Analysis

  • max time kernel
    149s
  • max time network
    129s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/10/2026, 19:40

General

  • Target
    2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe
  • Size 7.3MB
  • Sample261012-ydtebset71
  • SHA256 159bbf013b1dad618e604d64c2961d18a1dfb4e52ac5330ca649dd101a0a39a7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of WriteProcessMemory 19 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe"
    1⤵
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Suspicious use of WriteProcessMemory
    PID:1256
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-background-networking --disable-component-update --disable-features=MediaRouter,OptimizationHints,Translate --disable-sync --enable-features=MojoIpcz --host-resolver-rules="MAP * ~NOTFOUND, EXCLUDE fallout-local.invalid" --no-pings --proxy-bypass-list=fallout-local.invalid --proxy-server=127.0.0.1:9 --mojo-named-platform-channel-pipe=1256.692.6955461012887874637 /pfhostedapp:a09230fcd5ad2f2dd98c3e7e3e67a1cbbbb3a79e
      2⤵
      • System Network Configuration Discovery: Internet Connection Discovery
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:4548
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView /prefetch:4 /pfhostedapp:a09230fcd5ad2f2dd98c3e7e3e67a1cbbbb3a79e --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x180,0x184,0x188,0x15c,0x190,0x7ffb6c945fd8,0x7ffb6c945fe4,0x7ffb6c945ff0
        3⤵
          PID:5636
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView" --webview-exe-name=2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1996 --field-trial-handle=2000,i,6524224856984696227,4731821590432530604,262144 --enable-features=MojoIpcz --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version /prefetch:2 /pfhostedapp:a09230fcd5ad2f2dd98c3e7e3e67a1cbbbb3a79e
          3⤵
            PID:1204
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --host-resolver-rules="MAP * ~NOTFOUND, EXCLUDE fallout-local.invalid" --proxy-server=127.0.0.1:9 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView" --webview-exe-name=2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2220 --field-trial-handle=2000,i,6524224856984696227,4731821590432530604,262144 --enable-features=MojoIpcz --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version /prefetch:3 /pfhostedapp:a09230fcd5ad2f2dd98c3e7e3e67a1cbbbb3a79e
            3⤵
              PID:460
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --host-resolver-rules="MAP * ~NOTFOUND, EXCLUDE fallout-local.invalid" --proxy-server=127.0.0.1:9 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView" --webview-exe-name=2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2356 --field-trial-handle=2000,i,6524224856984696227,4731821590432530604,262144 --enable-features=MojoIpcz --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version /prefetch:8 /pfhostedapp:a09230fcd5ad2f2dd98c3e7e3e67a1cbbbb3a79e
              3⤵
                PID:4948
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView" --webview-exe-name=2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3420 --field-trial-handle=2000,i,6524224856984696227,4731821590432530604,262144 --enable-features=MojoIpcz --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version /pfhostedapp:a09230fcd5ad2f2dd98c3e7e3e67a1cbbbb3a79e /prefetch:1
                3⤵
                  PID:468
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --host-resolver-rules="MAP * ~NOTFOUND, EXCLUDE fallout-local.invalid" --proxy-server=127.0.0.1:9 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView" --webview-exe-name=2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3736 --field-trial-handle=2000,i,6524224856984696227,4731821590432530604,262144 --enable-features=MojoIpcz --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version /prefetch:8 /pfhostedapp:a09230fcd5ad2f2dd98c3e7e3e67a1cbbbb3a79e
                  3⤵
                    PID:6040
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView" --webview-exe-name=2026-10-11_67ad5ed1c9d841d1d3910a1e40501440_glassworm_icedid_vidar.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4340 --field-trial-handle=2000,i,6524224856984696227,4731821590432530604,262144 --enable-features=MojoIpcz --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version /prefetch:8 /pfhostedapp:a09230fcd5ad2f2dd98c3e7e3e67a1cbbbb3a79e
                    3⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:3412

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    1a3309b1-eec8-45ed-b48b-5d7eae114f59.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\1a3309b1-eec8-45ed-b48b-5d7eae114f59.tmp
                    • Size 3KB
                    • SHA256 194d706a23baed6f3592d908eea6d940a168972fc949508a48cab01d686c0651
                    • MD5 SHA1 SHA512 TLSH

                    352eddc9-c892-4c50-b090-38a4114fc217.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\352eddc9-c892-4c50-b090-38a4114fc217.tmp
                    • Size 3KB
                    • SHA256 6e340e00d27c63ea4d28b7b9d72df3dc9eb1a6fa394d6b9ebc7cd44f0ef0da7f
                    • MD5 SHA1 SHA512 TLSH

                    3cce95ac-a0c7-465d-a70c-c861e20d54d1.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\3cce95ac-a0c7-465d-a70c-c861e20d54d1.tmp
                    • Size 3KB
                    • SHA256 7a5d29a038c688591ee4731a1e1080acb7005f47f11bddcf8f5644e8d79ec88c
                    • MD5 SHA1 SHA512 TLSH

                    414438fc-000a-4d15-b780-632aadb4ada0.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\414438fc-000a-4d15-b780-632aadb4ada0.tmp
                    • Size 3KB
                    • SHA256 27decb89e8e26a4f501eeee6e1f0aff3c60fc6dd5513879ba4afb575aa6a8436
                    • MD5 SHA1 SHA512 TLSH

                    5fcf9235-7c82-4acc-b6ca-1dfd35aa23ff.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\5fcf9235-7c82-4acc-b6ca-1dfd35aa23ff.tmp
                    • Size 3KB
                    • SHA256 fa20355bd01576c902c75a9c5ec3603fed86e9fbd2317136c8580c8c46a1eadd
                    • MD5 SHA1 SHA512 TLSH

                    85866958-365b-4b40-bd11-3d56f36e55d8.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\85866958-365b-4b40-bd11-3d56f36e55d8.tmp
                    • Size 3KB
                    • SHA256 e878a02b77f0cc4e16cd345dbfca56d55d0a93114eddeb9765ba277a3bb68b5c
                    • MD5 SHA1 SHA512 TLSH

                    872743cb-e686-4a2c-af49-0121dfec51b1.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\872743cb-e686-4a2c-af49-0121dfec51b1.tmp
                    • Size 3KB
                    • SHA256 9b0115a62e7f93b30a3ce2bd58abf6c37cb42e2e123aca221dccbe0d1b5501be
                    • MD5 SHA1 SHA512 TLSH

                    settings.dat

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Crashpad\settings.dat
                    • Size 280B
                    • SHA256 71c26c10208aea73b84119de479e749cbd9fcdb346b8df7a531e7cb1f43cc461
                    • MD5 SHA1 SHA512

                    settings.dat

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Crashpad\settings.dat
                    • Size 280B
                    • SHA256 797548e3885c2367a05071bd496fe0544768805e317a2ac91204287cc4a6087a
                    • MD5 SHA1 SHA512 TLSH

                    throttle_store.dat

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Crashpad\throttle_store.dat
                    • Size 20B
                    • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                    • MD5 SHA1 SHA512

                    341a3114-6654-4f82-b89a-62cabed77a96.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Default\341a3114-6654-4f82-b89a-62cabed77a96.tmp
                    • Size 5KB
                    • SHA256 6055c0c6ce6c6ac9747f7def1f1d5a56d4420c613f594de4a08241a5b3a13e44
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    temp-index

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Default\Code Cache\js\index-dir\temp-index
                    • Size 72B
                    • SHA256 4afb115310c655ac22e6af184b06881841e646e59318e95c3dc0e7f9ea7a89c7
                    • MD5 SHA1 SHA512 TLSH

                    the-real-index

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                    • Size 48B
                    • SHA256 9a58f000d480d539f25331a8a73ecd0cbe415c0f3ca98f9ec14e619c179e4bd2
                    • MD5 SHA1 SHA512

                    SCT Auditing Pending Reports

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Default\Network\SCT Auditing Pending Reports
                    • Size 2B
                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                    • MD5 SHA1 SHA512

                    c438a85a-b718-4c8e-a43e-2183cf9aac61.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Default\c438a85a-b718-4c8e-a43e-2183cf9aac61.tmp
                    • Size 6KB
                    • SHA256 a1c78262b9ec55bef689fbd1963d7c8e32063d97ac5e1797bc09e27d93557b55
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ed64a5fc-b3c3-4f23-b5c8-6f3ea7ec312f.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Default\ed64a5fc-b3c3-4f23-b5c8-6f3ea7ec312f.tmp
                    • Size 6KB
                    • SHA256 32e84b01004fb8146ec3897c878c2d07472b4af2e7a8b67783a4541da3b77805
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    MANIFEST-000001

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Default\shared_proto_db\MANIFEST-000001
                    • Size 41B
                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                    • MD5 SHA1 SHA512

                    CURRENT

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Default\shared_proto_db\metadata\CURRENT
                    • Size 16B
                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                    • MD5 SHA1 SHA512

                    data_0

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\GrShaderCache\data_0
                    • Size 8KB
                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                    • MD5 SHA1 SHA512 SSDEEP

                    data_1

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\GrShaderCache\data_1
                    • Size 264KB
                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                    • MD5 SHA1 SHA512 SSDEEP

                    data_2

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\GrShaderCache\data_2
                    • Size 8KB
                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                    • MD5 SHA1 SHA512 SSDEEP

                    data_3

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\GrShaderCache\data_3
                    • Size 8KB
                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                    • MD5 SHA1 SHA512 SSDEEP

                    Local State

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\Local State
                    • Size 1KB
                    • SHA256 4b3634cd81036323a5d561fa65d94e980f1d179443015a143ae5dba240ed347e
                    • MD5 SHA1 SHA512 TLSH

                    ba3d426f-1722-41e1-839a-bb978075ca74.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\ba3d426f-1722-41e1-839a-bb978075ca74.tmp
                    • Size 3KB
                    • SHA256 1c775952fec6c8a37f481654d3c1a8808e632a755c7e514847e562959839c2d4
                    • MD5 SHA1 SHA512 TLSH

                    ba71eceb-88f9-49fa-b9f3-eb35a4c1705b.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\ba71eceb-88f9-49fa-b9f3-eb35a4c1705b.tmp
                    • Size 3KB
                    • SHA256 0457e6928a0e5a30ba34770f65fdf75c339e18e5f26e6e034782723d8190e1c1
                    • MD5 SHA1 SHA512 TLSH

                    d8bde3c6-68bd-4f0b-8217-d6f89bbf669e.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\d8bde3c6-68bd-4f0b-8217-d6f89bbf669e.tmp
                    • Size 3KB
                    • SHA256 043f671fd5f2401eaebecbc9a7e9c344ad2fad0e15e2400c1e88c7c6976334fd
                    • MD5 SHA1 SHA512 TLSH

                    e323d844-7f1b-4495-a0fe-f2c0bfbaad67.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\e323d844-7f1b-4495-a0fe-f2c0bfbaad67.tmp
                    • Size 3KB
                    • SHA256 529cc007f10a706f8e0fcf7432a5fea362a06d189f139d8390bb9a2d23a1a059
                    • MD5 SHA1 SHA512 TLSH

                    fa0cfa93-b5ef-406d-bdde-059da0c04d98.tmp

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Profile\EBWebView\fa0cfa93-b5ef-406d-bdde-059da0c04d98.tmp
                    • Size 2KB
                    • SHA256 60fd3771692ffed590973ec80c5736b0beeaa95f603895f298fb6f0727a87436
                    • MD5 SHA1 SHA512 TLSH

                    Microsoft.Web.WebView2.Core.dll

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\Microsoft.Web.WebView2.Core.dll
                    • Size 589KB
                    • SHA256 88a3b62f45225a811cdb85df6dfd95c2bff9a0e43e3b04f813b125eaca56cc9f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    WebView2Loader.dll

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\WebView2Loader.dll
                    • Size 162KB
                    • SHA256 462b36fd1be6ca9f7563466a89e57c41ef4a4def3e0a84fa885d203aea4a3aaf
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    fonts.css

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\game\fonts.css
                    • Size 933B
                    • SHA256 992fdf6648f94e58bc5ac9f783900a902a4636c85fb871e3b7677f0b98de531a
                    • MD5 SHA1 SHA512 TLSH

                    font-0.ttf

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\game\fonts\font-0.ttf
                    • Size 84KB
                    • SHA256 bd6ff5a83bcdc92d7aac6dbb16e4dd2b0b0320bec6402bb81f5dd9735b500e46
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    font-1.ttf

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\game\fonts\font-1.ttf
                    • Size 84KB
                    • SHA256 20987dd8fd1d3e9ab087a55cb90e98081c873c729c113043e0bfb1ef0f9e0bd7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    font-2.ttf

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\game\fonts\font-2.ttf
                    • Size 84KB
                    • SHA256 a6ee8b91ec269a6f48631ba4ba1a3ab7e5039e5482dda8dc9672ee4620d7bd68
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    font-3.ttf

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\game\fonts\font-3.ttf
                    • Size 40KB
                    • SHA256 5f6b57538a1a35469a038dc3073003cebc4c101ad7b3c219e9555a3b3c0a81d2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    font-4.ttf

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\game\fonts\font-4.ttf
                    • Size 146KB
                    • SHA256 9f59e3a0e1c0008f2ef97b1c94e5d96c43748bbc92993570d1133454a484254c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    font-5.ttf

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\game\fonts\font-5.ttf
                    • Size 143KB
                    • SHA256 954e44d25e0ccd643f4ef15e75d56d3d76590d3c2b1e42b71b13d5df740a51a6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    index.html

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\game\index.html
                    • Size 20.2MB
                    • SHA256 13618a3d9f213f7b7c4aaa22b86dbafdb376f7cdf992394e55247e277f1f5945
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    three.min.js

                    • Path C:\Users\Admin\AppData\Local\FalloutNYC-Offline\Runtime\440c25e1f765bb157e62\game\three.min.js
                    • Size 636KB
                    • SHA256 3b3a1c97de3ce65ec5b28c28d9f2805a738e9651622691ba771aa95c79d41d51
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    memory/468-152-0x00007FFB93810000-0x00007FFB93811000-memory.dmp

                    memory/468-263-0x000001F919A10000-0x000001F919AE6000-memory.dmp

                    memory/1204-388-0x0000020D14C10000-0x0000020D14C12000-memory.dmp

                    memory/1204-414-0x0000020D14D40000-0x0000020D14D46000-memory.dmp

                    memory/1204-491-0x0000020D0B680000-0x0000020D0B68F000-memory.dmp

                    memory/1204-68-0x00007FFB93810000-0x00007FFB93811000-memory.dmp

                    memory/1204-490-0x0000020D0B690000-0x0000020D0B698000-memory.dmp

                    memory/1204-488-0x0000020D0B670000-0x0000020D0B674000-memory.dmp

                    memory/1204-487-0x0000020D0B680000-0x0000020D0B682000-memory.dmp

                    memory/1204-477-0x0000020D0B660000-0x0000020D0B665000-memory.dmp

                    memory/1204-476-0x0000020D0B670000-0x0000020D0B673000-memory.dmp

                    memory/1204-471-0x0000020D0B540000-0x0000020D0B54F000-memory.dmp

                    memory/1204-470-0x0000020D0B550000-0x0000020D0B558000-memory.dmp

                    memory/1204-468-0x0000020D0B530000-0x0000020D0B534000-memory.dmp

                    memory/1204-467-0x0000020D0B540000-0x0000020D0B542000-memory.dmp

                    memory/1204-375-0x0000020D0B4C0000-0x0000020D0B4C1000-memory.dmp

                    memory/1204-376-0x0000020D0BFB0000-0x0000020D0BFB2000-memory.dmp

                    memory/1204-377-0x0000020D0B4C0000-0x0000020D0B4C1000-memory.dmp

                    memory/1204-385-0x0000020D14C00000-0x0000020D14C03000-memory.dmp

                    memory/1204-386-0x0000020D0BFD0000-0x0000020D0BFD6000-memory.dmp

                    memory/1204-464-0x0000020D0B530000-0x0000020D0B533000-memory.dmp

                    memory/1204-389-0x0000020D14C00000-0x0000020D14C04000-memory.dmp

                    memory/1204-391-0x0000020D14C20000-0x0000020D14C22000-memory.dmp

                    memory/1204-392-0x0000020D14C10000-0x0000020D14C14000-memory.dmp

                    memory/1204-398-0x0000020D14C30000-0x0000020D14C34000-memory.dmp

                    memory/1204-380-0x0000020D0BFD0000-0x0000020D0BFD2000-memory.dmp

                    memory/1204-383-0x0000020D0BFE0000-0x0000020D0BFE2000-memory.dmp

                    memory/1204-381-0x0000020D0BFC0000-0x0000020D0BFC4000-memory.dmp

                    memory/1204-394-0x0000020D14C30000-0x0000020D14C38000-memory.dmp

                    memory/1204-395-0x0000020D14C20000-0x0000020D14C2F000-memory.dmp

                    memory/1204-397-0x0000020D14C40000-0x0000020D14C42000-memory.dmp

                    memory/1204-401-0x0000020D14D00000-0x0000020D14D06000-memory.dmp

                    memory/1204-406-0x0000020D14D10000-0x0000020D14D15000-memory.dmp

                    memory/1204-405-0x0000020D14D30000-0x0000020D14D33000-memory.dmp

                    memory/1204-419-0x0000020D14D80000-0x0000020D14D82000-memory.dmp

                    memory/1204-422-0x0000020D14D70000-0x0000020D14D76000-memory.dmp

                    memory/1204-400-0x0000020D14D10000-0x0000020D14D13000-memory.dmp

                    memory/1204-411-0x0000020D14D50000-0x0000020D14D52000-memory.dmp

                    memory/1204-421-0x0000020D14D90000-0x0000020D14D93000-memory.dmp

                    memory/1204-417-0x0000020D14D60000-0x0000020D14D66000-memory.dmp

                    memory/1204-416-0x0000020D14D70000-0x0000020D14D73000-memory.dmp

                    memory/1204-262-0x0000020D048C0000-0x0000020D04996000-memory.dmp

                    memory/1204-413-0x0000020D14D60000-0x0000020D14D63000-memory.dmp

                    memory/1204-409-0x0000020D14D30000-0x0000020D14D38000-memory.dmp

                    memory/1204-408-0x0000020D14D40000-0x0000020D14D44000-memory.dmp

                    memory/1204-403-0x0000020D14D20000-0x0000020D14D22000-memory.dmp

                    memory/1204-425-0x0000020D14D90000-0x0000020D14D94000-memory.dmp

                    memory/1204-424-0x0000020D14DA0000-0x0000020D14DA2000-memory.dmp

                    memory/1204-427-0x0000020D14DB0000-0x0000020D14DB8000-memory.dmp

                    memory/1204-428-0x0000020D14DA0000-0x0000020D14DAF000-memory.dmp

                    memory/1204-465-0x0000020D0B520000-0x0000020D0B526000-memory.dmp

                    memory/1204-438-0x0000020D16000000-0x0000020D16008000-memory.dmp

                    memory/1204-439-0x0000020D14FF0000-0x0000020D14FFF000-memory.dmp

                    memory/1204-448-0x0000020D0B4F0000-0x0000020D0B4F1000-memory.dmp

                    memory/1204-449-0x0000020D0B500000-0x0000020D0B501000-memory.dmp

                    memory/1204-462-0x0000020D0B510000-0x0000020D0B514000-memory.dmp

                    memory/1204-461-0x0000020D0B520000-0x0000020D0B522000-memory.dmp

                    memory/1256-38-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-32-0x000000001F100000-0x000000001F198000-memory.dmp

                    memory/1256-0-0x00007FFB727FF000-0x00007FFB72800000-memory.dmp

                    memory/1256-15-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-16-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-28-0x000000001DAB0000-0x000000001DC72000-memory.dmp

                    memory/1256-29-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-40-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-39-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-3-0x0000000001850000-0x0000000001862000-memory.dmp

                    memory/1256-9-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-8-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-30-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-241-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-1-0x00007FFB72670000-0x00007FFB73014000-memory.dmp

                    memory/1256-2-0x0000000000660000-0x0000000000DB0000-memory.dmp

                    memory/3412-500-0x000001D413640000-0x000001D413641000-memory.dmp

                    memory/3412-501-0x000001D413640000-0x000001D413641000-memory.dmp

                    memory/3412-502-0x000001D413640000-0x000001D413641000-memory.dmp

                    memory/3412-503-0x000001D413640000-0x000001D413641000-memory.dmp

                    memory/3412-505-0x000001D413640000-0x000001D413641000-memory.dmp

                    memory/3412-495-0x000001D413640000-0x000001D413641000-memory.dmp

                    memory/3412-496-0x000001D413640000-0x000001D413641000-memory.dmp