35_Crystal_Maiden_[.]rar

resource
unpack001/Crystal Maiden/Backup-Restore/Revert.exe
unpack001/Crystal Maiden/Install.exe

35_Crystal_Maiden_.rar

SHA256 21763a26bf0dac89f4b140e25045460a25e18b8b05630162a490a264b82b1ea5
MD5 850422964f7bf4bb782d05bbb928f68f
SHA1 02a2261235d61f071a2c74b30e9a9f3d3333e5e5
SHA512 0a0447a214ad89b8f0afcc66e9043074072ade5530c490607669100eca1e80809103556250dcb0f85ea0a5b60441330df7837e0807404f75ed366b27e43dcb7f
SSDEEP 24576:fIYkDR3E/lcDSWdiulu6KwzpZyJ9BNRlkB+LE/lcDSWdiulW6HAxYf2:fILDR3E/ljR4ryljKB+LE/lx3xx
TLSH
T17065330994720FDCD08781749D9707F2FCE9EF35C2A94786BDAF6AE91C4962A0330E65
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Backup-Restore/Revert.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 66a36989b4ab4177612ef7e84cab7d982af8ef3ae87cdb2d65e2fec3e69e275a
MD5 ab94712d03ba7a82474950b252f2170a
SHA1 420e36e653756dc4f244f40f86fb4b18d65591f1
SHA512 8366bf0e643744fbd408242801957ae6db218e90fcbd6714166202e5cbc1db773094d2372da947f099f297119607c3d3ae3d245828d3e801a9a30e0bdb1a3ac7
SSDEEP 768:Cjsup9JvmFk6XOQxjijh0sOwjQ9dYcyKk1Hp:CjsVFkUpdijswjQ9Dk1
TLSH
T1BCC208153BAB046BD55D857914B092A521F6B95F6A0BC38B78CF0CBB37633602702EE7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Crystal Maiden/Backup-Restore/config.ini

SHA256 3891dbeeb102a1b945cbe7a9ed8e68f8c9f0b4495a5a7a276eda583314ce9efc
MD5 2938212d2d3bf775b601c945812f7d1e
SHA1 fec4163a90f1ea4a5d77ee06718c3605282cb6da
SHA512 270e2426c782708b569aa48a4d86ed20370eefc2e5ff96b14dc9deccc55a56831c82d5d6882a93a846def95e2cdbb8b32eed48e8e5f345dab10049217d987625
MD5 SHA1 SHA512

Crystal Maiden/Backup-Restore/files/materials/models/heroes/crystal_maiden/crystal_maiden.vmt

SHA256 fb200ffc256db344a931cae258a64e28232a7df19eb8254c89745cdeffd23c85
MD5 ffe0e91793356d7d59cf6b8597cd79c8
SHA1 e7b0645352c60304c39c58535248d5735c1d70e1
SHA512 4b150db7a2f7b8408d5d300bef1f4d90078be25ec467684ec3b85b93f9c7c7110a7c0e205c3923be932be46475b805c983dd7d574f946fb8e0f467f30d4667cc
TLSH
T171F0C209A2BA35186EDF6BDCF8B1A68D2FA69D8B104B28D07FF03812D0955015B48FD0
MD5 SHA1 SHA512 TLSH

Crystal Maiden/Backup-Restore/files/materials/models/heroes/crystal_maiden/crystal_maiden_color.vtf

SHA256 4c55d6301f0da8f930f7a2ca0fa102ec9bf63a9d6f834f4793c083a0de15a856
MD5 9f829a0ac22abd1dfe0a92f0582219bf
SHA1 b24c019d1216159914c307b94e22d02930ed4ba8
SHA512 c79393498cb4dddfe2c8f04c82edb747ce862a6721cda1c7cb9cfb7a3c8a509fd8d2126d965f2f792123c53628b9f1ecf99561e0deb167e60cc06208ebfe5430
SSDEEP 3072:kO1Qo8VeOaFZL9GVOYKgPgS/ZkiiAq4cgK:k8Q2pt9Gi6gS/iAq4cgK
TLSH
T15004D55B7D8CF414E0690EB32D8BE59DA7E5BC0DDA5E0A473BC46B93082AF10784D396
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Backup-Restore/files/materials/models/heroes/crystal_maiden/crystal_maiden_masks1.vtf

SHA256 f2f65cb6eebf44935c6d3b3672aa877d9e3bc37886bafbf892b6524502d0e909
MD5 10cf968e969a50f04d8976bab0057e58
SHA1 2b911da063697ca38c86508d541f4f69e97bd6ca
SHA512 61a3de4841b6fef6e2e89373537114061f6ebf98428fd7a34a3cb50a9c9d0f554fc01c4ed9242656b786ee02c62874cd36986cc6d070108bb2d70a0669f93a27
SSDEEP 192:WbwS+zlNL7JEYjs1NfSW1CZBmzWgXpY0VlAwm1KeqLKwMIF:WkS+zD7JEHT6W1jzWu6mlAwzLdMIF
TLSH
T17A04F45EE395CBADC0280F7D896F57A023FAE0A1AD39479726567138EC7F02A4E513C4
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Backup-Restore/files/materials/models/heroes/crystal_maiden/crystal_maiden_masks2.vtf

SHA256 7a5f0b452119f0cf00cc4076212e701c8d5fa67c43ccbb469b5264fe5dabc0e6
MD5 9d2282f1698f0f00d660936ea69b2f5f
SHA1 b6bf86f71179914f9ea7a0f2433a45f76f69b4ba
SHA512 e0247497588fe820e9af8b0fcff8c4baf6c1d86420a8895f968722ab11ecfbd715ad0524436f78dcbb7f8d17a614b9c756c2632e7283e329c7c0bbf8c3c6d903
SSDEEP 3072:/G0PYr/i5t7JWkqRyzLr0U/FiHSoPQ0/vCVki8NG7CpKryez+8:7Yrqz76wzd4QPB8NG2Q7C8
TLSH
T10C04B44366CD8427D0ADE1BB18DAA2DA67E17560ED530FE33C58BB468C94A411F2FE07
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Backup-Restore/files/materials/models/heroes/crystal_maiden/crystal_maiden_normal.vtf

SHA256 9aceb359dc98a3909dd0189c769a240ed08816cf56e12e66888b0853b4a5d938
MD5 b81f287366b19320bbd91eac15199141
SHA1 cf223a40dfec6f23d7021fe5bc35bacb8004df16
SHA512 8baa243e43d43bcc1b6105d4ba8f9a2e025349ed3834c602b55fea3d712478f95e877312bc48bb235083b17c9a8de70eb4c3af09dd77ea926487fcfe073a1b21
SSDEEP 1536:YAxrKJscvJJFW6MXmNEGN/gAI2T22uDIjDysAbirZ3DyDonulyfLLb3fW5:YARcvJJFOWd/gA0pDsDysQ85DOlyzLbc
TLSH
T144837B2E8B3E7498622D43D40E42BD9BDA0A2E1457929437C75D68E2357B13C1E1BA3F
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Backup-Restore/files/models/heroes/crystal_maiden/crystal_maiden.cloth

SHA256 02a685f265472e1ec8eaa20a3c8ccacfe27cbe3798399fa02ace398dd12f923d
MD5 6847d92b9dbdedc811b1f51d0a32f0d3
SHA1 e5486473ca5f0131cb87c6b6b924f67088dbf707
SHA512 5dfaf9b9f613339ab9d9fed1a4a288a7d9bafd3751619a1f6de53078616f3d97810f0fce0ddea1e86e3d88baa7db6e2e37c5f4d9205353dde658496f91aeb12e
TLSH
T15201816F7157D4ABCAC94A03973135F14464F05B89EECFC8EDD9990D51A7D390352288
MD5 SHA1 SHA512 TLSH

Crystal Maiden/Backup-Restore/files/models/heroes/crystal_maiden/crystal_maiden.dx90.vtx

SHA256 6d8459c39911404c070e7c9f2f2c8e5511c048afe67ab3fd5592081a2c8454cc
MD5 12727752a9a8586d3198bb84d21c640e
SHA1 acb423c902b75a59d63ebe7fb0d7d040520eb0c4
SHA512 c16bfeb8794f54cf9c6c77a2c530c73eb80c49cba553bf3f660b9811407ffb80879b9ca4cd810da02bb4abffd50b1a77ecdda96a8bae643b04683137852fb8d6
SSDEEP 768:WbQkeqKaV34+0uEyTPNQFeyc03tn6LbIDZ2AnF/rrdd80K46rRSd:WxezSp3ZQFeZ03tyS2An1rD2Sd
TLSH
T1E143C312E763951BDC2E527420FF0B90F36682CCA31EE7575608F2627E921CB2D171AE
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Backup-Restore/files/models/heroes/crystal_maiden/crystal_maiden.mdl

SHA256 d067596d7d1e030be6e2c4e4827b230f23c4eb0aa30ab83f98fc946570ee9029
MD5 0e2d32cd46876ad8ada21a02079508e6
SHA1 c1c877cd9d9c158d86d70dfc9d6f17d094cac9cb
SHA512 2ba6110cf0f683f173136fdd39f6e6a1e1526171602ab30849ca44a8059833584886dccbb84fa54f2fd87e904e6680b64ce414936b7efceeab6aae1a8c7172df
SSDEEP 6144:/hmumHIT8iZ6+CP9HAsswCjhEO2l79hUFdyi5omhz6WyKK3ddQANEZ04hKpm6ov8:/hmumoT5ZwJPO72l5eF4iCzsSoGIrA
TLSH
T12CF4AE5CF853E562C51E927A9EFBCEC831215E5628846A0FF19A37BC356233D70472CA
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Backup-Restore/files/models/heroes/crystal_maiden/crystal_maiden.vvd

SHA256 d87d6cab48bbdc045e873eac8caa7f055a4764b188e2636ef169caf823801348
MD5 09c55cc981b2c08c6d09f3bc7d881eae
SHA1 0a2b3861c635cc615e8e13079997bb33bf3081b2
SHA512 5f951cb6161edf7a80f1331413e6eaba83bb59bbd03d504bade88dc33d06a4c4d438bf11220ef15d0be7fd74006ca054d0ac980c30141d19128b4908541fb07a
SSDEEP 3072:xwtxr2oXR5WWTZwgvfMk0zoRAwM1qko04B32tlZW4:etUoXVfv0KlYt74p2tlT
TLSH
T149F3362D6B59DF7EC3B53237BA8B2C10D438C2D44A7E16B7A311431CBEE47801A952B6
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Files/materials/models/heroes/crystal_maiden/crystal_maiden.vmt

SHA256 e624f06f45e1b333900c80651bdb6eceba7ecf03ff3267a27456b1467aa37480
MD5 94320d0fc97d98724fa1c26c869daf97
SHA1 f263af37e282f0440f4f2f65e9b4e679f62343da
SHA512 065c3f5328b0169647445b325a8ebe38d253076fb01eb91ad42feae395e086a5d9a3d8328af4cef7ac1fd0688bdc6667ca8c73041c6afdf2246991dbae134e77
TLSH
T15AF0C205A27A31186EDF6BDCF8B1968D2EA69D4B104B28D07AF0381290505015B48FD5
MD5 SHA1 SHA512 TLSH

Crystal Maiden/Files/materials/models/heroes/crystal_maiden/crystal_maiden_color.vtf

SHA256 f3e29ec7d61023f1066cd2e988e7aa642ebbf3bb805976641f0a043204b39bf7
MD5 fd2679c43d6592d017023eb422919f16
SHA1 d9ff979a5cabae2734437f7c56b8ac749a669452
SHA512 07548a1ce002cf2b1f6dc9d55e4dafde1cf617f65e848b824eed8bebb25f5f254756e8d72a8930663d466dadbca277d5c71e5328035c00bf84dc839e2a122487
SSDEEP 1536:UA/ZK8orsDJGyGnBVQiXEcoxR9jHh0LcABZFhFNOg2X4dVWpg/abxfKI:UAhKXrsvwVBEZ9jBLEZbFAg2X4PQfKI
TLSH
T117043E8B7D84F14CD5651FB61D0BC6DCC7EBBD84DA4A0A833AC07B8B083AE643549396
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Files/materials/models/heroes/crystal_maiden/crystal_maiden_masks1.vtf

SHA256 f2f65cb6eebf44935c6d3b3672aa877d9e3bc37886bafbf892b6524502d0e909
MD5 10cf968e969a50f04d8976bab0057e58
SHA1 2b911da063697ca38c86508d541f4f69e97bd6ca
SHA512 61a3de4841b6fef6e2e89373537114061f6ebf98428fd7a34a3cb50a9c9d0f554fc01c4ed9242656b786ee02c62874cd36986cc6d070108bb2d70a0669f93a27
SSDEEP 192:WbwS+zlNL7JEYjs1NfSW1CZBmzWgXpY0VlAwm1KeqLKwMIF:WkS+zD7JEHT6W1jzWu6mlAwzLdMIF
TLSH
T17A04F45EE395CBADC0280F7D896F57A023FAE0A1AD39479726567138EC7F02A4E513C4
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Files/materials/models/heroes/crystal_maiden/crystal_maiden_masks2.vtf

SHA256 7744a4c9f7b392317e5dda0bb33caaa7c46374317e99b9301d5b28e2dcd8688b
MD5 d5ed59d6ff15e858bae034ee237b41b7
SHA1 ac2d42325099b14c0dc8c58b5bef5246aad1fa31
SHA512 a796943ad0f2a73ad81e24200719c2c72d10b5ddadab78d4d3b8fe548600d64fd7aee8f91e52ad86f75049ab2d8b4255571f9f57557c56444de2aed32492ba4c
SSDEEP 3072:4wZTdzZjT3LzWfTTVR7rWvq3FuJAeYdADq:4uZKTTVR7KJBY+Dq
TLSH
T143042E4242CD802DC2BDD9F6A897A3CA76E1F594BC080BE33768D2968CD76215C3E577
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Files/materials/models/heroes/crystal_maiden/crystal_maiden_normal.vtf

SHA256 3a4b31fbef99957003b79580bd3f813c42eb0b8938f8214162bdf544b89592c3
MD5 da4dd4305732856b204a747cd40a2077
SHA1 edb325fe5277dd201f14a48f4c90911251cf8d80
SHA512 61063810f8c3a8cbec42e33e44ba14953c717f65b7a1dbaeeace6238b1b094469ea88715506ccd0c11b7674f4ce48514c09e142c6407c4302e3316ad41b0c3d1
SSDEEP 3072:dm38vRjjohuqY9vsAKRN1DoF02Gf2YU41zILVY3uR1qPoB:dYGRjj8up0/L1cF032YBUOW5
TLSH
T1E3044F007A15F65DDA9E46790E00D9EADFBB7C459BB443A337D867CF6132E2108123AB
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Files/models/heroes/crystal_maiden/crystal_maiden.cloth

SHA256 02a685f265472e1ec8eaa20a3c8ccacfe27cbe3798399fa02ace398dd12f923d
MD5 6847d92b9dbdedc811b1f51d0a32f0d3
SHA1 e5486473ca5f0131cb87c6b6b924f67088dbf707
SHA512 5dfaf9b9f613339ab9d9fed1a4a288a7d9bafd3751619a1f6de53078616f3d97810f0fce0ddea1e86e3d88baa7db6e2e37c5f4d9205353dde658496f91aeb12e
TLSH
T15201816F7157D4ABCAC94A03973135F14464F05B89EECFC8EDD9990D51A7D390352288
MD5 SHA1 SHA512 TLSH

Crystal Maiden/Files/models/heroes/crystal_maiden/crystal_maiden.dx90.vtx

SHA256 6d8459c39911404c070e7c9f2f2c8e5511c048afe67ab3fd5592081a2c8454cc
MD5 12727752a9a8586d3198bb84d21c640e
SHA1 acb423c902b75a59d63ebe7fb0d7d040520eb0c4
SHA512 c16bfeb8794f54cf9c6c77a2c530c73eb80c49cba553bf3f660b9811407ffb80879b9ca4cd810da02bb4abffd50b1a77ecdda96a8bae643b04683137852fb8d6
SSDEEP 768:WbQkeqKaV34+0uEyTPNQFeyc03tn6LbIDZ2AnF/rrdd80K46rRSd:WxezSp3ZQFeZ03tyS2An1rD2Sd
TLSH
T1E143C312E763951BDC2E527420FF0B90F36682CCA31EE7575608F2627E921CB2D171AE
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Files/models/heroes/crystal_maiden/crystal_maiden.mdl

SHA256 d067596d7d1e030be6e2c4e4827b230f23c4eb0aa30ab83f98fc946570ee9029
MD5 0e2d32cd46876ad8ada21a02079508e6
SHA1 c1c877cd9d9c158d86d70dfc9d6f17d094cac9cb
SHA512 2ba6110cf0f683f173136fdd39f6e6a1e1526171602ab30849ca44a8059833584886dccbb84fa54f2fd87e904e6680b64ce414936b7efceeab6aae1a8c7172df
SSDEEP 6144:/hmumHIT8iZ6+CP9HAsswCjhEO2l79hUFdyi5omhz6WyKK3ddQANEZ04hKpm6ov8:/hmumoT5ZwJPO72l5eF4iCzsSoGIrA
TLSH
T12CF4AE5CF853E562C51E927A9EFBCEC831215E5628846A0FF19A37BC356233D70472CA
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Files/models/heroes/crystal_maiden/crystal_maiden.vvd

SHA256 d87d6cab48bbdc045e873eac8caa7f055a4764b188e2636ef169caf823801348
MD5 09c55cc981b2c08c6d09f3bc7d881eae
SHA1 0a2b3861c635cc615e8e13079997bb33bf3081b2
SHA512 5f951cb6161edf7a80f1331413e6eaba83bb59bbd03d504bade88dc33d06a4c4d438bf11220ef15d0be7fd74006ca054d0ac980c30141d19128b4908541fb07a
SSDEEP 3072:xwtxr2oXR5WWTZwgvfMk0zoRAwM1qko04B32tlZW4:etUoXVfv0KlYt74p2tlT
TLSH
T149F3362D6B59DF7EC3B53237BA8B2C10D438C2D44A7E16B7A311431CBEE47801A952B6
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Files/models/heroes/crystal_maiden/crystal_maiden_animations.mdl

SHA256 5cc6d1a6ea69dc9b7937540bcec6b65a24b6afb3e372639ca15a68d3bc97666d
MD5 72f7a2cc82d906cc86cf81fe05c15c5b
SHA1 ef4910a1ab4b8090ed000d3d66a0d8668c9c94eb
SHA512 5d68c407f16303bdb927464ca1e4502a156a105a40856acefdbdc82b51d699b6f0a153aad10ce8f31028918ee58b186dbfa7605bd74ca46e356983b580a39df5
SSDEEP 6144:bjBOd8ZWA1+C1u8+ADhOr2ecHlrrmjZXl1fGOF387JR6QUmcYEM1J02BKDuvg3Ng:bu8ZWuJ13+trIHlvmjZXl1fGOB873dUm
TLSH
T10F747C4CFD05FA3AC95C07B71CBF8BD835224A86788A251F741D73BC697136E642A2C9
MD5 SHA1 SHA512 SSDEEP TLSH

Crystal Maiden/Install.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 66a36989b4ab4177612ef7e84cab7d982af8ef3ae87cdb2d65e2fec3e69e275a
MD5 ab94712d03ba7a82474950b252f2170a
SHA1 420e36e653756dc4f244f40f86fb4b18d65591f1
SHA512 8366bf0e643744fbd408242801957ae6db218e90fcbd6714166202e5cbc1db773094d2372da947f099f297119607c3d3ae3d245828d3e801a9a30e0bdb1a3ac7
SSDEEP 768:Cjsup9JvmFk6XOQxjijh0sOwjQ9dYcyKk1Hp:CjsVFkUpdijswjQ9Dk1
TLSH
T1BCC208153BAB046BD55D857914B092A521F6B95F6A0BC38B78CF0CBB37633602702EE7
MD5 SHA1 SHA512 SSDEEP TLSH