Analysis

  • max time kernel
    903s
  • max time network
    537s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/08/2026, 23:09

General

  • Target
    TWOPIECE GoldRoom.exe
  • Size 217.4MB
  • Sample260810-245rts1brf
  • SHA256 a0bc095dec39c53cebb814efae5916cdbdc456a9300011f03c6373f7d9c061f4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TWOPIECE GoldRoom.exe
    "C:\Users\Admin\AppData\Local\Temp\TWOPIECE GoldRoom.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3252
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4308
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x00000000000004D4 0x00000000000004DC
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1388
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:2692
    • C:\Windows\System32\SecurityHealthHost.exe
      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
      1⤵
        PID:5424

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            TwoPiece_Gold_Room.exe

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room.exe
            • Size 635KB
            • SHA256 125326c3870467d58e413a4abaff8f480ac02f2762ca6e4b6f81d7dc0b0b77c3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Assembly-CSharp.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\Assembly-CSharp.dll
            • Size 10KB
            • SHA256 cd5c98437ec5cb01a0748583b9f5d2f3496450d0db69d7a4504cf5bea9937ac5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\System.dll
            • Size 1.0MB
            • SHA256 fbbcd7f06c2a1c01dc943b0ff15f4e5aff967fb95fa5a17fce7de365f11012db
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.AIModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.AIModule.dll
            • Size 30KB
            • SHA256 3ff748e9f6d9e39ed82d0ab5811f65b3029b42577101d9cbbcc66c53b8d913c3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.ARModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.ARModule.dll
            • Size 20KB
            • SHA256 7f4cd6c052958134831e96b5da76e668260d4462173e34c75c5415d15fdb1187
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.AccessibilityModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.AccessibilityModule.dll
            • Size 6KB
            • SHA256 c47d1b0a095ada987e55214712f48dbd2a8b7bf4fbb6b58191dfd4baa56830e4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.AnimationModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.AnimationModule.dll
            • Size 69KB
            • SHA256 ac267fbc51c77f306b9984010ef431391f00dafa49c4654911ad013f359c8e24
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.AssetBundleModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.AssetBundleModule.dll
            • Size 4KB
            • SHA256 236a0a7717e77c1d42696a4e5495b14b9aef2b7c13ac2b6df77510ed340d3649
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.AudioModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.AudioModule.dll
            • Size 44KB
            • SHA256 0188794cac2435022f11b448c63b2a6d828dd938d6ec28000898679ea6796607
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.ClothModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.ClothModule.dll
            • Size 10KB
            • SHA256 7e1c776bddd817297adcb193bf2ca6bcbb71de2dba3c4c0c6aa47b306ceb5e6d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.ClusterInputModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.ClusterInputModule.dll
            • Size 5KB
            • SHA256 911839f0fbd98e629467e974317a8bfec5e1930cd7588c6f9e81a887c7a5a010
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.ClusterRendererModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.ClusterRendererModule.dll
            • Size 4KB
            • SHA256 7fe33a44d9963726983e154089884f6a38c8f01d79a02ec789507db036f7895f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.CoreModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.CoreModule.dll
            • Size 652KB
            • SHA256 eec872e025eccfd94fb2df6b151002b862314d16fd060883d3d1f12798873ebb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.CrashReportingModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.CrashReportingModule.dll
            • Size 4KB
            • SHA256 3dbefcacf21ebaef0901fe9ab4ea61bacffd23ac38dd22f342f8086c7a90a3a4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.DirectorModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.DirectorModule.dll
            • Size 7KB
            • SHA256 6f719fb3a9a3910f3747d27ced75cc0dd9788715fc237a55f33d11067dcfe87b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.GameCenterModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.GameCenterModule.dll
            • Size 21KB
            • SHA256 9ae62174e8c99aab26dd8a21f23069c232b03abca8e3b6bd8a49a81e15baf620
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.GridModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.GridModule.dll
            • Size 7KB
            • SHA256 1df08afdb243aa8799c96f8550eae16738716c7ca28eb4b08706931aed5f0e2c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.IMGUIModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.IMGUIModule.dll
            • Size 134KB
            • SHA256 7b6c656944ee68cab6cefb6d2f9e685d57d8c19e7475d5ff1b24ff5f2ca51ab4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.ImageConversionModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.ImageConversionModule.dll
            • Size 5KB
            • SHA256 b4d4409dc2f66d4bfd2f08553d8a567f4149550bbc8183faa403aa452f454968
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.InputModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.InputModule.dll
            • Size 10KB
            • SHA256 0fe93fb9abe4effd5ecf62112906c439b94a8ee96bda424b2970eeee3ec8c1ff
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.JSONSerializeModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.JSONSerializeModule.dll
            • Size 4KB
            • SHA256 b286cd652cb6ccb7d2514790ead91ccb5520bb0be185d63963f8eb79ab77efbe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.Networking.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.Networking.dll
            • Size 249KB
            • SHA256 eb0254ac6a0eea4cf21a5502d78810f214a57ce75dd63bd24ce99102f3d33dbb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.ParticleSystemModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.ParticleSystemModule.dll
            • Size 101KB
            • SHA256 fe35259fb49a619a6a6c49049a0be68b1402c0095dcdfc1cff2553a246098d0b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.ParticlesLegacyModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.ParticlesLegacyModule.dll
            • Size 12KB
            • SHA256 d5cde9a23fac912529d893a32c0a0cf0e3c0c821e78e752593d9ee858bf46625
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.PerformanceReportingModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.PerformanceReportingModule.dll
            • Size 4KB
            • SHA256 cdb5b47bf2983adefbbf7337af0685948841ba2e38d12b158708f5607e244079
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.Physics2DModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.Physics2DModule.dll
            • Size 67KB
            • SHA256 d3d2e95106672dad9f23630889d5b5e761903340507c4e9c9068fcb3e17fddaf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.PhysicsModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.PhysicsModule.dll
            • Size 61KB
            • SHA256 afbf644639230571e4f7c890e28d930a918d159319e19fec2b40b97a360e2927
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.ScreenCaptureModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.ScreenCaptureModule.dll
            • Size 4KB
            • SHA256 1edc04781756894c272f9011553ab81e456304448e9d6eb24298352a22743f40
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.SharedInternalsModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.SharedInternalsModule.dll
            • Size 15KB
            • SHA256 8a99777b125d6149ba0875754501c9c25e9018624c904bfc27a349c2582f4f60
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.SpriteMaskModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.SpriteMaskModule.dll
            • Size 5KB
            • SHA256 5fa026ffb81c129df9ca1de47d47de4ab81f76f8bf6075481188a0becbd4352b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.SpriteShapeModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.SpriteShapeModule.dll
            • Size 5KB
            • SHA256 5192abb41a135db844ca136c0271f5462ec96118aeba7704f1015daec47799b3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.StyleSheetsModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.StyleSheetsModule.dll
            • Size 10KB
            • SHA256 5ebcc7e6f643417af527b4d0b7c7de310e133dfe8b07ab4cff472ce79cbde164
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.TerrainModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.TerrainModule.dll
            • Size 25KB
            • SHA256 e80aea43f738bc24d3a7f0d380c965a5659e328407c169a250c4b050400c7816
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.TerrainPhysicsModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.TerrainPhysicsModule.dll
            • Size 4KB
            • SHA256 6a8f609de4d83838d3a8de5f2c5fe32dad2183e93cf562657e34a512ffdc2ccd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.TextRenderingModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.TextRenderingModule.dll
            • Size 21KB
            • SHA256 fbd69d33d916bb44e04f64e5caf5bc30a6cea7b7149a28411eb9db822868ed5e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.TilemapModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.TilemapModule.dll
            • Size 17KB
            • SHA256 c572d3d385b0195ced0c631f770d68d781a54ce67355a66bd2735aae90416530
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.Timeline.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.Timeline.dll
            • Size 86KB
            • SHA256 8d0c954d7eb513915da865ceec2442345dda07e6f773ea7a6994384acf3a2104
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UI.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UI.dll
            • Size 244KB
            • SHA256 0902d85f6d9a707e41cf1869f66d718ae018ba6a9c8fa3286d028f162c0c102a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UIElementsModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UIElementsModule.dll
            • Size 188KB
            • SHA256 4a38cfb19ccdac1fc099014ae4c2f090ec44bfc86c8e1235a37ae752f7b3a7c3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UIModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UIModule.dll
            • Size 17KB
            • SHA256 5c5fa6a1788c1c4c7475972b0898a083d4fd2fc20df8f0f88ea91274f3554e18
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UNETModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UNETModule.dll
            • Size 69KB
            • SHA256 622a074259b1e950d99abe0ad669f2a5d98657a3216a323623d92d6d1ab57a52
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UnityAnalyticsModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UnityAnalyticsModule.dll
            • Size 11KB
            • SHA256 b6f4ee8de4e6e5c56c6acc09a53cd50623a311edcf9de2d7d24d6b82836f71be
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UnityConnectModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UnityConnectModule.dll
            • Size 8KB
            • SHA256 9bcecd6c7a5b9641001858b76bf3c24265ef56370a405fdb8e479176885eed96
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UnityWebRequestAudioModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UnityWebRequestAudioModule.dll
            • Size 6KB
            • SHA256 67083951555ca6585dd70de09ec931ea1a6e8349766aa43fb7cc4c83334d4f24
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UnityWebRequestModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UnityWebRequestModule.dll
            • Size 33KB
            • SHA256 79439a976783283af0c7f8bfc50251c8c32d80d25c8a91a22ba9bd9fd6f4a2eb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UnityWebRequestTextureModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UnityWebRequestTextureModule.dll
            • Size 5KB
            • SHA256 dacbd9abd2ff5459b7fa501588c36b5c937f5059bf68a15941b97a7864fd669a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.UnityWebRequestWWWModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.UnityWebRequestWWWModule.dll
            • Size 14KB
            • SHA256 5fc56574a9eb6ba4bfa7e6ce5df84c22f787fe743ade949a5951dccbcb00238d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.VRModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.VRModule.dll
            • Size 20KB
            • SHA256 88ed4219cfcd993599bb3c0ef1777215d03a56617e1fbe19d8c8a7f41e21be50
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.VehiclesModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.VehiclesModule.dll
            • Size 7KB
            • SHA256 a39fbf516eb145fbb223dd47f13ad279b5f9176d5c8c1bf6b402ee06f6508d9e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.VideoModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.VideoModule.dll
            • Size 18KB
            • SHA256 167de9e05b9805eacebeb0d104abe3f1d2e1bf41ce4dd3e349ee72825cb200bf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.WebModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.WebModule.dll
            • Size 27KB
            • SHA256 58986f93a9369f304999df0c3b0125fe2da4432b1a121122f94d40b0d99110fe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.WindModule.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.WindModule.dll
            • Size 5KB
            • SHA256 6051cf6b28bf50a721c3d34224aa4854120917139086f47068e965d7f3108671
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnityEngine.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\UnityEngine.dll
            • Size 52KB
            • SHA256 d0308db6e309be9060c19c429dded4f266e8f32a97849b34d5bdae2a79b89fbd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mscorlib.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Managed\mscorlib.dll
            • Size 2.4MB
            • SHA256 546e8980c42f013338fad7c6604e56f11b4e044e670f67b4c3318bd3629562c3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mono.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Mono\EmbedRuntime\mono.dll
            • Size 2.5MB
            • SHA256 582b77fdf635c36445de420c620abd4fd2562bb8dc5e9b0990f8b5a2dfaeed77
            • MD5 SHA1 SHA512 SSDEEP TLSH

            config

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Mono\etc\mono\config
            • Size 1KB
            • SHA256 b585c70c70c88b3e03489361558f5d711c2ef71df9baaf37d92dbf95fbf6cd92
            • MD5 SHA1 SHA512 TLSH

            unity default resources

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\Resources\unity default resources
            • Size 3.4MB
            • SHA256 4515e45d237cd4454f4a23417705d622e3d4383e5e14efe6d1bed1c772b1c594
            • MD5 SHA1 SHA512 SSDEEP TLSH

            app.info

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\app.info
            • Size 33B
            • SHA256 2f26837db81d11ba94b14ea78265d64bafa5602db972962ba02b9713116c9c78
            • MD5 SHA1 SHA512

            boot.config

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\TwoPiece_Gold_Room_Data\boot.config
            • Size 27B
            • SHA256 ca5f05780f0a824b3748a09b6d4ded9ca76588bba38aef00a780cfa6e25a91e0
            • MD5 SHA1 SHA512

            UnityPlayer.dll

            • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\UnityPlayer.dll
            • Size 21.3MB
            • SHA256 3677f08abfed2b098866b368fe28c806654dbf28cee86631b385f42638d6aaf9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            memory/4308-268-0x000002B1548B0000-0x000002B1549B0000-memory.dmp

            memory/4308-269-0x000002B154250000-0x000002B154350000-memory.dmp

            memory/4308-324-0x000002B1548B0000-0x000002B1549B0000-memory.dmp

            memory/4308-325-0x000002B154250000-0x000002B154350000-memory.dmp