nfs[.]com[.]ru_devel_sixteen_prototype_nfsc[.]rar

resource
unpack001/Devel Sixteen/Install.exe

nfs.com.ru_devel_sixteen_prototype_nfsc.rar

SHA256 5fd1c4788b29fc8baff5fa06ba80a8ca9dd0b8c6afd3b1eb3fb4907dcd7e6a95
MD5 f9027e78b4ff1a36889a950a76d061b8
SHA1 c8cea9e65e133c136640ddb9607e759fa2e6bdb6
SHA512 241db90d039f73bab48ba05a6fe377fe750f286b0451a265226a39e4bfb0885fa374bda4cf93633ba842ec9a7919a1d820a51e368a041208b5abb115782a4f6d
SSDEEP 24576:kgmx0x/OeUYPM7BqRl/SunlsWPMV5E7ljky2FHW+gwD3XsugGvUnotdtDzoVwkVv:Px6YP7l/SWsWkbEVd2FHW1wD3sQeotfa
TLSH
T1B15533E90C553B0BC641DF7A49D1E8A2371D8DBDA4DF38B571C5EA83BADC424A216323
MD5 SHA1 SHA512 SSDEEP TLSH

CARSELECT_MANUFACTURER_PORSCHE.dds

SHA256 686c1459d145a601d54758298610fd36eb3a551e503e8382eb741f09606e4cab
MD5 df75df4a0565592e38f21a600157a3e6
SHA1 8cc4b370e6ffc3013d40bfd5b13fce2f24370c22
SHA512 dbcea0df53d23a762b76fc9ec18c2cdc66136e3764ef990d2a6ddda03b16883f6f6dc67c30a5a0ebab88a54a18feebb6c482cd96f5f58c6cef7521455f4a437c
SSDEEP 6:GZqX0hqtu000000000000000000000000000000000000000000000000000000X:GZlqs
TLSH
T17013020134C0C584C0180630C603C1F944B37C35D930484732D43E5F34362001544650
MD5 SHA1 SHA512 SSDEEP TLSH

Devel Sixteen/Devel.nfsms

SHA256 b4fd5b14704ff143b8dbb412c069eab35f6c3762b8e576d37f169b1a73e147f4
MD5 7a434a94b4a8326c9e4c6cb8515e57d9
SHA1 605bf07bbc9d2137e5e6f6ba2b2add3b9580caad
SHA512 9b9b582127378dd33dcbf26e709175073fcac1b8a69c3e0f062c3a51b24c905122b81737b3c91dacda0022f59e30f6d54421ad12a464d0c4a96c092a04c28095
SSDEEP 192:TBikbIALlfclf+myU4qobppEOmDW9TEJaPxpHAturK:x7y7/o9TEJaPxpHAturK
TLSH
T1B552A1064C82FABF09762DC494D59A6437B5E448C8DBD008F7A3FCE7991F08B195CA6E
MD5 SHA1 SHA512 SSDEEP TLSH

Devel Sixteen/Install.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 50d6154344d921bc181a3748c811dacf00753ef060ec9357cd435aec0c7cbf5c
MD5 2b434f13359db856168924761dbbf20a
SHA1 620164e0e801b0ade8fa43e7a0ceff15265aa332
SHA512 5aee5a2e4808824ce85cad4504cb5531e5a784191c4b66fd5a9231f38b83596190d7c8691a769d25c9dabb818f323605f7c8a55ae9afc49875f8405d0b9fbd93
SSDEEP 768:kCPeFuYmj4Z424Akf60PjPId6ECYQWkPeFuYmj4Z424Akf60PUYcyKk5lzp:k7NN42Nkf7ECYQWxNN42Nkfuk7
TLSH
T110337C997790D427C7791E306CB3D3A803BA66F67C19C75A39C8188A3FB3B181E52607
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

40622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

H:\Files\NFS Mod Installer\NFS Mod Installer\obj\x86\Release\Install.pdb

Devel Sixteen/mod.ini

SHA256 195f3a26cbb34f541e43dfffa7e711367e0169013b32dc63754f44257624cac1
MD5 79d9ce74dd0f1b7dee8ea3606f3e2b1d
SHA1 0a57569c82e6f9b841fb7dd786d9ede860972c0b
SHA512 8241093d0e19e49fa99c0a32fb83c8bc2d29ecb0d8d5cbb1aec8993d0694a1f47b3a1d0234ed51a8aed905acc8dec4bbe690cf00d3c5b0cc9e669d22e808a63b
TLSH
T17FD0225120073FA0492082C860A07480328D11A9BC1C74941AE060A8690787EA048340
MD5 SHA1 SHA512 TLSH

Devel Sixteen/mod/CARS/911TURBO/geometry.bin

SHA256 4de7027ba8436d04a9a7be1eb094b92c7c2afa40b8f5111868b4907213a06612
MD5 abdefa1c811463d71b2fd4bbafff4c5a
SHA1 e09593fadec77b51b513ebc8fa1a72c324142f2a
SHA512 5efef6390ece549c84c67d8247c70b6291273e6a9703cafbdf68d23c7cef998f338c4b700f3c8eee47dab99c03ce1879a37dc4aebf587f454588f687795de362
SSDEEP 98304:I65j58n4vYfQQvonNf8QvonNf0QvonNfwQvonNf73T:I65j58U4vqlLvqljvql3vql7D
TLSH
T10416236DE7768E17EBF98B36F47602210D147C9EB1788A9FDA94C8FBAC41218D43121D
MD5 SHA1 SHA512 SSDEEP TLSH

Devel Sixteen/mod/CARS/911TURBO/textures.bin

SHA256 5c851ea99680aa253bde009532b1aaf8fc0c41cf2adfef60e69a09b97c028732
MD5 c1daa89ec02a57f289d9f341af78d118
SHA1 81e11afc96f31a585457f5ca5e031259c1d2f7d6
SHA512 01e911a5471bcfc775ba04cc56312d0f820cf6b2a21ce614399effe5250aa781a727946bbfb66eed8947bee01c98aa4cca003dd8f3c30c3bca906aada552ddb1
SSDEEP 6144:Fhln+TzztQ5zDWBat4FAquTOU2chuFfEEuIPZGMB8R:LsTzz+hDsqt7Ec3Eu0j
TLSH
T12A3413648780D72FC91C397DE455E619B213FBC0FECA5BC0E6F19A48BB5B21B09136A1
MD5 SHA1 SHA512 SSDEEP TLSH

Devel Sixteen/patch.dat

SHA256 3c6b1384f515f34a73bc0e1b59bdb680959291ea6e825d10d6221670f6ef87d1
MD5 e55e18394ff807fcc5d81ea2bff9f2e0
SHA1 71df6ff5f573579e83441b71bd36f420bc41f6ac
SHA512 137cd7b65d217d50cb3bceb95bec6aeab4105f93fec2b3957dc3a43c752dcbd44c2bfb626ea70866a60fec8daed0c471a32dad477a9b00bd8e39cbed93c197fc
SSDEEP 192:34gAchmrFE9WEAchmrF29pEAchmrFREAchmrFlchXchElbwhQlZwhBwh3cgv5aIN:34gAcheFE9WEAcheF29pEAcheFREAchV
TLSH
T194225620B308E3E7D8962B3114E569C123F96D6A3B12DB4C572A372D8C7579F3B22D85
MD5 SHA1 SHA512 SSDEEP TLSH

Devel Sixteen/picture.jpg

SHA256 d2e116d4b7ab4093013e4b65ca9cdd10c6bf4e9e15328175d861e06e1fd79de0
MD5 8ab1ad431b6c09350bfcdde78371bbeb
SHA1 33580f9b50c6ce87a8c1d05a82c32502f7aaed7a
SHA512 c7172cc5bcd3331e8e60eb69d2633fb971bb13ee1667c138e6d2d5e5f58e133a1ec5a9d00170009fca53ad321894de59d93d67d93cd4b70063bcbf769b0d8c20
SSDEEP 1536:AHJTNER9FrBuAyIpuWWxwuoMSeMJasIBiroxeotJYHe7+pK+5kQ:OERTrBuAyIpuWW/f8IUroxLJYHnpKWL
TLSH
T18143018D87517268C9B2B09CC1D8CC09965E32B59ABB076B782F67A4D36FC5700CB91A
MD5 SHA1 SHA512 SSDEEP TLSH

Devel Sixteen/readme.txt

SHA256 caac6ce4c3174e674403f539cc76ee47c9f922482cbb880277df8f442ab1b8ab
MD5 f6d7ad10f9421d395961270e8bb6522c
SHA1 ea7a07a4d97b480eb09357703574defd2e9fa4c9
SHA512 dd1d8a6cdf72ff80778e5db68365a658d89de543eb4632405beb07bf2d3493fcf004949956674f7ce0de1946d06ec4a3a04ed37a246a9d427e303ac8b0233c59
TLSH
T19001F14E5256C1F52D6105CF10353C02A3FE21DBEF2A876124683198219D0EB45B52AE
MD5 SHA1 SHA512 TLSH

Readme_ENG.txt

SHA256 caac6ce4c3174e674403f539cc76ee47c9f922482cbb880277df8f442ab1b8ab
MD5 f6d7ad10f9421d395961270e8bb6522c
SHA1 ea7a07a4d97b480eb09357703574defd2e9fa4c9
SHA512 dd1d8a6cdf72ff80778e5db68365a658d89de543eb4632405beb07bf2d3493fcf004949956674f7ce0de1946d06ec4a3a04ed37a246a9d427e303ac8b0233c59
TLSH
T19001F14E5256C1F52D6105CF10353C02A3FE21DBEF2A876124683198219D0EB45B52AE
MD5 SHA1 SHA512 TLSH

Readme_RUS.txt

SHA256 14e50ea1872fb4cff490b20abbcd1182efc38afd61173164f6ef3759093823c5
MD5 ac9a4dfb36e175a68551d69736bfd466
SHA1 5af7850462839cd1e5ca92b67f1a57ddce00c2c9
SHA512 8ccdc458c31e04de04e229ab1815405f1f3d3cb73fd8330038f8e6a19df3c21edec96b48c3cdbce338229738b7540a9fbc1220abdd079f5f7812e3119ed743d6
TLSH
T13D01411B2C0A0BB8A984CF7C366E300202FC1598E95D959270D8886D07B91BD670976D
MD5 SHA1 SHA512 TLSH

SECONDARY_LOGO_911TURBO.dds

SHA256 b97a4a142cea61f5ba2bd8099bc9cecf8bebc0d276af9f889f424a8e7414c601
MD5 79b5774e40933483574c738f90d59fcc
SHA1 bdeea324289a2b2de877a2fdefeb3e0cc8477ad3
SHA512 78f426ead422f999bd1768d0e46aa9ddedb9d5b8ca282561760da0012c35459c36a0ba5c7fce654f04e44a90ce79f61a5083a58e877d8d76e89300bfc9f6ec1a
SSDEEP 384:/2JjuIIIIIIIIIIIc3LVh6HnKoVwXPGgCfSU:/2JjuIIIIIIIIIIIcWVqGgC6
TLSH
T101837EC8BD02C4D0EEAE3BB5CE5689F55939BE14EFB0048FB421BE1D3732486A509759
MD5 SHA1 SHA512 SSDEEP TLSH

nfs.com.ru_devel_sixteen_prototype_nfsc.rar

CARSELECT_MANUFACTURER_PORSCHE.dds

Devel Sixteen/Devel.nfsms

Devel Sixteen/Install.exe

mscoree

dotnet

Devel Sixteen/mod.ini

Devel Sixteen/mod/CARS/911TURBO/geometry.bin

Devel Sixteen/mod/CARS/911TURBO/textures.bin

Devel Sixteen/patch.dat

Devel Sixteen/picture.jpg

Devel Sixteen/readme.txt

Readme_ENG.txt

Readme_RUS.txt

SECONDARY_LOGO_911TURBO.dds

Sharing

General

Malware Config

Signatures

File Explorer

nfs.com.ru_devel_sixteen_prototype_nfsc.rar

CARSELECT_MANUFACTURER_PORSCHE.dds

Devel Sixteen/Devel.nfsms

Devel Sixteen/Install.exe

mscoree

dotnet

Devel Sixteen/mod.ini

Devel Sixteen/mod/CARS/911TURBO/geometry.bin

Devel Sixteen/mod/CARS/911TURBO/textures.bin

Devel Sixteen/patch.dat

Devel Sixteen/picture.jpg

Devel Sixteen/readme.txt

Readme_ENG.txt

Readme_RUS.txt

SECONDARY_LOGO_911TURBO.dds