfa0a9849de7957aa54ec0ddd9c7855ff7e9623e4e3e4ec7d6e172ebde9c7ec8180e3db67c8170147a0b0871c1dfdf206594936f0b875419aac660ced
SSDEEP 24:APdUYMMUvaqGVCYRMhvclahume6Cum+6Y5cwFzH8mGA1I5zCFEC6vG5bEyJ5N6sF:APdxMhGVs36wFiA1RJ+eSE0B09t
TLSH
T1B2E1240BBB848AABC4393B3314D70F50F6B1C8501B67432B1768A1AE7EE27DA1F45595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level22

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level22
Size 6KB
SHA256 928c76d52d983a2a981e7ef12cc8dcac1b332af927fb0ee311efe4cab228353e
MD5 8ae4517d4cadb390f076f8be99467bd1
SHA1 e9a4c57769537875bc956450b942bcc809020c26
SHA512 08f5ef3aa885c696db278f9d5868a6212c3da29a1c2c620630d82ab69da11d38f4e69496a5d2e8d1e7c92e68dd7df571aa87af151ab5af5abd2c8c2e4ac45364
SSDEEP 24:CPLOjBEQ94oLVdmLxKdVahumA6YfIU3n1l3Iz7jWO1Pm546kT0uT09t:CPL6OQ94omL4Ln/v3maHD80S09t
TLSH
T143D14646EF81C9AFC4343B3258E31F50F3B1D9544B6B936B232892BD3DE23891E45255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level23

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level23
Size 7KB
SHA256 0e8ba091549f1c44c05d69e69e910b9b67d970eb85a6c1bcdf8e1f1bdaad505f
MD5 ee3ae6e2cffaa21bdf928527b0d6e769
SHA1 ca023ee500f2c9e87edecfbb4a5121fb829f8b0a
SHA512 0525ac48bc26e870a03f297f3751fa90285349ea79f0c445dea8df7711c0b40661631c9c6965d61efe76cfb0532b4750e1071a954489e0f6728c9663d091a55d
SSDEEP 48:CBPdxUhGV3OqwDKfOGH1wV5m6qS0S09tSK:C9UiuOwVtJS
TLSH
T166E1480ABB818EAFC435373254E30F90F376C5509B1B832B132891AD3DE17DA2E056A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level24

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level24
Size 11KB
SHA256 2fbf957e60ee003c785e697f8e24ef636be76e8e277bf54e47ef468f03fc4c67
MD5 a72aa07bd4d4382664f65cf65fff3878
SHA1 5a498c0c50b5bd14c7a7381360d2b5b211d9f400
SHA512 642e7130b11863cd87fc1a29d0cce8611a066755f771db6dcc7ba6da75975f10f60ea0841f2df7af2ceb08ad2ce7488be66693078f1a99030a8bcd66e212e3ca
SSDEEP 96:bbmgGW9cFWeNhxHM0uGqoBJba5RvLc//4b:b6XEwxNhlPJba5RvLw4b
TLSH
T143321007BF89CDE9C0353A3754930F40E7B1E9018E6A0B2F2764529D3EE639A1F051E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level25

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level25
Size 6KB
SHA256 72e76b8786e85b3d8fa1047cfa946c127d52d17cabccdff67574a51a59923d04
MD5 c63d110791f8b4e46ff5c4cf19f0d330
SHA1 402bf15ed47e5d3a7aadcd6b3ce8947379852ae6
SHA512 fb48ca4d61b7fafa25109b0515547851c11dbbaa099c97a9ca75e29b6da2c773e6a2f303afd3497186549bff4708881588a34791c7f2f8d6025441f6c8837afc
SSDEEP 24:APLOjwEQ94oLVdmLxK/63qumTj6YL3nsIXO7jUEbQPm53G6AT0JT09trz:APL67Q94omL4VDs5QEdpA0B09tr
TLSH
T1CBD14646EF818DABC470373218E30F80F2B4D9545B9B936B2328A2BD3DE17991E4A554
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level3

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level3
Size 6KB
SHA256 661c413f7c636ddd554246feb928f3810d68668e0f919fefe759127b16892f15
MD5 a40d559283c4438f375d85bd8204fab7
SHA1 3e2b02ddaf067cfc7b879e050f1727732f153be1
SHA512 ba62b51c847faece6581b6df95b685cf0a859ab7439a5abf2eca36f4f5a823056724e9e78b9303d9c907a15aafebec60dd500b27cb737876664b5bf6497dd506
SSDEEP 24:PPdUY+c8GG4foS8bj8y3N36eKuJZO/6tR1am6plp6IzeL8Eb2Uv6ylaHsaARuEfh:PPdxFG4wMcDQZAoMapFs0S09tF8H
TLSH
T18CE18A0AEF898E9AC434363254A31F90E372D4855B6E932B1334B1AD3EE13D50F46169
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level4

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level4
Size 8KB
SHA256 b003789bf62a5a71ff779cf97d513eb254c3832a634a5ea094254c912a4794a4
MD5 4efb3bfcfb9bbef5b6ebf83136985363
SHA1 feddd38f526ff71b4e237005b373a77e92fd954b
SHA512 4d5a59f976cf2a2bca18fee6e2cb98e8c55dc816888fe8fd3a85c9d5dee3cae15acf86cc3fcc96dda0348a188a57813c6eb238fb684f7cc7cebd2573cae3c533
SSDEEP 48:QPdGfHO3qHgSIqjTWEAAbCYbp8v0Y09t/jfQJ:4SNWEAjYNmfKK
TLSH
T1B602880BBF44CE9AC8392B3208E31F50F3B2D4905B67132F073491AE2ED27D90E015A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level5

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level5
Size 6KB
SHA256 3666c3524be01c04a5765a81bb927f557fd7a8c87109a4a6d6faabc9378a41cf
MD5 8e20510b072417f5b0d7501808cd5d6f
SHA1 ce471748a0787ad62f20b9c734a1a846bb9d7cf3
SHA512 53f435a481b017e197b71212ecbc8ef0a5880eadf39a85c964982cc31f640152b2541c94f640b833cd424c9b9178ecd3d9b4775df8e882bb47605bce356f912d
SSDEEP 24:ZSPdUY+c8GG4foS8byDRBq6xO/6tR1am6ulp6IzeL8Qn2Uv6ylaHsaARuEfJdOTJ:ZSPdxFG4wwxcDQQ2AoMap8A0S09tFi
TLSH
T17EE1CF0AFF898E9AE4353B3254E30F50E371D485576B933B1368A1BD3DE63990F42264
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level6

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level6
Size 7KB
SHA256 2cf76e6e9ee7eac8df50427d69fc6087b62ceb46bb6d37db1aa7523aaa67a27f
MD5 7832089ac8fd99a496d6a00efd179fb2
SHA1 efaf5935bd57746c36154dbc9f4d5c0774d4340b
SHA512 7e8babb769f69bc9b7ef524ec2d0c578b82111aeca103edcd170118215cfac220d19682754c3c6a603fea2ea29ac9491db567815253d304554b8b35ba99b9725
SSDEEP 48:jlmPdGO58ODWTEGzZAqSD+3lvhJP50B09tgJW:ZcNIZb/j6jW
TLSH
T10CF1BA0BBB858A6AD438273218E35F40F771C9516B17836F0334A1BD7EE23D91F06568
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level7

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level7
Size 4KB
SHA256 8be579a57fbf032f0af68afc609f6f167c847a82973fcae1627d454600a9b6ab
MD5 a25b721e269893212026a1074014fd54
SHA1 fa3a842c9ae519f803c483474b8b43723e7cc207
SHA512 b885456287ce79456d2de289474b23404f8a05d80c261473271d71db8e3c3a5e04daeb65104f04238bb6421f5c8773a9819277dfab753ae5c182036ac58849eb
SSDEEP 6:DCALuPKlYl/oYFDVQ96pSHQcYcQGyulJt7ACtWcl:DBLGdDi8YHkc0a7ACfl
TLSH
T190915E406B81086BC8383732155B0F51D7A4D2985D6A9B7B13254A0C1EE079A9B459D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level8

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level8
Size 103KB
SHA256 4fb16195eed4a01d9b9796c47d6427e452fca723943a71d5425a1d13dcb7d887
MD5 00dd4ec7953bcc7fb1c402d2aaa072c0
SHA1 3b96cbe4ab0a1a4787ca2110bbfd583bff8f8787
SHA512 be7cf8345e1ded1353c1b37839bc4378beffe8b67c5196b05c3449f2eead7566a8e55c7877be3eb832f9b143d1315417075b22c228c209e3ad03b211cf3d8c4a
SSDEEP 768:rc9z+sXR/6KYvzHvDY2tHzNNDDzDy/8d3qNNNBNSbNNNNhuILnq4Rx:QfinLTbuIbq4Rx
TLSH
T14EA399067745C94AD4362F3615635F509FB6C9D90BF323AB033891AF7E923E60F492A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level9

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level9
Size 123KB
SHA256 f3a705d6dede3f95297caffcf5e08b484e0425dd07d5abb48b35c3cad89e9889
MD5 b338499afac88c9d77388c3f91886766
SHA1 477de2106e0e1b4535990738ca4f08dc971f4b5f
SHA512 1c6f11bc7a6821005129760ce959e60e8a102af2a5c22802dfd3c209eded9f5b4940a6f0006c45abd25a7c6029b2d8a581103b2e1fe6fc6bca506530347b162a
SSDEEP 768:+Ht9ozk+R3hbV6h0+W2DNNDzlNJN0lNVNNINGusWNNtXaY03aiREQNAry5UrLgdf:KoYWU/ssKCiK3rUUYdUI7
TLSH
T134C3BC427B45894AD4352F3315A35F509BB6C8D50BF363AB0734D1EE7EA23E60F492A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mainData

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\mainData
Size 712KB
SHA256 a66dc6b858f73972ec9c8f725524337fdfc10fe3c4de2a13256838e692cf5e11
MD5 988324b369b8ea7d6b3315892869e296
SHA1 c4021e661869eca47208cdbebc0d288019a757b0
SHA512 38e9c183c69b5bc200f710a830e38069b5c48fdd0a19b725a37887c8d1cd108a41627080ed68216ec815637f8de54dd37861744f412f30d33b569a8019728a20
SSDEEP 6144:iiNthvkdlN4pnZ+ij2G/Tf198qeT6lCOczfCYDnKuTIFvaBKuWOLPuhi8mN6dEHM:iiNYmnzCT6lCOceAZYMNiPA8Ed
TLSH
T128F41349EF95FF27CD2841B5A8EF07543534E18A6983BB1721DC93603D863693A8B2DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Installer.msi

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\Installer.msi
Size 965KB
SHA256 0f70efc625c396a8592af391c9570bd780c33bf03800dab435ed1f2d25273eeb
MD5 3c9ae84ce42ec6b44bddd6f30b7f585f
SHA1 97c6b198a56e3d522d962034f1c4c531eae1bfed
SHA512 0a16599926442a01bbe32c963afa49b6cc7a1c025ff26ec7bd7e8fe4d1ee8e7a830699310ca0058ee1745b2a826fa29692785b6554a86321eb3a558136272b1c
SSDEEP 24576:2WJepz5QKaY5AQOYtpF++7y+KT4Q0q7EL34x8Q:2WJ2aY5Axkfm+KUQn7ED4x8
TLSH
T136259D12B1E08632D2970A74575A937163B9EC314B618807B38CBF0E3FB3993A577796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

updater.exe

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\updater.exe
Size 311KB
SHA256 dbec607e9c2e72e8dca2ad75aa9d673273b836e9a863023557d879a814e047ac
MD5 7caf80f01fc1473184f1dfc03487f9eb
SHA1 273c3f5c1b0a1c2b6096e0b8d9b64bb2f37d8e35
SHA512 255c3cff94ac1a3e30c99bfc6322ab5018fabfce7519b4d6afdd5c25818169c50332709744f2fa3a9241262f51cade1986c932e79a9b5c86ee7a5d3ed3f54e1c
SSDEEP 6144:NJA/o8/AyANCyjtMN3/TgOLY13XCT+yddDrLpkbeAG9BDx4QCgVut1:N+/ZYlNCyKN3/TgO8wT+yXDrke346ut1
TLSH
T16F64AD2337908832E4F35A745A3797B68B7EF9712C21C50B6BE41D195D70B82EA3A317
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

decoder.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\decoder.dll
Size 120KB
SHA256 2fb2c59407de6d2a861cc1d032ddd9070663a3311b0acaff02199baecef6c03e
MD5 0aa4eeb7ef4b85841a37c50888b7f187
SHA1 f1d8349d17487fd1777fac780e2f8e9bf64ed291
SHA512 2cfb609268c32b5af2cd27a336a0574e7c80df41c155887cfa60b3fa45eb87b9a87e5c71e2b7a6e661ec9b786a91ff9de4e9c733ca80e4cea7e3e20642f9d9d3
SSDEEP 3072:VHLohTAI0NkxvLIe9R7Lw1UDm+qnWFGm+G:lo+5yxzIebLXb
TLSH
T1E1C39E3133C1C072F11F113E8806E7B99B6F7AA1C9A09A8B7FA40A655F35291DF39356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI79E1.tmp

Path C:\Windows\Installer\MSI79E1.tmp
Size 269KB
SHA256 e97fc37f3db82cbfe9b035062405b886065743019d19d55a3b836440e4b27b0e
MD5 bf630d509dcaa105cb26f8bd93d96914
SHA1 cdd3a4503fdd889a7d06e4343006891933a4a86f
SHA512 5f10254c604b3aa2e0111dfe19697f4bc290cc8d1102088243274e20a59a7c1d065554dfe3048fe1a8abb059a11a8c6b54248149c6afa393b7c18c8463114a9b
SSDEEP 6144:IKKLqh/W3TWp+/haepAe/l2J3/piv93Pn/afLrU2mCLEKCV:IFLqhey+/hZpB/KpivRK4A4
TLSH
T16C447E2230E4C934D59F4B346B6C8B75A2F8F5605BA1C907F3C45E5DAFB2A838521F1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI7BE6.tmp

Path C:\Windows\Installer\MSI7BE6.tmp
Size 192KB
SHA256 24f6bfe98d28458219c6fe9623701d15483170a0c9a8db97e1703f3e5aaccdee
MD5 1e148123194bad1aeca3969a82fb1f46
SHA1 89b0cc7a2e1b3405991ca4af313a82bf75ecb610
SHA512 8c8589a741965b10cf05d4826b7f552e683d8c3588330755d329a9170cba5a44f60229859f03197f3bc42750662d5a5b18beae441b17fdc13073f0cae13ec47c
SSDEEP 3072:F00DPg2Ycx05L3vC9Vnym7tzZhUDFvOYE034aOqkmSPw:F0Y94vHm7dZEL34xqkrw
TLSH
T113148D2232D8C037D25F1671896AD3B165B9B8725A21C94BBB948F1E9FB16C3DE31703
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1688-0-0x0000000000D60000-0x0000000000D61000-memory.dmp

Download

memory/1688-32-0x0000000000D60000-0x0000000000D61000-memory.dmp

Download