Analysis

  • geolocation tags

    eueuropefrfrance
  • user interaction
    yes
  • max time kernel
    167s
  • max time network
    169s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    30/09/2026, 14:36

General

  • Target
    https://www.play-openworld.com/
  • Sample260930-rysj7saa38

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 44 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 27 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.play-openworld.com/
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4308
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff80169c728,0x7ff80169c734,0x7ff80169c740
      2⤵
        PID:5868
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1552,i,14959012347722804137,11645072068568627065,262144 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1880 /prefetch:2
        2⤵
          PID:4996
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2228,i,1448837015906919485,10076751272759579403,524288 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2240 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:2168
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,3050562278671693900,9274828486722503728,524288 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2688 /prefetch:13
          2⤵
            PID:5268
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3112,i,18430473673369325631,7741092993668394008,2097152 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3184 /prefetch:1
            2⤵
              PID:1316
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3120,i,5563568367404963945,3415580391610990207,2097152 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3204 /prefetch:1
              2⤵
                PID:1968
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4444,i,5806498170012612070,4911567291199470153,2097152 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4416 /prefetch:9
                2⤵
                  PID:2704
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3900,i,2498348056730525942,4540644343871678802,2097152 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5188 /prefetch:1
                  2⤵
                    PID:2424
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3168,i,4861783787888124872,14273708190293049175,524288 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3184 /prefetch:14
                    2⤵
                      PID:3168
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5176,i,17402445984605005205,15604217416163192910,524288 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6072 /prefetch:14
                      2⤵
                        PID:2880
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5196,i,17884028814961176875,3212923293456724720,524288 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3288 /prefetch:14
                        2⤵
                          PID:5824
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=212,i,14968203220897941433,2556794017838642487,524288 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5824 /prefetch:14
                          2⤵
                            PID:896
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6124,i,5021790508085541313,12379037760205827620,2097152 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3284 /prefetch:1
                            2⤵
                              PID:5012
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5048,i,2558202705115987333,18231551965368292417,2097152 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5128 /prefetch:1
                              2⤵
                                PID:3424
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6212,i,9690787949615744666,10776861879534855236,2097152 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4864 /prefetch:1
                                2⤵
                                  PID:4944
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6080,i,1113331630366898347,597344773638171448,524288 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6228 /prefetch:14
                                  2⤵
                                  • Subvert Trust Controls: Mark-of-the-Web Bypass
                                  • NTFS ADS
                                  PID:5264
                                • C:\Users\Admin\Downloads\Openworld.exe
                                  "C:\Users\Admin\Downloads\Openworld.exe"
                                  2⤵
                                  • Executes dropped EXE
                                  • Reads the TCP/IP host and domain name from the registry
                                  • Suspicious use of SetWindowsHookEx
                                  PID:1432
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6400,i,18304494207443331541,10236908439648991507,262144 --field-trial-handle=1884,i,16925792214467643530,7677610802920185976,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6432 /prefetch:10
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:6592
                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                1⤵
                                  PID:5124
                                • C:\Windows\system32\svchost.exe
                                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                  1⤵
                                    PID:924

                                  Network

                                        MITRE ATT&CK Enterprise v16

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        0239b303-c8af-43d6-a154-f1c1e7c988b1.tmp

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\0239b303-c8af-43d6-a154-f1c1e7c988b1.tmp
                                        • Size 6B
                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                        • MD5 SHA1 SHA512

                                        4e07a59e-4318-4003-8ecd-1d6f34a0c3c9.tmp

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4e07a59e-4318-4003-8ecd-1d6f34a0c3c9.tmp
                                        • Size 649B
                                        • SHA256 d58682d3e298ab153d0a3cb3a1b601c98d54c91d84fa8853b6ecb2553f3823e7
                                        • MD5 SHA1 SHA512 TLSH

                                        f_000023

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
                                        • Size 6.9MB
                                        • SHA256 b3910dfbff35318e8dd493aa06d4f5f6dad1160ad9dd1aba8cdd4be69a5ec637
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 528B
                                        • SHA256 3e22acd8e51b089510891328a9422410b87fb915974cc6deab71d60d472a3738
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 720B
                                        • SHA256 693b473e6f30047b3b89697c49d38675ad4f0f7fa915f193e83fe35690c3ade9
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 528B
                                        • SHA256 a0b51b7537c4f023ed5d26f432f0db2b5751c27677a3cca03e841cd4cb4a18d1
                                        • MD5 SHA1 SHA512 TLSH

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                        • Size 4KB
                                        • SHA256 811a0fbaacfb0fc2c2e69df15dcf0d329fcc819fab4368062808078c7bf00678
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                        • Size 5KB
                                        • SHA256 f59443470b0a04c80b75c92735ed113c17ab522d8efb4426d346e625c5823d26
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        SCT Auditing Pending Reports

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                        • Size 2B
                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        • MD5 SHA1 SHA512

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                        • Size 11KB
                                        • SHA256 c8281c140ef1bf647f3d6792358a83594f9eade6b7fcdb446d027691ea2e8e21
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                        • Size 11KB
                                        • SHA256 cc40fd64694fa440b48b0d6702dde2defcd48c201c1bdeac262995e4bec1ef45
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                        • Size 12KB
                                        • SHA256 7949cf1ed58e32a422b715acf188d588b3be216d35dfd79e57cf1188758475c3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                        • Size 12KB
                                        • SHA256 fd9b4cf0e6d7f4c544861eb6fd7647b4fa13c10996f368eae11b2b0c1fa99bab
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                        • Size 12KB
                                        • SHA256 dfd81bda9c6e6a06f2fdbec163972b7c593546b0381abe2ce925a57186decafe
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                        • Size 11KB
                                        • SHA256 df12bdf6469896076a7e4cd26b6bff2c43922a08bd1410a03289e73056e0edd1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Secure Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                        • Size 17KB
                                        • SHA256 de13521758ef1bfcb2d2450b3cf0a7a99cd0970c06b92340bd4289551bfc2ad6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                        • Size 120B
                                        • SHA256 93a60211336877f83a3d6b6ae59906880374e29d31251a76981b0085b13819f4
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index~RFe58db96.TMP

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58db96.TMP
                                        • Size 96B
                                        • SHA256 d887620dd801f1fc11f6a99e976ef3098a4da78a465b163be47081cbc0df7f18
                                        • MD5 SHA1 SHA512 TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                        • Size 131KB
                                        • SHA256 ca828d7a5ecdb57cc6435999f68f31b8dbeb78a0612065256b2f261d8e901514
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                        • Size 131KB
                                        • SHA256 d2969933386405b03b633331d63357650746383b6ec21d4f3f058b5f767c5de4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                        • Size 131KB
                                        • SHA256 d25192dc78ccf7fccd9d515b285b33f8c5a4cd0e17fe5081a12bf9315f45460a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                        • Size 130KB
                                        • SHA256 1884f74c0ae5560ca943e4fa589fb9834b6d5fccf819f5555e206beebc51b406
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                        • Size 131KB
                                        • SHA256 de3cd9b5e079fd97f8c8343b934f4dbb5de28792792861f15e579b0dd652b41f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        IBMPlexMono-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\IBMPlexMono-Regular.ttf
                                        • Size 132KB
                                        • SHA256 6a3412f058c7d8dfd9170c41e85ade48e5156ecb89356110ca57a0a27734af46
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        LICENSE-IBMPlex-OFL.txt

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\LICENSE-IBMPlex-OFL.txt
                                        • Size 4KB
                                        • SHA256 7e6b2818edbd8f6a01ae80641cc8f16a51080d08fb4e532be3a0b6f74adb07da
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        LICENSE-Lucide-ISC.txt

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\LICENSE-Lucide-ISC.txt
                                        • Size 3KB
                                        • SHA256 b495047bd93a9b06913511076f504daba17d5bbeb3e0650f3bb53a4220329c57
                                        • MD5 SHA1 SHA512 TLSH

                                        LICENSE-Noto-OFL.txt

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\LICENSE-Noto-OFL.txt
                                        • Size 4KB
                                        • SHA256 cee9892f9f0cc8fe882c9e9537ee6a89621d86ee7ceaf70b02e2b2b1c25c061a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        LICENSE-Nunito-OFL.txt

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\LICENSE-Nunito-OFL.txt
                                        • Size 4KB
                                        • SHA256 580df76c95a1ec5ab878ceb25bb3d85c6a076804e9c970c8c6972aea775fdf65
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Lucide-Subset.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\Lucide-Subset.ttf
                                        • Size 17KB
                                        • SHA256 47a1f535f7fe7db478d79e1ea2d97567be325ef7b991f544b12fc877760b5a59
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSans-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSans-Bold.ttf
                                        • Size 308KB
                                        • SHA256 e85a4bba6297d708beb462f891fd7e1fcd70573024c1020a77351bb86e425325
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansArabic-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansArabic-Bold.ttf
                                        • Size 189KB
                                        • SHA256 353350c97ecbea8a0134815adb68167a7dce9533e0fba01c301ebebaa745d721
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansBengali-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansBengali-Bold.ttf
                                        • Size 137KB
                                        • SHA256 c7240fd0bbb4427085eaf224c87333cf8d3cf01627bb6263f297d752c521dd98
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansDevanagari-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansDevanagari-Bold.ttf
                                        • Size 211KB
                                        • SHA256 9b52570925305428135d1edc49707b3e51eaa8261f0e2a84735182304c699f8c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansHebrew-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansHebrew-Bold.ttf
                                        • Size 46KB
                                        • SHA256 fb86eb89c4187d01349ad0f3ac1ab190d43a69ace59068f4dc538e49b1a3fba7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansJP-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansJP-Bold.ttf
                                        • Size 2.6MB
                                        • SHA256 f464eca5a7d4c96eb8c4679af1db0933901d97a056d764bedeb5c8efc92baea9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansKR-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansKR-Bold.ttf
                                        • Size 3.4MB
                                        • SHA256 8c2c5b48630d4af4336f2bc93a040c5ab806a459b6a64512a8be7fc442369252
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansSC-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansSC-Bold.ttf
                                        • Size 2.6MB
                                        • SHA256 8774d9427d604977cb6ef65cbe8388bfa992cd60d8ca69c987f04cb84db51b1b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansTC-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansTC-Bold.ttf
                                        • Size 2.1MB
                                        • SHA256 1d2a56a6c11ddb628ebf104b81abb5f0827af6ed137bc8a8976d95c02ee203d7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansTamil-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansTamil-Bold.ttf
                                        • Size 76KB
                                        • SHA256 be3b8aeca3ec0f30851613e5f95396b253db6831dd6edbb5087c19422cac395d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansTelugu-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansTelugu-Bold.ttf
                                        • Size 175KB
                                        • SHA256 96c779ff5f82660b94c09306ba26af96a14e96c9b6ae0b4266371498b57f90b5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        NotoSansThai-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\NotoSansThai-Bold.ttf
                                        • Size 45KB
                                        • SHA256 832977de11f1ef0c5aa7214fbdfc7e6d3cadbfa6686ef5f580702e02a4e45e5b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Nunito-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\Nunito-Bold.ttf
                                        • Size 129KB
                                        • SHA256 7950c5d683403a2b12f83d91222b2e3c587f96213b12e7f171bef0d396413d40
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Nunito-ExtraBold.ttf

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\fonts\Nunito-ExtraBold.ttf
                                        • Size 129KB
                                        • SHA256 030459919798661ef2a442921991decf15dfc2f8a79fef1b36a1d06036c9ef34
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        openworld-256.png

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\icons\openworld-256.png
                                        • Size 39KB
                                        • SHA256 3ffdb01d73684b13ecd8f868a1eaa62c739700de00cf9ad2bd42e0b393fd226f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ar.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\ar.po
                                        • Size 181KB
                                        • SHA256 8395ae17730a34033b1cd1730977beb0a693f17afca463c66bd507c20d93ed6c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        bn.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\bn.po
                                        • Size 231KB
                                        • SHA256 2c9b8c4ad066236edf89de5790d4ba993a87f3359e41e1a0827a57e98600cd96
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ca.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\ca.po
                                        • Size 157KB
                                        • SHA256 bac28ce253340ef829c855efbd0a42f8e8520ccc1a3f2d9b563ea7209ce875ce
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        cs.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\cs.po
                                        • Size 156KB
                                        • SHA256 d2b93d3f0262f2fdafcc1ca9d7c96932c68e71bd15de59fefb45002463b891fb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        da.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\da.po
                                        • Size 153KB
                                        • SHA256 883dd4a07364457526dfeb58e2236a0d07b745b11fe324ef83167935b0ae507c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        de-CH.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\de-CH.po
                                        • Size 5KB
                                        • SHA256 ce4b36c0b77e28c2ac8fd89a0cbe8aae2e769c87d74ee975ea9c778897ec4488
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        de.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\de.po
                                        • Size 158KB
                                        • SHA256 0c2e7c95140d727672b9fc80aa7b75fe73797f3c1bbb64e9cae7e46c92ba91f0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        el.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\el.po
                                        • Size 208KB
                                        • SHA256 fa89c80e8b6440c676d0eb42e925463ecb6d70340d01707f3f06c412ef76b769
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        en-GB.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\en-GB.po
                                        • Size 6KB
                                        • SHA256 6ef891f59d7955f2c517cae926e02602eaa8080abf4f7867fdf3eeeda6f03960
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        es-419.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\es-419.po
                                        • Size 158KB
                                        • SHA256 843ec4a4ca4d55f09dccaf3145ea8c3b1f4242e2568697020b665b1ec64a7126
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        es.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\es.po
                                        • Size 158KB
                                        • SHA256 410c3876dca8c47e1ee56279b0676d190bc9fe5732b64e80584db2c2de14990f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        fa.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\fa.po
                                        • Size 184KB
                                        • SHA256 3a1a98012354f495bf4659fc53e92636b98220de34e421bbabb73c6febf40357
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        fi.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\fi.po
                                        • Size 157KB
                                        • SHA256 d0c0f65bf708ee0150a571a4dc9ea520789587aae7588d252d39b697e0ae7a77
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        fil.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\fil.po
                                        • Size 158KB
                                        • SHA256 222677cef8669d96d37f5026d2259f1820578f69e99306246a3e2a0b18d2f2c3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        fr-CA.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\fr-CA.po
                                        • Size 7KB
                                        • SHA256 7de6b457c4d6e6d5b238225e1583f54cb477544b85c769e6de857d20c78db14f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        fr.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\fr.po
                                        • Size 413KB
                                        • SHA256 0c922bb1e14f20d57b3dcf92c0ad37cb0e4fba66c56c4e50fcf0225faa4bda94
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        he.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\he.po
                                        • Size 173KB
                                        • SHA256 a11b729dcb9550198482fd0d0aed01b242e217a81d651d1cc472275a380ef07d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        hi.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\hi.po
                                        • Size 230KB
                                        • SHA256 9f8b80195290b94d6baf1e1bacb1483c852df597a3609d5b4996e125bd5f46e3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        hu.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\hu.po
                                        • Size 159KB
                                        • SHA256 271807462a316934b22d0f125572c7e1fbfc15dc7ba4a6f4c827aedfd45cda4e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        id.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\id.po
                                        • Size 153KB
                                        • SHA256 881f9b9cd7fd0cdd6c49e9f985e150d09971109af508463979ca5e335aea62a7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        it.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\it.po
                                        • Size 157KB
                                        • SHA256 851a9ad1ff58e9e675ece02034fe08acb7fc643f396a4189adf5b03ac33ac903
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ja.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\ja.po
                                        • Size 177KB
                                        • SHA256 068865e8831f044bc6894bc3717ac49fe0a8f6a55b9657424f0fea6941c84430
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ko.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\ko.po
                                        • Size 163KB
                                        • SHA256 de6f07f64c8c1b50ad28985501e7893d95262d5094825e1f6576be2b435aef67
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        mr.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\mr.po
                                        • Size 229KB
                                        • SHA256 fb8dc463f569e5e98f91d31e833ec73b10dd6bbad05918cc637bb347d95641bd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ms.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\ms.po
                                        • Size 156KB
                                        • SHA256 12f43ff2e4ac6bbc1a6d510512ac7ba348d2f107cdc02bc2d6301c1951db6d44
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        nb.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\nb.po
                                        • Size 152KB
                                        • SHA256 ea649798a89f46a126d5641a007429d7c86db648df11ccfb876b36f74a6188cb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        nl.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\nl.po
                                        • Size 155KB
                                        • SHA256 7ecaac1d2400861257edd6e1211400ef080ce6c6a9e9b4c1dd14bf63b0e3ac3f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        openworld.pot

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\openworld.pot
                                        • Size 356KB
                                        • SHA256 79d27add895b6cabf6f81ce1a062b3d845f5d943bdfe417e47c774e5a9df0ba8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pl.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\pl.po
                                        • Size 157KB
                                        • SHA256 4ee2ccf31366d78eb1b13481dc79948920b028da450a26d4bfd867cd4128d9ed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pt-BR.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\pt-BR.po
                                        • Size 157KB
                                        • SHA256 66283a5aff2fb8c3f601e966d910ed67f40d278239c9a6a844c56ae0a0b93be4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        pt-PT.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\pt-PT.po
                                        • Size 158KB
                                        • SHA256 67a4c6492f2d3de0801869dd77ded8bed543b1ade820bf8372a11c55dcf7b735
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ro.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\ro.po
                                        • Size 158KB
                                        • SHA256 5a922c865428da77a0fda7625b314c303520577bb7e1805505f2e58adcaf90bf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ru.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\ru.po
                                        • Size 198KB
                                        • SHA256 dfb4bf7e91e21032f97af45713f4c98636f6b520fda10bf85453245718c8cb04
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        sv.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\sv.po
                                        • Size 154KB
                                        • SHA256 e06675125180e0066a84d0c39be459770aff13a3e9e3c90308a1791602dd33cf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        sw.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\sw.po
                                        • Size 157KB
                                        • SHA256 be70c1f122593876cebe805da70747940d614fc22be91eda9bef0cd68e7d4af9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ta.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\ta.po
                                        • Size 267KB
                                        • SHA256 31dbc69844ff07b42b769c5cd479030e84726b16c713e04b74eff965a10c13fe
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        te.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\te.po
                                        • Size 248KB
                                        • SHA256 bf9c469ecf2316c5f0f6a5e8f060c0d521d3cb157b3cc6f1d7149a05f57f7aab
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        th.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\th.po
                                        • Size 247KB
                                        • SHA256 5185b19bf7a4f3f3e77706fc27116b836702023e2d6f25e881ed106bf86f3237
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        tr.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\tr.po
                                        • Size 156KB
                                        • SHA256 e866dc8ff863da827c1f6ed8f0b0d04c1d221b879f01295d8e48c7b36b00468b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        uk.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\uk.po
                                        • Size 198KB
                                        • SHA256 05b975837c94980af12ac669e3378cc235d3e71b77b79ea530668437523e57d9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ur.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\ur.po
                                        • Size 186KB
                                        • SHA256 1271c55abbde0e27077e20ccaf4c68d0928a6a62d79554156150f8d791fbdbc5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        vi.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\vi.po
                                        • Size 169KB
                                        • SHA256 044ebf99512992b05a1f7407f2a2f11d71611c472f0dcd3730a55117a59d77f0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        wa.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\wa.po
                                        • Size 157KB
                                        • SHA256 4eab6598e3715969a144c8de34ce54494aedcd0a3066253fa320362755edf260
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        zh-Hans.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\zh-Hans.po
                                        • Size 153KB
                                        • SHA256 e010254854e8d8053fcb9ca6886a6f77bb05894d424c41a9be9d1c0d90a8238e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        zh-Hant.po

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\lang\zh-Hant.po
                                        • Size 153KB
                                        • SHA256 78642069e2bfead7f72f647a0603835cdf9cb56adc77a638b5a8667c70fbca93
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        openworld-voxel-emblem.png

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\logo\openworld-voxel-emblem.png
                                        • Size 120KB
                                        • SHA256 8fb3cf4bd0968daee0e4aec97c7a6bea8a383150a25b966d5da1f143af8a012d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        menu-1.jpg

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\menu\menu-1.jpg
                                        • Size 99KB
                                        • SHA256 398c59832f3a2461962c6884a3596f7db3b571f88dd694b2b155bd99118d2cda
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        menu-2.jpg

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\menu\menu-2.jpg
                                        • Size 105KB
                                        • SHA256 8d42b01ad3ed9bcf199092a35429c139515959082ce7dbb28fd83c0261d1279c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        menu-3.jpg

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\menu\menu-3.jpg
                                        • Size 104KB
                                        • SHA256 6204e10aa6ac2cce58db71c7aa001d51eac63147cebd72604b962dc0b049cf1e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        menu-4.jpg

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\menu\menu-4.jpg
                                        • Size 127KB
                                        • SHA256 0be6cc03bc80ad0386b70fda7720506ea2b1aebb8581d88df058cc3417a7f549
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        menu-5.jpg

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\menu\menu-5.jpg
                                        • Size 234KB
                                        • SHA256 32860850d13141fe3b7b9c2c942a11d39f4c1391de2c8d16c9ef5772aba77e23
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        menu-6.jpg

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\menu\menu-6.jpg
                                        • Size 104KB
                                        • SHA256 28ea01bbee41bdd64965127e3580e5217d472096f8e48d92f9bf46bd01a61979
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ui.frag.spv

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\shaders\ui.frag.spv
                                        • Size 11KB
                                        • SHA256 c364c082b36b47a56e7c5045fcc968b789ef04c251112c79ce3059d19bcc1825
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ui.vert.spv

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\assets\shaders\ui.vert.spv
                                        • Size 2KB
                                        • SHA256 ff207cdaa90908996058241f7de861bd78bccf473a0068ad1e1e4c80287d3b60
                                        • MD5 SHA1 SHA512 TLSH

                                        build.txt

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\build.txt
                                        • Size 2B
                                        • SHA256 aa67a169b0bba217aa0aa88a65346920c84c42447c36ba5f7ea65f422c1fe5d8
                                        • MD5 SHA1 SHA512

                                        owlauncher.exe

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.8.partial-658ccb33\owlauncher.exe
                                        • Size 9.8MB
                                        • SHA256 efa47b29e0b5a293ebc49f9b421ef0e0edc694fdb0ef325b6dad66c3f0948f47
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        openworld-launcher-8-windows-x64.zip.part

                                        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\download\openworld-launcher-8-windows-x64.zip.part
                                        • Size 14.0MB
                                        • SHA256 9c712c07322368a8446d7aeff3b4d7bb408ff1fc32e51fd4013290df092646ce
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Openworld.exe:Zone.Identifier

                                        • Path C:\Users\Admin\Downloads\Openworld.exe:Zone.Identifier
                                        • Size 104B
                                        • SHA256 923359e3dd04eba90290c71f52723dc090df05876980ba200cd4e6db321b66c1
                                        • MD5 SHA1 SHA512 TLSH

                                        memory/1432-850-0x00007FF794600000-0x00007FF794CE6000-memory.dmp

                                        memory/1432-859-0x00007FF794600000-0x00007FF794CE6000-memory.dmp

                                        memory/1432-860-0x00007FF794600000-0x00007FF794CE6000-memory.dmp

                                        memory/1432-862-0x00007FF794600000-0x00007FF794CE6000-memory.dmp

                                        memory/1432-871-0x00007FF794600000-0x00007FF794CE6000-memory.dmp

                                        memory/1432-846-0x00007FF794600000-0x00007FF794CE6000-memory.dmp

                                        memory/1432-837-0x00007FF794600000-0x00007FF794CE6000-memory.dmp