b8c6cc06217bf16bcc64579618aee7c342ad59921a6804f245a46344d0601163

Resubmissions

10/08/2026, 09:13

260810-k6ws9sel217

10/08/2026, 09:09

260810-k4xmsavfrf3

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
310s
max time network
298s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 09:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Harbi2Patcher.exe
Size 2.1MB
Sample260810-k6ws9sel21
SHA256 b8c6cc06217bf16bcc64579618aee7c342ad59921a6804f245a46344d0601163
MD5 d51c8e8398660ba5a18345b85d55a2e0
SHA1 7579b7241fde2102d51d4e8836c3629bc6772da4
SHA512 11398fdb0817f1eddfa971bdad55986898f7b79ccfa1460ac77f2cd42d3ec2c3bf46457af00f6b733bc9e380cfc0e93f654c1835e366e5629c632f1cf7c19b43
SSDEEP 49152:9niqptx9F/eIrSbxWn1rlr/306XTDmLBUen:hA1Wn1rlr/306+V
TLSH
T1FBA5BF57F7AA82AFD16B8138C5519207E7F1B464273287CFE29459696F132F02F3A342
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 6 IoCs

pid	Process
928	EasyAntiCheat_EOS_Setup.exe
4992	EasyAntiCheat_EOS.exe
5964	start_protected_game.exe
4188	EasyAntiCheat_EOS.exe
4068	EasyAntiCheat_EOS.exe
5052	EasyAntiCheat_EOS.sys

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\EasyAntiCheat\service.log	EasyAntiCheat_EOS.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\EasyAntiCheat\service.log	EasyAntiCheat_EOS.exe

Drops file in Program Files directory 8 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\EasyAntiCheat_EOS	EasyAntiCheat_EOS_Setup.exe
File opened for modification	C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe	EasyAntiCheat_EOS_Setup.exe
File created	C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe	EasyAntiCheat_EOS_Setup.exe
File created	C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe.tmp	EasyAntiCheat_EOS.exe
File created	C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe	EasyAntiCheat_EOS.exe
File opened for modification	C:\Program Files (x86)\EasyAntiCheat_EOS	EasyAntiCheat_EOS.exe
File opened for modification	C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.sys	EasyAntiCheat_EOS.exe
File created	C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.sys	EasyAntiCheat_EOS.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	EasyAntiCheat_EOS_Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	EasyAntiCheat_EOS.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	EasyAntiCheat_EOS.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	EasyAntiCheat_EOS.exe

Modifies data under HKEY_USERS 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	EasyAntiCheat_EOS.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	EasyAntiCheat_EOS.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5964	start_protected_game.exe
5964	start_protected_game.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4612	Harbi2Patcher.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
808	Process not Found

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4612	Harbi2Patcher.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4612 wrote to memory of 928	4612	Harbi2Patcher.exe	91
PID 4612 wrote to memory of 5964	4612	Harbi2Patcher.exe	95

C:\Users\Admin\AppData\Local\Temp\Harbi2Patcher.exe
"C:\Users\Admin\AppData\Local\Temp\Harbi2Patcher.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4612
- C:\Users\Admin\AppData\Local\Temp\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe
  "C:\Users\Admin\AppData\Local\Temp\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe" verify-and-install 0fae8b807d4745979524755393c0361f
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  PID:928
- C:\Users\Admin\AppData\Local\Temp\start_protected_game.exe
  "C:\Users\Admin\AppData\Local\Temp\start_protected_game.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:5964

C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe
"C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4992

C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe
"C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe"
1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
PID:4188

C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe
"C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe"
1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
PID:4068

C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.sys
"C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.sys"
1⤵
- Executes dropped EXE
PID:5052

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

EasyAntiCheat_EOS.sys

Path C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.sys
Size 36.7MB
SHA256 288066fe9fcac134524695161622f6685adda16f684ff4269a1a448be4f949ae
MD5 1befbedaec6dcfec12ac86e8028bcdfe
SHA1 c3a2d1299b9848055432238aa0e46255f0f36c8c
SHA512 5cb9cc4e6587c0632c271b2b894b1391e71e819f57f7263c2d3f4f866fee652b6ae1328c9b2e409cc5da9299a2dcb1b35d031464113081ed97eac2ae8b5432b1
SSDEEP 393216:NjfwqUL5Uc3ze90nWi5hlTgmDC9axYDhVG2oF8:1faLiKze98Wi5hlBC9gYlVGH8
TLSH
T161876DC3DDA892B4C1B59A7C2D2CF467E297F50CAED49709EB54D3227C79AAC3204721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base.cer

Path C:\Users\Admin\AppData\Local\Temp\EasyAntiCheat\Certificates\base.cer
Size 1KB
SHA256 daacdb0d885cb947e4b7162f91e538cacdb54e03dc174de1873b27d074feb1cc
MD5 742190b08fc28f4895fc1f4cacc8cb82
SHA1 0e4105098ecbf2eb6a230b2194f41ad2e02862d8
SHA512 3085853a4c7743614a3f3a0fe1914548c86b66cf967480e4ef640825f30e7d41d7bf5f301053f96a48cf4b31519d5e5f5e07711a74055180fc04af754c4f6691
TLSH
T1C421677E2E2EA0345F058C1EAD6ACF376D256D1006541559ACCEC301B88875EB94992F
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.conf

Path C:\Users\Admin\AppData\Local\Temp\EasyAntiCheat\Certificates\runtime.conf
Size 1KB
SHA256 bc44cd71de583eb9992f4632706d81dcdf4f5afb1ea1a2df3d2b40e31d72949f
MD5 b12173c886f7f4af82b7b36ee641c6f1
SHA1 5dbc1fa0f86c082681cb665907672782ceb33c5d
SHA512 24a7568bb81ea1095091af807c0d442f72c1728efab731b271ef0fd9d8469d7fc715ca87e468941655f0e1cc81d675e17472c6100f8f1cdf14b786847fe3f95f
TLSH
T1EE11CB4D38A2DF25A9953A435D2C2CD3E98C07F9CA2A0D86EF0265DCBBD7F086515003
MD5 SHA1 SHA512 TLSH

Submit Download

EasyAntiCheat_EOS_Setup.exe

Path C:\Users\Admin\AppData\Local\Temp\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe
Size 942KB
SHA256 533e8fec61dd4fa10cd9569eff32b4383a89656e8d951177a0331996ae074eb1
MD5 cf8fd782d6f9831d0243b5012d488d53
SHA1 15ff4c348590c8f9d5e29b0b22c0bbe1cecba360
SHA512 cfe5419a69822e6577f9f55785aaee64c511dd15cd5fb96d3b866b13c487297791753dbc6b8d8a4d1926f58de61553f7e653537437dfca95a74cf50eead5d680
SSDEEP 24576:6xYJVFrbwIYRKSXHDU/WepTV+++34X1I14BfEx/v1N:bVFwrJ3DUuepTV+++34614BfEx/vz
TLSH
T1C32538217480E072D4A201F356E9BB7D9528AD343BA158C766CC7A799D303C2EEF7E46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en_us.cfg

Path C:\Users\Admin\AppData\Local\Temp\EasyAntiCheat\Localization\en_us.cfg
Size 8KB
SHA256 932c709f9cb9c773b66453a8e99b961dd89ea848a7b5731cd809bc2fe789b8e6
MD5 7fc3994a2cb554468388a3bf00701da3
SHA1 c9c1d66e5f76a4510464214589b5406bb6b3b308
SHA512 92e3d6099054d0415d55dab599cb3243ddc5a5912cf92c4414612e1836b4b57fcb80015869f5f726ee43072e0c38cd911848f7ffc74b506e7ef2a47c872f76f2
SSDEEP 192:paUFKTxrYlkhGfMzi2uQaNQoanqhuLO6cuoXcsDNMEa:pT4rNu2TID6czcsDja
TLSH
T1C5127639DEE81A7B3EA5C352E2317D53DA9790E403310AB93D64885F108805DAEFE2D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Settings.json

Path C:\Users\Admin\AppData\Local\Temp\EasyAntiCheat\Settings.json
Size 448B
SHA256 79c074c1b4f7880e4cc0b3937d2a3ee72539559271af10eba20f3c4c566e97bb
MD5 9608acc4d3d479c1eab35ce665735ecc
SHA1 4f77aed7951fc33a555ad4daf56c6e31e6c640f3
SHA512 98a6c609c377e4e8e9778538618fdef2b27cbd68f056fc47ffc76de876af621870cd2b05a4c09f1491880cf26d664ed884fb98c7612929c5dd7954cdd6bfe32e
TLSH
T122F0227B88FC200C9324C19C4E724AF32AB0607CA20516D9B893BEDCAC1420923816E8
MD5 SHA1 SHA512 TLSH

Submit Download

SplashScreen.png

Path C:\Users\Admin\AppData\Local\Temp\EasyAntiCheat\SplashScreen.png
Size 533KB
SHA256 9986ea4ae661e92811e5a6ee7a97f6919fbfb97eeab3c1cabb05e0db70c763e6
MD5 fc6dd37dcc6575d5afc62de5d866a7af
SHA1 2f395bf2ef73c486f3621ecba5db48ae9c9228f4
SHA512 5fa5cf60b03ebba839620ea23eaf4c470f43a234dc8c3c5f81b26708d64cd996214976d75443c88cbebf381d847319c90db31c9de93d34d079cc6bdd8f01997b
SSDEEP 12288:GvdY7q4NnraWYtsS2m+uDk2y6kUxUz72VZuH21WOip2U5Ok:GvYra3tsXmFk16PxUzZW1tip2Vk
TLSH
T12AC423B510BB419E387E18CE53D77D0E5A8152A0AC63E4A73FE38572C6B76C4EA30163
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EasyAntiCheat_EOS_Setup.exe

Path C:\Users\Admin\AppData\Local\Temp\EasyAntiCheat_EOS_Setup.exe
Size 963KB
SHA256 dfcc892ae17c04934921a9c393a1d1de8220ccfdaa42201ad4c9619465cf57ab
MD5 b4d542641f611f6d7d6004c680476cb1
SHA1 b0993215ce5c4099960d03a216c58444e7f5fc00
SHA512 ce0bafbffc929f77854c85030eeef74750d4d79c015d46ba1f683488dc07a127baa0108cf2a42e37bdda2b6d0912b3857b9a733d63e195a86e84653836991869
SSDEEP 24576:B1kJ4CDz1bUfi8z1spig9yfXI5O7aEnM+5cgUZiBV:BaJ4e1ghaig9yfXIjEnM+5cgUwBV
TLSH
T1A0254921B840A072D59111B355E9FBAD892DAD30379168C767C87A7A9D303C2EFF7E06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

last-war2.mp3

Path C:\Users\Admin\AppData\Local\Temp\bgm\last-war2.mp3
Size 2.4MB
SHA256 ffda972ae191c5ae3c437bdd13abb47ada94277c3355377c7aeb8ac5fed98b2f
MD5 f76e28212d4b7e5debffcd2d3a7a254e
SHA1 88f3ce93ef1183f03b2dc01350bd44168723fe0e
SHA512 58adaedeb81798c13c3d2dfea3295f4b921de631e02f491a86725a93fcafdf8a64fa80997d5fd7bca4e00f3bc012282f3bb56d82d799ca2274ef62febc5dddf0
SSDEEP 49152:82awAMzuZSt94hkftDbifGl1WMNwobP8CWb2nIE08Y1UP1y:82NzuZ0iheXSDMN10V1zUy
TLSH
T122C5334C64D0B093D9E74FB71117FEADE8908E9E1A5ACE44B5363F7BC471A80321B895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

start_protected_game.exe

Path C:\Users\Admin\AppData\Local\Temp\start_protected_game.exe
Size 3.8MB
SHA256 123665879cc19340348ebb43439dadfb6c813b3b3c890530fe412cad917aa69d
MD5 b2020cd2d2f762175fdba22526f54fac
SHA1 cdcb74be756ac2e18a32bf731e479a86d7fe4053
SHA512 9821e17692be5673a492556bec1e8455b912750c183f5c4b0b70087aa755d870cb4d5aec163b035ae2fb0ecb19e8eef5cf2579ead7b912a6d8c56a89d3d1aaa3
SSDEEP 49152:KH/EfaFrDmUdBjRTH2yTW6lWtLBgr3Gwn62fduKEVtMcR8/s+kobXHz/q/xHd/cm:KTTWYW6l2M623C8jggqAk
TLSH
T18106BF4AA3A501E8D567907AC686670FD2717C0433909BDB27A45AB52F33BE0DEFB710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

634ce497-0903-05a1-4fa8-f600012d2363

Path C:\Users\Admin\AppData\Roaming\EasyAntiCheat\634ce497-0903-05a1-4fa8-f600012d2363
Size 27.0MB
SHA256 7edd5856096db3721be54120fd30409f09c7de95baa6486e59f04a471b7ecb81
MD5 1a1196128abf472bd395a97114e11bec
SHA1 f1560359378a69de0ac226f90f323acd65bbe490
SHA512 ffecd529f3ba82c60a3bad13a7a5e7c068b8e24e8880a8ae384a349be28e1546532628b2868cbc634f21e9131fb233db25c6133e91b053c8dca24a15332a7b3e
SSDEEP 786432:cuLgHI8FWGAdSwycHm+Fi+g3UFzLlru2cSL:cuLIfAdSwycG5+kUdJNcSL
TLSH
T13E5733C7DD9486BCC1ADD5BC560EF067E2A6BC0C6BB4A747A794C3226D75EAC2708301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

service.log

Path C:\Users\Admin\AppData\Roaming\EasyAntiCheat\service.log
Size 496B
SHA256 5cf0d2949d0ffbe35ccc5a5601c5810a7632fff027104102288de6a056b494cb
MD5 dfe6d4d8b7cc916641fef9a81f55dbb9
SHA1 3dbf3968fbad19a9520504233b0b8f7db9134076
SHA512 817b7ba363fe31927743af16a49151ebbb0f8a4160856653582afd111f84e2b2f7d124743a18103872aff75fc92070b8d769eefada26c8f6fdc4d92fa3ed5a10
TLSH
T1F8F0E0C17E47F0750F9AC292A0757F920548B35B69FDD5947125F30C64923131FF9011
MD5 SHA1 SHA512 TLSH

Submit Download

service.log

Path C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\EasyAntiCheat\service.log
Size 284B
SHA256 78af28f12aebaf40c6067e689535980a6b40875520109514064e2c6d6d17ae10
MD5 b7ff283137fee54337757cff7c60ed12
SHA1 5f2b2678b21e4e40dbc2f67ee776562505813dd2
SHA512 2219a133f5f64ce45642018985ead99caa3e7ea09b2bddb22d550356df65c858357f1c78e330263ec7b2522b0553e72ae391993d43dcaa8c46fe7265bcf41549
TLSH
T1B3D02BC27F56F1760FCEC743A1DC1AB22D08530B1DB9DB842408B10C30903132DFA421
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4188-403-0x0000000000E80000-0x0000000000F6F000-memory.dmp

Download