招笑版[.]zip | Triage™

resource
unpack001/PlantsVsZombies.exe

resource
unpack001/bass.dll
unpack001/freetype.dll
unpack001/gdi42.dll

招笑版.zip

SHA256 7e8fb2e241332b78e9483646eb6ee564878739b8da78780fc8bf5f2e7ec5f56a
MD5 dd7c2ad5ed20a768bd61f91d62b3de55
SHA1 8726df9c04dfd096b847cb7c354d8d2a238ec685
SHA512 b0ec36c96b0fde049ddb8c5c8ed8d5f5e21cccb1124500ca077ece0185e55d3195fb2cac4fa608acbe55d07ca029f6b4aabbb440015e2f187a668925f46fdb3f
SSDEEP 1572864:dJ+b38onYCCqD8dAIg/6gRItVYYs2oMOp:L+b382YCBwdAIgigOwYiMO
TLSH
T13FC7337A602FE0F6E51239B6A7B804B757370447E1142DA238795F8DE93B1C6B84EF21
MD5 SHA1 SHA512 SSDEEP TLSH

PlantsVsZombies.exe

IMPHASH 33aada12073d335900f2dd1f5ac08eed
SHA256 dff51fc836efbbae0702a44750f9bf803479209afd3272ff05f031d42916e0e8
MD5 190fa35de9095d7fcce35fabd24f7ccf
SHA1 bff4eab0df0fe07901c2a73da5819453a20d8f72
SHA512 b4672f0735294ffb362b56f751be81f71249824228df7f9f7a33d52d40a56e0504c2a637e7befb2bc9592b49ffc870bd0c82eaac787125f654185bf10759ce2a
SSDEEP 49152:wWL51HOsx3R+ijGgzHxOft0ltSmaeeDR3h2xOfpDyYJNo/vMAM6phx96S7kr0PAS:7Bf6ijFzJaeeDZhnY9M6e0I
TLSH
T188178C51F3DB90E2D91B1A7141A5A73B84315F651328A6E7FBD43F2F98303E2E836219
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

0b:6e:85:a7:3a:06:3c:76:18:64:ee:43:13:2c:72:6a

Digest Algorithm

md5

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Chains

Jan 1, 0001

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Serial Number

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 1, 2006 - Sep 21, 2009

Minor OS version

0

Major OS version

4

Entry point

2223090

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Popcap\Lawn\releasefinal\PlantsVsZombies.pdb

kernel32

OutputDebugStringA GetModuleFileNameA GetModuleHandleA WinExec MapViewOfFile CreateFileMappingA GetCurrentProcessId QueryPerformanceFrequency QueryPerformanceCounter GetTickCount SetEndOfFile SetEnvironmentVariableA CreateFileW GetLocaleInfoW WriteConsoleW LoadLibraryA FreeLibrary GetProcAddress InterlockedDecrement GetLastError CloseHandle FindNextFileA Sleep SetThreadPriority GlobalFree GetCurrentThread GlobalLock WaitForSingleObject FindClose GlobalUnlock CreateMutexA GlobalAlloc GetCurrentThreadId LeaveCriticalSection GetVersionExA FindFirstFileA EnterCriticalSection GetCommandLineA MultiByteToWideChar DeleteFileA FileTimeToSystemTime GetFileTime GetSystemDirectoryA CreateFileA MulDiv SetUnhandledExceptionFilter GetCurrentProcess OpenFileMappingA IsBadWritePtr UnmapViewOfFile DeleteCriticalSection CreateThread GetThreadPriority VirtualQuery SetErrorMode InitializeCriticalSection InterlockedIncrement GetCurrentDirectoryW LoadLibraryW GetWindowsDirectoryA SetEvent CreateEventA LockResource SizeofResource LoadResource GetFileSize FindResourceA WideCharToMultiByte InterlockedExchange InterlockedCompareExchange GetLocaleInfoA TerminateProcess UnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime ExitProcess HeapFree HeapAlloc GetProcessHeap GetStartupInfoA GetLocalTime ExitThread ResumeThread GetDriveTypeA GetFullPathNameA CreateDirectoryA HeapReAlloc RtlUnwind RaiseException LCMapStringA LCMapStringW GetCPInfo GetTimeFormatA GetDateFormatA CompareStringA CompareStringW GetStringTypeA GetStringTypeW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetACP GetOEMCP IsValidCodePage ReadFile WriteFile GetConsoleCP GetConsoleMode SetFilePointer SetHandleCount GetStdHandle GetFileType HeapSize GetTimeZoneInformation FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree VirtualAlloc FlushFileBuffers GetCurrentDirectoryA SetCurrentDirectoryA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP RemoveDirectoryA

user32

ShowCaret CloseClipboard TranslateMessage DialogBoxIndirectParamA RegisterWindowMessageA DefWindowProcA AdjustWindowRect ShowWindow EndDialog GetDC IsWindowEnabled GetClipboardData SetClipboardData DispatchMessageA EnumDisplaySettingsA SetForegroundWindow GetWindowTextA IsIconic GetWindowLongA GetDlgItem SetFocus ChangeDisplaySettingsA GetClientRect GetWindowPlacement SetWindowTextA GetWindowRect ScreenToClient GetCursorPos PostMessageA EmptyClipboard SetTimer DestroyWindow SetCaretPos ReleaseDC GetSystemMetrics PeekMessageA InvalidateRect DefWindowProcW CreateWindowExA LoadIconA CreateCursor ReleaseCapture WindowFromPoint ClientToScreen MoveWindow EnumWindows SystemParametersInfoA MessageBoxW SetWindowLongA BeginPaint EndPaint OpenClipboard RegisterClassA DestroyCursor SetCapture SetActiveWindow AdjustWindowRectEx OffsetRect GetWindowInfo FillRect DrawTextExA GetSysColorBrush DrawTextA GetMessageA IsDialogMessageA GetFocus GetSysColor CreateWindowExW GetDesktopWindow IsWindow PostThreadMessageA HideCaret CreateCaret DestroyCaret IsWindowVisible SetCursor MessageBoxA SendMessageA LoadCursorA GetActiveWindow

wininet

InternetCloseHandle InternetConnectA HttpOpenRequestA HttpQueryInfoA InternetReadFile HttpSendRequestA InternetOpenA

winmm

timeGetTime timeBeginPeriod mixerGetLineControlsA mixerOpen mixerGetControlDetailsA mixerSetControlDetails timeEndPeriod PlaySoundA mixerGetDevCapsA mixerGetLineInfoA mixerClose

wsock32

inet_ntoa recv WSACleanup select htons WSAGetLastError socket gethostbyname ioctlsocket closesocket send WSAStartup __WSAFDIsSet connect

gdi42

CreateCompatibleDC GetObjectA GetStockObject GetTextExtentPoint32A GetTextMetricsA SelectObject DeleteObject IntersectClipRect CreateSolidBrush TextOutA SetBkMode SetTextColor DeleteDC CreateDIBSection CreateFontA GetDeviceCaps CreateFontIndirectA

advapi32

RegCloseKey RegCreateKeyExA RegDeleteValueA RegSetValueExA RegOpenKeyA RegOpenKeyExA RegQueryValueExA

shell32

ShellExecuteA

ole32

CoInitialize CoCreateInstance

oleaut32

SysFreeString SysAllocString VariantClear

bass.dll

SHA256 3627adef7e04dd7aa9b8e116d0afc11dcee40d0e09d573210a4f86bdc81a80b6
MD5 6731f160e001bb85ba930574b8d42776
SHA1 aa2b48c55d9350be1ccf1dce921c33100e627378
SHA512 07ae0cb85464b015b35e6157228775a6ac66e5e62a1b47f9395307b61176b6df835e00a1518846507718acffc271263008cc8a9b2c1e8a0192c5438774e12437
SSDEEP 1536:lyKkZPP882+8hMJ8Y8bRVYvVqGWWkaloy4bFcx/Rus5Ay6X0T3VzkxH9J:NmNN8bRVYNqGzCy8RQwXQ3pKdJ
TLSH
T1EF930199F5D17627C41A713D6BF203F3D0DDEA88C42B9F8D4E055B8028E79D96988F28
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

262198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

BASS_Apply3D BASS_ChannelBytes2Seconds BASS_ChannelGet3DAttributes BASS_ChannelGet3DPosition BASS_ChannelGetAttributes BASS_ChannelGetData BASS_ChannelGetDevice BASS_ChannelGetEAXMix BASS_ChannelGetInfo BASS_ChannelGetLength BASS_ChannelGetLevel BASS_ChannelGetPosition BASS_ChannelIsActive BASS_ChannelIsSliding BASS_ChannelPause BASS_ChannelPlay BASS_ChannelPreBuf BASS_ChannelRemoveDSP BASS_ChannelRemoveFX BASS_ChannelRemoveLink BASS_ChannelRemoveSync BASS_ChannelSeconds2Bytes BASS_ChannelSet3DAttributes BASS_ChannelSet3DPosition BASS_ChannelSetAttributes BASS_ChannelSetDSP BASS_ChannelSetEAXMix BASS_ChannelSetFX BASS_ChannelSetFlags BASS_ChannelSetLink BASS_ChannelSetPosition BASS_ChannelSetSync BASS_ChannelSlideAttributes BASS_ChannelStop BASS_ErrorGetCode BASS_FXGetParameters BASS_FXSetParameters BASS_Free BASS_Get3DFactors BASS_Get3DPosition BASS_GetCPU BASS_GetConfig BASS_GetDSoundObject BASS_GetDevice BASS_GetDeviceDescription BASS_GetEAXParameters BASS_GetInfo BASS_GetVersion BASS_GetVolume BASS_Init BASS_MusicFree BASS_MusicGetAttribute BASS_MusicGetName BASS_MusicGetOrderPosition BASS_MusicGetOrders BASS_MusicLoad BASS_MusicSetAttribute BASS_Pause BASS_PluginFree BASS_PluginLoad BASS_RecordFree BASS_RecordGetDevice BASS_RecordGetDeviceDescription BASS_RecordGetInfo BASS_RecordGetInput BASS_RecordGetInputName BASS_RecordInit BASS_RecordSetDevice BASS_RecordSetInput BASS_RecordStart BASS_SampleCreate BASS_SampleCreateDone BASS_SampleFree BASS_SampleGetChannel BASS_SampleGetInfo BASS_SampleLoad BASS_SampleSetInfo BASS_SampleStop BASS_Set3DFactors BASS_Set3DPosition BASS_SetConfig BASS_SetDevice BASS_SetEAXParameters BASS_SetVolume BASS_Start BASS_Stop BASS_StreamCreate BASS_StreamCreateFile BASS_StreamCreateFileUser BASS_StreamCreateURL BASS_StreamFree BASS_StreamGetFilePosition BASS_StreamGetTags BASS_Update _

data/BrianneTod12.txt

SHA256 8d19a56c42b6c383d39115a9f083c64c9eba921be55104c8fdd5a8bc7fdf82ed
MD5 784ab8b536ea08e369faf52d9bda2891
SHA1 de372c76259cc60dc76436cf012597b71ee4b57a
SHA512 4b8796155d93a8d9ae1e9aedbfc6ad21b8ee5115e60d212dc46777f520e326ebd9e04a757bba8602b1b6b6813670b8788be358c3f3b3a8f0f04c4b6b200e874d
SSDEEP 48:1DLKu/UiLzRHLFj/FfLog7UULRLF/RL0B94B:1HF/U8zRrFj/1V7UULFF/F0Bk
TLSH
T1A0B19D12F4FA3538F8654EEC165D301D8EE1CC11491B1E802AFEAE3D5F099A9BE5396C
MD5 SHA1 SHA512 SSDEEP TLSH

data/BrianneTod16.txt

SHA256 4f95e933959489369546bca9c338db8eac21b29598cbd85021261ec72d01b5d4
MD5 4396eb8b315f635723b20629d7e52dd7
SHA1 61a87b279c3bc8a9d93280d348783bf906e10d51
SHA512 2e3f20f3e4a70627fa7ef485201efa0f01a1e7086206e163faed74819065460af320cc162a15efbf01f3b5f0f175385e87f333841e6bb777640de39d29eb4108
SSDEEP 96:11tkvMjjX/1V7UULFF/FEGDWIugINs8ZAc2w/dGUqRKnuw:Dh7bdPFNDWIugus80SdGUuKnuw
TLSH
T103D13D1A814E28BCC389EA6417CC9C47EB98CD09B97C2E5A3169CD2F07EE4A8D774075
MD5 SHA1 SHA512 SSDEEP TLSH

data/BrianneTod32.txt

SHA256 3b2652943f31bed79e15736f6b67d576f1f3accedb73ac02ce51f7f50a41e8de
MD5 6ec6ffab285ff95f8b2191ec598b99c3
SHA1 05ab523cc793e89898b44cdb36d04cf3d02dd0cd
SHA512 103744242b90a0406ad4b8fda207b177e292f5f758ff409686fd532f080ab9d801d60955588da17b79f93bdc8e8721dd2d5130c3ef508ab8a9405f4d2a5250d0
SSDEEP 96:12qPOMijgP/5gflvcdUT5SqFuKAjlsMWC2POfnILguEJyIy9RkAvOvu:cHQ/WKdUT5SeuzjlszLF9EJyIy9Rkwiu
TLSH
T1A0F1336B040E2EFD832ADA5300815E57FA51C3CBF0365A12727B993D4BF741D8AB7242
MD5 SHA1 SHA512 SSDEEP TLSH

data/BrianneTod32Black.txt

SHA256 a5bf8c7ec6ad71c5f7a7cdfc595ac3474e0a90ad42bd6b788aac27e9bc04772f
MD5 30dfcc76c9d1eff9749dd6615ecea613
SHA1 c7576d165119f10e33b4389f72efe81dd9286bc9
SHA512 653f382d47b9a69c2835a3d7d8420077eae8beec3153c8882354d42d9ff483d45507067badd6f72665c1b027fcf7e1515d864c96c9314fad9ead3b960a1a1237
SSDEEP 96:12qPOMijgP/5gflvcdUT5SqFuKAjlsMWC2POfnILg8kAvOvu:cHQ/WKdUT5SeuzjlszLFHkwiu
TLSH
T1A7E1006B084E2AFD832ADA5704819E17FB51C3CBB0329A163277993D4BF741D86B7252
MD5 SHA1 SHA512 SSDEEP TLSH

data/ContinuumBold14.txt

SHA256 bebae63aae74c523a82dab53fc0786561c56f47e2f5b9df2bda973d09bd9d433
MD5 42a6c65dc0e5c55a160a499d37166fb0
SHA1 93d5e23bf70b6e7f62662e99aac95b16bfa13257
SHA512 b06d6cc88409bc96a577f0748f14ae59bfc20b2764fa55872d47f0742c5d1077016d23e8561cc09ade245440c5b5cfade68db9ad13bf039cf2f563fa735730bd
TLSH
T14D61EF660A4D5CF95729DB1944D4CC17BB88C205F33D6DC2F3298E8D4BF982647B81B6
MD5 SHA1 SHA512 TLSH

data/ContinuumBold14outback.txt

SHA256 7523ffc0d175d4764c2053262e7d2245eb2ca1fde5f54987280d5d7eb742158f
MD5 4d27402ce35a15954c7c0c6e2fdd7761
SHA1 2bcdfe5048910139c0ead25d09a452de864ec704
SHA512 bfa3dbde44bf23fc42520a21f91ba687d2d0df2ebd5569fe98bd53c76fe49bba7067338012a12642945b0b34bd6a5b2cf6ac59cab2cf5a4405188e403c9c92fe
TLSH
T19861ED660A4D5CF95729DB1944D4CC17BB88C201F33D6EC2F3298E8D4BF98264BB81B6
MD5 SHA1 SHA512 TLSH

data/DwarvenTodcraft12.png

SHA256 3f00e36afa139bba38f71b20816b1f80de7b3f5f03ff718f9c8e188aba59d6c6
MD5 d36487f75fa3fe85f47ec41028814c0e
SHA1 e13248e87eb7a945ecb34daf96b1d49b3ae2c860
SHA512 b97eee8281bab9a347f84c0d9ca2ebcb9b68487b89ca438699fc87f6ef814d7d59812034f7dc4a8a2dcbea9900058b19b19ae0d79261a338b392dcb010c37c9b
SSDEEP 384:E3WQ9yOWZnOBUbuU/6TVvmYdAAB3qjB+vCyJ5AYivDYgeqJPKqld9P9pV:CWQreoUbvGT3qECyMYiLxVK8
TLSH
T14892D067E6CDA2B55859E6B74C0490F0C3BBD01F36FD6A77EA280D2584718BA0241CE9
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft12.txt

SHA256 e20099b0fa58b73e78728b7a485586796e4ae699ec94c309ed8f36713a8b84cf
MD5 653619a1ac290d4e582accda776cba18
SHA1 3d73aaf88d5c92128cef6250690509a14b06b2f1
SHA512 97b6736c020c4cb3023eea73ad8d70eae0710675fdc948541c963acf15cec382a49cbec264bbd78fafde6fb1624dd5fdb16ee7896ee3481cf2453c67356936c2
SSDEEP 192:rh4/Ujps+T9hHvR0Qv20rXyVJFosJWlsxHumTWYGuRX4jZP393/M3ygmXHrXJ:rq+sGHHVtrXyVJFosJWlsJumTWYGuRXG
TLSH
T193E19AAB060E5AFC834FEA5704D18E03BB74D487A93C6D01725BCE2C4BEB52887B7565
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft15.png

SHA256 9e757cdfdfff0f3c393ade71f7cecef1698c741f1b0dd3d232a4e985c3ccac70
MD5 feeadb496408590765cf5f5045e08589
SHA1 f22894fd9449f62653869f64e6408050ade11920
SHA512 8022e5d815f674be7882856f1d3cc25879f6aa5c58391d0ac014e01c1d1413e91e4b364d0f508f78f28be3933254f4e7c0ba0a982b1214ebd51bc6f2260bfb59
SSDEEP 384:hOIcqQZixFiPDz9q0vigxacx3TPr1f3EJlk95IC9wi6Tui1dTMA5:1cqCnfi4achTPrmJlkYC9wiQ11MI
TLSH
T1A862D1AE74340D49FE9201FA80F4BA3295CBF642E0393BDED49A3153CB1B94F5658316
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft15.txt

SHA256 6ed7ec31b277cdb457c8be1d98b14012cf4704f4a26c5b17f37f9d453e57ad31
MD5 a7fc699966756c90606ab32c4c569855
SHA1 2b8a8b44c32834a635ba7eeaf032385d200ba46d
SHA512 c8f911677c36c33536047e807c976865d62f81b2d63dcb7c015ac16254a1aac26f2dca078fe3b686e6e3c22ce9e84d64eb26b4aa7efecba6b7b22e3d7eecec09
SSDEEP 96:12qPOMijgP/5gfl3bO93ti4aCssgcgl05wderD0wPXWmEU:cHQ/Wlb03tJaCssgcglV+oI9EU
TLSH
T1E7F1C31B068E1AFC436ED21700E0CE07FB54C796A23E6D52726BC97C0BF652897BB561
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft18.png

SHA256 8d6a78aa9a5101a03cfba04a122e33632629e8ab7fa74bf3e91ef560637b7c96
MD5 df955d7cf4a62caa23264e16ac0ea80d
SHA1 bcf9203699e077a4683377fd81a808256608f316
SHA512 2185186f6ae02a3f0b950de917ea7885d00a64abcab8415a58dc71c5ae5c48f8fd42e54b3331e5bd4b59657ba789e291533e49230bc78e7562132cdc9e3b7507
SSDEEP 768:qQtp1uOVqdvdplZ82zOCqFJOcxyZIxZjP6eX4cjX1vp/Lci5:qaHurdplZxvqF4cxVjtXtVT5
TLSH
T10AF2D1C819392E9E14F0D270B7E392CAEE99DCE5D48C6358BC80E99734E9B4065F5F21
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft18.txt

SHA256 b04283d9067b2239ca323f049009900300454fce9a7b8ae5b884ceddfece9266
MD5 f20d3a5151891be7925ebf6a4f891483
SHA1 788a5a77728379f57315055a87f71ddc4879d473
SHA512 264ad7a49dd715698490dae59ec78c0e57ab5aaecc311585f02ca8ce134ab91a3b2a0ed55af2ac0c958e378702ab6f4d49bc615156be001e19145c2f4a8f80b5
SSDEEP 96:12qPOMijgP/5gflIjDNglogZ/Zt8NAuQhUKdURbDXbkbzPFC5iCc5U:cHQ/WQDNgegZkeU6Fz5U
TLSH
T187F1006B062F5AFC436EEA1605D48E0FFB50C687B13C5E46723AC92C0BF561583BB1A1
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft18BrightGreenInset.png

SHA256 4b348162d745e31430187d326c5d5b9a82a505784e67dd3d48fde3438ad4cdf3
MD5 e05a8ad2500c45148001f3dcbefac87f
SHA1 dbe4d525c00ca3aed2306773818869058f456202
SHA512 914b74a4ee682d9c39b6ae3676d8a0585a7049398c997e100f43a43cc6cf5c32d350a500a9904c66a0a06df4bc38f1c30bf84be83a30c014ebea81063813592f
SSDEEP 1536:vS8GCTO0O3UKmehDcVrxZATWO2g/oI81G:v7ZokKmYIVrx+ak/oZ8
TLSH
T185330246715ECD1CCF9167E782A42AA33AFA284C4AA6D71F5337E0F63728A71497C190
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft18BrightGreenInset.txt

SHA256 5c08fc98c070bfaf22cd30bad79eecd7ed99de7e0afbd4911da4ffdbd18b63d8
MD5 2a11a1ba8ba2dd1734b681616c6fe4aa
SHA1 7a14939d2d71691b71a65d196778f1414e629c4b
SHA512 268f417dd50d323db1843e13b56706245235e554fb1effda26725fbb707ebb4f63d1ec6e9fa16f5ecebad97c233d65dd0ae61173d0ed0f3bb8389b07184a9cbc
SSDEEP 96:12qPOMijgP/5gflIjDNglogTjZt8NAuQhUKdURbDXbkbzPFC5iCclU:cHQ/WQDNgegMeU6FzlU
TLSH
T17EF10F6B062F5AFC436EEA1605D48E0FFB54C687B13C5E46723AC92C0BF561583BB1A1
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft18GreenInset.png

SHA256 f3b5bb1247a75966184b16d36d5653c680055bf284edfb4dd3aa1098e026b661
MD5 37e576f51e0cde4da5935d5944b8ea2c
SHA1 c6feb6c86272f0b74c50bbf206e9bbd847f609f6
SHA512 b0648314f7aa5aedd0c1137d3ea761022c3c98242736aa68e697142d80266efed25e268d1520d7bab484be4378dd2c2f1b8af311ea9eb1545607d52b410c7e65
SSDEEP 768:BftBULlvKwYQe8Twg3AyT7EB7p5lpviFQ3vajs9WyIoWVRIjgBRNw1WR+DqqyZ3:Bf8xMgQoEBjUQCocZoWV6jgBR+e+DhA3
TLSH
T13733F13CC56BD04BAB9B8156CAA59DF68000899F8371D94D0CAFC4ED27DFC73A1AA750
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft18GreenInset.txt

SHA256 47fdfee7892ca8a5afda8d972ba6c3221d4ff32401b803853dd1e1fd68073e15
MD5 133dbbfd8fbc924d01b36c6460da7e40
SHA1 7ddf6ce3318cbffaba66db6affb490ee4a7081db
SHA512 f10e01f033da9f37e77c2e399d1f64afb8b9faf1fb24ee2ec161c581ea07e4e59af6ede6b436b17ac8af100b2fe6c1ca8be5cf4f10f987ee0a088c299965b477
SSDEEP 96:12qPOMijgP/5gflIjDNglogiZt8NAuQhUKdURbDXbkbzPFC5iCcFU:cHQ/WQDNgegPeU6FzFU
TLSH
T1E4F1006B062F5AFC436EEA1605D48E0FFB50C687B13C5E46723AC92C0BF561583BB1A1
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft18Yellow.png

SHA256 376a6f4d832c826be58218ec0a9c5da930f2c867699063f7f850eb1230448fca
MD5 200b4f575f6f9e84dce14a798e4b1cc5
SHA1 89c53ceedee786d2e5163ebaa492d9a004d80fba
SHA512 935bccd7c9a1a3a7d3d57c6523bb0f62267f4426ef59a11ad267f876d32cb7119142fb30f731aabee6ac498541b6aae0b003e38b9ac0e9366c7f354f22334625
SSDEEP 384:AnqIqDnOSz9DEWewTKxnJR+qy9VkgfCAJd3:AnqXDnOWEWewTWyqOHJd3
TLSH
T17052BF192E311F40D9F556FDFAE42928D2C6AB6A6930DA4099570A5B7D4EFC332F0704
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft18Yellow.txt

SHA256 952b05abcf82dd625f7a86fe9ee8570c8da472e5ed9761ea0492b57a2e05e61b
MD5 86b1d1d1731c30e6d5ed06a434788b9f
SHA1 1fc4b96f004d355c7f145f30d0208efb454be8fc
SHA512 8fab1968bc988e7b5c98ebd48502493fb0cf41f4e2f646cb4d8ab59a2f1fc81794f78bfa1653eda0f3f80f9c852317fd8fadbaf08d42ede07176e57822f27627
SSDEEP 96:12qPOMijgP/5gflIjDNglogxZt8NAuQhUKdURbDXbkbzPFC5iCctU:cHQ/WQDNgeg+eU6FztU
TLSH
T1FAF1006B062F5AFC436EEA1605D48E0FFB50C687B13C5E46723AC92C0BF561583BB1A1
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft24.png

SHA256 92efa250fd0a4630f788cde16166d7bb3ef4a1b5a4a9f8483759e8dd9ef28d2e
MD5 872e2f804de02df3acc1e5a4fe92b7b5
SHA1 7aab3e7c5933017217371319471da1c33b5c6cdf
SHA512 5d02dd0a5bdfaffcf085476df871a4eb02552200aa5112d5a8893a40e89029ad17fa6c6cef6e2afd79d3c26e192635595adf30eca603f4e0002ede0f10bb0c2a
SSDEEP 384:YOOGo+ONlKW2iqYDWD5biTPlLpQbxKfkGW3Fi9y8gCvZNaYGHX1J1ujNT0:Yk52r5D7KbRGW38swYYcXJuu
TLSH
T19AB2E1C9588D1E34F8D485BC2A6B2A38417F961D4C0AD5B0F8DE59A9F1A5CB2CC64F81
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft24.txt

SHA256 5cc8588e18dd1452b38eb26d564da009bed5718200274cf951ab5864c0b463d1
MD5 1b63b709f885fac8cd01c10e05d0fb17
SHA1 ff2256fe3e0eb41349a935c9d1212136e86526ae
SHA512 2d38b732da6bf370df5e48e107ec32d48380617073f1124579ec7d58e825f791f348f7fffbf33e9a408d37b362c7fd2d8122a8cf909f25b3e530177ba33d490b
SSDEEP 96:12qPOMijgP/5gflLsQ9w33mX610e2v1kXgkT/hDQwZ7l91a:cHQ/WSue3s/1kXZD91a
TLSH
T151F1F52B010FABFD436EDA5720904E07FA54C297B2346F8772B68D6C4BF5D1286BB580
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft36BrightGreenInset.png

SHA256 30276811902c02a7077ec956bd1356c0192dee2e238ea81a1eef8ef4954262fd
MD5 8899b4d933b84df71eeb20759ea88bae
SHA1 602e22c7b4708e5859c69d130e709e843c63327a
SHA512 d248f306d2fdd1ecb30c57c25432d5e43fb722600f34c1e18483ca9b716953e2dd694a35be6d621e87c9b11d68c92a7423284cf75f9103401a3c8065cf23eeda
SSDEEP 3072:ci+YAmrw2yaV+usS86Z1cj0k0sNXKoK1802jLU:r+VwqaV+uf86Z1cjaV18jLU
TLSH
T1D1D312A72F1F4D52A530F976C8DC11260D8809D6471A39DFF8EA078DA4CE1FE746246E
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft36BrightGreenInset.txt

SHA256 f6a4020507562362f6b2cde02d65e772f5636027b04f0cb013fac15514c20ab2
MD5 4748c6d33877d0cce6d79c979bee6360
SHA1 56f945230e4dee52b5d1c0abe384846d41a7e4ab
SHA512 800f7c86dca1d9ce07f57b171d1302e50d790dc684a951155ca904059bec046b6bb557c957fe75bd753c3180553ef14b232ea74649724b61a9b3a03e8913d566
SSDEEP 96:12qPOMijgP/5gfleUQqVBnr4gPSIb3UUBafPx7WlQp:cHQ/WeqTDzXEKQp
TLSH
T1C4F121AF000F2AFD872EDA5705A84E1BFA54C3DBB1344E12367B8C2D4BF651586B7660
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft36GreenInset.png

SHA256 e728f38e9f1c317d412da3ff9c2a8769bb442b9a3912d76b37de1a9be588791d
MD5 abbc03789213d68be852a911f1b59a3e
SHA1 62ee8ff98e85072551d387145189cbfb2411d25f
SHA512 1354393cf3d283a7d4d30dd7b293b3ee740a3da6590a5533a5739e5f470b84ddab42622929576dcd8743e117b4d42f9c8f2ec46dd3c456a737a035a4facb7162
SSDEEP 3072:qBf/H41M0jwz5FJtXKJnCIdGVqKcgH2y0sZCWRK5AQvLprO:qd/+R8zxVBIUVqKcgH2DWRQfLprO
TLSH
T1B0D3126B96F0B86EC81201FD494547D0137B8B6D9CC58635D610B384FBEAB1E4E23A5F
MD5 SHA1 SHA512 SSDEEP TLSH

data/DwarvenTodcraft36GreenInset.txt

SHA256 4ac9a07e6bcef80f9a4713eb2130c87f9643ccb1750266d875a1f087783b58f9
MD5 b9ff0937f1327b7f27cfd1b85b698b11
SHA1 29a65be291c48bf02cce10f8ad6ddec444975285
SHA512 98e95f8baf55239cae220de626acce6a5ed1e91358f351fda29d82771466843f54f8c0da9d59f19d909d579dfefdcc944290d1379a6df1a1e58fb09f7b70f88d
SSDEEP 96:12qPOMijgP/5gfleUQqVBnrdgPSIb3UUBafPx7Wl0p:cHQ/WeqT6zXEK0p
TLSH
T1E5F121AF000F2AFD872EDA5705A84E1BFA54C3DBB1344E12367B8C2D4BF651586B7660
MD5 SHA1 SHA512 SSDEEP TLSH

data/HouseofTerror16.txt

SHA256 a7bfe4fe29fe20e83331d90674c9a6daf6a14b123b86df262a3850b40872a079
MD5 6494ba92a7c19ca69dcc116772999236
SHA1 1fe5cd631cad2d3792edc056adb2318a0ff174ce
SHA512 82206b75762fd0f82f048f547114278f419b5f8177c61663048184e9fc885ad920a23343b30865b84d727d4f2841dc46b49c39487eaacb669c9fa95e65e01c1c
SSDEEP 96:1dqPOMijgP/5gflq2Vg8623ziayjt1Fr3yZkV6du+kucn:LHQ/WU2Vg8623ziayjnFWg6/kucn
TLSH
T1F1E1C05B060F9AFC53AED62626448E23FB54C6A3B0381D4272FB886C2BF9C1587B7155
MD5 SHA1 SHA512 SSDEEP TLSH

data/HouseofTerror16Outline.png

SHA256 0ab3397e7e60d5e6d07f9c387346c37ac0255a20e479e4d3b0826a0b458cefb1
MD5 96aaab1e9e88a198c2ce2e9d6a2a3bfc
SHA1 0481b29f0ccae83a3136932ec9ffb6fe5979cd4f
SHA512 50c709f6119dd703a9828f05164a6a6e37e9f73e0892628f9a204ea6424bb97ed3846c03774303e88a7e957f16c547fa2194004dfa381ac7662e82686e486ef2
SSDEEP 192:cLze4BsqBpmyBogrzfTHxZHQpKak7dzz6+tSPvNeYOpXM:cmKDBpzBBH9ZAedPXSNeYOpXM
TLSH
T146F1AF2DA27FFBBAC76E48778A4CEF67C4711156219DC7C68CE230B558D6C0A50482AF
MD5 SHA1 SHA512 SSDEEP TLSH

data/HouseofTerror20.txt

SHA256 fe5999afe7c4087a73aba2c3b326d45193f7d957f354557b93209aef32c0f1f5
MD5 ee299344efcb1c3f460d59c73e2810e5
SHA1 5c2327b66de2ddeca7d839f9d64e96772cd80757
SHA512 2c89fcdcfebb84befd97a5f6215e46fe2d05188f469d03e5710a01f76f641a8b2e97769c4be322fa588e49c4f6c9db6e4cbd72e311ffb20fe45c677e4e362532
SSDEEP 96:12qPOMijgP/5gflzR6sGDl80LvssB7cO3oUnLdShJeAvK:cHQ/Wr6sGx80Lvssd3oEdGewK
TLSH
T1F6E1C76B060DE8BD63E6D6D702904E03BB45D29AF03A4F5272678D6E4BF64B587BC070
MD5 SHA1 SHA512 SSDEEP TLSH

data/HouseofTerror20Outline.png

SHA256 bb238711cd57673a65c025bb427ef60db1a45ba0a489a52620c6913f5e551af2
MD5 c73befeebd44ad42918854b4a4f91eaf
SHA1 f2938181586132df9e8b7512865b2458cdac40c4
SHA512 3d53e0367c56857426ed1749a312d95fc9dfc0e30b7fc11e72749026238dc9207557204e9e0db90e4c89ce9ba704973d518400702f4eb84ea71ebc3b22019517
SSDEEP 384:kfHoFPPJLPn2tjF9tqv6EEABziYSfxNYTvdS:0oFPBQF6vUAJFAkdS
TLSH
T15A42C01837AB0617F48F813F68A48EB06FF5F3D806807A1161DEB6B7DD15D147882D59
MD5 SHA1 SHA512 SSDEEP TLSH

data/HouseofTerror28.png

SHA256 d6936c15f0a7171d5aa6e5f38c8996b0e5c5c6b2d9eea8750c75002a16a3a5a1
MD5 232a4bdb1df2e6c15e207a49afa122a5
SHA1 2d42c3e1e13457f80b62adb9761bd71a012d6cff
SHA512 b92568c29d4fc146f1683ec4c96e05bb640aa5d754673aae2a9e1d21b61f07bdd86bfed6c8bffb335cd103a68010c59671b8fbe793c03676dccf3a6b41b65cdf
SSDEEP 768:FHb69DxFQX3SPpXRAgzdRyvznd7GWWewBjMCCC+W0hrrtqmm741VnGUv26ytun+:Fm9q3SPTXdRKQIwMC+WwYmm74fGUv2S+
TLSH
T16C23E15DD4684DC1D28EB033AEDB2AD9C28CD4A8B611EFFE88DC62A5ED2C5F25104217
MD5 SHA1 SHA512 SSDEEP TLSH

data/HouseofTerror28.txt

SHA256 9c9a9d0eefd97cb69845b337818925bf2a6b004911d0d38bd4ba15392cb39151
MD5 7643d9bdc37f9c8c4dc9c01724322ade
SHA1 5439e929a1a1c018bd0a1a9c610f3774a1a40ed1
SHA512 96f36e87edd75f92286d45960dac52f940ba3d338af35e0f40f93e057dbfac7c46b5763b49d5eec61676be696e287044c837330eb6535d2ebb60d911c7776645
SSDEEP 96:1dqPOMijgP/5gflcX9Cc8SckUqKN0XAvq:LHQ/Wu0cNlUPaXwq
TLSH
T1DCE1D877084D68FD8766DA5701A08E17FF51C38AB0329E66327B993D0BF741D8BB9212
MD5 SHA1 SHA512 SSDEEP TLSH

data/Pico129.txt

SHA256 3357ce0202211ede838c1f3f386a2e1783ec1d32280ea0dfc4e28174d24a511b
MD5 40911cd97556be3a0a8742960c23c5d0
SHA1 96a959d7425de408a18f5f1ee454531cb29b2484
SHA512 2c22fd07fe82f26eadc465c8ffcbdfeeb5891120c2b42f5a52a79e66956d4375ddb108b2e1971bd27b0152870955193e45d50fa9648cc35bb41e103feabc3c98
SSDEEP 192:cHQ/WwssssssIsssssAsssssssssssssztQsssssFAsssFssssssCrnss54ssssX:coNssssssIsssssAsssssssssssssxQS
TLSH
T167E1A3670B8D6CFD07A6D6A505044C63FB429122F0384E4A373F8ABC6BFD9358B36994
MD5 SHA1 SHA512 SSDEEP TLSH

data/Pix118Bold.txt

SHA256 188330175761fb8f6c141bf6a15c8e518f7dca9a940da9a017ad5372ea2a58c1
MD5 aad888e12f9f2efda1618591990de4e6
SHA1 c63c5c08594aa442fb3dbbc8f774fde2739f1c61
SHA512 fd50d4838c19564b764a3c9ca9162cc8d3a2092bffa7cc3fc321e8690857189fffeb2ac83e01a6916a70f76389ec30ff4e95db1df5282dc2dfaee20d78c98e03
SSDEEP 192:cHQ/Ww/sss4Kss4UQCAUjXdYiONOEdO/OEu/1zhOWOQObOBfOJubHdAy0XKj4Obb:cot/sss4Kss4DHn
TLSH
T141E1ACA71A8D9C7C4756EA950B008C56FB709201F0384D4636FB8EBC8BFB93587B29D5
MD5 SHA1 SHA512 SSDEEP TLSH

data/_BrianneTod12.png

SHA256 6e508d5e84de77de1d4dcf89ea6caed408ae8e2bbfc1537b8c42f2466224ea3e
MD5 da4a39a908bdb79449caa5ebc145bbaa
SHA1 684d3667a0f05a67ba75297d745fe59a7cc3208e
SHA512 88b94f0f1b7a4550c08fcfff6ca8238b060eea3d2ec56c393e3a656610967005d6531768cf08bde3cf64cc3921918431bffe59c5d267bfa8f4824d2abb3eeabd
SSDEEP 192:RMPKH+/nobPT/n1HnIPFPASOVRbfLjQDWwBiTwNcLN:eKe/arOPpQFLkpBiTi0N
TLSH
T1D7F1AEF76334AC65AF202FE2FD72E8CE4955645B82251AB1A3219762B6831347B8D074
MD5 SHA1 SHA512 SSDEEP TLSH

data/_BrianneTod16.png

SHA256 05f996c0c4e8a6760a80dccf2dda0bcbb091044e3d33a842b9168d4e88b56f75
MD5 41a921fa04623f3f789205560861d28f
SHA1 1110693c3bdd88a07a2f7b954c2e9a5ea478bc15
SHA512 4ea0cd15ffc7a7038bb82e63b52556d1805adf103e3d08d765cd893c17a4507623accd3a03600dec45b2811271ba92a2513f87ae827498bfe46f0b7cb0fe44d5
SSDEEP 192:gzccIQVHJVKPwfkuuVOpkW8LezzMu7uIgeMMNcKta8vVNIkV0ik:rcIQHJg2k1V+ke7Dger7XVtk
TLSH
T19432CF1AE3530C7E909331DBDBB9D095A6290D67DDC713C99FD6A8A06E04528DECC1E1
MD5 SHA1 SHA512 SSDEEP TLSH

data/_BrianneTod32.png

SHA256 e21bd8fd1ef281a24f6bbafae21c42af0047e1a4a0d5f99a8c1cc0c66b868190
MD5 b44486e648f24bd7402a7c3546df4c02
SHA1 271d7965e6e656cec124e640c28cc827c0e661ff
SHA512 3458441d3484a21c8e76ca71102b6bc25fa574b6fd377e198b0a2828cf42fc725597643252a6bc9e2e9d13d5a408b28567c9d9e394d899e76e5d6cb1cdd6da1d
SSDEEP 384:1Zvs+0DhMbn/YPQDVcncGLggsPuoIceYqwvsgqS4vT5yc6Y6RXioh1Cd8/0T12Zy:z8cccIg1zzvOgq981k8/0TwqLGdyH
TLSH
T1D1D2E19C5B52CDC949DE5CBC0C7BBA2EB63D0E066D3C6248DC772E4A8024E50B9A61DC
MD5 SHA1 SHA512 SSDEEP TLSH

data/_BrianneTod32Outline.png

SHA256 5ca69063eb2446ef957cd91eb2ac9e1b20d79242ad6db8cd176bd0b1354a86d8
MD5 954fd2838f77d2e0dc9c0972e6ab94af
SHA1 edcd5229171f5810fbc0e41b68ca748393cd1dfc
SHA512 9dd481de953128a3d831e60bd1a65c501f5118a2c5359804dbc1dcdc33ca233a2b27ccbb82db934669a657e9523119b26fbc3be4e874920d94f051f4ad496ae6
SSDEEP 768:ZB7KV3BqnJ322fxJ1S5Ela+nrysK27J8bN37dJD+:v7KlBqnc4JMCfrysxY37dI
TLSH
T139C2F15EA45BB443B8B1626BA58EAC617E0137EC12CBDCBE1002268F1B4D4D59FEF644
MD5 SHA1 SHA512 SSDEEP TLSH

data/_ContinuumBold14.gif

SHA256 cb2c13f8aad0f2856459adf66f2d315a03524568a7288670dba2dd3394167b2f
MD5 9f9d8cf1afaced73150d300bc5ede052
SHA1 8f1292f818dd02b5872e3a8783d4e6e8fb4c47ce
SHA512 12c7c5a1db5e9b938374b95b665f1ab939ae20ae91e948136de661fbc903469113d37523a24c2cb1f8b40f8061fd3ab6019ffe1eea8c191a1e9a54b9c75c1537
SSDEEP 96:uW3Om1WmYymm9SoXmbjlZj8tt3Q6fbDRLbuA6cjJAhMUNlXU68ra:uoxhUmbXAFIblLKcj+9NlEja
TLSH
T166C1AFEA885C3B430766E126184EB4C47B00B93E8BE3397DB560D166C1E07438BB49AB
MD5 SHA1 SHA512 SSDEEP TLSH

data/_ContinuumBold14outback.gif

SHA256 896cf280256266d1c0b5ef17ae14ec1432297209aa6cc2e11fde14d38e880aef
MD5 ec4aa7e82aae56f974bbe05c8110b1be
SHA1 30103c8825986a50682dbe8a976c4fc556fc3b23
SHA512 efbb866bf219336b698dd12549e9d42ca52f21183eb8403b0df0c0704132e66431477d7c778fdde4de56896b6ae2dce401094a984efd0be297add8cc12d4ea6e
SSDEEP 96:1vZugyJXtEgATUNGTy/UBPTR7D4BVGXk+c5utHfmxggfWiq6hCfsu50T8OtkQ:1GuTY1/UBPTgs5F1mxdWP6Q28OtkQ
TLSH
T136C19FB7D44AEAD1F9D0CCBD0DC144E091EE01A30A5F3C11C419C644D50F6659A4FD9A
MD5 SHA1 SHA512 SSDEEP TLSH

data/_HouseofTerror16.png

SHA256 36f687cf96c11a08afabd08f3e7b5e59046a52ed892246a2b51d520f316d4ca4
MD5 bfa672281d88edbfadc6941ec96a954b
SHA1 4346ddf7f0db8d708fdaebb66e0101da380e0da1
SHA512 86da0857f9988fe44731dfff40bb6bfa662364261d1f09ed4dea218caaa5c8663a1508090d5d2d425c8fef6a763e8ea49a06d8665847f260f1399683094a88ab
SSDEEP 192:lSHIIHUCD4waA2IuWKBRReoV1ZeXWgU165N95XPQiStj1lEmctc:E50wb2j5BRrVCGgUYN9hPQiStj3xV
TLSH
T11632BF4F26F4C63AEF4B0E3B622EAF2B455B0D5063F58B5CD9AE814DA800F41486971F
MD5 SHA1 SHA512 SSDEEP TLSH

data/_HouseofTerror20.png

SHA256 78b2894d9dda7c5aaf1ea0404f9eda2a0f74d65ea332ffca02081f4316078e14
MD5 1e33b81217998f583df9d83aba875dd3
SHA1 518fa03b440683fc7267e3d8086a9f35e51e2857
SHA512 288920e7b3cc96339c61a847ab3e8b17729b5778bee4af6ff7598a7ff7d990e125c7f4c16f516ee87235089cd145c4e87e38ef3d5a32784aa4515365114eb67f
SSDEEP 192:KrOnAEkVwsKNyJkWKPdswMzYiJTA3PAKntyt4nJc/x:K2A9iQJ5KPdsdz1cPpty4cJ
TLSH
T1A112B08C7D86969B12BE0C2B85EDE864C34FCB0971C4A3A485CD74ECF86D7B37511621
MD5 SHA1 SHA512 SSDEEP TLSH

data/_Pico129.png

SHA256 aa0faa7c7e8c7992391f4edaaecec646813f0b68e7cecb0152abac0a375e5e76
MD5 1ae0297881d4762d19c0b531cf6b13e9
SHA1 4b42847953876b260adb54947735f713ddba86cf
SHA512 1dcdfe021ea2c7c8e527e7b3d3b4137f1f5f389c4adbd52c9e40720da9e45595c3a9ae0fd662a0547eed0d123de62a71c40006239fde395781941626380a7810
TLSH
T1B611D56D3B418E480E011620622EE8A07723FA98D972E71E43F269F06CAB012294081B
MD5 SHA1 SHA512 TLSH

data/_Pix118Bold.gif

SHA256 ff5e3ab0281adcdaa4f57a7a2c3addba6322b1fc023d476343a59d7664d3169b
MD5 78276325d182e2475686aa9b333e3c1a
SHA1 c559f25a4920ac9e2d8c12c3dbff4cfa141636d8
SHA512 76830e4cf3d7c733fb9b34fd988a5cae8e284a563d5d3039fd7006bfe6add5266ed51f3cd48d18c0c7b3f137f9744a2d3c4489b3aecb4bce2ac5170ec4af6672
TLSH
T19F1184421CAA3198C39C97B06B052889895A896CBD2E12AA4A9C4442EFBD30A19F118B
MD5 SHA1 SHA512 TLSH

eata/BrianneTod12.txt

SHA256 aa1b490dda51610ffb67b8da9c002a2c710da5ce8575335e6510cd9a3fa68321
MD5 079807d59eaf37b5a51fec22409876dc
SHA1 43c85db5582acdf16d1f4428e1dfd2bc77b96258
SHA512 d81088caaa03ea0fac3b2a18b7effe536ca9a230a4e54b0c994d05c1ac6b546fe43050ec72f9c7a59cfd507401771c7384ca5c8b7e82b59d7b9c5ea7f33681f5
SSDEEP 192:cHQ/Wa4dx+FOsXngbssssssFOO63GAJZmv5JC4J5A2cPnVkH30WFq3xNR0ING3zJ:coAx+FOs4ssssssFOO63GAJZe5JC4J5J
TLSH
T1D2E1D197070D9DBC436AD6A904048D0BFB758201B0383F5636BB89AC9BFA536CBF7516
MD5 SHA1 SHA512 SSDEEP TLSH

eata/BrianneTod16.txt

SHA256 316050fde141f6dc71b6fc01c19facdeeabe70bf7a8a2131393b3c70193da312
MD5 118a1e3deb6148dfa5784fba8711e04e
SHA1 fc3eecfc5b18805c59f45073d98899b31284f7f4
SHA512 3243dd2a5184fcce45398bc445e0439f5f82248909531489c2334c71616bc8d73ff2541820d66d048ad27d2de1aaf73dfae5365600e6b3e3cfb0f2373063a656
SSDEEP 96:12qPOMijgP/5gflpGgWP1Z2nppstCre1SS8R2POdzU/sPEM:cHQ/W+gWP1Z8ppstCq1SW2dzUEPEM
TLSH
T1D5E1D557060D48BC43DAE61904808C0BFB59C619F13C5D5A72BBC9AC8BFA4B5C7FA176
MD5 SHA1 SHA512 SSDEEP TLSH

eata/BrianneTod32.txt

SHA256 7539f271283b043b742ac78bf6b9519b37cbfbaf9a97dbafcb6bd0431ce9fe4b
MD5 2ed5387a7c8c41c96277f04b8a5d2c23
SHA1 b4597d954d1e5fcfc1ccec1eb152f87c6e7e981c
SHA512 708feb2c86809e5513efd2613a8a163a1d863db8d4043c3e87f548b0bbbfbb71a40debd963e8075b6ff1e6d9ed8c28a1fc03102646b0cbebf9a331c43b25fa6f
SSDEEP 96:12qPOMijgP/5gflvcdUT5SqFuvjlsMWC2POfnILguEJyIy9RkAvOvu:cHQ/WKdUT5SeuvjlszLF9EJyIy9Rkwiu
TLSH
T1C7F1326B040E2AFD832ADA5300815E57FA51C3CBF0369A12727B993D4FF741D8AB7242
MD5 SHA1 SHA512 SSDEEP TLSH

eata/BrianneTod32Black.txt

SHA256 66c432e6945681264c75ea873c55279b3c00e82009adabef54d00e538ad9811b
MD5 adb2fadcfbf4a66a26e1b1ce18660b89
SHA1 4daf41d1930bac81f0658ac5684931936f2f5b04
SHA512 1abd8c430fcba27309e18719b958d9247f059614b7a9cbe3fd3787ae0c2c3cd45cad1d5e40f3565d8172ad483fd40ed8acab547bdb646f7b21c9130f2b7e4104
SSDEEP 96:12qPOMijgP/5gflvcdUT5SqFuvjlsMWC2POfnILg8kAvOvu:cHQ/WKdUT5SeuvjlszLFHkwiu
TLSH
T176E1006B084E2AFD832ADA5704815E17FB51C3CBB0329A263277993D4FF741D86B7252
MD5 SHA1 SHA512 SSDEEP TLSH

eata/ContinuumBold14.txt

SHA256 be2f6b1e43084dfbc9768c978861cd3c22c68a348dd7503f263cb8aca673bfd4
MD5 eb1a0fecae30c343e25c77527ce3d635
SHA1 8704a32bea34c1a0a4c60e2f9f773ef9fb7368fe
SHA512 eaaacd4b4718f01d20890c4d724a766b1eb80eb513c93e7bcfb551ece86cd9bc478f4f34619fe047ae42c1c505ec3c950a7249b38023326fe84e9d302d5ddb67
SSDEEP 48:12zuP4UyMij9sdh+14t2WTtyOtatYtQGY58rt3t35YwLqHJrwHn:12qPOMijkh+UvZ74KQV5Od3KwLqpcn
TLSH
T10E91D267264D58FDD328D62500868C1BFB44C109F32E6D82B3E98EEC8BF543687BA165
MD5 SHA1 SHA512 SSDEEP TLSH

eata/ContinuumBold14outback.txt

SHA256 a6c83c3d7378e9385d04e309c81208da816a4003a34b72f9bd768f08d8af3426
MD5 6aa61be132a8dc96de6935e3103380fe
SHA1 6fca33924445f03c97ac0655ee779e8fbf0157b7
SHA512 2545b4f5d528effa3672a041c6408af101c968bbe7b7c54bf986628a65ded31352052eca13a944703ece511aa52c99fc524bf97eea822a742921fc51e1df5f06
SSDEEP 48:12zuP4UyMij9sdh+14t2WTtyOtatYtQGY58rt3t35YwLqHorwHn:12qPOMijkh+UvZ74KQV5Od3KwLqIcn
TLSH
T1E891E367264C58FDD329D62500868C1BFB44C109F32E6D82B3E98EEC8BF543687FA165
MD5 SHA1 SHA512 SSDEEP TLSH

eata/DwarvenTodcraft12.txt

SHA256 c66ac010acb3b839f60d867191c38adb300ec08bde56d5a04535245cafc84629
MD5 1fcf40adb648507f90c1bb1eb3b4fa86
SHA1 62da23a72e90ad18b434c0b18e0fdf0bd0f88713
SHA512 1ddf54f91503875edbac11ff812916abf9cbd01cfc11797882b136361958e13ac24406c2ef65e4464111492070e935d834bbd96ddea8e210c19b78eaa07bfa11
SSDEEP 96:12qPOMijgP/5gfl1UsWgvRR052yZVAYla2AvG:cHQ/WHUsWgvRR0520m2wG
TLSH
T184F1AC5B060E5AFC876ED65704908E07FB74C687A03C1E42326BCE2C0BFB52887B7166
MD5 SHA1 SHA512 SSDEEP TLSH

eata/DwarvenTodcraft15.txt

SHA256 fb6bb8186bb2536d7271ac184070aea5da94f04f34d81695da4d6efe1c813cd0
MD5 ce97a0389256ebf07b6209894f53a06f
SHA1 714b4d788ac46d9fffe8566a4e7e8b1296ab5855
SHA512 4da438ffc43e644900f95c1c0940fd942b402f04145c19cc78d2727e5fa26be2bd380c39e61fe7d7a03ca7e8cdd90735bc0ece41ffb6b0ef1d80ce505715481c
SSDEEP 96:12qPOMijgP/5gfl3bO93ti4aCssgcPl05wderD0wPXWmEU:cHQ/Wlb03tJaCssgcPlV+oI9EU
TLSH
T15AF1C31B068E1AFC436ED21700E0CE07FB54C796A23E6D52726BC97C0BF652897BB561
MD5 SHA1 SHA512 SSDEEP TLSH

eata/DwarvenTodcraft18.txt

SHA256 11c7e55d400948dce8166196f8ca21b6e05e93396e11e42a0b49398e0c28e369
MD5 19dd99577ea9815bf0fcf41ea0f775ad
SHA1 793c4b8edd39c8c4b53bce5e64dffc68b2a72754
SHA512 b83a418cfad3176a0a05392b612e1e01b6db733444a1f37cb8e44126e6fca927af4dcae47fef9087af0d93fe2b2044952bb819c5cb583dcacc167b29dbc75000
SSDEEP 96:12qPOMijgP/5gflIjDNglogR7Zt8NAuQhUKdURbDXbkbzPFC5iCc5U:cHQ/WQDNgegRQeU6Fz5U
TLSH
T1AAF1016B062F5AFC436EEA1605D48E0FFB54C687B13C5E46723AC92C0BF551583BB1A1
MD5 SHA1 SHA512 SSDEEP TLSH

eata/DwarvenTodcraft18BrightGreenInset.txt

SHA256 6e77b9a3bf9683fd79cd2da59fd16ff6715e305ac6fba412e72612914b80357b
MD5 0943feb74b732ce3611a52277c2a7adb
SHA1 354b036ef27d7034c87bff452f1f865259aa711e
SHA512 4fed722d90f81c34f7e500a8a041c93d0111bc1a288d26c7854f7b58b6787a3bd4aec30a876989116f09045d5622248784113fd9ebcc123ed03b538f08e45b7d
SSDEEP 96:12qPOMijgP/5gflIjDNglogR7Zt8NAuQhUKdURbDXbkbzPFC5iCclU:cHQ/WQDNgegRQeU6FzlU
TLSH
T162F1006B062F5AFC436EEA1605D48E0FFB54C687B13C5E46723AC92C0BF561583BB1A1
MD5 SHA1 SHA512 SSDEEP TLSH

eata/DwarvenTodcraft18GreenInset.txt

SHA256 50e7da36a1d6824dcbde72a51f56e0242313e0ed2ce395a6c0e3880ace2b3e3a
MD5 99d128d734205d9a4361369dd793e503
SHA1 bc4a0a93b077ff50ab19fc212a33b820ad658e18
SHA512 5ae5f4dedb8c23f7b3f7c033a394f2ceaebee7f46c1243150538bd190a1d9bc2844eba5476ce31b21b1c4c603f81ba12f57d2249e59de67d4ac95e0eb8fcced0
SSDEEP 96:12qPOMijgP/5gflIjDNglogR7Zt8NAuQhUKdURbDXbkbzPFC5iCcFU:cHQ/WQDNgegRQeU6FzFU
TLSH
T1D0F1006B062F5AFC436EEA1605D48E0FFB54C687B13C5E46723AC92C0BF561583BB1A1
MD5 SHA1 SHA512 SSDEEP TLSH

eata/DwarvenTodcraft18Yellow.txt

SHA256 9cb994fb7b5ac1cfc09b967d05ff2136cfb7d2852cfb841afd845c2f99ea5a1c
MD5 e8a8830a6a3dc93afa7a547c11fec5a6
SHA1 4cb216dd2ff96f25f407757934836c610be64f33
SHA512 a37643f46d12a94a706899ba1c03daa885673b98a95a0f4c5bbb29575df440dc83b8757f6d2dee9ac6d9468f751f32eae88c72c135722b5ddeb3af40dc9d05fd
SSDEEP 96:12qPOMijgP/5gflIjDNglogR7Zt8NAuQhUKdURbDXbkbzPFC5iCctU:cHQ/WQDNgegRQeU6FztU
TLSH
T129F1016B062F5AFC436EEA1605D48E0FFB54C687B13C5E46723AC92C0BF561583BB1A1
MD5 SHA1 SHA512 SSDEEP TLSH

eata/DwarvenTodcraft24.txt

SHA256 73eae3b82518994d68905cb23d4009aa300eba7f0afea99b9cf6a6d55459d9cb
MD5 8d6da5d5f22927d22b0a9a3466ec84d0
SHA1 2924b5a2a80d19b522956e71c3a7f38ca24cf95f
SHA512 6fbb34405f2221609dd4ca3ae567c439183fd972900a5c1e4f79a03b30a51f9f1c44b5fb962fdef5865a3847c156be83c81bf224bb67ad21804372ad9a164b38
SSDEEP 96:12qPOMijgP/5gflLsQ9w33mX6BA0e2v1kXgkT/hDQwZ7l91a:cHQ/WSue3sU1kXZD91a
TLSH
T1E7F1F52B010FABFD436EDA5720904E07FA50C297B2346F8772B68D6C4BF5D1286BB580
MD5 SHA1 SHA512 SSDEEP TLSH

eata/DwarvenTodcraft36BrightGreenInset.txt

SHA256 4be592a64fbca73c7f5dd5f39032b4935eab2415cd3b3208c4f60e420fea2351
MD5 0a02744f3940fddd6af5f61ca39f453a
SHA1 8dfa92dfbbc29c72c7330dc5cb5713426150536e
SHA512 3b17b98c841b0c30b04b79fa1e343f8604ec8ccb5edfe3d0f3cbc7f6b2c7cdf662c2ce58bda9df375d37df174738f4daa220b897398a695388b4f95a8a48f0a3
SSDEEP 96:12qPOMijgP/5gfleUQqVBnQgPSIb3UUBafPx7WlQp:cHQ/WeqTfzXEKQp
TLSH
T1E7F121AF000F2AFD872EDA5705A84E1BFA54C3DBB1344E12367B8C2D4BF651586B7660
MD5 SHA1 SHA512 SSDEEP TLSH

eata/DwarvenTodcraft36GreenInset.txt

SHA256 2d2daa32da8dbb8d6d06e35f9496f7d2fc7b63999ec00ba7a1d30c57b1938331
MD5 3a22931ca73d7e301968d94d5a84f585
SHA1 a9a0ed7e0bfb35f956c9ca53d52dc2fb7d1c74bd
SHA512 0fb20e965ca7fc95af9cb053c88f0e785daf8de94c2ee9f043deb8e80529e7c7a6e76d0756b160d46bb5ef5bafb87165016111dc0d4765443d3f5db796e5bb27
SSDEEP 96:12qPOMijgP/5gfleUQqVBnQgPSIb3UUBafPx7Wl0p:cHQ/WeqTfzXEK0p
TLSH
T13DF121AF000F2AFD872EDA5705A84E1BFA54C3DBB1344E12367B8C2D4BF651586B7660
MD5 SHA1 SHA512 SSDEEP TLSH

eata/HouseofTerror16.txt

SHA256 3435e4111074b4db16c7519ecc972a0786756aeaaeb756f368e4616494958b5c
MD5 d3eb441de240f973d3fa1262fe831e3f
SHA1 cc436592ce282510ff1ef4b47615e900c2ff2b0e
SHA512 c035be46be32a646fe01c55c8ca50321a6faca1ac08a801c3a549987790d4f235374079029ad402749fdb99611cf56fa7964209d6b929ca699eb9c9dc53b4628
SSDEEP 96:12qPOMijgP/5gflo2Vg8623ziay+Ut1Fr3yZkV6du+X2dwucn:cHQ/Wi2Vg8623ziay+UnFWg6/mdwucn
TLSH
T13CF1D45B060F9AFC53AED32322448E23FB54C6A3B0395D4272BB886C6BF9C1587B7155
MD5 SHA1 SHA512 SSDEEP TLSH

eata/HouseofTerror20.txt

SHA256 63f96e36c4a17ff9df60e370286cb6b8f5fe404c6259d2a5c0fd2771aee47488
MD5 001a03e0e2ac5e3b25eb07492c1f23fc
SHA1 ce3ac9463d05a3239af34e4027b81f014eda8ffa
SHA512 bd174c1bed07715bdb4206e96a4428afbf6cb3077cf82f0d3adac1b13e2d194e70923a9b57ef76b82f96dd0d135e7a56bbda39e947ee6af8e7b99a756015d4c8
SSDEEP 96:12qPOMijgP/5gflzR6sGDl80LvsshcO3oUnLdShzJOJyCeAvK:cHQ/Wr6sGx80Lvssd3oEdsJOJyCewK
TLSH
T182F1E96B050DA8BD63E7D6C702904E03FB45C29AF03A4F52726A9D6E4BF64B587BC170
MD5 SHA1 SHA512 SSDEEP TLSH

eata/HouseofTerror28.png

SHA256 e9913355ecccf2840761ce1a2a356067990deb44b326a7eb7d95c012126b9486
MD5 efc6be0b559ab1b04c942338db16920d
SHA1 fa9bf4af3aa8eeb2c091e54d442085d1d1155c3f
SHA512 92513338f913b0c3deccb41400464f5a7d3d5392830f8f752d0c3e23e71695d07f9b1d1926e66178603ddd1558d2f89c3fba155d57e67b7361984a974ad32f2e
SSDEEP 768:twzq3u7N5AIOa4/oDb+ZHkgjWK1sf2DQvozIBuF:GMu7N5AIwoDEHkbMsf+46
TLSH
T1D1C2E04221709FA5DB5D3FB7A7460D39063621DE07EF09426EEEBA4324616630CFAD29
MD5 SHA1 SHA512 SSDEEP TLSH

eata/HouseofTerror28.txt

SHA256 08d9d6773edc9033512463b33be7c6604b675fadabd1729bb4fda4bed1966d0b
MD5 0545a139acd397ce28ed3713ffce74d5
SHA1 2d57604775289821157beab07e0a98d1b025481c
SHA512 e881f4ccc5e05475d89cfa9d7e178f47d04531213b19d23f29e4d6f83c49448d4193c5a476a9c26022df731626df4bcaac1237473586fd098ee55f46f65eba77
SSDEEP 96:12qPOMijgP/5gfleX9CH8SckUqKNXXAvq:cHQ/WU0HNlUPlXwq
TLSH
T12DE1D877084D68FD4766DA6301A08E17FF51C38AB0329E66327B993D0BF741D8BB9212
MD5 SHA1 SHA512 SSDEEP TLSH

eata/Pico129.txt

SHA256 44f6c8c7cbf5d53caf557fb3c79e69f7e1701574fa336b9ea5a3e3d004701307
MD5 a0f22889bcbd4f5d533bfc214199675f
SHA1 4a747685098d88fd3e7280bb0da4fa43a89d6ec2
SHA512 d14282e14bfa76288d12f17003093a41387dad4cd771ff1f58d035ecabb0e42af3cae2580df86034fce6d48dcbfe763e63c29ee911e0cf3764601e1b5980ed96
SSDEEP 192:cHQ/WwssssssIsssssAsssssssssssssztQsssssFAsssFssssssCrnss54sssst:coNssssssIsssssAsssssssssssssxQu
TLSH
T102E1A3670B8D6CFD07A6D6A505044C63FB429122F0384E4A333F8ABD6BFD9358B36994
MD5 SHA1 SHA512 SSDEEP TLSH

eata/Pix118Bold.txt

SHA256 ce10cbcfa4387a1f659bb9ba2de840cf8a3dfcd3843a2e97cf75fab2500e53a1
MD5 14354dbebfd96352a5130cb939b55d59
SHA1 33c6f4e995ea80dec1dbea440e0d94536e75abe8
SHA512 9ac3eaeee7db72be53afbe5d216de4ad656dbb80c5625b9e00f4ab3e5464b5130cb645393b201e69f5ebec5eb5cf48e69975a20c037434e83e1c3fc275aa2f00
SSDEEP 192:cHQ/Ww/sss4Kss4NQCAUjXdYiONOEdO/OEu/1zhOWOQObOBfOJubHdAy0XKj4Obu:cot/sss4Kss4OHy
TLSH
T117E1BCA71A8D9C7C4356EA950B008C56FB709201F0384D4636FB8EBD8BFB93587B29D5
MD5 SHA1 SHA512 SSDEEP TLSH

eata/_HouseofTerror16.png

SHA256 9de6b80fb8d9f0405db21b0d5c6871a24cb68029f29c983c531e748147bc4cbe
MD5 fb8c864a42f5c371ab6b0a084bdf0703
SHA1 714a6bddf1696cf403d3a09d4dc7dd9571739f04
SHA512 3e8c54b4cd34b81dd24371dcca2fe82d74f4b0db2b0d6981f38a441c6995023b5b5502f1f58be86036af6b11cda332fd9af148aa92f6c4eb437fc6094501bd6e
SSDEEP 192:d5MWEBQj+yTBM/2ROS/vIK4UrvFJ1OMXO:oWwwlFOKIKDdXO
TLSH
T110E18E1B7582BF1E21A3E2EA3459DB727B4A127EC8EA46004CAEC74D15F8394531DF22
MD5 SHA1 SHA512 SSDEEP TLSH

fonts/FZHTK.TTF

SHA256 7f2fb3442bec38afecc78e1548a9d154cc225d4cfd9cbc0f8c469311ab43e36a
MD5 c5d01a9e5189fef514bc1cc4e856abb3
SHA1 5708f5d8612ec22e112d4d18d10936988b0b92ba
SHA512 dfbc9990152b02bfc322adbd6e902b3f3e9f6b6af3cfb07cfae837da479638df9afa3bf900673e5f277ee64f99d472dd3db59c9645b2fd322caedff85d1490aa
SSDEEP 49152:GbFOB5vVpiy495+v01JepKB0OuIcvrTVepnZsAmqz/PTNqE9Pf11:GbSih95+v+J++iTY199
TLSH
T114168E83D3B7F7FCD166F81C4950A067A6C365333025E7E8E64B7A78A0092E491A4E7D
MD5 SHA1 SHA512 SSDEEP TLSH

fonts/FZKTK.TTF

SHA256 6527f1a53414d9d1dcdb64f7f26cc451ef7ab2c57a2a2b1a06e5255e97f2d894
MD5 0749f2c5f37c5d3d507d9e734d06d755
SHA1 a790fd04503d48505d0c349d38e823107fb6fa34
SHA512 4fed2187a33629d602c9d800f8bcc1caae4f14be8538abee1fb79f92cdc1b04b3abd1f1c4694849946149b606de41e67c35560cc8b7f233850c8bea53aa3c838
SSDEEP 49152:m5kBwO63cjz4BbChfnzHqqusgOw0BI9pidH0j4ZzBhVYEIIJZH1bJLJiCv:oMHKOFrgOp97
TLSH
T139E6A59637E87D50C43C0C2F82D7298751A0F61CF661CA32F9D4668DF27A9FC2A526B1
MD5 SHA1 SHA512 SSDEEP TLSH

fonts/Unifont.ttf

SHA256 acba71b3e7cda61f032afe38b6dc68115437e48fe3f5422eb5050277817fe8cf
MD5 5fbf47c090f31948a39a14b6ff6c0f52
SHA1 62bd3f0e183a2ba5706408350137adc1429d6b62
SHA512 2cdc88d8b84a7c10508f9d1654b7b3a84c88ccec81b16c93bd5c52ee4d899449ace321f51248dcede0c1f13646b8eb5e3bf4dc7b4e8ccf07bcf727163def53d4
SSDEEP 98304:aDkByBhVtDKM3ReMJUJHZ3KVyGvJLj13TNyYy9Ph1xSImPbcQW2/J:aDtfRZJyHZ3KVyiF13TIYy9xSImM2h
TLSH
T1F6A6BFC3C7F4AF6DE606BE7CC510E01AF6CDC211DF058602DEA6166DA0A7DE84949AF4
MD5 SHA1 SHA512 SSDEEP TLSH

fonts/cezkzdbs.ttf

SHA256 66c4c80847d67f48d7fc4b1f4bfa66f464f25838af938255be299ff987711139
MD5 ae7be63216195fedee5f932a561f0b99
SHA1 5bc6368a9cb120576bdb4be3d1829fc78ebcf8e0
SHA512 15541a3340f46b61c706514e9407410831841c502c238d2582aaf8198af9c5d58ba2a7eb2caa4a344ede39668cf24a0e24ed8c09df748fa72b061abd7162de27
SSDEEP 24576:/dhkkQhrXaRxzVuWi7j1qxfMj80BdXMTUCnIt7QvTBwNYYb2LUh/lnKKtngQFW1M:V85IuVLd
TLSH
T1836632477BE8A440D43C1E6A40FB074792E0E458F6218727FAC866DEF9B59FC2E025E5
MD5 SHA1 SHA512 SSDEEP TLSH

fonts/scjskft.ttf

SHA256 609b6fd14a192e65bdcbb00f235377cb0aa7ddd003a833d840e95296ab3ca710
MD5 8d65f94f91038868d1e4fdeae8b361fc
SHA1 e0ed81b7e8595ee6e15dc5bab6746966ff8d237b
SHA512 78eebe6908046e07124955c399c3b8ecfb44ee2ddc3119f94835526c791306bdfd375e2d13683bffa3f02fe91c337948ffddd427e76946ab6f9c6fc768aa28e1
SSDEEP 24576:dHTm+K1HzT2XtB6dgt88FhpvwRTwwPZ4/FNw4G5A4P6O4lT0z3nhvNhmdWj/BC6W:YKfzXwKJuoAX9DXh8
TLSH
T11AD5188A7BD684B1C0783CBE55C25693B2E5E848D7616723F9ECC28EB591FFC0A505B0
MD5 SHA1 SHA512 SSDEEP TLSH

freetype.dll

IMPHASH 81a02db2011723dcb5863bf35a30b70d
SHA256 61ee88d3633a3f3ac05e8525a5a45dc9ad7ea9e9971a6d695bb144e067167c34
MD5 e59b32b7459338a05545a199bfd7851d
SHA1 49d9fd9bb50db9e4784c3eddce2730fcce84c46c
SHA512 ecb178004bd5aa45a63030b2ee9fb5942cae10df27f6912dee0bf892ad918ded7ec6a1633bcdd57ccd6eb4f21f3390271c210dca2ae9f359f848e13014eb8719
SSDEEP 6144:AuchTP3vW51t7NbGl1YG0iCF6WKVNGGGLI2wWhwdAVz/ZyQIUOoS1nWsEWmfD/Jn:dR1tZkcFroGGW/+AVz/IPULefEWmbqE
TLSH
T1D3E48D22BE018119F9D201B7D3BD9B761E3D4325231D95D7A2E42CF8AA209E3B739717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5221

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\dprovent\Downloads\freetype-2.10.4\objs\Win32\Release\freetype.pdb

FTC_CMapCache_Lookup FTC_CMapCache_New FTC_ImageCache_Lookup FTC_ImageCache_LookupScaler FTC_ImageCache_New FTC_Manager_Done FTC_Manager_LookupFace FTC_Manager_LookupSize FTC_Manager_New FTC_Manager_RemoveFaceID FTC_Manager_Reset FTC_Node_Unref FTC_SBitCache_Lookup FTC_SBitCache_LookupScaler FTC_SBitCache_New FT_Activate_Size FT_Add_Default_Modules FT_Add_Module FT_Angle_Diff FT_Atan2 FT_Attach_File FT_Attach_Stream FT_Bitmap_Blend FT_Bitmap_Convert FT_Bitmap_Copy FT_Bitmap_Done FT_Bitmap_Embolden FT_Bitmap_Init FT_Bitmap_New FT_CeilFix FT_ClassicKern_Free FT_ClassicKern_Validate FT_Cos FT_DivFix FT_Done_Face FT_Done_FreeType FT_Done_Glyph FT_Done_Library FT_Done_MM_Var FT_Done_Size FT_Error_String FT_Face_CheckTrueTypePatents FT_Face_GetCharVariantIndex FT_Face_GetCharVariantIsDefault FT_Face_GetCharsOfVariant FT_Face_GetVariantSelectors FT_Face_GetVariantsOfChar FT_Face_Properties FT_Face_SetUnpatentedHinting FT_FloorFix FT_Get_Advance FT_Get_Advances FT_Get_BDF_Charset_ID FT_Get_BDF_Property FT_Get_CID_From_Glyph_Index FT_Get_CID_Is_Internally_CID_Keyed FT_Get_CID_Registry_Ordering_Supplement FT_Get_CMap_Format FT_Get_CMap_Language_ID FT_Get_Char_Index FT_Get_Charmap_Index FT_Get_Color_Glyph_Layer FT_Get_FSType_Flags FT_Get_First_Char FT_Get_Font_Format FT_Get_Gasp FT_Get_Glyph FT_Get_Glyph_Name FT_Get_Kerning FT_Get_MM_Blend_Coordinates FT_Get_MM_Var FT_Get_MM_WeightVector FT_Get_Module FT_Get_Multi_Master FT_Get_Name_Index FT_Get_Next_Char FT_Get_PFR_Advance FT_Get_PFR_Kerning FT_Get_PFR_Metrics FT_Get_PS_Font_Info FT_Get_PS_Font_Private FT_Get_PS_Font_Value FT_Get_Postscript_Name FT_Get_Renderer FT_Get_Sfnt_LangTag FT_Get_Sfnt_Name FT_Get_Sfnt_Name_Count FT_Get_Sfnt_Table FT_Get_SubGlyph_Info FT_Get_Track_Kerning FT_Get_TrueType_Engine_Type FT_Get_Var_Axis_Flags FT_Get_Var_Blend_Coordinates FT_Get_Var_Design_Coordinates FT_Get_WinFNT_Header FT_Get_X11_Font_Format FT_GlyphSlot_Embolden FT_GlyphSlot_Oblique FT_GlyphSlot_Own_Bitmap FT_Glyph_Copy FT_Glyph_Get_CBox FT_Glyph_Stroke FT_Glyph_StrokeBorder FT_Glyph_To_Bitmap FT_Glyph_Transform FT_Gzip_Uncompress FT_Has_PS_Glyph_Names FT_Init_FreeType FT_Library_SetLcdFilter FT_Library_SetLcdFilterWeights FT_Library_SetLcdGeometry FT_Library_Version FT_List_Add FT_List_Finalize FT_List_Find FT_List_Insert FT_List_Iterate FT_List_Remove FT_List_Up FT_Load_Char FT_Load_Glyph FT_Load_Sfnt_Table FT_Matrix_Invert FT_Matrix_Multiply FT_MulDiv FT_MulFix FT_New_Face FT_New_Glyph FT_New_Library FT_New_Memory_Face FT_New_Size FT_OpenType_Free FT_OpenType_Validate FT_Open_Face FT_Outline_Check FT_Outline_Copy FT_Outline_Decompose FT_Outline_Done FT_Outline_Embolden FT_Outline_EmboldenXY FT_Outline_GetInsideBorder FT_Outline_GetOutsideBorder FT_Outline_Get_BBox FT_Outline_Get_Bitmap FT_Outline_Get_CBox FT_Outline_Get_Orientation FT_Outline_New FT_Outline_Render FT_Outline_Reverse FT_Outline_Transform FT_Outline_Translate FT_Palette_Data_Get FT_Palette_Select FT_Palette_Set_Foreground_Color FT_Property_Get FT_Property_Set FT_Reference_Face FT_Reference_Library FT_Remove_Module FT_Render_Glyph FT_Request_Size FT_RoundFix FT_Select_Charmap FT_Select_Size FT_Set_Char_Size FT_Set_Charmap FT_Set_Debug_Hook FT_Set_Default_Properties FT_Set_MM_Blend_Coordinates FT_Set_MM_Design_Coordinates FT_Set_MM_WeightVector FT_Set_Named_Instance FT_Set_Pixel_Sizes FT_Set_Renderer FT_Set_Transform FT_Set_Var_Blend_Coordinates FT_Set_Var_Design_Coordinates FT_Sfnt_Table_Info FT_Sin FT_Stream_OpenGzip FT_Stream_OpenLZW FT_Stroker_BeginSubPath FT_Stroker_ConicTo FT_Stroker_CubicTo FT_Stroker_Done FT_Stroker_EndSubPath FT_Stroker_Export FT_Stroker_ExportBorder FT_Stroker_GetBorderCounts FT_Stroker_GetCounts FT_Stroker_LineTo FT_Stroker_New FT_Stroker_ParseOutline FT_Stroker_Rewind FT_Stroker_Set FT_Tan FT_TrueTypeGX_Free FT_TrueTypeGX_Validate FT_Vector_From_Polar FT_Vector_Length FT_Vector_Polarize FT_Vector_Rotate FT_Vector_Transform FT_Vector_Unit TT_New_Context TT_RunIns

Name

.text

Size

515KB

Virtual Size

515KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

gdi42.dll

IMPHASH 75aba31908e718e8b487d66fb2c8a9b2
SHA256 f2e3fe2c0e872e7bc82ec7938cbde595a51f25b95ceac009bff9790d5c88ddab
MD5 133deac957b6c8103c5aad1308c4a992
SHA1 45c993f0c18fad0915df7c750132fd1151822914
SHA512 53b1b656c99f5961170b6781e6088279930a0e2e4564701335d69644a6eee3ed813fbe517a59be493227c26b0649f29ed778a8e79e34be31b201c949b703d365
SSDEEP 49152:gVQwOQruTJmIHmUM6caxW3rVcpoqmS1ZVJS0QPwi:gVQquToIHmUDcaxurVcpo61ZVJSHw
TLSH
T167957C13F6C00076D95B1735DA1CB368F1BFE5A30E7642C75AE4A66C39224C376683AE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1303568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\Administrator\source\repos\gdi42fix\Release\gdi42.pdb

freetype

FT_Render_Glyph FT_Outline_Embolden FT_Load_Glyph FT_Get_Char_Index FT_Set_Char_Size FT_New_Face FT_Init_FreeType

kernel32

SetStdHandle QueryPerformanceFrequency VirtualQuery VirtualAlloc GetSystemInfo HeapQueryInformation GetModuleHandleExW ExitProcess LCMapStringW CreateThread GetCommandLineW GetCommandLineA InterlockedFlushSList RtlUnwind OutputDebugStringW GetFileType GetStdHandle FreeLibraryAndExitThread GetTimeZoneInformation GetConsoleOutputCP GetConsoleMode SetFilePointerEx FindFirstFileExW FindNextFileW IsValidCodePage GetACP InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetTempFileNameW Sleep SearchPathW GetProfileIntW GetTickCount GetTempPathW VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW FindResourceExW lstrcpyW VirtualProtect SystemTimeToTzSpecificLocalTime GetFileTime GetFileSizeEx GetFileAttributesExW GetFileAttributesW FileTimeToLocalFileTime FileTimeToSystemTime GlobalGetAtomNameW lstrcmpiW DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile ReadFile LockFile GetVolumeInformationW GetFullPathNameW GetFileSize FlushFileBuffers FindFirstFileW FindClose CreateFileW GlobalFindAtomW LoadLibraryA DeleteFileW CompareStringW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GetCurrentDirectoryW GetSystemDirectoryW EncodePointer CopyFileW FormatMessageW MulDiv GlobalSize SetErrorMode LocalFree LocalReAlloc LocalAlloc GlobalFree GlobalHandle GlobalUnlock GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetCurrentProcessId GlobalAddAtomW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW ResumeThread SetThreadPriority CreateEventW WaitForSingleObject CloseHandle WideCharToMultiByte lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryW FindResourceW SizeofResource LockResource LoadResource LoadLibraryExW GetProcAddress GetModuleHandleW GetModuleHandleA GetModuleFileNameW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread SetLastError OutputDebugStringA GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx HeapFree MultiByteToWideChar WriteProcessMemory GetCurrentProcess VirtualProtectEx WriteConsoleW GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW ExitThread

user32

EnableScrollBar MessageBeep GetIconInfo DrawIconEx IsRectEmpty DrawFocusRect WindowFromPoint ReleaseCapture SetCapture GetNextDlgGroupItem LoadImageW TrackMouseEvent MapDialogRect GetAsyncKeyState GetNextDlgTabItem EndDialog CreateDialogIndirectParamW OffsetRect SetRectEmpty SendDlgItemMessageA IntersectRect InflateRect GetMenuItemInfoW DestroyMenu CharUpperW DestroyIcon LoadCursorW GetSysColorBrush GetSystemMetrics IsDialogMessageW CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo LoadIconW GetTopWindow GetClassLongW SetWindowLongW EqualRect CopyRect MapWindowPoints AdjustWindowRectEx GetWindowTextLengthW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow SetForegroundWindow GetForegroundWindow SetActiveWindow TrackPopupMenu SetMenu GetMenu GetCapture SetFocus HideCaret IsIconic EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement EnumDisplayMonitors DestroyWindow IsChild IsMenu IsWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW FillRect GetSysColor ScreenToClient EndPaint BeginPaint ReleaseDC GetWindowDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW InvalidateRect UpdateWindow KillTimer SetTimer RealChildWindowFromPoint GetWindow GetClassNameW OpenClipboard CloseClipboard SetClipboardData UnregisterClassW PostMessageW PostQuitMessage SendMessageW GetFocus GetDesktopWindow PtInRect ClientToScreen GetWindowRect GetWindowTextW SetWindowTextW GetDlgCtrlID DeleteMenu SystemParametersInfoW CopyImage GetClientRect RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount EmptyClipboard DrawStateW SetClassLongW SetWindowRgn SetParent DrawEdge DrawFrameControl IsZoomed GetSystemMenu BringWindowToTop SetCursorPos CopyIcon InsertMenuItemW InvertRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem MapVirtualKeyW GetKeyNameTextW LoadMenuW GetDlgItem SetLayeredWindowAttributes CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW GetParent LoadBitmapW GetMessageW TranslateMessage DispatchMessageW PeekMessageW IsWindowVisible GetActiveWindow GetKeyState ValidateRect GetCursorPos SetWindowsHookExW CallNextHookEx ShowOwnedPopups SetCursor EnableWindow IsWindowEnabled MessageBoxW GetWindowLongW GetWindowThreadProcessId GetLastActivePopup UnhookWindowsHookEx GetMenuStringW GetMenuState GetSubMenu GetMenuItemID FrameRect DrawIcon UnionRect UpdateLayeredWindow MonitorFromPoint LoadAcceleratorsW TranslateAcceleratorW DestroyCursor GetWindowRgn CreateMenu SubtractRect TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar GetUpdateRect IsClipboardFormatAvailable CharUpperBuffW RegisterClipboardFormatW ModifyMenuW GetDoubleClickTime SetMenuDefaultItem LockWindowUpdate SetRect CopyAcceleratorTableW DestroyAcceleratorTable CreateAcceleratorTableW GetKeyboardState ToUnicodeEx MapVirtualKeyExW IsCharLowerW GetKeyboardLayout WaitMessage PostThreadMessageW GetComboBoxInfo ReuseDDElParam UnpackDDElParam SetWindowPos

gdi32

CreateFontIndirectA CreateBitmap CopyMetaFileW CreateDCW BitBlt CreateHatchBrush CreatePen CreatePatternBrush CreateRectRgn Escape ExcludeClipRect GetClipBox GetObjectType GetPixel GetViewportExtEx GetWindowExtEx LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectPalette SetBkColor SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign GetObjectW MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx GetDeviceCaps ScaleWindowExtEx CreateFontIndirectW GetTextExtentPoint32W CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP GetTextMetricsW EnumFontFamiliesExW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetPixel StretchBlt SetDIBColorTable CreateEllipticRgn Ellipse GetTextColor CreatePolygonRgn Polygon Polyline CreateRoundRectRgn LPtoDP Rectangle GetRgnBox OffsetRgn RoundRect FillRgn FrameRgn GetBoundsRect PtInRegion ExtFloodFill SetPaletteEntries SetPixelV GetWindowOrgEx GetViewportOrgEx GetTextFaceW CreateFontA CreateDIBSection DeleteDC SetTextColor SetBkMode TextOutA IntersectClipRect DeleteObject SelectObject GetTextMetricsA GetTextExtentPoint32A GetStockObject GetObjectA ScaleViewportExtEx CreateSolidBrush CreateCompatibleDC

msimg32

TransparentBlt AlphaBlend

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegEnumKeyExW RegEnumValueW RegQueryValueW RegEnumKeyW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

DragFinish DragQueryFileW SHGetDesktopFolder SHGetSpecialFolderLocation ShellExecuteW SHGetFileInfoW SHAppBarMessage SHGetPathFromIDListW SHBrowseForFolderW

shlwapi

PathStripToRootW PathIsUNCW PathFindFileNameW PathFindExtensionW PathRemoveFileSpecW StrFormatKBSizeW

uxtheme

OpenThemeData GetThemePartSize GetThemeSysColor IsThemeBackgroundPartiallyTransparent IsAppThemed GetWindowTheme GetCurrentThemeName DrawThemeText GetThemeColor DrawThemeBackground CloseThemeData DrawThemeParentBackground

ole32

DoDragDrop OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleLockRunning OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator CreateStreamOnHGlobal CoInitializeEx CoDisconnectObject ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CoCreateGuid CoUninitialize

oleaut32

LoadTypeLi SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime VariantChangeType VariantCopy VarBstrFromDate SysFreeString VariantClear VariantInit SysAllocStringLen SysAllocString

gdiplus

GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

winmm

PlaySoundW

main.pak

SHA256 baa080a91fa4e476463f7762974522e03e6bfe272599b609c276b00668abc4ec
MD5 9adf6ad2056b64a3ec40ac9ad4df4590
SHA1 06129a1ec5e9741e569ef4cceae39410f5680e24
SHA512 d3b7bdb69f4e6973b5718f4922bcda0361f6fb1ffc836c3b16ac446cf9d9cd4b6b098fd1edc4c447063e650ea8b6aa04d3fde25f93075a4b50d9aa7dd46f7395
SSDEEP 786432:zS9kkitiiTiGiJiJiEiri6i4i3iIiWivciV+AYSitHB7GUiZhlofoZeQabad:MiciTiGiJiJiEiri6i4i3iIiWi0iwAYm
TLSH
T1E647233ABDD374C15A2ACC4061A533BAA47ED7F97E08955038027F81E532D4F6B29E2D
MD5 SHA1 SHA512 SSDEEP TLSH

music/bgm14.mp3

SHA256 0faf44863f7071f933155a09a964362b042ee60083e4d2d33f9fca6d4dd69c00
MD5 9aa1db64cd8f7c4cc5d34208be4ac6b4
SHA1 e52dea6d6941e2c72a11e2b631d03aa2954154d4
SHA512 26d748b45603ed720fcbbbb93e962200a00413c636eb2a0544d01cfac2bcb67b07839d960d1c853c4297a1dd74c8005d5100068d653a359b5d08bd0e7d31a3e2
SSDEEP 98304:gswoDdE4SoZoZ9yclWPNRLDqaGW6QcWwX8jTTA1yBiX+yRuRnE3ymqv0qtFTv4In:gC51L5F9c0cWJy+wmVuyrlFj4K
TLSH
T1B82633A3E11816CFE45A67504D4786A9BD173FD97E067CECD909FBE4E272900ABF0209
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu1.png

SHA256 bdcb13175446fc24c4eb9e48fdfdc680ee790f0a7ac33769dfe977759c09edc4
MD5 76a83521e8676e81086b81b815e09d6e
SHA1 903f2708e99d1f24aa4d25b0a90d317f99e3ed32
SHA512 3bc242e4172d32fddc2b7b6371d45feb5d470fdf4ead2f5a6dca7c6f5351538adf29eed61a04e1edca001f798035e4b323585b5e7bd23bd6fedfd45fe4747362
SSDEEP 192:USnktegKjiCTjMiRc7SCIJiKkbEKRT+fjohS8raw45NH:Tkteg9egiR0SJ9klRb6BNH
TLSH
T11D926D30BCF17CB494689A354CD135845D734B4BE290ED82FACE28162F017A96DBF686
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu10.png

SHA256 f13241ced03fd023391a12f29b5b521b73aeca845e26a6846e4fb3d0f48eb88f
MD5 6a8bbf35b673c25c9bcca931de64648e
SHA1 d9be1cd486f1da8bd3e980873878ab5ce07df68c
SHA512 f5bf11470d762818d28c029a8ba5ea8b11949d16240e26f05ad434eae3cc3048320085a4292f9f2381126cefae3e26c5757bb1d1cb1d9ae8dc7f8dddc4e8c6cb
TLSH
T10EF00EF29708F5D87C9E08BC75F22653206439B826164A4D2A304CB81388914C14F36A
MD5 SHA1 SHA512 TLSH

newimage/tietu11.png

SHA256 5b38dc3365f2d1ba44af43a979e328973c2b1ae9e1a4371857a00310518911ba
MD5 7b17d06ba53dad4ffb242274a02528c3
SHA1 c5ace0dd90ab0ca91ee2bc7895a1adec48b06538
SHA512 0d086e9d94b9deff7815846ff23d98c0d8a9d65588937143e058de33d21ed862afacda60eb8be5e6c869cb82a4cea06630f7a0ff68e19ac053c8e0e2cd6c30cb
SSDEEP 192:mBH4A2UIoZC3KgPQiKnjYKbjc7UXoPACNqetTTjdikvDSeNYJJVxyAWioBtNG:mBYtkCVPx8YS4rBP5ikLIJVx2ioB/G
TLSH
T11C52C0F2A3B2041F650E012C11B346DCD33DDEB5B198ADE6F455A960A9938B9A20D15F
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu12.png

SHA256 b6061eb75204f91e2912bc748e6c3ea64e610ac7d5cef3b10979692551ef21c6
MD5 9a72cb5430548ec7195025158d9e0537
SHA1 5ff899301de1a1bab820d163d5905b83b2d59132
SHA512 6f9811d620bcc42da2b440d18bec9c78d799378e2f25469bdaa912800d2fe4f6702ab91da4aa7c9bb7cf18fe78145cdb923ff5bce73bbe39dceb4d28777688e6
TLSH
T10E21A752816F75DD966E5A3D1B778040D1207D5B667806CD69E1D02B002D7B9C46F0E1
MD5 SHA1 SHA512 TLSH

newimage/tietu13.png

SHA256 e4688d72c213e8ca42c5d4648863eb4fbf74e846ea1fed5c3c38c7cb75d03890
MD5 4ec199adc90138a7689f6ea6fbf88745
SHA1 7a22575c2a888c1d17b27d0480e4ee27dc2c0cb6
SHA512 f743015606e01434417d528a60d9e6c3cc5dd5e976c872ccccba2f168c905796d81ff35f57061b386262d261e6682d9ad6a2003c6330e0914f263ff2d48d20b4
TLSH
T1A431E8E25E4BF7AE6F5BF59263E2C084DE5664E6260632CE41038647F003E18B5ADD26
MD5 SHA1 SHA512 TLSH

newimage/tietu14.png

SHA256 a507bcff2f1b8bfca5dfd377089dd0eea9937b0810b7dabaef2bcbae382fac5b
MD5 96c7d9a1cb66edbb4165b76777c36030
SHA1 85e6f8fad00b3b59020ff893090ae6aec1bae86c
SHA512 f3ef4ee246d48f9af46dfcdc63eb5a157ede9083eca6becbe374a36b8b9b3bf04d32d39e0bb21ef19551de134222030e48828343f44ccefca100ad9e8f16b7da
SSDEEP 96:HLy3Zt26dh/dAE+vbuOFVx2V4cxqVHEuTvyvEMz9lB5MCwKUx9z0ioOuI6W7Su48:ry3Zt263/dAjv2V7AVHHvyjzrBWjzNou
TLSH
T1A9C18E42933F04B68CBE99E4B14CDAA1373523DD87B954AD1918CEC7802978EC31AED5
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu15.png

SHA256 2544fd4910ca7ec5001a4cb18d59dad79d76ba9bc2a89a204f9e4821697fb02e
MD5 7f13ed006484ab08176c83709eefb052
SHA1 f7f4ab127ab3f362e781322e9fb87756cdb671da
SHA512 b61df4aca2accad870fda74a705cdf5c28e2df63d395fc3d5a9ffd00e76d0497f3ea86ff0d680e05daf2f42b67cb9f10d43e7002e61e4307e73694fcba761463
SSDEEP 96:NEr1dRc8EvTp98rSJBln6dT8Yo9EsN6n5EVcq4PFczV9zixY5uTi8hZWXtC:sPRQ+WJBBQoYkE5czXp5sUQ
TLSH
T141D18FFDFB7D44FE003619200D0FFA11CA0EEEF55D466A97E42A7BB52C582D052B1625
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu16.png

SHA256 918225600eeb48f0571796da616995af851968a77a338a21155b6c96b2920808
MD5 09468e25fe1b2bd9f2e2de11ccd1d63f
SHA1 3a315285e48ac31bb2f71234060cae3a91c558e5
SHA512 2954802b5dc74ff44193d23d8533a320d80e9aa32fa60b2f70e5f91af6d2bc05fb9a0178863f7cceff94087cf3a79b907ba8984084bdcde216a30bb9cfd6428c
TLSH
T16331B643280F77A300793036B98ABBC2BEBE9CF1216D9DDC7F41C870A80664841B6DC6
MD5 SHA1 SHA512 TLSH

newimage/tietu17.png

SHA256 354da2b3e54a6c412bfd78ac6dee241e1050f214663ec1a6f0dae424198eb528
MD5 928af59b8fb608943bc4e8ae7e61c3f0
SHA1 8a07ff94c1abcb2dd52b488bf033ea1b1d4ef215
SHA512 b5e4174e0be8ae2178a839d23b0f2ca7910db48ed2483420a7f33fa604b32320fb8b6303811ca3d6a24def1fc1d25fd08d2bc9ad4444926d9d4977a0521bc284
SSDEEP 192:yPOfl8Xs6ydcBqTzu8vpfsJbWaPuQW9t3S4u7p:d9MLyjTzJvpUgQwu7p
TLSH
T13F02BF47F53A259492A56526474FB0E3EC17F54EF373F71878425AAC27B2ACCA429C00
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu18.png

SHA256 85c513c36714e0e2176897bfc43644b1c6de976a1e5953e1de63c8f200759620
MD5 86a2472028c0eb8dd29f39f5d1a933df
SHA1 7c66d4ec113a6004b654e41d1d064d5a1764e061
SHA512 5b8a20323a207e0e89d7b44049f10a3d0ce24b9df6ddabf66799d0c3e4bb7b54d0e883bb567f1dcfe13e69d630f0ed0c158c7abd9e588faec2e212ad2e7cd582
SSDEEP 96:vLM2kI138E9zR3+ucrO9DuMLRfbbcVi/U9tAdhYHnFW+J0cCFaXaba6F9OPYN8Nv:VkgRuBq9DJ5uiLYHnFXKTFWWij/
TLSH
T1A2C19E267EC1821FC7E83EF146CB05518877460D93557939BCDFBC024F868106E1EA25
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu19.png

SHA256 70ad2a9767b2c712b3558e2fcd31f487840aafbc47c9e8ac9b520ccba2d3a32c
MD5 e65ea6510700d969a597b619e0784baa
SHA1 46c9b1af9c8432ae6f66e1a1678221af08850fa9
SHA512 f2738f327045399cbd0847553c04daec443f9d298aef6e611d4179f89a59ddaf4c24cad5fe8a3609da6adba786a8a234df2f8efa2ffe8ee60e408fa5a2e36866
SSDEEP 96:7LMUkI47G7XpMBmjhpEMXLp7eM4mJVSSLCmrxyZjr9EwWa1un:zkfG75M4jPEO71XSuBVyZXYmun
TLSH
T1CFA14C596FE91056CA88BE7045C829C22D4A33494B9AC2AB316E19770B94A94A5832DE
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu2.png

SHA256 9a63c15799a7593b84854fdad49841ed53866d86e15dcfd4f8be68da8a398c6f
MD5 0869a884618b72da6d515382790ae641
SHA1 2d1c3e8fa05a9029e8e4d90c97cf8b447ef23ec3
SHA512 e990457c6550232b4e7028b92449d3c8d7191b8919d4dabcf49a61601b4eac176d8b93ee09327f0db95aba9e271d1a761b5204d070a6f86729dedda20c8797cc
SSDEEP 192:USnkteMDeqrrH8K9C0927IdsWPz11WTzz4n699zzquw697G:TkteMDeqrrp9CKmIPzgzzo6rzWDkG
TLSH
T160A26B1678F07622A89E57761FE6318C5E39038392D0CC8876ECAD7A6F1036C8D5F686
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu20.png

SHA256 03620c2e85ca3afe2400358ca139acf9d77cb6a28fdf75e51dc8e0b6d75d70a8
MD5 860d1e7a36371cef515932318c2a8e35
SHA1 b90e15c97eedc94e6ab3e1dcf05bf5e513fe628d
SHA512 23bf8e75c797d29412ef63a44e3d93c871dd6323516eebae6f9a29f4446e51cd6c492102bb84e6a4aa67372939b80babf9f3334c831b38478e8f04498c4ae50b
SSDEEP 192:Hv7FsWiUpw6f6N/6sIYQB31xyonE+RMVARpEJodlFhWm/PGnkPZ:HvBVrfe6s3myoEopE2hWI+kR
TLSH
T13722BFFB7FD64F2D4636041158D5BA09E8DE871E37851A009E260517BDFFB295B1D210
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu3.png

SHA256 d6552927af08d71ccb9c69d419f16688ec807c5474827f613077a8699a46829d
MD5 e1b346458b601d005e691d4fb524f05a
SHA1 c3b38ef6c2ab7af3ad24e1914c982a7a641cf716
SHA512 3f5c396a29d841357b5138a6f2b1de678895e0d82637c8a65c1bdd54c5987a64638a89f907e2252daabf5065d1f355c81844f57462ab49ad548b2b4d5adbf07d
SSDEEP 192:pnS0kkn0SKHibKHH3fttKDtNzWAGaK6gpOQihkhHG:Ion0SKCbKHXfttKDtNzjKjlieG
TLSH
T1D0F15EA8FF209C118D14E809EFAA635A29B74F949AC2E544BCCBC90B4CA15FCCD0D6D1
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu4.png

SHA256 81716a0207e4a4dd6bb74a0e4398d239a0f2584663e4328cc60b0d20f9d0ff2b
MD5 22b812469d2cee675fb2540fe56544f8
SHA1 eff10f3e08a5edb6aedd0926eb77bfd366327b4f
SHA512 e86d9efa7760773648d6f574acfc9937549ef5bc9469fe4e2c1b7ce79e3d0d39412d86d337490d78561e80f8b41b79e94ad59673ef2a6d31289f640a2c60da7c
SSDEEP 384:250wXtew5eiFbDnPIrxqGEz3t6wwQJIMkJzu4:MBt1fPIrxqdT2d9u4
TLSH
T19FC2AE15BCF33421115D95355AADA15E4C724F83838A8C087EEEC87F2F20FA81D9AB5B
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu5.png

SHA256 d14a47be35c24f1aff3e8ea58f50d6150967ca33cfbdb1e60a20bba9a327d782
MD5 c9dfee2f64edcad18001582de17950a9
SHA1 dfbc407348f137764223921cfc68b09655f80a9c
SHA512 c349129ead404d5311c185b6518b6b8311b3f7de52f8f4662d2428ace1de25b89824c3dbdad6193553205155dbba7e2394f4ceb44e969f2781fe3b33a8b2066b
SSDEEP 6144:yFfFYV/NA2c4JOq9633zL9pZnxX2k2B+MdN0:yFt52c89oRpZxX2rBXdm
TLSH
T13C14139BBC4308819CC97283ED7C930D1E2F9CA00BCC9A78FA80DF519F9D29559AD634
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu6.png

SHA256 4b451c2a19a2b0b40963b456bdbc15eca110893ce3b7c2a73491da06b03cfdc7
MD5 29c12827666369b7660e9db4d526f17b
SHA1 de5c0666b106e077de864a0a21baf4811b7baca4
SHA512 b0b4cd798192e9716e09abbbba29ce3440a0fb20f19b550c2da061048decf5707026b98332786afc946dc6674481414a49824fad34c51d76bbe8412a19e5aa97
SSDEEP 1536:p5cqLECh5ioYP43iViN/HeIQV/QcABl7xh:cuKXPVceV/QcSllh
TLSH
T1705302DAA8741836FA84787742CF5947447FAB0933E52A30B1BC19E06F066C4EF1A58A
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu7.png

SHA256 76d7c455841c1bedcff13808486fe26f743e351ff61ad82f35655f8276a2fe94
MD5 78c7e242ae8f50753a1fa7133c0fc890
SHA1 6ea83449df6ea9a632434e8f034630162327a6b6
SHA512 c44997b72cb66973cd2e58261ab0ab44514cd9d83d08380fb1cf6ca7f361f4f8ed02248729edb1104c69e0006cb829ca6a8791fd1c07f7c32d88bf93139c8db3
SSDEEP 1536:7qoZlfi9OB4Iu/EsJzlsXYRU96MTYdzsRQ7jQKDwTya2:G2M9dEsJzOXYSPYJsRQ7cwF
TLSH
T11243027F68414793E6F5ECE9A74EA24EAD577CCC2910534F7F27818BBBA0CA429410C9
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu8.png

SHA256 66437f9bff1dc7e493ed713812a73bf0b3587d80b15bbb3e6b6f0853d6c9d916
MD5 f92eb6ba49ad52065ab0982d46724382
SHA1 cdc3a123a9149196c8bbd17e5385d9064878fea1
SHA512 83e3f51074b700e3fb3deaaf5a514a62471cdbfba185e38e50a703ef41ab20419d3618a441d44eb0e0937a4dc599195e43825dfdef48f5031d9845519c1623ef
SSDEEP 1536:f2Ma17ZqmKsGapNeaRCf8to7pe5ZXOPnUkO:eMY7ZfpNvCD7pa8BO
TLSH
T16D4302C6E8D09867E00C79A9CA3E1598CE63443786C5B6F339FF39741B47042AB264F6
MD5 SHA1 SHA512 SSDEEP TLSH

newimage/tietu9.png

SHA256 6301e2baea7f97773ab42ce5282ead76116e7c1b0e2c3e21c12f7d482029f73c
MD5 98a947eab7f44c1dd6fad24132d2ac46
SHA1 2893da74bab7793d3e593edef43e4276f949cc1f
SHA512 733cc5d8d4952596ec7d3ca1b6f8f0817120c173a05b09c16a5021a03bd4c0ce653e9bca4a2e7af453a05095ead38017fb96396d17f90bff963dfc06a401d24e
SSDEEP 96:neBd5A3ZCMdqfWm1d1TIaNEzO2egcsOmfuvR+5ZX1BUEV:eb5Uql54O2esOsu5+z1BUM
TLSH
T1D7916D3BA23D88BFD641099FC56462F7349F7D1119502C89878720217D7BEEB897278E
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW1.ogg

SHA256 4922765e0691eb3069c1cc80865d1783eb80c651601739a7d04f942a3a289a41
MD5 4f51a186e2072ca14f4f95b20b27d80d
SHA1 e15c9e6817c36038984506d03199e06cc9744a52
SHA512 bdd4bb62d3dd3e40a2dd52591901fb1787547fbe2ac443e22e4e0b6f11290f31b934779dd7fe8f7eacc11647e977e9513471bb8d98d1f7841686ea4c06b38b11
SSDEEP 384:roKMTXFuFbu9xk2uMNpRTkFois0g1o/g8rTT:ABuZYxDuMNp9kFoixRg8b
TLSH
T1BA42BF471D34D9AEFC131232DFFB6F264299199A01C56A42D13C353D2CAAF22BF1848E
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW10.ogg

SHA256 0719fc3e9f9b270d46e05fd3ad5ae8619c31ca00079c4ff0e5fae47695a4a6f5
MD5 146bad9582d7c7232e8d30b09bdb7162
SHA1 6b9fe4e2138f8747222b5a8e8cd55db2bab3fdda
SHA512 3b226de1ffd9ca3b76f390f0d9208e055d447a7ad146c3bc692754e5068f3c68cb09ac96fc0cd2e034dfd49a94bd38c5e072ff99602f523f0c9a0a20156f0ff3
SSDEEP 768:Ham2eC3z6/2GfsM+pyZY5ozbzZBxYzo5G3XMCiVF8iT6zPAa9Xoqg:Ham2kQM+Q4oXe3HpsGzPVXFg
TLSH
T17813F1C7F377B160D2FA61F98198D96533F14468036ABBA6A2DDC81E04C7652FE20899
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW11.ogg

SHA256 b0f82449eb9f9acf3b8de04a748f964257aca74dc628c4589f47e5312e76057b
MD5 c5b58698d054130c5915cc572c9d7725
SHA1 250c07f4e7d5b77b4517cc45e2ee903ffee92db3
SHA512 174edb9499393b86041cf27a75858a8d53d3587704ca84e3e7f217b68b058fe3bedb9f850a94690d6ead9bf362ef22d2a1d33df7b7c779211fb651a5cdc8aaa6
SSDEEP 768:FaOIBJ97RMH3BwCCPi7guuCNIeh6jOQm9KCJ460Zh:FatvMHxw/aJ2eh6C6CJ/w
TLSH
T1C2F2F1849AAE7123CD0EE3FC95894AD8BFE60C150094E44FFB95B97D8923D234D3A80C
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW12.ogg

SHA256 a3bf0a277ee1c23b976658d36b532d9a20e3102b7c4447c98e620a29350865b3
MD5 fb82a648550e20a4faa0f8682649bad2
SHA1 8c064e46881cd102017cd205b9de3d175fe2ad8c
SHA512 759b09cb5d39ec820c0662d82ed907cf0a8f5a5dd0f188cddea59c71511cb2852ac7d9cabdebe98e4cbfe46869530d13ee3dbcefd7f34f4e8b7878f890b6a26d
SSDEEP 768:PaUzDqhoo4zYfen9Kvr74GTZoFEcXzNDE2PPrK/HQw7Fxw:PaUzDq6ie9FG1oTBDE2P+YwLw
TLSH
T1DC13F19FA871001ACF0973FD768F74387F980EB66266998625404CAC2DEF5EC5F14978
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW13.ogg

SHA256 539107fa5b57f47934ae7fd01febf2425e517dea539cdcb4cbe3482b792f547d
MD5 c97a961db003a4bbd3f22d726470ae28
SHA1 5106f4696b5043572bd5dee57829261bd42fface
SHA512 34f83b46ec49ccae71477dcebda85b1f5345b0577dc780253c0b6efda6cf21b1aa8865d22ce88f3bf3aa506b0a4b48fdc9dc71f4a97de62c5fde1a4de6bb33a1
SSDEEP 768:aaGQjtH84HEnDhJthNU6xcOORZRKun7us+E9qKeWiKp3j4lkqrpQOublPm:aafd8A8D3QOOJfus+nKeWiKpT36BuRe
TLSH
T1DF3301F9CA53512CCE2FE3B8AAC3C3FC32B9414D1A29CF9626B450541967DAD4D10AB8
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW14.ogg

SHA256 6cf5d4551028c6866fa3a4c04cb3a93725359fb3d17d3d19ebb431a5e7f41bc1
MD5 d44004410ea5cc3dee16f26727628a26
SHA1 32baaca16de92d6a05c7afbd680aa900785a97aa
SHA512 735c0ff6b5d9b1b2cb778db36fac5f42cb15e600621751a130ec7c3968b7e00bc5f7cc8015c9b10b4cdbaac94d2702c35b13d1d84f00598f1d7f8826360e7d59
SSDEEP 768:uaz5U0dQ31T2pLx0aEKy1acxecm54g45Ntwr6wFgDjuAp8OsDL7qdzqFeA2vf9AT:uaJQFTEqaxcDgINtWglbqqzHJ/TFqb
TLSH
T1AD23E1D9CE025175C0BD2270B2CEDB7D7FF23118820ECA9ADE4E85CE465A9719C03897
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW15.ogg

SHA256 4ef6855b687730d529b7df190bf87a1024243714f051e8fa377ce36a3305d6dc
MD5 7a0dce2a802eae7e79138634f5948ee1
SHA1 3720adf7ef7483e7c3facd56afcccd4b0e321273
SHA512 ce7c55ada78b14722cc4d9c0e918ecbc89802abbf063952de029cd6d950bf0f296df3aa3f1d4ee9e4d3355bbbd21f6733f976abfe0a8780da5ba9a8ebc06427a
SSDEEP 768:Ia7+GMR9gyhrmo6ob5EEZ3d428GvEgxEKNW/Qi65VsQw/fxZ/UtzdyD:Ia7U9dhrmo6q9Z3dRRv9As5VsQw3Eg
TLSH
T1701302601FD8F54FE07A86B6089317B916DC379E632DAB41FADCC5050A21D7DDA3A8B0
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW2.ogg

SHA256 3a857982ee7f5cad8e81cbc2b9d4b196438e310e8c437e7f4d5fe6ef0aefc078
MD5 a2e55b7b2f1f7c6b3c0fb96b4ccf9888
SHA1 3d655e6321f3918e42ef8c500e5439c3bfcdbe0d
SHA512 3afd319def14a48ec253605d8bd5a96861716d79ae8821dd9ad082b6bb2f3f377c4b7d34db03892d008e2c2d3215d950ea164bab8de3a70457ad979bfb7c4f3d
SSDEEP 384:JoKMTXFDdYeN5h+rV0vuxcbS8OUAVh1hsoOx:2BDdYeN5cSvvaUKh03
TLSH
T1E392D0D05839E4AEEC037D7E03A65F235B3A32D801F5E6422E16821D0EF7F11BD9088A
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW3.ogg

SHA256 6917b77f37a52d2e4a23d7165568c7ee08eae3e5263a86b38f19507c5b93e896
MD5 6c016357abb087452b6e846e4375dd98
SHA1 858424a8cb5add362bc07a767953b892c8833231
SHA512 dcf094eafcd9c03ff6150777a643e41bf57c0196827ea7d1668d7c8b3bba63a6ca63a2cac77a04d3ac56cf038db735dad71e4a41cbb9a175cd148ce7d769022c
SSDEEP 768:YaVT10h7Yp6r/yig0WiQbNl8MvHHTP/5WU+yvF3cFB+OuirLVq7TpseM78WY3VDT:YaK7Q8g3iQr8MvTTFsFBqk5q7TX6zi3
TLSH
T1B443F1F6ED59B504CA6C3FBDE297B674B31793AC0650C5B9EE844A26CC92740B810BF4
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW4.ogg

SHA256 2f330e296da1e93597d35357d28c06d8f690c84ce6f45c5fe10625e651291ec0
MD5 24f3c9658a36c5a3449cc862eb76e8f9
SHA1 4eb007171688beef5ebda366df06b4a4099fefdd
SHA512 6d73fe9fe873ce896ef1c20fccf38dfbe6ad2c38eab3c06c0cbf0b21748da436471445d4ce5ccface596aab0b16abdd2dc9ace922bb60a7ba388e6052ac5ba9e
SSDEEP 768:BaNhXA809UCpANZ5UekB6cpq06aKX0m0PNeECpWELQG+tZ:BaNxA8EMwe3/0m0PrCHQGq
TLSH
T19E13F2E15F94E30BCD9E5F734883D9B07B9F15BC279CE381CA4C042A29AB85C887946D
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW5.ogg

SHA256 f2c6762fecbf32a39426a95b18c086ff1f96a37b8dc655df996218794441c709
MD5 6bcaf780929525cd33554c4a70104536
SHA1 a1cc0b0426c65c849b4cc1f3b1cda2197d98b2aa
SHA512 51eb7ce58a5257af98b8eedb8c9c3d9115d845c380756f631ec514321e7585ed24b413d4172ed8805082f17955ef1b435aa6a710f1d792464758da9f3805590c
SSDEEP 768:xa/qQudeXANJxI088xQkaBAn+CND9FSsZysMrLkcmAWEqnZsXiZ0:xai0KJvfND9FSuyjkgW1nIiK
TLSH
T14F03F16A9EC5F5DECF06217FD24E87B41F3135799324D2AAF584182E0D46698EC34CE8
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW6.ogg

SHA256 58275c065df0ef589c742888fdae28a5bbfd622b6b13e87c4f4b83fca19fc80f
MD5 1ba0dfe19167a4794f28286f1203f6ed
SHA1 fb0874a307b56c08f16cd0d74b88f6a3d725938a
SHA512 b20d7267c032ca5fe841369620c4d957c0a26aee5bb681c891e9ee89d72df1f3620f005d4127ac0e58c626eea40563a455bf23d28987da2af61792da4893f2c6
SSDEEP 1536:8acU+h9BJemhpyFyAjkF6B7Y+SaTPQxHXyrDL:yU+jX8M0Y+SaTw3G3
TLSH
T1D433F1B8C9016868C839F7F966CB5F39EFE142A4435D51B5F638C5CF1191AC9AC1C471
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW7.ogg

SHA256 486d258d0923a10c7b9c212171879a024905f919e483da79e0d6edd5a0d85bcc
MD5 890b5ab340e73af8a53c1f4f269d5179
SHA1 021d6050a3af3a870345a54a69daf7bfbf774019
SHA512 08aae0b042392f429b6f2169ec9370d4bafd4735102bebdd9732f2e70e36a9d55c1b3620b8d9ae3d1cf6663d22ea181a75beeb193b8ac874bb84c3f40f1aa6cd
SSDEEP 1536:ZaXKaVUrpkExz3CDessLfTMiyb0cXyScA4XzzjSjPnXo:YorWGzCSzfwJliPA4Ws
TLSH
T1E343F1A6EC84180EF03253F3D08B43B483FA253E1E5A5CA7D66E1B097053E615D2B9DE
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW8.ogg

SHA256 a89b5223884e2f5a30f54417604e3c40fef49ac498f1b439902092aa4b54a88e
MD5 250627b3041ccb5e90cb80423f7435c4
SHA1 a30c41c084cdf2a674c8fb6df1b5dc70528dc05d
SHA512 87232d57335ab794b13d14e7a9f888bd9cb9b584dea132650799440e68e094f87b4874fac6ce330a42db51d3729206615f9dec00200865ac4076550846f7a68f
SSDEEP 768:KaOvUm7hI2AWVj1juvDLfeOTQO6T67TNwUYSOEeh4JSgP/36PXD:KaO8mahg0ffZyIeHSOEehJgP/A
TLSH
T13313F1F7D9071D9AE179F279C51783B53BE276BC4214F2D7E300986CB70AAA891264A0
MD5 SHA1 SHA512 SSDEEP TLSH

newsounds/ZZZNEW9.ogg

SHA256 a18a7e10742148355d5dc84cdee468ac37142e0d97b1783c56dda66d30748341
MD5 519bddcb7d71236b6c7a3fe96728f6e2
SHA1 3eca8b759be5782b718c16efeefe1d9540d1166b
SHA512 b87eb79d29be6e7d88f93f071be613887752a63c37fcf0d7de4d1c0b54770ba91a9a84f4304815f6d037d474451e9458b2123e7d9a87ed5dad34b64a4cc74197
SSDEEP 384:mi+OHjosy+SXvsrJZohyM99Ba15aln4OkFzx+4GVDDD2T:Ca8fzXErRsa15aln4Nx8iT
TLSH
T116B2F1D459A0E18DC89D7233D6672AB9FBF831FD45A414EB7FE0832168CB194CD0465B
MD5 SHA1 SHA512 SSDEEP TLSH

如何修改音效及贴图.txt

SHA256 b107090f9eea411c40eb62afec08afd5b3c5a626407e3b827c6bf32e0a89ddf8
MD5 73539b0ebe77b3c926fc789f462bd356
SHA1 37872abe3a3a9f5bd8c46111464dc2418f35608d
SHA512 cced436ab59f08758d2c1dfbcc82ecc2c2e291f941113dc44b74e3d71c536a375f08910fbd958dca7e2a03e486306fc9cf84c2e8da086a8e3b8258175a62ee57
TLSH
T103D097064552F0AAC2C043D93D1A8ED05430383FD1B2F71118A38C7204DE8FBA633F16
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

招笑版.zip

PlantsVsZombies.exe

PE Signature issue

kernel32

user32

wininet

winmm

wsock32

gdi42

advapi32

shell32

ole32

oleaut32

generic

bass.dll

generic

data/BrianneTod12.txt

data/BrianneTod16.txt

data/BrianneTod32.txt

data/BrianneTod32Black.txt

data/ContinuumBold14.txt

data/ContinuumBold14outback.txt

data/DwarvenTodcraft12.png

data/DwarvenTodcraft12.txt

data/DwarvenTodcraft15.png

data/DwarvenTodcraft15.txt

data/DwarvenTodcraft18.png

data/DwarvenTodcraft18.txt

data/DwarvenTodcraft18BrightGreenInset.png

data/DwarvenTodcraft18BrightGreenInset.txt

data/DwarvenTodcraft18GreenInset.png

data/DwarvenTodcraft18GreenInset.txt

data/DwarvenTodcraft18Yellow.png

data/DwarvenTodcraft18Yellow.txt

data/DwarvenTodcraft24.png

data/DwarvenTodcraft24.txt

data/DwarvenTodcraft36BrightGreenInset.png

data/DwarvenTodcraft36BrightGreenInset.txt

data/DwarvenTodcraft36GreenInset.png

data/DwarvenTodcraft36GreenInset.txt

data/HouseofTerror16.txt

data/HouseofTerror16Outline.png

data/HouseofTerror20.txt

data/HouseofTerror20Outline.png

data/HouseofTerror28.png

data/HouseofTerror28.txt

data/Pico129.txt

data/Pix118Bold.txt

data/_BrianneTod12.png

data/_BrianneTod16.png

data/_BrianneTod32.png

data/_BrianneTod32Outline.png

data/_ContinuumBold14.gif

data/_ContinuumBold14outback.gif

data/_HouseofTerror16.png

data/_HouseofTerror20.png

data/_Pico129.png

data/_Pix118Bold.gif

eata/BrianneTod12.txt

eata/BrianneTod16.txt

eata/BrianneTod32.txt

eata/BrianneTod32Black.txt

eata/ContinuumBold14.txt

eata/ContinuumBold14outback.txt

eata/DwarvenTodcraft12.txt

eata/DwarvenTodcraft15.txt

eata/DwarvenTodcraft18.txt

eata/DwarvenTodcraft18BrightGreenInset.txt

eata/DwarvenTodcraft18GreenInset.txt

eata/DwarvenTodcraft18Yellow.txt

eata/DwarvenTodcraft24.txt

eata/DwarvenTodcraft36BrightGreenInset.txt

eata/DwarvenTodcraft36GreenInset.txt

eata/HouseofTerror16.txt

eata/HouseofTerror20.txt