8673a58ac3b00d4f4b5e475b2d764ef1a7162da9c2fe00463a5e69c55353e78b

Analysis

user interaction
yes
max time kernel
149s
max time network
216s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Fallout 3 Türkçe Yama Full.exe
Size 660.4MB
Sample260809-w19zgstcph
SHA256 8673a58ac3b00d4f4b5e475b2d764ef1a7162da9c2fe00463a5e69c55353e78b
MD5 b16abe74c079e8a5d1e5bd38088524f7
SHA1 5189b5c0b7719174bf918a2037bc6c49ace159ef
SHA512 4687967b5a0e4b85a3ff667cd2d22ac56d262c5ddbc8517737590eb6baebca1aa849bfc5fce84eb26beaa85b6c54d5e24bae8d899363005db7d39eac1fd6212b
SSDEEP 12582912:65AvI5JTKG34aV6llGHWAcoJ7OCHzoqJihspWHMeik9vrFHJjsheKdU6eaXnA:+AvEV6ls2FoJymcqCspWseiEjkeju3A
TLSH
T1AF7933333519C516C2A229B2E76CA6FB9268BD26AF7110C772EC3E1E76711C11336D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
behavioral2/files/0x000b00000001c63a-382.dat	acprotect

Executes dropped EXE 2 IoCs

pid	Process
4052	MSI4AD2.tmp
4592	MSI4D5A.tmp

Loads dropped DLL 18 IoCs

pid	Process
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
608	MsiExec.exe
3220	MsiExec.exe
3220	MsiExec.exe
3220	MsiExec.exe
3220	MsiExec.exe
3220	MsiExec.exe
3220	MsiExec.exe

Enumerates connected drives 3 TTPs 64 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\H:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\T:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\U:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\B:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\J:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\Q:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\Z:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\B:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\T:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\K:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\I:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\M:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\Y:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\H:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\W:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\A:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\W:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\Z:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\M:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\N:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\R:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\G:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\V:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\X:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\D:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\O:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\P:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\Q:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\U:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\L:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\L:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\A:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\P:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\R:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\J:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\S:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\X:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\Y:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\G:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\I:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\K:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\N:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\V:	Fallout 3 Türkçe Yama Full.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe

Drops file in Windows directory 21 IoCs

description	ioc	Process
File created	C:\Windows\Installer\e5bb449.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIB825.tmp	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\{D582F066-F816-4F61-B25B-EC1296C226EE}\Fallout3.exe	msiexec.exe
File opened for modification	C:\Windows\Installer\{D582F066-F816-4F61-B25B-EC1296C226EE}\Fallout3.exe	msiexec.exe
File created	C:\Windows\Installer\e5bb44b.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI4AE3.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\e5bb449.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIB729.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIB7D6.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI4AD2.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DFF8380D24AB3F571C.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIB5DF.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIB6BB.tmp	msiexec.exe
File created	C:\Windows\Installer\SourceHash{D582F066-F816-4F61-B25B-EC1296C226EE}	msiexec.exe
File created	C:\Windows\SystemTemp\~DF0052B48A745A0A96.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DF7C85434C615453B6.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\SystemTemp\~DFC4EB1CF3DCC16821.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI3D83.tmp	msiexec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Fallout 3 Türkçe Yama Full.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MSI4AD2.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MSI4D5A.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Fallout 3 Türkçe Yama Full.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2744	msedge.exe

Modifies Control Panel 1 IoCs

defense_evasion

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Control Panel\Colors	Fallout 3 Türkçe Yama Full.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe

Modifies registry class 24 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\ProductName = "Fallout 3 Türkçe Yama"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\Language = "1055"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\SourceList\Media\1 = ";"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\PackageCode = "3E5F4BB4286515C4F82202EDBCF3CF2B"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\F28C633EBAD547647A0A36BEFBCBC8B9	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\F28C633EBAD547647A0A36BEFBCBC8B9\660F285D618F16F42BB5CE21692C62EE	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Roaming\\Ahmet Özbay\\Fallout 3 Türkçe Yama 1.6.0\\install\\6C226EE\\"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\Clients = 3a0000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\660F285D618F16F42BB5CE21692C62EE	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\ProductIcon = "C:\\Windows\\Installer\\{D582F066-F816-4F61-B25B-EC1296C226EE}\\Fallout3.exe"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\DeploymentFlags = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\SourceList\Media\DiskPrompt = "[1]"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\660F285D618F16F42BB5CE21692C62EE\MainFeature	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\Version = "17170432"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\Assignment = "1"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\SourceList\PackageName = "Türkçe Yama.msi"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\660F285D618F16F42BB5CE21692C62EE\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Roaming\\Ahmet Özbay\\Fallout 3 Türkçe Yama 1.6.0\\install\\6C226EE\\"	msiexec.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1580	msiexec.exe
1580	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeSecurityPrivilege	1580	msiexec.exe
Token: SeCreateTokenPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeAssignPrimaryTokenPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeLockMemoryPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeIncreaseQuotaPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeMachineAccountPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeTcbPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSecurityPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeTakeOwnershipPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeLoadDriverPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSystemProfilePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSystemtimePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeProfSingleProcessPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeIncBasePriorityPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeCreatePagefilePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeCreatePermanentPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeBackupPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeRestorePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeShutdownPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeDebugPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeAuditPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSystemEnvironmentPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeChangeNotifyPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeRemoteShutdownPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeUndockPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSyncAgentPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeEnableDelegationPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeManageVolumePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeImpersonatePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeCreateGlobalPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeCreateTokenPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeAssignPrimaryTokenPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeLockMemoryPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeIncreaseQuotaPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeMachineAccountPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeTcbPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSecurityPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeTakeOwnershipPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeLoadDriverPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSystemProfilePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSystemtimePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeProfSingleProcessPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeIncBasePriorityPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeCreatePagefilePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeCreatePermanentPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeBackupPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeRestorePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeShutdownPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeDebugPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeAuditPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSystemEnvironmentPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeChangeNotifyPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeRemoteShutdownPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeUndockPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeSyncAgentPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeEnableDelegationPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeManageVolumePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeImpersonatePrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeCreateGlobalPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeCreateTokenPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeAssignPrimaryTokenPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeLockMemoryPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeIncreaseQuotaPrivilege	2440	Fallout 3 Türkçe Yama Full.exe
Token: SeMachineAccountPrivilege	2440	Fallout 3 Türkçe Yama Full.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2440	Fallout 3 Türkçe Yama Full.exe
2440	Fallout 3 Türkçe Yama Full.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1580	msiexec.exe
608	MsiExec.exe
3220	MsiExec.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1580 wrote to memory of 608	1580	msiexec.exe	89
PID 2440 wrote to memory of 3032	2440	Fallout 3 Türkçe Yama Full.exe	91
PID 1580 wrote to memory of 3220	1580	msiexec.exe	92
PID 1580 wrote to memory of 4052	1580	msiexec.exe	93
PID 2440 wrote to memory of 4592	2440	Fallout 3 Türkçe Yama Full.exe	94
PID 4052 wrote to memory of 4312	4052	MSI4AD2.tmp	95

C:\Users\Admin\AppData\Local\Temp\Fallout 3 Türkçe Yama Full.exe
"C:\Users\Admin\AppData\Local\Temp\Fallout 3 Türkçe Yama Full.exe"
1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2440
- C:\Users\Admin\AppData\Local\Temp\Fallout 3 Türkçe Yama Full.exe
  "C:\Users\Admin\AppData\Local\Temp\Fallout 3 Türkçe Yama Full.exe" /i "C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Türkçe Yama.msi" AI_EUIMSI=1 SECONDSEQUENCE="1" CLIENTPROCESSID="2440" CHAINERUIPROCESSID="2440Chainer" ACTION="INSTALL" EXECUTEACTION="INSTALL" CLIENTUILEVEL="0" ADDLOCAL="MainFeature" AGREE_CHECKBOX="Yes" PRIMARYFOLDER="APPDIR" ROOTDRIVE="F:\" AI_TEMP_FILE_ROLLBACK_INFO="C:\USERS\ADMIN\APPDATA\LOCAL\TEMP\FALLOUT 3 SOUNDTRACK MAIN THEME.MP3|C:\USERS\ADMIN\APPDATA\LOCAL\TEMP\" AITEMPFILESEXTRACTED="YES" AI_SETUPEXEPATH="C:\Users\Admin\AppData\Local\Temp\Fallout 3 Türkçe Yama Full.exe" SETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp\" EXE_CMD_LINE="/exenoupdates /forcecleanup /wintime 1786059320 " AI_AUDIOFILE_PATH="C:\Users\Admin\AppData\Local\Temp\Fallout 3 Soundtrack Main Theme.mp3" AI_SETUPEXEPATH_ORIGINAL="C:\Users\Admin\AppData\Local\Temp\Fallout 3 Türkçe Yama Full.exe" APPDIR="F:\APPDIR\" TARGETDIR="F:\" AI_INSTALL="1"
  2⤵
  - Enumerates connected drives
  - System Location Discovery: System Language Discovery
  PID:3032
- C:\Users\Admin\AppData\Local\Temp\MSI4D5A.tmp
  "C:\Users\Admin\AppData\Local\Temp\MSI4D5A.tmp" https://youtu.be/ZfmY8JlbTCM?si=jhigZJeiuYdyGVKR
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:4592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/ZfmY8JlbTCM?si=jhigZJeiuYdyGVKR
    3⤵
    PID:4328
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ffed835c188,0x7ffed835c194,0x7ffed835c1a0
      4⤵
      PID:3796
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2140,i,3895060740104874836,14082827405081696484,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:11
      4⤵
      System Time Discovery
      PID:2744
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1972,i,3401720640959279824,9090756105201554123,262144 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
      4⤵
      PID:4620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2792,i,7444145252694904164,13009926452714715473,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:13
      4⤵
      PID:4836
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,7979106699935134257,7524111744934243686,2097152 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
      4⤵
      PID:5700
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,12895514800377313266,15683939399200997277,2097152 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
      4⤵
      PID:5152
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,9362790024538293572,14358136322076497392,2097152 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
      4⤵
      PID:5464
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,8286972491715831185,9761084105726430157,2097152 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:9
      4⤵
      PID:1636
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4384,i,1644184875000385168,6299735800645615753,2097152 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:1
      4⤵
      PID:2756
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5476,i,14698223312042902589,15108564440776124439,2097152 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:1
      4⤵
      PID:4404
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,5559576246239038551,9430046561138526004,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
      4⤵
      PID:3060
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5784,i,3623249364420201702,7793793102064809497,2097152 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:1
      4⤵
      PID:920
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5232,i,13178921530794730163,10761944155126925276,2097152 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:1
      4⤵
      PID:5640
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,255518430357183688,17664878500262823946,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:14
      4⤵
      PID:1524
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,3244359272434645491,12738983379670411750,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
      4⤵
      PID:1788
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,4356412617892102065,4761619107944349040,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:12
      4⤵
      PID:4604
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,2542325622941382641,16998260258062859530,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:14
      4⤵
      PID:912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7324,i,11796313108241083338,15702301001477375129,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:14
      4⤵
      PID:4844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7324,i,11796313108241083338,15702301001477375129,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:14
      4⤵
      PID:4904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,4862590972817291672,12622445437115573038,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:14
      4⤵
      PID:3288
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,1701982000278148038,9510610415853752793,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=7476 /prefetch:14
      4⤵
      PID:4624
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6932,i,4200835649098921820,283785897362581810,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:14
      4⤵
      PID:2800
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,3905080307466471334,8097754374481419886,524288 --field-trial-handle=2304,i,17331477049159525426,16568369945123822936,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:14
      4⤵
      PID:1684

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1580
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 76BA848BDABE4BE9C11C33FC069D11BD C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:608
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding B83CF6B48C7653D319F19037F45EBE0E
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3220
- C:\Windows\Installer\MSI4AD2.tmp
  "C:\Windows\Installer\MSI4AD2.tmp" https://youtu.be/ZfmY8JlbTCM?si=jhigZJeiuYdyGVKR
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/ZfmY8JlbTCM?si=jhigZJeiuYdyGVKR
    3⤵
    PID:4312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:708

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5bb44a.rbs

Path C:\Config.Msi\e5bb44a.rbs
Size 243KB
SHA256 393874c6346a7f8375aa8869f0baa886d3723d7ecd1b6c2c1124c098c76f4cf5
MD5 7eb67c177e640f74123bdb3e0681e1e5
SHA1 be0fe233674ef9c06f69ef29b5269af88e847e54
SHA512 2e2c894afca39983d7c1e93487d7c27a0cfdb1a15e981a4973e5ddde3375eb86ec34222aacb21bbca3cf3ed440580cd3d1643838abb1539b34ee325c2753871d
SSDEEP 3072:O3mBJDmU1w79thLwNj3xrvkLzDSpjqBIe2c8AOAg0FuD/MxwVIyzY2+fSQ8a2:O3MN9WmHcLz+pjqgAOjMmUfSRj
TLSH
T142347D1136D2C936E67F16714668CAAB163D7AA18F7088DF73C85E2D8E707C1663072B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 4168fd8fa40efd35a9fe297efe9538dc9e95b3c573c3ab2921ea687a8409e83a
MD5 f35205255a4458b2a4d118c738afade7
SHA1 728813f76b29d48e23dbc80dbfc9418953ed6da1
SHA512 4057115cd98b8e895c51151e7181098a48d061d8d6022a24095367a1d7da0d6d15ad51d1b8baf19f4fa332d9a6e396d92287670d2e6c5a81fc85f0ce548c505b
TLSH
T1AED0A7D5873145871B346788503C559E541B4E08D9C0CDA5B954B04739BC6038401634
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 34c1a72c13c71936d2d3cf00a2c1baea2c72e991a19b4abc7fe7cccceb1480f7
MD5 d422c814c510c0e1e516ccbe8e3b7ce7
SHA1 f87da50636f21ada80c84ec147dafd1fa97f4458
SHA512 2e23ef2f3e68d46f6bbcb983d1e0459402ba8f4c86cfbc20c5d5af60733f8a087e55856770e7d8e4237cb7966d5303e5a728b860bf504dec2ecb9eba327f890c
TLSH
T114C09BE64521859B0E34BBCC2038635DDD1F4148D8C0CCF4B1087446357C5134802B75
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5c620d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5c620d.TMP
Size 137B
SHA256 2667c3d1df398c0f879f3c0bddb144472abf2a3d25818099d9c4b0a92b0c8257
MD5 223750585c8bc0b0b7ccf5a9ad0f1d0e
SHA1 ffa8ec8cd4ec7780ed8566bcf8d0753d7bba14c2
SHA512 9431a15599e6f4d15a77a581cca5f4abe1726b4d930c85e364b1f70e261249f6ed161daf6d24877f452eebf2f53818db2de5bd459e220521b4b4e256dd0ab0de
TLSH
T1D0C04CE6452245960F3566881038624D992A4D4898C1C8E4B109744635785138505A65
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 02e21f9375228d955636e4d8ac8008063158d39a20360f89ada59661f6aa4458
MD5 484adcf6e9297c8cad37eef70556e488
SHA1 001c1c087af251d1df4fe13b0e597c0c1020e5ac
SHA512 a8f4f2e7a938480eaf1d009ce6353d6bcd8cea820b39b975f944fc7d10e9ba7b4e382f61b425ebb550de1589c315405017770eccf03ee33ee25e8ae0a42480da
SSDEEP 768:xGrv+4UNbdS3G39lYysyC7Hucys6BRvi82oP4/z6himo+W2bwn+h:xGbsbw3G133imOz6ImoB0w+
TLSH
T18D03BF35F4188D73ECE7828870467A933FF4522355C91AC0E6DE5B0E428BA6E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f48990d9e471053ed87215b6d8455951db151261cc3632447c19942074bc2f44
MD5 173d21b64e7ece45dcdc569329bd0ce1
SHA1 75c2ba4eaba52a203ebecdcb95c31c38dc4baefa
SHA512 a24417fee7376ccd867d5aae8c3204b39d18ca5a7fa0eb44ec84db2d5de87aed7b9b07cdd70721cb5a8cfb89feb5f48c03796c36f3fb0b1cdc8d02ade3ad0956
SSDEEP 768:Irv+4UNbdS3DhFlYysyP+7Hucys6BRvi82oP4/z6himo692bwn+7:Ibsbw3/D3imOz6ImoC0wM
TLSH
T1EC13BF35F4189D72DCEBC18470467B937FF4227394C95994E6DA9B4D118BAAE230F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d95bc649612775365a21cb84a474ad6d9c43edba0db62fb02dceb0f46c572500
MD5 7e79e6b8663220dd575190ca771a3fc8
SHA1 ee90427726512d7637b5a5108cc5501079873fd4
SHA512 e9d15039bddd40ec252387453346c630c486b2c9134960605cd00508607ee5761f7eb96a2e7b1360f5faac4255f1fcad7160f0cb533c68723a89edc2a0ef158b
SSDEEP 768:2rv+4UNbdS3ynlYysyPa7Hucys6BRvi82oP4/z6himo692bwn+a:2bsbw38X3imOz6ImoC0wJ
TLSH
T1B703AF35F4199D73ECEB818870467B937FF4226394C95990E6DA9F0D418BA5E130F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 733052bde3f15b5fcfb7a7144a6dbdd05f71b3149c26940e643d9defdfc01c94
MD5 b6d43e3ee92c5b5880fc33b7191962a2
SHA1 f82d31fdf7162bc91859dfa1ba66b80129dabd26
SHA512 c5b7fd6fc82eab1e739ac48c31b22d149c436e7b70b52334d88dbbf2cad57009257f7bab5fa9b09d88b9b07da96cf7c3b89efd6444e0af84630739c95ef79d86
SSDEEP 768:+rv+4UNbdS30VlYysyPa7Hucys6BRvi82oP4/z6himof92bwn+h:+bsbw3AX3imOz6ImoF0w+
TLSH
T1C703BF35E4199D73ECEB818870467B937FF4226398C95A90E6DA9B0D418BA5F130F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

backbutton.xaml

Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_2440\backbutton.xaml
Size 1KB
SHA256 fb1c5df8785650b20612b61a66ecbda5e1ed323d6c8ac45b2ebccbe9193779f8
MD5 3dec9f3886a7d180b1da7a72541dbf81
SHA1 07f3ba034be78970a86d055daed59bf7d87f8d21
SHA512 0250b81a2795fcac69e3f2c95bdff406f01ff207e81bead96b2739f28e26dd2d97d82cccbfbd92b7141b1eabd2310db048618fef1cc5261fdff212d19bb910bf
TLSH
T12F41518481DD482862B7546C7B5390A49E5630B340248697FF7F363B5FB70AE193FD12
MD5 SHA1 SHA512 TLSH

Submit Download

background

Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_2440\background
Size 134B
SHA256 f044f542bc46464054084c63596877f06c6e2c215c0e954c4ace9787ced82787
MD5 a0efb0e7b9cee25b09e09a1a64e96ba6
SHA1 0c1e18f6f5e6e5e6953e9fb99ca60fdec35d6e39
SHA512 7e53f9f564aaa529b3b15035671957c2923ec98ddee93758ea7a4c8645ee9058962078771b853e3490290fde1f57030dff5092d40d69418776ffee89f79c8a7c
TLSH
T13FC00413DDC0C403DC041170CD3D41C471004DF51305010177415DCDC50034C30C7C40
MD5 SHA1 SHA512 TLSH

Submit Download

checkbox

Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_2440\checkbox
Size 1KB
SHA256 bce5b6de3a1c7af7ec14b6643da25f7c9e15bd5f1c4a38abfcddc70a5e93bdd3
MD5 0b044ccde7aa9d86e02a94030d744ac2
SHA1 0594ebb3737536703907ba5672ccd351c6afb98a
SHA512 dbfba793722589f1a76dbc75c9a2f3646733e4a079a6b70003716a7f7b8fa1a6a2b234ec9132f5737e91d20d460db1e29826b2d7ac740f73136975f19e336cd8
TLSH
T12531D759EB903801452DD64214F5D536EA2209888DE0A038EF9ED9520E742E2893EBDF
MD5 SHA1 SHA512 TLSH

Submit Download

MSI3318.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI3318.tmp
Size 588KB
SHA256 ce34cc14e8d26119e1bf28a3a8368da6e10d13851004e2675976c5ad58b122e2
MD5 a9941233b9415b479d3b4f3732161eab
SHA1 cb2d99af52b3b1c712943b13e45d85c80c732e57
SHA512 cfd6c425587e5e7c57b6f4655e2a48c871313e2bacf63cc0955ccae1a384610644f26aa76bee0a2a327cd77c2ae7def8ea9cb0c7c7c87fab1c8196bac82037f7
SSDEEP 6144:waFYTdIO9QmvIeVKVhaxkSBULBA4tKSM3BZC4o4AOlKmN9ysU5pvs8g73iK:JYL9HXVW0xOA+KlZC4vA55s8g73iK
TLSH
T12FD44A21369AC036D56D05B02DACDBAB516EBE760B3658DBA3D81E7F84F08C25731E13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI398A.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI398A.tmp
Size 212KB
SHA256 6ef7a72ce27c8907b856c0668827be897c3605dabff942c889940b4f6c9afe75
MD5 9c9266a180b28b97a1ea307964481a24
SHA1 9aef17c027a572dff7e4eeee44a8aa2a4d9acd1a
SHA512 02132d33244de31b2099785a72b05ffdeb1639a5011afb5950893802cf797aedf5b9b411e09923242972533215f4a619591df93e2d972134d9ae1d151e06ee4f
SSDEEP 3072:b3mBJDmU1w79thLwNj3xrvkLzDSpjqBIe2c8AOAg0FuD/MxwVIyzY2+fSQ8Y:b3MN9WmHcLz+pjqgAOjMmUfSRY
TLSH
T16E249C503A93C437DA7E16304528DAAB667D6AA00F718CEF73D85E7A4E307C1663193B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

URL4B49.url

Path C:\Users\Admin\AppData\Local\Temp\URL4B49.url
Size 74B
SHA256 1b86406c9ff484e00db3da50f190f1ed43f5ad314a2a626e0fc0a5fb1a428341
MD5 ce2f1ac653a11e08f1cf7e4ce178b6fd
SHA1 b32f1e295fd54e4a65198b761953da709b4fb3a9
SHA512 d57ab73893a912a1328c355d6a7b15354f31583118666f9703ea330a1e12032a012e4c029b851f10a766c4a20af8a158902b7e8b0aaa78d5aa64e8ce8e8f283e
TLSH
T194A01201460B4050818718AC8130A030890621804042C8C5D060962004899E26444208
MD5 SHA1 SHA512 TLSH

Submit Download

c9b0d762-e95f-4769-8226-5c8a0897a981.tmp

Path C:\Users\Admin\AppData\Local\Temp\c9b0d762-e95f-4769-8226-5c8a0897a981.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1535145621\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4gb_patch.exe

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\4gb_patch.exe
Size 44KB
SHA256 980bf5eb62d30c749e5fbf7593e9d25094a4d849a959aa2b7b3fc979b1c93b5a
MD5 96490cfdf3c7dd5ae7ef378c689a8734
SHA1 a9cf666e845cd8448259aa50bb4f5b559ca9c053
SHA512 7024f7447b1f0f6213c1ecf6f2cbb6b21e2fd9ce107d3ee1b8850c0c56ee7839abe601029576c6fbbadb62a3cc56460b14f66a1054b28440a8eeb102a991c5e9
SSDEEP 768:KVPnnByGt57EhDssh60dEDS2An7poavRofE0D94PY/kC:MPBRtj8Hz7xvN0Dnh
TLSH
T168131A0136D08472E0224A345CB5A7B16B3BBC525AB0859F3B9866BEDF727C05DB835F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D3D8.dll

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\D3D8.dll
Size 395KB
SHA256 cebe6cf3d03e872cc652ba31a81bad25619174bb31d65d4fe7da1b6b0c9603b7
MD5 0d43bfd3e4736528a8519738077a2bd6
SHA1 e4cc989337b19ff60f80efe31e83ceacaf4c8814
SHA512 f7b43ce504aeedfd85fa59e8b29e4a24c8dd8514de27b45761c9ca61ec7839667b226d150c6e9e12c274f697538cdf9abe5ae53ba902ab52e325e4d7fefda863
SSDEEP 12288:dwQwgm1V6orl+TEDLohfLg/0QSg2VCbDmBBr:2gmpJFohfLgcQXi1
TLSH
T1FC8423DBC344DA18FA1CAAB555A47D742670E281B51A0F3B8C39D54EE8C12CB7ED0C6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Anchorage.esm

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\Anchorage.esm
Size 13.2MB
SHA256 1abf286336e585cc2898086d03d0933c1b8e9c6dcce45b42d7faf3835f7b7f56
MD5 bf1e8db35d04d9ad4b70fe9e1f6e1fd0
SHA1 3e39d29c369fb887d18dd92481d288ad03b31d6a
SHA512 abe72b92fd4db3a8bbe041b32f69ac1fdf3113396fe0a265c148fb87e3d727fa840d505b304bcfc8a13cfe4f642e62a2b3c6a8844ab8c360f632b84ce43e59bf
SSDEEP 196608:qujXRD+vwHLG+RfWu1Rdu9nKLn41XCugj51VoGQycYwANl4J0sWmFmlQy:q0hY+91X+nAn+g/VFntcJ0szFml7
TLSH
T117E6BE17B682BA3AE733C13401E26B91961B60478F225DDAF77425FF3DD9600AF8924D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

race_sex_menu.xml

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\Menus\chargen\race_sex_menu.xml
Size 15KB
SHA256 2e8b23d8dd29994930707450419c426be8cee3f0ec149308fcb3cd72a5cf42f0
MD5 0bee11b3c8529b0479988a0f7caa5446
SHA1 597c4dfdc7c15f95b6035bacd77406310adff007
SHA512 c509d8ebc4e869874f72e732acfa761c71d868b3e532983dbf6ca7645aee50422a1f9be8d1517a6e291b09ac25d0b7dccb04ab012cb1768c3b03f17132c1e4e9
SSDEEP 192:SE6cMYi32QRhUO5uMlOQFMmOpY4OPu2YSvClSKf4x/zlSil1sMRnS+xjgPYOe7Uv:ShYMMyMtaXm2Wa/FWybhbVgbmpu8g
TLSH
T1A5624105F25E70BAC1A18F3755B0CD18E34FFC39033A9125F2BD62B792A6A159066FE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

companion_wheel_menu.xml

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\Menus\companion_wheel_menu.xml
Size 19KB
SHA256 ebecf517bd168d28d873b2685704aca31ee7e8a9d6b4b4d61e1d88a0c3806ad7
MD5 760f94281b571c8fdc470e4239489478
SHA1 746f43a5a917f3cf1490f4d0114b57d251e96cc5
SHA512 039d8f6f8733bb9da02a824bce47fb26c90af0ac42b2a30b38e8eb4bd5e4a16c666c53c2bfcb8177d8085187b803e406c2ab6a4615ed65fed03ee9eae3a7a3bb
SSDEEP 192:+foSG+RB+hN7cX1wRo8ySFHSAFjHqVQeH0qt6/HILlTHXoLLHxf9cTHJLBrHkA:+fg8+xcX1ar6AUVwqtzLJoJFgLOA
TLSH
T19992021C88D66631423118372B7B8E19FF72545BA21B2C20309D5E9B1FF3DA990E77E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dialog_menu.xml

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\Menus\dialog\dialog_menu.xml
Size 7KB
SHA256 59ccdc6928a02182852b0b8f2b24b2c08e2d31774f96f08acb49c105f7f5699a
MD5 cfd5021e040e0f6728df0f6b9f7fb7fd
SHA1 c85a68ef28dc27adf56b9cf16a42f5036067a22d
SHA512 18d67e8cfbf966dff66e316c93d99688f6244d48c68b1bfa0eb7d24e061b230f55fad5dabf7c2399ed465db3eb8e25cdec294479bde136b76875d7b0b648f169
SSDEEP 96:46UZj+3SS6fBWZcNdKY2Zx02ZxcoSWGNkZtVBm:46UZj+3SS6fBWZAdKYUx0UxcoSNNkZw
TLSH
T181F1CB55F26F3676C2A1CEB30174CC38936FFC2803395560B27DAAB3272231E6562B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

start_menu.xml

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\Menus\options\start_menu.xml
Size 35KB
SHA256 9ebaf468d1dc569b8e77d4833e1362d4f083df33ba966a9b6e1cc8873f3e7129
MD5 3f598bc86e41281ed6375b0f907635e6
SHA1 5786e6cb9ad3120d43da06d1a8a37a07992fb5d2
SHA512 e1820b9c0481273a3560a629514cc80dcb84ab5635c17471e49d6f2a1fff521362a554e2000347a96e1a2262df01db9452a8c2a13419a20c7650bbe59fbc4d7a
SSDEEP 384:QSzmNkW3SlHXsHVRzgRdNR4RZR04sGfcS3n/zfcmAfcTlPULDEGcabdw:3m1i8aVOntE2
TLSH
T11CF21F19F26E7175C1A08E7B66B1DC14E3AFFC3942322460F17E63B79373A2981527A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLC01Dialo_DLC01AshurRadio_0000C707_1.ogg

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\Sound\Voice\FO3GOTY_Radio.esp\FO3radiosubtitle\DLC01Dialo_DLC01AshurRadio_0000C707_1.ogg
Size 69KB
SHA256 56b295c45e0a16e34d898700389fb9fd4e9112716d3ad358e5676d0690699e80
MD5 a09d22d91aefcee8fcc470de23a85e93
SHA1 4d97932bd0be4818193d9c9d369ac87ac9f436e7
SHA512 e082d6e8f02d936642095a4ca7dc1195a68e7026b39f6877c3b8566c29e685952f7f4cbc4cf188b4363d24bde2401eb2a9317368270808af264b964ed36697df
SSDEEP 1536:S+/qmT1q5WbX5OUJCCrtAC/NYd+5lSiYB5hfCwR74MM:SFqPbX5O6CEAajHY1fjRY
TLSH
T15E630282CCC441A4F64773780AEB2E3CBADCA9F94F0547961EAB572359F741C4E96843
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vbabyroomsign01.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\clutter\signs\vbabyroomsign01.dds
Size 42KB
SHA256 a6a711e442f5c018a8552c7b7d9da7da903b394445a4fee35856226a4d164fe7
MD5 0597a9f47a6a66a22568b8681ce5ba60
SHA1 d3be992181f4c825619a3d9bb34199991554fff6
SHA512 09ac5d82cf142557739fed99b47bca7e69e966fa5a7042916ca16acff5756db42f7fdab36a61aba709dc8583040c2811b2501c27c768f88e2f6f19c2e66479ee
SSDEEP 768:ZaY5LEGaQBfas7Y3WvC/pYunScJI3+eiHCaM:p5Drys1W+unS0y+XbM
TLSH
T1ED13E78ECA2E5B52D1186F72D67896BCC9C2DB918D648AFF1142C58CCDF341B8C1E9E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vdoorsliding01.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\dungeons\vault\vdoorsliding01.dds
Size 682KB
SHA256 6c47989c3a5e3304b124f0cc4d094c0e968a6386d2d3e06f9b9f4c5e1a7d97f8
MD5 f1954aba7f0b20b0564188324edc444b
SHA1 cde38c519a3977d4f446b7713a02fe1a27103247
SHA512 b2569e8ef9d1d16d66404af64fe86eef5795783eb86d5439b3bc59dc0c7467ea45e5690d9416ef69090a9798c61866562451cfd5ff15b42eb8e451ebaa758d3c
SSDEEP 12288:IwfQKpCcoo6zTL2upFjCauE4T1H/M3fjlhPjFP+yV2U4ettXYyUM8F88:IqQKwzX2wZuXMrlhPZP+s2StqlF88
TLSH
T1AAE4CF6CDE0D8C42FA918C74E17A2AB1A2C0DD558E0052DB62252A5CDCFB57E0DBF7E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1_collodin.fnt

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\fonts\1_collodin.fnt
Size 14KB
SHA256 c5d13ea22b03a003ae01288029757b73800e52a52b7a058d83be3264c4c3b39c
MD5 07343c9405422b92b9719ab395a9f9d3
SHA1 c78d1f755a3f368c31271079a643349c397fed4a
SHA512 8d44adfa8c65a5ed049c87549cad37cd46e13dcba978ca67da9506e22936c606f9f7ecf2b92037d367e4f9c92fb9e6cd79093a4f54748481cfb2669a2db5a664
SSDEEP 384:BwuzYzZVsSBuHItGzwZl7VVVJVR/bVVVJViX2VBqVVVVVIVVVVVVVVVV/VVYVVVr:B3FpMVVVJVRzVVVJViGVBqVVVVVIVVVW
TLSH
T17862BD5A72E03CD1EFB56B3A09751F416AF3E6882492850A73B7317FDCDE4096C53A24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loading_abraxo01.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\interface\loading\loading_abraxo01.dds
Size 8.0MB
SHA256 2578db3f9ad78b62bec86f61950411c819e86af7d7f324f4e08b674e84cb1fad
MD5 689291eaf54076ad1134a2ab2c7a5095
SHA1 8a7d874bfced49f64abeec1e485a91810b5d49bf
SHA512 c7e0b952e03d2cb73afa2adf2b51738d70804c4ee7977e2f62c4c23ccc0c53edc5a47b723a3164ccac828cba22abdc02c0789103fc786c832f1a84f65dbc8e16
SSDEEP 98304:hsXIOrsrVm3tbuh4iPZWmETBwe15yFqS4k5o:hs4OYhAtbE4iaJyP4Co
TLSH
T128866BD2D08112E4BC6A4C2590232C6116B7AE7BFD9CF9A97C8CB53657770D3413AE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loading_duckandcover.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\interface\loading\loading_duckandcover.dds
Size 8.0MB
SHA256 6da51a5ce7a575621a3db7ff536e38bcefab989844e470c0613d42e3c3d67057
MD5 1251e683bf0afeefc5a1d957b4fc528c
SHA1 f0695a619aa28f19b4c038b2a18e3c487efb5e03
SHA512 3e8e21a971e3689c67c1328a5d11c81a6233e80822ea9d3c61ed79f624cea56393af5fde6ba9c7c02620902f15790c316e3a86575d45079fb0b9482870174c44
SSDEEP 49152:ZvsWnYQZCmFPbNkZgUGJ1hleWs50GLemIdeDvOzdkp:ZvhYQZCmFjNkeUGJs9LemIdsvOy
TLSH
T10E861CF3B4C022E1A8398C12E19B2D7416539FB9BC8DF95668C4B21617F79D3962780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main_background.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\interface\main\main_background.dds
Size 8.0MB
SHA256 dcb0f8941734ead40b8f0f94250595bba844fe8db8cdb0d51f62d7a7fe4e6e3a
MD5 8fe0953c4921787d2de407e679814a66
SHA1 1c5a0ca0bb49b3488a9cf0b6ae716d7c1c3d4455
SHA512 2dca5a0aace2e7eb7329e9baaa5cf725f2c8c837f13c00eac578c1f6da0031da8fbb7c08327456bdd7af564031e2a46bf0faf4636a08d8841bdb970606de6733
SSDEEP 98304:48TCUSJ6d4DbMIxkINCKl92QJlo2nhh+kF1QC9y:k34d4gWCKCQ/LZ9y
TLSH
T1E986202EA431A713699A3F3845A8FF3C86145DD0BEB9DE85FD4DB1A4D2F77C924A0108
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pausescreen01.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\interface\pause\pausescreen01.dds
Size 4.0MB
SHA256 566abb426d3a7c936725058ebfbcdf11d9385f842cfc6c53e16a87660d132c2e
MD5 3e76af645b083a2a801767594c6c20c1
SHA1 2dee0248c87eedd8aba01ab991615232a37e1093
SHA512 22a1c57dc09a69282178786a27ab656ff913dba627b4eaa2387ef95c2550fdd72ccc7eaa66897dfaf831c3a2baacbd220b373cd71cec146420a872d39c13d09d
SSDEEP 24576:5cZzxrF+QxbGxgyrBOVbL39pLG/BfT/guRJ1YrGUlKwlYRIgmtpu6s6AKByJt0OH:GuW+
TLSH
T1BB16B8285EF9E858C38588FE28F9979C91F806B54C5BC502EB229DF6F634ADD3F41142
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pipboyarm01.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\pipboy3000\pc\english\pipboyarm01.dds
Size 10.7MB
SHA256 9ef155b84361de7d340fd26726e6d4e3dcd959a870ec954c4784288b09454720
MD5 c93d656e701d5c5d73a72711b91e1d9b
SHA1 28594b2a8e00e6da4e668362fc1c4a9aee8b908e
SHA512 ef8e1155674df8bec9156189021e8094f68a0026e02d4f847035752273cfae492c0ccbdd2887736cf785d331e302127e955ea8b941d20e80a56bf144bdf5364a
SSDEEP 196608:n/AfG+KVuHmP/TYK/7UF7vOMo/stTsMv4sEz0X:n/Z+0uHmP7/qo0tYMv4jA
TLSH
T12EB6AD9B7576E1FFF6C9824214D70D0EDA885E11598BF0302E702614EEF3DDA9B28E16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pipboy.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\pipboy3000\pipboy.dds
Size 170KB
SHA256 79d63a34480188da2b5d19f9b86e9428eac7f76ea90c29f8679f59756e3153b4
MD5 c7b912a93c27cca1b32aecd8f70e546b
SHA1 cb959623a6cfaac1c2fdb9a7420d43db56268d6d
SHA512 3901fe0debb0be5517a47c2aba3fe01e1e11c356b8ac8aba7ba29e86a11e3baf03175a493eb793ee5a1d970471811eb278089aec06c1ff93bbd85bfa7e028c69
SSDEEP 24:GZHOgggggggggggggggggggggggggggggggggggggggggggggggggggggggggggu:GZA
TLSH
T17D04019EC98C460AD4196F3442F2121931F6C8251F22A4C31568583CDCF36548C625E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

babybook01.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\terminals\babybook01.dds
Size 682KB
SHA256 31047d9911668ea9791d44402e8a43beb2070f9459eed28a52a30fe5724b12dd
MD5 dd822a3a0e47a3f72da97ad1281bb567
SHA1 59356342a9c4c34f7010d363277e330e32b4c3b0
SHA512 95072fefec7e3b59f1c3c2d4ad4c325ad0ccc09d0b0f123c1253afa7ccb5c8c5596e1f75238ce360ebfbcbb9a2ffbca552d9bc6f7f776b1e83775928e4b015e3
SSDEEP 12288:0rywzczEb4fjNSbZpbPdNmgrz1NBqImifgx7Dw258Q4k9CGcq16T5:4y0Bb4LNSvDmgrz1vqhAS/R58CCp5
TLSH
T138E46D457FF6F10393602A8AB05B668ED1ED359D5BA0F089493D89E86F734102DBB1EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

babybook01.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\terminals\english\babybook01.dds
Size 682KB
SHA256 33c638c83b7640fe0a935be82e059f126019fff3c8785ee9ccc106b8f4020713
MD5 fca8658f730fe3b0549e92580be3be04
SHA1 8fe39989b9bdb703a7fcd394c5b190499b87ccb0
SHA512 a8b6edd63f57add05ed344022464d314f64438f5f06a22d5a356b188a3d2d517a07e02243de1fc856b30417273b6ea4aaca2010ffc64d9e6279b43b5a8234e29
SSDEEP 12288:WayszWzMb4fjWDbVpdIdN6gr4dtBqI23xwl77Xh5bD3vkaG0ou3O7:Dy4Pb4LWDrw6gr4dXq5hOnx5b4a67
TLSH
T170E46D457FF2F10353602A8AB05B668ED1ED359D5BA0F089493D89E8AF734102DBB1ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

racesexinterface01.dds

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\textures\terminals\pc\english\racesexinterface01.dds
Size 682KB
SHA256 e0c9ac448bbadb166c3fd2d59d1a2e3263e4413fc75cc36bf3b9eca678fe3d73
MD5 1d1da7d84553b25d3481dc76b73498c4
SHA1 efb2e6ce75f96fa3125adc4a69510be723200cd9
SHA512 25a3630b9eb9b2ceeda9f417dbecea4041d4ccc0cebfe9dde73493d565c7fa7a4932aae165c38f36ec638efcf7556f7b42dbe37442738f421805fc8099e8959f
SSDEEP 12288:i9jPOzPlvA77tQkoZzY5Q3z1PcpMq9VzzHMHH7++CIvgxMuZWSELd0:UP+Y4RBaHzHMvCIvgxMuZWS7
TLSH
T12CE4F04FF65DA49AEBAD4C54433E2A3453C6C278CC41C5C35681DA4CEEF322A8D79AE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1 year later.bik

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Data\video\1 year later.bik
Size 1.1MB
SHA256 a386d99d257d21266f45d8b0fa3f3a38a687abbdea108874aa562f4d57067e6f
MD5 ecb99a49fd5fc1d0239c677f40a77d44
SHA1 f6fa8b9775bf953ae2fb8c98cd45308cea7b62fd
SHA512 638b495f62cad9c4100ede4c66c2d3823b6d0a19289a89c4d02d9935ac7356eec3197a12f605bec1d9690f497c0524429c33fd09d8d0a49156135598f0cc7715
SSDEEP 24576:2VBM8wUKBEfDZIqdnOFohLOzPrY02zqtSSSS1Np9LJ26:0wDoZ9KeFkLI6
TLSH
T1CB350107DE2BCDEBC009167C56B70BE17B5284758F614EE78F22D62DAC523613F62A84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fallout.ini

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Fallout.ini
Size 19KB
SHA256 fc8d12e631f6bb9cb1865cfbba5fc7d8bc97d27366e7d6e7f7e9767832271167
MD5 d0885e1ab62c08fde78b9d2d19b39c0c
SHA1 b079dbb60ea66553bdbe417df1659399dc7cab99
SHA512 0956a541270499bdd3983d818075e33089607b6106206adba11252de14d8cef0170b837b6d8d27f802c7622a00fe794153a8ee07a45dd6994da077d8c9088982
SSDEEP 384:CLTCxMWgfQhMa8QQvAwnEMIVveN1/Mupm3fHbj5BCguWil8wbBGg9BzyVzK+mAEw:XMZREWvcxkU3TETxOIyd
TLSH
T1DE92B7A702554D1CED8735AAA4B5274520E832BFC3E5F5C0B9F60C5E6E8E50122FA39E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOOTDebugLog.txt

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\LocalAppDataFolder\LOOT\LOOTDebugLog.txt
Size 7KB
SHA256 79e3fb6f7c94adb9781a26b6c2a92fdf15717e07f2fdd631295a2d27779d8d7e
MD5 003b9d483a621fa8187b537dc3ed2967
SHA1 09c8ab1faecda0789ec12382ea2d18251be48128
SHA512 7e4b845eee463c355344bdaca0676333b555b2f21e618f358f235f9e30e97829091d4761dde3996af0ecc5351b3b6b92d0a3fa37ddf68fb28f99e7077cfd32d0
SSDEEP 96:jwOIwYIIhIebaJdHsm3xSKB2yKKZ/mIHdeotqkL:jawYIIhIe+/s+cKBzZ/mI9eotpL
TLSH
T196F12C8857D030B3370637A85F1C35C4298EA6D56BA1E77492EF89D023DE3825BB61F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loadorder.bak.0

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\LocalAppDataFolder\LOOT\games\Fallout3 (Steam)\loadorder.bak.0
Size 263B
SHA256 defb41cd299f3c9e920075f9dd3586002ead9143cfc1f67c388c3fb9d0eafe60
MD5 94e8191c61f67860c0821d480161d8da
SHA1 88f197e20a3690cdaed423b78576f1be62b08a00
SHA512 30dd8531c1b92de04b4ac2d9e7dcc9e497dc2e74c1479ac0d1ee1db7a1f0ae94f564341065edb4b3cf13f7ab4bac7e8124a14003275c0d3b16ddffd144f39fd1
TLSH
T1C7D09E055B9020DA671D3E25918C3595BCCF504DDEC7E29D47AE1ED8101446366751C7
MD5 SHA1 SHA512 TLSH

Submit Download

masterlist.yaml

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\LocalAppDataFolder\LOOT\games\Fallout3\masterlist.yaml
Size 288KB
SHA256 ca811c0e0b84cc979dd5f1105fe34323d26a7c9a3b2db87ce41a1f120bc7213b
MD5 fa198d6d8db935ce9e5fb85a092e36ac
SHA1 da20061a69bfcec7f372b8643cb7994263e9e0d8
SHA512 2dbe483a6a955ba5d5ead36ef7b3aa9d80734ba16ba94e4ac96c0a51624e73b5c0c39c51a010b96068c0cc1057f385be31f2f71950cbe32583e42d973fe8af11
SSDEEP 3072:KU2FyJGwmF04Uywys6goCtMbum3z6lbiQ4XVlkP4x4Rc6R6zegJEAMEIpx4L7/QP:yM7mF04Uywys6g0uhtqiPmCsn3G
TLSH
T163543FF3CF3393A1E642D05605A277819837AE87DE4178AFBCCED4804F06964D685AF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prelude.yaml

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\LocalAppDataFolder\LOOT\prelude\prelude.yaml
Size 125KB
SHA256 593a1383614e2e8c988d3a6b48e278dd0bd2c2e76a60c1b7addbfb48b79836a6
MD5 d4e0b46dd983e3ba2c024622aba13f8c
SHA1 4d3fda66fced5b512ea20db35e8a170d00c35c2d
SHA512 2c5ad2141fa3bf45a556a9754215131ad33947d50041b6c15b0f55ca539b2dbb046bfc2093a7a3b5035380355dcfd33acf1d88cc06a3cb0f82f6c6fecd08dffa
SSDEEP 1536:MUoUZlS/SMq9iGuK54RomSp0jFmMGgrrWwAwA5oGkGiGV5qZYbCFiFVys3+76Z0I:MUoUZAfV24RomP3GV5qCaJRdBcpSPC4Q
TLSH
T1AEC362FE01FC52EEF500C1A29285641EF16592AFDA01FD0932CD496C2F8B17C85EADE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fallout.ini

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\PersonalFolder\My Games\Fallout3\Fallout.ini
Size 20KB
SHA256 9a50be7d508ca539e1a51348134909cebb4e88007878f9ee0004e3021936e7d4
MD5 f281335142d4a2953688686bc1a188ee
SHA1 760c6821d47a53f99d26af57971f24af64f0dfe8
SHA512 b6c267e98d75f8c1cf2496de6eeb23d6e6ddf23a21483c4dfa0080a2ee889d239d2d0796ad224718270bd21b18125b278d4ad4c3d7b73cbbb3ccb70aee59b925
SSDEEP 384:CLTpbJ2+NQC8QIMa8QQRAVsEr9VseN1NMupz3fHbj5BCzl8wbGJg9xzyVzK+RAE4:oJpmyEj9RxiE3KEOxGIwQ
TLSH
T1BA92C6A702554D1DED8339BAA4B42B4520E832BFC3E5F5C0B9F60C5E6E8E50122F935E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Türkçe Yama.msi

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\Türkçe Yama.msi
Size 8.0MB
SHA256 5828ad60222c6d08302b8f9d3f4f54b1ec702c8e2119947744a652d9afb4b8d7
MD5 6e371b18b836c8c8b8cfcfb88194c16e
SHA1 fd3e386c0357f5c7e917ec816b2e72ed0e72dcd9
SHA512 6b693c3dd9252e530288bec5f3c7be5165942c8bbbaf1106c4c7e572b1ce2bcdfa174964d9c75205254a8d380add45d5b12e5a7e3a35b76316dfa6cd440f5543
SSDEEP 98304:WZ+uKTF8+XAFAsEXE5g7c74Xcc1bXiJ8MD9S3wKqZl1hmc5EL4vAVtOPzzmyFEq/:Unx78NiJIs/wAAqdFb6
TLSH
T1EE86D02335ADC02AD1A93573DA2DF6FA5629AE32CF7104D772D47E2F79B05C18231A12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3d9_smaa.dll

Path C:\Users\Admin\AppData\Roaming\Ahmet Özbay\Fallout 3 Türkçe Yama 1.6.0\install\6C226EE\d3d9_smaa.dll
Size 166KB
SHA256 95ebfc54ff3ca337012c1abe35b3a3db5c5fdb7d7e4caa23b274b9295d17a1f4
MD5 7894c14d7778e260685a0183e6798fab
SHA1 6d8378e0df98bed5e1761bfd2a2ddbff2c21b758
SHA512 c957e7fcaca75388a2c0dde13c6a8fdbed7573236fa3c2691bf5a142e1d39dab5f45298b4bd48e3da47baf2d49a1fd5d4a04479175d3355e6c0e80d5a650c5f8
SSDEEP 3072:cw/nlnU56BqtD2XC/dBcNgRCfimerUbP8NqX:Pc6oD64AbZ
TLSH
T17AF36B15F35D98F1C63B55398FE8C7E17E6AB22106B4058733ACBA6D5B302C329BD606
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI4AD2.tmp

Path C:\Windows\Installer\MSI4AD2.tmp
Size 419KB
SHA256 e6368dad109c3710e17a2b6c123baff05b424a3653b5c094e7621af37a8c824b
MD5 1458a72d86b87e1329cfc549b98d1e4d
SHA1 00d73b4e31b7395ee4bccab5b456d1d91c407ab9
SHA512 4a7a32f1ae336b2377d3ea476481e8fe4bfaaaf12488cf024e7150dd26a4148ded762442f665ea4a69169d458adf8dc717a73ff4c8bcd6f34e3a6fd4536b1e46
SSDEEP 12288:tbiQnSDqYisDEiD3jbTFiuiSiO+kP53nUNlQ:tbvnSDqJsDEiD3PTFTFiS53UNW
TLSH
T136949D223AD2D433D8B211701F69EBB5567EE9700B6209CFA3E42E6D1E74AC15732B13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSIB825.tmp

Path C:\Windows\Installer\MSIB825.tmp
Size 709KB
SHA256 502ccbe31fe0f984a2fa0610ee6385a3e478cd866e19208e229b6ef8fcfb2934
MD5 9863ad412fa5529d5a712ef228ac6e2b
SHA1 bda741fd705277c29379b01100a162e922f76583
SHA512 8f64b1ac2423eb6ebbd2853a985711c030f54279599382b3cbc3de4ebb90a98a0273172a85d65e5e78cae419e928fb787715ea9f2c8285662c89b25d6b584cb0
SSDEEP 12288:ogaGWXLiDt5i+jfNIQTVhQNvj3jAszYzGLwQq63Trzzt5O0Qn2enGCeoa:FrBT6vj3cszYO5O0Qn2oGCeoa
TLSH
T16AF45B207196C03BE57D41F12A3CDE6B917DBB720BB214DB6BC45E7A18B48C21636E27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

babybook04.dds

Path F:\APPDIR\Data\textures\terminals\english\babybook04.dds
Size 682KB
SHA256 489384eaf7e8c9ebd11397baf5afdbe2105bb691616266dccdc520059d74a841
MD5 404f5a5a41d47f9a99eb1ac13215a999
SHA1 a03fce4cb1b95155fbdbf59711a66daadbbd5153
SHA512 94ed46caa78f2c0aca84359ad6b9a13f3951f1172fe29598efb4e2c04533fb07358bd73561a0736f5ee306e56a1eb9b30542698c3fff14d82b6844b2d27e851b
SSDEEP 12288:1S7pVkHa6DTRmXyi8MAszA41QaAv+SnMV5CpHe5ObjpB4AdqwAQGHE:1S7ETi8MvA41xrSnMVQHe5UjT4hQ7
TLSH
T1F9E48F004E96E40192CAF6C0DF0FF74ACFB43B6109B666495F300DDD66A7561AEBB29C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download