Analysis

  • max time kernel
    153s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2024, 12:11

General

  • Target

    86db92b4b09d64de6f0eb86d61be4f7c8059238595572cc5f78adc172aca10f2.exe

  • Size

    80.0MB

  • MD5

    fdcf3751d1ae810362b28cae5574b999

  • SHA1

    aed288df4a6363445e89e93ff01497e253c13a4a

  • SHA256

    86db92b4b09d64de6f0eb86d61be4f7c8059238595572cc5f78adc172aca10f2

  • SHA512

    838906b17268628eccb66f29e2f5ad6f6a1af5ac9c34e690800a6f21816d543e860274ce0fbd9ef01ebc873bf19174668e143d2c6872ed48cf170c8bce9c96f2

  • SSDEEP

    1572864:SbOtYWWsd13kVErJUVH4G9/Yrg79hjUINEi74J091JoOSQxbI/:M4Yns38E1C9/+chKe4J0/JoO9b

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 23 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\86db92b4b09d64de6f0eb86d61be4f7c8059238595572cc5f78adc172aca10f2.exe
    "C:\Users\Admin\AppData\Local\Temp\86db92b4b09d64de6f0eb86d61be4f7c8059238595572cc5f78adc172aca10f2.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1724
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2708
      • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
        "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --squirrel-install 0.0.36
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:1080
        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
          "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=gpu-process --field-trial-handle=1148,8621279839074168328,14644828834025910672,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1156 /prefetch:2
          4⤵
          • Executes dropped EXE
          PID:2752
        • C:\Users\Admin\AppData\Local\flauncher\Update.exe
          C:\Users\Admin\AppData\Local\flauncher\Update.exe --createShortcut=FLauncher.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2908
      • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
        "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --squirrel-firstrun
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:2384
        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
          "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=gpu-process --field-trial-handle=988,2860308535148384796,6013403198295936707,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=996 /prefetch:2
          4⤵
          • Executes dropped EXE
          PID:1612
        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
          "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --app-user-model-id=com.squirrel.flauncher.FLauncher --app-path="C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\resources\app.asar" --no-sandbox --no-zygote --field-trial-handle=988,2860308535148384796,6013403198295936707,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1612 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:1908
        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
          "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=988,2860308535148384796,6013403198295936707,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --mojo-platform-channel-handle=1420 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:1928
        • C:\Users\Admin\AppData\Local\flauncher\Update.exe
          C:\Users\Admin\AppData\Local\flauncher\Update.exe --checkForUpdate https://dl.flauncher.ru/dist/
          4⤵
          • Executes dropped EXE
          PID:396
        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
          "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --app-user-model-id=com.squirrel.flauncher.FLauncher --app-path="C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\resources\app.asar" --no-sandbox --no-zygote --field-trial-handle=988,2860308535148384796,6013403198295936707,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2008 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:2636

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES

          Filesize

          77B

          MD5

          4fb4fff34d87fdc0a11541ead308dabc

          SHA1

          8b01d8f1036070984c552c6661a96e2b9cbd2eab

          SHA256

          2d4ccc8de23df20bbe60b53228a6f450f1d7e860436097bf5c2e51b9972eb507

          SHA512

          35e32c74ff9fbdf72f191162fc35f75d2a7741700533b40f52f53a562660125b8ce5506f4c18177289be0ff86c0d3c1d39687bf7bbc9c69c3ea858c05f5e097b

        • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

          Filesize

          384KB

          MD5

          9a775d94ac7d66b24f59a770b857cfdb

          SHA1

          41b6ec817888999e19c0d69249057cf8edcd1d12

          SHA256

          f56c9025caf8d501ab37e902efdbe6e93be9ef051dd6065302e451bf2bd3e9af

          SHA512

          6f48499ec776fdf57756a061aa33810f4e28522aaa43f4e26d1bafb61ee3fa3e13bb013bc77d9ee8a25c11a03907e54493e8925127da8bc0004c431eca97f569

        • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

          Filesize

          394KB

          MD5

          4c5afc3c683604348d272c6b6992a748

          SHA1

          c6a5eca979645d52fa1730e2867684517a629642

          SHA256

          0939c270b6ced73e4c3501000f499e084116ed9a7047eeced8039dde1d26af99

          SHA512

          a96565d4d1549c507c98fe4c4175006e8e440e3b42679dcdedc3c9df7c6badcb75c83ee6b6be7a26d888949dc58cfed279288186ff28f11bb2a5b71aaf114660

        • C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif

          Filesize

          64KB

          MD5

          451a344fc6ed7a64a0055eb55734a82b

          SHA1

          30b8058ab50edd9b2cbef2779a726f10d9ef0035

          SHA256

          53347f90a62d891362d56c0ed41b537754041b353417f7844a1268e7fb167a7c

          SHA512

          96db2d96a77f4a5ce93b68705d838fd7a850bcbdbcf90260d47b649c7405ab18fee69d5d6f13a4a8752f6f3a9d17b55b7e7f011d7f2501359936d73e9867f45c

        • C:\Users\Admin\AppData\Local\SquirrelTemp\flauncher-0.0.36-full.nupkg

          Filesize

          382KB

          MD5

          64c54337fecd58a2096c41299291205f

          SHA1

          b3b40a1dfcc7602e596c54f61f85a925b9d95a47

          SHA256

          5badf9cfcd59e20c09c4ba93b26dc3c96462c4db75e2cd9a8f0674854167bab0

          SHA512

          0b5174b39079da48d29e3840a59b28cfc53b25496243a387faf64ed936e1e8f71bf8856dcdcb31046f8797fc00577cc5fc339155a1670535bc0da47a6b6d4350

        • C:\Users\Admin\AppData\Local\flauncher\FLauncher.exe

          Filesize

          63KB

          MD5

          8889e5b6891e0fac4e627d09b88bf875

          SHA1

          75bca16d343c00f119c65eaa98b897345178b7cd

          SHA256

          575ff88161d67c6da679e0d3acd2f18d0e0497888389a8567699d13a990e79d5

          SHA512

          4e7073fa54f19f8fe914f1c7dab4862da216fb34c2527f47cfd81fabc7cfa0b363253ac0d383e729976fc79082a6faa41848f3aff3d06a0d61990edaac3ce5f4

        • C:\Users\Admin\AppData\Local\flauncher\SquirrelSetup.log

          Filesize

          1KB

          MD5

          43bc0882ae8897f28676c99aa51ed362

          SHA1

          d88b13b8c0c3becb9a385fcb6357357e3cbc4c39

          SHA256

          2330a1b53e5f327e9f3b8c238b40c8bef0f7892ea6b6658f04067ad385015114

          SHA512

          7c8c9e9e805cfa4a46d5d6b8fd057e0340bb38364ac55385fdf072fa2b93f0db4f9ade2f425731d206c4f17a496a8cb2dcaece7964208ede4dc32aad57f2e15e

        • C:\Users\Admin\AppData\Local\flauncher\Update.exe

          Filesize

          11KB

          MD5

          94e7b4d68c323d09c8af1782ff2fcaf0

          SHA1

          d16f059e3d7b70e3ce594bdc50435586216a2fce

          SHA256

          4d87c92f378f741a36d8e0796debfa47d5fd753bfcb8e054f4e3a87dc6a1f2ac

          SHA512

          b8eaac08aa5050430f533aaf55d1ce4f9c0e400b786fa3eba0a7d03d089f81a8f8184df39fbc8800b7e00c16e8cf03676db7d53df4aec7526dc0854f48f0d331

        • C:\Users\Admin\AppData\Local\flauncher\Update.exe

          Filesize

          40KB

          MD5

          4f0f9a7089a78a015fb41c337dd2f04b

          SHA1

          968b7003a78c7e34268183010e8557274a81332c

          SHA256

          a157c28921fa94cfcc34f7fbc2231a22407d315eab645c732008fdf5a5b7e03b

          SHA512

          e3827e0ac3927d93bb431ec7360ec831a8778d5b472efd03c92bf6035e4d29b0f4eb47d46128afccd31906dbd38741937a938087785f5de4675dc20c44719819

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          313KB

          MD5

          6d576d8acda5cdcc2b4c996b364a593e

          SHA1

          09052e33b9964595dd323a77c1ef0aea134672bb

          SHA256

          dba18d1e528fb84c01c7438ae3bdac45c4334eb34b6cc1bf87a681a965243957

          SHA512

          4633675aaf3181e05e59b1d6b0dce3e1818fa61ef45a30c7cf050480568be7f4101f08df6feb93d9dcde76dbbeffc48110f0cd14209e071708eca805dfeaa3ce

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          254KB

          MD5

          18b5efd8ab9fad05d6df9b89b6df7c90

          SHA1

          972525fa7ab33a8bf4aaac0237a983897073d233

          SHA256

          f70f2c08f08c3ca57572105332874a0c3e26c9e103838d9afd2792e91922ecbf

          SHA512

          a5929c26c924d1231578786cb708a3ea24e86e3cdaf58f95c75aa8b9d671be28cb8e9b3e0a9e69f99d45f19970c7e1154d85108f2eb5934e15aec8282e4e47dd

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          293KB

          MD5

          6b7477af67a2f1a7901cb6fcb515b714

          SHA1

          d73dd85ae9bce073587df07bdab8bd633906a971

          SHA256

          02d53ae33df0eaf7d8cf79b067689dfdccf0779de68d45eac00951ba110726f4

          SHA512

          d21f15fb3104ac2aac0c13572687f0a4330da7df88f73de4b230af54b9a3e6ad0a60dd25a60f7fa2f2308e4205ba177e1a900dcae4e9aa4ace8f638e965025b9

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          76KB

          MD5

          480edd87e889392eaaf78c64b661ef4c

          SHA1

          f982105f900e9912669de189a842bf0284c339b5

          SHA256

          7ab908f2730e19923510a878badbb6eef7d3e2158a2ed725891786b9edc1cc0b

          SHA512

          7341eb5cc120bfe637540f76a2c87a0be66c91aace14b5ce1b17505c3ce7298bce5855f929e2b67bb434d447472de920072d8718c82df0b7bd9439f82ee2ec43

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          11KB

          MD5

          5de82118c3f8c1aae3a59d028559ce30

          SHA1

          9c49957b7b3f9d4f2156243a40242933a14ed9e1

          SHA256

          3405caaafd838d4271471ac7eacd9b794d4b17ecdf49275a0b5e613b2d375ef9

          SHA512

          3c053a4d49e4e6ab94fc5a8bf7deb0537864c4064fbf8fc2b11e9ac8265d31fc521dc1469d46e27b8a4fc8355a13ea8fe6066d91a1de078a780c1ec1a3e531cf

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          44KB

          MD5

          f0408cbc15efe7a8b3fb0841a9ea3348

          SHA1

          aa06037c385c5bfa8a005419d2b2737d54c31eb2

          SHA256

          d0f459dca21b2af941a684f39ea43683b7cd2eec37b62a956e61afb7f9a85207

          SHA512

          7ca80e658defd06ba93d155a9e13b72601a3a75776dba2e2d8d0a4cddbad5d323e5e659e9cc41414308d9b7cd3c127cd63997376a502035cac419e2a23204249

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          5KB

          MD5

          b1433e637009a603983457d37f28dd6f

          SHA1

          b4eedee158a0cd3c8cc0e23363da9af96feef092

          SHA256

          26a32d0ab19846bd86360229a4a02969de75fde513425341683646a3eb2fd310

          SHA512

          766e2858093186c61c01d712e7d1d6b4350eb135f279baff808b92cea120197b59735e5f44fb03328cf56204b0039e5fff1b4215b3801a832196a8a5232b6f29

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          30KB

          MD5

          145963834eb8855cfe478b3d8db4f5fa

          SHA1

          c13cb4fd8377821e563b23b2b71f1ef0626da6bb

          SHA256

          a20252ba7c4ca6e07f4287bf8f28ada7c4e591de06ce096b351b92def38a6a25

          SHA512

          aac1336fd757963a74f51fac0a93aadbd284150be328cb0a989b9602928f98905e107f8644d0b17c503329da800b692d686f76e948204c3fecf03a80df90297d

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          86KB

          MD5

          cadeb5243e503bb464049e3c127b75e0

          SHA1

          28d300adb6ab7129f52e6b00ca054a0b53a2c512

          SHA256

          e814f90ceae5c00abffbf702f82d435385ddeecc0fc381dbbe7c5bb051cf0d99

          SHA512

          29916e6bb2578d6306f2c177be40b8dd10af24408bdc10b4711ca14b2c70182c567e1190d98220891e9a0ce53c7808314752bee2d7dbf2f045eb9ef8e6f2294e

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\Update.exe

          Filesize

          232KB

          MD5

          3d096a81ac2a34ef8b6b8dcb0cc4300c

          SHA1

          e9c34b66407eb68b630930fd3269e910bd73492a

          SHA256

          e041e68cdcbbea98c1ff20370541d6b67ca1d4a24e52415066a549654047c234

          SHA512

          9fcda7b0ceddf079e1490481d25291e81b48c26e251d6f97a34809dcafcaa82de79282c0d39a0c0a34e90bfa1386c3a167128eba7e2a7f1adeab5eba36797290

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\chrome_100_percent.pak

          Filesize

          138KB

          MD5

          0fd0a948532d8c353c7227ae69ed7800

          SHA1

          c6679bfb70a212b6bc570cbdf3685946f8f9464c

          SHA256

          69a3916ed3a28cd5467b32474a3da1c639d059abbe78525a3466aa8b24c722bf

          SHA512

          0ee0d16ed2afd7ebd405dbe372c58fd3a38bb2074abc384f2c534545e62dfe26986b16df1266c5807a373e296fe810554c480b5175218192ffacd6942e3e2b27

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\chrome_200_percent.pak

          Filesize

          202KB

          MD5

          1014a2ee8ee705c5a1a56cda9a8e72ee

          SHA1

          5492561fb293955f30e95a5f3413a14bca512c30

          SHA256

          ed8afe63f5fc494fd00727e665f7f281600b09b4f4690fa15053a252754e9d57

          SHA512

          ac414855c2c1d6f17a898418a76cce49ad025d24c90c30e71ad966e0fd6b7286acf456e9f5a6636fd16368bc1a0e8b90031e9df439b3c7cd5e1e18b24a32c508

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\ffmpeg.dll

          Filesize

          399KB

          MD5

          7622185b706d40e0e18b304772f4d5fd

          SHA1

          2e4b3e2a5dc91d34060798483e3cce4b414d659c

          SHA256

          7016339b6512dc98062abb3efa524eaedc48658815bec7d243740e5ac16d4f77

          SHA512

          9d87fc9dec97710d235a8a70c87e1d2ab52bf71fc36f6f382155d36a143bb8949fbb6a34f4f7f071dad3684293faa8e34edccb6244f4f93f41ef4a0d05be4f18

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\icudtl.dat

          Filesize

          172KB

          MD5

          b8ed1cd7460d1bf078b987ba94b6ad57

          SHA1

          a69eb82a1d2122a0f51a85e87306ffb0f444a3a6

          SHA256

          3657ada13dbfa0b781c76100165217dd4632c6306cfed115d062890a36b90d7b

          SHA512

          81f46411f5aef101a990d2b336ac289a527158ef4cc8c6888895a30fdd94b155ffe2401fda8368305c3138bbb1bff83adf0acd2f82bf279f20c98fd226c7befe

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\locales\en-US.pak

          Filesize

          76KB

          MD5

          d6ba289730f07041e20251771911140c

          SHA1

          923b70e3475bb7e213657c9edb678c468787419d

          SHA256

          17ba6ed9ec03b8b2686fadd79264157939f27f545d03e4456bc891921667087f

          SHA512

          96a5ff6a05d7306cb0e8620948bcb2f2a16378c3af54f5cf277d36cd42d63dba6226f3feabb821ff1f325c914a3b57dc776249127802a4509a006883257de3fb

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\resources.pak

          Filesize

          64KB

          MD5

          655d0c7e846066a6ab815939a786fa27

          SHA1

          121262957875a06c4564d7012591b59dfe82a144

          SHA256

          478cf3dc777e7b966cc9cf7a6da09f6ce0b85a45b765133d81da510edfc00683

          SHA512

          148b74d4f4d502234f1ab8c8b4caebbd3bb0fe4438aab3e6940b7786deb3afc5403038485dbdc3d889b92a01d4cfad92516b6f2e4e2fb2208a7f56d5ea182798

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\resources\app.asar

          Filesize

          26KB

          MD5

          ee72979941c15ac95e6eb1cfa11e8619

          SHA1

          a58a29a2de60868e2190b45561e253712f653b82

          SHA256

          e5db41cf86c6d95e4402e2d9182a21828eedf3c19f793dcd64a88e9fce03d124

          SHA512

          b058d37e3448f9ce71c33e967e5616035b303d9350498a31f8b5783cfc50af20c6b44c821729c1c14ae46ec115f5dd458b3154c35277e5bd432f24182729c721

        • C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\v8_context_snapshot.bin

          Filesize

          77KB

          MD5

          27a5222454a9f9fad3f45588beaad137

          SHA1

          f595df4a5a2b65f7e3e7aa7a99dbc16b59ab4e05

          SHA256

          6466a85812156699f5c1cb20c8731e5a6a7b9fa112b7f5c542355cca0a5df6b4

          SHA512

          4492587cffb0d5f20eea9548994eafb1db23090283e4ba661d215355799493020f6c4b9553ca0606164c3d19678baaf0bd475ca21dfe705347704a7000fc172d

        • C:\Users\Admin\AppData\Local\flauncher\packages\RELEASES

          Filesize

          80B

          MD5

          8233830c0f0d87d96ded045684d738dd

          SHA1

          9b1f48e66eac72a36fc58053b09e59a993ecc94a

          SHA256

          52a313691f353d038567596d06e7a960cf164bbd7bafcd86c52399c5255c111c

          SHA512

          74b5bdb95b7eab4597002cf82d28f69b6050111cbb0f3007d5aae26198b47d197a5b316f65db95572afdb1cab0c3b79c4d31af5d4a471f6ca98d64adb4a6ec41

        • C:\Users\Admin\AppData\Local\flauncher\packages\flauncher-0.0.36-full.nupkg

          Filesize

          109KB

          MD5

          f6a2eddab810c14d9d947663ca2352ac

          SHA1

          99b73368bccbe14a5e7b3c0d736d1640b9e109a6

          SHA256

          314dab640f7870046bf3ce00f360486458baa77ab8ab08332cc61c43c621bae0

          SHA512

          313bc475b40b4f46a62f8cdf106f16ee45ebd4972d1bab016b7802275b333362b6bc24a29e0d98a1fa4038c705b12ce36ceb4f792e0ce6b91b8d81df2f009300

        • C:\Users\Admin\AppData\Local\flauncher\packages\flauncher-0.0.36-full.nupkg

          Filesize

          905KB

          MD5

          e3986dd3438dc585858bbd3916aca13a

          SHA1

          a62148eddb424e5df5de4acc94697ba627a03cd4

          SHA256

          01caf7c5141913d578fc99a218f1b591e57878478dded27d419ffcffb01c2b68

          SHA512

          24e999302e68ba28153291a9a782a8c435a49dbc7f56801296a00c61f6fc11654776fa0640aa048a8decd0725e18a67f9255740c028c9c44a8dab3e6f557c0fc

        • C:\Users\Admin\AppData\Local\flauncher\update.exe

          Filesize

          82KB

          MD5

          a80610b05821451ac135859547cc3869

          SHA1

          c598e7c13f74bfe8bec6e54aaba4279f15a0d992

          SHA256

          8ca9fa4f17495c06d79c1c8edacd90581f4ec374ad6f1e173fae66a9ce687148

          SHA512

          368fe96adb6e6eaa616e244e7c739bcea02c24a3a1b396465fb2dc27db217b7271f9b53b174e49a9d9ad35da930a7f68a7e4d43ddb81311bd8e8c70b94fd6845

        • C:\Users\Admin\AppData\Roaming\4e81ce7f-d44d-4a1f-ae4a-b355c09462a2.tmp

          Filesize

          199B

          MD5

          2c1e156378d5c9932988eb5706a6759b

          SHA1

          77cb77087ec580f8dbcf02afab8c7002dab2df80

          SHA256

          bd4b1458a17e72465176635c119fbe93fad65471b25ac1a01a014c3fb5b4420f

          SHA512

          b71dcd442f6a45e3d35d21a4a36e50f8d483d4cdded772b1fad68936c4f36488de7483c44e17eef5eb6337d0cf273070a5d25473e12c237195047fd0badb962b

        • C:\Users\Admin\AppData\Roaming\FLauncher\FontLookupTableCache\font_unique_name_table.pb

          Filesize

          59KB

          MD5

          90c294def3d62746d9be356ac5fb5297

          SHA1

          a327324dc6d8a25dd49c9d896b40e469b07af076

          SHA256

          bf0c07c1cb0996093272340bfe071d2b46d3b864ffa57148c0774947fb0b25cd

          SHA512

          c09c8d1b1a9da890a1b9a92d3a22a292064274548d2025119f120b3d32bbcf72ac07eb986f293bbf038979fff00068c0c264d97b4e7987e4d33a1590789a2762

        • C:\Users\Admin\AppData\Roaming\FLauncher\Local State

          Filesize

          389B

          MD5

          9fecb3ff3e3ce17664f8f97eca7c7d07

          SHA1

          156dea8ac79fb8a7aee1f02280c6fdd83afe54ed

          SHA256

          5214dd13d6294cb9a319552ded2323abf413495985ed3209bd071cc2157ea0e2

          SHA512

          a8c842411c78171be9707f658168483d1e0b971e297773f88cda1da06804c3a78cdf2dab69804906e314add2588c58e0ecd8ce41a6fe6a8f5f5274dffd863835

        • C:\Users\Admin\AppData\Roaming\FLauncher\Session Storage\CURRENT

          Filesize

          16B

          MD5

          46295cac801e5d4857d09837238a6394

          SHA1

          44e0fa1b517dbf802b18faf0785eeea6ac51594b

          SHA256

          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

          SHA512

          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

        • \Users\Admin\AppData\Local\SquirrelTemp\Update.exe

          Filesize

          555KB

          MD5

          56220be2c0ca27c99a413b1a1461d52d

          SHA1

          e35b20a36961756e729ac8ad882cc8b28f13aacb

          SHA256

          400a8fcb1a262502109bcba7255d0d9acc9069095bc4adaaa37a985c0a757620

          SHA512

          9ba262d210706dd2c177f9a5b0743c375ff47b551d2ed49aae11f7c70e4f5682af205397237c0c1671bccdeb8fdb24f87a2cb1b6a6857fdf43af42634e122f1c

        • \Users\Admin\AppData\Local\flauncher\FLauncher.exe

          Filesize

          32KB

          MD5

          37066173db5587c0f47420429907a3ee

          SHA1

          5e0ac0d96666f601196d59d67b6c9c3bd37a7dd1

          SHA256

          09a992c7031fcd22aadea8ed11d01d71ff2d524d53da600ae02db397dccc5403

          SHA512

          8168376fb9f4fc0cbbb3d322b8919f917b36d40cb440b0f1c77aa403bb5602ca3d3d3261e4e74f9807161fb7657aa8413abccb19ab8996a204c20a70452acd4f

        • \Users\Admin\AppData\Local\flauncher\FLauncher.exe

          Filesize

          58KB

          MD5

          554774d601542a50fd4fd7c05f99d2ee

          SHA1

          85e7532e6c67ea5cae808764326b01c466443f0e

          SHA256

          f85cf6c60af91b628cc71ed5616261fbeaef8e597596d46ef15ab801d5f513c7

          SHA512

          c0f6df06c30c03822323b4ab19c410fd67569035f1bba327565d72d3bad5f672e0a92ff32073dc607a292ec67fc9eedc43c616a971f59fc2eca6da6b2ccbb1e8

        • \Users\Admin\AppData\Local\flauncher\Update.exe

          Filesize

          196KB

          MD5

          cf9d494f0637aaeb5f634a7de13e0372

          SHA1

          b8177f3de61c8e954717729d6e645c9b08bacad3

          SHA256

          4710ba0bdd9a084b502e1194ffccf0bdaecdb94d18fc71c4bf7abf1bf77a7092

          SHA512

          61250c1338e1d53f278d7108340d0d63862c3346a3e6855ed613cd46ed386170b13b17ca1bec60fe65f524c4f382d901fd8d8dab950249469aeed9dc5aa3c9b4

        • \Users\Admin\AppData\Local\flauncher\Update.exe

          Filesize

          22KB

          MD5

          c2916f5bce362b46c1df2faaf3be5d8a

          SHA1

          7a998b9103bc44cd71e1f73f54764fb9544ec329

          SHA256

          9c5cd54b4dab99d2cd529fe00e2255223b5ba4cb02e895ff01188c16a5049ac5

          SHA512

          675c095a33b99d9ed12f1ba546d484689090b7975e3333861967d3fdd0e2f019a4755dc1032a6fff2354bc1329913829fea3998ac6daab382fd3c6f2be70fcc4

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          322KB

          MD5

          44dadde99061c8b46af646d5880b5929

          SHA1

          91e33c8c9bd8e09a26a0088ac54aefb99bc7bc30

          SHA256

          13ecd87e4c3a6dacd2e6b3228db79bf8d93e829de45f1d17c240c76bdc2fa1f2

          SHA512

          b43ff35021737070169c5502c0df9415bc385fb193a0c5391d60fdb933968cac563b9f0dca68f7af1fa71b028d49406518cf15ad1bb4f93b9a55b408955279fa

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          317KB

          MD5

          c88cce02f92986d2c49222a315e95932

          SHA1

          bb4ad8cf6f739839d40038b08b5a24ee8f192b7d

          SHA256

          8248f7f2a1e537d3dda1c584865a9bdae551b6450c0aa843df703d5742d1b88c

          SHA512

          c903be2dda52092df44b2e827ab50e8adecd7852dae3b4ff22f41b7b6e4fd5feb8f19c6073795b57887edb4e6d876abfbb64d15b16c31bbc0dc556ccca0a2611

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          280KB

          MD5

          00a7081e14664f4243cd3bbb385842c3

          SHA1

          6bf3b5f203b12baff929e6715067be5ca5b1f0f4

          SHA256

          d63892fe84885dee37d4b6be7ab222ebff38984f5d48e08a854d5c698baaf47b

          SHA512

          9b3cddb80d94835867429a7f1858dc1c0f5fe7a6301d97a7c9ae9201b1fea57f521d100aca5d108de2e6e88444a6cf8926bb81e966e7446d3f23de853934c179

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          61KB

          MD5

          ecaddc54e5034f4c0ea62a073041636e

          SHA1

          15437716d5f519c160265b5569e3d353960435f2

          SHA256

          4c63fed9ef8643ffb7492153f0c888bdf983f87666283c0fa5207a0fee20548f

          SHA512

          a74ba5491d284e09a2eb232ec1e884c19834f1559395ef3ac401e4cf8eb11f33eda34d84edd3226f7fee7fae094df5dff89a736fb4a6429b10993d00786d4555

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          130KB

          MD5

          ba778d6cf670bcfee3a7d6c1c51dbdd9

          SHA1

          03cddf282c9fb00f327c703a41f87102f6bea124

          SHA256

          e6f4b79ba68a2ee969e633d1333e8ec3e70be0f8aefc01105820b0d03fad4bf8

          SHA512

          81d4d15d5aa550fb1e8f8aa57e8a3c50f9f8bf68d13867cd21d49357a977b8d65f74b166f926f785a52c47e6e5792987f3b6e88c24e1aaad529de1d1a30ba4ca

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          99KB

          MD5

          739d7639c235a5b937a15ddb00a8b2ce

          SHA1

          19f7c5e4bd6f2610eb2fc6feb02411ac24dae56c

          SHA256

          e5c3e69027c9c6224e7e2e4fc42d69597552382168968317eeef7cfcf1dd1bd6

          SHA512

          b4fdc57429fca34710a3cf6702d486192ad4798558c0aa93405bb1a3e95b79358c0146bd3a1f62f4dc249f9627967f6b62cc4c43330461a45507d1bc452a0895

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          57KB

          MD5

          a9a87a82f484d4d295aeb0f59ace43f1

          SHA1

          a8f8e2671a0832f8371e01212e3f8d9bdcf0590d

          SHA256

          a3346e2be90cacff23e5dccf6fb3b889ff0ca4604c4c48d407cb125d6e24a6fc

          SHA512

          cd945c8bf5eeabe2a062ec9b0414cb385b9a7d1188aabd478aaf5ebb578a211af82bc261221d3143752462b5e70b860400d20ab3308c0793b543abece53d355c

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          23KB

          MD5

          7de7f7a58811023e68fac723dac35e0c

          SHA1

          9cf4ebdabf908c49fedf2e4f8a9e565644882660

          SHA256

          81594447cdca9c65a4fc97a5bf77af92f2cb11d02af85e8cf7bbfd0a901b6daf

          SHA512

          3a62c74e1e835c24315bad798348ded528392399794a4d32ce2c4ad13ea3e84a6296a78cb3f70b6af71db7a453490f7c75c4ca1cd735cf498411ff248f10520a

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          22KB

          MD5

          2f7c6d5545dc6c478951b7f155df9dca

          SHA1

          f3aa82dfa3e31792030b191cad98e3d06ee0ae24

          SHA256

          58be750ee3c963293e0c19f8c809700589ea6dd15baf699258c13f29c6b31eee

          SHA512

          b81d61731e287528595bd46c7e9bab612e557608afe9aeceb7200d9539114a89a8e2fec3fdadbb8b647c45eec650f40cc757c6faf08cbfe04f500b97c9ce149e

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          48KB

          MD5

          4bd659a4b61e8ad461a80dcad48f8a78

          SHA1

          f3ec374735d591c0de37ed52062938658d14b91e

          SHA256

          ae97554800d9dbf486e7fa365eb8cf10a0af7d8389183f878202d32fd86b35da

          SHA512

          0b06c262aa48a0ab73606ff6981df4c7af6a28b9b7b9b6647a19066f3da9903d601bf18c809077f4a9fe1f689c6e862e3263109c973d55fbb826cc1ebbaa321d

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe

          Filesize

          445KB

          MD5

          028d084c3da90e793d1f5fc3f8b0c388

          SHA1

          f26ca1156dd1125d2b08012840f6c669aa0f6095

          SHA256

          1a92e8216ded1cf92a30b597c5f782d085019eb73df6be8170f698a7dda792fb

          SHA512

          5ac9b30cadd101b525646db75a13e671ee05894e3c71983bd53b013284c995ab59f53bad582c3fd6dec1eb73858e85c1c16211bd5c23c3d70383ec5defcc25ee

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\Update.exe

          Filesize

          335KB

          MD5

          8e41dd28ce215f0b13789a71bf5fee51

          SHA1

          a14c637b494c75f33ecfb2dfd5c299a65aa3ce65

          SHA256

          ce198259251bb8018e7ddd64f82f957be2520ea9e10bcb6104ecf0779a2d22a5

          SHA512

          c6dec640a0d821989f213e91ce90036e4259ca449919ccd46916ed5366c39304dfe02ffa6484a8338e3e8a336d956329f79123302c82b193d51a3ab6bd5f2220

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\Update.exe

          Filesize

          386KB

          MD5

          61e5c89a3b9c82300c73b03ed4f687f3

          SHA1

          c15988e4dfe5372a33ea31101b6bba267ea762e0

          SHA256

          e90b5c8546c6dea976716f2398a207403a6db145a4287fbdfb3468e9b59caa44

          SHA512

          2ae2ee5157b95e586288430b24f90f02b883e5e2fd989b0204ce3c7effbd35eefefbd66319c45ed48f9de00d62e118c2dacd8a302e3f78fde0afd7e5927ec6e5

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\ffmpeg.dll

          Filesize

          266KB

          MD5

          68b910b063e9546797f1e75246e24a41

          SHA1

          95c9dea84dfc6bff53dd24be2730d4fb75155658

          SHA256

          bdce05e1f2364b73bd47e116d86cdd75acb9fe4698f26ba99faf01aef0605306

          SHA512

          8df846c7cacfbacce8e47d9d040513d3e110a8d50623c3120a8001ef632601860c467b70880aa1622cc7605b831f2720e72dd91c5870a00459ff923b68ed309c

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\ffmpeg.dll

          Filesize

          57KB

          MD5

          13c83cea1d77166291cebfaf10d5b009

          SHA1

          77bf6fe25856ccb6c0afefa541192f471b7c0613

          SHA256

          00cc42b498adfd2d56c14b267cd760108c2c750336e6668cbad47fd45c0dbe41

          SHA512

          32ce9b8437dcb5649542b452d7d18c73888fa9d2bfaa0f510569b1b114e04d3867693569f76941ddf14ac858cf5de543d73f3e4a0968b1f85dca79f29a7eff58

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\ffmpeg.dll

          Filesize

          13KB

          MD5

          efb78aec5a396829fb98b2f4c04d84ae

          SHA1

          efa03eb68263d2b22c977a4455f173d834aaf4be

          SHA256

          7c780d905ec3b6955cb849af40107943b8ed2f60f255bf7b545eaeb3e0bc0b3f

          SHA512

          3c9b0be844c50d32deb0531ad5843b365720b7649e6bde24618e05b2de662113603e879c92891ed269baca7fe6ed52441d121e3c9f3658aa7bfb72193efedf29

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\ffmpeg.dll

          Filesize

          35KB

          MD5

          9ccd4d73ff2931bf7e2ca09347fc9327

          SHA1

          5fe3f09bb772a673d1fcfd2d5e8a5b6e555e68ad

          SHA256

          24631d27933a8b30529a8cdd2e2759086a58d3134f4bb77e7bf02d5b55f8270e

          SHA512

          bc4938196c1e314c17b0eb0f3ae7147a7edc4232f2d3b25c3f60a534b938d460e609ed381d604aa0e1d1990f0a576b836422641b285173348c67eab0b32d5af1

        • \Users\Admin\AppData\Local\flauncher\app-0.0.36\ffmpeg.dll

          Filesize

          34KB

          MD5

          092b912909f2e710db56d8af1c05b092

          SHA1

          8d0e4be52711e740cbf72b9e6c889f83c6a8325a

          SHA256

          9f59c7e07a2e56c57570ac900b4045e0fc37e41d159bc01759245693ede69377

          SHA512

          86f0f6151ca323095b0fa0b4c518a6137bc58cb2a57170af6bf1f92b01601b851835d849606525a7b41f399d62a23576f820031bc18208ebd1dd30597e4aaf8b

        • memory/396-163-0x0000000074850000-0x0000000074F3E000-memory.dmp

          Filesize

          6.9MB

        • memory/396-164-0x0000000004C60000-0x0000000004CA0000-memory.dmp

          Filesize

          256KB

        • memory/396-247-0x0000000074850000-0x0000000074F3E000-memory.dmp

          Filesize

          6.9MB

        • memory/2708-11-0x0000000004DA0000-0x0000000004DE0000-memory.dmp

          Filesize

          256KB

        • memory/2708-148-0x0000000074850000-0x0000000074F3E000-memory.dmp

          Filesize

          6.9MB

        • memory/2708-17-0x0000000000360000-0x000000000036A000-memory.dmp

          Filesize

          40KB

        • memory/2708-149-0x0000000004DA0000-0x0000000004DE0000-memory.dmp

          Filesize

          256KB

        • memory/2708-10-0x0000000074850000-0x0000000074F3E000-memory.dmp

          Filesize

          6.9MB

        • memory/2708-260-0x0000000074850000-0x0000000074F3E000-memory.dmp

          Filesize

          6.9MB

        • memory/2708-150-0x0000000000360000-0x000000000036A000-memory.dmp

          Filesize

          40KB

        • memory/2708-9-0x0000000000380000-0x0000000000544000-memory.dmp

          Filesize

          1.8MB

        • memory/2708-151-0x0000000004DA0000-0x0000000004DE0000-memory.dmp

          Filesize

          256KB

        • memory/2752-129-0x0000000000D80000-0x0000000000D81000-memory.dmp

          Filesize

          4KB

        • memory/2908-144-0x0000000074850000-0x0000000074F3E000-memory.dmp

          Filesize

          6.9MB

        • memory/2908-126-0x0000000000C20000-0x0000000000DE4000-memory.dmp

          Filesize

          1.8MB

        • memory/2908-130-0x0000000004D90000-0x0000000004DD0000-memory.dmp

          Filesize

          256KB

        • memory/2908-128-0x0000000074850000-0x0000000074F3E000-memory.dmp

          Filesize

          6.9MB