General

  • Target

    fawkeshub.exe

  • Size

    150.4MB

  • MD5

    5ce2e02ad061f938d9d2bd21adfc91c2

  • SHA1

    ab9e4899e37ebb8aa47ef665212cd21a4bc7fb7a

  • SHA256

    d68e53ac2aca11c2b5ece9dcf4d4bd6e3a836e48cc852fd52035984b5ee4a922

  • SHA512

    52f35d125d853dfcf7d222f7428e31355e321b887667a70687c39a7eef57f9279dfffe1753cac06d7224bb0a32132fa636111a61dd9c335a9c8126a876b95afd

  • SSDEEP

    3145728:X+66w/K084y39eW6E6gEN+HdyfYWQTCyEMTN3ClNeM0tDbkZ8blRprrOjym8aTEH:X+6nKPS1EZEZgJTCMTdCXotXkZ8blRR9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 33 IoCs

    Checks for missing Authenticode signature.

Files

  • fawkeshub.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:6 windows x86 arch:x86

    674631b5b86309caa1d0df66c91a50f2


    Headers

    Imports

    Exports

    Sections

  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    36f6d7806085bd3a70ed8c5dcb51f6c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    6ed82d3226365ffafff2c57c1935d352


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • launcher.exe
    .exe windows:5 windows x64 arch:x64

    f7857765d3b5dab7eac61e332405491c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    585861b958c9f1fe9cc0324e1020a230


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    62b94bd6c48f8e0f6d82aa2752720dbe


    Headers

    Imports

    Exports

    Sections

  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app-update.yml
  • resources/app.asar
    .js
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/7za.exe
    .exe windows:6 windows x64 arch:x64

    6a398cd4d2039a3e1a33bbbd58f97593


    Code Sign

    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/LauncherElectron.exe
    .exe windows:6 windows x64 arch:x64

    a37fc9bbb2b168b3611170b2b29fb507


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/LauncherElectron.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/QLib7zVS.dll
    .dll windows:6 windows x64 arch:x64

    372e343f109171f7dc20f844188a6479


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/Qt5Concurrent.dll
    .dll windows:6 windows x64 arch:x64

    ce1549212bb7aaf7ac4fd663026ee9ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    6d44a16d5801e1cdb9b3ba4cb45314b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    ddcb78f3a4297344c620aa83af64ddfd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/Qt5Multimedia.dll
    .dll windows:6 windows x64 arch:x64

    7600665a844daa64d88eb4f04005092e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    c0e2c58de25ce77b283ad911460cea11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/Qt5Test.dll
    .dll windows:6 windows x64 arch:x64

    813744a30a4558cd108a623c41fa2b11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    8ac796c200bcdb47fab6297f47883022


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/Qt5Xml.dll
    .dll windows:6 windows x64 arch:x64

    24d9a9d9da6c15ddc1476bd55d0caeea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TestGamesRepository.exe
    .exe windows:6 windows x64 arch:x64

    53fec05cced524e49f9ba860bc27bc1b


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TestGamesRepository.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TestGusApi.exe
    .exe windows:6 windows x64 arch:x64

    1c96f04af7db31656af8a8fe935686e6


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TestGusApi.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TestSysUtils.exe
    .exe windows:6 windows x64 arch:x64

    847a0c5258bcb579bf736620ff865340


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TestSysUtils.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TestSysUtilsRunnable.exe
    .exe windows:6 windows x64 arch:x64

    d33e838a3912e2556a241919adfee2bc


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TestSysUtilsRunnable.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstActionsFactory.exe
    .exe windows:6 windows x64 arch:x64

    96c8c62025304e2795335b64e944d762


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstActionsFactory.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstDownload.exe
    .exe windows:6 windows x64 arch:x64

    a268e6d53995b5ae6b9f3da7bfcb1994


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstDownload.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstDownloadsPool.exe
    .exe windows:6 windows x64 arch:x64

    9bf993b2cc416c083203d95a99c637eb


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstDownloadsPool.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstEpicAssetsParser.exe
    .exe windows:6 windows x64 arch:x64

    fccbed942dbecc9bc3eda742b0be73bd


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstEpicAssetsParser.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstEpicManifestCatalog.exe
    .exe windows:6 windows x64 arch:x64

    ba0ddc69b3ae335d7e22e46308fb63f7


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstEpicManifestCatalog.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstGameVersionStorage.exe
    .exe windows:6 windows x64 arch:x64

    c498a07608be75d516ab6cd61590010f


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstGameVersionStorage.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstServerAnswerParser.exe
    .exe windows:6 windows x64 arch:x64

    94d1c13f3ed8704f5910bfecb149cef5


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstServerAnswerParser.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstSteamID.exe
    .exe windows:6 windows x64 arch:x64

    4786f5664d15ef9e9c6f1f83f5fc01b5


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstSteamID.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstSteamInfo.exe
    .exe windows:6 windows x64 arch:x64

    e063c998e704e5dd40b5281e3cb9e986


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstSteamInfo.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstTemplatedPath.exe
    .exe windows:6 windows x64 arch:x64

    e784e9dc5844b5c7e93aa749b1daec47


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstTemplatedPath.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstTorrentSession.exe
    .exe windows:6 windows x64 arch:x64

    e97ee756aabdd5e58357fae1dbb43fdb


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstTorrentSession.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstVdfParser.exe
    .exe windows:6 windows x64 arch:x64

    246446793796f3a36ae13fbe1aba3504


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstVdfParser.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstXsollaDownloader2.exe
    .exe windows:6 windows x64 arch:x64

    b5c02fb9a5d216a7ba4d15e81dc32ddb


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/TstXsollaDownloader2.ilk
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/aws-cpp-sdk-core.dll
    .dll windows:6 windows x64 arch:x64

    23c82aee6383fe5c97825ac5aed17ab7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/aws-cpp-sdk-s3.dll
    .dll windows:6 windows x64 arch:x64

    4d6697f93a8dfab713f20b339cb60412


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/aws-cpp-sdk-transfer.dll
    .dll windows:6 windows x64 arch:x64

    4fcd4b62cac09e6d156bdcf8cfbcc23a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/boost_chrono-vc141-mt-x64-1_68.dll
    .dll windows:6 windows x64 arch:x64

    f38961ab04d355ca1fe0e7079dcfb56c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/boost_random-vc141-mt-x64-1_68.dll
    .dll windows:6 windows x64 arch:x64

    72ce1be65fe05cb285b64b411d68d3ac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/boost_system-vc141-mt-x64-1_68.dll
    .dll windows:6 windows x64 arch:x64

    a2a46b8653d17603781d3aa3fec838ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/crashpad_handler.exe
    .exe windows:6 windows x64 arch:x64

    86700e29693f064fce5afba890d2008e


    Code Sign

    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    9e838455ae7ea799f93ad26b13f1cafa


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    89e76a88488aa7140e7c58e8ab442769


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    b8287a581b45f1f245f12be7c017f17f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/rsync.dll
    .dll windows:6 windows x64 arch:x64

    e8a473838dd87e00e4ac9eb11e6a829c


    Code Sign

    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/sentry.dll
    .dll windows:6 windows x64 arch:x64

    679895c30b0456e9f8b4a7e3b7299d95


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/steam_api64.dll
    .dll windows:5 windows x64 arch:x64

    289b2254a2c1e14995dd9995d1686fdb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/torrent.dll
    .dll windows:6 windows x64 arch:x64

    96ea4a30ee46c2503383142a7f22aa6f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/bin/vc_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/index.js
    .js
  • resources/app.asar.unpacked/node_modules/@xsolla/launcher-core-win/package.json
  • resources/assets/assets.d.ts
  • resources/assets/auth/fail.html
    .html
  • resources/assets/auth/fonts/GraphikLCG-Medium.ttf
  • resources/assets/auth/fonts/GraphikLCG-Medium.woff2
  • resources/assets/auth/fonts/GraphikLCG-Regular.ttf
  • resources/assets/auth/fonts/GraphikLCG-Regular.woff2
  • resources/assets/auth/icons/fail.svg
  • resources/assets/auth/icons/success.svg
  • resources/assets/auth/style.css
  • resources/assets/auth/success.html
    .html
  • resources/assets/entitlements.mac.plist
    .xml
  • resources/assets/generated/a2987aa2561a5ec395e418b88966889ec39206ff925ce4927fe10bc5d74d55e5.png
    .png
  • resources/assets/generated/d06f53c302f79b0362038967325875f525baef0c08d039f48d448525842316f3.png
    .png
  • resources/assets/icon_21.ico
  • resources/assets/xsolla-logo.jpg
  • resources/bundled-scripts/launchAfterUpdate.sh
    .sh linux
  • resources/config/defaults.json
  • resources/config/launcher.json
  • resources/config/tokens.json
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • resources/licenses/7zip.txt
  • resources/licenses/boost.txt
  • resources/licenses/gamecenter-mailru.txt
  • resources/licenses/google-analytics.txt
  • resources/licenses/grpc.txt
  • resources/licenses/librsync.txt
  • resources/licenses/libtorrent.txt
  • resources/licenses/openssl.txt
  • resources/licenses/qt.txt
  • resources/licenses/stone.txt
  • snapshot_blob.bin
  • swiftshader/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    67db432914b7baa0738050364c019173


    Headers

    Imports

    Exports

    Sections

  • swiftshader/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    8b4ec8564c21d6087c06b61d3d5ffbbd


    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    661e9d495f857b282ac48d29fc7f3fb6


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    21c5b88eff7d67aaad312ae7a9ae2733


    Headers

    Imports

    Exports

    Sections