1d5be49b6564120bf6b5491a0af7690733480ccf31fd6187e6eba3c1d3b7a777

Analysis

max time kernel
149s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
badpiggies.exe
Size 32.1MB
Sample260723-sd558sep4y
SHA256 1d5be49b6564120bf6b5491a0af7690733480ccf31fd6187e6eba3c1d3b7a777
MD5 cc33b62fd8166f8e3b02e5374e659585
SHA1 f1f5ba6adacf1435c91814b89324d80ed8528d0e
SHA512 be45fcd33861582110bb440a08c6ddf84180980eec3baf2e0e76f79241a2aaaff242221286cb6d3f3f87837dc9215ac483147c44126a3086fd80ea6792f569e3
SSDEEP 786432:oienDOQJehpFymvL59rva+kQXa69xMApeng:oi6ThmD59DAUaXmeng
TLSH
T1A7773301F7E080B5F272ABB98932127A6B35FDB2E421894F53D1350D1933197ADB936B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
3184	BadPiggies.exe

Loads dropped DLL 15 IoCs

pid	Process
3800	badpiggies.exe
3800	badpiggies.exe
4628	MsiExec.exe
4628	MsiExec.exe
4628	MsiExec.exe
3664	MsiExec.exe
3664	MsiExec.exe
3664	MsiExec.exe
3664	MsiExec.exe
3664	MsiExec.exe
3800	badpiggies.exe
3800	badpiggies.exe
5796	MsiExec.exe
4628	MsiExec.exe
3184	BadPiggies.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Resources\unity_builtin_extra	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets23.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets24.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets26.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets5.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level17	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level20	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\System.Xml.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\2.0\DefaultWsdlHelpGenerator.aspx	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\2.0\machine.config	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets3.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level0	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level13	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level23	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\Assembly-CSharp-firstpass.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\System.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets10.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets16.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets2.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level12	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level14	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level19	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\mainData	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets13.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets8.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies.exe	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets15.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level16	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\Mono.Security.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets4.assets	msiexec.exe
File opened for modification	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\updater.ini	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level3	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\P31RestKit.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\config	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Plugins\Common.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Plugins\Ionic.Zip.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets17.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets7.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level22	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\System.Core.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\UnityEngine.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets14.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets18.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets22.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level11	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level9	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\2.0\web.config	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets12.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets25.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\updater.exe	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level25	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level4	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level6	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level8	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\Assembly-CSharp.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\etc\mono\1.0\DefaultWsdlHelpGenerator.aspx	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\level7	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Managed\Ionic.Zip.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Mono\mono.dll	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\Resources\unity default resources	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets19.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets20.assets	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies.gdf	msiexec.exe
File created	C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies_Data\sharedassets0.assets	msiexec.exe

Drops file in Windows directory 20 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Installer\MSI8B80.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI9FC7.tmp	msiexec.exe
File created	C:\Windows\Installer\e5988c0.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI89B8.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DF0A27ACC91B32B4AE.TMP	msiexec.exe
File created	C:\Windows\Installer\e5988be.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI8C6B.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DF3BDB3CF00A927855.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\e5988be.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI8A46.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\SourceHash{6A062CC2-747A-455F-9892-5CF7F86EA451}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI8D66.tmp	msiexec.exe
File created	C:\Windows\Installer\{6A062CC2-747A-455F-9892-5CF7F86EA451}\BadPiggies.exe	msiexec.exe
File opened for modification	C:\Windows\Installer\{6A062CC2-747A-455F-9892-5CF7F86EA451}\BadPiggies.exe	msiexec.exe
File created	C:\Windows\SystemTemp\~DFF650638476BA3703.TMP	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\SystemTemp\~DFE920A92AF7A3A7D1.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI8B21.tmp	msiexec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	badpiggies.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BadPiggies.exe

Modifies data under HKEY_USERS 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft\Windows\CurrentVersion\GameUX	MsiExec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft\Windows\CurrentVersion\GameUX\GamesToFindOnWindowsUpgrade	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft	MsiExec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft\Windows	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Software\Microsoft\Windows\CurrentVersion	MsiExec.exe

Modifies registry class 23 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\Language = "1033"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\InstanceType = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\A148C9B28A3050442BC4BDC6CA6D2FB6\2CC260A6A747F5548929C57F8FE64A15	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Roaming\\Rovio Entertainment Ltd\\Bad Piggies 1.5.1\\install\\86EA451\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Media\DiskPrompt = "[1]"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\2CC260A6A747F5548929C57F8FE64A15	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Roaming\\Rovio Entertainment Ltd\\Bad Piggies 1.5.1\\install\\86EA451\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\ProductName = "Bad Piggies"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\Assignment = "1"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\AuthorizedLUAApp = "0"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\DeploymentFlags = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\2CC260A6A747F5548929C57F8FE64A15\MainFeature	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\PackageCode = "52F0D2F324FA6B6498F025DCE8F41C2E"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\Version = "17104897"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\A148C9B28A3050442BC4BDC6CA6D2FB6	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\SourceList\PackageName = "Installer.msi"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2CC260A6A747F5548929C57F8FE64A15\Clients = 3a0000000000	msiexec.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2464	msiexec.exe
2464	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4420	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4420	msiexec.exe
Token: SeSecurityPrivilege	2464	msiexec.exe
Token: SeCreateTokenPrivilege	4420	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4420	msiexec.exe
Token: SeLockMemoryPrivilege	4420	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4420	msiexec.exe
Token: SeMachineAccountPrivilege	4420	msiexec.exe
Token: SeTcbPrivilege	4420	msiexec.exe
Token: SeSecurityPrivilege	4420	msiexec.exe
Token: SeTakeOwnershipPrivilege	4420	msiexec.exe
Token: SeLoadDriverPrivilege	4420	msiexec.exe
Token: SeSystemProfilePrivilege	4420	msiexec.exe
Token: SeSystemtimePrivilege	4420	msiexec.exe
Token: SeProfSingleProcessPrivilege	4420	msiexec.exe
Token: SeIncBasePriorityPrivilege	4420	msiexec.exe
Token: SeCreatePagefilePrivilege	4420	msiexec.exe
Token: SeCreatePermanentPrivilege	4420	msiexec.exe
Token: SeBackupPrivilege	4420	msiexec.exe
Token: SeRestorePrivilege	4420	msiexec.exe
Token: SeShutdownPrivilege	4420	msiexec.exe
Token: SeDebugPrivilege	4420	msiexec.exe
Token: SeAuditPrivilege	4420	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4420	msiexec.exe
Token: SeChangeNotifyPrivilege	4420	msiexec.exe
Token: SeRemoteShutdownPrivilege	4420	msiexec.exe
Token: SeUndockPrivilege	4420	msiexec.exe
Token: SeSyncAgentPrivilege	4420	msiexec.exe
Token: SeEnableDelegationPrivilege	4420	msiexec.exe
Token: SeManageVolumePrivilege	4420	msiexec.exe
Token: SeImpersonatePrivilege	4420	msiexec.exe
Token: SeCreateGlobalPrivilege	4420	msiexec.exe
Token: SeCreateTokenPrivilege	4420	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4420	msiexec.exe
Token: SeLockMemoryPrivilege	4420	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4420	msiexec.exe
Token: SeMachineAccountPrivilege	4420	msiexec.exe
Token: SeTcbPrivilege	4420	msiexec.exe
Token: SeSecurityPrivilege	4420	msiexec.exe
Token: SeTakeOwnershipPrivilege	4420	msiexec.exe
Token: SeLoadDriverPrivilege	4420	msiexec.exe
Token: SeSystemProfilePrivilege	4420	msiexec.exe
Token: SeSystemtimePrivilege	4420	msiexec.exe
Token: SeProfSingleProcessPrivilege	4420	msiexec.exe
Token: SeIncBasePriorityPrivilege	4420	msiexec.exe
Token: SeCreatePagefilePrivilege	4420	msiexec.exe
Token: SeCreatePermanentPrivilege	4420	msiexec.exe
Token: SeBackupPrivilege	4420	msiexec.exe
Token: SeRestorePrivilege	4420	msiexec.exe
Token: SeShutdownPrivilege	4420	msiexec.exe
Token: SeDebugPrivilege	4420	msiexec.exe
Token: SeAuditPrivilege	4420	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4420	msiexec.exe
Token: SeChangeNotifyPrivilege	4420	msiexec.exe
Token: SeRemoteShutdownPrivilege	4420	msiexec.exe
Token: SeUndockPrivilege	4420	msiexec.exe
Token: SeSyncAgentPrivilege	4420	msiexec.exe
Token: SeEnableDelegationPrivilege	4420	msiexec.exe
Token: SeManageVolumePrivilege	4420	msiexec.exe
Token: SeImpersonatePrivilege	4420	msiexec.exe
Token: SeCreateGlobalPrivilege	4420	msiexec.exe
Token: SeCreateTokenPrivilege	4420	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4420	msiexec.exe
Token: SeLockMemoryPrivilege	4420	msiexec.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
3800	badpiggies.exe
4420	msiexec.exe
4420	msiexec.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
4420	msiexec.exe
2464	msiexec.exe
4628	MsiExec.exe
3664	MsiExec.exe
5796	MsiExec.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 3800 wrote to memory of 4420	3800	badpiggies.exe	89
PID 2464 wrote to memory of 4628	2464	msiexec.exe	91
PID 2464 wrote to memory of 3664	2464	msiexec.exe	92
PID 2464 wrote to memory of 5796	2464	msiexec.exe	94
PID 4628 wrote to memory of 3184	4628	MsiExec.exe	96

C:\Users\Admin\AppData\Local\Temp\badpiggies.exe
"C:\Users\Admin\AppData\Local\Temp\badpiggies.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3800
- C:\Windows\system32\msiexec.exe
  /i "C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\Installer.msi" AI_SETUPEXEPATH="C:\Users\Admin\AppData\Local\Temp\badpiggies.exe" SETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp\" EXE_CMD_LINE="/exenoupdates /exelang 0 /noprereqs "
  2⤵
  - Enumerates connected drives
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  PID:4420

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2464
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding B70A8172A26677E2C63CDD537134BE5F C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4628
- - C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies.exe
    "C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\BadPiggies.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:3184
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 78E79F1567382B8CFD745B7A7DFAAA4E
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3664
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 639F55558F0E07D6ED4A64A29FC9143F E Global\MSI0000
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies data under HKEY_USERS
  - Suspicious use of SetWindowsHookEx
  PID:5796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5988bf.rbs

Path C:\Config.Msi\e5988bf.rbs
Size 213KB
SHA256 479ad5a6c3d3b8d5589ce7144b70c921dafaceaf5afcb9d7e7e944cbd2af0cca
MD5 94d17c4030ad50fc9924a292d1e2fcdd
SHA1 11d2d3eada03c4082c657ef60df4502884b532d8
SHA512 a9da917e8ddd5856de0821992f8959498d137e45cbd58c440b594e9a9c2436512b1b3bf4ba43391065ad59569695c435107013c3a407d49fdce022b8897e57ef
SSDEEP 3072:100DPg2Ycx05L3vC9Vnym7tzZhUDFvOYE034aOqkmSPwG:10Y94vHm7dZEL34xqkrwG
TLSH
T1B5247D227598C07AD21F1B715657C2B172B9B8711A21C50F77D88E2ECFB1EA29E39703
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

updater.ini

Path C:\Program Files (x86)\Rovio Entertainment Ltd\Bad Piggies\updater.ini
Size 414B
SHA256 998835da6e9c1b0beb32d736b57295b2d77915e8103bceac7ec2f93c9c81e557
MD5 7eb50fde49d46b5c0657c24a92cbe573
SHA1 7364201a6c7ca3438ba00340354afa24847898d3
SHA512 269d925902ea09cc14224d446b1036c693f47ded6406a1824a2d20e184e1d8c063eb80d589fbf51994979ac6dcdfa14d5e06ff0a4c84112cdc2e8050a55e556c
TLSH
T1A1E0ABBB4E9DEA8E93158A6313A250823090A8441B92133D96A02C8CA7C2C310B0F90A
MD5 SHA1 SHA512 TLSH

Submit Download

MSI230F.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI230F.tmp
Size 70KB
SHA256 b35d6e32394b3564e53d7fb06607e11f27d43509357dbab22e34bc062f300a10
MD5 c643de187c73581aa9ee1a9ec162b675
SHA1 c55c8d613e19e87111e993c8342a472fa316fdf3
SHA512 9515196318b2d4ea1cb501934eb6167778766da64343a790088cfc8703cda96deb43fe7e75fa801ad913256fd20406a0714e5d9778c52c58e40bb8e0bc43aabb
SSDEEP 768:jYv0EJriB5jUxFBvmOcT5EtfSJElaPxakM/qbt2WU/DyQ3c0/z9RkdfQ2DeVxIiF:0v0EJri5GBvqgaPxal/3/t5/jz2o+U0
TLSH
T12A634C9271F484B1F1A635717FEAC529C377F8A929B2851B8B5509071AE0982FF36333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BadPiggies.exe

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies.exe
Size 10.0MB
SHA256 1c703adc47e9f3563b22b443352105de89dbeba358298970a40e624af1c88c89
MD5 bcf35b0744113de9b39cc77376f202fa
SHA1 73031083e318d2860dd81b9b1ec8bedde56f309b
SHA512 01f30f07e34057a1cb5da4744631880d30ae47c3075c7af65dda9c1cfd8f4e3024134f88553f388c9e8f1e94228198fe35e60b9b4b4bb010166d7f22ea8fee4a
SSDEEP 196608:R0oFgDgSJp0WxH9IgoUierf5lJl+dGJVPqmURKyRkWafYY3AQV8Y8Aa/KQM/7lS8:R0oFgzp0WxH9IgoUierf5lJl+dGJVPqO
TLSH
T149B6AF21F951C0B0E8926176B53E7B7F987CA722072C45C377E42955DEB06E22ABD383
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BadPiggies.gdf

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies.gdf
Size 258KB
SHA256 f66905952ca4fadead2fa08400ac5c64d6e23caf64ec3216c918ca44e5ef56d7
MD5 a4c31bc67fa9063227e2aa293ece2508
SHA1 cd307251528042a65e3f56835ebb5f2e284e2a79
SHA512 55c185e58359ae1932286fd85f85b3c270ac68a7e2eb7da8374df1838b586ccea1119a93dcec2bbcc0de42db20921b905e589472943d36fabedf7e03ec012bbe
SSDEEP 6144:jIKVhdAfxiX9AGiPTJ1IP9fnuBxVDbz5fSYsqUTx:2iX928puTpz5fLsbx
TLSH
T19644AE60F9A8B0ABD6421DFC0395A0B1771BEEB26A089CB5B1817F5B723385778F550C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Assembly-CSharp-firstpass.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\Assembly-CSharp-firstpass.dll
Size 38KB
SHA256 d13a0c673481292d9b2429223f0be5a138b1f0eb8b8bf56a34529e4f48ea9118
MD5 e2bc142804020e63246086c0a0ee565b
SHA1 1c093cbbebe9c526305c43fe517a1eee890b1566
SHA512 22356681fdde7cdc00c4d20b1e2b46bf7e4d5ab60352f8d27f8037e036dbdc53884227f6ab874256874d00909c602acae9ad70ebc862843198854a3da5930010
SSDEEP 768:dVwov/fBqkccMOcE36FOplvL5qQfrkxcq:lv/lJZ36gpXfIiq
TLSH
T1C203D7056BB9CA57CE9ED7BDD1A202010331B017E602FB8A1DC860E52DF33D56D96A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Assembly-CSharp.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\Assembly-CSharp.dll
Size 673KB
SHA256 322881cc31d3602d00a6a6616808c0ab3019803dc48796312350cb9b1dbddfa1
MD5 31858f063ce75571352215159bbda1f0
SHA1 ae951a2f887ba5656ee8aeb8dd1fc5ae992249f0
SHA512 75e31d59dd62be0ecda94108356fc35be179220fdccb9e9e8beeab0d8871f818c8bfad1dfcdfcb6f694b9cf0a10f5dfedfb25d0acba90d933898cb94f72eaf9f
SSDEEP 12288:IYwdZaGo2SBOZa6uclItdYg0bXD2oN3qrtsMNC/B8p3BuY:IYg3qrtbpRuY
TLSH
T100E42A643BB8EF67D6AF47B6A4A14805D7F19543E682FB8E0CC1A4F818877506D031AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ionic.Zip.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\Ionic.Zip.dll
Size 451KB
SHA256 3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd
MD5 6ded8fcbf5f1d9e422b327ca51625e24
SHA1 8a1140cebc39f6994eef7e8de4627fb7b72a2dd9
SHA512 bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4
SSDEEP 6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9
TLSH
T155A4BE0023DC4A6AE2FE5775D4B782A5C3F2B815793ECB8F9D8464EF191A780D6107A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mono.Security.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\Mono.Security.dll
Size 286KB
SHA256 e19a96bb825b13ddefba0000d69f77ab098cebc992fa48288d1695905734bb3d
MD5 c4a2f882fa501d942005c9631a284d10
SHA1 440da0788c79f121f58f6c9a99fed010d52d699c
SHA512 507988b8f5f395e3a389a6123559ff82df99d4d02bff1fe8d253d9cf128e510579c7214788bee532d5dad451aa38b5c8d3dae69e7999ce3b7aea363f05d14466
SSDEEP 6144:2yH9c7SOEtITswi6JRR0/oGUmzuT8CaePmH7F:VSkyswj0/opSuYAg
TLSH
T1D75439086BE8DB67F1BE63B8D0F04015CBF8A556B1AFFF5E1C8614E818137519A01A6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

P31RestKit.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\P31RestKit.dll
Size 53KB
SHA256 ec7e8a0d18c0ccc86d2b4bc4309268064ec638366a8e6ac875a4ff011aad7079
MD5 7cc867426641b7a2891db1aab8776ef8
SHA1 a72ac61af527123511308c5ac5ab12fe7a792ba5
SHA512 086662287986d376260576be48a0f08f3ec7d2f939022560201986ff6c7713b3718abb463e4706fa9c1b14ba2e0bfe32086c18c3eff625bc51490cdbfff888eb
SSDEEP 1536:gOoGHbkUGQszSaC/N1uAgBV0WSE4rfog:zCU0zPC/N1uA+Scg
TLSH
T1C333390973ECDF17C2EDABB955F150008771A566A623EB8A0EC055FA09633E05E613BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Core.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\System.Core.dll
Size 262KB
SHA256 421413b3d094a771f2c8abf82a6f028601e169bc3b8f549f92d2ce04ba7e181c
MD5 f6ed1d1723402e6969ad1e4293d7f063
SHA1 462ff35a951e347df116f2e346180e151175274f
SHA512 660c4f3b6d1c9897d5544d4e8bcfc39c50cb99c01fbb8d64beb41160f6e18747d8cd29e9dfe1d831587c6f77b535a1f9984255262e04edc8539647f7b521cfd4
SSDEEP 3072:LpHBMkH/a1xU5aV2JkMeztKlRbCuoy7ytyOygjqVwnGk0E7ENAbGCkbwfAXM6Obk:LphYIk0lRbMOfrE4KyM
TLSH
T1C7444D9497EC9613E3FF93B1E870070507F4B4A6B0A7E30E589851F65C4BB816E463AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Xml.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\System.Xml.dll
Size 1.2MB
SHA256 e09e2e51c72e0e7c83b5a62ed583a1625c1df76ffbc032e54033959eab2004f3
MD5 6a3a0009e42944772852a393a244848a
SHA1 f6effa74a810f3aaef2514dd6166c24363fe69e5
SHA512 80a9d5cde4390f607345be213a4ea321af3ec937179d5dbd6c8cd2063406c39b810147804a2ffb6018b28b49eb25521232d2c9ba6bfbfe097c6cd52fd528c575
SSDEEP 12288:EnDZg/nOqY0eFICO72v+FGm+gr5tsJ1SZZfd8yFGzQ9frHIGWxewKz4B2:EnDIOIeF22i+gMJ6Zfd8wlmxdW5
TLSH
T15B4507007BF4DA2BE2BEA7B494B111204BF1F906F26AE78F188125D95C53B019E5277F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\System.dll
Size 1.0MB
SHA256 c54cfd699740c2bd2fa8908c0332906909ebc351039cbdec7ee1758a4a25c165
MD5 7f6594f55430d58bb2047d74194c82ca
SHA1 cc132acb3058580d99b4df7e8983d5baaac900eb
SHA512 2615adcddf983e001dcf6dd60330dc9155f5407ca7aea0664ea22dc25227e5dc16aa75278dc4b4e803dbdd1f9999d1e5f6284bbb271401e2ed0eb4f5f889c640
SSDEEP 24576:4CXYNCuQkxk+WEUaxzUU7/oBxVgRxTJG8zAFPiwSRA:4CXYNCuxtz8+xTJG8zAFPiw
TLSH
T1AE354A2467E4CB3BE1AE67BDB0B200115BB4E045F3A3E7AF5598A5981C87B405D063BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityEngine.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\UnityEngine.dll
Size 495KB
SHA256 0317a8a12c471667702aaabac4d6beb8faec7701a7eae0d0217709ae8e80faa7
MD5 27dedb1e60b6ab5b938898eac65df22c
SHA1 f985a5046ca049d20302ef56e509f0f32b8b6380
SHA512 f19b6940aedc45b54d5d183e7a511b85aac9070b2ad7141571088be3ab58d8bdf2fb559c5a5cc9ff5aec27c242afd4c36b67f85c6494396efab83933b5bd70d0
SSDEEP 12288:LQoLYai/FDyDMFZAnSijUik7tDCJ9fVi/GZtrCgD6:2E9TfrCgD6
TLSH
T105B42A1563B4D8ABD96E0FB9F4636A235270C2005107EBCBA5EA51B93CD37424E63BC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscorlib.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Managed\mscorlib.dll
Size 2.4MB
SHA256 926c8364b1a4131975867475c951e1569dd139aee1e0f1fa68dbe37fd0aa5855
MD5 493af8dadba984a43b9f5c95a4ace5ee
SHA1 a414e75fc89a257c636be8d17128820f6e0642cf
SHA512 fe4ddb517d00933aa72cffdf10849d3cc6bf00a712a921afeb0400adf51249feaef2b74df7123583c1fd299e2b072d3e0ba4472961702e4ff8f3ba6387d43bf4
SSDEEP 24576:D2jXXRMVrd1H7iciLAM/bghrf0UnGE5z4X3URpZM/bOJizBi:DcyH7icrM/bgHbMX3URpZMTOJ0
TLSH
T1F4C54B50ABF5DA2BE57AA775E8F101141BF0F842B3A2E35F3618127C0C937446C56BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DefaultWsdlHelpGenerator.aspx

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Mono\etc\mono\1.0\DefaultWsdlHelpGenerator.aspx
Size 56KB
SHA256 d87d5196b2ae2abf4e673315e1fd22c3a44df80192f23e89b78108579c287524
MD5 66fed2411c14a0fc8ce4c593ef601bfb
SHA1 4680a34aae1193f1e4a6aac1a5dd3c307de257fb
SHA512 331874a9956c87db0646e4d21937a88009804a59fdf5f5882ea5b1dfb7dd7ef17724e09877d98f52e7327bbf38a46dde0c54d5c85f1e860b88322bdfad64679d
SSDEEP 768:M28utHkOFpMgMwP9h5Ij7khsp/6JtEZwMxVtkUI353cXyEyk3VbNb1gNuoT1y:ZDF6CdsCOZwMx3k5JYyklhxgRw
TLSH
T17743C4A0EF5C8D36499A52D9F88140CCB9BDC43291199CF3FCCDA12AF09CD6DA274766
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

machine.config

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Mono\etc\mono\1.0\machine.config
Size 16KB
SHA256 1ba3755323483de257587a7276180c65d96824d441f95feb28f819e77a0cf767
MD5 8dccd9a98d2575162aa366224a983c08
SHA1 4eedcaa785182201857134d8432807bc30742f6a
SHA512 96b6beb2bf56334ad5e7d0b95079107ce736b45011679bf9a2ecd295636ceb7f0748e84bdebfdde37cfe45ab28716e4cc5fe2441e986777369a319cc0c5ecfc5
SSDEEP 192:lhUisXjWXWEeEe90sEG9+RbwlP/waMGyR29yaDVPpAayW2x02GFGyC2xI2nb2kZX:lhU/Dvmbw5t/
TLSH
T1C1721230670DBD1ECA4126629870A9D1067F7B4E96ACED4CA5FF232EE917087D3521E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Compat.browser

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\Mono\etc\mono\2.0\Browsers\Compat.browser
Size 1KB
SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

Submit Download

level0

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level0
Size 167KB
SHA256 c7fcf12f84ccfa7fe5f4b422a9c277b4c83719e0441fc6fd3fc0bdce44d6a92e
MD5 e1d2aa85fab131df676e2df56879c966
SHA1 5074ad787e3bfece6eeef9ab2ca55b98183ce5c7
SHA512 eb47303a619c6d00fd90275e84db90697781b1c4fe4c6faf4518c9e908f97905dae202d39472074ff4b691c563588681e0eadc5321724432bfad107300c79b87
SSDEEP 1536:unYekRd2FguKLWBDnRRGRJGRrQQakf8xOvk:uY732FgubRRjRrqkf8t
TLSH
T149F3314677898C8AC8392B3618636F408B75CCD50BB7936B0771A6AF3FF13964F481A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level1

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level1
Size 6KB
SHA256 852639190e46d019b4befce0fcbfc68f85c0fa1c763d63aeaf5eaf7935ef98b3
MD5 5375b63aa6945f2f7e5796d65d1ccc4f
SHA1 52a3e73a34c7c18de8c5ae98014b20b83bb54ee6
SHA512 334629fa084f67224164276d66675142a92ca94e84e901d941f473083987603843b244438c35c44acb002b39d0c7212defe75dfeafab4e51837d01edc904f390
SSDEEP 24:APdUY+c8GG4foS8bjV9N36tBKZM/6AkD6Pclp6IzeL8tb2Uv6ylaHsaARuEfdUTY:APdxFG4wKSD5cDQ4AoMapQs0S09tF8i
TLSH
T127E15D0ABF458E9EC438333264A35F50E771D4455B6E836B1338A1BD3EE23950F425A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level10

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level10
Size 60KB
SHA256 87396d050ae0614b88bdc8c87766c1d46c3c382ce64f59e5f1c273446ea08ea5
MD5 c621b464e9137476a11cac82c9c1cf47
SHA1 00a6c6ee8b0dc3d710cfb1b30f745628393c0cb8
SHA512 2bede6695925320224b94941f7693b33229d03d19b395e6afaae0de0f79a91bf5227921b7e25ddaad1a452cffedf0b93fe6db2ab9dc6672099f92d863fbab133
SSDEEP 384:MZy+O3/UsqJIui7ROCKGgWPZ1EzyRRoWWmqSmgoO:E0+ibvPESmgoO
TLSH
T186537C46BB458E88C42A2F7324632F408BF6C9950EB2472F1734919F3EF53EB8E55991
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level11

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level11
Size 53KB
SHA256 3ed90ed8049096a01a77c8a7f1c54615cb7d3ab6dbbf3c91d8164e1e471df144
MD5 84b21edcdc6b7071d7ac0c6c65b3f2dd
SHA1 4e53bdb2a4a1b4b2ea9ba83b4d7deeb27c6e9d51
SHA512 f0e4ef0ed6a3ce187a71d1f76751cc52783fb8359c5cbda438a46b6da6f0a8b50e14799c735e369a7904381901f7d739c3f69f9250f67739377f6ad51b974f18
SSDEEP 384:bMe9MuUOe2xp/O6WJJX98sUyjxulz0mmYWk8V:bUOe2xpdWHXPjcByYWk8V
TLSH
T12733AA82BB85CE89D02A3F3760A31F50CBBAC5990A73036B1731929F3EE67974F45591
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level12

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level12
Size 111KB
SHA256 e397aaca1071ad81f135681b7c179c7bf1a3832c8a696f69c36752b18c48ebc6
MD5 dc21fa63c30b3438ee69326e5b01868f
SHA1 5acb22b2159f5c370b1a78c04935ac90602a7b28
SHA512 bae7e7049dfd8500a51d286d6002e87a0d1d3f034467e71db857e8f03037db0ca36a0f3df66bef0f9c0d13c803f9dd0b5543a26be7ded36613325f85902bcae3
SSDEEP 768:LIFmZ/lC4F5S81ffiNzDNvNNsA3qCnlNS3KUQ5FaY05FbZsTMN:BzCWs8lY8bZsTMN
TLSH
T133B39C067B48CA56C8352F3214A36F509BB6C996077313BB0321D1AF7EE63E61F5A163
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level13

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level13
Size 7KB
SHA256 14695cd50cd2b756100c7d62069572e42e23f9a37005ae27a38d059f4728d99f
MD5 01f652cb6fe57c530a092717b804a981
SHA1 750e846ac9dd3f91e5e5c1dcab06356a4af50435
SHA512 402bc139cb9b5b705c78b8bc322e7df8f84bbe8fcc4a0128cb9f1b6920d02ac0ed44129a8922ba0b2c87934a258e27146d57e3341ddfa80a2f8407e363683f27
SSDEEP 48:sY903mlXV7M2sQ0H8ItENbPMd9xESoMapRmvwTtzj8T8i0ty5yotfDMS:sYK3m45rKPi9xESba5Ggi5z
TLSH
T1F9F1FE17FFC1C8AED1653B3398A70F90D3A0C4554A2C636F22946B2D3DE236A1F061B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level14

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level14
Size 22KB
SHA256 7a71512dce768cb871d73da660e3b72f9b61e288a7c07c0d3cc27724394e7dc2
MD5 dbdb09b401992dceeb3a3d58ef6de1ac
SHA1 7f90242cd77059fd81d0e72cc59f6324c5a70138
SHA512 f78e16fe282cdbc167cbe7e3cab5a127983981ed9959a1f062cc88a36c709606a00014dc46394c07dfb82e0d6a3d00dc5d03553aa32bcf42121a28f439b53d9f
SSDEEP 192:tgG014Qlba73gVbfqiPdTb7h23zM+D8+0:K7lmUoilTb7h2jM+Dt0
TLSH
T161A2EB3623FCCDEAD03C6F7751075E00976AD28A8435708F8395249FDEEA722AA45E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level15

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level15
Size 156KB
SHA256 04991b1bec32c42410220c89681fcca0c278ce2bff9e82980cf5337a11789c1b
MD5 f3a0b2365824e47d45647aa93d3b41e3
SHA1 582b8220e57a4549a733d7550926ee700651f7e7
SHA512 eb653bc04c2063839685b764b8d7e64484178ee78f4e6b46a0d76f3c7797a2e0a7d62a7cc848bb87bf4443383b99cdc20cec22ed33f1186db66d4742f0287817
SSDEEP 1536:oEGlq281L4PFBiuT4RECh3AZTRmJU5qi4Y54Ij:oLl42MqZTRm+
TLSH
T178F3670277858A4FC8362B3715D39F80FBB5D9944BB7937B2370A2AE3EE139A0E45151
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level16

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level16
Size 167KB
SHA256 c22e20e69fda02a028642376e8d094f40a837f2c59cdc8c6702f07432392ead7
MD5 d8c3ac567e1a05f6638480aaa6d3e61f
SHA1 7e4f05b29adbe69201a82a85208cd00796fabf72
SHA512 af52eb6c17fefe183348d9dd01838692a0178e9881add0178ad8d891e840acd05c4d8c9a63a9e5ab14aa7b9aafec53db31872f6bdc780776daac3ee3f0d9a59e
SSDEEP 1536:UirZEHays56+QEOrinOyTuA2mrRJbCFm4Ny9Y:Trq6z5TQEOrEOytCFm4Ny9Y
TLSH
T154F34306B7858A4FC8362B3754A35F80FB75D9A44BBB937B137052AE3EE13AA0F05151
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level17

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level17
Size 5KB
SHA256 695c7fdfa74332352ffba96e8d2016453445766f82d7cc8bdb29210219f936fe
MD5 70bdfc0962211710daba9af1f2e6213a
SHA1 d233e13866fe12b2051d422bcb9ce90717320ddb
SHA512 7947ce2134fe6e723a2842037571a2eb95fe7f1affede579d71226ce8e0803eb2328ef4c85ea757977f232b9c8e3d3c03757e6ccaa516388378294a7f7054da7
SSDEEP 24:LEPrurLiOjoHasCnu+Gh60zYTR94EGCtbpe9xO+ylaHsaARuEfP:wPrurLljoHCnWzYTR9+CJyYoMapW
TLSH
T132C18816BF82CD07C8A9333298970F52D775DD580B6D83272374723D3EE23990E89994
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level18

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level18
Size 6KB
SHA256 e0a6730fa4c3ef30d19750c1a2f66a18c93bcf6779477511a2e771bb918d96a9
MD5 8894b219f7cc582bce7c0affc337cf52
SHA1 8363010190043f903e0b05bc3bc7c310db9007aa
SHA512 68486436517dc4dc657d9919766e3a6ab91fcceb863e0fa06ffd538b1a661c801ea47cd6b77bf86186a024781c60c27cb226da8f9c60b349d5219a7ef1bf338b
SSDEEP 24:+PdUYhzMI46qjQLwGXO5KW06FvrfFc4E6XeklU0KSHuTWl/ll1f7al9y7O5RDltE:+Pdxn2jR2ALFlpa8uCl9bP7OfxSXl
TLSH
T1B8E1205ABBA08D1BD438373644D70F51F336D6842B6B832B1320A17C3DE23DA1F466A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level19

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level19
Size 8KB
SHA256 ec6a536a79c598d6bf4d1e40718536d3b9c7ab34bb1c2b156e328500b7b12098
MD5 76ebba579440a779bcd6d06311039b9d
SHA1 3d45e5e5faf3e335c1faac55577e907c02fe0f8f
SHA512 fb07de02193ff8cfc7c4eb235db24ca76c75ebd79f97eb21de566e03a4b9d6136b4facf88eae4b96fe5a59e9d3f00fdabd980dc1573069258a608abf4a39b9fb
SSDEEP 48:QDPdGO9yaQC1bUbbta7lftsQXYEt66w5oMapI50u09t9wE:QDsaQfE7lftsQXYa/w5baU14wE
TLSH
T1ED02894BBB41CF9AC434373218E32FA0D2B1C4515B6B172B2774A1AD3EE23AA1E45598
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level2

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level2
Size 8KB
SHA256 8d90d75793e611e145c76f3080ac8cba3224184c65596b50b8c910de4b1b94c6
MD5 5c2bc7445995d0ea4af382d6747c4d32
SHA1 49476cab75cabec0d25e07ffa7c39a9019b5a403
SHA512 77c70a120c596c03739adca9966fee8c370390c7a847fb1a7b8ccf5e2a6898913f59d698215e09032e59c28f2cea5b8d047c83e26553201871cd7f7ccdfff68a
SSDEEP 48:3PdGf4Sw+Hq3d9QV5Nh4a+byMms0Z09t6E:xSViax5sik
TLSH
T11602AD0B7F498E5AC8352B3304E70F90F772E4911B6B572B172891BE3ED23E56E06254
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level20

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level20
Size 73KB
SHA256 9980057091b8ae716381cece15f8a42f0f732e3a3b47e089935c1ddce0a197c8
MD5 46f71cc6883ca10b814bef8f3e973798
SHA1 cdcb1d634c87dd45a1abe8f2c7a4d84f578d879d
SHA512 3efd56857e8243be320fa00b66c8c500b2e96fae3433d3dbc40166788d9056462aed69810ab4bba9e09c29dca516b1bd78bd714e00b0877cd0498f07491396c2
SSDEEP 384:WUpSMTg49QWkN7I1NhqnuqtcEIq3um/C0c/Ws/WakNS3S1oRaH2Q2q2nT2N1oRau:G4wIN/Ih/E/7/WaBoZ+b1leGEO
TLSH
T1B5737646B710879BC43B273758CB8F84F775EA664B3B537B27A12A2D3DE53AA0E40051
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level21

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level21
Size 7KB
SHA256 be0836718a9e42fd134cf705a92c5b697b7b39c3b38cecddc6b70883281504d1
MD5 c7b037b1f5394989c5b526fef0679c64
SHA1 353554729cd0b1c87ee65a9a974edf62975628c9
SHA512 e144e6abfa0a9849de7957aa54ec0ddd9c7855ff7e9623e4e3e4ec7d6e172ebde9c7ec8180e3db67c8170147a0b0871c1dfdf206594936f0b875419aac660ced
SSDEEP 24:APdUYMMUvaqGVCYRMhvclahume6Cum+6Y5cwFzH8mGA1I5zCFEC6vG5bEyJ5N6sF:APdxMhGVs36wFiA1RJ+eSE0B09t
TLSH
T1B2E1240BBB848AABC4393B3314D70F50F6B1C8501B67432B1768A1AE7EE27DA1F45595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level22

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level22
Size 6KB
SHA256 928c76d52d983a2a981e7ef12cc8dcac1b332af927fb0ee311efe4cab228353e
MD5 8ae4517d4cadb390f076f8be99467bd1
SHA1 e9a4c57769537875bc956450b942bcc809020c26
SHA512 08f5ef3aa885c696db278f9d5868a6212c3da29a1c2c620630d82ab69da11d38f4e69496a5d2e8d1e7c92e68dd7df571aa87af151ab5af5abd2c8c2e4ac45364
SSDEEP 24:CPLOjBEQ94oLVdmLxKdVahumA6YfIU3n1l3Iz7jWO1Pm546kT0uT09t:CPL6OQ94omL4Ln/v3maHD80S09t
TLSH
T143D14646EF81C9AFC4343B3258E31F50F3B1D9544B6B936B232892BD3DE23891E45255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level23

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level23
Size 7KB
SHA256 0e8ba091549f1c44c05d69e69e910b9b67d970eb85a6c1bcdf8e1f1bdaad505f
MD5 ee3ae6e2cffaa21bdf928527b0d6e769
SHA1 ca023ee500f2c9e87edecfbb4a5121fb829f8b0a
SHA512 0525ac48bc26e870a03f297f3751fa90285349ea79f0c445dea8df7711c0b40661631c9c6965d61efe76cfb0532b4750e1071a954489e0f6728c9663d091a55d
SSDEEP 48:CBPdxUhGV3OqwDKfOGH1wV5m6qS0S09tSK:C9UiuOwVtJS
TLSH
T166E1480ABB818EAFC435373254E30F90F376C5509B1B832B132891AD3DE17DA2E056A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level24

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level24
Size 11KB
SHA256 2fbf957e60ee003c785e697f8e24ef636be76e8e277bf54e47ef468f03fc4c67
MD5 a72aa07bd4d4382664f65cf65fff3878
SHA1 5a498c0c50b5bd14c7a7381360d2b5b211d9f400
SHA512 642e7130b11863cd87fc1a29d0cce8611a066755f771db6dcc7ba6da75975f10f60ea0841f2df7af2ceb08ad2ce7488be66693078f1a99030a8bcd66e212e3ca
SSDEEP 96:bbmgGW9cFWeNhxHM0uGqoBJba5RvLc//4b:b6XEwxNhlPJba5RvLw4b
TLSH
T143321007BF89CDE9C0353A3754930F40E7B1E9018E6A0B2F2764529D3EE639A1F051E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level25

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level25
Size 6KB
SHA256 72e76b8786e85b3d8fa1047cfa946c127d52d17cabccdff67574a51a59923d04
MD5 c63d110791f8b4e46ff5c4cf19f0d330
SHA1 402bf15ed47e5d3a7aadcd6b3ce8947379852ae6
SHA512 fb48ca4d61b7fafa25109b0515547851c11dbbaa099c97a9ca75e29b6da2c773e6a2f303afd3497186549bff4708881588a34791c7f2f8d6025441f6c8837afc
SSDEEP 24:APLOjwEQ94oLVdmLxK/63qumTj6YL3nsIXO7jUEbQPm53G6AT0JT09trz:APL67Q94omL4VDs5QEdpA0B09tr
TLSH
T1CBD14646EF818DABC470373218E30F80F2B4D9545B9B936B2328A2BD3DE17991E4A554
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level3

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level3
Size 6KB
SHA256 661c413f7c636ddd554246feb928f3810d68668e0f919fefe759127b16892f15
MD5 a40d559283c4438f375d85bd8204fab7
SHA1 3e2b02ddaf067cfc7b879e050f1727732f153be1
SHA512 ba62b51c847faece6581b6df95b685cf0a859ab7439a5abf2eca36f4f5a823056724e9e78b9303d9c907a15aafebec60dd500b27cb737876664b5bf6497dd506
SSDEEP 24:PPdUY+c8GG4foS8bj8y3N36eKuJZO/6tR1am6plp6IzeL8Eb2Uv6ylaHsaARuEfh:PPdxFG4wMcDQZAoMapFs0S09tF8H
TLSH
T18CE18A0AEF898E9AC434363254A31F90E372D4855B6E932B1334B1AD3EE13D50F46169
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level4

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level4
Size 8KB
SHA256 b003789bf62a5a71ff779cf97d513eb254c3832a634a5ea094254c912a4794a4
MD5 4efb3bfcfb9bbef5b6ebf83136985363
SHA1 feddd38f526ff71b4e237005b373a77e92fd954b
SHA512 4d5a59f976cf2a2bca18fee6e2cb98e8c55dc816888fe8fd3a85c9d5dee3cae15acf86cc3fcc96dda0348a188a57813c6eb238fb684f7cc7cebd2573cae3c533
SSDEEP 48:QPdGfHO3qHgSIqjTWEAAbCYbp8v0Y09t/jfQJ:4SNWEAjYNmfKK
TLSH
T1B602880BBF44CE9AC8392B3208E31F50F3B2D4905B67132F073491AE2ED27D90E015A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level5

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level5
Size 6KB
SHA256 3666c3524be01c04a5765a81bb927f557fd7a8c87109a4a6d6faabc9378a41cf
MD5 8e20510b072417f5b0d7501808cd5d6f
SHA1 ce471748a0787ad62f20b9c734a1a846bb9d7cf3
SHA512 53f435a481b017e197b71212ecbc8ef0a5880eadf39a85c964982cc31f640152b2541c94f640b833cd424c9b9178ecd3d9b4775df8e882bb47605bce356f912d
SSDEEP 24:ZSPdUY+c8GG4foS8byDRBq6xO/6tR1am6ulp6IzeL8Qn2Uv6ylaHsaARuEfJdOTJ:ZSPdxFG4wwxcDQQ2AoMap8A0S09tFi
TLSH
T17EE1CF0AFF898E9AE4353B3254E30F50E371D485576B933B1368A1BD3DE63990F42264
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level6

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level6
Size 7KB
SHA256 2cf76e6e9ee7eac8df50427d69fc6087b62ceb46bb6d37db1aa7523aaa67a27f
MD5 7832089ac8fd99a496d6a00efd179fb2
SHA1 efaf5935bd57746c36154dbc9f4d5c0774d4340b
SHA512 7e8babb769f69bc9b7ef524ec2d0c578b82111aeca103edcd170118215cfac220d19682754c3c6a603fea2ea29ac9491db567815253d304554b8b35ba99b9725
SSDEEP 48:jlmPdGO58ODWTEGzZAqSD+3lvhJP50B09tgJW:ZcNIZb/j6jW
TLSH
T10CF1BA0BBB858A6AD438273218E35F40F771C9516B17836F0334A1BD7EE23D91F06568
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level7

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level7
Size 4KB
SHA256 8be579a57fbf032f0af68afc609f6f167c847a82973fcae1627d454600a9b6ab
MD5 a25b721e269893212026a1074014fd54
SHA1 fa3a842c9ae519f803c483474b8b43723e7cc207
SHA512 b885456287ce79456d2de289474b23404f8a05d80c261473271d71db8e3c3a5e04daeb65104f04238bb6421f5c8773a9819277dfab753ae5c182036ac58849eb
SSDEEP 6:DCALuPKlYl/oYFDVQ96pSHQcYcQGyulJt7ACtWcl:DBLGdDi8YHkc0a7ACfl
TLSH
T190915E406B81086BC8383732155B0F51D7A4D2985D6A9B7B13254A0C1EE079A9B459D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level8

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level8
Size 103KB
SHA256 4fb16195eed4a01d9b9796c47d6427e452fca723943a71d5425a1d13dcb7d887
MD5 00dd4ec7953bcc7fb1c402d2aaa072c0
SHA1 3b96cbe4ab0a1a4787ca2110bbfd583bff8f8787
SHA512 be7cf8345e1ded1353c1b37839bc4378beffe8b67c5196b05c3449f2eead7566a8e55c7877be3eb832f9b143d1315417075b22c228c209e3ad03b211cf3d8c4a
SSDEEP 768:rc9z+sXR/6KYvzHvDY2tHzNNDDzDy/8d3qNNNBNSbNNNNhuILnq4Rx:QfinLTbuIbq4Rx
TLSH
T14EA399067745C94AD4362F3615635F509FB6C9D90BF323AB033891AF7E923E60F492A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level9

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\level9
Size 123KB
SHA256 f3a705d6dede3f95297caffcf5e08b484e0425dd07d5abb48b35c3cad89e9889
MD5 b338499afac88c9d77388c3f91886766
SHA1 477de2106e0e1b4535990738ca4f08dc971f4b5f
SHA512 1c6f11bc7a6821005129760ce959e60e8a102af2a5c22802dfd3c209eded9f5b4940a6f0006c45abd25a7c6029b2d8a581103b2e1fe6fc6bca506530347b162a
SSDEEP 768:+Ht9ozk+R3hbV6h0+W2DNNDzlNJN0lNVNNINGusWNNtXaY03aiREQNAry5UrLgdf:KoYWU/ssKCiK3rUUYdUI7
TLSH
T134C3BC427B45894AD4352F3315A35F509BB6C8D50BF363AB0734D1EE7EA23E60F492A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mainData

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\BadPiggies_Data\mainData
Size 712KB
SHA256 a66dc6b858f73972ec9c8f725524337fdfc10fe3c4de2a13256838e692cf5e11
MD5 988324b369b8ea7d6b3315892869e296
SHA1 c4021e661869eca47208cdbebc0d288019a757b0
SHA512 38e9c183c69b5bc200f710a830e38069b5c48fdd0a19b725a37887c8d1cd108a41627080ed68216ec815637f8de54dd37861744f412f30d33b569a8019728a20
SSDEEP 6144:iiNthvkdlN4pnZ+ij2G/Tf198qeT6lCOczfCYDnKuTIFvaBKuWOLPuhi8mN6dEHM:iiNYmnzCT6lCOceAZYMNiPA8Ed
TLSH
T128F41349EF95FF27CD2841B5A8EF07543534E18A6983BB1721DC93603D863693A8B2DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Installer.msi

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\Installer.msi
Size 965KB
SHA256 0f70efc625c396a8592af391c9570bd780c33bf03800dab435ed1f2d25273eeb
MD5 3c9ae84ce42ec6b44bddd6f30b7f585f
SHA1 97c6b198a56e3d522d962034f1c4c531eae1bfed
SHA512 0a16599926442a01bbe32c963afa49b6cc7a1c025ff26ec7bd7e8fe4d1ee8e7a830699310ca0058ee1745b2a826fa29692785b6554a86321eb3a558136272b1c
SSDEEP 24576:2WJepz5QKaY5AQOYtpF++7y+KT4Q0q7EL34x8Q:2WJ2aY5Axkfm+KUQn7ED4x8
TLSH
T136259D12B1E08632D2970A74575A937163B9EC314B618807B38CBF0E3FB3993A577796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

updater.exe

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\86EA451\updater.exe
Size 311KB
SHA256 dbec607e9c2e72e8dca2ad75aa9d673273b836e9a863023557d879a814e047ac
MD5 7caf80f01fc1473184f1dfc03487f9eb
SHA1 273c3f5c1b0a1c2b6096e0b8d9b64bb2f37d8e35
SHA512 255c3cff94ac1a3e30c99bfc6322ab5018fabfce7519b4d6afdd5c25818169c50332709744f2fa3a9241262f51cade1986c932e79a9b5c86ee7a5d3ed3f54e1c
SSDEEP 6144:NJA/o8/AyANCyjtMN3/TgOLY13XCT+yddDrLpkbeAG9BDx4QCgVut1:N+/ZYlNCyKN3/TgO8wT+yXDrke346ut1
TLSH
T16F64AD2337908832E4F35A745A3797B68B7EF9712C21C50B6BE41D195D70B82EA3A317
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

decoder.dll

Path C:\Users\Admin\AppData\Roaming\Rovio Entertainment Ltd\Bad Piggies 1.5.1\install\decoder.dll
Size 120KB
SHA256 2fb2c59407de6d2a861cc1d032ddd9070663a3311b0acaff02199baecef6c03e
MD5 0aa4eeb7ef4b85841a37c50888b7f187
SHA1 f1d8349d17487fd1777fac780e2f8e9bf64ed291
SHA512 2cfb609268c32b5af2cd27a336a0574e7c80df41c155887cfa60b3fa45eb87b9a87e5c71e2b7a6e661ec9b786a91ff9de4e9c733ca80e4cea7e3e20642f9d9d3
SSDEEP 3072:VHLohTAI0NkxvLIe9R7Lw1UDm+qnWFGm+G:lo+5yxzIebLXb
TLSH
T1E1C39E3133C1C072F11F113E8806E7B99B6F7AA1C9A09A8B7FA40A655F35291DF39356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI8B80.tmp

Path C:\Windows\Installer\MSI8B80.tmp
Size 269KB
SHA256 e97fc37f3db82cbfe9b035062405b886065743019d19d55a3b836440e4b27b0e
MD5 bf630d509dcaa105cb26f8bd93d96914
SHA1 cdd3a4503fdd889a7d06e4343006891933a4a86f
SHA512 5f10254c604b3aa2e0111dfe19697f4bc290cc8d1102088243274e20a59a7c1d065554dfe3048fe1a8abb059a11a8c6b54248149c6afa393b7c18c8463114a9b
SSDEEP 6144:IKKLqh/W3TWp+/haepAe/l2J3/piv93Pn/afLrU2mCLEKCV:IFLqhey+/hZpB/KpivRK4A4
TLSH
T16C447E2230E4C934D59F4B346B6C8B75A2F8F5605BA1C907F3C45E5DAFB2A838521F1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI8C6B.tmp

Path C:\Windows\Installer\MSI8C6B.tmp
Size 192KB
SHA256 24f6bfe98d28458219c6fe9623701d15483170a0c9a8db97e1703f3e5aaccdee
MD5 1e148123194bad1aeca3969a82fb1f46
SHA1 89b0cc7a2e1b3405991ca4af313a82bf75ecb610
SHA512 8c8589a741965b10cf05d4826b7f552e683d8c3588330755d329a9170cba5a44f60229859f03197f3bc42750662d5a5b18beae441b17fdc13073f0cae13ec47c
SSDEEP 3072:F00DPg2Ycx05L3vC9Vnym7tzZhUDFvOYE034aOqkmSPw:F0Y94vHm7dZEL34xqkrw
TLSH
T113148D2232D8C037D25F1671896AD3B165B9B8725A21C94BBB948F1E9FB16C3DE31703
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3800-24-0x0000000003100000-0x0000000003101000-memory.dmp

Download

memory/3800-0-0x0000000003100000-0x0000000003101000-memory.dmp

Download