Analysis

  • max time kernel
    151s
  • max time network
    45s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/08/2026, 10:50

General

  • Target
    cr-setup-0.0.9.7919f.exe
  • Size 58.9MB
  • Sample260802-mxn36s1dpg
  • SHA256 ec0d00544f35dc0ab1e51057bcab146f8d1ed33adc5549f67fcf0a342cfaca34
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cr-setup-0.0.9.7919f.exe
    "C:\Users\Admin\AppData\Local\Temp\cr-setup-0.0.9.7919f.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:3272
    • C:\Users\Admin\Desktop\Crisis Response\Crisis Response.exe
      "C:\Users\Admin\Desktop\Crisis Response\Crisis Response.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      PID:3824
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x00000000000004EC 0x00000000000004F8
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:6104
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:1576

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          System.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsx2E7B.tmp\System.dll
          • Size 11KB
          • SHA256 fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          modern-wizard.bmp

          • Path C:\Users\Admin\AppData\Local\Temp\nsx2E7B.tmp\modern-wizard.bmp
          • Size 150KB
          • SHA256 88d63af9d68e6b490704698edd1c8ab0ae7bab0c701b89d1518c7643f3e083e0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nsDialogs.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsx2E7B.tmp\nsDialogs.dll
          • Size 9KB
          • SHA256 f2c1409faf2952c1c91f4b5495158ef5c7d1a1db6eea4a18f163574bd52fcad0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Crisis Response.exe

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response.exe
          • Size 626KB
          • SHA256 d4fec2d365c1a5c04fd385f51b815bf80cf39e0858fcaf497ae1a448a09b89f1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Assembly-CSharp-firstpass.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\Assembly-CSharp-firstpass.dll
          • Size 116KB
          • SHA256 7b71150c1861627cecd616a9db5b5cfaf74706ae8786bc2ba260eae695c1ec34
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Assembly-CSharp.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\Assembly-CSharp.dll
          • Size 1.4MB
          • SHA256 482f8bd6ef4546965b060463377470fc2da2db996de7ec16f29eb88f56a021b3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\System.dll
          • Size 1.0MB
          • SHA256 d13bb52a95a0646f47487dc40f5cc65f5a6fae9941ae7131dcebcb8e45b4c1a5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AIModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.AIModule.dll
          • Size 33KB
          • SHA256 f62f3edc3daad33565823ea1682340947556456c3cb657c9a74f8ac45e872015
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ARModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.ARModule.dll
          • Size 22KB
          • SHA256 d0e1310f749cf837c30695c2da01018a5684a820ecc05fffec09559dab8881fb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AccessibilityModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.AccessibilityModule.dll
          • Size 8KB
          • SHA256 314a886fdd2ddca15d5d12ddf62fa203069e03904d2a6f493eb6059888827577
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AnimationModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.AnimationModule.dll
          • Size 79KB
          • SHA256 8da6a947ae8b44fc68a9a6a3cdce64547f12fd01edffd1b4ea2a9166b2ba40bd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.AudioModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.AudioModule.dll
          • Size 49KB
          • SHA256 a570626ecde25454a1894b26addc21e969cd13679cf05dc422d843670083010e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ClothModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.ClothModule.dll
          • Size 11KB
          • SHA256 f24c6fe9489ca2d3dd001f61b111ecaa178f2587180779ac7e92e99742add8ba
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ClusterInputModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.ClusterInputModule.dll
          • Size 7KB
          • SHA256 506083b671be716d70d5c46c5ad3c34d04c2396c6c3210dd8c8d439cfddb25cf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ClusterRendererModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.ClusterRendererModule.dll
          • Size 6KB
          • SHA256 5e509334fdf115c9b721a427ada0139357544a2da2846466312ff43dc13bb2eb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.CoreModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.CoreModule.dll
          • Size 668KB
          • SHA256 64094b50fcd0d8f41b69ea6441f81fdb8b030ca1b18cbb787fac331937345de8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.CrashReportingModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.CrashReportingModule.dll
          • Size 6KB
          • SHA256 903a0042ea8b438a84224ff7b0045649604d67122b427ad5c860759a287653c0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.DirectorModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.DirectorModule.dll
          • Size 8KB
          • SHA256 086f79f085a07c4c78d794c0d72af43be4d6480bea5c3c479173ba147eeef162
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.GameCenterModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.GameCenterModule.dll
          • Size 24KB
          • SHA256 a76759450a801f93e25b5046c3493371d32eaa1bc02747569a90262c089418c3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.GridModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.GridModule.dll
          • Size 9KB
          • SHA256 130ecae439e35ce9c43a3c9113af1f3a4b986bb490f5761f0b0e5eddf2f754a2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.IMGUIModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.IMGUIModule.dll
          • Size 137KB
          • SHA256 409d5483308d84becfe136376e737ba3e1bdec757b6dbb7e7810d6fc1dac4a51
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ImageConversionModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.ImageConversionModule.dll
          • Size 7KB
          • SHA256 1e3b6f2a891051ada4ad0394e04e590c19633628ef00aa89ea9f5df46746b1ff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.InputModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.InputModule.dll
          • Size 12KB
          • SHA256 b81aefb8beb60e5963e17cabaca6aa1b36da1a037e73cf3be8a2c52cd5b93d54
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.JSONSerializeModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.JSONSerializeModule.dll
          • Size 6KB
          • SHA256 429d65f91d3190b1305fd090dfa94cfaa46dc982689accd3d60b79544b51789e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.Networking.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.Networking.dll
          • Size 248KB
          • SHA256 d5763de57bccd319b6e5a3027d6fcf5bb79ba93c0de1b51085f791a0b0e1d1d2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ParticleSystemModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.ParticleSystemModule.dll
          • Size 107KB
          • SHA256 c563b99ad1cd68f5f9577f77bcfc04114faa6fc9b6afd718f6a88fc2425ef667
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ParticlesLegacyModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.ParticlesLegacyModule.dll
          • Size 15KB
          • SHA256 3edf7eb061c45c196274bc32d1bacd9f797017298ecb361cb82c0520027b80db
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.PerformanceReportingModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.PerformanceReportingModule.dll
          • Size 6KB
          • SHA256 dc76d8ba39c29d0f33b70281761b18fa355222a0a678995b712371cf8e1bd8a2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.Physics2DModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.Physics2DModule.dll
          • Size 75KB
          • SHA256 2586a0e1c7711168fb648d656613389e2dd377764f04e3e0f3dfada23560e4d6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.PhysicsModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.PhysicsModule.dll
          • Size 67KB
          • SHA256 7d1d1bfda7c591978a417cd78d6d569be2cfb81184185b15ce9346d54a6e2c92
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.ScreenCaptureModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.ScreenCaptureModule.dll
          • Size 6KB
          • SHA256 78fa68e9bf084be7e9240ad056f1c93d5ee988eeb064aee8ba67ecf8161b4b81
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.SpriteMaskModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.SpriteMaskModule.dll
          • Size 7KB
          • SHA256 0e3cb3e94b8c484f08c1a61f7c0a0d3f89582dc6fb7a983c51a500c469ebab33
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.StyleSheetsModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.StyleSheetsModule.dll
          • Size 12KB
          • SHA256 e0badddf197c05ec143f63f10d8023ba00219a79cb14b92d8a6de45e4fd34c51
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TerrainModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.TerrainModule.dll
          • Size 28KB
          • SHA256 62747a6e6b01a7fab644c722f76155f2a4eb4d2d8a13d19afd50f771084c4ff7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TerrainPhysicsModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.TerrainPhysicsModule.dll
          • Size 6KB
          • SHA256 d5c7c5545333d6e5adc85d542db79194730d9bd80ee286074903f06e2ebe3eb1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TextRenderingModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.TextRenderingModule.dll
          • Size 24KB
          • SHA256 deeaf5c771bd78df74623b773231a37ac8ef52f9cb17fbc8a6977a1a6846f3bc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.TilemapModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.TilemapModule.dll
          • Size 21KB
          • SHA256 b0255eabb7733811dfefb641916943abd10f1a9de6a0a09ebcfa655dd2f2cad6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UI.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UI.dll
          • Size 243KB
          • SHA256 44d9ed706cc50f64f4de9f221d42c43e1420efd6b39f7bec76137bee269ce532
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UIElementsModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UIElementsModule.dll
          • Size 162KB
          • SHA256 3319f69cfabd7175caa4147c8bf9f48129ded8ca597cdce227e43835caebc217
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UIModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UIModule.dll
          • Size 19KB
          • SHA256 9b306352ea9d8b726421a317db70dbbfd094064fd0669cd5e5763789e5bf7094
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UNETModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UNETModule.dll
          • Size 73KB
          • SHA256 8df52123f976a9d4ff20e1a99c0d6fc7e69ea9205e2ba513d005d5c5da9c776f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UnityAnalyticsModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UnityAnalyticsModule.dll
          • Size 13KB
          • SHA256 236d2520c8fa03896ac6c8c6874e2f5c994d9bd21f93979c7d8fece28fbdb038
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UnityConnectModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UnityConnectModule.dll
          • Size 10KB
          • SHA256 796e7d14d7374246a63e378ab3e51c8d80e8cadd46f446a5ef5ec15015b047d0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UnityWebRequestAudioModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UnityWebRequestAudioModule.dll
          • Size 8KB
          • SHA256 265a9872548a362175c4850b1dd5dec14fa284d25f1a7617dc4fb7f3f86b5d0a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UnityWebRequestModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UnityWebRequestModule.dll
          • Size 34KB
          • SHA256 9f5f6c447e12ca32ae5a51b85f8a65e46f2e6e3a0282f19dbba50d1dcdbd1601
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UnityWebRequestTextureModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UnityWebRequestTextureModule.dll
          • Size 7KB
          • SHA256 cfb33c3ef87fbb0562655ddf1e30f4591c4eaa8aeb64e77dede1abca3d7fb90a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.UnityWebRequestWWWModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.UnityWebRequestWWWModule.dll
          • Size 18KB
          • SHA256 da603b5b809eec030545651c94716f60c5fbd39793650f36c19e26364ad8ae9a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.VRModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.VRModule.dll
          • Size 24KB
          • SHA256 63238fd6bc12882f7ada156222d3284c9aea584ad6b3c2c163d0fe35450a4dfb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.VehiclesModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.VehiclesModule.dll
          • Size 10KB
          • SHA256 209ee4d92f536e4bbae6d9a54d5a2dde114155d95149dcd024b260f4582d8c80
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.VideoModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.VideoModule.dll
          • Size 17KB
          • SHA256 c317624a77a85b8dc47564b56f7356572d22ad52d07f2e3d2652ef867f95c896
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.WebModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.WebModule.dll
          • Size 29KB
          • SHA256 4dcb5956cd59ad45ab2e7010b1afe432bd4f7bd9952fdbc4b1ef175f71781aa0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.WindModule.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.WindModule.dll
          • Size 7KB
          • SHA256 6fe5e9efd44cff8a698d1f48b279060da3ea3168a27d034fd64c3aeb5470298f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityEngine.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\UnityEngine.dll
          • Size 48KB
          • SHA256 97e0d30235f179cc5fefd4d3986a2e9f622853afb6304e10e494c682c81a9195
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mscorlib.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Managed\mscorlib.dll
          • Size 2.4MB
          • SHA256 56f448fff0a2e14d5e63f60622b909a62e455a73c2bb38b7ea897f8947aa5fe3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mono.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Mono\EmbedRuntime\mono.dll
          • Size 2.0MB
          • SHA256 ae7543ee31d3225f4e73b1f854d9a9ac61e3f80c3d3b2f7eb890ca87a6756c79
          • MD5 SHA1 SHA512 SSDEEP TLSH

          config

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Mono\etc\mono\config
          • Size 1KB
          • SHA256 b585c70c70c88b3e03489361558f5d711c2ef71df9baaf37d92dbf95fbf6cd92
          • MD5 SHA1 SHA512 TLSH

          unity default resources

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\Resources\unity default resources
          • Size 3.4MB
          • SHA256 b809e16256c643c6ac8b5e6d0af164a9c9ec07e0e5bd49460939c39da5fafb40
          • MD5 SHA1 SHA512 SSDEEP TLSH

          app.info

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\app.info
          • Size 24B
          • SHA256 fa58c756c05ae8ce4251ce80f611b7a419d99f2f35b2bb43a61629ece0edcb0d
          • MD5 SHA1 SHA512

          boot.config

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\boot.config
          • Size 17B
          • SHA256 fdbe19aa4458c4ee4156799a4557a1c1d76ec13b5a071c4caae746bd7b1a8199
          • MD5 SHA1 SHA512

          globalgamemanagers

          • Path C:\Users\Admin\Desktop\Crisis Response\Crisis Response_Data\globalgamemanagers
          • Size 570KB
          • SHA256 4908fabc5f0f6de54d37f2e4995802a25738a8f642084e29d847e22245d2ecce
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnityPlayer.dll

          • Path C:\Users\Admin\Desktop\Crisis Response\UnityPlayer.dll
          • Size 17.4MB
          • SHA256 30a16cbb616ffee4d430e948f484f5689379caccdd070bfb213efd629f581b60
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/3824-452-0x0000000004620000-0x0000000004720000-memory.dmp

          memory/3824-451-0x0000000003F70000-0x0000000004070000-memory.dmp

          memory/3824-506-0x0000000003F70000-0x0000000004070000-memory.dmp

          memory/3824-507-0x0000000004620000-0x0000000004720000-memory.dmp