Analysis

  • user interaction
    yes
  • max time kernel
    101s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/10/2026, 12:11

General

  • Target
    Openworld.exe
  • Size 6.9MB
  • Sample261011-pc5arsty3j
  • SHA256 f9d76ea1f6070b8f736f4c85428c531d9b74557fc7b8422ee23db0788700c6ce
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Openworld.exe
    "C:\Users\Admin\AppData\Local\Temp\Openworld.exe"
    1⤵
    • Adds Run key to start application
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of SetWindowsHookEx
    PID:3252
  • C:\Users\Admin\AppData\Roaming\.openworld\Openworld.exe
    "C:\Users\Admin\AppData\Roaming\.openworld\Openworld.exe" --silent
    1⤵
    • Executes dropped EXE
    PID:1992

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Openworld.exe

        • Path C:\Users\Admin\AppData\Roaming\.openworld\Openworld.exe
        • Size 6.9MB
        • SHA256 f9d76ea1f6070b8f736f4c85428c531d9b74557fc7b8422ee23db0788700c6ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IBMPlexMono-Regular.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\IBMPlexMono-Regular.ttf
        • Size 132KB
        • SHA256 6a3412f058c7d8dfd9170c41e85ade48e5156ecb89356110ca57a0a27734af46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE-IBMPlex-OFL.txt

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\LICENSE-IBMPlex-OFL.txt
        • Size 4KB
        • SHA256 7e6b2818edbd8f6a01ae80641cc8f16a51080d08fb4e532be3a0b6f74adb07da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE-Lucide-ISC.txt

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\LICENSE-Lucide-ISC.txt
        • Size 3KB
        • SHA256 b495047bd93a9b06913511076f504daba17d5bbeb3e0650f3bb53a4220329c57
        • MD5 SHA1 SHA512 TLSH

        LICENSE-Noto-OFL.txt

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\LICENSE-Noto-OFL.txt
        • Size 4KB
        • SHA256 cee9892f9f0cc8fe882c9e9537ee6a89621d86ee7ceaf70b02e2b2b1c25c061a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE-Nunito-OFL.txt

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\LICENSE-Nunito-OFL.txt
        • Size 4KB
        • SHA256 580df76c95a1ec5ab878ceb25bb3d85c6a076804e9c970c8c6972aea775fdf65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Lucide-Subset.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\Lucide-Subset.ttf
        • Size 17KB
        • SHA256 47a1f535f7fe7db478d79e1ea2d97567be325ef7b991f544b12fc877760b5a59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSans-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSans-Bold.ttf
        • Size 308KB
        • SHA256 e85a4bba6297d708beb462f891fd7e1fcd70573024c1020a77351bb86e425325
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansArabic-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansArabic-Bold.ttf
        • Size 189KB
        • SHA256 353350c97ecbea8a0134815adb68167a7dce9533e0fba01c301ebebaa745d721
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansBengali-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansBengali-Bold.ttf
        • Size 137KB
        • SHA256 c7240fd0bbb4427085eaf224c87333cf8d3cf01627bb6263f297d752c521dd98
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansDevanagari-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansDevanagari-Bold.ttf
        • Size 211KB
        • SHA256 9b52570925305428135d1edc49707b3e51eaa8261f0e2a84735182304c699f8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansHebrew-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansHebrew-Bold.ttf
        • Size 46KB
        • SHA256 fb86eb89c4187d01349ad0f3ac1ab190d43a69ace59068f4dc538e49b1a3fba7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansJP-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansJP-Bold.ttf
        • Size 2.6MB
        • SHA256 f464eca5a7d4c96eb8c4679af1db0933901d97a056d764bedeb5c8efc92baea9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansKR-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansKR-Bold.ttf
        • Size 3.4MB
        • SHA256 8c2c5b48630d4af4336f2bc93a040c5ab806a459b6a64512a8be7fc442369252
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansSC-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansSC-Bold.ttf
        • Size 2.6MB
        • SHA256 8774d9427d604977cb6ef65cbe8388bfa992cd60d8ca69c987f04cb84db51b1b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansTC-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansTC-Bold.ttf
        • Size 2.1MB
        • SHA256 1d2a56a6c11ddb628ebf104b81abb5f0827af6ed137bc8a8976d95c02ee203d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansTamil-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansTamil-Bold.ttf
        • Size 76KB
        • SHA256 be3b8aeca3ec0f30851613e5f95396b253db6831dd6edbb5087c19422cac395d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansTelugu-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansTelugu-Bold.ttf
        • Size 175KB
        • SHA256 96c779ff5f82660b94c09306ba26af96a14e96c9b6ae0b4266371498b57f90b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NotoSansThai-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\NotoSansThai-Bold.ttf
        • Size 45KB
        • SHA256 832977de11f1ef0c5aa7214fbdfc7e6d3cadbfa6686ef5f580702e02a4e45e5b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nunito-Bold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\Nunito-Bold.ttf
        • Size 129KB
        • SHA256 7950c5d683403a2b12f83d91222b2e3c587f96213b12e7f171bef0d396413d40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nunito-ExtraBold.ttf

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\fonts\Nunito-ExtraBold.ttf
        • Size 129KB
        • SHA256 030459919798661ef2a442921991decf15dfc2f8a79fef1b36a1d06036c9ef34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        openworld-256.png

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\icons\openworld-256.png
        • Size 39KB
        • SHA256 3ffdb01d73684b13ecd8f868a1eaa62c739700de00cf9ad2bd42e0b393fd226f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\ar.po
        • Size 536KB
        • SHA256 b8a49f8b03181c6e33bfb06895c9e0195b2201be2bcd8e5eb2ce3615a738f8ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\bn.po
        • Size 687KB
        • SHA256 f5bdf406ad2103bcc7ba8bc0749630d8a4d9c3140741027a29353fe1450e3cec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\ca.po
        • Size 462KB
        • SHA256 1eafa541d55452fce85779e05d1cfc5046fca964cff8f2eff5ad5005fa78838d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\cs.po
        • Size 457KB
        • SHA256 e710dfd91c4fe1edae769338a1f8dc25d04895faa6fbf8a6230a954cbc5618a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\da.po
        • Size 449KB
        • SHA256 223eaac3f2ee48321407f54fd2538b2f0a9c398f4b821c35d10820aeadba3318
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de-CH.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\de-CH.po
        • Size 32KB
        • SHA256 d7c79dc4c9d7adb20bddc22252f5f38f6f5a955e90b4efc2a63588e9c3f69d40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\de.po
        • Size 465KB
        • SHA256 73e66b852c663d400ff030553c8688e9dc1d3e3a693fea262504c31d21401aed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\el.po
        • Size 618KB
        • SHA256 360c3ff13e596d418b89ee23ad5ec84023487f13b6630dd40a6783e7471b6f05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\en-GB.po
        • Size 7KB
        • SHA256 f59dc7fb6c90d6e6041bfcf370312c7d2d6b270bab2c47d3b6118efa953d4790
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\es-419.po
        • Size 336KB
        • SHA256 8c520cee1524629bd1090635c8093ecf56447bbe35a6efa98c5ab04d62433773
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\es.po
        • Size 467KB
        • SHA256 9d5bc6b17b02e0ffce60fa7d1e2b2d350bb002a5b9c093284ef05bc241b5ce85
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\fa.po
        • Size 552KB
        • SHA256 908710e453ca91af8b884648473bd7fc86e4ce74458aa22138cbcd289364af72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\fi.po
        • Size 462KB
        • SHA256 bda7c7b6bcb76f9c6c6d25e943254a9c53456052e4ebe2c3476e89c35a23fb08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\fil.po
        • Size 471KB
        • SHA256 c67ab724c927abb6bc740e9d5ff1c7ccc41232c4698e32004f03dac248f005e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr-CA.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\fr-CA.po
        • Size 7KB
        • SHA256 2f0862a2154309268aa734f28bd443efb9f8e83facd0f8e99a91c8061be5bb08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\fr.po
        • Size 479KB
        • SHA256 28e0868d12e11576459715decc8c06cb984063fc572ed602e7e554400ca9a995
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\he.po
        • Size 511KB
        • SHA256 6bc0970ed51856e11ef582ed25a984d6d9de081014f9b17a7f14e408146ce92e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\hi.po
        • Size 685KB
        • SHA256 dfb1ca1bba2511fc8c249bba3a3ed4ca4925e8462f37900d56ce6491c73eae58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\hu.po
        • Size 466KB
        • SHA256 1032b343d2cb481a8a8f085e5c694370a1bc64c578feac9ffa3881e05c444212
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\id.po
        • Size 452KB
        • SHA256 eaadc98eeceb9530271c17700f7540d50b73a2ef5275d74e418bf972a23c0546
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\it.po
        • Size 463KB
        • SHA256 c7f472e19f0c45e7cb5feb5a99766efa509306f572a7eb6971127f5b2278e59c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\ja.po
        • Size 510KB
        • SHA256 e4387d029d679fce7f942256da2a07c94279bfda78ad076babc342322d29bfa9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\ko.po
        • Size 476KB
        • SHA256 bcda10dfbb854b0d46b4361deb22deace4b4dce9685afee76855240ce42fda0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\mr.po
        • Size 681KB
        • SHA256 ffa641f4a97fa9df5aa7dd36361cc7beecf78dd82a5e3bea2d19e3bf4b4c74d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\ms.po
        • Size 459KB
        • SHA256 b39927af333a5ebff7c2d9bafcb7e83d49fb038a3e403910333abcffb69729aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\nb.po
        • Size 446KB
        • SHA256 a3e8136627d4b7307961d0a14d18349e79a6aade19406b69518e727279dfaf16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\nl.po
        • Size 456KB
        • SHA256 5feeaa605dc26d7019e6885ca1ff3c0ec10e062d60cdffa3fcea27612c877097
        • MD5 SHA1 SHA512 SSDEEP TLSH

        openworld.pot

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\openworld.pot
        • Size 725KB
        • SHA256 a2a480896674a7ef3b5614d326880c19f78cef5c4c9702992ba825fee14a4e92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\pl.po
        • Size 462KB
        • SHA256 1f288a36bbe769658a1b9a9f850f0b19395c357385a1b4faa212b853c1d6ae64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\pt-BR.po
        • Size 462KB
        • SHA256 06c275482e0fdc92941188d67ce25ee4c559d46ec9e5b5d87c844a0be86d1f36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\pt-PT.po
        • Size 336KB
        • SHA256 55d5aeb63cf22835f1dcb33b64872e149e56d8be89695b47ae1e1d1af347f6e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\ro.po
        • Size 468KB
        • SHA256 edb9195ea79991e083a3606b348cc623372774b45aedcef6617a2c6f73c1a61d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\ru.po
        • Size 590KB
        • SHA256 7371666bcfe062961c8c635351206d24a13587f906ada8ab80bf64a08fc944e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\sv.po
        • Size 451KB
        • SHA256 e0c54694ffb060a6e27b8d350f2d22669f6ee29fd05c25fa40e84ad333fd0455
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\sw.po
        • Size 460KB
        • SHA256 b903cf630db7ca9cc1b3080322c23cb92d4af6c44de37acdd927c8d366c73b84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\ta.po
        • Size 798KB
        • SHA256 5f606e87b428c6eedf4a8ee37ecbf0299cba7c8448ba2e729e6c416be08084e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\te.po
        • Size 736KB
        • SHA256 211407b1f3a66b5888bed61b04fdc3e16aaa5eb596f29cbfda37eef1948e912d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\th.po
        • Size 728KB
        • SHA256 51ae23aa2b9da9ebcd7d8e58389bb5e4a912930f88197972a46015ced35e783c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\tr.po
        • Size 457KB
        • SHA256 0fe640902e4320184de0e2c3a19f222f086b3adde41a906d1ddbc948502d9309
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\uk.po
        • Size 586KB
        • SHA256 cd204fb3520302149b551b52878d42fbf5d9006df99147cd5fbe4f101bbf0460
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\ur.po
        • Size 554KB
        • SHA256 65be7ac759b43762ce6eb77cda41d93a55a48c4618e7c6ee59e6fc425c115f82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\vi.po
        • Size 495KB
        • SHA256 992a7264bbccab2dec7d2ce8f11aa31895b187da4c4fc8b704f73f7b1a2418c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wa.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\wa.po
        • Size 465KB
        • SHA256 68b0933d60621cebd601dbb4b24f8ecca73acbb5fc87ae099f300603c183f755
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-Hans.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\zh-Hans.po
        • Size 442KB
        • SHA256 78ca743ef06b7837b5ae748ed95f7659b128da4dfb2c72a84800c7f23605e6ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-Hant.po

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\lang\zh-Hant.po
        • Size 443KB
        • SHA256 3f8cb7f7e8d95cd9385d5edf9b56335ff339dd9c30141dca168be38ea89de6d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        openworld-voxel-emblem.png

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\logo\openworld-voxel-emblem.png
        • Size 120KB
        • SHA256 8fb3cf4bd0968daee0e4aec97c7a6bea8a383150a25b966d5da1f143af8a012d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        menu-1.jpg

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\menu\menu-1.jpg
        • Size 99KB
        • SHA256 398c59832f3a2461962c6884a3596f7db3b571f88dd694b2b155bd99118d2cda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        menu-2.jpg

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\menu\menu-2.jpg
        • Size 105KB
        • SHA256 8d42b01ad3ed9bcf199092a35429c139515959082ce7dbb28fd83c0261d1279c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        menu-3.jpg

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\menu\menu-3.jpg
        • Size 104KB
        • SHA256 6204e10aa6ac2cce58db71c7aa001d51eac63147cebd72604b962dc0b049cf1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        menu-4.jpg

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\menu\menu-4.jpg
        • Size 127KB
        • SHA256 0be6cc03bc80ad0386b70fda7720506ea2b1aebb8581d88df058cc3417a7f549
        • MD5 SHA1 SHA512 SSDEEP TLSH

        menu-5.jpg

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\menu\menu-5.jpg
        • Size 234KB
        • SHA256 32860850d13141fe3b7b9c2c942a11d39f4c1391de2c8d16c9ef5772aba77e23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        menu-6.jpg

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\menu\menu-6.jpg
        • Size 104KB
        • SHA256 28ea01bbee41bdd64965127e3580e5217d472096f8e48d92f9bf46bd01a61979
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui.frag.spv

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\shaders\ui.frag.spv
        • Size 26KB
        • SHA256 232a42207ff3190f851b45d173779684cbbf6f6df6226d0fb62ec8931fc09a30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui.vert.spv

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\assets\shaders\ui.vert.spv
        • Size 2KB
        • SHA256 ff207cdaa90908996058241f7de861bd78bccf473a0068ad1e1e4c80287d3b60
        • MD5 SHA1 SHA512 TLSH

        build.txt

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\build.txt
        • Size 3B
        • SHA256 a1fb50e6c86fae1679ef3351296fd6713411a08cf8dd1790a4fd05fae8688164
        • MD5 SHA1 SHA512

        features.txt

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\features.txt
        • Size 7B
        • SHA256 cb58aac1c4c9f9f317986971b7f4d8fdb36d9f5ca9ce9d2deb538f3a37a8c97f
        • MD5 SHA1 SHA512

        install.json

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\install.json
        • Size 171B
        • SHA256 1517a1734473478847c470a533b226dc67df0f3eaa23956e861aa83e2546dce2
        • MD5 SHA1 SHA512 TLSH

        owlauncher.exe

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-4a6bc911\owlauncher.exe
        • Size 10.1MB
        • SHA256 46672729bdfc809d7253b43e6fc8cc1b7dae48f3a5f4fff1870d35378badba5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        install.json

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\builds\.12.partial-ae64500d\install.json
        • Size 171B
        • SHA256 a7edce661a42d9af9add3c3f821bbd22e42957e9eeed6dd601b4c7544ced5d8d
        • MD5 SHA1 SHA512 TLSH

        openworld-launcher-12-windows-x64.zip.part

        • Path C:\Users\Admin\AppData\Roaming\.openworld\launcher\download\openworld-launcher-12-windows-x64.zip.part
        • Size 18.0MB
        • SHA256 c0d5e4ae62fad97328cf2cb570116534c2a21bcddf786db8665644b4e014c127
        • MD5 SHA1 SHA512 SSDEEP TLSH

        silent.ok

        • Path C:\Users\Admin\AppData\Roaming\.openworld\updater\silent.ok
        • Size 65B
        • SHA256 2f0e59bc070e84b2f839eeb1797136c17ecdf64075f747cdacadd8b9794e6b63
        • MD5 SHA1 SHA512 TLSH

        memory/1992-21-0x00007FF71F9B0000-0x00007FF72009E000-memory.dmp

        memory/3252-580-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp

        memory/3252-600-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp

        memory/3252-1155-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp

        memory/3252-1156-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp

        memory/3252-1157-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp

        memory/3252-1159-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp

        memory/3252-1160-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp

        memory/3252-1161-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp

        memory/3252-1162-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp

        memory/3252-1164-0x00007FF6E0CF0000-0x00007FF6E13DE000-memory.dmp