Resubmissions

18-09-2022 03:22

220918-dxcwgaefbp 10

18-09-2022 03:10

220918-dn17psefar 3

Analysis

  • max time kernel
    1740s
  • max time network
    1740s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-09-2022 03:22

General

  • Target

    Flashpoint 11 Infinity.exe

  • Size

    790.3MB

  • MD5

    7555a9bcf4b2b389ecfe8b62312a4ba7

  • SHA1

    cd6e87fc5bf5396d9d516d1f0d46f0597f043508

  • SHA256

    43bfa95bb6e99ca03c8fedd1c8f5c7ed628dd41601dbd5a5b60be3963b166387

  • SHA512

    774a75f0f950629fa4879866b76847ffcb877e5f35acc98b099cb40c235dc2f346ac3d696ab323f9dab84bd819b9b26b817dc5533a35f1c97a541d3c8b927ca8

  • SSDEEP

    25165824:tXei5Jq4g/AXakUEsOcYqHuzF+PS5/5f3LkMy:tXNc4PFoHuJOu/5f3LDy

Malware Config

Signatures

  • SnakeBOT

    SnakeBOT is a heavily obfuscated .NET downloader.

  • Zloader, Terdot, DELoader, ZeusSphinx

    Zloader is a malware strain that was initially discovered back in August 2015.

  • Contains SnakeBOT related strings 1 IoCs
  • Downloads MZ/PE file
  • Executes dropped EXE 21 IoCs
  • Checks computer location settings 2 TTPs 7 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 64 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in System32 directory 11 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Program crash 1 IoCs
  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies registry class 60 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 59 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Flashpoint 11 Infinity.exe
    "C:\Users\Admin\AppData\Local\Temp\Flashpoint 11 Infinity.exe"
    1⤵
    • Modifies registry class
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    PID:480
  • C:\Windows\system32\WerFault.exe
    C:\Windows\system32\WerFault.exe -pss -s 472 -p 5116 -ip 5116
    1⤵
      PID:3280
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 5116 -s 2460
      1⤵
      • Program crash
      PID:4860
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault613f7bbah3471h4fa5hbedeh9c1e2a00d038
      1⤵
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1292
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fffcb9e46f8,0x7fffcb9e4708,0x7fffcb9e4718
        2⤵
          PID:4388
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,6975661906643301857,8436974219388938014,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
          2⤵
            PID:2772
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,6975661906643301857,8436974219388938014,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
            2⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:4112
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,6975661906643301857,8436974219388938014,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
            2⤵
              PID:5132
          • C:\Windows\System32\CompPkgSrv.exe
            C:\Windows\System32\CompPkgSrv.exe -Embedding
            1⤵
              PID:5264
            • C:\Windows\system32\svchost.exe
              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
              1⤵
                PID:5436
              • C:\Windows\system32\taskmgr.exe
                "C:\Windows\system32\taskmgr.exe" /0
                1⤵
                • Checks SCSI registry key(s)
                • Checks processor information in registry
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                PID:2332
              • C:\Windows\System32\rundll32.exe
                C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                1⤵
                  PID:3088
                • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Start Flashpoint.exe
                  "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Start Flashpoint.exe"
                  1⤵
                  • Executes dropped EXE
                  PID:3620
                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                    "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe"
                    2⤵
                    • Executes dropped EXE
                    • Checks computer location settings
                    • Loads dropped DLL
                    • Modifies registry class
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    PID:4008
                    • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                      "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe" "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\resources\app.asar\build\back\index.js" ""
                      3⤵
                      • Executes dropped EXE
                      • Checks computer location settings
                      • Loads dropped DLL
                      • Suspicious behavior: EnumeratesProcesses
                      PID:1964
                      • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php.exe
                        php -f update_httpdconf_main_dir.php
                        4⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:5920
                      • C:\Windows\SysWOW64\cmd.exe
                        C:\Windows\system32\cmd.exe /d /s /c "php -S 127.0.0.1:22600 router.php"
                        4⤵
                          PID:4904
                          • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php.exe
                            php -S 127.0.0.1:22600 router.php
                            5⤵
                            • Executes dropped EXE
                            PID:4544
                        • C:\Windows\SysWOW64\cmd.exe
                          C:\Windows\system32\cmd.exe /d /s /c "qemu-system-i386.exe -machine pc-i440fx-5.2 -m 128 -net nic,model=virtio-net-pci -net user,hostfwd=tcp:127.0.0.1:22500-:80 -qmp tcp:127.0.0.1:22501,server,nowait -qmp tcp:127.0.0.1:22502,server,nowait -drive file=alpine.qcow2,if=virtio -serial stdio -loadvm quick -display none"
                          4⤵
                            PID:3092
                            • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Server\qemu-system-i386.exe
                              qemu-system-i386.exe -machine pc-i440fx-5.2 -m 128 -net nic,model=virtio-net-pci -net user,hostfwd=tcp:127.0.0.1:22500-:80 -qmp tcp:127.0.0.1:22501,server,nowait -qmp tcp:127.0.0.1:22502,server,nowait -drive file=alpine.qcow2,if=virtio -serial stdio -loadvm quick -display none
                              5⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              PID:5164
                          • C:\Windows\SysWOW64\cmd.exe
                            C:\Windows\system32\cmd.exe /d /s /c ""C:/Users/Admin/Desktop/Flashpoint 11 Infinity/FPSoftware/Flash/flashplayer_32_sa.exe" http://downloads.bbc.co.uk/cbeebies/bigandsmall/swf/fun/bigandsmall_phase2.swf"
                            4⤵
                              PID:1840
                              • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\FPSoftware\Flash\flashplayer_32_sa.exe
                                "C:/Users/Admin/Desktop/Flashpoint 11 Infinity/FPSoftware/Flash/flashplayer_32_sa.exe" http://downloads.bbc.co.uk/cbeebies/bigandsmall/swf/fun/bigandsmall_phase2.swf
                                5⤵
                                • Executes dropped EXE
                                • Checks processor information in registry
                                • Modifies registry class
                                • Suspicious use of SetWindowsHookEx
                                PID:3556
                          • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                            "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\flashpoint-launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1684 --field-trial-handle=1896,i,14608044053361647662,16629276483037452199,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                            3⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            PID:2104
                          • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                            "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\flashpoint-launcher" --mojo-platform-channel-handle=1804 --field-trial-handle=1896,i,14608044053361647662,16629276483037452199,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                            3⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            PID:5656
                          • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                            "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\flashpoint-launcher" --app-path="C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --mojo-platform-channel-handle=3152 --field-trial-handle=1896,i,14608044053361647662,16629276483037452199,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                            3⤵
                            • Executes dropped EXE
                            • Checks computer location settings
                            PID:2332
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
                        1⤵
                        • Adds Run key to start application
                        • Enumerates system info in registry
                        • Modifies registry class
                        • NTFS ADS
                        • Suspicious behavior: EnumeratesProcesses
                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                        PID:4028
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffcb9e46f8,0x7fffcb9e4708,0x7fffcb9e4718
                          2⤵
                            PID:2192
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2232 /prefetch:2
                            2⤵
                              PID:3764
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 /prefetch:3
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:4400
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2952 /prefetch:8
                              2⤵
                                PID:1496
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3728 /prefetch:1
                                2⤵
                                  PID:6032
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4252 /prefetch:1
                                  2⤵
                                    PID:6068
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4260 /prefetch:1
                                    2⤵
                                      PID:3628
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5216 /prefetch:8
                                      2⤵
                                        PID:2312
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5316 /prefetch:8
                                        2⤵
                                          PID:3948
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3588 /prefetch:8
                                          2⤵
                                            PID:5244
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3588 /prefetch:8
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:796
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
                                            2⤵
                                              PID:5380
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
                                              2⤵
                                                PID:176
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1836 /prefetch:8
                                                2⤵
                                                  PID:2940
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5528 /prefetch:8
                                                  2⤵
                                                    PID:4496
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6116 /prefetch:2
                                                    2⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:6000
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1076 /prefetch:8
                                                    2⤵
                                                      PID:1272
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5192 /prefetch:8
                                                      2⤵
                                                        PID:4308
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5800 /prefetch:8
                                                        2⤵
                                                          PID:4908
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5552 /prefetch:8
                                                          2⤵
                                                            PID:5540
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4092 /prefetch:8
                                                            2⤵
                                                              PID:3348
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4508 /prefetch:8
                                                              2⤵
                                                                PID:3188
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3780 /prefetch:8
                                                                2⤵
                                                                  PID:3500
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5736 /prefetch:8
                                                                  2⤵
                                                                    PID:1848
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=180 /prefetch:8
                                                                    2⤵
                                                                      PID:4292
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
                                                                      2⤵
                                                                        PID:5508
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4384 /prefetch:1
                                                                        2⤵
                                                                          PID:5616
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
                                                                          2⤵
                                                                            PID:4588
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
                                                                            2⤵
                                                                              PID:5844
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
                                                                              2⤵
                                                                                PID:4300
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
                                                                                2⤵
                                                                                  PID:6064
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1072 /prefetch:1
                                                                                  2⤵
                                                                                    PID:3732
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
                                                                                    2⤵
                                                                                      PID:820
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4060 /prefetch:8
                                                                                      2⤵
                                                                                        PID:2852
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
                                                                                        2⤵
                                                                                          PID:3584
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2012 /prefetch:1
                                                                                          2⤵
                                                                                            PID:3624
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
                                                                                            2⤵
                                                                                              PID:6032
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5812 /prefetch:8
                                                                                              2⤵
                                                                                                PID:3948
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5804 /prefetch:8
                                                                                                2⤵
                                                                                                  PID:2992
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4384 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5880
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:3260
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6828 /prefetch:8
                                                                                                      2⤵
                                                                                                        PID:5460
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6264 /prefetch:8
                                                                                                        2⤵
                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                        PID:4576
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9580962055769378900,12219859080413121201,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6432 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:1244
                                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                        1⤵
                                                                                                          PID:5108
                                                                                                        • C:\Windows\system32\AUDIODG.EXE
                                                                                                          C:\Windows\system32\AUDIODG.EXE 0x518 0x2fc
                                                                                                          1⤵
                                                                                                            PID:2944
                                                                                                          • C:\Windows\system32\AUDIODG.EXE
                                                                                                            C:\Windows\system32\AUDIODG.EXE 0x518 0x2fc
                                                                                                            1⤵
                                                                                                              PID:4444
                                                                                                            • C:\Windows\system32\mspaint.exe
                                                                                                              "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Desktop\LimitUnblock.jpe" /ForceBootstrapPaint3D
                                                                                                              1⤵
                                                                                                              • Modifies registry class
                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                              PID:4788
                                                                                                            • C:\Windows\System32\svchost.exe
                                                                                                              C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc
                                                                                                              1⤵
                                                                                                              • Drops file in System32 directory
                                                                                                              PID:5216
                                                                                                            • C:\Windows\system32\OpenWith.exe
                                                                                                              C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                              1⤵
                                                                                                              • Suspicious behavior: GetForegroundWindowSpam
                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                              PID:3352
                                                                                                            • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                                                                              "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\FindExit.mpv2"
                                                                                                              1⤵
                                                                                                              • Suspicious behavior: AddClipboardFormatListener
                                                                                                              • Suspicious behavior: GetForegroundWindowSpam
                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                              PID:5628
                                                                                                            • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Start Flashpoint.exe
                                                                                                              "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Start Flashpoint.exe"
                                                                                                              1⤵
                                                                                                              • Executes dropped EXE
                                                                                                              PID:5316
                                                                                                              • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                                                                                                                "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe"
                                                                                                                2⤵
                                                                                                                • Executes dropped EXE
                                                                                                                • Checks computer location settings
                                                                                                                • Modifies registry class
                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                PID:6072
                                                                                                                • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                                                                                                                  "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\flashpoint-launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1588 --field-trial-handle=1748,i,18437796489856424815,14649795333306294135,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                                                                                                                  3⤵
                                                                                                                  • Executes dropped EXE
                                                                                                                  PID:4112
                                                                                                                • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                                                                                                                  "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\flashpoint-launcher" --mojo-platform-channel-handle=1868 --field-trial-handle=1748,i,18437796489856424815,14649795333306294135,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                                                                                                                  3⤵
                                                                                                                  • Executes dropped EXE
                                                                                                                  PID:1760
                                                                                                                • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                                                                                                                  "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe" "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\resources\app.asar\build\back\index.js" ""
                                                                                                                  3⤵
                                                                                                                  • Executes dropped EXE
                                                                                                                  • Checks computer location settings
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  PID:3940
                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php.exe
                                                                                                                    php -f update_httpdconf_main_dir.php
                                                                                                                    4⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    PID:2028
                                                                                                                  • C:\Windows\SysWOW64\cmd.exe
                                                                                                                    C:\Windows\system32\cmd.exe /d /s /c "php -S 127.0.0.1:22600 router.php"
                                                                                                                    4⤵
                                                                                                                      PID:3400
                                                                                                                      • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php.exe
                                                                                                                        php -S 127.0.0.1:22600 router.php
                                                                                                                        5⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        PID:4492
                                                                                                                    • C:\Windows\SysWOW64\cmd.exe
                                                                                                                      C:\Windows\system32\cmd.exe /d /s /c "qemu-system-i386.exe -machine pc-i440fx-5.2 -m 128 -net nic,model=virtio-net-pci -net user,hostfwd=tcp:127.0.0.1:22500-:80 -qmp tcp:127.0.0.1:22501,server,nowait -qmp tcp:127.0.0.1:22502,server,nowait -drive file=alpine.qcow2,if=virtio -serial stdio -loadvm quick -display none"
                                                                                                                      4⤵
                                                                                                                        PID:4668
                                                                                                                        • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Server\qemu-system-i386.exe
                                                                                                                          qemu-system-i386.exe -machine pc-i440fx-5.2 -m 128 -net nic,model=virtio-net-pci -net user,hostfwd=tcp:127.0.0.1:22500-:80 -qmp tcp:127.0.0.1:22501,server,nowait -qmp tcp:127.0.0.1:22502,server,nowait -drive file=alpine.qcow2,if=virtio -serial stdio -loadvm quick -display none
                                                                                                                          5⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:5112
                                                                                                                      • C:\Windows\SysWOW64\Wbem\wmic.exe
                                                                                                                        wmic.exe PROCESS GET Name,ProcessId,ParentProcessId,Status
                                                                                                                        4⤵
                                                                                                                          PID:5816
                                                                                                                        • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php.exe
                                                                                                                          php -f reset_httpdconf_main_dir.php
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:3436
                                                                                                                      • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                                                                                                                        "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\flashpoint-launcher" --app-path="C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --mojo-platform-channel-handle=2752 --field-trial-handle=1748,i,18437796489856424815,14649795333306294135,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                                                                                                        3⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        • Checks computer location settings
                                                                                                                        PID:3508
                                                                                                                      • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe
                                                                                                                        "C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\flashpoint-launcher" --app-path="C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\resources\app.asar" --enable-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=784 --field-trial-handle=1748,i,18437796489856424815,14649795333306294135,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                                                                                                        3⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        • Checks computer location settings
                                                                                                                        PID:212
                                                                                                                  • C:\Windows\system32\taskmgr.exe
                                                                                                                    "C:\Windows\system32\taskmgr.exe" /0
                                                                                                                    1⤵
                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                    • Checks processor information in registry
                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                    PID:4804

                                                                                                                  Network

                                                                                                                  MITRE ATT&CK Enterprise v6

                                                                                                                  Replay Monitor

                                                                                                                  Loading Replay Monitor...

                                                                                                                  Downloads

                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\bc36e893-6682-4461-a9d0-2d9ed3ef42d2.tmp.node

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                    MD5

                                                                                                                    e088efd958957de42396a0d7063a6a37

                                                                                                                    SHA1

                                                                                                                    af0380f50513306e1a4943e946111f1406c07b1e

                                                                                                                    SHA256

                                                                                                                    aa13b5d71b63d408f7f0590553050212a8c21d8df16211385620c8220467f3e3

                                                                                                                    SHA512

                                                                                                                    eecc586f79ad5d67e7d2f4674cf4a7a6fa1598e58c8043c5f9de9fb61d1182786432ab6d02580c46c994f010d835bad567f7b1c01e6ebe94769462005b35f1a4

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\AutoMount\dist\ext.js

                                                                                                                    Filesize

                                                                                                                    12KB

                                                                                                                    MD5

                                                                                                                    ea23cc481d60bea666e61110fe5eed6e

                                                                                                                    SHA1

                                                                                                                    1e06af51e7c5e6123756d614f0d83ea18e9932c2

                                                                                                                    SHA256

                                                                                                                    953ce09397e31ec7b9fec9dd87a8efc987addfb0933d598f69da5ecc816c2e4c

                                                                                                                    SHA512

                                                                                                                    99e2e883ba761c5bcc591f352d18847e92933af9253c86ada509e0509ffc79fbff1df00d85a25d83c01d48e504e74dc4f531e7d20f488b4d82ea13fe24dbf540

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\AutoMount\package.json

                                                                                                                    Filesize

                                                                                                                    730B

                                                                                                                    MD5

                                                                                                                    f66ef51d551d100276ab0a46b47847cf

                                                                                                                    SHA1

                                                                                                                    e97f7eb670a6219e226d60d20f0f3c73a2ec5ffd

                                                                                                                    SHA256

                                                                                                                    0ac958cb1ecadd66fd6d945f93f7fa06661576d05714155c9c346dd8187307f7

                                                                                                                    SHA512

                                                                                                                    d630c7bcfde949d5a869bd52f4019a47b1d3ed22e9fad536d19c5a8a443c3a89ea4d67fa5b9bb530c09c0e19706b9f1d49d8e15830e9ade534545217abbdea46

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\Extractor\dist\ext.js

                                                                                                                    Filesize

                                                                                                                    37KB

                                                                                                                    MD5

                                                                                                                    38f4396d1c1d4bc60bd22a918d05c7e1

                                                                                                                    SHA1

                                                                                                                    d6e798a588c9702f46a86636c4bad0da0026acba

                                                                                                                    SHA256

                                                                                                                    041e40722be29a8c4e0fb59652d057d44c5a79afcc19f8c36f9e568d5d1a3c08

                                                                                                                    SHA512

                                                                                                                    b79e8edeaa04264b11d1129ed592e4f2295489035a56fb013699f24d71bfd525b9d78df005feed9a3f536a077a2504dbba7cbda22dfbae94be07a6842e8132d8

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\Extractor\package.json

                                                                                                                    Filesize

                                                                                                                    997B

                                                                                                                    MD5

                                                                                                                    436d6ca890c3b099a3636002be6bf091

                                                                                                                    SHA1

                                                                                                                    4fa25b99b2d301c10a81b48944c06d466a28bf71

                                                                                                                    SHA256

                                                                                                                    0221ab9fdd4a0f12e2a36aade2897295ab6db1edb2cd7916df02c629b54e4042

                                                                                                                    SHA512

                                                                                                                    4a1e05f8e2899bb2c5edf7485ed99a4e85f87dadb7fe7b15b0f7cbf40301ee915af92bc18ac0d834293eee4b30ae78a1005f41eb9a5b71014aa0b5a94206cfb0

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\analytics\dist\ext.js

                                                                                                                    Filesize

                                                                                                                    207KB

                                                                                                                    MD5

                                                                                                                    e9c0e6fbac26aeac5abfaabd1f399155

                                                                                                                    SHA1

                                                                                                                    bd68dd6ad2d2fed99821075e3f2482e91705b405

                                                                                                                    SHA256

                                                                                                                    ecf285b4eef529f673a6e289e0cc182efee8d1dd09381187d0114de451a7c636

                                                                                                                    SHA512

                                                                                                                    755cc8df7faada21f5d50062f6f987df088542c586d48bd9fd95bf16cc9ceb927194d16d58d9978cea34a3e9e5f79de6222d57415b675548b2544516c132a7cf

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\analytics\package.json

                                                                                                                    Filesize

                                                                                                                    2KB

                                                                                                                    MD5

                                                                                                                    04923677bdbcbbf61a907cd9ecf6cf0a

                                                                                                                    SHA1

                                                                                                                    d513215efde70cf3a31a60d84736bc2b98022c6b

                                                                                                                    SHA256

                                                                                                                    84e95eab54c65233a4ab496d4b4a2bab981dbc59991da8cf76703d3e1271c123

                                                                                                                    SHA512

                                                                                                                    139f384c08f8a203d85d3ba9f70760447d9dee62a6e43ca9044aa2b033d1cf607ae73c18214ce11c7c80d6c37080932d5a54ca128d7431467b9b97de8846c2a7

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\discord-rich-presence\dist\ext.js

                                                                                                                    Filesize

                                                                                                                    358KB

                                                                                                                    MD5

                                                                                                                    9fae2b7db22ca8a248b4e884b42ae30d

                                                                                                                    SHA1

                                                                                                                    335ac4708f9f34197d8b95b9302c17ff8f1cb604

                                                                                                                    SHA256

                                                                                                                    955bc2e9f6197241d2cf0335826f99f4bc957398ede4a15521a3c8a6244acce5

                                                                                                                    SHA512

                                                                                                                    66518feb758bacd3cc6d1a9dae8ec683bcc4254df88f21e9d8e0f250048dce9596718c8cb8f39923ab28f7f02883e37c2cbdb243e00d781202dd8ba61c2fbcbd

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\discord-rich-presence\package.json

                                                                                                                    Filesize

                                                                                                                    1KB

                                                                                                                    MD5

                                                                                                                    0e273610c2ac4a357bc04abfe115513f

                                                                                                                    SHA1

                                                                                                                    7646e834dd72f34f364808295607219647b3b0a2

                                                                                                                    SHA256

                                                                                                                    db09fd82a61849fece0e275afb1dc7932c0d8fa905d432796daf9f4ddc200927

                                                                                                                    SHA512

                                                                                                                    fb4b95d275b4df33384674f27f539da8bab68defff9f26c1a32780ccd9a2e6dd7b335897a668b7bd688f346bf47a8fd3d65ce5f21b21a645b3809649ac716872

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\infocheck\dist\ext.js

                                                                                                                    Filesize

                                                                                                                    9KB

                                                                                                                    MD5

                                                                                                                    92e4ecef0bcf537a02c211c53210116c

                                                                                                                    SHA1

                                                                                                                    4acecd6ee4b299a6353fae0f90ad5bfe533f70b4

                                                                                                                    SHA256

                                                                                                                    55383701c3353fbc4fbc6b157b741cbfe33eefffee523b859b78e2baaeee5b63

                                                                                                                    SHA512

                                                                                                                    ced1c40fe167fa46e94455a4582fe5395a2015ecd79a8816bd56ad54467a346f7d2b83dec393b9940d7b6e95d8d6dad17233b834425228cbd02e5a44a5ec7faf

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\infocheck\package.json

                                                                                                                    Filesize

                                                                                                                    738B

                                                                                                                    MD5

                                                                                                                    ea9ecdb710202d3480bd7165e870ee4f

                                                                                                                    SHA1

                                                                                                                    ebdf9a8561b11b8bd69aa155aaa255ef50c9421f

                                                                                                                    SHA256

                                                                                                                    77235917c2120117c7e1f937d838aa4acf6e03dae8766d574628713487efbb9c

                                                                                                                    SHA512

                                                                                                                    4df76c30271cd6f9fc43dc4a18ce6bc63a4806da2d85e99a4110c3522de4077d08aeaabd5e1405916eebdaa0e9e4ff7f2c7dbcebfa9cbf074f05c2d60f0e310f

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\Extensions\launch-in-browser-mode\package.json

                                                                                                                    Filesize

                                                                                                                    402B

                                                                                                                    MD5

                                                                                                                    6072bfd8ba1c53e9b79d3caee2c7a4b2

                                                                                                                    SHA1

                                                                                                                    14032ada6d6fbd1b53355af44dc5106af01a24b2

                                                                                                                    SHA256

                                                                                                                    45a25f155f30079d4d6b08f860555aa2cd3be2335296607f8bd1f684447d3416

                                                                                                                    SHA512

                                                                                                                    62ad2955f5af95c052867aec0326f79984186c96f18a390eb65f97c844e49351e00a31cf2e212ffd923ac91ccb6b885196635762b56800d15ff3e5bf3403cd72

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\flashpoint.sqlite

                                                                                                                    Filesize

                                                                                                                    288.0MB

                                                                                                                    MD5

                                                                                                                    416335dc18d944b0ba4719e453ff1e2c

                                                                                                                    SHA1

                                                                                                                    9a1ab6f290e6bfb7d2095da7ab5aa0051bc231c7

                                                                                                                    SHA256

                                                                                                                    92f6d8bf622ce4c81d8c893c350591e98c6de7a2365f38d2e2c0ae2ff805e113

                                                                                                                    SHA512

                                                                                                                    a78e54341514a54c62e5d87278efc7a6ec55cd737b54da1ffdf5c9d0020dbd82425e9b5aacacafa7fd38af64dff273840a15472e0ed49c0f639d9143bed1e2b5

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Data\services.json

                                                                                                                    Filesize

                                                                                                                    1KB

                                                                                                                    MD5

                                                                                                                    2f0cfa374995a990057cb8badb7de939

                                                                                                                    SHA1

                                                                                                                    d846ff664a5c26e95e6ac0059df54405b10a5a25

                                                                                                                    SHA256

                                                                                                                    0fb6393118b50a4ebbce16de17cc8fd8b6c2ccf0cec3936d9af3d19d6d3f2f27

                                                                                                                    SHA512

                                                                                                                    04f09bd99a44eb0f0dfe086a83c7c939757f4068e0b632568e32901f26b758acbd582994940e01a9e5570b639f112370417fb7dc466da3119589fa57a94b7e5e

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\D3DCompiler_47.dll

                                                                                                                    Filesize

                                                                                                                    3.9MB

                                                                                                                    MD5

                                                                                                                    ab3be0c427c6e405fad496db1545bd61

                                                                                                                    SHA1

                                                                                                                    76012f31db8618624bc8b563698b2669365e49cb

                                                                                                                    SHA256

                                                                                                                    827d12e4ed62520b663078bbf26f95dfd106526e66048cf75b5c9612b2fb7ce6

                                                                                                                    SHA512

                                                                                                                    d1dc2ec77c770c5da99e688d799f88b1e585f8dcf63e6876e237fe7fce6e23b528e6a5ef94ffc68283c60ae4e465ff19d3fd6f2fae5de4504b5479d68cbc4dba

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe

                                                                                                                    Filesize

                                                                                                                    124.4MB

                                                                                                                    MD5

                                                                                                                    a6c42e73d4193bc7fc667d64e0331034

                                                                                                                    SHA1

                                                                                                                    0e5a42863dd06691f9b25dec3f199d6e08eebd69

                                                                                                                    SHA256

                                                                                                                    aa3aa951c775c14520c2e4609e7ee89b07aeba5228d15e0919f6adb80eaaad7a

                                                                                                                    SHA512

                                                                                                                    aaeefe64cc1c8d3fe524f4f67c001add13e2ef9dbb7ed9f7799bafba79e286998669ebe323593914be309b3d0df932c731cd815da372304439c6bf90d54ee5c7

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe

                                                                                                                    Filesize

                                                                                                                    124.4MB

                                                                                                                    MD5

                                                                                                                    a6c42e73d4193bc7fc667d64e0331034

                                                                                                                    SHA1

                                                                                                                    0e5a42863dd06691f9b25dec3f199d6e08eebd69

                                                                                                                    SHA256

                                                                                                                    aa3aa951c775c14520c2e4609e7ee89b07aeba5228d15e0919f6adb80eaaad7a

                                                                                                                    SHA512

                                                                                                                    aaeefe64cc1c8d3fe524f4f67c001add13e2ef9dbb7ed9f7799bafba79e286998669ebe323593914be309b3d0df932c731cd815da372304439c6bf90d54ee5c7

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe

                                                                                                                    Filesize

                                                                                                                    124.4MB

                                                                                                                    MD5

                                                                                                                    a6c42e73d4193bc7fc667d64e0331034

                                                                                                                    SHA1

                                                                                                                    0e5a42863dd06691f9b25dec3f199d6e08eebd69

                                                                                                                    SHA256

                                                                                                                    aa3aa951c775c14520c2e4609e7ee89b07aeba5228d15e0919f6adb80eaaad7a

                                                                                                                    SHA512

                                                                                                                    aaeefe64cc1c8d3fe524f4f67c001add13e2ef9dbb7ed9f7799bafba79e286998669ebe323593914be309b3d0df932c731cd815da372304439c6bf90d54ee5c7

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe

                                                                                                                    Filesize

                                                                                                                    124.4MB

                                                                                                                    MD5

                                                                                                                    a6c42e73d4193bc7fc667d64e0331034

                                                                                                                    SHA1

                                                                                                                    0e5a42863dd06691f9b25dec3f199d6e08eebd69

                                                                                                                    SHA256

                                                                                                                    aa3aa951c775c14520c2e4609e7ee89b07aeba5228d15e0919f6adb80eaaad7a

                                                                                                                    SHA512

                                                                                                                    aaeefe64cc1c8d3fe524f4f67c001add13e2ef9dbb7ed9f7799bafba79e286998669ebe323593914be309b3d0df932c731cd815da372304439c6bf90d54ee5c7

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\Flashpoint.exe

                                                                                                                    Filesize

                                                                                                                    124.4MB

                                                                                                                    MD5

                                                                                                                    a6c42e73d4193bc7fc667d64e0331034

                                                                                                                    SHA1

                                                                                                                    0e5a42863dd06691f9b25dec3f199d6e08eebd69

                                                                                                                    SHA256

                                                                                                                    aa3aa951c775c14520c2e4609e7ee89b07aeba5228d15e0919f6adb80eaaad7a

                                                                                                                    SHA512

                                                                                                                    aaeefe64cc1c8d3fe524f4f67c001add13e2ef9dbb7ed9f7799bafba79e286998669ebe323593914be309b3d0df932c731cd815da372304439c6bf90d54ee5c7

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\chrome_100_percent.pak

                                                                                                                    Filesize

                                                                                                                    125KB

                                                                                                                    MD5

                                                                                                                    0cf9de69dcfd8227665e08c644b9499c

                                                                                                                    SHA1

                                                                                                                    a27941acce0101627304e06533ba24f13e650e43

                                                                                                                    SHA256

                                                                                                                    d2c299095dbbd3a3cb2b4639e5b3bd389c691397ffd1a681e586f2cfe0e2ab88

                                                                                                                    SHA512

                                                                                                                    bb5d340009cef2bcb604ef38fdd7171fed0423c2dc6a01e590f8d15c4f6bc860606547550218db41fba554609e8395c9e3c3508dfa2d8b202e5059e7646bdcef

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\chrome_200_percent.pak

                                                                                                                    Filesize

                                                                                                                    174KB

                                                                                                                    MD5

                                                                                                                    d88936315a5bd83c1550e5b8093eb1e6

                                                                                                                    SHA1

                                                                                                                    6445d97ceb89635f6459bc2fb237324d66e6a4ee

                                                                                                                    SHA256

                                                                                                                    f49abd81e93a05c1e53c1201a5d3a12f2724f52b6971806c8306b512bf66aa25

                                                                                                                    SHA512

                                                                                                                    75142f03df6187fb75f887e4c8b9d5162902ba6aac86351186c85e5f0a2d3825ca312a36cf9f4bd656cdfc23a20cd38d4580ca1b41560d23ebaa0d41e4cf1dd2

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\config.json

                                                                                                                    Filesize

                                                                                                                    368B

                                                                                                                    MD5

                                                                                                                    9cce66575e04be3213c2dd62a225ad83

                                                                                                                    SHA1

                                                                                                                    1200dcdfeca0e1f588656ae96838ce8d1d513f4d

                                                                                                                    SHA256

                                                                                                                    39471d4c4c3338f891f7e14c0654405a4c3062857597801774328aabaa2005af

                                                                                                                    SHA512

                                                                                                                    c99ad69eb202699acb4b0de56daced046a16a95f72b5c67fc02550ab715f58660334a3e39be659c4f9321dc9c13cae36aab0fde2efd60648c64c6297ae251fa7

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\d3dcompiler_47.dll

                                                                                                                    Filesize

                                                                                                                    3.9MB

                                                                                                                    MD5

                                                                                                                    ab3be0c427c6e405fad496db1545bd61

                                                                                                                    SHA1

                                                                                                                    76012f31db8618624bc8b563698b2669365e49cb

                                                                                                                    SHA256

                                                                                                                    827d12e4ed62520b663078bbf26f95dfd106526e66048cf75b5c9612b2fb7ce6

                                                                                                                    SHA512

                                                                                                                    d1dc2ec77c770c5da99e688d799f88b1e585f8dcf63e6876e237fe7fce6e23b528e6a5ef94ffc68283c60ae4e465ff19d3fd6f2fae5de4504b5479d68cbc4dba

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\ffmpeg.dll

                                                                                                                    Filesize

                                                                                                                    2.5MB

                                                                                                                    MD5

                                                                                                                    14e8dbc79b2468a3670d80d1114f39d0

                                                                                                                    SHA1

                                                                                                                    03c8a37d4f71a41fa046e6aabbf78b66b4a22edd

                                                                                                                    SHA256

                                                                                                                    d16a83e8a0b0b829b2d0e974a2994b3ff249182acdde4c08a19e71a5f4d71c10

                                                                                                                    SHA512

                                                                                                                    191c2097de703de63c073c1f3811fa9a63835a2c31e6f0306bc9ce77fbb2d61b402895febbba249c9573d125dcc3689fe6982f7d1048c31e00e79dee21abf736

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\ffmpeg.dll

                                                                                                                    Filesize

                                                                                                                    2.5MB

                                                                                                                    MD5

                                                                                                                    14e8dbc79b2468a3670d80d1114f39d0

                                                                                                                    SHA1

                                                                                                                    03c8a37d4f71a41fa046e6aabbf78b66b4a22edd

                                                                                                                    SHA256

                                                                                                                    d16a83e8a0b0b829b2d0e974a2994b3ff249182acdde4c08a19e71a5f4d71c10

                                                                                                                    SHA512

                                                                                                                    191c2097de703de63c073c1f3811fa9a63835a2c31e6f0306bc9ce77fbb2d61b402895febbba249c9573d125dcc3689fe6982f7d1048c31e00e79dee21abf736

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\ffmpeg.dll

                                                                                                                    Filesize

                                                                                                                    2.5MB

                                                                                                                    MD5

                                                                                                                    14e8dbc79b2468a3670d80d1114f39d0

                                                                                                                    SHA1

                                                                                                                    03c8a37d4f71a41fa046e6aabbf78b66b4a22edd

                                                                                                                    SHA256

                                                                                                                    d16a83e8a0b0b829b2d0e974a2994b3ff249182acdde4c08a19e71a5f4d71c10

                                                                                                                    SHA512

                                                                                                                    191c2097de703de63c073c1f3811fa9a63835a2c31e6f0306bc9ce77fbb2d61b402895febbba249c9573d125dcc3689fe6982f7d1048c31e00e79dee21abf736

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\ffmpeg.dll

                                                                                                                    Filesize

                                                                                                                    2.5MB

                                                                                                                    MD5

                                                                                                                    14e8dbc79b2468a3670d80d1114f39d0

                                                                                                                    SHA1

                                                                                                                    03c8a37d4f71a41fa046e6aabbf78b66b4a22edd

                                                                                                                    SHA256

                                                                                                                    d16a83e8a0b0b829b2d0e974a2994b3ff249182acdde4c08a19e71a5f4d71c10

                                                                                                                    SHA512

                                                                                                                    191c2097de703de63c073c1f3811fa9a63835a2c31e6f0306bc9ce77fbb2d61b402895febbba249c9573d125dcc3689fe6982f7d1048c31e00e79dee21abf736

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\ffmpeg.dll

                                                                                                                    Filesize

                                                                                                                    2.5MB

                                                                                                                    MD5

                                                                                                                    14e8dbc79b2468a3670d80d1114f39d0

                                                                                                                    SHA1

                                                                                                                    03c8a37d4f71a41fa046e6aabbf78b66b4a22edd

                                                                                                                    SHA256

                                                                                                                    d16a83e8a0b0b829b2d0e974a2994b3ff249182acdde4c08a19e71a5f4d71c10

                                                                                                                    SHA512

                                                                                                                    191c2097de703de63c073c1f3811fa9a63835a2c31e6f0306bc9ce77fbb2d61b402895febbba249c9573d125dcc3689fe6982f7d1048c31e00e79dee21abf736

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\icudtl.dat

                                                                                                                    Filesize

                                                                                                                    9.9MB

                                                                                                                    MD5

                                                                                                                    c6ae43f9d596f3dd0d86fb3e62a5b5de

                                                                                                                    SHA1

                                                                                                                    198b3b4abc0f128398d25c66455c531a7af34a6d

                                                                                                                    SHA256

                                                                                                                    00f755664926fda5fda14b87af41097f6ea4b20154f90be65d73717580db26ee

                                                                                                                    SHA512

                                                                                                                    3c43e2dcdf037726a94319a147a8bc41a4c0fd66e6b18b3c7c95449912bf875382dde5ec0525dcad6a52e8820b0859caf8fa73cb287283334ec8d06eb3227ec4

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\libEGL.dll

                                                                                                                    Filesize

                                                                                                                    364KB

                                                                                                                    MD5

                                                                                                                    4551b7598ea2aefe49c181b363db0291

                                                                                                                    SHA1

                                                                                                                    0f11e335c6306670f20791d8c59347cb50c4e485

                                                                                                                    SHA256

                                                                                                                    f7f2e91729a65da67b0ba588e51b038d7e0de45c623e12f6d9a486ea76c2d6cb

                                                                                                                    SHA512

                                                                                                                    78dc27b35e5daa4ba39e5ac2ddf4de9ff692c9fe0c7652ea0e0ed9357879d75ff594499ffa72b86e753a6556d623e75f3624b4ff30fd4278218a2a8d16c95e05

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\libGLESv2.dll

                                                                                                                    Filesize

                                                                                                                    6.1MB

                                                                                                                    MD5

                                                                                                                    2646e6332f2781f76c258d489ef6f3d6

                                                                                                                    SHA1

                                                                                                                    6d8ec540b3cd04e168e0a4c3f86f53275a416c6d

                                                                                                                    SHA256

                                                                                                                    cbb36d420078a33942eeeac5219efaeb0b117fac91d8e75665a8694690f7c967

                                                                                                                    SHA512

                                                                                                                    8e6d65a0d712e0adbe2d8eb1964725a2e215ba34b1d1f965a74c187e78b625f60f9f5cddafbd90d9a9fc6ca97485f29d31cdc520118fc49b032734ca2a7aa37d

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\libegl.dll

                                                                                                                    Filesize

                                                                                                                    364KB

                                                                                                                    MD5

                                                                                                                    4551b7598ea2aefe49c181b363db0291

                                                                                                                    SHA1

                                                                                                                    0f11e335c6306670f20791d8c59347cb50c4e485

                                                                                                                    SHA256

                                                                                                                    f7f2e91729a65da67b0ba588e51b038d7e0de45c623e12f6d9a486ea76c2d6cb

                                                                                                                    SHA512

                                                                                                                    78dc27b35e5daa4ba39e5ac2ddf4de9ff692c9fe0c7652ea0e0ed9357879d75ff594499ffa72b86e753a6556d623e75f3624b4ff30fd4278218a2a8d16c95e05

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\libglesv2.dll

                                                                                                                    Filesize

                                                                                                                    6.1MB

                                                                                                                    MD5

                                                                                                                    2646e6332f2781f76c258d489ef6f3d6

                                                                                                                    SHA1

                                                                                                                    6d8ec540b3cd04e168e0a4c3f86f53275a416c6d

                                                                                                                    SHA256

                                                                                                                    cbb36d420078a33942eeeac5219efaeb0b117fac91d8e75665a8694690f7c967

                                                                                                                    SHA512

                                                                                                                    8e6d65a0d712e0adbe2d8eb1964725a2e215ba34b1d1f965a74c187e78b625f60f9f5cddafbd90d9a9fc6ca97485f29d31cdc520118fc49b032734ca2a7aa37d

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\locales\en-US.pak

                                                                                                                    Filesize

                                                                                                                    115KB

                                                                                                                    MD5

                                                                                                                    f982582f05ea5adf95d9258aa99c2aa5

                                                                                                                    SHA1

                                                                                                                    2f3168b09d812c6b9b6defc54390b7a833009abf

                                                                                                                    SHA256

                                                                                                                    4221cf9bae4ebea0edc1b0872c24ec708492d4fe13f051d1f806a77fe84ca94d

                                                                                                                    SHA512

                                                                                                                    75636f4d6aa1bcf0a573a061a55077106fbde059e293d095557cddfe73522aa5f55fe55a48158bf2cfc74e9edb74cae776369a8ac9123dc6f1f6afa805d0cc78

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\resources.pak

                                                                                                                    Filesize

                                                                                                                    4.9MB

                                                                                                                    MD5

                                                                                                                    d6d49082afa523b96083e2a3f6618cf6

                                                                                                                    SHA1

                                                                                                                    832947ff81074a75b9480a59964844a7a7cc3add

                                                                                                                    SHA256

                                                                                                                    00d4a32f5f0f01de3173ba6bb0a1358791066ce6cdbeaf332dff91616dc0f630

                                                                                                                    SHA512

                                                                                                                    8a33ded38154eeac67f547386743ac03b7119da90ac3c0e6a3f5da6f4549d1b8f883a59348c26adb836474168ac7d4004b465e437165ad16f93ef0c8c8b48f92

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\resources\app.asar

                                                                                                                    Filesize

                                                                                                                    94.4MB

                                                                                                                    MD5

                                                                                                                    0b16d630df5750d7b1c343de2ab88210

                                                                                                                    SHA1

                                                                                                                    3fb0e92015b8d2eb8c655a15da8496925ce4f436

                                                                                                                    SHA256

                                                                                                                    71093c823ee6d09fbcf6eeca602bdaa748d29c94f0b0840e0a83ffbc054ecccb

                                                                                                                    SHA512

                                                                                                                    f143bbaef517eeaf4a83883f7153109d3f58d1e1d9c85bea0daf718c0f5d03339a5d593ab25f44cc332f0dfad175224d27879547718e72e36e80ee446a416436

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\v8_context_snapshot.bin

                                                                                                                    Filesize

                                                                                                                    596KB

                                                                                                                    MD5

                                                                                                                    5d9b4473dd8705940bbb4a4036e395d0

                                                                                                                    SHA1

                                                                                                                    af35aa3374200dd2b9102f6767e53413e4e09e20

                                                                                                                    SHA256

                                                                                                                    ca2245da2a4aa7e4c9dcbf810c90048f73a9a96f6432f7895f3e6fe0c21e48f1

                                                                                                                    SHA512

                                                                                                                    bcc78b845a2aac96e46162c6a81dd1a914a6e8ed6d9753f648ae125958042a76ab49f1fefc8615891a1e007f0d0b63980517953ee088e29d46ba9d258f130192

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\vk_swiftshader.dll

                                                                                                                    Filesize

                                                                                                                    4.0MB

                                                                                                                    MD5

                                                                                                                    d73d7c4f53ee4da267b4b7da112559df

                                                                                                                    SHA1

                                                                                                                    5a382d7536acba7e16eff465b45c456942eba827

                                                                                                                    SHA256

                                                                                                                    2eedaab96cf45aab1a911c5c84d462a8bd5cca99cb3963cea822afcd35cfeba7

                                                                                                                    SHA512

                                                                                                                    e59b40d40fcfda90e6c2b2433f7b4871d71ebffb58a08f9cd9e79cc401f4b0360688a7453420822e254914f49d1bdf0aa1d01560e73d7548bac5f87cd9bf09ee

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\vk_swiftshader.dll

                                                                                                                    Filesize

                                                                                                                    4.0MB

                                                                                                                    MD5

                                                                                                                    d73d7c4f53ee4da267b4b7da112559df

                                                                                                                    SHA1

                                                                                                                    5a382d7536acba7e16eff465b45c456942eba827

                                                                                                                    SHA256

                                                                                                                    2eedaab96cf45aab1a911c5c84d462a8bd5cca99cb3963cea822afcd35cfeba7

                                                                                                                    SHA512

                                                                                                                    e59b40d40fcfda90e6c2b2433f7b4871d71ebffb58a08f9cd9e79cc401f4b0360688a7453420822e254914f49d1bdf0aa1d01560e73d7548bac5f87cd9bf09ee

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\vk_swiftshader_icd.json

                                                                                                                    Filesize

                                                                                                                    106B

                                                                                                                    MD5

                                                                                                                    8642dd3a87e2de6e991fae08458e302b

                                                                                                                    SHA1

                                                                                                                    9c06735c31cec00600fd763a92f8112d085bd12a

                                                                                                                    SHA256

                                                                                                                    32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                                                                                                                    SHA512

                                                                                                                    f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\vulkan-1.dll

                                                                                                                    Filesize

                                                                                                                    743KB

                                                                                                                    MD5

                                                                                                                    513c6c72ea899e9514357fd7a2f44e80

                                                                                                                    SHA1

                                                                                                                    00a4d01af0e8a46f87be6c98d103d43c0c417497

                                                                                                                    SHA256

                                                                                                                    a1f288f3c7646a5fa3ddcff22a151f447aea23316ab41e8e57a093be84199f2b

                                                                                                                    SHA512

                                                                                                                    93232c24f109235d038a60ece906932aa412d25e71ae0676630e7221c8c3eb3f23ea70dc8384751615dfafbe941d0751e79dfc9f3ece1f56111b91459fcc9f52

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Launcher\vulkan-1.dll

                                                                                                                    Filesize

                                                                                                                    743KB

                                                                                                                    MD5

                                                                                                                    513c6c72ea899e9514357fd7a2f44e80

                                                                                                                    SHA1

                                                                                                                    00a4d01af0e8a46f87be6c98d103d43c0c417497

                                                                                                                    SHA256

                                                                                                                    a1f288f3c7646a5fa3ddcff22a151f447aea23316ab41e8e57a093be84199f2b

                                                                                                                    SHA512

                                                                                                                    93232c24f109235d038a60ece906932aa412d25e71ae0676630e7221c8c3eb3f23ea70dc8384751615dfafbe941d0751e79dfc9f3ece1f56111b91459fcc9f52

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\VCRUNTIME140.dll

                                                                                                                    Filesize

                                                                                                                    81KB

                                                                                                                    MD5

                                                                                                                    f4b8a73c18e65eb5af950751eb71994a

                                                                                                                    SHA1

                                                                                                                    d8d379bf2cf7c844f12ba644254122f24535b1e3

                                                                                                                    SHA256

                                                                                                                    cdc006fc80c4437d009b8c72008a443a9ee5bce383d8b3dc16aeec0e081cfe32

                                                                                                                    SHA512

                                                                                                                    3cbf6b2b2af27f8a8fb19ecfd53eea3ce345c617fd3eb2e3e870146283492766e24fcfa3cca8719bd31f38dcf5860398250ba1096c73f2a08287c9c86818c879

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\ext\php_gd2.dll

                                                                                                                    Filesize

                                                                                                                    1.4MB

                                                                                                                    MD5

                                                                                                                    32f73f548fabee06b69150fc3aa5ca41

                                                                                                                    SHA1

                                                                                                                    2a91d17a66034c67d2f710948ff4c1250201950d

                                                                                                                    SHA256

                                                                                                                    c3e422de263dcf6b872267358f033c3f7a77cc48e52d92ef268e6bbc4e3e145f

                                                                                                                    SHA512

                                                                                                                    fef2f4bea6d1c9fc7840a26296ef00f11741a1cb7a6b6a7a31e801c0101c4494f616525e0a865fd5cdc9aca650fbc13c985d7d4c520c11e504622fa823389992

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\ext\php_gd2.dll

                                                                                                                    Filesize

                                                                                                                    1.4MB

                                                                                                                    MD5

                                                                                                                    32f73f548fabee06b69150fc3aa5ca41

                                                                                                                    SHA1

                                                                                                                    2a91d17a66034c67d2f710948ff4c1250201950d

                                                                                                                    SHA256

                                                                                                                    c3e422de263dcf6b872267358f033c3f7a77cc48e52d92ef268e6bbc4e3e145f

                                                                                                                    SHA512

                                                                                                                    fef2f4bea6d1c9fc7840a26296ef00f11741a1cb7a6b6a7a31e801c0101c4494f616525e0a865fd5cdc9aca650fbc13c985d7d4c520c11e504622fa823389992

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\ext\php_mbstring.dll

                                                                                                                    Filesize

                                                                                                                    1.3MB

                                                                                                                    MD5

                                                                                                                    8e5c06f5092137212712794bba08ffbd

                                                                                                                    SHA1

                                                                                                                    e2045ff2ed90278e2707dfcb0c34a7332954385c

                                                                                                                    SHA256

                                                                                                                    bf4ba4e7609903742dbdf13b4eb1b27a8eae97e7fe7fbb4c7449f5350b10776c

                                                                                                                    SHA512

                                                                                                                    672551c69e701f57efaa07bd47b0980b3644c4b619b02818d8c137946e0563f28164e33578c1d1c8010f2b3ec35e3bbe6dbdad5a73b0e0e3f177f5508af4b3a8

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\ext\php_mbstring.dll

                                                                                                                    Filesize

                                                                                                                    1.3MB

                                                                                                                    MD5

                                                                                                                    8e5c06f5092137212712794bba08ffbd

                                                                                                                    SHA1

                                                                                                                    e2045ff2ed90278e2707dfcb0c34a7332954385c

                                                                                                                    SHA256

                                                                                                                    bf4ba4e7609903742dbdf13b4eb1b27a8eae97e7fe7fbb4c7449f5350b10776c

                                                                                                                    SHA512

                                                                                                                    672551c69e701f57efaa07bd47b0980b3644c4b619b02818d8c137946e0563f28164e33578c1d1c8010f2b3ec35e3bbe6dbdad5a73b0e0e3f177f5508af4b3a8

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\ext\php_pdo_sqlite.dll

                                                                                                                    Filesize

                                                                                                                    23KB

                                                                                                                    MD5

                                                                                                                    ab7efb864c5d3489c51fc6fdf608331e

                                                                                                                    SHA1

                                                                                                                    595ce332f6139f20dbf8f69aeffb963e204ae817

                                                                                                                    SHA256

                                                                                                                    ab51da2842d422fe045bba2fbf902a8442e5d59e611449cb5fc0bc4079866702

                                                                                                                    SHA512

                                                                                                                    d90f823ea1ecf6c4777ea025ed192d37068583c8767b7418b1d9bb1213f748164f30a136178aa369e52fd80edcd84ec3cf0af81bdeba9019acf9b49762e8a1ec

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\ext\php_pdo_sqlite.dll

                                                                                                                    Filesize

                                                                                                                    23KB

                                                                                                                    MD5

                                                                                                                    ab7efb864c5d3489c51fc6fdf608331e

                                                                                                                    SHA1

                                                                                                                    595ce332f6139f20dbf8f69aeffb963e204ae817

                                                                                                                    SHA256

                                                                                                                    ab51da2842d422fe045bba2fbf902a8442e5d59e611449cb5fc0bc4079866702

                                                                                                                    SHA512

                                                                                                                    d90f823ea1ecf6c4777ea025ed192d37068583c8767b7418b1d9bb1213f748164f30a136178aa369e52fd80edcd84ec3cf0af81bdeba9019acf9b49762e8a1ec

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php.exe

                                                                                                                    Filesize

                                                                                                                    106KB

                                                                                                                    MD5

                                                                                                                    691ef9a2af1912816b1eace6fedde6c9

                                                                                                                    SHA1

                                                                                                                    a8d500265f2cc3e266f82a5860029bf7e68658de

                                                                                                                    SHA256

                                                                                                                    dc296258a9fc6432e899f8a861e4971978cd9429b644d933f04fab43b13ef1c5

                                                                                                                    SHA512

                                                                                                                    873a1bbc118fd1ffdad459d0f0bcb4945114fd806b4f0d7fa69bd65a647ee9aa294f743dd3da6f856ddda2122513aed296d08a933a54ffcb7f7299f1a710645b

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php.exe

                                                                                                                    Filesize

                                                                                                                    106KB

                                                                                                                    MD5

                                                                                                                    691ef9a2af1912816b1eace6fedde6c9

                                                                                                                    SHA1

                                                                                                                    a8d500265f2cc3e266f82a5860029bf7e68658de

                                                                                                                    SHA256

                                                                                                                    dc296258a9fc6432e899f8a861e4971978cd9429b644d933f04fab43b13ef1c5

                                                                                                                    SHA512

                                                                                                                    873a1bbc118fd1ffdad459d0f0bcb4945114fd806b4f0d7fa69bd65a647ee9aa294f743dd3da6f856ddda2122513aed296d08a933a54ffcb7f7299f1a710645b

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php.ini

                                                                                                                    Filesize

                                                                                                                    70KB

                                                                                                                    MD5

                                                                                                                    d8e428a197648e13ff777ba7e776f851

                                                                                                                    SHA1

                                                                                                                    cbccfd0cd54d5588d44101eca11719e16e96a0d2

                                                                                                                    SHA256

                                                                                                                    c507265a2c590de6d9e1b02cb90921f5be6a84334c68f864c5655563d3e87964

                                                                                                                    SHA512

                                                                                                                    8831551eb81816da8f1ba9080da64dfe6f14c64f74ebb9e66ee86aba91c8ba1847ea05865b9530081f8b74ed0c0e33d4db65ab30d3e75b3562fe63fcf91f9027

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php7ts.dll

                                                                                                                    Filesize

                                                                                                                    7.6MB

                                                                                                                    MD5

                                                                                                                    182e47f950b5672b036c4a06bcb490aa

                                                                                                                    SHA1

                                                                                                                    852a6cf1dee52bbb623b816bbae8b37f85373092

                                                                                                                    SHA256

                                                                                                                    6aa9985b3e738f4114d28a4ac64cf603b326584c90b6c39fb7103a8c93e0ee66

                                                                                                                    SHA512

                                                                                                                    f9c70153695a50ece8a3abc3ffb5a245fd96cc37313c89f9a451bd88cc4e58f4c68aa9fd5640ff1894ddd8d45cf3fa36f14f0d2ef93545a3911c690023b06f43

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\php7ts.dll

                                                                                                                    Filesize

                                                                                                                    7.6MB

                                                                                                                    MD5

                                                                                                                    182e47f950b5672b036c4a06bcb490aa

                                                                                                                    SHA1

                                                                                                                    852a6cf1dee52bbb623b816bbae8b37f85373092

                                                                                                                    SHA256

                                                                                                                    6aa9985b3e738f4114d28a4ac64cf603b326584c90b6c39fb7103a8c93e0ee66

                                                                                                                    SHA512

                                                                                                                    f9c70153695a50ece8a3abc3ffb5a245fd96cc37313c89f9a451bd88cc4e58f4c68aa9fd5640ff1894ddd8d45cf3fa36f14f0d2ef93545a3911c690023b06f43

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Legacy\vcruntime140.dll

                                                                                                                    Filesize

                                                                                                                    81KB

                                                                                                                    MD5

                                                                                                                    f4b8a73c18e65eb5af950751eb71994a

                                                                                                                    SHA1

                                                                                                                    d8d379bf2cf7c844f12ba644254122f24535b1e3

                                                                                                                    SHA256

                                                                                                                    cdc006fc80c4437d009b8c72008a443a9ee5bce383d8b3dc16aeec0e081cfe32

                                                                                                                    SHA512

                                                                                                                    3cbf6b2b2af27f8a8fb19ecfd53eea3ce345c617fd3eb2e3e870146283492766e24fcfa3cca8719bd31f38dcf5860398250ba1096c73f2a08287c9c86818c879

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Start Flashpoint.exe

                                                                                                                    Filesize

                                                                                                                    451KB

                                                                                                                    MD5

                                                                                                                    a475fc3811898ff183645ccd54d0cbf2

                                                                                                                    SHA1

                                                                                                                    605083864946b9f81ac5d30d2f95b885e00ae4ed

                                                                                                                    SHA256

                                                                                                                    fbe5f9512c3b4938f274967b3785e9f4d60e9e8f9a1853dcd6bba911a1eb6038

                                                                                                                    SHA512

                                                                                                                    89b51b45acabb2453eab78ea7bf39995dc24b4e23732596a7318a7f4b25fe374490f275be2897fd04ec55dc0980a646162be69ad68aeeef32ce725372b7da07f

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\Start Flashpoint.exe

                                                                                                                    Filesize

                                                                                                                    451KB

                                                                                                                    MD5

                                                                                                                    a475fc3811898ff183645ccd54d0cbf2

                                                                                                                    SHA1

                                                                                                                    605083864946b9f81ac5d30d2f95b885e00ae4ed

                                                                                                                    SHA256

                                                                                                                    fbe5f9512c3b4938f274967b3785e9f4d60e9e8f9a1853dcd6bba911a1eb6038

                                                                                                                    SHA512

                                                                                                                    89b51b45acabb2453eab78ea7bf39995dc24b4e23732596a7318a7f4b25fe374490f275be2897fd04ec55dc0980a646162be69ad68aeeef32ce725372b7da07f

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\extConfig.json

                                                                                                                    Filesize

                                                                                                                    3B

                                                                                                                    MD5

                                                                                                                    3d29a75fcf0ed7dfff86d3db8f92fc69

                                                                                                                    SHA1

                                                                                                                    dff8a1731f59ccad056b346102d1e1d014b843f3

                                                                                                                    SHA256

                                                                                                                    8eb95bcbc154530931e15fc418c8b1fe991095671409552099ea1aa596999ede

                                                                                                                    SHA512

                                                                                                                    b7a65febc18b7eb5b159100842eed0018f0b56694baf042e366a97b1d8fe9eeb238b6ced3fe1b27c659837564ca3605e1c733e4f4621e3e8584237a6880f47ef

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\preferences.json

                                                                                                                    Filesize

                                                                                                                    5KB

                                                                                                                    MD5

                                                                                                                    7b08afd4895c69930cebb327af996882

                                                                                                                    SHA1

                                                                                                                    308ac782786dc64e7973a70f21c83ffc6cbf758e

                                                                                                                    SHA256

                                                                                                                    d068b5ba46a1008908d909b238a453aee76366c9a5ee6930b9ecf2d010e70b19

                                                                                                                    SHA512

                                                                                                                    bf07eff76ae114f0301ed4e1f9056e34872a29a29161c0c4db8a233597124ac4d3a69ad61af059e0fd0b6306f88c1e461d1bfbe61671076bcfd85b70a59fd8a9

                                                                                                                  • C:\Users\Admin\Desktop\Flashpoint 11 Infinity\version.txt

                                                                                                                    Filesize

                                                                                                                    46B

                                                                                                                    MD5

                                                                                                                    86ab03e0b7f3ac4caee61a9d1f17b2aa

                                                                                                                    SHA1

                                                                                                                    5783b5dc3f5d7a1bb8c90b0cbe8d7ad40ed15404

                                                                                                                    SHA256

                                                                                                                    45c39a5d2c2386180a52968f33f851c79010ca1c7ff9540996a5f17bee52e9ff

                                                                                                                    SHA512

                                                                                                                    30e126d1c4fd4197c6a66c2d38328ca8a52291999733a8bf60ebbe7549b154ed04a2e3177120fbb10094c2a8d6d7ef1c3cdfa8dc760f0f228e6cebd6feee908c

                                                                                                                  • memory/3556-2023-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2028-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2025-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2027-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2048-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2047-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2046-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2045-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2044-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2074-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2043-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2073-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2042-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2072-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2071-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2041-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2040-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2039-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2070-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2069-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2038-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2037-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2068-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2067-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2066-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2065-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2064-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2036-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2063-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2062-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2035-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2061-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2034-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2060-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2033-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2032-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2059-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2031-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2026-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2058-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2029-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2057-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2056-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2055-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2054-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2049-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2053-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2050-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2016-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2017-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2018-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2019-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2020-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2021-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2022-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2052-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2024-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2051-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/3556-2030-0x0000000005A00000-0x0000000005C00000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    2.0MB

                                                                                                                  • memory/5112-2156-0x00000000687C0000-0x00000000688CB000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    1.0MB

                                                                                                                  • memory/5112-2161-0x0000000066600000-0x0000000066C34000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    6.2MB

                                                                                                                  • memory/5112-2157-0x0000000063C40000-0x0000000063C8D000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    308KB

                                                                                                                  • memory/5112-2162-0x0000000000410000-0x00000000010A4000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    12.6MB

                                                                                                                  • memory/5112-2158-0x00000000710C0000-0x00000000711DF000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    1.1MB

                                                                                                                  • memory/5112-2160-0x00000000690C0000-0x00000000691AF000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    956KB

                                                                                                                  • memory/5112-2159-0x000000006D240000-0x000000006D26D000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    180KB

                                                                                                                  • memory/5164-226-0x0000000000410000-0x00000000010A4000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    12.6MB

                                                                                                                  • memory/5164-223-0x00000000710C0000-0x00000000711DF000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    1.1MB

                                                                                                                  • memory/5164-219-0x000000006D240000-0x000000006D26D000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    180KB

                                                                                                                  • memory/5164-214-0x0000000001D20000-0x0000000001D4C000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    176KB

                                                                                                                  • memory/5164-218-0x0000000063C40000-0x0000000063C8D000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    308KB

                                                                                                                  • memory/5164-225-0x00000000687C0000-0x00000000688CB000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    1.0MB

                                                                                                                  • memory/5164-211-0x0000000001C80000-0x0000000001D1D000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    628KB

                                                                                                                  • memory/5164-221-0x0000000066600000-0x0000000066C34000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    6.2MB

                                                                                                                  • memory/5164-222-0x0000000000410000-0x00000000010A4000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    12.6MB

                                                                                                                  • memory/5164-220-0x00000000690C0000-0x00000000691AF000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    956KB

                                                                                                                  • memory/5164-224-0x0000000004490000-0x0000000006490000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    32.0MB

                                                                                                                  • memory/5164-227-0x0000000004490000-0x0000000006490000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    32.0MB

                                                                                                                  • memory/5164-216-0x00000000687C0000-0x00000000688CB000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    1.0MB

                                                                                                                  • memory/5164-212-0x0000000001640000-0x000000000168B000-memory.dmp

                                                                                                                    Filesize

                                                                                                                    300KB