hxxps://userplatform-download[.]akamaized[.]net/official-website/pc-launcher-setup/Tiles[.]Survive[.]PC[.]V1[.]0[.]exe?clickcode=xgwbv44rke

Resubmissions

19/08/2026, 19:07

260819-xs3e4s1ejg8

19/08/2026, 19:06

19/08/2026, 19:03

19/08/2026, 18:56

19/08/2026, 15:42

19/08/2026, 04:21

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
899s
max time network
885s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
19/08/2026, 04:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://userplatform-download.akamaized.net/official-website/pc-launcher-setup/Tiles.Survive.PC.V1.0.exe?clickcode=xgwbv44rke
Sample260819-eyn6kaytax

Score

9^/10

bootkit defense_evasion discovery execution persistence spyware trojan

Malware Config

Signatures

Enumerates VirtualBox registry keys 2 TTPs 5 IoCs

defense_evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VBoxMouse	tspc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VBoxService	tspc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VBoxSF	tspc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VBoxVideo	tspc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VBoxGuest	tspc.exe

Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 3 IoCs

defense_evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	tspc.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\FADT\VBOX__	tspc.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\RSDT\VBOX__	tspc.exe

Looks for VirtualBox Guest Additions in registry 2 TTPs 1 IoCs

defense_evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\Oracle\VirtualBox Guest Additions	tspc.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
2444	powershell.exe
5680	Powershell.exe
6080	Powershell.exe

Downloads MZ/PE file 2 IoCs

flow	pid	Process
9	5068	msedge.exe
37	4832	Tiles.Survive.PC.V1.0_xgwbv44rke.exe

Looks for VMWare Tools registry key 2 TTPs 1 IoCs

defense_evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\VMware, Inc.\VMware Tools	tspc.exe

Checks BIOS information in registry 2 TTPs 3 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	tspc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate	tspc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	tspc.exe

Executes dropped EXE 9 IoCs

pid	Process
4832	Tiles.Survive.PC.V1.0_xgwbv44rke.exe
4248	ts_xgwbv44rke.exe
7784	Launcher.exe
7852	PC-Launcher.exe
9388	UacLauncher.exe
9508	tspc.exe
10532	UnityCrashHandler64.exe
19840	TQMCenter_64.exe
14924	NEPKernel.sys

Identifies Wine through registry keys 2 TTPs 1 IoCs

Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

defense_evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000\SOFTWARE\Wine	tspc.exe

Loads dropped DLL 56 IoCs

pid	Process
4248	ts_xgwbv44rke.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
19840	TQMCenter_64.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\ts_global = "\"F:\\FunPlus\\Tiles Survive\\Launcher.exe\""	ts_xgwbv44rke.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\ts_pc_global = "F:\\FunPlus\\Tiles Survive\\Launcher.exe"	PC-Launcher.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	ts_xgwbv44rke.exe
File opened (read-only)	\??\F:	PC-Launcher.exe

Indicator Removal: File Deletion 1 TTPs
Adversaries may delete files left behind by the actions of their intrusion activity.
defense_evasion

File Deletion
T1070.004

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	tspc.exe

Checks system information in the registry 2 TTPs 2 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	tspc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	tspc.exe

Drops file in Windows directory 24 IoCs

description	ioc	Process
File opened for modification	C:\Windows\NEPDriver.info	tspc.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_2027281132\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_766379685\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_738997569\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_684287019\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1678060184\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_233439681\automation.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_233439681\classification.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_233439681\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1156767876\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1156767876\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_684287019\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_738997569\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_738997569\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1678060184\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1678060184\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_233439681\extraction.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_233439681\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1156767876\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_766379685\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_738997569\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1678060184\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_233439681\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1156767876\_metadata\verified_contents.json	msedge.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Tiles.Survive.PC.V1.0_xgwbv44rke.exe:Zone.Identifier	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Embeds OpenSSL 2 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral2/files/0x0001000000000d17-10987.dat	embeds_openssl
behavioral2/files/0x0001000000000d16-10984.dat	embeds_openssl

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Tiles.Survive.PC.V1.0_xgwbv44rke.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ts_xgwbv44rke.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5068	msedge.exe
4612	msedge.exe
12272	msedge.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Tiles.Survive.PC.V1.0_xgwbv44rke.exe
Key opened	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0	tspc.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	tspc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	tspc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	tspc.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Tiles.Survive.PC.V1.0_xgwbv44rke.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315868875054089"	msedge.exe

Modifies registry class 25 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\worldx	Launcher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\worldx\URL Protocol	Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\worldx\shell\open\command	Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\worldx\shell	Launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\worldx\ = "URL:worldx Protocol"	Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\worldx\shell\open	Launcher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\worldx\DefaultIcon\ = "F:\\FunPlus\\Tiles Survive\\Launcher.exe"	Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\worldx\shell\open\command\ = "F:\\FunPlus\\Tiles Survive\\Launcher.exe %1"	Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\worldx\DefaultIcon	Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2043432456-1617298091-2772621413-1000\{F5703C9D-0B38-4953-92EF-385A99516279}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2043432456-1617298091-2772621413-1000\{78E8FBEA-2CAE-4082-BDB5-3EDE018C41C3}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2043432456-1617298091-2772621413-1000\{3E631E1A-4634-4A09-BBD1-6023CCBFC87D}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe

Modifies system certificate store 2 TTPs 5 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436	tspc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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	tspc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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	tspc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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	tspc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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	tspc.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Tiles.Survive.PC.V1.0_xgwbv44rke.exe:Zone.Identifier	msedge.exe

Runs net.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4248	ts_xgwbv44rke.exe
4248	ts_xgwbv44rke.exe
4248	ts_xgwbv44rke.exe
4248	ts_xgwbv44rke.exe
4248	ts_xgwbv44rke.exe
4248	ts_xgwbv44rke.exe
4248	ts_xgwbv44rke.exe
4248	ts_xgwbv44rke.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
2108	Powershell.exe
2444	powershell.exe
2108	Powershell.exe
2444	powershell.exe
5320	Powershell.exe
5320	Powershell.exe
5680	Powershell.exe
5680	Powershell.exe
6080	Powershell.exe
6080	Powershell.exe
1884	Powershell.exe
1884	Powershell.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
11972	msedge.exe
11972	msedge.exe
9508	tspc.exe
9508	tspc.exe
18420	msedge.exe
18420	msedge.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
672	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	5668	wmic.exe
Token: SeSecurityPrivilege	5668	wmic.exe
Token: SeTakeOwnershipPrivilege	5668	wmic.exe
Token: SeLoadDriverPrivilege	5668	wmic.exe
Token: SeSystemProfilePrivilege	5668	wmic.exe
Token: SeSystemtimePrivilege	5668	wmic.exe
Token: SeProfSingleProcessPrivilege	5668	wmic.exe
Token: SeIncBasePriorityPrivilege	5668	wmic.exe
Token: SeCreatePagefilePrivilege	5668	wmic.exe
Token: SeBackupPrivilege	5668	wmic.exe
Token: SeRestorePrivilege	5668	wmic.exe
Token: SeShutdownPrivilege	5668	wmic.exe
Token: SeDebugPrivilege	5668	wmic.exe
Token: SeSystemEnvironmentPrivilege	5668	wmic.exe
Token: SeRemoteShutdownPrivilege	5668	wmic.exe
Token: SeUndockPrivilege	5668	wmic.exe
Token: SeManageVolumePrivilege	5668	wmic.exe
Token: 33	5668	wmic.exe
Token: 34	5668	wmic.exe
Token: 35	5668	wmic.exe
Token: 36	5668	wmic.exe
Token: SeIncreaseQuotaPrivilege	5668	wmic.exe
Token: SeSecurityPrivilege	5668	wmic.exe
Token: SeTakeOwnershipPrivilege	5668	wmic.exe
Token: SeLoadDriverPrivilege	5668	wmic.exe
Token: SeSystemProfilePrivilege	5668	wmic.exe
Token: SeSystemtimePrivilege	5668	wmic.exe
Token: SeProfSingleProcessPrivilege	5668	wmic.exe
Token: SeIncBasePriorityPrivilege	5668	wmic.exe
Token: SeCreatePagefilePrivilege	5668	wmic.exe
Token: SeBackupPrivilege	5668	wmic.exe
Token: SeRestorePrivilege	5668	wmic.exe
Token: SeShutdownPrivilege	5668	wmic.exe
Token: SeDebugPrivilege	5668	wmic.exe
Token: SeSystemEnvironmentPrivilege	5668	wmic.exe
Token: SeRemoteShutdownPrivilege	5668	wmic.exe
Token: SeUndockPrivilege	5668	wmic.exe
Token: SeManageVolumePrivilege	5668	wmic.exe
Token: 33	5668	wmic.exe
Token: 34	5668	wmic.exe
Token: 35	5668	wmic.exe
Token: 36	5668	wmic.exe
Token: SeDebugPrivilege	2108	Powershell.exe
Token: SeDebugPrivilege	2444	powershell.exe
Token: SeDebugPrivilege	5320	Powershell.exe
Token: SeDebugPrivilege	5680	Powershell.exe
Token: SeIncreaseQuotaPrivilege	5680	Powershell.exe
Token: SeSecurityPrivilege	5680	Powershell.exe
Token: SeTakeOwnershipPrivilege	5680	Powershell.exe
Token: SeLoadDriverPrivilege	5680	Powershell.exe
Token: SeSystemProfilePrivilege	5680	Powershell.exe
Token: SeSystemtimePrivilege	5680	Powershell.exe
Token: SeProfSingleProcessPrivilege	5680	Powershell.exe
Token: SeIncBasePriorityPrivilege	5680	Powershell.exe
Token: SeCreatePagefilePrivilege	5680	Powershell.exe
Token: SeBackupPrivilege	5680	Powershell.exe
Token: SeRestorePrivilege	5680	Powershell.exe
Token: SeShutdownPrivilege	5680	Powershell.exe
Token: SeDebugPrivilege	5680	Powershell.exe
Token: SeSystemEnvironmentPrivilege	5680	Powershell.exe
Token: SeRemoteShutdownPrivilege	5680	Powershell.exe
Token: SeUndockPrivilege	5680	Powershell.exe
Token: SeManageVolumePrivilege	5680	Powershell.exe
Token: 33	5680	Powershell.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
7852	PC-Launcher.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe

Suspicious use of SendNotifyMessage 33 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
7852	PC-Launcher.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe
6996	msedge.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
7852	PC-Launcher.exe
7852	PC-Launcher.exe
7852	PC-Launcher.exe
9508	tspc.exe
9508	tspc.exe
9508	tspc.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4048 wrote to memory of 556	4048	msedge.exe	80
PID 4048 wrote to memory of 5068	4048	msedge.exe	81
PID 4048 wrote to memory of 1468	4048	msedge.exe	83
PID 4048 wrote to memory of 1468	4048	msedge.exe	83
PID 4048 wrote to memory of 4964	4048	msedge.exe	82
PID 4048 wrote to memory of 4964	4048	msedge.exe	82
PID 4048 wrote to memory of 4964	4048	msedge.exe	82
PID 4048 wrote to memory of 4044	4048	msedge.exe	85
PID 4048 wrote to memory of 4044	4048	msedge.exe	85
PID 4048 wrote to memory of 4044	4048	msedge.exe	85
PID 4048 wrote to memory of 4648	4048	msedge.exe	86
PID 4048 wrote to memory of 4648	4048	msedge.exe	86
PID 4048 wrote to memory of 4648	4048	msedge.exe	86
PID 4048 wrote to memory of 2808	4048	msedge.exe	88
PID 4048 wrote to memory of 3648	4048	msedge.exe	89
PID 4048 wrote to memory of 1288	4048	msedge.exe	90
PID 4048 wrote to memory of 1456	4048	msedge.exe	91
PID 4048 wrote to memory of 2808	4048	msedge.exe	88
PID 4048 wrote to memory of 2808	4048	msedge.exe	88
PID 4048 wrote to memory of 3648	4048	msedge.exe	89
PID 4048 wrote to memory of 3648	4048	msedge.exe	89
PID 4048 wrote to memory of 1288	4048	msedge.exe	90
PID 4048 wrote to memory of 1288	4048	msedge.exe	90
PID 4048 wrote to memory of 1456	4048	msedge.exe	91
PID 4048 wrote to memory of 1456	4048	msedge.exe	91
PID 4048 wrote to memory of 3784	4048	msedge.exe	92
PID 4048 wrote to memory of 3944	4048	msedge.exe	93
PID 4048 wrote to memory of 3784	4048	msedge.exe	92
PID 4048 wrote to memory of 3944	4048	msedge.exe	93
PID 4048 wrote to memory of 2964	4048	msedge.exe	94
PID 4048 wrote to memory of 2964	4048	msedge.exe	94
PID 4048 wrote to memory of 1576	4048	msedge.exe	95
PID 4048 wrote to memory of 1576	4048	msedge.exe	95
PID 4048 wrote to memory of 1576	4048	msedge.exe	95
PID 4048 wrote to memory of 2972	4048	msedge.exe	96
PID 4048 wrote to memory of 3444	4048	msedge.exe	97
PID 4048 wrote to memory of 3444	4048	msedge.exe	97
PID 4048 wrote to memory of 3724	4048	msedge.exe	98
PID 3724 wrote to memory of 5028	3724	msedge.exe	100
PID 4048 wrote to memory of 4408	4048	msedge.exe	102
PID 4048 wrote to memory of 4832	4048	msedge.exe	103
PID 4048 wrote to memory of 4432	4048	msedge.exe	104
PID 4048 wrote to memory of 3304	4048	msedge.exe	105
PID 4048 wrote to memory of 804	4048	msedge.exe	106
PID 4048 wrote to memory of 540	4048	msedge.exe	107
PID 4048 wrote to memory of 540	4048	msedge.exe	107
PID 4832 wrote to memory of 4248	4832	Tiles.Survive.PC.V1.0_xgwbv44rke.exe	108
PID 4248 wrote to memory of 7784	4248	ts_xgwbv44rke.exe	109
PID 7784 wrote to memory of 7852	7784	Launcher.exe	111
PID 7852 wrote to memory of 5668	7852	PC-Launcher.exe	112
PID 7852 wrote to memory of 2444	7852	PC-Launcher.exe	114
PID 7852 wrote to memory of 2108	7852	PC-Launcher.exe	115
PID 7852 wrote to memory of 5320	7852	PC-Launcher.exe	118
PID 7852 wrote to memory of 5572	7852	PC-Launcher.exe	120
PID 7852 wrote to memory of 5680	7852	PC-Launcher.exe	122
PID 7852 wrote to memory of 6080	7852	PC-Launcher.exe	125
PID 7852 wrote to memory of 1884	7852	PC-Launcher.exe	127
PID 7852 wrote to memory of 6300	7852	PC-Launcher.exe	129
PID 7852 wrote to memory of 6376	7852	PC-Launcher.exe	131
PID 7852 wrote to memory of 6488	7852	PC-Launcher.exe	133
PID 7852 wrote to memory of 6996	7852	PC-Launcher.exe	135
PID 6996 wrote to memory of 7056	6996	msedge.exe	136
PID 6996 wrote to memory of 4612	6996	msedge.exe	137
PID 6996 wrote to memory of 7172	6996	msedge.exe	139

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://userplatform-download.akamaized.net/official-website/pc-launcher-setup/Tiles.Survive.PC.V1.0.exe?clickcode=xgwbv44rke
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff9043cc188,0x7ff9043cc194,0x7ff9043cc1a0
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1728,i,18222756649882569250,8631668623387247478,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1532,i,1673689476305436004,14043458632237153306,262144 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:2
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,14514934568592269364,4765911511609139050,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:13
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,2883375659481041222,14062606272919359620,2097152 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,13633682993045780968,6101446153034684464,2097152 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,17906584530663504200,6667534252496377693,2097152 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,14090750194859119680,2508346977285758897,2097152 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:9
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4232,i,13884177332261818021,247628146777936247,2097152 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4252,i,14589253524000490230,18172551769569599186,2097152 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:9
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,13587341207974687352,3474807155751439799,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,14100678577216212045,1619784159902284461,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:14
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3404,i,6793884965256396429,8754264148962713330,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5884,i,63872413155749254,14841678062369907256,2097152 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,2958683519573491280,4624695690127925041,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,16391530112282671573,7553419641436827275,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:14
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,2509380557536670903,7144662134371653613,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3724
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1140
    3⤵
    PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6860,i,14091055673865295608,3689559627406802062,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:14
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6860,i,14091055673865295608,3689559627406802062,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:14
  2⤵
  PID:4408
- C:\Users\Admin\Downloads\Tiles.Survive.PC.V1.0_xgwbv44rke.exe
  "C:\Users\Admin\Downloads\Tiles.Survive.PC.V1.0_xgwbv44rke.exe"
  2⤵
  - Downloads MZ/PE file
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Checks processor information in registry
  - Suspicious use of WriteProcessMemory
  PID:4832
- - C:\Users\Admin\AppData\Local\Temp\ts_xgwbv44rke.exe
    C:\Users\Admin\AppData\Local\Temp\ts_xgwbv44rke.exe
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Adds Run key to start application
    - Enumerates connected drives
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:4248
  - - F:\FunPlus\Tiles Survive\Launcher.exe
      "F:\FunPlus\Tiles Survive\Launcher.exe"
      4⤵
      Executes dropped EXE
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:7784
    - - F:\FunPlus\Tiles Survive\1.0.0.1285\PC-Launcher.exe
        
        "F:\FunPlus\Tiles Survive\1.0.0.1285\PC-Launcher.exe" --currentPath="F:\FunPlus\Tiles Survive" --configVersion=1.0.0.1285 --launchExe="F:\FunPlus\Tiles Survive\Launcher.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Adds Run key to start application
        Enumerates connected drives
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of FindShellTrayWindow
        Suspicious use of SendNotifyMessage
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:7852
      - C:\Windows\System32\Wbem\wmic.exe
        
        wmic OS get Version /VALUE
        6⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:5668
      - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command get-wmiobject Win32_volume | select Name,Freespace,Capacity
        6⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:2444
      - C:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe
        
        Powershell.exe "Get-WmiObject win32_VideoController | fl *"
        6⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:2108
      - C:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe
        
        Powershell.exe "Get-WmiObject win32_desktopmonitor | fl *"
        6⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:5320
      - C:\Windows\System32\net.exe
        
        C:\Windows\System32\net.exe use
        6⤵
        
        PID:5572
      - C:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe
        
        Powershell.exe "Get-CimInstance -Namespace root\WMI -ClassName WmiMonitorBasicDisplayParams | fl"
        6⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:5680
      - C:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe
        
        Powershell.exe "Get-CimInstance -Namespace root\WMI -ClassName WmiMonitorConnectionParams | fl"
        6⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:6080
      - C:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe
        
        Powershell.exe "Add-Type -AssemblyName System.Windows.Forms; [System.Windows.Forms.Screen]::AllScreens"
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1884
      - C:\Windows\System32\Wbem\wmic.exe
        
        wmic CPU get Architecture, DataWidth, Manufacturer, Name, NumberOfCores /VALUE
        6⤵
        
        PID:6300
      - C:\Windows\System32\Wbem\wmic.exe
        
        wmic OS get FreePhysicalMemory /VALUE
        6⤵
        
        PID:6376
      - C:\Windows\System32\Wbem\wmic.exe
        
        wmic ComputerSystem get TotalPhysicalMemory /VALUE
        6⤵
        
        PID:6488
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://activity-tilessurvive.funplus.com/points-exchange/
        6⤵
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of FindShellTrayWindow
        Suspicious use of SendNotifyMessage
        Suspicious use of WriteProcessMemory
        
        PID:6996
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x368,0x7ff9043cc188,0x7ff9043cc194,0x7ff9043cc1a0
        7⤵
        
        PID:7056
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1608,i,15842041140802215801,5837520643665373168,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:11
        7⤵
        System Time Discovery
        
        PID:4612
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1480,i,8477258014021150184,10048749176840453941,262144 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:2
        7⤵
        
        PID:3184
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2120,i,4657893902738767601,4963042537695456974,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:13
        7⤵
        
        PID:7172
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,2219658110889545009,1946662205684564807,2097152 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
        7⤵
        
        PID:7400
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,5087623661318542464,11169272804846574982,2097152 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
        7⤵
        
        PID:7408
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4804,i,7418456357908675254,7154774429614403231,2097152 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:1
        7⤵
        
        PID:7624
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,4650829856319359482,10469845936240068606,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
        7⤵
        
        PID:7748
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,1214771601498186044,6583835575511888435,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:14
        7⤵
        
        PID:7836
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,14197520476360345830,13973770615950894854,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:12
        7⤵
        
        PID:7828
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,5845377865471853363,10609403144989313972,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
        7⤵
        
        PID:1288
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,9815709988194799317,15957076754135441540,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
        7⤵
        
        PID:1068
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,4700904826889742902,5509471422407517475,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:14
        7⤵
        
        PID:5404
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,4700904826889742902,5509471422407517475,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:14
        7⤵
        
        PID:5904
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,5005207717531212095,381026856446644231,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:14
        7⤵
        
        PID:4080
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,15293244259704382148,11082835001523011890,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:14
        7⤵
        
        PID:3008
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,13003372775216082366,8225127945132963501,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:14
        7⤵
        
        PID:11156
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6968,i,11409118303188396083,4782267780021762203,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=6972 /prefetch:14
        7⤵
        
        PID:6260
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7104,i,16256554219812975767,15426712778763704545,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:14
        7⤵
        
        PID:3988
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7144,i,16105993395654997680,1899553661468553566,2097152 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:1
        7⤵
        
        PID:9468
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7000,i,7934811873913320291,10150485805178669383,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
        7⤵
        
        PID:9572
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7036,i,5135261347488982596,18155787280020836079,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
        7⤵
        
        PID:9580
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,23825758089197218,9153140189140837798,524288 --field-trial-handle=2404,i,18088650845433605487,6015053916070835563,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:14
        7⤵
        
        PID:9588
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
        7⤵
        Drops file in Windows directory
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        Suspicious behavior: EnumeratesProcesses
        
        PID:11972
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2ac,0x7ff9043cc188,0x7ff9043cc194,0x7ff9043cc1a0
        8⤵
        
        PID:12000
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1652,i,8144225450803686274,13335623345516214787,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:11
        8⤵
        System Time Discovery
        
        PID:12272
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,835099181908378041,12131136479393723640,262144 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:2
        8⤵
        
        PID:12296
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1376,i,1819441315559732293,11656878043205554381,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:13
        8⤵
        
        PID:12308
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,13312012467964413001,428977829811527458,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
        8⤵
        
        PID:14204
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,16138894857580370018,2734331051137311082,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
        8⤵
        
        PID:14212
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,11337769073823719062,16471434451634520782,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:14
        8⤵
        
        PID:14220
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,11260716482476436960,8081852576353863197,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:14
        8⤵
        
        PID:15288
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,11260716482476436960,8081852576353863197,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:14
        8⤵
        
        PID:15488
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,6869588295587990850,11587370968403330630,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
        8⤵
        
        PID:17696
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5104,i,6094766396782434373,16003668622796090952,262144 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:10
        8⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:18420
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,16331879642429649971,3746870627056591973,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:14
        8⤵
        
        PID:6160
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,375404153380072704,13614070178550797799,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:14
        8⤵
        
        PID:5852
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,7013263575597533255,3534943726827580462,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
        8⤵
        
        PID:14960
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,14435963715159390405,8746572559684561287,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
        8⤵
        
        PID:196
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,15503259820449600644,14728201488920177250,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
        8⤵
        
        PID:11472
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,16203819236364137565,7361423152763109532,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
        8⤵
        
        PID:10472
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,9256297096716864128,10324580818244523563,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
        8⤵
        
        PID:3180
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,16417898714800743124,16868885596790514602,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
        8⤵
        
        PID:7208
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3824,i,4763681791477185110,11011082315549515970,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:14
        8⤵
        
        PID:6056
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,11863733648011398471,13846417217372215450,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:14
        8⤵
        
        PID:4432
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,6836029698208254794,3281132445410857678,524288 --field-trial-handle=2700,i,11378063476907832470,14367774517244695198,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:14
        8⤵
        
        PID:1628
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://activity-tilessurvive.funplus.com/points-exchange/
        6⤵
        
        PID:7608
      - F:\FunPlus\Tiles Survive\1.0.0.1285\UacLauncher.exe
        
        "F:\FunPlus\Tiles Survive\1.0.0.1285\UacLauncher.exe" --cmd=addFireW --name=TilesSurvive! --param=RjpcRnVuUGx1c1xUaWxlcyBTdXJ2aXZlXG5nYW1lXDIuNS44MDAuMjA0XHRzcGMuZXhl
        6⤵
        Executes dropped EXE
        
        PID:9388
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://activity-tilessurvive.funplus.com/points-exchange/
        6⤵
        
        PID:9420
      - F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc.exe
        
        "F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc.exe" --index=0 --gameid=8612
        6⤵
        Enumerates VirtualBox registry keys
        Identifies VirtualBox via ACPI registry values (likely anti-VM)
        Looks for VirtualBox Guest Additions in registry
        Looks for VMWare Tools registry key
        Checks BIOS information in registry
        Executes dropped EXE
        Identifies Wine through registry keys
        Loads dropped DLL
        Writes to the Master Boot Record (MBR)
        Checks system information in the registry
        Drops file in Windows directory
        Checks processor information in registry
        Modifies system certificate store
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of SetWindowsHookEx
        
        PID:9508
        
        F:\FunPlus\Tiles Survive\ngame\2.5.800.204\UnityCrashHandler64.exe
        
        "F:\FunPlus\Tiles Survive\ngame\2.5.800.204\UnityCrashHandler64.exe" --attach 9508 2527821172736
        7⤵
        Executes dropped EXE
        
        PID:10532
        
        F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tqm64\TQMCenter_64.exe
        
        "F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tqm64\TQMCenter_64.exe"
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:19840
        
        C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c rmdir /s /q "F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tqm64\stm\"
        8⤵
        
        PID:11192
        
        C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c rmdir /s /q "F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tqm64\stm\"
        8⤵
        
        PID:6200
        
        C:\Windows\System32\Wbem\wmic.exe
        
        wmic cpu get processorid
        7⤵
        
        PID:12900
        
        C:\Windows\SYSTEM32\nslookup.exe
        
        nslookup ir-sdk.guardease.com
        7⤵
        
        PID:12892
        
        C:\Windows\System32\Wbem\wmic.exe
        
        wmic bios get serialnumber
        7⤵
        
        PID:14932
        
        C:\Windows\System32\Wbem\wmic.exe
        
        wmic csproduct get UUID
        7⤵
        
        PID:5896
        
        C:\Windows\System32\Wbem\wmic.exe
        
        wmic nicconfig where (IPEnabled=TRUE) get DefaultIPGateway
        7⤵
        
        PID:10204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7148,i,4075877096643599926,8959486064756388856,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:14
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6800,i,6737232582640132473,1577436423209950153,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:14
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,14249096742007754897,18263044764017264198,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:14
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,2432714652304158406,7488557267026916847,524288 --field-trial-handle=2044,i,817868773444487302,17762968670295967952,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:14
  2⤵
  PID:540

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:7508

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4304

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:13696

F:\FunPlus\Tiles Survive\ngame\2.5.800.204\NEPKernel.sys
"F:\FunPlus\Tiles Survive\ngame\2.5.800.204\NEPKernel.sys"
1⤵
- Executes dropped EXE
PID:14924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

SIP and Trust Provider Hijacking

T1553.003

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

isc.dat

Path C:\ProgramData\NeteaseWinDev\isc.dat
Size 216B
SHA256 985dc5a6add42bcbd8cba8ef1665cdd6fc567b0a633179e357dcb969eef11a28
MD5 6f775f04b2d80743351509a4063fc4d4
SHA1 f49e1c877185b56928eabbe88576f2c81d325fe7
SHA512 29245cbdd897b11c7aba8a466c2c97fd8a4583cd128c479744f0973ea1d7e414466678de29756028f7a315ef9984f9b0c92610995d03685b6a9bf99584914739
TLSH
T124D0A708A67B5601ED5366B7994662406E054CC8034FA4E315536649AD228D36B01234
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\LocalLow\Kingsgroup\TilesSurvive\Unity\4d583d92-3925-41a7-b725-5da6391fb473\Analytics\ArchivedEvents\178711374300003.4efc4da9\g
Size 1B
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\LocalLow\Kingsgroup\TilesSurvive\Unity\4d583d92-3925-41a7-b725-5da6391fb473\Analytics\ArchivedEvents\178711374300003.4efc4da9\s
Size 429B
SHA256 c063ae9916fbb1d8ae9c7e28943fb542657f7204f9a636441da76d0d22590960
MD5 0a9818e080f674306ab9968a21fd34e1
SHA1 c2d9d1bfa5a6efaadd25a4b2b8b3a8e91316b096
SHA512 35f011fb6609b094c659e29c4e8130f42170051a290a4b876acfc1643b7a4b73a5f048deca82b2dc2b8a42968661333a507aabcebf9af9e842c52636f694b43e
TLSH
T1E7E0AB22876D2E3A9BF3845A0CC616155A303220FA15F27C86F0410D0F38A00BF4A462
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 acf2ca2fd979c7d8ae7b74bb0af4308e4abd3e42e1f32fd1a04b0ca1a2b166c8
MD5 80eaf72bc0ff9c89a5c23f07f38ee8f5
SHA1 cbf109666417a1db022b3f49a91481b9755a1b8e
SHA512 b21d0ebff096128eae96a603cc0e96af95cbca34e613c40faa0cc8c5c17961106d997b66011c3051ead599494bd80939479f2526a2e65ff25600b04b19065afd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 aeae0e9524818dbee2fef34a2c1ed28c6553de942ac749abad79f5df5daff38e
MD5 443a9f6f69d9834f6be601bca04bc5fd
SHA1 5171979095d6051a83610682e26980b99e943a93
SHA512 15d6312fcbabb18781312d3c9407a14fec4c4084b4182a75186b5f2a9a436eb0226176ebc1321b9526f93a5302421d26579e8578f813379ce0a91672a0e37ae2
TLSH
T1C1D023F1794D5052C90F003054109221B313DBB031A79F535066701D7B70644C79E2BB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 06c5ec56e90af49de657c72939556fc278cf3d681f8cf23084a66dd6737d2156
MD5 e2c6e43f4e329cea45c4d41a9140ce6f
SHA1 8815e6153932d3ef32b13b13676008bfabaf9985
SHA512 82247f2ab6a3eee9ab161121f2dcd0b4de76499e3df20cc67d94b270b3de8ea935460fe417dcd575d0222736daa99f01400ae5cec5be3d7e7fe39d04f6566a6a
TLSH
T1C5D023F17D4D9052C90F003094209221B313DBF031A79F53506A701D7B70644C7DE2BB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c775e051932ca3eb12cb1492307218f3eb60e27ab1d5067a206018a0dce15f7
MD5 9eddca22043e770f0592a3c2153a91d6
SHA1 cbb87adb99d436fea4dde2d4138d482abe10ebcd
SHA512 750a5cc8ad7e1a766effd26f74ec8105910646a0045dbc57c1a065ee96325595593c11473d4ce25ccca886a4a22b0eed6d2645570603cd58b4dbd54076578a4c
TLSH
T1EED097B0254A6001EA0D00316412520062138B2130A79602C022B00E6B30044839F0D9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dcfc4c476f41db2d6042449b7b855b9751140e2127be8e8208aafd46a5893b7d
MD5 08e448ed3ad1512fa216c2eea50fff9a
SHA1 2d684e6af180cff0b8adea283dbb0c009102fc3e
SHA512 f9ebe4d980c84e665fbd9643a31fbc7a6b08028d289cd54ea7400acc1d6a7d231dd7952c9c49775207225efebf00cdaaf6a2b295dbeac8f234ed7bdfa52c4693
TLSH
T122D0C073050D0000EA0D41312073C7050313BB210E013C03B855F8381D708C9438F1C0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 89ab71a3a4e732da8cbbe2e13ba149e13c94226b7119c8a0598106b99907544f
MD5 ca938be236bc251b79a4ee9dbf06dd19
SHA1 2ed95a78846a95a90b8d9b70e9cdc6188f0ce608
SHA512 caf4662a529a373a26b513e285938286f3af46a8729fb4c0be324b084fdba1e10dacca4b8f67585c4a5c6683f45dc7e259548eaf3ffb985905aeefbb7225e0e7
TLSH
T124D0C073050D0000EE0D41312073C7050313BB210E017D03B855F8380D708C9438F1C0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 dd0ee9b9727ad61b6df015d05b9cbde865000472000bdb97b20c92cd731f084b
MD5 794315417925ca2e83a7c31e397e20f9
SHA1 99bdab7b2c2205e9631aa8f0d1da55cc99ebd6bc
SHA512 3c90db16595fa4abccb40a5958dc542565ba6a6938f3ad3cd938afc2c554c63ecb12bc8063f71e87b16e19711f66317700d135eac0c7f04288c7b8534e8140f4
TLSH
T165E0268D14DEC22E9A48A58751F4430DC2913E9F92CDFA8A274088C8B306444ABCFEA0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 732b72e2cc8f3639cd82935169dc3433ecb7fab4bd1dacfb143c5dec1ca86e06
MD5 20bbd98a610556acda90968e4958f003
SHA1 ef06589e4e70a75b786bfc78d249a597fb27a4bd
SHA512 daa0b60973d0b753ea227e413958fcc21b56f3cf6bd0abc38ed4eb1f2a33750ada1c60c82f028c64e6a40a91110ac50e288373733d790a2fd574ee82c111094f
TLSH
T12CE0268956E8C22FAA44E9476375830CC2807A4E92CCF99A578084ECB802880A2CFDA0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 50KB
SHA256 7d5a934401ae8ababe580be562edf4c315388e7cde159a0a5cfa1066edb77adc
MD5 afb763cb749785e621425d03b356c9af
SHA1 564b2fa71b0fea142803489c3d7f21655150ac29
SHA512 0207a7bbb31c0c1367119e8107973991d31c5dcdf2c8850afc6b6d40e364dceaf7d6e1a13f6a54830026eef0a36625512bd20774448cf0b180b52449181e54aa
SSDEEP 1536:PCC2UnCl4ITUOpgncfjQufsS4LcMHjn3kyo+UI7:qSu4QUWjQwsDj3kyo+UU
TLSH
T1A13302B498F16697CA4DF583F078415CCA8EF193BE1BF494A1C21065CB5807738BB9A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 37KB
SHA256 5dc3058b61a7aa83a389eb409cf067727158e4081d6a3858c42377ceb0b52fdb
MD5 cebc8717fc44a69c4a8dddcd7d74bebe
SHA1 321941638d77128e7f90b2a175ce21e4b1c41746
SHA512 31f168001583cb716005be0dc8257833d875a2a2d28fe6aeaf443aaae44f0c9ef5776fa05bb94c91216a0756a46ad270229c146cd36a06bb450abea5ec363ea6
SSDEEP 768:8clkcRZPRdcYlkoMg9SD+g79nCoQ4Rcxnq7RdoizfAJLMns6Lk2mMdb:8cecRdcyK6g79ZRcxq7RdoiLlfk2mMdb
TLSH
T12803F1957E7E4C7234292C61E60E65E2045F9FDEE5B80F58E93C4B1EC1830DAD3189AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 26KB
SHA256 68651c1a7f5c535dd32832b35396e33184c068a5d1c76d4d33654a53876a1b93
MD5 eff0c1452edd362c9da305d2034e1765
SHA1 ec93e97cdb9de99528bc78be64251c0bc9a3a9a6
SHA512 c1bffb9420968cec4d449f7d0c13a06e69f4cfdfed79cca8ea064e1e089555c018128b2f27a599d2dd16ef314b42bfa2b998d2f0c7e5b3b141891caa372aee1d
SSDEEP 768:kA5CjeQpUvJGjNdByVeUstqy0e5pCUfxv:R5HQpUy3B5v9pl
TLSH
T13EC2E15154378BE91086BFB784F254477D6DCC0103A616A8C6ACDE837264B06DCEAB9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 72KB
SHA256 37d3c57de2be849f7fcc15464a1011e07914074dd5a5118c7c9f14cf8ea2cbda
MD5 fd62c4dc0a56e7b0cd2857e0f95d94c0
SHA1 86cb4bf4378e3488875edbd3ef3d4c971e3fc9e7
SHA512 d5f2f5777711ccae38bfefee403f7ac044fb2e728b8e37571c3d44b33b6675b738bf18a4d048dfc3505e86ac0c1026b0ad5aae31c843d6c0af27f43f5c27244a
SSDEEP 1536:ewMv6t5AE1RBBEvs1bwCNDbAkdBinV/sYN/ZTQbwb:33fA4RXEvybAVXN/aq
TLSH
T1FF73029D63FB4292B3F6E0F29465F4B0E9F208C8723D7EB5C67D690525F20406859EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 36KB
SHA256 6e4c778fe9f9adce6215d8303d22e7ca48a9a1a5a2c36a6b766582daba204bd1
MD5 ef6e8712afed0e144fd0bdfa307afa03
SHA1 8ad609a9741e46361e4bfaffae48673b0682ee64
SHA512 f203a10f28b987b1e74c2a7a7d3359556e52f1fed0433206cb2ebd61ac84373c321936bc430836a76cbd74d34567e15e2bf715b0b7e5382bec150bd0fdef53a0
SSDEEP 768:yYNYOQk1hKe5qmKwvjeRZp4vz3pDCdqfgI2p/YganN:rww2mbjOT4eqfg7pQgaN
TLSH
T17FF2026C1CD3E02CA3AA503A044E59F82CDD51D3B5225396DF4069A81D631FFBFA7C58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 21KB
SHA256 25aa36400c31fab5c22310b8924ecc819146b8d114be8ed57ce56cc346b3ed75
MD5 d1004b5992b405f3fec32be04087ed29
SHA1 029007b0593ac0427968f5edb0380f205fe2e586
SHA512 4b0a58f7883a2a532588f768a83ba3b70f47df5ed32c758882848dc138d2d66500cb497d4e580154b9362d6be017775b7a312cea0c6713076e3a5864f63f8968
SSDEEP 384:z6AhM/69PsP6JWVbB90kQgpr73U+DV5pFAlCZV7gRMn4KtGFXNm+JLc9aEB:g/CPNJOFO4rjXpF+CzvnnGZNmewfB
TLSH
T19BA2D10DADD153A9578C1B9109694426D749F2CBF5E00401B2C6B33556723F12EEB9B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 153KB
SHA256 8003c2562b3c862b6c26336a163b4335312ca890507f564d1c98df1842226951
MD5 2099886840e42f5f3ecf29443ffe1fe9
SHA1 7434a1cc7cc366f018466b247519d865e8a55c93
SHA512 ae1fce790cedf718da7f31ee22465cd2f08216ae76f11f58e9da497254a2b8302df6c059759153d3f228444970ee5442d47854b4a2accb84e9223f8b12f825a5
SSDEEP 3072:tmJ25ZCT35NZ7yN0ObmonzBVMibtM/aUH6RUsfUJYnduDyHGDSxmROCwn04ieL5W:tBrCDHZnEzbbtKaUHCTnuDyADRAnAeLk
TLSH
T1FCE313AA663D53BCF10A0BE859994FE22DB623C07895073BEED19E4047B930719F5336
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 19KB
SHA256 6197c249726d6095336c3c3a4c600a8709cf413e9c2ae43fb18d88deff5a2041
MD5 1d9d4be983f36fba12c38586f9b661d5
SHA1 a0e5da5b83a4332dc6345d399f44d2482065af07
SHA512 c62afc952b00447994bbe993780316d901b1909a0543d626979dd3082a1608890201a11c99d9f5163129a5bf07c911069fac6a42e4fbfbaac15bf8ae7d651a21
SSDEEP 384:qn+WVwwYMI8GvTd/Yxd5/CAOd+cZUzQyvwO29hfcOU16Zl2SExsB:TwfI8GvTd/qlcZAmhUOUtmB
TLSH
T19392E1545CC250589AE33173AC6E49DE1B59820874A88F764F47713E3833B37A2A77A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5f776a2b5554ace8f2b9754a0368b52f8ff87e57dce8ac7be9d04890a994b9bd
MD5 1116086cb31313a0a94204754089a2e6
SHA1 5506df705fb7b16e9a6469369a5230a9ec5bb13b
SHA512 0f34fd147bfcc7c8ab84d11fe74ff25003c6a296b10463bb0b6ea5d2579eea6fc4b7a55a2d5273027a34b095ba6341a0b1e23e482e53f5ad411088726727edd7
TLSH
T18981E9148E8207A3EBE0D27D93D66A36307031DA5D774E52DD388836793FF52C523928
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 be8c4ea473f35abcd23d3877800f8e7e4aaf6e1da64d7e3a0c2a1e245cdaff6b
MD5 1b1774daff973d2e5cc2678bcac60f23
SHA1 06f9ea7baca0b277bbe03a2bb97a91e7ff3a7498
SHA512 bd3f5ea449dbbe166224ee86192d22fcd33e475f67c04f3ec98becf53aa4b4776c315f105eb64b1392f43536b4854a9655fa86138f457058b67b90950739b9a3
TLSH
T190712C18CE830BB3EBE0E23D93E62635307531DA2D774E42883C4875793DB51C527928
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5861b3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5861b3.TMP
Size 3KB
SHA256 231816d7be393f8e050f3ca253695c49906796907e60405a97740e8aba2ce400
MD5 673698f2f1295bf92335bf739c32fbe3
SHA1 c5b6a4eeeb6d8820d7696dd4f1be3d850372e8a2
SHA512 d557714fdf432ab730c2f9bb69f109fdda4e40e7141edef71f9d1860741d44340dbe326c8ce3b26cc8e49d2f653c3243caee291090c09db3cbd82766e12a4572
TLSH
T1CF712C18CE830BB3EBE0E23D93E66635307531DA2D774E42883C4875793DB51C527528
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 38076ebcb698b410fbfd8999ca0550fbeab440bcfa6c1f62f786bb35d4dc77f6
MD5 6b2ba00b4c85c815de010b44f306c240
SHA1 71c982ac7feccb99ecccdfd210966c895a68a025
SHA512 711f13d35392c6048b8eb7f5bc8d1a5e4cce5e2213723615addc8d0aaa60433d487a1fda76d61041d1d2893ad3ada7f2e1dc4583d06410097ed9fcb9d885e2b5
SSDEEP 3:MsEllllkEthXllkl2zEklklll:/M/xT02znk/l
TLSH
T1F04404047FD00405C5013C30C111D3500374D4500511D74334510C335CDDD400C10050
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_activity-tilessurvive.funplus.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_activity-tilessurvive.funplus.com_0.indexeddb.leveldb\LOG.old
Size 756B
SHA256 edbb77c76146d015f50a477baddbab662824c292bab9c6fda3a3e44c64ebfa7d
MD5 6502a1a0a76976a437e54fe7d9de2f6f
SHA1 5eab9b69005dae435db072d710526eeec037a81d
SHA512 86c5898b63615478811a810d553a43ea30d4ce02d7339f2ac341e194141c5cae775860c7a457a5b79638ad447f25b319641b21e834a10af5af98aa79aa85133d
TLSH
T16F01499941DC85A96982A16390B4F70985A1294BD29CFFC02AC5E4CE9781981F1BF471
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old~RFe5a53af.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_activity-tilessurvive.funplus.com_0.indexeddb.leveldb\LOG.old~RFe5a53af.TMP
Size 715B
SHA256 eee5d6d3ad886cfa1b2c32c1fd2048b441c2891bfb925dbeb1964b2a483ec10b
MD5 7adf3ccfadb6a40d838f86935b32c983
SHA1 1d7f7adf533cb6a3ea22b03c9b4599f21c1f92d9
SHA512 42abcfab25c50a91646dfd786fbc1d515f772ce398173130aa58274ea3a2b676d33354cc87be9a77f6a17800f6ff8c0faee7eee6d54d53cabed711564a079522
TLSH
T13F01DCDE46D884665840D16B5178F24DC5AA58AAD38CFF862FC5F4CDA5C0085F44F8B1
MD5 SHA1 SHA512 TLSH

Submit Download

0ccf8f42-3cce-48e3-beb6-f6ee06ee1b9b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0ccf8f42-3cce-48e3-beb6-f6ee06ee1b9b.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

78427532-6e84-48b6-9131-8a3e8d5ff056.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\78427532-6e84-48b6-9131-8a3e8d5ff056.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 94295ca6c44d236fb9942766fb5d02144f3425f837eb5d6c8c2028eb4b8cfb66
MD5 052d9578cf1142d9bc7b56c585077439
SHA1 4f710cc40d0af217fc5a95fcce988cb9a24306c2
SHA512 d93309435a873c292f3ad6a888c7d752d66b9ffe27702ac4b12e7d698424ac969db0c817f3702a61fff908c6e053cc88029c74f4d1f8da4574965a39799a4ff2
TLSH
T1D421BEF387E4C56E8E015AF05A28AE1BCE1D0A05431C3C5989E4EF67D3F3465E00159B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 86400745cc103ca3c3b9aae23f5c4fca86fcda803fbfd39e97160ef2e66f22e2
MD5 907074ab1b01e431f863b4ee8920bf63
SHA1 bea8ee422da9b4bb017a884b2280fee3f9042cd7
SHA512 f27de21c24398e84ab7ed44a67c8adec39d50472a525e5cc6e804a670e11b2db82e51a1493306e49ab9e6e679147bdfc127eac5f5c6e924e153908169883bf9f
SSDEEP 96:DtOu7MQu8uN+WukVGziaP0eqGwzHiuuubuhBuXMuhuKuxduLu3ueuPfue:DAVQVfWPVG+aXqGGHi5+auDVS+uliP
TLSH
T160B1ADF7C3E8862DDD1162F4A6247E2BCE2D0924432C7D1AC9E4AE5B93E2471E141A5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 1c660540c6c5a7f5ebb1799f4ed8fd581fc5ecc84e2ff8ca1da0e72d0d2eec31
MD5 d29cabaab940749302cca2b028542d3a
SHA1 8193fc64c7217f0aba61acc2c47bbc72a14a860d
SHA512 d0883c57326c7dbbbedc5f4351a5b83023ed55bfbe51bed4c148ee851137fcf43bf23be159b1f1cbe0b0cd72b6bb426a8d7a658034aa55e29bc56f7b32e79999
TLSH
T174E0D863C17EF076107C893A0E94B84A297AD831119159F8C9B992AC71804FB671602A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6e7f03c4c395546ac66725a018ee888758f5c6218042064132c8ecb6fe3c7190
MD5 780d9c461dd4621550a2dd413b7f71c5
SHA1 2592648414463ef0c952436edc677207d670cba6
SHA512 471cb91e43898aecc80a39c592162122770efd822788cc9173a91ebbba730b5bc4d0cb609ca4de3bd45c295b14020ebc24ee4e74d2d49dba297ff92c01e4a742
SSDEEP 192:sxZ3HRuyM/jK1Ml8MoQ/fksMjaIdpM/W6+WNGY01OAWtNjIgrJ:sxZ3HYQQ/fksMjzM/bG5kr9
TLSH
T1BB42F7116B346977CCDBE209FA55BF93D6F8543292900D88A9FCCA1C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fdfd361e372ad380b20413870c8f575325f0f0927d095c6c5cd364a655ce1a1f
MD5 6e0786bb4e441679f85be9f8f945bc10
SHA1 3ef0412552a2524788349c3d0c9781976bf67c84
SHA512 c371ded987416c4b468a5d3abea5b2b9f3e28236e046ed9b77245b90f667d8add7a7b2c7d4c4be5fb4feff41d73eb9e9b83419b0a49771536205fa782ff7b4d8
SSDEEP 192:sxZ3HRuyM/jK1Ml8SoQ/fks4WpVFwaIdpM/W6+WNGY01OGAlvjIgbwJ:sxZ3HYQQ/fks4WvFwzM/bG5kjA
TLSH
T11E52E711AA34697BCCDBE20DFA567F53D6F8543292900D48A9FCCA1C05E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 dc84eba7cb559fce368c04b252c4d77edc020b7ed7c9440159fd90e83f4018c8
MD5 e06cde5f2501c8f8473712437a0dee26
SHA1 cb5d91f2839728d37b6ef62dd0c4c1b626899b77
SHA512 516411ff35e1c96931deec9f5c56864c8e9f956587fe297e2ef0cef90ec7a7f7f236356e4ddfcbe044e72b6b5e559f54082dab9c8c2f59bd2b11175bd886e2ab
SSDEEP 192:sxZ3HRuyM/jK1hl8SoQ/fksFWpVewpzodpqz/W6+WNpqhf4+aox01OnARNjIgbnJ:sxZ3H1QQ/fksFWvewC0/bafKkAd
TLSH
T1D962C755BA34697BCCDBE209F6557B63D6F8543292900E849AFCC91C01E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 794aedffb884e6060513444ca558252e92149d00eaf43e26ea74842dc7d1be33
MD5 24ad36cb56d95503b7b742dc695f0c47
SHA1 ad28b3287b741e65ec2034241bae5e210610f65f
SHA512 92cc108137900e4d0f7b26bd28fb128ed55576869f46bf07107a0f67831beed7922dcc0771776cce984e425d3734072cbfd62e2dddd66f6dbbce21c5b74100e5
SSDEEP 192:sxZ3HRuyM/jK1hl8moQ/fksFWpVewnW1ozodpqe/W6+WNNxV7ZZM+aUsl05OJBIJ:sxZ3H1UQ/fksFWvewsN/bxZCuA6d
TLSH
T1DB72D715B63469BBCCDBE318F5557B63D6F9542292900E84AEFCC91C01E6AED2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 7517d84a14db7c5d21642152a94814a05bc7c6b931afb04ebc2787d497df41c6
MD5 b3826e80600274293f95f22c74f43f11
SHA1 60ea1e31343df04e6ca16d251efba1760047e9e3
SHA512 838d8730402bbd85c4891c5154e9a9250db85829ce709464e31cdc3a33dc0b23708eb3c84bb14103a9a8a9973d27976bb3faecfda17398630f8dd3209e67f38d
SSDEEP 768:b44bSV4b+8b4bm254bRWRmG4b/QB4bH8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3c42:bfu+68si2y1WRmlzQqju1jaKDILpZ8UH
TLSH
T128E22A3B280CCB7E4F844E5CEC26AF966ED801CBA6A84D5447FE494C03C77EB511A59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ee568b228a6cff41349fc8c173b35bcaa6ac2608a993344ab3c8016e2437a85e
MD5 cc0ad103556e4f7d707672075093130d
SHA1 241ad2c41112db57ff3d03b5b66d8d67e23afdf0
SHA512 f5aaab70b8a27b0d549afaf1316b31d9d8603778bee56a813ad7b74275a2842e9657d67196304ee189f71dc57bbfa94805442dea447357279aba1532c7a79c5c
SSDEEP 48:KIvIJKI4M/y+rI9KUcgpFGb3dHbz2LECIT/zKYqAhzs1jxczbQymcCcrcucCckct:KIv2KI4m1r6KUc7KoKXquIpI9p/t
TLSH
T1DB91900175BE62013D7E390CA3A88727874271A73098E47B7BA864B64F67E601CFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6ba49e7-33d3-4dca-9bb8-1cdb0980227d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d6ba49e7-33d3-4dca-9bb8-1cdb0980227d.tmp
Size 414B
SHA256 c2d5bda736493f3b006377d19408eeae127fff090a8b399bece201ac9fb93ad6
MD5 04ee336caaffc17fa9b9cf245e929eed
SHA1 b7a60065321d2dbb439d69e00c4d1a2aa58e086c
SHA512 2c516282a2d315530f7ff0ae01f798c90513dd9cce7fee6bd4d903ff7d9ea86d3d59970d1d364483d314a867320a114777d3f1f47e298ba0b92d4bae401e1b4a
TLSH
T1E5E02BE5CD31AD2B1CFD47189060474AE720531B1A90498F3A3DC1088FB593B8A46D5C
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5bc59e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5bc59e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
Size 9KB
SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
MD5 30719122f9edf4e23019a3b74e4f4325
SHA1 6707d64052797b9c5f1a5ccf016e5859c8ef898b
SHA512 ec2e1a33fcd1301f282512ffafb611ea705dc5df09d9aee014276909c1b62b0c73600121d94e9b6d9e160296672b41f2cb8c3ba23f121244ad2ea6521680723c
SSDEEP 96:DdQ/JJvwjyUsrdfsysVsnQfbJNZidYusysXYs2sFsdv12XvlRT07s/DkhcrHPglW:D7d7mfgiIWRcV4sobxezQd1Y
TLSH
T11512BB3BC4B49F229AB060659705E244F13C43BF5600C6FF76B9829C1F366ECA58E1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 354d6d852f6cc40a365f68f43c401cf4f90d14d583220e646d839c93bc7a84e4
MD5 cd13d750ad7b210e1fdb30834fa070cb
SHA1 653494d5ab7ac4315d11b83035bccb5b852be46e
SHA512 bca295094883aa3b048fa16d84ffc0bf52f3ba17710bf7a8e809af0a6c7d3fde2ad10cd3aca352b6458723cefbca203184c0a553aa1e9dac5357add88799374a
SSDEEP 384:/ZcIP8N4CF+CIbY502r3b+AtOxym/JrmHssAkMNai8BuY:XPyTx0arptOgAhmHseMOBuY
TLSH
T116827E716D785C3B5EA6A245F84736138FB8806BD6C86FC4C5ECAB2D059A67C130EC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3f1254e8009bc3e574650f06ea5628967a65fa42666acab6cae2867f7a2a758e
MD5 0618bde57038903fd36596c603994bfb
SHA1 c766154d9c700c13bfb0dcc1fe54bcaf23c8f5cb
SHA512 e911d6e11e039aae3d32072bf6c0dc50095a4c8ca7b282396d32b45e869b530a808834faf304586dc1fdcaeac298971f71a93e76c4aa14116f22595e0f5e9794
SSDEEP 384:nmZcIw8N3tF+CIbQIX2r3b+AtOxym/JrjI4sAkMNaeJ8sIzs8BuU:0wwTMXarptOgAhjZeMEBuU
TLSH
T10E928D706C786CB79EE79649FA562B03AFF8407BD1D41EC4C9E89B2D158366C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b9ac84dae95f722e5a09b472406fb5c3a8867ab2c7d0b3fae0b69793df30d658
MD5 8d1e54c205c03f46b14cef06ec33d13b
SHA1 f8100d89163640b7e33aea2e6c6807f2e3541a96
SHA512 09de74be345cbe468558aad03c628f2f660e7498713f9a28f6b06fad453bde5add0094e563c389a446fa200ff0b6a7acc993a43185514b9b82cab984b4ebceed
SSDEEP 384:fZcIw8NNtF+CIbr4n2r3b+AtOxym/JrT+DdNrub9XKuSBsAkMNai8BuY:3wST5narptOgAhTgNu9auYeMOBuY
TLSH
T12BB25B7C9D785C3F85AEBB08BA4E29274EB8013BC1B49D98D7E4470DC57696CF306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b08dc97b35ef26a4a3a274d6cd957159563a701d9bd167d7cace055f538b643b
MD5 c91b04b0ebde2c922894b4ab01e22f6f
SHA1 4540f31fed64c26b6adf7c5ff25f41c32764bf76
SHA512 be1f4edb51e09864d8e6e3952b99ed355e223167608884d610de9a0ebf7a074a49c7e5e9663511829580ded381082827dd4b3ebd1188ccaadef40e3850d9f1c1
SSDEEP 384:nmZcIL38N39F+CIb8Ibqr3b+AtOxym/JryI4sAkMNaeJ8sIzs8BuU:0L3UTAbWrptOgAhyZeMEBuU
TLSH
T111928E706C786CB79EE7A649FA562A03AFF84077C1D41EC4C9E85B2D058766C130FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 07099bb8a06a39f7c8ffcc31c75a74baf26f5d30473c7b7a5bf49bcbb1df8581
MD5 28887c44f788046e5f16076c5246d06c
SHA1 23f7522f41ceba6ceadbad3c68e7644adb76e0b1
SHA512 32a22c4d0ced78c225c763ec9f6d62207d9f98353800f4a33a5d6e1283b3e989197d397893fc1216676fdaa3e12a3ae7b18e3f43b356165418a2595b9cfa47dc
SSDEEP 768:WL3UTB9WrptOgAhyO9/QVFr48BrdgeMEBuU:WL3N05+FcardgDEBB
TLSH
T153C26C7CAC646C7F459EB70C768E2A239EB8003BC5B88D84E7D8471DE13295CF70A965
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6ed582e0db01b51c1c8ecd9d551f941dbac3730549ec76b68c81938abf22ccb7
MD5 559d72b6682f745ab091f0e94b3d06f7
SHA1 d934747d3d50a12b5247c162ab6428eaa80444bd
SHA512 921d44c3516319bc595716f2f8b86d36cc2987ddd2266441ecd2ab6e6a05a651d4a9d011a8acdfdcd2754dd9debd2bc1748146824d9ac0f29795effcbc23c056
SSDEEP 192:nRGNI6yMQmiUyXJmZ1Y3b+jctOxPdmQMnHmpU6:RGNI6x4O1Y3b+AtOx+HOU6
TLSH
T10E02F931A8786C779FF2AE49F58727138FA4106BE9902FC4DAD82B1C04D725C234B966
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2fdf9de049b9310be0e34a06e45f5fce06e14d80c29177da0abc709ec52ce496
MD5 faf1154ecb0682ef56efe315d8477518
SHA1 b3d09dfa18bb709494710752e0cdcc05be18e808
SHA512 e11bee6ab70b8ee48c9a6fa5d6672a34034119057107d6163e91c0dc5bf80d2f1a5b3392059a5c385063bb0e2af5ebc5c95a2c440eced368efff68c5cf2dac82
SSDEEP 192:MGNR6y0QmiUyqD0ZiY3b+jctOxPdmVmISJrh4MH5qBU6:MGNR6J5eiY3b+AtOxym/JrvHsU6
TLSH
T147121832B968AC371EE2A5C5F44736138FA4416BEA897FC4D5DC3B1C05DB62C230E85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 46344b6dbe7d00a5e503fdfcae246a9c26fdda671a81744fe5f4b87300d7c5c1
MD5 705e8c6b5b6d63690bcd04e15c5005a8
SHA1 845d60d8332d7118ac01501ef7a70a6b3f020847
SHA512 8b9519cf271fcd8f8c1d3e5c0e272e80f33d2cae4fb586e7059bbcdcf856dd85b09766e6809739c3bb9b7a5cb720bbe5bdbb909af8a0b459be35c1354938c4c8
SSDEEP 384:uZcIw8N42F+CIbt502r3b+AtOxym/JrfHssAkMNai8BuY:MwGTk0arptOgAhfHseMOBuY
TLSH
T18A826E716D785C3B5EA6A245F84735138FB8806BD6C86FC4C5ECA71D059A66C130EC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 4869ac2bb96677d23267838eb4ad38c33a3c086d5a48079629471c6c0bb28804
MD5 9df4643aca20f83c8dae59267a13ace8
SHA1 de5a883603a763d36e2375233a59d8022a8150d5
SHA512 033c6b704c123e6574e66ef033028981e695bd255feaea5ad224f56908fc0c722e8f44e5e500eb98042144d398b75002f0b227c8863951703e1d4bea00fc812e
SSDEEP 384:nUZcIu8N39F+CIbQIA32r3b+AtOxym/JrjI4sAkMNaeJ8sIzs8BuU:SuUTMA3arptOgAhjZeMEBuU
TLSH
T19B928D706C786CB79EE7A649FA562A03AFF8407BD1D41EC4C9E89B1D158366C130FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 e58bc644dde23d0ca5b30ac8f8d098b96c5ffef6519f075a80410d3f6f045b72
MD5 8c0bdc51b6fe7f9209edbffca0aae7e6
SHA1 86c5ebe3c7a305ef63e0178352c7fe5b00bde7da
SHA512 f80b635b3b81dd4b99ed0a957fe8f6e05d962564b8f573650f3d2b549e3f87dc2a3322bbd4f825a66f1717ab56a2c43d397255bafafbe7d997e2fb3344aaa8e0
SSDEEP 384:nIiF/ZcIL38N18TUNTUlIl9F+CIb8JGqfDf4x6AkMNaeJ8sIzs8BuU:TFXL3+wgrTBGXxcMEBuU
TLSH
T1E3A22972ECA4D97BADE79785BB4A7643AEF00067C9D89EC4DAD85E1D00831ED070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.8.3.1\keys.json
Size 8KB
SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
MD5 ee666d1b2290efa6cdbc89ea3d317333
SHA1 a8bdd2c1d7e76fef48a735a80524243cd453e0bc
SHA512 7b2b577c9a168f626a687ee158cc20fa0ad0f816fb0583abfe45f89222d1762eb4fc619e029856618479fb6096a02eb2f9934cb46334fa781cea5cbcec992ee9
SSDEEP 192:uNtGbR0m0GflPAyR9Pm4lOvMwkoR9PuGMXcy:O7mZpKjA
TLSH
T17F02B6BF14A41182CE7FC16D9F0774B78FB03C066BCA3A83925BEA49484196D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
MD5 1a8162cc03c34509f59ea81728419884
SHA1 459f726ff17ed37a212bf5291cc592b4745c3c06
SHA512 129393fb77432dda8e2c4181dc778f609f56572e69213f9f8cffc544b845119929242d41078170b2dc72a678116df340544edb181c2aff069f8cd4ac2a541083
TLSH
T1E8011ED14C7E1AC7CABE0EAEA0872BEC44D86522B098347818CCF864917940E3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

2ea268a7-b886-4f18-9fa9-fa7cf613956e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2ea268a7-b886-4f18-9fa9-fa7cf613956e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

084bae9d-a59e-45c3-bb96-8c39dc106a92.tmp

Path C:\Users\Admin\AppData\Local\Temp\084bae9d-a59e-45c3-bb96-8c39dc106a92.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23c9e643-d54d-40f7-b70e-0c2890a00342.tmp

Path C:\Users\Admin\AppData\Local\Temp\23c9e643-d54d-40f7-b70e-0c2890a00342.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

__PSScriptPolicyTest_42t3zu3w.c3n.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_42t3zu3w.c3n.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

fpx_for_ss.dll

Path C:\Users\Admin\AppData\Local\Temp\fpx_for_ss.dll
Size 1.8MB
SHA256 883c9e4899bc706e1af603d2f34f97cd00d6a5e66657e21be29a1fd7734c56bb
MD5 f193220ef62d47127b8053bdaeb38dfd
SHA1 119795376dd9cc6890703bed3a07ee38d8fa5c01
SHA512 566f5a3d82db5a281f27a1780272785934220c4a85fa68582596d511f57387868c6afb38fabe29df87a94ac1aec384e4c05c3397396196bd2a4943f377a905a7
SSDEEP 24576:j4+KpPt6ZIzkQ1cWy3LZT59bmc7RCmk03aaV5jSIIG1IXBGCtP4UzzoIYZ57m:k1F4JbmXyVMIIGmftP4UzzjYZ57m
TLSH
T15985BF02FB8285B2E5CE01785176A77F8A3AAA6443348AD7C7D17DB5CC321D1673E389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f9f7200-07d4-4f40-9de9-0cab64fcb0bb.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6996_186334556\3f9f7200-07d4-4f40-9de9-0cab64fcb0bb.tmp
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6996_189489842\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tiles.Survive.PC.V1.0_xgwbv44rke.exe

Path C:\Users\Admin\Downloads\Tiles.Survive.PC.V1.0_xgwbv44rke.exe
Size 994KB
SHA256 9291efc73f2934976ca8e2dba4f55f64dfd2a4bc0fd4d40e7a503f08566fd205
MD5 71bd4945f607a6458399361a8f9c39d3
SHA1 abada923c8bb6ac67763054f2240ad37799564a4
SHA512 dcd446a8673f3d397917f1a57c400114e62d95b0f3b8c9a676614384d4e3faf1bbf8c7b87438502b05e37bd1d9c489a5999181e9d3c24e6ea93a10223c75b45c
SSDEEP 24576:bT1Y2wIC2+6/JAGpzLy82/qYFEfp1kspqzir:bTm2NCP6/JAS3AfS1kiqz
TLSH
T10E25F122B990D073C5B320715355C7619EBDF93106169AC7A3D889A49F306E0EB3A7BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tiles.Survive.PC.V1.0_xgwbv44rke.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\Tiles.Survive.PC.V1.0_xgwbv44rke.exe:Zone.Identifier
Size 161B
SHA256 32269a9768335c72a0bf130472ef12f0991c9c92ed0a6bae6970a12a69a7eb4e
MD5 f9725335deeba161944e7877b3ec8f8f
SHA1 004618b54fdfec6193a9d3cb654bac581c3f7cb5
SHA512 106d8f5d4c237d850ad4fcafc3a9874b21b7cb53c57eeb361b13e9c4789148957a07a64454eed720bf2dbe4fed7526bff2868ee2bbe33aa40240396a928f9eba
TLSH
T196C08017044D84050B0455CDD5CED10C654F13674F7755854F214AD9DA5C84C10F4123
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1156767876\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1156767876\manifest.json
Size 78B
SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
MD5 259f068207f60fb9d4448c02c27b74ba
SHA1 99131d95cce94750a928738a99caa5c710bbc924
SHA512 fa41eac9d1ca244d06083e3d4230dd94700861155359722c1d815d0d9933dcd39c113b6f0f6ea02ff7ee1acd2fbc6ed40267d557afde16f417e80b678e8136bd
TLSH
T173A02230AC02E23320C803B002B083C383A02C02302A388C0B0320A232C823BE2F323C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_1678060184\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_233439681\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_684287019\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_738997569\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping11972_766379685\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

7z.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\7z.dll
Size 1.7MB
SHA256 e41651ac06477b203028160ca60142d95936fdc34e5674e2257832491751c806
MD5 8b99961588ae70fef7c9518469e60e71
SHA1 99cbc23808d3a531ee0e474dea49936005f158c1
SHA512 38de06b2cdfcc76659b183cd768a004a6d4aaf34d7a5dbb9451e25abdfa0231abe49b98d05d4326d29d12f4c684fc422aec6dbaa97e37d974df2f16cb6d262ad
SSDEEP 24576:1znngr4eig/HxkaoDFITvg9iLXYgIcjWBzb139EOapmYpA57:1z64gxnoRGI9MXFrjWLNEOapmYpq
TLSH
T1AF854B67F6788260D0B7C075C5E2ABA6EE7134864B3096C712859B3D2F17AF6C939370
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PC-Launcher.exe

Path F:\FunPlus\Tiles Survive\1.0.0.1285\PC-Launcher.exe
Size 484KB
SHA256 19e9c443cbe185b5d058ae415deca35f0cefe70816c3d7b1feaa7fce9a764f16
MD5 62891070397ae624dc727e9998ce60a0
SHA1 0ed6db76618819e7ebb535d94ed7353fa2b1be34
SHA512 6781d3e79f49b20ebdde28acaaa1dcac17c75383143911757f5b1fe4f15f25bd9be93d0748a1bf6be71d2ad55f915e6443762a3485b1d2ff777846d9ecaa07f5
SSDEEP 6144:jRvD9KvmiEjGGh75sfQXsPqvAyAH8mCUc2uc4VJ5GlvG9+ZlpuysQloY0Wr2TKOr:yvmiAB75sfjCvy82gQBqYmys3fpcaGhm
TLSH
T1DCB4F127E72810E9D16BE13CEA8B8A16D7B278950725C3CF03E486171F677E16D7E221
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

auto_updater_windows_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\auto_updater_windows_plugin.dll
Size 107KB
SHA256 776dc6f0f8d072a57883dce1971de584ea6c50181f0a9b4f2d54ebf06487c898
MD5 f8c30080d5677edb962e19f6aec4be1f
SHA1 c632db869873df8b1657c658939773b10c4f9ab3
SHA512 76d823b9a2ef000c43a03a5ceb9654c4aa8ec5778624f50c086b8d092faa5e89bcaf00da17eb32584a8fc3c2d8f8b4e354776349fbf443e2a0d802774ede8a8e
SSDEEP 3072:NbKEIu8yipHKCB7jFlHCfHcfzVAQPc3UBBZSck9M9b6GaCoxUWsVGPnC4qK0X8GP:NbKCipHnB7ZlHCffWLky6g
TLSH
T1BAB36C6BB75C04DAE266E07899968E16C7B2F0461B62C7CF13A0431E0F177E51EBE760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashsight_flutter_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\crashsight_flutter_plugin.dll
Size 97KB
SHA256 7059a0f7ba61f051a502fe34a792c5fbfdad691b140db222bca6dfce60b78735
MD5 79e174b02218abd1884f953a4f1b2eaa
SHA1 4cdd0e94773881de57058f329282f904ff993367
SHA512 0c5738c92c6e7b9b1dad0a5bf769234592b5a1113a7083273dbc3ffca93801ba66e72eb6ab5e803c570327167b60a467598f2c8b9152e7528f2111087466e3ee
SSDEEP 1536:aVzVNkmXbM5Oi5kx0BxXye3EbHVH/lHIC6wF8kTZ7MUv97sUu:WzvQ5OiC0DgHVflHIC6wF8qZIK9Il
TLSH
T1DDA35B2F676C0099D56BE17C9AD69A12C7B2B4410B2183CF23E4835E1F237D52EBF661
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceHanSansCN-Bold.otf

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\assets\fonts\SourceHanSansCN-Bold.otf
Size 8.1MB
SHA256 997dd673efde3a7cc7410da3ccde2a729f26dc9e1a81ad659a2d6666d36b7974
MD5 9a5d91c590b9a0dbe62490e1819f7dab
SHA1 b59fc60d95321a669d116d55c72959fc1882caeb
SHA512 4471cd9cb279a40e9e440247547b9c42b6ee1e5a582befddd6b34a6ca83b7a25decd4d2083f049e40d8b047a23978e641a1071cfe142f39cb56f6ae34a31df53
SSDEEP 196608:7MTwh0cCHekOWXnfRP/XzmSxLJBr8xw71qoiXVVWWKt3psPyP:7MTwh0cCHrfF/zmS9JN8xa1CVWvMq
TLSH
T1398612EF252AF860C245E5727DA7104B367880188D9EE5F8FA374E343DF83294DA9D52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceHanSansCN-Regular.otf

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\assets\fonts\SourceHanSansCN-Regular.otf
Size 7.9MB
SHA256 c0aa89a70f92a820ff95490fea6d472cd19621a71c9a748a4950eb2eafe6438e
MD5 8ca54f3d874ec6b3a92cecc459686261
SHA1 a3fba1908c940e50eb1c5ff56227db34bd865bc7
SHA512 5b7f200603acdbdb07379a12a33a39f3de6adf8bb233cba78fab902cb250fe5b9ce248af8cb403e028c8ac03859c76390f93149396705a4b8ff22d3f1913f6aa
SSDEEP 196608:bxPpUbexfGhXGW/272ywoN8VvS+ivEjQXJMiMs6dn+Rj6iuSBjt/:bxBmekhXu72ywSkavEj82lFd+shQ/
TLSH
T19C86021F71A9B824D621E0703A52E46A7AEA545C485FF1F4E9176E3378F62303BEC781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dialog_close.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\assets\images\dialog_close.png
Size 3KB
SHA256 d5faa4cf9c753fefb61dcd2b9b24aa50d91420eeea53d71140c1fe4d7729a5ba
MD5 edfdaeb3b04f0a8d75c41f93986fc283
SHA1 d1c4acdb3eb02046850073b6a566d0aeff41d147
SHA512 51a9f3a78a1c2078405033ee6aa018a17b29d7845e73ab46d10480e0909709307d88d0d0a88186b91a0736e65810b4c5937433b091838e6bbc10f5c70cb96c1b
TLSH
T14D815ED664F65300DF479745E37C00B7667D4D232B2E20345049DF9E0DE79E58BA2946
MD5 SHA1 SHA512 TLSH

Submit Download

ic_logo.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\assets\images\ic_logo.png
Size 2KB
SHA256 eead26426d1b810e08f61fe8a0f09a8bbe9bb9e8458bc760e676ad2f8182647e
MD5 46dccb83a4d97b655378627a5849208b
SHA1 f7d5c9df403de445564b58fe88b2dcd89ece9e85
SHA512 ab89dccb6662fd8e2f081d97f51f3380d51b513103a872825963b4b73d708966a2c07435f95e882ae19849920cc897aa453e6ebd0ca0b4991a08f54b9996b2f7
TLSH
T1E2514D8AA10C637045BC4C41AA15A06E8DA9FF839F69E97E0360CF1B26E9E445F1753D
MD5 SHA1 SHA512 TLSH

Submit Download

strong_bg.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\assets\images\strong_bg.png
Size 2KB
SHA256 5173d054a02d0877187e85d4dbe3494bc86c189b0bdab82c48538447a5604fc5
MD5 269475d91b0d5fcecd9581f0169c033d
SHA1 b349a278bfc91633e23d134ba5b0365038c8f5a1
SHA512 8807a1f196d54118cb465e19d9d6a946b84fb679516cee5b1e1fa02f4c1839a36b7e0ee2dfbb174890e46e0fd3e08078def00fbe6b0f2fa04b0ded0e5c61ee6f
TLSH
T1E7414DD3697CF981860B12038C10DDE9D37902221993BE29C082E89CCA537B69436774
MD5 SHA1 SHA512 TLSH

Submit Download

weak_bg.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\assets\images\weak_bg.png
Size 2KB
SHA256 1af69c09be126af2f75c65b984e6608b21e1e83db3e097c76ee0b7e4b14ce835
MD5 2f4dd3c540f23aae19d0522c0a84759d
SHA1 5b4080ece511a9f5ffb0043ad6e768d78335b894
SHA512 4046319e9ba906420643adb9d3948f8b08585f68549813c3ad235e7ade447a1e0869c42eba74d6975984906b0296033b0988b68e699ef5351aa2b2825eee83e0
TLSH
T17F413A4975C190D8EE8F15E4042EA815E8B23BB5C12B4710B39D098BDAA1C438EF1959
MD5 SHA1 SHA512 TLSH

Submit Download

wide_dialog_bg.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\assets\images\wide_dialog_bg.png
Size 31KB
SHA256 80e819a7517db452d93e96a1ac386fa7d9c795be2fbbf3ef884565c292e74c03
MD5 6d201b77e94be82abc33e533901bd505
SHA1 1f4c2e0f2becf289a0e79787c0f289076e28a1e7
SHA512 89172f4395876b3425cac623bb746317813bc647f479ac7ce7d7a177aaf5694e3ac285af1d7adabc225ddb9b5e0bbaa1d8bd6008a68f31c50c8f8e73c517ee21
SSDEEP 768:p21EPs9RB5NRGSN25oLTbSYGqaFlqv93wL:A11vNrLPNG5avQ
TLSH
T172E2B495C3968033F6020C18F4672A2328915E773528EE2569DB785FA747FF82CBADD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

codes.json

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\assets\language_helper\codes.json
Size 189B
SHA256 1ccccabe25529143bffa2c2b435a2990f36945461798aa1b3997877fd55768e0
MD5 e943e97b460a36a084aa92d66f2ce54d
SHA1 f494466c105cb62aced0521122c2f1a6c813de6d
SHA512 80b0cbdca14ee486bd204e188311b17f8c3f8c4b6bfbb634f0d20d353fe68b4254e89d58e3d4331194807f58aed213952eea5259522475f2d277318992122ab0
TLSH
T13CC09273C98BD5946738C50695A0065A39135FCFA37E1D1739777D822E426208BC37B2
MD5 SHA1 SHA512 TLSH

Submit Download

ic_user_def.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\packages\fpx_login\assets\images\ic_user_def.png
Size 234KB
SHA256 c060fd53174991ee8aae3a69314fc11a84d438a7b9433bee04887e8a33a72747
MD5 d87906beba79b2d03a8e6922e02d51ea
SHA1 eaf1019afbcb019f737190827e097cb287ab4646
SHA512 631dca0a0d5e541308b2d4dbcb8fac54f93b2235d59871d93f26fca0b6ee7d3ac60d0f196379184d17b7786d7161caa0fb4811de1c95b2926c0e9249988e0c21
SSDEEP 6144:GVJ5GlvG9+ZlpuysQloY0Wr2TKOWQU8qSkLAigiom:GQBqYmys3fo
TLSH
T17C3423490C72E38BD8E55160F3829CB5EA623E81050FE9559948FEB316BE35AECDC13D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ic_chrome_close.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\packages\window_manager\images\ic_chrome_close.png
Size 298B
SHA256 70fe0130bbbd928d04cd33a49ecde422ec54fd748b7a4e983f4e31be6e73f5f5
MD5 75f4b8ab3608a05461a31fc18d6b47c2
SHA1 d54d970bf54be147f45230d5adf4265d8e6be381
SHA512 3dfd36c0b364f954377b2c8c84a6d77d5b6045f4bd3fcd7e73f6ea2f3555bcead39227348700be16ec6be08c7ca62d49cd9251190aa4ddd4680afaa8b38055c0
TLSH
T14DE0E7DFFA485DBF5D5C043F08579510587B47B7E1134D004717B11A5325D64B8473C0
MD5 SHA1 SHA512 TLSH

Submit Download

ic_chrome_maximize.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\packages\window_manager\images\ic_chrome_maximize.png
Size 271B
SHA256 93f2ed012ec01288b78ad4816ef254261e9ff25e8a9858359b45431c9a5de5f4
MD5 af7499d7657c8b69d23b85156b60298c
SHA1 ca38312a38bfc6acceed24961ca4b7f83177eeb3
SHA512 3ef964d7d017088d1227409e74b98b21df381a7db558e868aed7a34780f38b329775c11b8dd77ea8d5e1089ccd6b78fe3ea4397bd54e0c0a19f64ca7119843b3
TLSH
T1F3D0EBC76A0444A7CC0CBC22032A04C2E09B012ADA08B94AB4F2D20C1C484446A41F01
MD5 SHA1 SHA512 TLSH

Submit Download

ic_chrome_minimize.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\packages\window_manager\images\ic_chrome_minimize.png
Size 166B
SHA256 0976edbb9977136544af17de125f345a41065694de92036d9365817ea6d8f05a
MD5 4282cd84cb36edf2efb950ad9269ca62
SHA1 28255b717348279c856cb77c632281a47e7896d1
SHA512 3b1fa86fbe4780b9864a3c5f4bc4a456139246d8950ebf6d1ff7ad77349e9be700d57bb7a28b3bb61a9fb76d68e3a9771058ddf45b202c14dd79bafa4fd75e3f
TLSH
T1DBC0C0E1AB080C37C94E442310A11500F0B7147D44102E08AFA1E01403B409C0245690
MD5 SHA1 SHA512 TLSH

Submit Download

ic_chrome_unmaximize.png

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\packages\window_manager\images\ic_chrome_unmaximize.png
Size 366B
SHA256 3d375930c514ec2ebc0603ad1e1398b4daf458951042a97232d16f17e1c9603b
MD5 4a90c1909cb74e8f0d35794e2f61d8bf
SHA1 24323430f35371e1a32fee930d2b7c075f714bce
SHA512 1a3f91a056cbf8d89102a2790c70b61b5f0d3ff4017340ccd63145abbd5abf05af12700c105100a4684d7bdf44d955cdb6b6d1dc58f2d99b9f1658de6aa34996
TLSH
T183E068D9367C14B4659D8DF5EB9A4254EA1F26341078490A2852E0B6F62E6844D5B2C1
MD5 SHA1 SHA512 TLSH

Submit Download

ink_sparkle.frag

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\flutter_assets\shaders\ink_sparkle.frag
Size 7KB
SHA256 0ef9d9012e179ffbeb8e89f45da87066c7dac81f715b77f700b7a9c6f64b1466
MD5 9942377cb3334be0cc96e4c5f581d87e
SHA1 64e9fd0da76b0dac46b63e5fc87031ad0c7daaab
SHA512 55bb79eb1f5f19cb038cbe9460d88bd425ea57e81107e9473ffdaa28a922e3e503e2842019f1c2f2167744ba56e2a7a9395427456d46ad5b1b9d6b709ddc0c5a
SSDEEP 192:6lklKMJhM+65GuDzgIbMRyUKwCnPBtITdH:6lkf/M+c3Vp3PB6l
TLSH
T174E1DB548A0B1950FD11ABB80A1E1558AE2E30D3369AE10373CC6F996FCF31B929A5D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path F:\FunPlus\Tiles Survive\1.0.0.1285\data\icudtl.dat
Size 798KB
SHA256 65ea729083128dfce1c00726ba932b91aaaf5e48736b5644dd37478e5f2875ac
MD5 da48e432fe61f451154f0715b2a7b174
SHA1 51b6add0bbc4e0b5200b01deca5d009f1daf9f39
SHA512 5af9c1e43b52536272a575ca400a9eee830a8fcecb83bb1a490515851bef48957d8de669b9f77b8614eb586838af23385e1afce622edb82a90ec7549f882d381
SSDEEP 12288:lMlhw771h0jM7ykPG07+r4c8w0P4N48RkjtZdPHz982VRL8QM1q:8hw3zVtjsbGu4RjlPHzlL8Vq
TLSH
T1BA055B1774CBAD8FF0D25A31C640E7BE5A3397CE1A3365E97AA4228C7D0E1C18650BD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

delta_update_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\delta_update_plugin.dll
Size 477KB
SHA256 7b857a28ab34e07e1ed55732f71668082c99cf3e72db8ff37b7329541c6ba0ae
MD5 71a67ccc40dd1a1dcbfd2cb0c80a5652
SHA1 7281bd89bed01def00cf5e7f783209a86879a454
SHA512 fab1d379a9bfafd01a3e90d4ceb0829f347fcb203b895d39aaa6af4f896a585b0f8ea5bbf55b87bfda2d76a8810a93a2a3f2a86ae30e651020f8743976ae97c3
SSDEEP 6144:dlQSpyRjPGBWZHCbbacaMBYiYGHJ/I+wpD6RQRiHmPwufspoF4slHcVXT91kO0eo:ESfbaWRYGJ/fwiHm+pqvlHu9l0ehq
TLSH
T1CFA46B17A3A401BCD56BD13C87678A07E776B849032087DF13A0E67A2F63BE55D7A720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

file_selector_windows_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\file_selector_windows_plugin.dll
Size 122KB
SHA256 530b632d2b070a7a9463d8ea8cce885f9de0139e8a61397d5189e7ec4af6a09b
MD5 5e9e55c2a89f34baff74e907a20d2f61
SHA1 f5346004aa00ec69d12a587d66e8eafd599af9c9
SHA512 5239918163c354821b06e51f171ce2edd054db90df9fb8edea2167190247f81833b709edd7a3db6a78952fa26df957d42901cfa8559ef01826b03ba28d21a7aa
SSDEEP 3072:9OKB6TWmhiCijxbI8HvseGrl/DavIxVKjnIrIa:oKYWSijLal/DavIxV5sa
TLSH
T19EC37C2B7A6C04E9D16BE07C99875E02DBB2B4450760D7CF23A0435E1F67BE42E7E261
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\flutter_windows.dll
Size 17.2MB
SHA256 88e6aeb617cb22e74d829d378c02259bfee4ccf25ae4ea9c60e8d81a22352c39
MD5 f1db4ecb3b586ab584ab179c0cff1e4c
SHA1 f550cfd2ac68d4cc7b2094284cc5964e8c84d2de
SHA512 674837948588b39190f158ba890d6f52db954c004c0a7b3db215d9d27c2df8ed7ab813c125189a91c65afd58c26ffdf6e5c8bf17fd18cd669f26dbe736adea0b
SSDEEP 98304:+M5ISKnKKu/60i9gzTcriqcN9MX4C7GsIAfiz8xS6RWhi62KFfQWmLu2EkKZ3uNk:ZO6ggzLI7op6Rt69L2kuNk
TLSH
T1AB078D03F59A80F9C08DD2B88B5BA927F671B8490621B5DF279427163F67BB01B3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fpx_downloader_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\fpx_downloader_plugin.dll
Size 103KB
SHA256 e88e24e54b42f34448ad79f4b0dc427573bf35f25716f4a4b95cb6430e12e808
MD5 b7898c543396be24f16e9b03796c225c
SHA1 b141dba9d1ce6aedd45276abbefca7ad1f4d0250
SHA512 096b151b3341dd3926b624d2298ac57c5402214222dd973f4348c25ca151d4684a234593508e6e4103af88a77afc0382f403005fb0254ef0821402dbe9f4454f
SSDEEP 3072:3W3V6pwiakl6wpMHl/XT/EVL3UBBZcSck9M9bGsaDlCsC44vXWyr1N7J3G68sW6v:3W/iakUwpsl/XTzWJvHd
TLSH
T1B8A36B2B77AC00A9E22BE07C9DA58A12D7B1F446176283CF23B4835E1F137D55D7E660
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fpx_font_manager_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\fpx_font_manager_plugin.dll
Size 96KB
SHA256 dd13da8d1231a8b10940783bd86ea5b4eb15d995b26c7894462eb63d3c948fd7
MD5 efdd91540ffbbe27b8ad1c8bd8f7dfa4
SHA1 638326fe806bb654e609ad6fd24d05ed490f96c0
SHA512 07c0a5bd0f48b3dbed8232c49e9ce0ce5bfd59cc3383b768daf1b174dbe6369878567f31f9cb57668d6ed60182a027e10ddc43c5c8e99357f12b5ab2f3e35b53
SSDEEP 1536:hSSNk73by5JimxmKHf59t9llHICQwUW7MUXy7sUY:Ic625JiymMB9t9llHICQwUWI0yIX
TLSH
T15CA36A2F676C0098E56BE17C9AD69A02C7B2B4510B6183CF27E4835E0F137D52EBE661
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fpx_gamemanager_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\fpx_gamemanager_plugin.dll
Size 195KB
SHA256 9bdf77866049444ca8d80f4d56d58d3f1b867d0ddfc26b41259b7a92f327c343
MD5 81abbcdf9d10da9d7e73ae38de3974ee
SHA1 e2e8044ebaa84a0c15e7bf924fa1b3400c329f92
SHA512 38b4dae42304a3e4d12cb9a9d9cd2c1a1e3c4a40e5417d0fb331ea8603831e613cb14b875b5605e8bf8281b4e16dc7c7ccac899a1bcc1e6c90b6f0f631596adb
SSDEEP 3072:q6a4zWtePuCHTQn6iXmnZQ7Ada5XtIVlHMtyjQNIeIq:q6ZzWteviWZsTIVlHMtyjQWFq
TLSH
T1A2146B2A76A900A9C5A7D178CE539A07F77230550761C3CF17E443BA1F6BBE45E3EA20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fpx_login_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\fpx_login_plugin.dll
Size 106KB
SHA256 bbbf03d3eee22f5a3c1e635fd08c2d9442ac004f00cf0dd337e2b1dc6c61b837
MD5 dc647f4b43786ae004cfaac43f78e5ef
SHA1 1d5c1f1c6e79e4e8ee6b622812fe4a66d58122ac
SHA512 2497b000c42b8ed8bdec9cbc9f445ab818cf311589feeebe730cf78a5fad479b7c6809ae2434c6f2d246eea1c670cf339172c8940ed912541601d4142577079a
SSDEEP 3072:sq6XpFTbEaLi40JMxkSglHICCl9ejIpIx:snpNji4AJlHICCl9L+x
TLSH
T15EB36A2B735804EAEA67D07899974A16C7B2B4410B6183CF03F4875A1F137E82EBF761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fpx_style_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\fpx_style_plugin.dll
Size 96KB
SHA256 1acc6f267ebbc213e88155b49c9517386e819dc74e6818a541823b85fbb5a452
MD5 8fdcfb8975c544b6309bf1b1b97f682f
SHA1 989b9dfe40f9ec0d462adce9bf602fcd60dd0dbb
SHA512 4e968e89fa30e56600ac579bdfa943fdec1b06652fd33d4ed594c89b46084934ba3d625086a52d6836b34cdde34cdff06c826fc77075bef0ed8362a32af41d53
SSDEEP 1536:uacFkbOLy5JimxmKHsM5U+vMlHICF0wm8J7MUyu7sUZ:1OaZ5JiymMh5UAMlHICuwHJINuIK
TLSH
T1A8A36B2F676C0098E167E17C9AD65A12C7B2B4510B6183CF27E4835E0F237D52EBF661
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\fpxgame\vcruntime140.dll
Size 106KB
SHA256 76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644
MD5 870fea4e961e2fbd00110d3783e529be
SHA1 a948e65c6f73d7da4ffde4e8533c098a00cc7311
SHA512 0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88
SSDEEP 1536:DcghbEGyzXJZDWnEzWG9q4lVOiVgXjO5/Auecbq8qZU34zW/K0zD:DV3iC0h9q4v6XjKAuecbq8qGISb/
TLSH
T141B36B46B2A442F7C4AAD1B4C2A38A47FB70B5418770A3CF03B58A690F63BE15E3D355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\fpxgame\vcruntime140_1.dll
Size 48KB
SHA256 e0b66601cc28ecb171c3d4b7ac690c667f47da6b6183bff80604c84c00d265ab
MD5 bba9680bc310d8d25e97b12463196c92
SHA1 9a480c0cf9d377a4caedd4ea60e90fa79001f03a
SHA512 1575c786ac3324b17057255488da5f0bc13ad943ac9383656baf98db64d4ec6e453230de4cd26b535ce7e8b7d41a9f2d3f569a0eff5a84aeb1c2f9d6e3429739
SSDEEP 768:8EgYXUcHJcUJSDW/tfxL1qBS3hO6nb/TEHEXi9zufUKQXi9zug:8vGS8fZ1eUpreA+zuTc+zug
TLSH
T1AC235BE157784086D4ABA9B18593DE17BE3CFAA25B40528F07A1D15C2F637D0B73C22E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

screen_retriever_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\screen_retriever_plugin.dll
Size 115KB
SHA256 c01ffb0ce01340253ef3064f2352587aa7f4ae833c58bbd56e2d463b94e8f5f2
MD5 37cfc14ed0dbc973424879b8aab890f2
SHA1 000768201e22871a0192da19e922f12d845ec9f2
SHA512 8d02057d060290ecf8769e3567a64c3d71f13aebcfd740daa3c5282b2e82499440f8369fa016212c86771887bb77e1b61aa2346d45285ef5c779ab9636aae2bc
SSDEEP 1536:pJf+Qn+W8w3ri7PkaAJriILixst2f0Wy8e5wllVC/3ekPmgUWhn7MUb7sUI:bXnhiz+JriqGTyPyllVC/3ekPPhnIyIT
TLSH
T12CC36A6B376C00E9D66BE1788A965D16DBB2B0441B6087CF23B0835E0F177D62E7F660
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

task_scheduler_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\task_scheduler_plugin.dll
Size 146KB
SHA256 d759bdba29e8122f0dbb9379a0edc80adb5658d4befa3538147fb04d48f49853
MD5 a8dd865f16b06913800114a613bf8a4f
SHA1 ca8ae92435b79407140d8eb1590f0c0537724bcb
SHA512 4cd0be5ccb08501b3a70f93701de799e9f9d5b502cedaa4c4f4bbb93add29c745af10893bc1c98214d2ee75183cf50f2bb45a463145c6fb88603d3e8bcc22a0b
SSDEEP 3072:yH/G16Gz9xGFVp48i2t5ZjGsfN86dlur4LQuJXWgIDI7:yH86Gz9QFV5i2ftF8Olur4LQuQ07
TLSH
T18BE35B2BB25C01B8D15AE27C9A9A5A03D7B2B8460731C7CF03A5425F1F27BE45E7E760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tray_manager_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\tray_manager_plugin.dll
Size 123KB
SHA256 6a600209b153489fafe6810878dd91033e9a890796868dbfb7cf1901432790e6
MD5 17c2f93d7c6ebf4a3d6a850340aeb141
SHA1 d74320d1011255d0e26eb94cd4c5b82158a645aa
SHA512 e94662a85fc728cffd80aca4b5fe4ef7d6ea3ac1c198b96b495c0fd4964cf7b17fd854113c44c2d11e591db7fae011755434602fe238b8c16c0320c86324ed03
SSDEEP 3072:exa3SjgzXiiJLXKTD9VNLy1Xl9bJPIBId:exBjmiiJLX4D9VNLy1Xl9Gmd
TLSH
T1CFC37C37765C00EDD2AAE07C9A965D52D772B4460B608BCF13A0435E1F27BE92E7F260
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

url_launcher_windows_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\url_launcher_windows_plugin.dll
Size 106KB
SHA256 3a3eb2987cb0efa8d4cc76d8de2795be1c6e517bd115b59350f25e36157986bb
MD5 98de23754c6750390dd0f2d51636b9e4
SHA1 20797a4278afa51a09c3b3413d10427956b70b3c
SHA512 187ea0a34c326b43538d877a84c496f765362cde7d976e1f5c4089526d6db0ac4ba867660f0148c8dc02cda6e805815d16d2fd2496913af172b5530b6e7a3f08
SSDEEP 3072:I8AGEzD4bSOxIiPeLEeWzX9OClHBVmSJRJ421of8060s9E9j9ugUK29Qk13ZQ3M7:zAuwiPeLEeYX9OClHBVVefqUn8
TLSH
T160B36B2B776C04E9D167E0BC998B5A12D7B2B4460B6283CF13A0835E1F677D52E7F260
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

window_manager_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\window_manager_plugin.dll
Size 156KB
SHA256 5be0ed159056b37cdd1749c8757ea90367e3769131e7c808f6d3cc9363411557
MD5 568291b3a1a6b8604648346111e8e03e
SHA1 ba8fa2893432a8a17182f5402e4cc4b075843649
SHA512 02373f34ebe25ca295461f984c0aae67c1d3ade5f5eb06992d2e710f37e1fd09648b64fd1581f474344a2e8b23dce7f02d981cb2a92b3535a9e88c303c68bc41
SSDEEP 3072:9y8m9tTtoGVcyXVO9i+Rr5xFOO8T169VNLCTEQym1IOIBZZ:k8m9tyaLXyi+RrTFOOw69VNLCTEQyJVx
TLSH
T161F37B2BB26C01EDD257D07889969E12EB72B4061B7187CF17A1427A1F173E92E7E730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windows_single_instance_plugin.dll

Path F:\FunPlus\Tiles Survive\1.0.0.1285\windows_single_instance_plugin.dll
Size 93KB
SHA256 047015c45be8d336bdf69cc951c41d39ee527984cb213a042a9462d73943451d
MD5 b96b25647cfcaedd10aa2ba256f5530f
SHA1 1d91b444f25f01144116c66c13dafd36e076f6e1
SHA512 1b2dfba7b6e5a2d41fabfb2adea3f8a72d1ea212817b4867647958de832df222aa498b5f725dd6e62447c9297f856ae7e3d13a3347d4874cc8e426338be0e723
SSDEEP 1536:LbFvwiWkr6ajki5yxJcLunmedoPacmud1MRvyjx7MUI7sU:dvwnnawiAJyodga9ud1MRvyVI5I
TLSH
T1BA937C6FA75C0099E62BE13C89968E12D7B2B4510B61CBCF13A4831F0F577E52E7E660
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4982aec4017c944a975a66eb5cf40bc3

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\4982aec4017c944a975a66eb5cf40bc3
Size 87KB
SHA256 df0ed2336f5839998dde768a02855d9582d5c888d81d7d6fceb0e0649d28eba3
MD5 b37041fd9c6dc8610dbb2a86659de61a
SHA1 93fac72cc994f2ced762abb628eaafe154be8a81
SHA512 897b61b3b74d206f376109ce172b369ba879beb65414258b6b9aa322c8a6057fce4bdc887076e910ef1769de2eb3ae021822c1578b6903a3df73a8c31cf85cfd
SSDEEP 1536:2/vMdt1Lb2uAVf6EzXmKtUH3DGY9VujHR727mfb/A6EJ0sSvZUPxB6Pt:YvM4uAZfzQD5mY7cqivZ2xBYt
TLSH
T1489302307AD2473BCEFA59A95AE146E572D79817C214CC80FC9261CF01CD8E529BABDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5858a428e5b6cf73e7914a28b41e2c5d

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\5858a428e5b6cf73e7914a28b41e2c5d
Size 184KB
SHA256 3807d69f33e3efbf9a9efb698bf7b3685d0dfd9d84643bacae883d68ed3db13a
MD5 b9430d92b3e4b59253eac1fc5aef4a7d
SHA1 1acaca6ae98c5e64839deaaa93704b55303351bd
SHA512 189d239c3b5f85227d5417733dc1f659a0d7d2f3359be86a9fe2cdd9762caee811910d345c551a0aaa12362fdf72ca8deb5d972f86aaf39dd44eea226899a01c
SSDEEP 3072:MB1jTkGtXUl0mM6LbpgILHigCaNTWuJiYm24MuJm16FoxP3iSP5Ste:+lTLBUCf6iOCCNTPH9oOxP3rP5Se
TLSH
T1B30412B08F54CE2293B6429D24E291E174D7E80692ACDEE1CE1271CB5CC954CBCBE65F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c4418c46255ad64258e271005208817

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\7c4418c46255ad64258e271005208817
Size 227KB
SHA256 1c7164af4ded6e7fcb016911f001fabcfc96d045f9d5c30992cc663ad7a5d836
MD5 42c74bb6712a741502201a031625efd3
SHA1 e73f02ffb23e35880846b59f0f8bad124afe6266
SHA512 b128f70df2eae9cac0820fc8a0149fe382dd292e4419ce670f8b1388af9179b5ef1b880ef7f42c6bc7f92581b64f1b15ffb415a308a8f72628f904f673216be0
SSDEEP 6144:Kl1zGUgNepA7rLP3cRxM/xpThY1s14tUEqbJCOpd:8l5DcfEDM/7lVOav
TLSH
T1293412705AA06E5AF373D93E5DD3D310F9D32447009C8A2EEB53429B99816D8B96F2CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

817d6eec9d31e585113aab9de4525117

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\817d6eec9d31e585113aab9de4525117
Size 231KB
SHA256 b7e81f6de544ad8ab214564a23975a2c5cf4db1beeb88259c8b8dee3a6c910d6
MD5 57c63a8d285907693d216e8b14ea7c9e
SHA1 cfa1709d1f7813bef3e16573db289eaaf11e96e6
SHA512 ec4de32c94910e6de062776754887d460333c74ab260eb58927640eab1cb0ac90568a8e80cea8d9ca114e3a9bfeb3b9e83bfbea7d2bd8c2c8e11c7b9f5e73657
SSDEEP 6144:aVaBCOLZhbuDE5lHqijLNGcqEQBfmA8kAbbfd:aYl7uE5ldPNGc5QBt/Abbfd
TLSH
T199341276294A4B17E16E4AC7ECD3439539D379A7812C8C20E9F35612D8808DC7DBF29E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Init.bnk

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\Init.bnk
Size 4KB
SHA256 2ec7876f81e9e539a9e62638351cd8496cb68865f2beb159344ae68f51b757ee
MD5 213f74165e5072e6109f2248c35dbb38
SHA1 872daea723c388dae2fdb0888792f435ce93b9b1
SHA512 d9b79a38502734e493875e210531a52a74991977f43b27d0a319de14eb27971816a13475ce93ff4b0b909f438341dd56397ea5543ed56beaeff0e864a80205c5
SSDEEP 48:EbafkSb1qFeVHzaQfZQjQs8QHQFQMQbnTQAQsAqQGQNQsQCQ4nqKJi:EbafkGRVHvuEsxw6Bb0tsY3ChL4nq0i
TLSH
T1EE917373DAC90DCBC8394770E0DE7AF0E2266998D250A15B5B082B2C25F924D9DC5FE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SoundbanksInfo.json

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\SoundbanksInfo.json
Size 1.8MB
SHA256 4b55905770571d975e0696b2570d12ee7e944207903cba6c4f1ee189514041b9
MD5 acf8e705495d144d0e728696831ad303
SHA1 df59312c14c55416d588897cf3e7b2aea7421138
SHA512 2c7925a77047b9d18631a31ec518e0a7a6fc0b3176d1f9fbcabf699c5ed3409decb413ffe572a62baf25c669816813a18a1d0bbe0fd3be163cc7a14e436f8364
SSDEEP 12288:pU56jvCxxnAgfyscx+AFwzrRjxCWuapsuTpcuEpujQCyCmXZI6xpAvgwYI6InCsA:y5IHQe0wb1NfJqQ2ErFggJyrG
TLSH
T10595CAB9CAA44C831AC965B9253A4E03762986FB0F183E657FCC2CBD2F9D41F097525C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bundle_assets_G_2.5.801.218.json

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\bundle_assets_G_2.5.801.218.json
Size 5.1MB
SHA256 2822ec80e56916f94d128ea5780fc393c6ce1cd29e0c4a72ec8798fe5ea9e719
MD5 ae893ea98e565cc9cf4159b837d999ff
SHA1 11f405c2187416145433c9b0cafa7be83ab9d19b
SHA512 3a46034484d1888af1c0425e0b9190a2c4ce32b4fd0bb469619420d680f66ad306469490814e9a1c8962397413cb8d8643d0e49f493c1002466f2de2d12daac7
SSDEEP 98304:iPOqBqd4Y9tThKpXcFjWhUuUauWK6VyWK+ieKGCnDfjHbvLn+tDYellLJiJt78/i:WBqd39tThKpXcqtDYellLJiJV8/2hMiB
TLSH
T115362BBE290CA99A45D6ADFE1975CF76C034E3D1D90446A0F3101C6C8F9F628FB5B90A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bundle_channel_G_2.5.801.218.json.down_1787113478524_3

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\bundle_channel_G_2.5.801.218.json.down_1787113478524_3
Size 776B
SHA256 bd2b7f6b5d2f769aa6ba6b452a6a7a07ec1a9916c67434440a81c51068c22f63
MD5 5c465b1c6b4cb96a9dc10a1e4749de5d
SHA1 cc864c7a2ae9f94b4f834aa681a80c79b25d54ba
SHA512 6af70086d1ed2fd6aa9a319182f85c48933f7bab019fdd21db1c96bd61ca9e57134aba9a0587c759f1f1df17db0bc6bbf49979a6477c079318c95c4a132a2fd3
TLSH
T1B301970BE018AC78CB962D7AB867D2032A54883CD7DA9406CC008C122F4B97F2D0CEA1
MD5 SHA1 SHA512 TLSH

Submit Download

bundle_dependences_G_2.5.801.218.json

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\bundle_dependences_G_2.5.801.218.json
Size 1.8MB
SHA256 52fabd1141d19e62150c88221a9815299cffd6eb76227661fd75af90d83c016e
MD5 deeac484c6d7818dcfbd50f91b85f1e8
SHA1 168a195b52c512f4ac62a0b0c4b86ee532ae5a4e
SHA512 a12964893c6e0311a0e5f74aec2651abfc26d28990350f1eba72881959368cc3f8b9f9a307f7f1e85f5fcb9fbd6cc05cf2c9a5928d56eaaa3db4d0ffcfa0bd42
SSDEEP 49152:oCWOCpU5SVHycDvliFktsW1qHRI2Su73R2g:oCWOCpU5SVHyc7lirW0HRI2Surgg
TLSH
T11B852EF2AD580F5D80674ABC362ADA7566B04997427090735A240CF74B8A3BE337F61F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bundle_preload_G_2.5.801.218.json.down_1787113478525_4

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\bundle_preload_G_2.5.801.218.json.down_1787113478525_4
Size 9KB
SHA256 256e97e0bed4e0d2b86e0d8234063fbb23d9885503982251bdaa98f119c43593
MD5 3c6d9bb2f86bddf03a148f097f6d133e
SHA1 9f0584932482015a7a8eb359361f22fd9d93ce72
SHA512 098b264c5ffcb68144f172ef051f03c1bbd5781653fc03ba4be0929e831689acdea8906f05965d906d6b9ffaac264a8bc3ac33472d51ed8965700b006117f188
SSDEEP 192:MopdE59x37FMkejaHsLe7fmnDeNZbNwXDutYLZPS9gDLHxyb3:M+q5X32kPeeWDeFwTXLZPer3
TLSH
T1A112ED2FC8D5CF1602C491C9B97609FD890AB857AC7A0E389AE49D1107C553F61CFBAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fed6ef12f280737cf7c1ee1952b93db5

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\G\Windows\fed6ef12f280737cf7c1ee1952b93db5
Size 267KB
SHA256 0cc62be9080b40e4be108ffe4421243ae57b14b72626df8b279c4606bbd83298
MD5 6be33d87740906932b2b46ea409c2ce1
SHA1 397a6da501a8ae9107c0bc9928990c4075ef4667
SHA512 a9c7665194b4b2d7f610806ae969b79dfbb713e53c434278e74e1f620f7f62426b1ce5aa041d11858514bf2a7455c66d644a44c51fed0d42b290e92465b132db
SSDEEP 6144:E04Z0CymRtd+6Xw/dWw5CDs7il2cC6UN7va9+QIxILyVjaVT8FSk3XO:DQndcVWKms7ilAl9a9+QGILyVeR8FFnO
TLSH
T19F44121169581E6AE372618D2DD2B1B0BDD35D1F9268CA87EC23C0174EC894CB5BD3DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bundle_assets_R_2.5.800.214.json

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\R\Windows\bundle_assets_R_2.5.800.214.json
Size 4KB
SHA256 0dc29b19a332086b4b13a0cf27db025bf7318822cd30d3bc7651c9ff6e6c6f64
MD5 d16b909cbeb47e5e9b79d030ecf7a11a
SHA1 5ffee24763f7ad8c98aa6cbde9c0b3ae78ab068e
SHA512 b25f1417d253102d30bdc229080219ecaaf4e1a2c3421e269a4ea15b2f11ae1875bfe139aaabff5d1c408f690d88402a7c2e92cc053d40a73cb11e2e2a1f7b43
SSDEEP 96:S9RTOzHirkAPA1azt/dkRkGbfgLXSLFi88FTAvAvDDERH1AU:WiHir7I1az8Rk+gLi088FUovX0H1AU
TLSH
T1D291403BBB235B5760A48F30BA73EF6D2BB28184164AC357E29015282F88C47BF5F455
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bundle_dependences_R_2.5.800.214.json

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\AssetBundle2\R\Windows\bundle_dependences_R_2.5.800.214.json
Size 3KB
SHA256 47fc3f581249d957ab76deb8add859603327d85af42e71fafeb80e30f51fefa0
MD5 7d23d66c006be23e543e362c28b25919
SHA1 ae1d5766f7a13edab8cb3afc05f6ae3c14b280ab
SHA512 d47e371778349923d761a4feee977a229406e57fe8f758162f2aac8b3d6fb98e6161c736fae9097753587a12c74a1aacdd2382d7b2f8cd52ebd33bfe510878a1
TLSH
T19F61DA242AB3FA869D10952579B99F7FD1E204F02A33512ED040EC281CED260DB6FBC7
MD5 SHA1 SHA512 TLSH

Submit Download

BinVersionList_Realtime.json

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\BinVersionList_Realtime.json
Size 113KB
SHA256 b2c598ae663b1d84bdef125d7fd632c460ea38d78abcfaada7d949c13b95dbc7
MD5 c745462df23a2c87d70908bfcc296e53
SHA1 50a70f72346e5bbc0aad006d76e35379ae882ed0
SHA512 6afe25b25660d935d5fac25292dae5c1eb699f172a117462e061069d6ae062246b714a8d003cdf1fdccf245770dc9bc2684c563a43e48b835a21332b75095be6
SSDEEP 3072:dupnenMbkVygX256T6i97qgdq/htFR0dvuCMWk:dDI8ygX256T6i97qlFR0dWC5k
TLSH
T1EAB33A10421C38B516E72AC565F9ACE2156931DBE37504B4AF2CDB2E078DBF0B76268F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity_commercial_cumulative_charge.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\activity_commercial_cumulative_charge.bin
Size 130KB
SHA256 cafac445de42b8a8290adce638b3cc16e533a27ed506569fb3bb9b7e63e99144
MD5 14ee146b8e5103c6da9863fd25c2f5da
SHA1 6e999b421c9741e15ee4c6edd30d755a09c39713
SHA512 8fd0d0fe8a24c3efd9333923d0f1511f390d98b199a624615440f43a498bbf0e2ba0c3e0fa2400a2b7dc17d6cdb0fab3218acc00c19a713c215236cf0fc8210c
SSDEEP 768:/kP1pF7RA4MpLjKKn+ojjLTtf0ysOni7EDUnHfzTTUQS/+6gUU2mgLP0FqXJsZ6g:SY4MR/+6QgLP0lhcUxJsrQ
TLSH
T106D3DC24FA329E26D2112337A2BBF940D344AF8F0915E185B3C87A7F4A7BC56561FC46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity_commercial_cumulative_charge_group.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\activity_commercial_cumulative_charge_group.bin
Size 9KB
SHA256 d42ee8b243591b87ea7a1a1134db8526c954af3a300e509c29c6b7f8ad77b1b4
MD5 316b9f9f1b61cf888babeaf57aca5101
SHA1 7db292e679b2068116655f9a2481c7e1141843d0
SHA512 a2e52b19670e6a8e55cb91395be5c1a0e7b259d455fc089e0ecc6d9e37e0266d5d08e42e33b7bc569b247d7b7c5b654f0ab6cc7228ff2113d4a1ac976a8a4d4f
SSDEEP 192:Te6jhbz9NhBCiR8wjv+B4nW+nd2xG9pBv1XYnDPu:Te6dbz9JCgBvs4WOuG9lIbu
TLSH
T1C7229A405624EA9EF3837BA60473F8818139696F8A57600977C8DBF77C94C57812EE8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity_commercial_task.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\activity_commercial_task.bin
Size 1.5MB
SHA256 59bb429ce5fc48f2464649a5368cfaa75bf1c3db3889b09fb2d7d0c864e1510c
MD5 bfa7a21f3b48b70775c9e04b57000b2a
SHA1 06e582b301eeb583770d0446a73824e5201d1399
SHA512 5c79431ee3cf1f2e3e17a31a4220631e2a7baa42745db9b6fca3c459e89adbcf6ab2c8422180d367aa5f2c3e81b7641bba3ca81f8a7d721128bd98db9e2a9aab
SSDEEP 12288:pi8er/W9sXoK9bUNOnYJooYDWyPxwk8x/CUs:M8e6y9bUZ45wk8x7s
TLSH
T1FC7573D1F61320D1D8949AB045F7DA4161B1BA45AC0AA5CEB0D0FE7F0F5AB8337DA13A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity_commercial_task_group.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\activity_commercial_task_group.bin
Size 145KB
SHA256 9b21fa3f541550ba19edae1897ecf11b653ff338221463a760004c7f2c7247b9
MD5 5747a543d2e5366985c087eb32aa411c
SHA1 34e5fa877fb7424fedfae5ada47158c6a7c117f3
SHA512 f2079be166ff076f08e3bf21645bbb98e5a11c099953551b18bab88be05a99f3ab2ca759358dcd9797c22eef64525af77d18a620efd005d976a0dced407e903c
SSDEEP 1536:enTFUJNSo0pkiOJ626Fqbk74xu/ReXXP7AxdS1v8pOvsXoay8:enCNekvUHYbK4YMXf7mpoQ5y8
TLSH
T1ABE3E0C174279161E0D99A7201E6FD0176B936C8AD4A998A72F8FF3F07119433CCB6B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity_control_season.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\activity_control_season.bin
Size 8KB
SHA256 f2de743f50b6b7df4bcd0b751a96af23d0ed9e06f2a14d7c6fd7e30cf07f8dda
MD5 58b07c6bd6ce3ee99740470e5ffc79ed
SHA1 da22c41696bd83e1be24ae38591d0cbe1eabd0df
SHA512 641d0c65111110c5597985d8d30aafacc9a9347d3ed80e35963408d418e4d08dd960c654e767138dd63a23fa527f7f9d3ed94021f2bd1d6dd2b1da8b9106fa51
SSDEEP 96:uWjAkcOjfnLvY+NE0Nt6GKOCeQQdqdF09PAccYAdvGdwtSRnDnO8jSDqiv8/8ktQ:uW7LEPzQjzyeWtgNAxE/o/r+Tq
TLSH
T1DC0200A877A2DDE2D0B8CB7809E9C7512375FE554B0B827332C07B6F0CA67501F0A686
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity_cumulative_charge_group.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\activity_cumulative_charge_group.bin
Size 8KB
SHA256 378c3fe778a2ac46ea1ade5eda5d21477195d027d63a45795fecbdd6b1e2566f
MD5 26aab8f2351920c53fb3d4891f732104
SHA1 d0e3dc676ce83ba4e98db7f800fc350d5522c3ee
SHA512 2a3d7d7bf44e516957eb5f49118e280326f32d812679b51824cbaef5b0da9b9196a1eb131da765c0ce49752236ab339f53cd429977d9feee7cb4be78f94c756e
SSDEEP 96:OaTteVpeDeteSe3RgYB0atkhbz9Nc5Xgh1MYRS+y20WLQDs0kujLWAOYz9D+mNJ+:OeAphbz9NdSjNjzx+mNJcOUbMTwYrs
TLSH
T1150258A451641B9FD0667BB69073F8A1C009699F8E0E710837DC0E3E5CA5C7B912BF8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity_hero_battle_group.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\activity_hero_battle_group.bin
Size 3KB
SHA256 1f63ec1b7a9671cbfed310b9693964b5608f4ad5cf9172c3a87b3280a9667f17
MD5 2263b5077a81b692beeb64131bb5c9ae
SHA1 56a164b7ab454ed3b2a0d56444f2a38c7623bb75
SHA512 ed0fc462ae8c488f1d94c067544490f3f8dbff38688d9bbd03882371d45dad912f0d33a53da008f9f817eedf5c4f0f5ad97adc6128296d72c8d0880ae4a8608f
TLSH
T11D61F141AA854DC1D4725E3095EA7BC16374FBC3BC31EE8315B4E67C6CBA2D14874157
MD5 SHA1 SHA512 TLSH

Submit Download

activity_super_exchange_stage_reward.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\activity_super_exchange_stage_reward.bin
Size 10KB
SHA256 e5a535bdd415de61a2a17fde699f44e6a284f11062d57b5c893d9461e35368c5
MD5 8dc1b905d669401be4bcd7f3f940f598
SHA1 86512b9c1b16cffe6b210222d177d844fe0ab91b
SHA512 8c80631b09c82a56491880dfac1bb96a58f995aa4cf152f1506ad3304c10bc0b0611d6859fbf6015974c88f0b7b8848730f2b42862f435cea44031851375568f
SSDEEP 192:PMY1a/Tz0h6/VESZ9FtDN3RnZZD44o411Q09PVZcnbTlBME:ez0h6/VESZ9FRN3RnZJ44h1a09PV2nbL
TLSH
T19622D9E9B32611B7C5E0447A407C1E81CA8E58AFCE17B5AE4B4DCAAF0C5F6425739CD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dragon_main.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\dragon_main.bin
Size 1KB
SHA256 206fd5cfe66a040246adf9ac589148738d22145dcccee67fda9fad1036f1dcbc
MD5 5cb5b92d22ef3166c2150179054f0539
SHA1 c41d12e167cdd06b282c20032d6a1df0f2e71e95
SHA512 e6fc9f22e7f03e5fbc0a88f89b56628acb5997aa2dcad83dfe578aa6dc598b0e757f09082ba7cc301d02ece4ff23eba5108780c0f00ad2eaa669b02c787b6938
TLSH
T1812114C12DAB0A60C1658B76199ABA82971775C48365B3107302B27D0EF73DC7D845FA
MD5 SHA1 SHA512 TLSH

Submit Download

function_open.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\function_open.bin
Size 70KB
SHA256 01f79d86c409462106a881dd21a19460b9aa198eee1e87f471f84c3fea192ed0
MD5 443a1d9d398d496f56e22ba74d01ed40
SHA1 624eed24644c0b6c50d9789c55bda10b26c0243a
SHA512 139487ff71e3229efcd618dfc41ec7cb5ce4e747de344a06d27e4e6b742b7f5e92f44c82ee6ee555262b7a97eebeb552b6c996f03ea7476963821bb36c1f0133
SSDEEP 768:a39wIxuXhoRxTfYLY7YAY9YSqacjTYuAebluymfMo9dfMuV3:RuRokMObluymfP9ZMQ3
TLSH
T114631F83653BDC3FC3F236B22389E9568D28F6565642D5237BC4C34F06C0AE1165B9AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

game_configs.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\game_configs.bin
Size 174KB
SHA256 2d022667ccd91605c8909a4c6c880c8ec8352e178437aa9065e7d4293e8963a3
MD5 60c13bba3a3c4c6f93c41c9703ebce77
SHA1 746cea1c1fda169ccdefc17ed6264e3aa6a37b74
SHA512 9e6ac526d6eed8850f89ed67cb7cb6ad59fa4d45fc0ed9bef4c6c78e029030a00516a9f7440777b216906a0dc4b43ee572e22c60ad4f88da33b2ab98fa432e64
SSDEEP 3072:Lc+Ncwg+uv9OeBlrYOW4sAzS7FlPKkuMxvXPwQ:JcwHuFO8YnBz7neMxvXPwQ
TLSH
T1790429263628C41BC0E33ABE67A6EB9143747081E745C763F3D47B8F868E9417E1764A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

high_return_list.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\high_return_list.bin
Size 983B
SHA256 b5ad1056afdfb1fa63faee108ade3bd2908aa04d693631c3d41b31e29a431d7a
MD5 0508247a9fd4c06a79c7aca8a2a61716
SHA1 03a9199ebdbc9794cd72464a04adea16acdcb48c
SHA512 4c9e949b478f7856a3d9b5e0e8f4cda80ba15129720adb0ae34dcda35094643a28afa96dfb34eba49090d7a3bd211e583e78ec060259166b04ed66e13ae9d64f
TLSH
T12E11AFF9358EDEAD8001445E92C1C86A818374C1CAB9A51273367B2E708E3D1FB4E786
MD5 SHA1 SHA512 TLSH

Submit Download

hud_recommend.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\hud_recommend.bin
Size 19KB
SHA256 700488af486f8c8cd1028fe2bc933b26d8ee9d932c8c66541c78e52afaf9f5c3
MD5 40a9787561b4f70eb19f8b2bce281103
SHA1 7c7ebea9dcd4912ab8dda667fa6b2264407580d7
SHA512 dc49033592ec70136990bd3c447c1e6d25f44b0fc4f163db2a12236a9182af1c94e6ebead62f132f827a2b124ae3b5c6cfd12d2c79110606cb4534be3da8ddc4
SSDEEP 192:8UPaYGmBwkENKItEnW2VTjxbdXan6mJnkXpORu0QloQKRkw/yqDdzw3jx5x/X8XE:/arkwkE47VbdvIo0Q+fRkw/9DRwzF0XE
TLSH
T12E92DD00779CD74AC82379355D9AE3E19234FB5B5A48160B33807BEF0FE97A21F4A649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iap_configs_new.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\iap_configs_new.bin
Size 87KB
SHA256 e448fb0d2894e19f1bd9a2f3f7bfa91d86cd224ea4394f3dcd680256034454ea
MD5 60817bec8bcd00b09c40f401ba86295f
SHA1 dbbf4e834329afb47ff1279952e70edddfb5de7b
SHA512 1730838322d2240466269b5bf993d36bcda0cc21ef632efdf2f121ac1c294058015217af07895f305e519928429fef6e86c6f7f362a59d433a20c0b68fbebad6
SSDEEP 1536:expWhgccbQ75/wtmp+coIckP6mxkFDridhh9/rvS7KKF/0qoz7FaP9ajY7sh:eogq72OmkCmxkhrQ9/rvS7nF/0qu7FaE
TLSH
T18893ED713E31D36DD0D52EB4B524EC818D2D3DBEF466A4DBF2D47B9E098A841222346E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iap_package.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\iap_package.bin
Size 1.3MB
SHA256 89774629f4b419076dde93a7ff04d04d5c9640914f21927d74d7e2c31bb03028
MD5 74bcca7f49f8bf49bef0d3a8891d5bd6
SHA1 b962793a204c4f4b7ccdbf196d6b5c1c92587fd0
SHA512 8ca7bbd697b30725418996dff6a0ee13b64475c2a2ae805a5a56a6b50d338d04265d7f3beb0acdb96af20b4418b87a0e33620559952fa34efd44a36cb2cba0da
SSDEEP 12288:xn0DoqKH1NhiyuHwxW3FeP9E+H9rYZ2e0T2:d0DoqKnbuHwxWUP/WU2
TLSH
T1AE653F42FE208605C0953E70A045EF719B3FBDB965626397B1C872BF1F87AF1992241E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iap_package_group.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\iap_package_group.bin
Size 737KB
SHA256 9f8ba324f5dd7e46bc0ea8b37bf4acef352826485c309d665addcdd4ee065643
MD5 e4fd37d879e854ddc35afab1c5019c97
SHA1 8bbcb23746435ed7df97b9b67d928683deae57fe
SHA512 6f1980e111636d8ae438d3f91aa90202dae9643dcdb849e4772071fc7d4646090aea203c8341fa5227964ed6048bae9418024dc8fe6f28d312f65e9f8f4d78e7
SSDEEP 6144:UIOCz01Bbksg1jmwsssAEAc8c8Qg8c8gEgAgAMsMsMU0EvfcxB+Kqn3L4J/FRrY6:44joKQn3kJ/F9zeTv2/
TLSH
T128F453126B625388D180FD721042EFB08FA9FDFAE572168E72F5769F1C464610E2F29D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

itemlist.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\itemlist.bin
Size 3.4MB
SHA256 4f1f6dc798af6e347a074a651ba69017bfa96d6c069fff35717b040722aaacec
MD5 1831435c9998c4db1895b488b3d22438
SHA1 68573880aaac80f789a57c03689ec7c2df60f561
SHA512 ccdaa9da73f694f75cbc1fb2cf7b701be7398e2cb8e40b72c3df89d40d109038575f125d8eba5f9e5b9f1c1327dc4a03230be9dde94efc90bcb48fb9f53d0f15
SSDEEP 12288:Yt6XcJUrxsvFWs+0fis5mUIkVX22GIf1Ow0Ujy3Mej9wXSgGeoc+eu3PHu860aWq:MiduoeGPO8609V+h
TLSH
T1F5F5A317CE49AC03D6BA79F98827DB116330F2D6D9708437FAE0464B5FDC1989AB14E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package_center_new.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\package_center_new.bin
Size 11KB
SHA256 8b0f78b3945ea0e51a11581030f01481231b510299e460ed79c9f5770dfc3514
MD5 6940dcb5e81246413f41d9f80d2b01af
SHA1 83ad5c9d587ec1a0371178690cf8f51b36f69ce5
SHA512 54e78a18d5f12ef8aad1b342452106e87d4f792c9c3393e517f444d3f5e221002add93265324b0686ef714948400e8a2bd3e942f9d85a395ca560f768085fc47
SSDEEP 192:9Q78Ue8w0nDk4JY2AUfu+DeuVGXI0dZK+:9Jj8w0nDkrTUnTVG4K
TLSH
T1BC3297331726E2A5D2C10F79F367D660891EBBA46064D99276C0F3934BAE804ED73D2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package_tag.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\package_tag.bin
Size 5KB
SHA256 da81106ea331f9d3703b43c299ef7c8e89457a177537b33f66e4fad4c324e08c
MD5 8b3da111eadd2bf941555d9bbb3c67c2
SHA1 08f473b1041809e34bc64dfcf933ec092291ef6e
SHA512 dab0b2a54017fc7d927561ef0c0e75aea02da4340242b116bc0da1a1e117a393cee7aabe7d1ea60f247721c6392bd3b1be460456dbceb3a18c109dfc10b0b542
SSDEEP 96:x8pGLDu0ua8KJ1VKsipFJeOLl/LcnuOoJCl/mWHM7RipI:0Gv0a8KJ1VcpFJeOLf5JO/ORp
TLSH
T1B4C1C7227DC6D0B5D6556FBAF764C804D2ABB394A8465E0373E83BDF4ACB080E027342
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resource_main.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\resource_main.bin
Size 22KB
SHA256 3c9bc0bd1587af29230e6b7f8d4f61141fdc6160bf487f0f68295cc976b09809
MD5 fb458d1df87bd3a080a3fce8ca14f9bf
SHA1 99557feda05eed0cb4b72dc7cf4bd74ae15b707b
SHA512 69ed769e3f90d162c13721b3073936355468a6fd8cf9b40c6622c48b62f2847872951dc4527363ecb8356ae8b1da0857498fa2e13aba915833b866815a0f55dc
SSDEEP 384:nKDzJsXdY4edMZtKQ+avGkQgbklQmhKu3n:ncsqTMZh+av62+KuX
TLSH
T108A21B573911E4B2E4B527386876E54196217E43C43A413BF8F4BB7F46F2EC0AEA6C18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select_pass_choose_group.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\select_pass_choose_group.bin
Size 35KB
SHA256 5b177dfa8a43e664cdf56d215fcb8dfb99b67d12166d207c163fc8d45c1ec04d
MD5 f2611af396ca5853d69646a12f1b56d6
SHA1 72257001d6250846846a1ed1c42274740f8400c7
SHA512 ec0b20e63d8dcae998909bb9ebf800e47987289826188b8dcb3bc94e4d86706c652994f2449bfe4eb3ffddca70a78e822b4eca372a58a1faeba008766ac6c4fc
SSDEEP 384:Tyk7Nnw0mJ5jdk5en/wfrcbpP+a212gYkT3yu8fiRKZmfoqXEvg9SaPrig:TyMnw0Ai5enooiXyn1mfo8EKSamg
TLSH
T182F233143587C5D1E96F85763EAED8B0A5A07DC42E21681BB293BB5F0F2BB03E487417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select_pass_level_group.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\select_pass_level_group.bin
Size 36KB
SHA256 5259dc11ba01fdfeb6b136a04481482b53493fdb0cc7309db83fadd0bb2c36e9
MD5 6ede65a0a6e379a3c9ee1ebb3439a529
SHA1 856421114731aa4905b4f01e8d95f881f469ee4c
SHA512 7c29469a0aa5961429be46fb96f4c34bb78e0c8c4feaf7caafcf3cc6f6ce3238bb67c0301ea318d265a1c732bd91484a9a6233be8cbb697403e8cb848ff89fd9
SSDEEP 384:btXwr6Zsj14LcbqDXw4KskFdx3FYKKRWsjHQXtwwM4k:bDZsh4pXLKskFdpmQsjwXe9
TLSH
T157F2FEA1F55BCCD6E5866538854EDFD24351BE822C80C8C5B1A8BF2F2E73141615F8BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select_pass_level_main.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\select_pass_level_main.bin
Size 251KB
SHA256 647370e4c6de1376081e3c95e8f7aa67277f1a3761813c683254528ad16cd6fc
MD5 d959649a716629ea5533ca8923035abe
SHA1 b27470dd60087899f0ab0c079c458e86b7f02b98
SHA512 d2f8a2be25ef2d53a48a9258ad1344b6649d841e4ae962d1f426d01c88a4e852c5cc3e75b717cf0c32ba9271852dda9b1e7baaf5f981a451c8ef30b0b407140f
SSDEEP 3072:1Lr41eGBtTAy2PbyEsDJLd3XSJ9OMDNvL:1Lr41eeIbyt7XSdDZ
TLSH
T158449B10BE068DD2F83282370DDED7D1E771FE912FA3A947E191B26F1A2B3905C05969
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shop_link.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\shop_link.bin
Size 392KB
SHA256 019599ec29332bc069417483325ab3f3c72122a38ad0bc59e947ee32ade09617
MD5 7b93042d7adce47b9663c9bd76faf800
SHA1 1985065e9dd3519ce48333de932429a918c2b7a8
SHA512 dde21073eb935f81d63f01a3878db06f8157ef43da862370ae49e785489c2903c901919a26a94fd2e9f538efb5d12ad585a2084e9f2fbe90e260e47f0a853e35
SSDEEP 3072:SrHZBtkWkgZbhpxgFmTTm5UuRLgYhGKkm8WYZ:S7ZBtkWkgZbhjTTjIsLKkmXYZ
TLSH
T142844003BB98E876D0A56DBD696EC3D84735F9868BD01397F5D8230F4D970A07E2D288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shop_main.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\shop_main.bin
Size 175KB
SHA256 248bea3d7d344a1f3a6ce5b7b0c03a14b68fd8317863c5349f532388b9278f9c
MD5 04fe9293adab01fff7b083015bbcca0a
SHA1 a2fbc6279df6340b22f540736938b5cc70a81271
SHA512 fd4927d011e77639355c18d33d9c698559f4b24e110111934765e5fc399ea64019b473720c10986b325cc3e5a5e594b0e7556b59f1c03d993a9a9d24db143458
SSDEEP 1536:s8PVxelYYeKeNxFWj+W8rZ8Yd9I7iUKL8QVB8UhgDSB+NWWYcUNPC2zr:s7xeKeNxFWj+HrZ8Yd6LKL8QVN+MrNx
TLSH
T161045103B7993822C0BE3DB874A753980B34DAA1C7A33354D964CA3B5E965F57A342DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

welfare_tag.bin

Path F:\FunPlus\Tiles Survive\GameData\GameAssets\BinaryConfig\welfare_tag.bin
Size 14KB
SHA256 110e72b39275142c9100d035ec001dfc1ca4dcb5e35f1e5e2f803ac5647cda6c
MD5 991b1c59f6408198a23c16bf2a6a64bf
SHA1 ca151b65548612a2e1fada7c8745fdac83102a00
SHA512 0c3dae6ee04a2f34ec925472e10c15d7c6e008fa54a987859f8c7c6ef91e51687a5d914b15255299a4e5ed9aacdae5fa23cadc026a44016652ab41156db092ce
SSDEEP 384:kFI3BqhUDRETDoit5l5pb3PFGlrNQd0qbrhr/IKQKFwI4QiyY1CKkGzTiR7mj+2v:kFI3BqhUDRETDoit5l5pb3PFGlrNQd0X
TLSH
T10162FB10BC15E5BAC2992EBF1408CC0CFA6B73A6E6143D9B7BE09FEF190EC812543655
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Launcher.exe

Path F:\FunPlus\Tiles Survive\Launcher.exe
Size 651KB
SHA256 a366191ca637eb86a88cf3b82649a4a4d8e70963be3ed16a2ea58d5db024adb4
MD5 6ae171f76becda5035501194b3cc7fba
SHA1 ac91cdf935e078df1c024ac68d457f7173ee8eb9
SHA512 de2c1ea233eef1871ebe1dc96361a71d354d7d49f80152761ebbc655c27e471f36cd6e92b92e7cdb6373c9bf38525702a014e3bab0531ea8451fd579308a4b33
SSDEEP 12288:hncEugueyR7Qehq/Eby82gQBqYmys3fpcmrCJ:hnceuemcF/qy82/qYFEfpnrCJ
TLSH
T15DE4DF95A7A40CF8ECBB913DD956490AEAB27C160760D7CF03E086561F633D1AD3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UacLauncher.exe

Path F:\FunPlus\Tiles Survive\UacLauncher.exe
Size 676KB
SHA256 3e5d427402fb976c1a5356a2372b534b0de211f32a9e8dc2cbe553134b9bdd24
MD5 a3f8fe0baec300995092b95adc714af5
SHA1 66796aadded4a92be88363020978c8b5a93c7516
SHA512 e2c5566f36c350560005154b5f6d6b8a0978932a396e2711c589b848fc6ba870d5ba0170863b8dd5201b263c2e9362b3bdd3096829e3a0e9528373ed5a7a131f
SSDEEP 12288:knLwD4/ABTvwvYtkw+Uvy82gQBqYmys3fpc4EY:kLwD4A7qCDy82/qYFEfpNEY
TLSH
T1EDE4E056E3A814F5EDB7927CC9828546EAB2B8120761D7CF03E486563F233E15D3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

version.ini

Path F:\FunPlus\Tiles Survive\config\version.ini
Size 18B
SHA256 40d7a122401947ea42727675ffbe5b1b59e899f4949026717dabf1a705696dc2
MD5 976328dde83ef51703067ddffafd03be
SHA1 baebfb7d953a8218dbc982328e90a674f82cac80
SHA512 2f1f095423d645a528fee570f65a772cf8f6a4fe72aa17b278d794af385defebe1351282baed72208f2d6831bad54a318d04e242c2d46e869deff9c78f754853
MD5 SHA1 SHA512

Submit Download

81f1a91

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\81f1a91
Size 4.7MB
SHA256 e12ef862c05763e2c036261df73953a0b3eef0c2b22e171986c0f23d37adadb0
MD5 f08394e032bf4b13edbb200fe4ecd469
SHA1 f2937910b2e659abadb6642b4e22af159bd1eda2
SHA512 f4bc843f6259437976a1b72aaeae70a51ed96a3cc42c6fe4a00461937d404ac4a755e31bf40d8f5cdccf93a69509d87b71a8969636d69d778375fb0b2d96e421
SSDEEP 49152:0CZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNN:TG2QCwmHPnog/pzHAo/A6Y
TLSH
T171367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GameBabyConfig64.dat

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\TQM64\GameBabyConfig64.dat
Size 288B
SHA256 135be48af9414f7003379c510f4fff07f078e726edc6ecb89028df6fe8656880
MD5 52f7d130059ca0f8ae62977bcf9d8e2b
SHA1 e6c7ca45c597ec343547abd9383d39dd9e55424d
SHA512 2041e8b3aa0e6c5f3421fde06fd36b1cc37f0162aa2726336a9e52babad99ddf83e71d422b66554708aaae50750de1b42aa575e39329b65b2c0a2c461613b320
TLSH
T186D02BE16E092871B28031CF54089C40FF16531F068A08BFC0008F273E7809433AC3BD
MD5 SHA1 SHA512 TLSH

Submit Download

GbDump.1.241120421.tspc.exe.dmp

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\TQM64\dump\GbDump.1.241120421.tspc.exe.dmp
Size 463KB
SHA256 8b14b1f1b6b7a3c4e803578a7ef15f78ac9998033b6f5d7746081e5ce03a2bb6
MD5 35e22e005da3eb4128b588d8c2cbbe56
SHA1 6f2c66b255531c56636c58f580049c4d5cdd0407
SHA512 bbdf2e63ee85b293e96557af990cf4c390696c6e35606a31eeb5e13aa2c0a3cfb3ee7da93db52917397bb928ff5f12cc394651ce769aaae3cdb95441cd2358b4
SSDEEP 1536:iZHLIV0W5wWKdyePue4qh4ZtEClVk18O/AWRR03wssWVHptEA40at7T1Jp6ChGT:v24qh4Z28O/2wfeEA40azr6CwT
TLSH
T1E1A4516EF7F3CE54F0BEC6754487A73967F6D01E0E228EA7124211F5AC426248779B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

198f2a20

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\198f2a20
Size 28.4MB
SHA256 6e7da7c8ef52719e1e194c99a5616c37b619c641af818d085560628de301af04
MD5 ac7807b98925f9642b300afd61afdae6
SHA1 26ec41b3c45cef8ca8b6f6809c635724626faaf2
SHA512 0420c8a61efe0299a7000d430e851142b197871f4b0ed6e33c60de7d52d2358590975c33851e43ab6b388e31f9e6ebf7e2cb6225c5e92a229c105da565c7f2d7
SSDEEP 196608:uE4MJL6OGzrpR79PnKPBv00IbW8p6NMA+31bGb34+1VVMjbCtuQ/OHAs2:KMMOap19/KPR0Zz50I+5Mjbou4Eb2
TLSH
T1F2676D07E29350ACC56BC170876AE733A631785D02B47A7F2695E7B02F22F90775EB18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2054ded1

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\2054ded1
Size 11KB
SHA256 b7ee468f5b6c650dada7db3ad9e115a0e97135b3df095c3220dfd22ba277b607
MD5 7a859e91fdcf78a584ac93aa85371bc9
SHA1 1fa9d9cad7cc26808e697373c1f5f32aaf59d6b7
SHA512 a368f21eca765afca86e03d59cf953500770f4a5bff8b86b2ac53f1b5174c627e061ce9a1f781dc56506774e0d0b09725e9698d4dc2d3a59e93da7ef3d900887
SSDEEP 192:vWOPWthWAWf9BvVVWQ4mWWbgftmP+CjAWqnajKsNURPblh:BWthWFN+f8P+CcWlGsNURzv
TLSH
T1EA421B828FB89443FA976E7082B4EA937D3967D639108139066AF15C2CD33C1FB11A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

261c5b43

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\261c5b43
Size 11KB
SHA256 dd14133adf5c534539298422f6c4b52739f80aca8c5a85ca8c966dea9964ceb1
MD5 dbc27d384679916ba76316fb5e972ea6
SHA1 fb9f021f2220c852f6ff4ea94e8577368f0616a4
SHA512 cc0d8c56749ccb9d007b6d3f5c4a8f1d4e368bb81446ebcd7cc7b40399bbd56d0acaba588ca172ecb7472a8cbddbd4c366ffa38094a832f6d7e343b813ba565e
SSDEEP 192:ZjfHQdufWthWCWf9BvVVWQ4mWMlUteSP+CjAWqnajKsN0c:ZfZWthW/Nd4P+CcWlGsN0c
TLSH
T1914209978AA85943F6972F7052E4EBC3BD3D6BC2292182664156F19C3C837C1FF11A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2dc97ac1

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\2dc97ac1
Size 4.4MB
SHA256 4496a1bd765316ecd8df69f83327b459bf4b031e01050d706056d47e7ed0ab47
MD5 ce94701e4a5f5b248833d6b2967835ce
SHA1 4f81253dd03bf8cd9d4c4fa524eb2cd325cb7bf0
SHA512 a4337f1bc4de35bc5e55ab8b481eec4f57842119be1dc754c7fc45264857d961877beabaa05666a4f86b5619cc08955af9708864288b4e9f51759494ba757c4d
SSDEEP 49152:9GtlqUTVwASOJpIU6ivlhC3KxdUV2y6mGFDyyqPaIrWSmBTwdFsFfi3YPQLFvX3S:QO+n6VHTa6cIJfjA/x9PF0e
TLSH
T107269D69B5BC0055E8BA91B8C3C7622BD371B52503F057CF6A6496F90F67BD01ABBB00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38824810

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\38824810
Size 13KB
SHA256 7102f8d9d0f3f689129d7fe071b234077fba4dd3687071d1e2aeaa137b123f86
MD5 972544ade7e32bfdeb28b39bc734cdee
SHA1 87816f4afabbdec0ec2cfeb417748398505c5aa9
SHA512 5e1131b405e0c7a255b1c51073aff99e2d5c0d28fd3e55cabc04d463758a575a954008ea1ba5b4e2b345b49af448b93ad21dfc4a01573b3cb6e7256d9ecceef1
SSDEEP 192:WxSnWlC0i5ClWthWTWf9BvVVWQ4mW+hkKVT/gqnajKsrCw/:WxSnWm5ClWthW+NkK1IlGsrCY
TLSH
T1C352F78387E8AD13EAA71F7112FDD7D73F3D5A8614538262800AE16839D33C07F16999
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e730250

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\4e730250
Size 236KB
SHA256 3753a1ea070c649dd82047eb054cb9bcc985f2266583d3911afb3ebff4e62fe2
MD5 c2556878d32b81170d6b29ee0dbe850b
SHA1 7b0eeb595f6b4646dc64b980bdf93a26250e8a10
SHA512 0bcc6362f3a5326b0f71c699f2a758a4602d0ad611d428e8170e04112701ce10c3d398699064ece64999e8f282024439a2b1e5eaff405621f7bcf09c6e2626cc
SSDEEP 3072:hJpNfNJwa7pqx3sBmz2SSdheSW8Y+PpTcVQK8FnPsekg2YOEC7uDjdMOIN:hxvw4pq9sBo2SSfeWVcVytOECGaVN
TLSH
T156347C057BA504B4ED779278C9830A12E6B27C150760EBCF03A1836A9F2F3D1A57FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57aeba21

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\57aeba21
Size 15KB
SHA256 d899c2f061952b3b97ab9cdbca2450290b0f005909ddd243ed0f4c511d32c198
MD5 f1a23c251fcbb7041496352ec9bcffbe
SHA1 be4a00642ec82465bc7b3d0cc07d4e8df72094e8
SHA512 31f8c5cd3b6e153073e2e2edf0ca8072d0f787784f1611a57219349c1d57d6798a3adbd6942b0f16cef781634dd8691a5ec0b506df21b24cb70aee5523a03fd9
SSDEEP 192:eUW9MPrpJhhf4AN5/KihWthWBWf9BvVVWQ4mWRXwsD7DiqnajKswzK:eUZr7HWthWUNkGlGswzK
TLSH
T14072E6438AF87F17E6872B3316F9DBC75E36638626108179C867F09838C3781BD5661A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

59fc0249

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\59fc0249
Size 17KB
SHA256 f9d3f380023a4c45e74170fe69b32bca506ee1e1fbe670d965d5b50c616da0cb
MD5 55b2eb7f17f82b2096e94bca9d2db901
SHA1 44d85f1b1134ee7a609165e9c142188c0f0b17e0
SHA512 0cf0770f5965a83f546253decfa967d8f85c340b5f6ea220d3caa14245f3cdb37c53bf8d3da6c35297b22a3fa88e7621202634f6b3649d7d9c166a221d3456a5
SSDEEP 192:hA2uWYFxEpahDWthWDWf9BvVVWQ4mWR3ir+YVqnajKsSO:hIFVhDWthWONlfVlGsSO
TLSH
T14B82B48395EC7F02E28787732AFAFBDB5B35578228047178C503E99839C63997E0355A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

670adc5e

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\670adc5e
Size 13KB
SHA256 b56bc94e8539603dd2f0fea2f25efd17966315067442507db4bffafcbc2955b0
MD5 1d48a3189a55b632798f0e859628b0fb
SHA1 61569a8e4f37adc353986d83efc90dc043cdc673
SHA512 47f329102b703bfbb1ebaeb5203d1c8404a0c912019193c93d150a95bb0c5ba8dc101ac56d3283285f9f91239fc64a66a5357afe428a919b0be7194bada1f64f
SSDEEP 192:ENDCWthWHWf9BvVVWQ4mWG5xqcVT/gqnajKsrC/V:TWthW6N/xqc1IlGsrC/V
TLSH
T16A52F98386E4AA0BFAC71B7112FDD7D77B3953C2298061768117D4A83A83384FE5396D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67b52ee6

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\67b52ee6
Size 62KB
SHA256 785c49fd9f99c6eb636d78887aa186233e9304921dd835dee8f72e2609ff65c4
MD5 d76e7aaecb3d1ca9948c31bdae52eb9d
SHA1 142a2bb0084faa2a25d0028846921545f09d9ae9
SHA512 52da403286659cf201c72fa0ab3c506ade86c7e2fef679f35876a5cec4aee97afbc5bb13a259c51efb8706f6ae7f5a6a3800176b89f424b6a4e9f3d5b8289620
SSDEEP 1536:2PMeDe5c4bFe2JyhcvxXWpD7d3334BkZn+Ppzh:2DDe5c4bFe2JyhcvxXWpD7d3334BkZnU
TLSH
T1C15307DB49E63F21E18FF3B76BFB13C90B253A4418806274EAC7556B34853A9BC53A41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73f5bd0f

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\73f5bd0f
Size 94KB
SHA256 69b53d7c5d7e81bdbbfeb6c5bd3b134f20b9d032867946aaf2b8fca24a21df48
MD5 df35c3a452ca19424bb738d727dc016d
SHA1 2de910b3df393f2c80af848116d5a0d15c0c9c28
SHA512 3f4b187d7d38ac26aaeedd10d4f632923f0ad0dd78e40a4937d736d7eeac9468c96e79eecc0d5e81af55bc04c5e5f917c0079eec1771358f8357ce28e81da74b
SSDEEP 1536:uylNzjLzZDlklnzi/F/9uqf/DOiUK+lsI5kwQ7HxOUc7sUrxd:ZlNz1DiFi9gqgsI5kwQMhIK
TLSH
T196937BAB7A1C04D9C02A943DD8E68A15D373F8814B5283CF1761C36E0F2BBD56DBE691
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79973d63

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\79973d63
Size 1.3MB
SHA256 dc4742626360102a18fb74b48cb6dd6c634a7ecf3811769e413618ce336e7473
MD5 74e66a3723aee2dfca772c5225f04bfd
SHA1 9260f309c9be5baecae5aa759040bcc1aa9eb891
SHA512 ed2f1f3baaf2a61170d24eccb732dc7e144219a2d3d0b946816edf3af811687594e1cfc2574331ed304247203662d2f35c4442408d8c36b54eb8752dc5f30144
SSDEEP 24576:OiAAmo0nJZ66m66K66k6FK66EFFH6FS66q66w66jFFyDDMU66m66q66hVFomDD21:iAx0JZ66m66K66k6FK66EFFH6FS66q6F
TLSH
T1E8558749D366D343D9A2F77AC86C05B2A228DC91BB46F65742CB622A4FC379E17F3440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79bec4d2

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\79bec4d2
Size 154KB
SHA256 7b53a3591114dd1bc019a719f4c8f17adcb0e97292d1e5d6c1236fc14e6cc9b6
MD5 6f34e1c609d1de918ed0242a319c638f
SHA1 c1a4af05d5308134ce3ade334a10065e7abde097
SHA512 1d0ee22b151f821df2abfcb146683ae67d1a0e45d05ce48987649944a3dc741e141d703d0d31e9e1cfa61f7875cf8727ead85cda9f258984aa5e21abc0d93e3f
SSDEEP 3072:gyPKY/+AW10TrKuEkIZqTXQf12OMWSVMEm41A/uNMgIX:gJql00rSZqTXlWSVMd41STX
TLSH
T1F1F32A16F29800F8C06AE3B8A9865916F7B27885C3625BDF03D486605F577C4BFBB760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ae80ab8

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\7ae80ab8
Size 847KB
SHA256 7606a923d3bd46d1c3249d5da934e4ddea2f12c7e425a29b77ebbfe94afe1bdd
MD5 3bae694f53c67f13f36326852b6b6685
SHA1 796de5f5b228c682348c13920cd91fdbef74e3de
SHA512 9c53232b0fd85cbfefc8b366d6045077b7ef918f7430c074898ac9f044feaccb85ebb845bcdc3f07210518ba9a55b0065e138296487d912f27e70d0671046d66
SSDEEP 24576:oiue1aTP66m66K66K6FK66EFFH6FS66q66w66jFFSDDMm66m66q66xVFomDD2qSp:iMaD66m66K66K6FK66EFFH6FS66q66wN
TLSH
T1570543849396E343D692F77AC89C15B26234CC91FF4AF617839A522A4F8335E1BF7490
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80d75a22

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\80d75a22
Size 367KB
SHA256 51abc68b380b62b34128c4584d7ab0bec0e0b3fe3b0838b8abb93d95d4c554b3
MD5 e32d40e151370e21c00348f3bb481698
SHA1 1bd9100c025933c0bec9f08f47124bea5ef8b0f0
SHA512 de3fd00a5022c94e04e95b978e78febba4c6d2f839b6f8c5068acf04ba3b7e18271a060feca052cce3db961532b4c76b4c9107b25f16d85a142c622c6192f578
SSDEEP 6144:OV6qDk6VwiIEqGL1LFWEKKFNLzVQxxiG7Gx1DgaY+66PFhLomN66o66d66OEFEkm:0Dk62ilhLtKsLzexxogaY+66PFhLomNZ
TLSH
T170847B06F7A914A6E063D23CCC9B0512E7F5B8450760E7CF03E5825A2F633EA5A7E761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86a0f9f0

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\86a0f9f0
Size 1.2MB
SHA256 d9f71c68b5d75efcb24d83c25395900047eac38338bfa3466ee9e73f51608f88
MD5 e8f155264bcb5fe4e91872784ac1698f
SHA1 63f06f020ec90f1a40b5e8c3fd9df466385e107c
SHA512 b4111ca37a8b46f92db6fff35aa0dbd63cf9f62aca77a26f116a2e26ab9a735c86b4246ceae7727691073d19cf96b2fe0129b862907b5638ab24c5458a739568
SSDEEP 24576:V2imfQuoDLkKcEUSX+j66m66K66K6FK66EFFH6FS66q66w66jFFqDDMS66m66q6s:VblDLkKtUSm66m66K66K6FK66EFFH6Fp
TLSH
T1EA5596449396D343D692F77AC89C1572B238D891FF46F60B839A522A4F8339E1BF7490
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88f23135

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\88f23135
Size 696KB
SHA256 a4f6edde4340ee5956cebf5a61c4c50b14f7c05064d4ca4a20dd91a390d42426
MD5 8db475da7ff1f78cf2d73bfc9daa7999
SHA1 b0187735bdc7a82083c5404eccb86134fc4002d8
SHA512 2b8b0a85c5bdcdcd4c68bcf114dd0d8b751275c024cec2e7904010a0fdb159ea54ef17c88cb16f7fa6a654e1cf95e98e38094ce2c3368818ce59243f300af69c
SSDEEP 12288:dJmi2pG1OYG55laCrST66m66K66K6FK66EFFH6FS66q66w66jFFQDDMx66m66q6a:+ia+OJDLST66m66K66K6FK66EFFH6FSF
TLSH
T139E4F848E796D343D152F73AC8AC05B2A234EC51BB46F64783DA122A4F8379E1BF7590
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8fafa95f

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\8fafa95f
Size 11KB
SHA256 2eb96422375f1a7b687115b132a4005d2e7d3d5dc091fb0eb22a6471e712848e
MD5 dd8176e132eedea3322443046ac35ca2
SHA1 d13587c7cc52b2c6fbcaa548c8ed2c771a260769
SHA512 77cb8c44c8cc8dd29997fba4424407579ac91176482db3cf7bc37e1f9f6aa4c4f5ba14862d2f3a9c05d1fdd7ca5a043b5f566bd0e9a9e1ed837da9c11803b253
SSDEEP 192:m8qWthWLWf9BvVVWQ4WWLXlyBZr+YVqnajKsS1:mlWthWWN0uZfVlGsS1
TLSH
T1C0422B838AFC5443F5D36EB056B8EB8B7E3D67C3291581590156F5A82C833CCAF41A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

983a351f

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\983a351f
Size 569KB
SHA256 c9c3eac316cfaa954e4af4e128509c4bb58a047e85f72dae72699e4fa891ecd3
MD5 aaa09a23f83f6f0abebfdf194b691aec
SHA1 4d7be2b40d3dc56d951e9680c8c6fc41d86d07b5
SHA512 2f1c7b30f59bf3a4e139a3a749e666bb7a0aefdf7e8b08ebe19fb097e9e07c3f91f8b7477d7b22be15e6de79df86a0ed40a9f837974927a9b87124653a16c1eb
SSDEEP 12288:7SuyIY0ZzEXJAdwlLzLgT47gVIdmC8AiAPQzspG:O1IY0ZzEmongUkVIespG
TLSH
T15CC45B13FA4801AAD26AE17CD6578A15D3B278C5CB51DBCF11A9C32A1F63BD85A3F310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99630c8c

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\99630c8c
Size 20KB
SHA256 a768339f0b03674735404248a039ec8591fcba6ff61a3c6812414537badd23b0
MD5 a6a3d6d11d623e16866f38185853facd
SHA1 fbeadd1e9016908ecce5753de1d435d6fcf3d0b5
SHA512 abbf32ceb35e5ec6c1562f9f3b2652b96b7dbd97bfc08d918f987c0ec0503e8390dd697476b2a2389f0172cd8cf16029fd2ec5f32a9ba3688bf2ebeefb081b2c
SSDEEP 384:rQM4Oe59Ckb1hgmLRWthW0N0JBJ1IlGsrC5W:sMq59Bb1jYNABHJc
TLSH
T17E92C5474ADCFF67D18F17B701F08BCE6A381AA664D6B1B5C81B91C834A27C07E83959
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FPXGame.dll

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\FPXGame.dll
Size 540KB
SHA256 777c580882a91f40c417c899835ce4ab8a526b737c04a9598cbec814ae3a96ce
MD5 815f49cded28c4a33b7ecf1de3a0a53e
SHA1 fb98eb90e6ab541bbc440d1471651035362d9169
SHA512 f23fdd92dc901a9f4409d47043d34a47092e588169452fc11f5f1722f9a35c2786407933c399c288bf12e6e70e2a50afc28a02b36e9b9f0d9c68b590b2ff68ad
SSDEEP 12288:eHuiaDQFJO5/WrlM210DYj69AMAo/9D9+A:edaUFc5/Wrl08OJAUF9+A
TLSH
T1CEC46C0DA6A907B9E0AED138C9579E06F776784903A19ADF03D045B21F237E05E7EB31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2c92548

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\c2c92548
Size 17KB
SHA256 1a916c0db285deb02c0b9df4d08dad5ea95700a6a812ea067bd637a91101a9f6
MD5 9b79965f06fd756a5efde11e8d373108
SHA1 3b9de8bf6b912f19f7742ad34a875cbe2b5ffa50
SHA512 7d4155c00d65c3554e90575178a80d20dc7c80d543c4b5c4c3f508f0811482515638fe513e291b82f958b4d7a63c9876be4e368557b07ff062961197ed4286fb
SSDEEP 384:jvEvevdv8vPozmVx0C5yguNvZ5VQgx3SbwA7yMVIkFGlPWthWXNjqujGlGswz7:2ozmT5yguNvZ5VQgx3SbwA71IkFFaJft
TLSH
T1E782A44346F83F02DACF57B359FACBC31A384F8621415275C467A59C38827A6BE6B90D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29d6cd38

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\29d6cd38
Size 7.5MB
SHA256 82321da5eb7b0f9c5d3c2e7695a3cbe7b212e936bbce931b065e9b844e3654b9
MD5 b2765c821ca543068cbd66e6f1c8c877
SHA1 0720d4b98d1c22776ca0a9bd908788c62064d509
SHA512 b77abad974b36b0c345cc2b97b67147ca6c950cb64489d94a80d8d4c8356aa515a31aec64ed26efc5aba40e7d51e59140d5f754f4bbff262ecf5a2748feb0cfb
SSDEEP 49152:qQFwX5U7AHQLh877Hf+KwqsRTZ90NuXZSTiAb7GJJjKBZdhB0cn5LlXNQYMq7PU+:xFqS7YQLhO0dJAvN2s5
TLSH
T195864B1FE46A01A1D535F276FB8E7BF5A60478DC8B30A34A19DD07A67E93E6005CE123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2225f5c3

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\2225f5c3
Size 280B
SHA256 b6a59f1792a9a2dc6b9a4731e961bc262d38b72b8e8be9b7a85e7366d70c1888
MD5 b47765345c0c2e3411eed0d259b84bed
SHA1 4d9f95a4316f432abb12a9170e64bfc2f5807671
SHA512 df89173c708bd6d197af9ec3cfa60e8b7630a9b7db5932cfac5a9b21636ebc491a2f6a3f5badc3967b91cc33a6e1343474fac87675cb73f9dfbba09bdb4d367b
TLSH
T131D02BD7E8041BB5404C4506B0B203833CA42B047A45EC0DF3A40E60E27012C393537B
MD5 SHA1 SHA512 TLSH

Submit Download

44bbbb9d

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\44bbbb9d
Size 98KB
SHA256 299df115b83bf31218864db86ba5f70d7c27216cbc21f6c941f52131cec0555f
MD5 83062608f1d62751f42ef91ed7231425
SHA1 0aa9676016fe4a508132988492b0017181859ec8
SHA512 a806713d8383f2ae520eb915df2189d02bd33b5a6f88332a5231302b66e78e6f93a6a8e611a8a4a400348aa9c0b7b2ec71f35b796055cad02ca3ea5b72ebb6a1
SSDEEP 3072:x2ZjRM8Svxz9E4YLp2A1oZo4vYb+k/eVd6G:4rM8SvXjqoZYNG
TLSH
T127A302C21474A4A1070E19E05584CAD27BA77CAB2ED8986B5824CEFFF071863C73DC5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

821a499f

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\821a499f
Size 3KB
SHA256 0cc48db7b04a1ccccf1f541d6adc34ff217a21af56fc264e23e789b7a4d36066
MD5 aed8ea0a148c286fb54becaf0947e4bb
SHA1 4258efe8a4f49bac7d510bf11b813a6a58bcca9d
SHA512 7411a682af9ffa2fdeb1ffb9cdba38cd28c585dcc897eb6a17f7e1f5210072ce920f8ea2ed75538d23802314ed5460eca0f370b5dc44d82bc30d8aaf2c2d9ff5
TLSH
T15971E802412996CB790EA01AB9D67E895C811B144521FE4FFB78BF3371E3A6590B7CBC
MD5 SHA1 SHA512 TLSH

Submit Download

25545eb8

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\25545eb8
Size 297KB
SHA256 d3b3d12efdaceec5fafc1e5ec4465a1924e3ce272de31c54e9250ade1d43f781
MD5 b21ca78fd238cdee95441963bde52425
SHA1 70c3391f76e43c44a53d9366046b9e32780f895a
SHA512 dcf5273a9f8e0e379e12ddde5ff1c1dc2f8eaee5f86e16b83547a383018b2053243bc2da05d1ae05c8b5e70a930cb0c6c6a413902858f4a993b09587efade5d0
SSDEEP 3072:GuqBN1P7BGyFcxOh7OZnf9qt88888888888888888888888888888888888l:VqXB9GyFcxOhS995
TLSH
T1EB5496144A558EB1D1B6FC7C82643297425CE7CCDD028A6A95AFBB3C71CEB2817E07B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25829046

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\25829046
Size 44KB
SHA256 5be8a9c46c0672b232033dad0fe294f26eebe75eda142ab1582fc21ee641af51
MD5 4ee7dcc2963e5489d1ef2c1a63b4dd48
SHA1 e1a4969c1f75dad29e3daff482dcbdeaa252b40f
SHA512 0782cc13e621f999420349fab69dc33ee4714b1d77ae3abcc95ade71c8de10908db7ba5fe06b6918557c872b90bdb668fe0b2ccc156f457c667cf41fd6d234b6
SSDEEP 768:79ZLU1xFlaopDsd8mCmyA/mDQXsIfttqzaoK2HgdtkmyS0sZqzAB0u:JZLU1xlDxAm0PCGZy+ZqzAn
TLSH
T1ED233907B793DE5EC91ACF35E396C764B70EBC90FA92960FE98A2040DC4B4E055E4AC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

321b61dc

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\321b61dc
Size 46KB
SHA256 e0ff620f8ddb1c5b90e7be91555d34fb60aab56e06afc104e9a00fadf3211b50
MD5 43c7b0a932e2a442e73df8a1bb9b297e
SHA1 f2fe96d521522f594d19de5a79afc998774e465b
SHA512 027e10c03fb284748f3d34cf48d72912aca2e3e559d1e2cb2576793596bc67c74bde5e5e6af82417f4b93900046e2b25ce65ac94bf72fb6d014ca9da2c193d5d
SSDEEP 768:B/2sJd4aoLTFtwWX5/45Heq18DHAvYlQFy5lrPEaihAAIetOkoXCdK:glF94R8kacA+tORKK
TLSH
T18A234C16B7139B0EC5626E78C5B28370BF31FD62AAE3930FE5915E6CB84B0C15D007A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33898b42

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\33898b42
Size 86KB
SHA256 80b46a7d764b786609400d3f15252a94d61a8c880b70b6ec78d9caf72aec52dd
MD5 6776ce587c69b79fdf2fca5f738106d7
SHA1 08aed655535c1f2983ca53ce14f11264d961b081
SHA512 c29fd75cbdbfcc68932dc91283b34278c9cf09015279ed0fe646976653439ea42191cb2dd257b3bc244441a0adf18b7361537f2e61b28036258df88dd1ee7926
SSDEEP 1536:Ta130ckesZluMvruZ2buTMgEmmYZMriaZG5+tb6LusoW2+tcHJr:T51n8Z2bXmWrdl6wW3cHJr
TLSH
T103939E03A76F7E43C47531F9491C622CD2DAD615E625E7EAA847EC05DCDA0C80909FBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41da1b86

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\41da1b86
Size 87KB
SHA256 432ccd0628787c5f2f288391e04d453a6313baeca85c4c8a31e4721751d34bfa
MD5 49bf5476b7978b289f35e04196ca8efb
SHA1 333234bc94ed58aa8902372c0edfd59748f26a83
SHA512 148a1848b253cd63e1c702735371ba6358f7a7ba5b76d0a95e049f99163771d44224fcdb008ab9e6b5d8fabacb081c3b38f235b1d17ab55bccdf9c8dab099de8
SSDEEP 1536:+3FtU0O8EK3ESpYKOcRDr40BMxpl6Aioy9kV3PI5OYFF2QCMwcrFLJQ:+3k0O9JonOcR/43riDaV/iF1CrcrFLJQ
TLSH
T1BF937E036B5F7D57D82636BC4C1C212CE3CBD516E611E3EA9987EC1598EA0C90909FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56b7df1a

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\56b7df1a
Size 68KB
SHA256 8543b06a8971922e1dacf9a8e361c23d035b3fa1541edc9360ff761f26680160
MD5 2756ccf682370f6b02b801af02c4f3b6
SHA1 c56a929471fa88e01dfcca3dcb0f9d28dd476f64
SHA512 cabc582608afbb280b95b6084c39c26e03a2d77bd84548030ba236c7c6e0a97e7affaa4a58af5dac87619fdd2b27ae513957421bcd5b865f6faa7022c0061c66
SSDEEP 1536:fBlycRj8bMkPN/IqbDJQHCgKQjNdScCx/aJBEqrtF+:J86wMIyHCgRSeJBEqz+
TLSH
T135636C437712FB09D213ED398B9397329B11F5221A9F930BFA861578EDCB2D40E59389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5c4ce633

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\5c4ce633
Size 440KB
SHA256 9b3ce842db7df5c02b794b130b695c3c1d681d34531f8d1b9000f13b8a2295b6
MD5 b9df4da3ab9480f69367fdd414ccae64
SHA1 462762f904c31fb2b0a7d16c0a76bd582b3964ed
SHA512 d75b6fcf66d8445798276d6052d1c1ab2a010abf8c72fe4a3004fc2a8385b5561ec13a909bf9e5fd9f05e61fd8798fe72d4a5edd9222d60678a6295dce6c2797
SSDEEP 6144:t8jF4nfvbZCp2ES+zUp+0d9qGRtVDSkFdAs:t8jOnLk2ES+zU+s+kF5
TLSH
T142A4290F80A6DA3BDFDA1F370844874615B5968DF061C7AECA63A06D763C4F844A8FE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68f21d40

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\68f21d40
Size 445KB
SHA256 070a123fdb5271c90348e50b559c89a142934d63a46e25da5741eace1d188cb3
MD5 c9c42e31d4485a27ad0f991d17079251
SHA1 e0b45fa6c5c5bb164121544ef8d5fe1de175fbe3
SHA512 680e9f4cef72ff7edd02390bb1443829eebc5e1443d1a5c5a29068f00aa7b034b556b51f8be84a79893c2c044309056e2af3bb6415f911d8a813f1f34d9449aa
SSDEEP 3072:Sh9/nzPgPrN9HXSGY4DWnIQc2UZgmCl7OTmvmJHr8mFpSBBBBBHSqDX:kRINUH39IO7l7jCHr8epSBBBBBHXT
TLSH
T162A41927A833BC82C7496732C813679B7BA02BC66440B27C5B0A351D716B1F5BDB93E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

792e3718

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\792e3718
Size 444KB
SHA256 eb0428bca95fb6c22125143947decd203e9450de1efec8c49d559cebf243914c
MD5 9d1d808a321bdabd1747106c2e7f1663
SHA1 cea7512c3a87d4fef92032423b99b3b6924781bf
SHA512 55c4b89c85a7b054a253c1cb252dabf3b5590edbb726f9c1a49ebbcdb04cb407e7aefd5504d21ed8ef31f855221b40faa302ca132fdb360a32e8d7e52e65a131
SSDEEP 3072:E8jFN36nfnhjqjxCpDaESra/yyPVV24O78BoAsAELDT0//V5qG4mtlaffffffffK:E8jF4nfgCp2ESU9pbqGRtlBeTTM
TLSH
T138A4E900D71B8F21EEE8337D4CD1D7D71090E986B5E6D7988A932C89B8AC49CF1E61D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7be3507b

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\7be3507b
Size 298KB
SHA256 56b7666dc45815109d4b9e80669685a51a03dce2fe63ee6a686acc99d11a7653
MD5 bdd405ca739868614d08687573d34f9f
SHA1 f4927d676931775a46d4f4f9a2028dd93262b003
SHA512 035e65153c7d4b412be5347ae09c1d5bde3860950a9603d27cb060ef235d4fe2a4ebb5b12ece505368d2efc6a0f0ac9d75cd379ab80166671cc10b1ebebd80a1
SSDEEP 3072:tX1Dv20+o9vcuiLhkhLyK/Rpx/vUZBgCJggo4xGyM88bVJug6J:3z2hoWLhkxN/Rpxn5avxGyM88bPu
TLSH
T112541BABC782E4F9DD68CDB1817892AC2606BF7152B6C03BBB473187D1AF841CC74656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b678bcc

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\8b678bcc
Size 40KB
SHA256 3fe63499b0ebf6e995f14f545b4e4846e1f310ceaa680934e9bac7f1947730ba
MD5 88e23fdc8ee1dc0588187ab0cb015c78
SHA1 b02ac1fcec3b4f13ec35804fe054c2baeda43ae8
SHA512 e30e177bef1461ba74048e1482e846f5df948f065c4018a4c5a332a6e6cd2920b9d2d0030331f19ec93483e2993085233250cc3df0edaf88666d3a5727bcc1f0
SSDEEP 768:eF0NiMMiW4jUrN1cfs3x3GnXR5bFxr+p7CdfKtXIrHG54sCfT:eF0MMvs3xGHbFmCl
TLSH
T13A0309276343EE8ACD128F394739436E2712ED559512BF1EE06F7794CC832D60A289F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8a4443f

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\a8a4443f
Size 26KB
SHA256 9be85d84b0ecf1701f36055c9c29c990050f0593c39e04246534f6f22185da8f
MD5 0700039dd21781d8eb1d9b7de6f4aab1
SHA1 2166d9183fe2c6b1753f575f33e2e47b95b6fab1
SHA512 68ae0734398bfd1f019cb023bb33ba3384c569b0aa4b70c652048ce954cfccde71de3018a16c35c4cc7dbf992b9f9ddc4bc2227ca3e4e693a5e751c58f9e7ea9
SSDEEP 768:iCTYe0GgJGmYuBqhdtKl+m3pusuVhM8YPHb:inGgImYuBqhdtKRESz
TLSH
T1BBC22A16F703125AD9137A7D2EE3E3791F20B822EB76920D71C39966EC9C5044E97F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d01e9da2

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\d01e9da2
Size 287KB
SHA256 183de7abb48aebecafe505251e470fd692eb6702596c30db492ef965b5f289ed
MD5 1b6474227d8ca3d86afe63424e281c77
SHA1 c2397e9fec6a06efd408ee8c05b42cce03e9a284
SHA512 ea516fe2d6580b89ab67c82ea0aa0162958e219569ce0f9005cfa45ff9a99ecb5afad18315d307e3333d9d4921fd2c910fc325aeca8c495588690138e4d55020
SSDEEP 1536:L3n6n1TKtoGkpVdjaBMc3JVYqtz9xKtKIYAebFPeRCVLyY2iW+Ldw+WGKzsJDnuJ:L36ot2pVQBl3JVTtzHK0IkFiEs
TLSH
T18154A601D368C587F23ADB3481DA3D2AF159F2D9F700CEA2B8E5937B524E59E29C1247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d383cfb2

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\d383cfb2
Size 44KB
SHA256 4c63538dc550fda35fa7633b7af07b22b2b0e76fc71a2ba0b4377b637af1255f
MD5 3958f2a10890276ff49bb1058481397e
SHA1 d6bf64cc4d3133dd90b418b51f794de29df5bb86
SHA512 110b27fd90801a78de36fff65bde1546b719d8b679be56df2768ff0eb0f36cce55aeb46c80ff96e063df1ed01fbc370d45b1bf176b8da628a47b7aaec5c24eed
SSDEEP 768:jDTH50A7BL3D+dX1zOk8Yh3n93GMDhcNuLTLZjgyS9zV8p8oxu:jX5sOkvh3noMNcNuDZjktV8p8oE
TLSH
T19D231A1F73428A0BEE150E3049A667D1ABB8F85D3B5BA30728C81E26FD664D90C953DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4138cd4

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\d4138cd4
Size 327KB
SHA256 fa474955ec7da1c4f97917994af54831c4c8bbc3ab020269c0f921197a59fa4f
MD5 d6b0c29d2572e79121f89d971a98f386
SHA1 0801c20419d04e3dbbdbac9f9c47ab0dcb4fa726
SHA512 6c6ef367898ba179ba2caa4267beedd47b9c6c9fab1ec8b600228003f80c2541d73f6aba652421bab1fed22142b04ed8514057a67a6569131b9c86d1988ffa35
SSDEEP 1536:a8znpRpROaGHvdMD9KnCPMaRTe613Goi589bySj/UvtUzJOmeU9swbmal15vPLcR:awpJKvda9fPjRN3Gom8BUmzJZ9HVv4Co
TLSH
T1C564E979D29C1D25EA3B6B3C8DE93AE64368B20BC40BD339DECD845921D5DE80D802DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1a52094

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\e1a52094
Size 54KB
SHA256 40c10a63fc8d77f67ebe021e1ef17ce2ed749e123b60b208fa52437a985b530a
MD5 7a3a97428ddb18e3415ec965c64f5b29
SHA1 679a1c49dbb9d749ccdecc406c52a2f992ecade4
SHA512 e3f1255db34dd1342b631b3d6523ef6d868d21c9072208a4eae570b62f046430417b137ad6478d6959f482dc25d6befd760ea65a9da51607fa2b01d3742b40fb
SSDEEP 768:/MtEpKAV5i3gY5RQ4B9qR49L3JDrtNcEsIGDtqcI4fiHK2Hgs3MqGs8:/JpKA7iQYDdB9qRI51kEroUS
TLSH
T15C434A1FFB739A9ACE26CF3D875293747796AC222ABB430EE1C11784CC474844999397
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

latin_bold.ttf

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\fonts\latin_bold.ttf
Size 46KB
SHA256 2ad8fdf546197177ebf24834354779ce4b7054bbe5be92401772e24ec0e768f6
MD5 afa7601a382dff79b3bd36af7eb4c785
SHA1 9423af81803b5a236758a79f14e33f9842600934
SHA512 77fc73234cb80bf2b3c56e1f1bf15d401bab0ff5c1f5e666cbd1508b162d8370733d3f190da624e1638c87dd288a3a495f32a75285546de3dccc6059a18f7be7
SSDEEP 768:HZPkFeHbyjoE47jmZjzle3DK56vzxczeurPEaiFuAIetOkAWKXCWK:HZPhCoEYjqjzIDq6vzxczfou+tOdW+dK
TLSH
T174234B0277229F46C572AF75CAB68320BF30FD227AD2A30FE6D41A64B8470D49D126DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12dbc1a9

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\12dbc1a9
Size 1KB
SHA256 0f945a74d31f0bc545f64f2cadb959e263a557f30e3d5bf006f812b42e837805
MD5 afc599bba1751782efc40f43a2dd2405
SHA1 4cb989a5486b6382f37bbacccb82f52df179d15e
SHA512 95d3d13d4101cd2c1877be0dad7b53b7a74d5f4a8ee5d84f62bb696ff3d28525d42a758849a360e8c059cb97b5676998acf7cfde6f4d1c262012ef7f7604a639
TLSH
T19021EBEE12D63CC5441633F4A41A8A4EA3971525308A070BA8D44C54FD7FD62ECD19C5
MD5 SHA1 SHA512 TLSH

Submit Download

1d5c8505

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\1d5c8505
Size 270B
SHA256 e2c9a7a1da8c7458a5614d5ec1272f4511e7b89fce4f6c416b507f5795e65439
MD5 fb6b1ab5caac4b774113859ea260717d
SHA1 eb76ff0c5b0c458f183efc93a0394b58970f2f34
SHA512 077c204495173d20cca1df045dca038b63aa63c87bdc0c7f3de804141d4534b4c645324ea997329f682b06fce07c3b7fad00585963e1c240c578ddb2e78b239b
TLSH
T1EDD02BF6DD1B5C76964CC86712375CCACE39D0AD0508357F2A5887A2455C5092B85342
MD5 SHA1 SHA512 TLSH

Submit Download

1e8127ad

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\1e8127ad
Size 190KB
SHA256 3759fb5384f5b3aff71038fd3e6270ae5ad052e078ea27883e62872be601fa95
MD5 0a47403ee4bb92c8c67d1f7539eb0d1b
SHA1 a629b167e378261156dceb6039abf493169be97a
SHA512 388c5ee06f0e9c192bc05e7a03e7f8a2f050db854e80d9c4a2ae120c0a80ae10e554cc5a286394292f07663da7cfc03680fd9dd9d01ae92e0a783bae5f1a6637
SSDEEP 3072:i4ZF2kYNmWmW0sCF2m9jOvkBO2I1Blf8m2mUMNORv4cAhdJEgz3ShzulzR0cmFdO:d23oWd0s3QpBOVBd8mTNB6GzqFWr4s7
TLSH
T1081423A04BF9D6298413653075E9C4920DD3B20A8932F1FE35FAD241E198B6C35FF9DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

422495f3

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\422495f3
Size 3KB
SHA256 a202bcf6d0f9ca716235356ea635428df341473545798ee3a13802f228700607
MD5 1dd1dbb1096c04e565c39b74fc961513
SHA1 cf4b7756ccb26424004e74282c1bef6f8e276ae5
SHA512 bef6d8f39c19ae216a40937e711f98c38e30952e911b71b70ca97536945877a66223f2f268f6dbcc4704d83c5c891f979720247fc9829f5d49febd5fe90dfe25
TLSH
T1CA714B23E17439BC962BA1FD9D292FA64D364D58013644833DC326260F950E2EB2D89C
MD5 SHA1 SHA512 TLSH

Submit Download

436de0b4

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\436de0b4
Size 812B
SHA256 91dbd604d7e120fcf73854eaf9d38f09f021bfc632b4784ef3be76fc8d6f55c1
MD5 45b25d3316d90706206c2191219efd4a
SHA1 5a0bea420d8b233183084960565e1548563774b0
SHA512 87b0119a0f88a941c9200b55ceefa23b6513d1040e5037cb766975fb1663a5f90ac312780ddb038dd717aa0afaba23c52866dc5097bd66385531088f518e0ece
TLSH
T1EE0141C989A2EC7248998432A70B42FB541A7904D123A56A12E4AED65928D8A40D535E
MD5 SHA1 SHA512 TLSH

Submit Download

8788d240

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\8788d240
Size 2KB
SHA256 dcade6918182d45032ac4c0857942e008615214843ee76252580997fa49e6295
MD5 60b9273f05919954759d192d9d049fc4
SHA1 878356c92439b6c190c85926c6adb99510fe3a60
SHA512 da174061135b07c056d98c6c0104db11a48e8da9739edac1ef771be6a742e073a3122c6eb9c2d6ca8a1068025870d75851f879717ccb5696b33c3734960349c9
TLSH
T1E6513B512BA7157BBD2C43F59C3454A9FDD2829DD73DA3000A1C7F6AA0D9D40F0AC1B9
MD5 SHA1 SHA512 TLSH

Submit Download

88e8e3c8

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\88e8e3c8
Size 344B
SHA256 7ef2ad0bc525292168eec290d00a7000990fe9579de0ed27bc308b23dd7b8646
MD5 bcb5190cf10748cfbba6c7b954ac87a3
SHA1 61446d7bc5a33526c77ab88ae54558cf2ebb94cf
SHA512 ddd4b81451b5a7fb58a5df4ac744ae4307443ad18fcfbfef31a7a85214a98ed0e9866982730919e13d4e8a5f977fd944d1697dc0fa6c4cbcfd4402c3a1679a11
TLSH
T1A7E028D227C15562614C53364972BDC5FDF7B11C12919E0D1CC08DCD2D08DF647D3252
MD5 SHA1 SHA512 TLSH

Submit Download

9118a182

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\9118a182
Size 433B
SHA256 19788fba017473f09b972758f74d4e7f66f0842dc55873d1618afa0419863825
MD5 eddb00f6a7b58cce83fdc6e7518d9273
SHA1 01ddb86274daccefcbc2d8f18f736c815e862084
SHA512 cb14a341537b6c939030760164b07be79207a46de029e9c9f9c08f6faeb6620108ddc76869d05d2606e67482081688dfd50bf1bc11ca41320551fbcdbf888d95
TLSH
T19DE0AB35F7302E38E08368FB10320824E08817EFC36142CFBA0ACB535362155A41A8B6
MD5 SHA1 SHA512 TLSH

Submit Download

92fecda1

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\92fecda1
Size 24KB
SHA256 4329714d0ac819a87f8c3960b973a49ab9d71a373e6f54ccfe038c52422d3a7e
MD5 59409878f45642673db6da44c4a8b2a7
SHA1 fcc9311face96a19f6daa9ddd1c8c49196cd562e
SHA512 78290ca2f00cba69af25d010a33c68b0e25f4392dba18f500f0a52b1fb8ae80b499e2af48b86b19e26bf0ea69b7f6478580e7599b6e9f9bb1a926ecbbc9a70ba
SSDEEP 384:nD+mJBLxb9z+6cx+yxaqrUeofOnD+BdClZdR+h80VwczEI9uumQP:3d+LrtofOn7lR+1l9
TLSH
T18AB2E1BC48E8094DE87841FCD21F55B5BA49F080CC76567CE7828986E1FBE1E454671B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d031aa88

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\d031aa88
Size 323KB
SHA256 c58508fb9b5aa8f18d572c5ef00843d6a4ce2d90dd4d8605644e986fcc9240ca
MD5 17328b5a9467a8a2e92aef3f347d984f
SHA1 d62e6790f97a4b56e1319d577c4268857961b5ea
SHA512 f2660d32a8f1941c0a80724961c15508e661081cb9d7227713e23348e32f5c9a0daf893f9fc09568b113b1d23daba8a36a989c4f8fa6402dca54c08a141348a1
SSDEEP 6144:Eo392157cFGdvZy0qSB6FbhfnKiA5rcWBAInPdM32u4JzK6g0NLDOgTVVduz:Eo3yQaRy0qSEF1yiMLBrnPa3oJzZgSro
TLSH
T1BE64238EF03F8FCF51EA65ADD8D7602B44255B406FE133771847E2897904205B367A7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f2a08ee5

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\images\f2a08ee5
Size 12KB
SHA256 05a15d22647f1440bf086d9c6dccb1ac87b74ba6bac69a5e35030c974b20a512
MD5 37e7fccb6d1efe0f4cd9e408317774d7
SHA1 0fd0ee45ba375eab2f79a4d468128e603915d78f
SHA512 9392b0aa3e3736678198c1acbb6fa23e96dff26fde26a65c75fd558fb658a14396d33b9fce92c43096eae6cd62b657cb027bdf3073121f44c042311ad9dc5c49
SSDEEP 192:yaX4YMioBgQW3es+Vh5FYmeN/OnDd5xBJ0Plwh72uZI+o/9EqSeTFA+r2mUg8joz:b9nWeN/OnrxBJ25uK+oCdGv2mWozX
TLSH
T15242DFA4694F9D30BDC8031BB6E09C71D49210EDAF8F8509816BFB8F1742F96DE89B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1032f6a7

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\1032f6a7
Size 854B
SHA256 22f3c221ed5bd7cee49058a9ad0517bd04e12ad4068e297e01f93ecd43580842
MD5 0c985b37af26b5b85511553fcac3008d
SHA1 d0a49cf589e72daae3eba6ae2ca9fd40fc3e3efc
SHA512 e12c6400e7243c5fc1adb35f8f31729dc319a504f16935b15c51d13e5a3a12ae697e48765ff92bdb9f04768bb6585b78c42b7067b3a36b03f76baef3a009b16b
TLSH
T19501125BC8600891217922562A2DA659FD9CB75BCC343D5F7076815C9F27A870309C50
MD5 SHA1 SHA512 TLSH

Submit Download

1fc78e82

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\1fc78e82
Size 819B
SHA256 f6c8b33e1035066346fa8761e9249c2a0a5b091556da1533497d1411124ab194
MD5 1f4e02aaf9c62964f0e56f4e1ad0d0e2
SHA1 9ae41a31cd1524a4ce0f361c7ee863a11da94718
SHA512 1b37e7e48165c33a9967ee4c6e3f632eab1e75514ba2d73c86081fb89c1ad50f6a54546347996a08d0fd4cefeb063d6a9e7400bf91756a52f9107de5e85ae2ec
TLSH
T1B001414BC5324D6120B02555112A760EF959B74FEC2A390F307C628CCFF6D4B424A5A6
MD5 SHA1 SHA512 TLSH

Submit Download

243dd6a0

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\243dd6a0
Size 893B
SHA256 9dd2bc278da484be31b9b61e212e0dde699c50e7537ad0b74ce4ae30e98325e6
MD5 4a9ba4eb1f1577ae96ea693048e8be9f
SHA1 8f48788b9c49cb16f32f826aabc10e025ccca21d
SHA512 82835370fa3060e71b854ab5a47d106af61084b126d95595f38a8c4541426b4334de03a6f4549529b77de226cedc454dc606a38223c8e1fa4e611dbeeb301c0e
TLSH
T1B611E36BC4314D9221F56011251E211EF558BB4FDC2A3E5F7574108CDFA5ECB834A961
MD5 SHA1 SHA512 TLSH

Submit Download

32e6e3ec

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\32e6e3ec
Size 1KB
SHA256 5f8e97454fe401c0cc6858f74f7b40fc100c9852f55d49b71b3cdf0b883eac83
MD5 61f7306704d208d96c2939b6351b3f89
SHA1 b98cebf68d21e5d0ce273e78bd4b0b7c01812fde
SHA512 38f6ea90bd3d3fbe0f4f416c42ba607256a4112d185942b06acb598c00495050106179f1568503bd0bbeb5577684b2df0cd219b3eba157384996173d42bf13a3
TLSH
T1562161D6D8A34ED810F792410DD8F258A4DCE73BCB2F1656B878420EBF509820206238
MD5 SHA1 SHA512 TLSH

Submit Download

37d88ef4

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\37d88ef4
Size 1KB
SHA256 c081f1e29573060198f9abdecb578b762b64817e53bdc73eecb5f70573832499
MD5 bbb4e45881b4c351480aa8c0b46e445b
SHA1 0e7d177febc82b4fbe1dcdc7ad6c67410b47dcc1
SHA512 200d9f80a0cd836e17d0c53e90484d03c5e4e15d0c85a56623ad4dec42574ddf21ebf5a412b56a76eaf5f3f5cad5b6f6267f8f90a3c002633490125bf2b17fee
TLSH
T188219B77A46A4C5071641907162E738DE158BF4BBF32B8C670B8104CBFF4B4A8512DE3
MD5 SHA1 SHA512 TLSH

Submit Download

4187a1de

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\4187a1de
Size 879B
SHA256 5dd35deb753daee5929f6b1e348dec3d3ff740e662c5bdba42f05aa4885f5aa6
MD5 ed8680d345f34150aa23895be00552d9
SHA1 64083fb09e811d3491f925fe1796e979f29c7c48
SHA512 ad8f0b51154fb533d79f92b82fb713795e86c00f24e2b80adc10aff91c9c35d9a59747de5c2adf586369deb4e4df6551cab076ea5991cda5dbfa8c3397cb0bf4
TLSH
T19C112F1BC8624E9470B4A1252D5DB20CFA1CB70FEC393E1F35B8002D8F65A86464A9A1
MD5 SHA1 SHA512 TLSH

Submit Download

5cf04b72

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\5cf04b72
Size 858B
SHA256 2a722b535fe899ac727a1eeacc06a15a2da16c56a15dd0c4af2a02d604f941ff
MD5 7e4f39be104c8ff914cfb4de84d7cfbe
SHA1 dd570abbd4140e87a6d5b4c91b0d95af6dfba346
SHA512 a73b9505d23af43efae77e5ef3f73ee1a70465427d76e4d2211776d0cd751e7c78b35d2d58dfeed6731d7a6e9856c1d363dbdaf14a92d86ec314c47f6284f9e3
TLSH
T1DA11165F85510E4353B15059660E710BFA48FB4FFC1A2D5B70BC524DCF78E4AC35A451
MD5 SHA1 SHA512 TLSH

Submit Download

6bbcd4e0

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\6bbcd4e0
Size 898B
SHA256 5dee264e2fea3c275083b8aa9ef1c2a0edcdb0e8d1598934b6408623adf9b105
MD5 2f5db86b561d7c55622c662e267f678d
SHA1 3bf5ac118a451ce7478385ca706e344ab2f4af35
SHA512 dac2f208f4d011b83712dfd5ca41d64f93e4e898f5a2ace5c01b0b2ecbf2e9256666e14e91c559342077f133b0952bf640f6fa88ca8bdf2ea535897e523ea79d
TLSH
T1AF1100A7C8360D5220B0A511660E210AF5BCFB8FDC3A2D6F71BC506C9F26D8782545A1
MD5 SHA1 SHA512 TLSH

Submit Download

839a064f

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\839a064f
Size 1000B
SHA256 b93753fab0b190de9aae5498ad6408dbf923b8ebe244d9d31019cfce27b8558f
MD5 b271a9626a67f90be813039609515ea2
SHA1 f958a80489cee8852e9eab22d65d434b38660648
SHA512 e69a9817cf93624c9e8c1eea6747ec1ca9039b9e7483d27aba24497ed2843e86aa2b372acdeabbd1d008b524b8c420ae46d7f7d317d53c9fabf498c00b9fc1ab
TLSH
T12F11CE778D2188202661590F8097711CE834BF3BDA367A7738B6021CDFA3E9693CD576
MD5 SHA1 SHA512 TLSH

Submit Download

8519e9b8

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\8519e9b8
Size 884B
SHA256 ea784a4f3d75ca25e3c9106148240cf46b203953000206b9e4047fa17b5d3768
MD5 385741fcd426780b1b5e31e4c449460a
SHA1 043a34d0977c944b87d7a4e73cd1850000821745
SHA512 d98f2720b12112213a2f51ef1d750c94093e7286e728c0dacc85ba871323c13257041eb6a8a825d1cf47b17bac9cca99306ad83911b62ddc1606eb3a6da1d39d
TLSH
T1E8112FAFC9A44A1101B01467362E6619E84DBF4FDC39295F70BC405C8F3AF8A06598A0
MD5 SHA1 SHA512 TLSH

Submit Download

8ddcaaa5

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\8ddcaaa5
Size 1017B
SHA256 b409c7f4dea178bee245d70a19918468f64ae2dbc1cad5cb4e090de07ab16302
MD5 e799760fd0440dd7e5223897bb4b9b15
SHA1 10d0a978cc73cd17c9e38000773e9ba0c684a4dd
SHA512 a0667fdfe74d218781508de1b8825efb16ab59816081183ed1d8b865e92b24dd0c2286c3b650055ce23163fb5138e41cac094de2c2e5f646afb9b9f18319a97b
TLSH
T12411AB7FC66A0C60A0A00662241D215AE428BF8FD835395E307CC16C9F71A5ED2888F4
MD5 SHA1 SHA512 TLSH

Submit Download

a894849f

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\a894849f
Size 833B
SHA256 ff730b307832bdec45f0625b1d6d5330fbf0cf284a823b64210d33973c92d2e0
MD5 5daaface0bae8ac7194dba0b445ba607
SHA1 50b9cd501cf5d10458896e7dadcfcf1e08c5dbf3
SHA512 dcc16d12e4e5b4209b57952ffd8ec425bd866330854235195f1577b4aa903c9d205e700d60da8bc0cc2cb117607ed5e5674b0908addd363234c55d1733773c6a
TLSH
T100011E6B88610A56217250542A1AA10EFA08B75BEC2A2D5F717C628C9FB9E43C64B451
MD5 SHA1 SHA512 TLSH

Submit Download

a98365f0

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\a98365f0
Size 936B
SHA256 8751988557950494c2f2de991e4bc234b9cb103cfca73a933b2e304c9ebef007
MD5 46d1265bbd62816d8d9df9a253b03564
SHA1 68d929eb9f386f4679b42dcab620fb97aef42488
SHA512 18732e1bab79a3b5ace9edbafeba62f21eb92ce5da6fb95bd58123b51e256f25630cfe74417c8725750461b19c02e6b7f323b75753c9c72d41e5146b484221ef
TLSH
T12311440B84310D9164B82415642D340EFF8CFB5FDE391F4B70F8115EEF625C38915502
MD5 SHA1 SHA512 TLSH

Submit Download

bd5c62bd

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\bd5c62bd
Size 847B
SHA256 98b4dbaf22d923715be1bb2412d79f7693757ff062084788677c0311e71c2199
MD5 48ce389b907ad793b988e888f5a72bf1
SHA1 2ef636b13cf70558c59dc28dd6545e2a41bc4835
SHA512 df4d4adcbe68311fa0b914b589c4de84cefcdd35b9dc17c0eb47042a18330f0bd2721b16c818455fe5c6113c2ef9542c0b78f890db4ea624d79559a5c92762a7
TLSH
T1F101125BC8351D4161787256184D6209FD1D770FFC292A6F71385A6C9F74AC6434A8D1
MD5 SHA1 SHA512 TLSH

Submit Download

ca66ae8d

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\ca66ae8d
Size 844B
SHA256 95214e78fb64bab17d2ecd937211fbb5fe278dc6c82caa69ef6453edefc72995
MD5 e6e6c9a8ae5e3d6f91caca4b1cbcd65d
SHA1 23b28fc41b3aa45bd60acd00a1bf0cc91804aba4
SHA512 785cf8f8caca8d3ca10ab6b8442aeafcdf10d3511fdff0f532f99b64730b3f087c5210b161a971931e6b4a1b04a8d91b4f2af6a7961e04fc64d9ca11da19027d
TLSH
T18B01EF4788290E4196F43126548E7609F92C734BF8362AAF71789B6C9F64AC64746990
MD5 SHA1 SHA512 TLSH

Submit Download

cc5f4f62

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\cc5f4f62
Size 882B
SHA256 49836e3c0019369f6dde2c60715c333c8aa3549d2a2618b87fd759e9d6964115
MD5 cb9abcd405e9ebcbcb7216332d8f2bf2
SHA1 d1951759ddf768cd22d73945f29dd5e6e37a4d4b
SHA512 00e4ae4790ce649b325588337304030ec69dc1a96d1ad04d9b36af503480fe6670c3c5b1a68bffc2b8d1cd9337965dc4eddc22b657350e3749aa29e0c83144c4
TLSH
T1EB11CC7B06310AD321F52816261E311DE514BF4DDC3A3E6F75B61088DE85ECB874ABA0
MD5 SHA1 SHA512 TLSH

Submit Download

d4520373

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\d4520373
Size 849B
SHA256 c9997ad56e5766038e7dd327e26fe48db81abeabfe07522feea6e98fab5ebd7b
MD5 4ca24bc87d583195de8d3b5ea07b2478
SHA1 685a990f881676d83e23d637391262eabd20b9f7
SHA512 d2c260c47e7ef3cb02ebb85284c0937d5425f5888189cb023347eb2c375ed49013bc2c6ff89e9498c18daca97fa9fb1d31865ebda4ee314916f5adf9db14eeb2
TLSH
T11801EB5FC831484185F06151192A3B1DFE58B38FEC75399F34BC812CCFA1E8A8258490
MD5 SHA1 SHA512 TLSH

Submit Download

da12cdf1

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\da12cdf1
Size 887B
SHA256 79b7b2ebd8ed8f3d8e1984d563680d525d249f23509b2a0ea1dd85f516f9c2db
MD5 6666a886da6e8ee2314bcbf97348116e
SHA1 b1ca33252ff42f0f9ce91ecfec53fded80c8efe9
SHA512 ac498eb3393ab0285ea33d444b923ec8b5b18a5c30f6a2ae825ac217e48db86ba50639391da6c990e531de762855c6e357fb711b9950da403854e3220caca055
TLSH
T1EF11235BCC514D8602F01025142E635EF454F78FEC271D6FB1B9622E8FA5DC6838F494
MD5 SHA1 SHA512 TLSH

Submit Download

e0fa96da

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\e0fa96da
Size 816B
SHA256 390adb0a2b186d3495a32869e7bdf71dffd9cf56ab2ed00f8979c7796fe86b91
MD5 de23edae6950aa8c7a6ffa668af99860
SHA1 6a1a7cc6431f4cad8575b34eee03f3815c03ad63
SHA512 bcf4dbf104ff7d7b6622b781ffc6c2fbe184236345b911732b7c99eef4db622278ec8f7d1a59730233bbf557367a6de8814f4970a132d31f24f2eb2ced6ffa85
TLSH
T18E01FD9FCD264D5265B02945761EB20CFC48B39BEC392D6B30BD611CDFB8F86424B881
MD5 SHA1 SHA512 TLSH

Submit Download

e578bab

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\e578bab
Size 1KB
SHA256 74926f3f7da42f3b2928f1d55fdd9e9e6bfaf45ceccf4a308f1c2a661d975c84
MD5 d897eef7f011a0176a1f9c5aca9edc49
SHA1 c302a90675c63e9e7c9086b7bcb28030b415c0c8
SHA512 7584934eb6eb57a92c23a6d421880d3e325c0b96f8ab05a1b18d4c1b47684b2cda63564eb43b4114d1a67303d1c8eb9e34f0cb596abd5ac938f7e203dbfb8d9a
TLSH
T17E113267C92C0CA151A0902BE80D750DFF4E777FBE37275B30B41C2EAFB280A8219554
MD5 SHA1 SHA512 TLSH

Submit Download

it.json

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\assets\language_helper\languages\it.json
Size 851B
SHA256 fbe94bd233d203073fa3ebab744e04e4c8634785cc69ac09a576f4dec61f26f6
MD5 e0be8612d34b8619d17fe5bf96af9b04
SHA1 a7349021ae86a32da74fea9a1e99fee8229cba15
SHA512 869f73209a0e1019f9b991d85ca6639af57db0c2a2b453ff61a378700178d4df8bd0a190984680734306d78bdf4e3a9b86895eaf0260c7f7d81b35c592f7cc47
TLSH
T1F601526BC8200C2251F01491022A624CF61CBB8FEC2D3D6FB07E211C8F3D985826A461
MD5 SHA1 SHA512 TLSH

Submit Download

ec155007

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\ec155007
Size 3KB
SHA256 93432944048c8ccf150024e68411af899e91adb3a832c8bb294a1f2fe5513cb5
MD5 c0be6cd442dcb85e1437f3a20b0e2ec4
SHA1 08dbc64ed5b4f06c8cfb986a460dcb430ec283d1
SHA512 ed45a0cffa0ae4044fd075dc10f6bd4a48d4798897d6ca7e5f1af6107c946af9e055ea0ee8dcb9dc5d2997bab14f52a79e471939668194bd24d1fab497cbf038
TLSH
T13C811D56122895CF394E7018B9D66E985C021F588561FDEBBB34DB1B70E3B1588FBC38
MD5 SHA1 SHA512 TLSH

Submit Download

510b2dc2

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\packages\cupertino_icons\assets\510b2dc2
Size 251KB
SHA256 67c44fe9183b002e79dde7f6977e2988661c9a3e4a3c5fce968787efdbed823c
MD5 b93248a553f9e8bc17f1065929d5934b
SHA1 06f93e3f5ca41353c645d92dc20c03cb3e803aa3
SHA512 2e2e7d370f2a6d8222f5a751450e36ae50687f0c976eb888b1bfc160ff3a876041adc14a3380e09ac192106f0434efe065b66ef55a1f22d84f44fb7251e39bbf
SSDEEP 6144:7wStY02RK51PPaPP91pnW3jrAbGZBpv+s4zJ3k:7eRK51PPaPP91pnW3jrsMBpms4zNk
TLSH
T174442ACAE266D777C7C6697F58318A1313894C2C9A82335996DFF42DE1DB0D89AF01C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e7262fc

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\packages\media_kit\assets\web\8e7262fc
Size 365KB
SHA256 d8f64072014a9b0509c483f75261b9a427c418e45f82c17b0c32277ac1832e07
MD5 1e36f4683b03af6692ad2542810f28bc
SHA1 90ba52def10646e05cc3639a36d06b3086a677e9
SHA512 cbfb7296a878df821647375c4aa3abcc61d1b36f9cfcab4b1fc70789e64d84596e58e2b83c60b147ca167ec400103b4ceaae6021968cd234591760687bc08c2c
SSDEEP 6144:nBz8/19dbqpG0xMqPqjBeja18a6vm255qJxFm20wp9mHq5:nid+G0xM0qMjoF69qJxFms
TLSH
T1CF842BED76A5602642C2B1A5903F5207633B7D0A3409C1ACFA2BE9D75DB894DB03BF74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b502d30

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\data\flutter_assets\packages\wakelock_plus\assets\6b502d30
Size 13KB
SHA256 03712c6a429a0bc284128e557cd4fb5f4ad13be9d3d83dd69efccd1508131740
MD5 9c3aa3cd0b217305aa860decab3d9f42
SHA1 ddbd0ba2769195d3b7f04e4d6249bc0eab449d25
SHA512 ae3e4d44d0a59b24c76bd87544e5f2fe14bb792964c05eab1913e457a68b960a2acb39406a51b42b1c053aa69e4235d7edd7c49cd9ea1325b290dabedf51eca0
SSDEEP 192:ORGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIksDL3eJMS6G/NwaNXpSACSjbtc:O3gzi+FrZJqbzrarAyUX5i3epn20e
TLSH
T16452B87B2A72BD6FCE77167ACD1A7100ED2D686B86274061BF0C41886FF0610D7A5EB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ddc11927

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\ddc11927
Size 4.5MB
SHA256 853d5942e3dd759a4317994583c00d205b3153a6f98791b50b2ddf98e082ca7a
MD5 075345afb3205a0a8b53cdaeeb1370c0
SHA1 f7e22afe95932f0e7af60c8a7e0fdb95cbdd4853
SHA512 2d25b847931e88163a52f6d89930b745ad9e9c4ac8d03915d303ea97afceb074349992489fadb9b6ffeea5653f5d4e88118f000d723a9aee069b280e9d903799
SSDEEP 98304:qL+Z4OJktbU/a2LBIpaJcz7fPobI1CPwDvt3uFFZCU:EW4OJktMLBIpaJcz7fQ81CPwDvt3uFF5
TLSH
T1C0268D69A57C005AE86A92BCC2C75227D371B91153F097CB6F688AF90F63FD4227B740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e52d34d6

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\e52d34d6
Size 461KB
SHA256 b2590bd0692f0381fc45c20bf1c7f7f713c9ea19c7ea6bab62efdd1fadc4eaac
MD5 0f61da7cea39e89861117f3cb4620dae
SHA1 9ca286bf6d5617eb38101d5e166edac29497c9c5
SHA512 7dc2bbce9808e00122ae0d960ad6b0156d201494aedf4c4c9e261f50986b72dd19b41d443138ffdf1b2e5b8e29614f0a1e909e4c867262eab311f6675618369d
SSDEEP 6144:bAJGuTlLMP/jvtG0uMgvgZS+U85p+2uEA3sB9KeZTyT/tSOaj0yPepA9YK9f:oTaP/jvtG0urvgZS724sBbj0ZS7
TLSH
T156A48D15B79448A9D02AC074CA538643EA72B8960F64FADF13A0D37D1F777E85B3A324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7841f5a

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\e7841f5a
Size 7.1MB
SHA256 620bb6e38d7ed6c760a0cf4a8eb6a8f64b259b96ff286551cd32cefc6c35ca39
MD5 d22c92bee4e7a14d6c74e7376eca7605
SHA1 0592d72d5e0e38e5cfd9a090309260962bf8c4d9
SHA512 2aeec8ccf9db442a2b1e3b391e6c3e899de1266199e6ee6040aceeaf8931e1d10c55ea1ab9ebbd3cc662bf56aea698c09e38f75c7b3e8b0b27c02af63d36993f
SSDEEP 49152:fR1vq8X1ZxC721Mr+IqizQ0LQj7KxKT1wvIOCaDCmvWI2YQkGk6jouaLlbpx/fur:b/xO21eqnoIw+vknAYYszpuSxxZi8Y1
TLSH
T142765A03F69141EAD05DD2B98B5B9622F231BC861371B6DF229473153F76BE0AB3A314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eab2fe1d

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\eab2fe1d
Size 15KB
SHA256 5cf5bbb861608131b5f560cbf34a3292c80886b7c75357acc779e0bf98e16639
MD5 4ec4790281017e616af632da1dc624e1
SHA1 342b15c5d3e34ab4ac0b9904b95d0d5b074447b7
SHA512 80c4e20d37eff29c7577b2d0ed67539a9c2c228edb48ab05d72648a6ed38f5ff537715c130342beb0e3ef16eb11179b9b484303354a026bda3a86d5414d24e69
SSDEEP 192:yjQ/w8u4cyNWthWYWf9BvVVWQ4mWhu1BVT/gqnajKsrC74m:8yNWthW9Np1IlGsrCEm
TLSH
T1F562C64366E43E26EA9F177221FE97E36A391786155143B4C207D19C38837C2BE97C1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1845a2

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\Plugins\x86_64\f1845a2
Size 1.2MB
SHA256 8113e001df45984a78ad8b57c8b0f9387ea1059b0bbec81c1745d8f8aa7a4631
MD5 41f848fc3bd3b8a8d59d31e7933e9508
SHA1 5bde95d7691efb8ac629be117d9eb54c47dee8c5
SHA512 6bea58fb93ef5a41d2d44549abb7e32ce3dee0ad72a1f7c6118e05a95e1d2cd0565d76076fc068692296468f9275afa024894503b7134c6a1d5b41792213863c
SSDEEP 24576:sADJiDq3ZSVesX8+lKH66m66K66K6FK66EFFH6FS66q66w66jFFSDDMm66m66q64:s+Kess+QH66m66K66K6FK66EFFH6FS6L
TLSH
T18E4565449396E343D692F77AC89C15B2B238D891FF46F607839A522A4F8335E1BF7490
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bundle_list_G_2.5.800.204.json

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\StreamingAssets\GameAssets\AssetBundle2\G\Windows\bundle_list_G_2.5.800.204.json
Size 2.2MB
SHA256 80378c01d6bac2ef844d613a94ec720c7282013af526ab2810214a0db2afb636
MD5 6e99adae8c8c6e05816a2a0ba07d10eb
SHA1 a1794ed164ca0dfce8d003ad4d42d87004d20342
SHA512 ea2114b7f7e91bdf4f931f43129eba29ddeb55b5ebb88116cd73886c0b05b905880c12df1288edf83d6f8ecba1f32ea28db097d5d7b2aed7433116932d8840d3
SSDEEP 49152:GAfesT+iXCwq0J66KvliFktsW1qHRI2Su73Ri:GAfeE+iXCwq0J6jlirW0HRI2Surs
TLSH
T1AFB573F13D580F5DC06B4BB87728D27562A0AA670734D0835A245DFB0B8A39A773F61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bundle_list_R_2.5.800.204.json

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\StreamingAssets\GameAssets\AssetBundle2\R\Windows\bundle_list_R_2.5.800.204.json
Size 5KB
SHA256 6d812430953acbd790991890c25f66d7ee36a88534f9e10cfbdbc3cffcc2ead7
MD5 f02aed28a701bc4e70639e1daf8af5f8
SHA1 3987383df27a5e45dd1e5c954ec8efff03c482ff
SHA512 16710ac62cd88ca83c295c87fa91b004e3d32ad693243d55578d1240872731b8422cc20716af59e6c13afe4359af745422d1c726aa4dc69e802c4a7d6dfaaced
SSDEEP 96:a4Q1p2QyAJMSRpk8xy+APxsBt1666i/7ffXoiiMOANutsaAu/faA/PfiwtI:av1pRxJMSRptyFPeBt1666izff4ir1N1
TLSH
T1D6B164243A73F6D6DD5891B0B6BC9E3DC1E200B02A35219ED055EC7D18AA160DB2FAC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google-services.json

Path F:\FunPlus\Tiles Survive\ngame\2.5.800.204\tspc_Data\StreamingAssets\google-services.json
Size 5KB
SHA256 bbd1ca1b72eeccb9e6849ffd4cfc7acb835762f1e45636a7fbfe8f9546098f42
MD5 a7a4442c0fc99cccc48d66c9458772a1
SHA1 6182355f0dfb6faafcd9eae70db9584477f72296
SHA512 4e25568dc19db9a12e314d3b68797f94b928ca8b2477c3a9cd6d1b78efc11001f951662ab65e2e3290656c0845deea659a4087b840b172d144e9db7183e3e987
SSDEEP 96:gP5y5FKUwXHeqsEoMHOovLqCDaaFXHeqsEoMHOovLqCDaaaXHeqsEoMHOovLqCDb:gP85kNXxsEoKaCDaMXxsEoKaCDa/Xxs0
TLSH
T1ABB14D48C1B09CB31AE993B46D7D9285933881838E7A7D5E7FBC810C5F9D4151BACBA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ts_global_setting.ini

Path F:\FunPlus\Tiles Survive\prefs\ts_global_setting.ini
Size 1KB
SHA256 f82fa64a965f9420f70c4349f156c6bf7b651054ed4ba31b93e7f7a3e68a38fa
MD5 a060d33d312316ce879a2214cfe50587
SHA1 a08c68141f75a9d12582143b5fe948a1ff8a32fd
SHA512 bfda00f633f9e83216444b439995d8141f2f84d077bd9271ddde955f4d75d094be50fc8736c0cc2ccdaa2542794597f9e20e842707f28bb6a791279ba92a096f
TLSH
T1BA31E904AE0726032538EB64B07921489C22F977472396B07F6326651635CCC8831837
MD5 SHA1 SHA512 TLSH

Submit Download

ts_global_setting.ini

Path F:\FunPlus\Tiles Survive\prefs\ts_global_setting.ini
Size 1KB
SHA256 b6e343a71d1ffc9f1a6843d3e425c4be7f65e4570a343f60e024f06e403de677
MD5 08554b1b64d1e02b4ea9a86f743060aa
SHA1 18a473724e4eacc2f439a0c3ef44e8a539abaf3f
SHA512 1280b6b335b116d2ecc7f4df8d7357eefa3203652afde1d2f909f010942d3805c0dbbf34f48a9c14e041d135d4a304d44aec31353b3d4d12cc85538c2e23b619
TLSH
T19831E904AE0B26032538EB64B07931489C22F977472396B07FA32A651635CCC8831C3B
MD5 SHA1 SHA512 TLSH

Submit Download

ts_global_setting.ini

Path F:\FunPlus\Tiles Survive\prefs\ts_global_setting.ini
Size 1KB
SHA256 964f441539bb153606c0862ce68ba61cc72f8a870bd13b713ea1d6a85688689a
MD5 b6cbc93918d9677ad51953bb3a24bb57
SHA1 0fce7d6a58490bef8f25637b420854ba29ba7c76
SHA512 065591138141a73e0bcec045e80910a7a1dbf7a8eada00efa5c68f6167cfef1589c18041d39a0d91644bcc7651b9f6db1cd440358f26661be5542bebdfe58fdf
TLSH
T17C31C92BCE9AE3A634D94004B907214058B2E1778B12A3512ED9B9704497CDC2D72533
MD5 SHA1 SHA512 TLSH

Submit Download

ts_global_setting.ini

Path F:\FunPlus\Tiles Survive\prefs\ts_global_setting.ini
Size 18B
SHA256 3e7e288e24e7ae00bf788dc3d7f8282f1d890527397d3c18afc26711d0849b2c
MD5 265392810cfab823833f5a0f4258b98b
SHA1 f3219d0bf5e3e449eaa865ac83140d4b38124490
SHA512 549c973a2e3a118053dc73e097af89407a8849616139e4e7144b22fb6565982c2e1162ab4d2f55dedf064e1e4a3c1670d083b8dc177229b798edeea92d357e43
MD5 SHA1 SHA512

Submit Download

ts_global_setting.ini

Path F:\FunPlus\Tiles Survive\prefs\ts_global_setting.ini
Size 137B
SHA256 08676597437c834b7169f11f43ac9e2872b08bfd97d2c6c8947b54917fcbaf81
MD5 fc021f7ab56db3af689fc446e2589bde
SHA1 c1dd6b6e5fe61bb655457c7c01519fb7aadbc62e
SHA512 5f97910a942f96383e3e37a88a3e452aad939cadc88b1aa1a2238ddc626e5afd44545d394ee425891ab4d6158f0bfe54bcad6317d1bf5771b8683d6215084ace
TLSH
T123C02B04A5930B2C3170C1156302074408B41A01432BF7290C71D1884C0F8CCD183053
MD5 SHA1 SHA512 TLSH

Submit Download

ts_global_setting.ini

Path F:\FunPlus\Tiles Survive\prefs\ts_global_setting.ini
Size 151B
SHA256 f69a4e005828eadb76cc4828c26d962f258353b54ad4054b76aeaca0382e0cd3
MD5 22c0332e839a8776fe84312918e7bf6b
SHA1 58ff55da8bd3092bbe280060590b63afef4b3a68
SHA512 7dd884d0987157795d75a7626c3649747e786c7c0c8e4426cf2af0bdce480cfbc6d0b90f4b4f5110b2a54f2add1013dfae95281b66f898044d1cf0c4ffdac1e9
TLSH
T188C08C05AAA31A2C31708125A302075808A49A12472BA7290DB2D1C8480BCCC9182462
MD5 SHA1 SHA512 TLSH

Submit Download

ts_global_setting.ini

Path F:\FunPlus\Tiles Survive\prefs\ts_global_setting.ini
Size 1KB
SHA256 2a346af9d0f7958502198e7186fe8e70678d31b299823b32a6b9884dadafc7c8
MD5 ad0fae80408ce6881b74adb4ddc3dcb5
SHA1 454e7b49866c1a872513ea9bcd593f9ae40bf5a5
SHA512 ac2418e6494d8dbeb9d1cc43734dc4deb60a5543878f25e5a3be28841ffe2df6f08e3be738e8e11e67c65683f90e8b1ddf8a5c37991f2d9b69ba3961987ab073
TLSH
T19421F804EE5B35035528EB24B1BD22089C12E9B2072397B13E532A956626CCC8831C37
MD5 SHA1 SHA512 TLSH

Submit Download

uninstall.exe

Path F:\FunPlus\Tiles Survive\uninstall.exe
Size 1.6MB
SHA256 2042bedd61c5aede7b90d2302c267e8f4c179e4c3e2d93b1a44a7cb01020dc11
MD5 7d8389fb7d8e9c9d2e78daeeb1f9c5da
SHA1 1a4a7e690a431243e4c6f5307a9c9290492259e8
SHA512 f958372b682cc73d3a08ac6cd995e3ea687290bcb2e0124df5b244eed1cd32570d2aa4a7e6cf0857397fc4b81f66bf728fb61aabb34ab481dc53da3a884670d5
SSDEEP 24576:dMUcHSJMqJLJODkzTGFTNbgy1aQjNAIN2Iky82/qYFEfpYKA:QHSJMqpJ2FTNbgy1aoNATdAfiC
TLSH
T1DB751212F9C0D072D5A311302B17D775AABD79B08F919ACBA3D8885D1E306C19B36B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2108-2126-0x000001E0E9C20000-0x000001E0E9C42000-memory.dmp

Download

memory/5680-2205-0x0000019D3EDC0000-0x0000019D3EE73000-memory.dmp

Download

memory/5680-2206-0x0000019D3EE80000-0x0000019D3EE8A000-memory.dmp

Download

memory/5680-2204-0x0000019D3EDA0000-0x0000019D3EDBC000-memory.dmp

Download

memory/5680-2208-0x0000019D3EEC0000-0x0000019D3EEE4000-memory.dmp

Download

memory/5680-2207-0x0000019D3EEC0000-0x0000019D3EEEA000-memory.dmp

Download

memory/7852-1935-0x0000028E11D70000-0x0000028E11D71000-memory.dmp

Download

memory/7852-1932-0x0000028E12560000-0x0000028E130BD000-memory.dmp

Download

memory/7852-1931-0x0000028E11D60000-0x0000028E11D61000-memory.dmp

Download

memory/7852-1934-0x0000028E12560000-0x0000028E130BD000-memory.dmp

Download

memory/7852-1933-0x0000028E12560000-0x0000028E130BD000-memory.dmp

Download

memory/9508-11328-0x00007FF8C2070000-0x00007FF8C4178000-memory.dmp

Download

memory/9508-11306-0x0000024E9EA40000-0x0000024E9F1BD000-memory.dmp

Download

memory/9508-11949-0x00007FF8EC7C0000-0x00007FF8ECD15000-memory.dmp

Download

memory/9508-11299-0x00007FF8845D0000-0x00007FF8845E0000-memory.dmp

Download

memory/9508-11297-0x00007FF8845D0000-0x00007FF8845E0000-memory.dmp

Download

memory/9508-11298-0x00007FF8845D0000-0x00007FF8845E0000-memory.dmp

Download

memory/9508-16051-0x00007FF621A20000-0x00007FF621A9E000-memory.dmp

Download

memory/9508-11307-0x0000024E9EA40000-0x0000024E9F1BD000-memory.dmp

Download

memory/9508-11309-0x0000024E9E0A0000-0x0000024E9E0A1000-memory.dmp

Download

memory/9508-11308-0x0000024E9EA40000-0x0000024E9F1BD000-memory.dmp

Download

memory/9508-11305-0x0000024E9E090000-0x0000024E9E091000-memory.dmp

Download

memory/9508-11292-0x00007FF8C4180000-0x00007FF8C5180000-memory.dmp

Download

memory/9508-11206-0x00007FF621A20000-0x00007FF621A9E000-memory.dmp

Download