59d78963e8f56b25b95c18d5c672789ddb62ee0e186eda49250cef99edad78b9

Analysis

user interaction
yes
max time kernel
1050s
max time network
1045s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/04/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ExLoader_Installer.exe
Size 22.2MB
Sample260426-pha9wah19x
SHA256 59d78963e8f56b25b95c18d5c672789ddb62ee0e186eda49250cef99edad78b9
MD5 e6316f8cf95a39fa15ae3b429bdee860
SHA1 43f39b21c1af9616c387a10e29394e2bafb067b9
SHA512 c6147f0adff15e71e2541ee1f9cea43b88343799b256012a68cd26ff9e5a50950aba5fb7ed2c4b56e474e0c7772c90d87446295d997a098902c24f588a638614
SSDEEP 393216:Fy7xm6OlKHpbsjgPHa7kyzzFBQPzql6s+HsdRDFhudYQI4OZMKmargPG1IqAysE2:wZOlKHEgpyvFC+l6uRgtI4O6Kma8ZqGf
TLSH
T1403733C1BBCD61BDE431D8BEE0166182D11BBF954199F22A9B6BD2CCCC936405C36B72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
176	5596	chrome.exe
176	5596	chrome.exe

Executes dropped EXE 16 IoCs

pid	Process
5436	ExLoader_Installer.exe
4300	ExLoader.exe
2080	constructivesharequite.exe
3296	FLauncherSetup-0.0.36.exe
3252	Update.exe
1212	FLauncher.exe
2780	Update.exe
4196	FLauncher.exe
2712	FLauncher.exe
5544	FLauncher.exe
5912	Update.exe
3336	FLauncher.exe
5740	FLauncher.exe
5568	FLauncher.exe
4764	FLauncher.exe
5912	FLauncher.exe

Loads dropped DLL 42 IoCs

pid	Process
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
4300	ExLoader.exe
4300	ExLoader.exe
4300	ExLoader.exe
4300	ExLoader.exe
4300	ExLoader.exe
4300	ExLoader.exe
4300	ExLoader.exe
2080	constructivesharequite.exe
2080	constructivesharequite.exe
2080	constructivesharequite.exe
2080	constructivesharequite.exe
2080	constructivesharequite.exe
2080	constructivesharequite.exe
2080	constructivesharequite.exe
1212	FLauncher.exe
4196	FLauncher.exe
4196	FLauncher.exe
4196	FLauncher.exe
4196	FLauncher.exe
4196	FLauncher.exe
4196	FLauncher.exe
2712	FLauncher.exe
5544	FLauncher.exe
3336	FLauncher.exe
5740	FLauncher.exe
5568	FLauncher.exe
3336	FLauncher.exe
3336	FLauncher.exe
3336	FLauncher.exe
3336	FLauncher.exe
3336	FLauncher.exe
4764	FLauncher.exe
5912	FLauncher.exe

Checks for any installed AV software in registry 1 TTPs 4 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast\Version	ExLoader_Installer.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir	ExLoader_Installer.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVG\AV\Dir	ExLoader_Installer.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast\Version	ExLoader_Installer.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
3	raw.githubusercontent.com
4	raw.githubusercontent.com
4	camo.githubusercontent.com
8	raw.githubusercontent.com
134	camo.githubusercontent.com
1	raw.githubusercontent.com

Looks up external IP address via web service 6 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
4	ipapi.co
12	api.ipify.org
14	api.ipify.org
16	ipapi.co
1	api.ipify.org
2	ipapi.co

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\defender.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\updates.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\flutter_windows.dll	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\injection.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\mods.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\shaders\raindrops.frag	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\backgrounds\Cyberpunk.jpg	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\backgrounds\TastyFoodDay.jpg	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\monitor.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\shaders\modification_card_image.frag	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\permission_handler_windows_plugin.dll	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\audio\Fortnite_press.wav	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\backgrounds\FishingDay.jpg	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\gpu.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\shaders\ink_sparkle.frag	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\flags\id.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\flags\it.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\flags\vi.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\cloud.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\dice.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\NOTICES.Z	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\fun.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\insert.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\ping.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\backgrounds\Genshin.jpg	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\crash.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\hint.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\audio\Windows_notification.wav	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\flags\de.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\fps.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\shortcut.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\snow.webp	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\socials.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\weather.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\vcruntime140_1.dll	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\backgrounds\Halo.jpg	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\translate.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\ExLoader.exe	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\bin.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\rain.webp	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\msvcp140.dll	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\audio\AbominationPissed_EN.wav	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\eye-off.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\shaders\winter.frag	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\audio\Steam_press.wav	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\backgrounds\SchoolDay.jpg	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\flags\es.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\fonts\NoirPro-Bold.otf	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\logout.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\opacity.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\FontManifest.json	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\flags\pl.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\auth.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\colors.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\magnifier.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\profanity.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\vcplus.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\backgrounds\Easter.jpg	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\bios.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\harddrive.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\rocket.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\eac.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\images\trash.png	ExLoader_Installer.exe
File opened for modification	C:\Program Files\ExLoader\data\flutter_assets\resources\audio\AbominationPissed_RU.wav	ExLoader_Installer.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\FLauncherSetup-0.0.36.exe:Zone.Identifier	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
4432	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Update.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Update.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FLauncherSetup-0.0.36.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Update.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5596	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216796437787266"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2397528088-2630719772-1129911217-1000\{C29129DC-9B15-4AAE-817E-10857293308C}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\FLauncherSetup-0.0.36.exe:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 24 IoCs

pid	Process
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
4432	powershell.exe
4432	powershell.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
5508	chrome.exe
5508	chrome.exe
2712	FLauncher.exe
2712	FLauncher.exe
3252	Update.exe
3252	Update.exe
5740	FLauncher.exe
5740	FLauncher.exe
5568	FLauncher.exe
5568	FLauncher.exe
4764	FLauncher.exe
4764	FLauncher.exe
5912	FLauncher.exe
5912	FLauncher.exe
5912	FLauncher.exe
5912	FLauncher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4432	powershell.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe
Token: SeCreatePagefilePrivilege	3420	chrome.exe
Token: SeShutdownPrivilege	3420	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe
3420	chrome.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
5436	ExLoader_Installer.exe
5436	ExLoader_Installer.exe
4300	ExLoader.exe
4300	ExLoader.exe
2080	constructivesharequite.exe
2080	constructivesharequite.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 4124 wrote to memory of 5436	4124	ExLoader_Installer.exe	79
PID 5436 wrote to memory of 4432	5436	ExLoader_Installer.exe	80
PID 4300 wrote to memory of 2080	4300	ExLoader.exe	84
PID 3420 wrote to memory of 328	3420	chrome.exe	86
PID 3420 wrote to memory of 2204	3420	chrome.exe	87
PID 3420 wrote to memory of 2204	3420	chrome.exe	87
PID 3420 wrote to memory of 5596	3420	chrome.exe	88
PID 3420 wrote to memory of 3536	3420	chrome.exe	89
PID 3420 wrote to memory of 3536	3420	chrome.exe	89
PID 3420 wrote to memory of 3708	3420	chrome.exe	91
PID 3420 wrote to memory of 4952	3420	chrome.exe	92
PID 3420 wrote to memory of 3708	3420	chrome.exe	91
PID 3420 wrote to memory of 4952	3420	chrome.exe	92
PID 3420 wrote to memory of 5328	3420	chrome.exe	93
PID 3420 wrote to memory of 5328	3420	chrome.exe	93
PID 3420 wrote to memory of 772	3420	chrome.exe	95
PID 3420 wrote to memory of 772	3420	chrome.exe	95
PID 3420 wrote to memory of 932	3420	chrome.exe	96
PID 3420 wrote to memory of 5960	3420	chrome.exe	98
PID 3420 wrote to memory of 5960	3420	chrome.exe	98
PID 3420 wrote to memory of 5480	3420	chrome.exe	99
PID 3420 wrote to memory of 5480	3420	chrome.exe	99
PID 3420 wrote to memory of 3572	3420	chrome.exe	100
PID 3420 wrote to memory of 3572	3420	chrome.exe	100
PID 3420 wrote to memory of 5464	3420	chrome.exe	101
PID 3420 wrote to memory of 4468	3420	chrome.exe	102
PID 3420 wrote to memory of 5464	3420	chrome.exe	101
PID 3420 wrote to memory of 760	3420	chrome.exe	103
PID 3420 wrote to memory of 760	3420	chrome.exe	103
PID 3420 wrote to memory of 4976	3420	chrome.exe	104
PID 3420 wrote to memory of 4768	3420	chrome.exe	105
PID 3420 wrote to memory of 6024	3420	chrome.exe	106
PID 3420 wrote to memory of 5508	3420	chrome.exe	107
PID 3420 wrote to memory of 4328	3420	chrome.exe	108
PID 3420 wrote to memory of 4328	3420	chrome.exe	108
PID 3420 wrote to memory of 1288	3420	chrome.exe	109
PID 3420 wrote to memory of 3296	3420	chrome.exe	110
PID 3296 wrote to memory of 3252	3296	FLauncherSetup-0.0.36.exe	111
PID 3252 wrote to memory of 1212	3252	Update.exe	112
PID 1212 wrote to memory of 2780	1212	FLauncher.exe	113
PID 1212 wrote to memory of 4196	1212	FLauncher.exe	114
PID 1212 wrote to memory of 2712	1212	FLauncher.exe	115
PID 3252 wrote to memory of 5544	3252	Update.exe	117
PID 5544 wrote to memory of 5912	5544	FLauncher.exe	119
PID 5544 wrote to memory of 3336	5544	FLauncher.exe	120
PID 5544 wrote to memory of 5740	5544	FLauncher.exe	121
PID 5544 wrote to memory of 5568	5544	FLauncher.exe	122
PID 5544 wrote to memory of 4764	5544	FLauncher.exe	124
PID 5544 wrote to memory of 5912	5544	FLauncher.exe	125

C:\Users\Admin\AppData\Local\Temp\ExLoader_Installer.exe
"C:\Users\Admin\AppData\Local\Temp\ExLoader_Installer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4124
- C:\Users\Admin\AppData\Local\Temp\RarSFX0\ExLoader_Installer.exe
  "C:\Users\Admin\AppData\Local\Temp\RarSFX0\ExLoader_Installer.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks for any installed AV software in registry
  - Drops file in Program Files directory
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5436
- - C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
    C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -command "$WshShell = New-Object -comObject WScript.Shell $Shortcut = $WshShell.CreateShortcut(\"c:\users\admin\desktop\ExLoader.lnk\") $Shortcut.TargetPath = \"C:\Program Files\ExLoader\ExLoader.exe\" $Shortcut.Save()"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4432

C:\Program Files\ExLoader\ExLoader.exe
"C:\Program Files\ExLoader\ExLoader.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files\ExLoader\constructivesharequite.exe
  "C:\Program Files\ExLoader\constructivesharequite.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  PID:2080

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc1a73c728,0x7ffc1a73c734,0x7ffc1a73c740
  2⤵
  PID:328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,14501841084607793422,9112973375922713204,262144 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1868 /prefetch:2
  2⤵
  PID:2204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1796,i,14936024207155651230,2497374094220737623,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2188 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:5596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,11349718253366914787,400050693401493007,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2388 /prefetch:13
  2⤵
  PID:3536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,5537672528289602905,9773922887649822360,2097152 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,11055424438123090443,6664404677525445321,2097152 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4264,i,4478572073560991419,17090923058062511679,2097152 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4276 /prefetch:9
  2⤵
  PID:5328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4664,i,18286171535432865342,16599425033094211316,2097152 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5436,i,15909380541887858008,2882412863390961277,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5756,i,16003244279575504273,17028227518575864682,2097152 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3616,i,1441975510000873560,10371295758606368999,2097152 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:5480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3852,i,4114170446705371890,17752491248080976616,2097152 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3684,i,2676180279688649590,860607817572975086,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5924 /prefetch:12
  2⤵
  PID:5464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5932,i,15753364954943429651,8027676744422522616,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5796 /prefetch:14
  2⤵
  - Modifies registry class
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6124,i,8123543417148950696,9763893094795070176,2097152 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6312,i,15973679930726272781,9353219036587964950,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6288 /prefetch:14
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6304,i,12479569255725027355,2763183624147719272,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6364 /prefetch:14
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6324,i,2128554806385052016,12234282058087253369,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6404 /prefetch:14
  2⤵
  PID:6024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4252,i,1683048298244961033,1049232077920358167,262144 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5652 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5672,i,408975224335552729,12234677275957164270,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4288 /prefetch:14
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6508,i,5001734634963676569,13260131471270481136,524288 --field-trial-handle=1876,i,13429981580924559823,4406266585817991302,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6360 /prefetch:14
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:1288
- C:\Users\Admin\Downloads\FLauncherSetup-0.0.36.exe
  "C:\Users\Admin\Downloads\FLauncherSetup-0.0.36.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3296
- - C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
    "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:3252
  - - C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
      "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --squirrel-install 0.0.36
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of WriteProcessMemory
      PID:1212
    - - C:\Users\Admin\AppData\Local\flauncher\Update.exe
        
        C:\Users\Admin\AppData\Local\flauncher\Update.exe --createShortcut=FLauncher.exe
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:2780
    - - C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
        
        "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=gpu-process --field-trial-handle=1632,11440422830287502818,9119228248857670594,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1640 /prefetch:2
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:4196
    - - C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
        
        "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1632,11440422830287502818,9119228248857670594,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --mojo-platform-channel-handle=2000 /prefetch:8
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        
        PID:2712
  - - C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
      "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --squirrel-firstrun
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of WriteProcessMemory
      PID:5544
    - - C:\Users\Admin\AppData\Local\flauncher\Update.exe
        
        C:\Users\Admin\AppData\Local\flauncher\Update.exe --checkForUpdate https://dl.flauncher.ru/dist/
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:5912
    - - C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
        
        "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=gpu-process --field-trial-handle=1672,8690090822506091068,14981125003898493271,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1680 /prefetch:2
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:3336
    - - C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
        
        "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1672,8690090822506091068,14981125003898493271,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --mojo-platform-channel-handle=2216 /prefetch:8
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        
        PID:5740
    - - C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
        
        "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --app-user-model-id=com.squirrel.flauncher.FLauncher --app-path="C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\resources\app.asar" --no-sandbox --no-zygote --field-trial-handle=1672,8690090822506091068,14981125003898493271,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2308 /prefetch:1
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        
        PID:5568
    - - C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
        
        "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --app-user-model-id=com.squirrel.flauncher.FLauncher --app-path="C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\resources\app.asar" --no-sandbox --no-zygote --field-trial-handle=1672,8690090822506091068,14981125003898493271,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2800 /prefetch:1
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        
        PID:4764
    - - C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe
        
        "C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\FLauncher.exe" --type=gpu-process --field-trial-handle=1672,8690090822506091068,14981125003898493271,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\FLauncher" --gpu-preferences=UAAAAAAAAADoAAAIAAAAAAAAAAAAAAAAAABgAAAIAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        
        PID:5912

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3568

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2384

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:6020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ExLoader.exe

Path C:\Program Files\ExLoader\ExLoader.exe
Size 199KB
SHA256 bf29ef463bbcf3860e94157aa93903864049d28d49f17edc0ccaf76ab88f0da8
MD5 a64132f8c167bd9781de5c36db7e0063
SHA1 9d5dbac8f6146a9b668e0763017da370c12a059e
SHA512 b6e2e8a17b210af76019cf97b2a09d3d87d1ce8fa4cc4ee4bdce8c7433ad00a72e0a83406120188500f914627f84759f21dc613c06ad4317aec6e11578cf5e78
SSDEEP 3072:R7EJSqV6PUxmKeALbU/5YZjtHx6hVzZuZqv8PwKreqbpmiY0UU:JEJSq4PUxmKeCAuAhVIZxwKreqB
TLSH
T16614D006FF16508BD20D4E70C813CA19EA72FC8E9BB1974FA7506EDA7F67500AF1A611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExLoader.zip

Path C:\Program Files\ExLoader\ExLoader.zip
Size 23.4MB
SHA256 79e4040054e20f6c385cbc682638205ac4d56f54aa07e593d70680033db803a7
MD5 ae6be8e61915e91ad907c34a0d5d06e1
SHA1 51d19d85aaf789b8856e6db0fd1411556304092e
SHA512 e789687f6017114c94c230730e3f559f7c4299c60bf51fbe46dcee06036f4a04c188a96e079dec20b24f45798b32146fa5e6aa6fd84ed69f0c57ff4d6d4b17c7
SSDEEP 393216:JeGQVVDow2oxr8gJ4rimcjaOR9yzibJZy2cIY9UFdWW+nKdflRwGsMsiZ6wxt:UDZxr8kicj/JZyvT83f8G8/wX
TLSH
T127373352FBDD3133C05865FE813E71C1E4E59182A2EEAE55B3C811625047E2D3B7AAEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

audioplayers_windows_plugin.dll

Path C:\Program Files\ExLoader\audioplayers_windows_plugin.dll
Size 191KB
SHA256 4b0a6046dbd5633dc0bcbcec0a9ba05a249fc212b709a5a64a89dd338ec4deea
MD5 4793c951662ffa53e79457f4a04f42b3
SHA1 0661047ccc85124fdb99179046002b772aa9ab68
SHA512 5eacf983b50118e9f3cac275ae272efdc5538582eada3a105b33dde1f84ab6d467ee40ac178b70292bfe5cf59bb690e385e8f5a04d0ee0fb22febddf95ab206e
SSDEEP 3072:rcNB1/rM2pKoURfIakAN+Wz7rhn1tuPeGxpGN3MAMtRehGm2x4D:gBg2AoUJBki/h1tC+3MAMtRehGT4
TLSH
T1E614295BB66540AED16BC2B8CD434A46FB72B8964B75A34F135107BA2F67730AE3E100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.so

Path C:\Program Files\ExLoader\data\app.so
Size 20.8MB
SHA256 419d57c45c0faeba94d126ddf29c0fec23166bea688b9796274ee13aac2f8291
MD5 07058abee663b95b8ef930d92dedd688
SHA1 fd901980bdc2b5342131d67c6203a9cd0a175f40
SHA512 0b7f1b02dbb732c8af32e5c0246195b34f9386e525cbd26826686c86c2234e4e5591cb33bcc895379b7ee2041b11154ee8843b5bca72ead0b336e8aaaf5ab099
SSDEEP 196608:gdZ5UxDmhaf8jFtcrd1WCjVHbLPb+pghIxZq4ppqyd2iFqwcbGTy2:q5UxFdk7
TLSH
T13E271907D0A44320E5F2E739B77FB5969D147DE88B30A68A17C609693A4ADF0578F332
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssetManifest.bin

Path C:\Program Files\ExLoader\data\flutter_assets\AssetManifest.bin
Size 9KB
SHA256 284c6bdfba0a9dc55429768be10e4d924de30fa04a34078a49f02fbbf34d2185
MD5 c5826add0bd49f55d19b166d2132e529
SHA1 0f411009c12b469cc5cbd429f454794756c7f7b2
SHA512 1d2da6d55fbe8b281890895b288dfd9beacbe9ebdee26c8a6042e45b6f66f1af4a2fac96e63cb6561b9e13f74a4fce17c5b186a1ba434a482468e2a515a36ea8
SSDEEP 96:V5AEnXfm4BuhX1mXIz48ugzXA43lATmwG+e3:V5AEnXbsXsXIz48ugzXnee3
TLSH
T10D12705B83A025FFF571702568AA21645A02CE01D1B9EB9FF339941AA1F33E508FBD24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background_image.frag

Path C:\Program Files\ExLoader\data\flutter_assets\resources\shaders\background_image.frag
Size 13KB
SHA256 597e4743f79812deed62ffcccb220e11fe914750ac1b4c6b137dfc6a2fefeeaa
MD5 299185bdc5a4c1a0aba729eee7c095b8
SHA1 8da82f6c27effcb6a17ce3843f18b5b1cbda9c34
SHA512 6d5aefa210093a5a34ae6a16e9619e7a91a33955cb3aaffbaefde0dcacfc249543739fdf648a52af6d6c907744588e3c7657a99a204f9731d955a3e331a85d4e
SSDEEP 384:rUhhimwAQBkUWVCszuiXe436Qb/nXe43PQ2ZBWPBZEMefB:rU3imwAQBkHgIuGF7zeBZEMeJ
TLSH
T10E523009D2B28A31FC1B513E8AAB0225333AE46B8652C74B3B4CB555EFD23351F917E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modification_card_image.frag

Path C:\Program Files\ExLoader\data\flutter_assets\resources\shaders\modification_card_image.frag
Size 30KB
SHA256 218064eba0c635a3975b89af6901060dba1081d5800cf4c37adf129f7f3e6378
MD5 7ff0e8c23d775d04e7d5e39a149cf49b
SHA1 4fbc6cab9e90ea8e5001f6ab158c1a8671c9de31
SHA512 2cb57c8ddc838a2c228dad591f30cb5c20a09087ffa555238f356c79aca68b48480fc6ef8ba46e1b00cb56f6850c1b66b4c6ae3f85caa6bdc7ac8e5a9a657df6
SSDEEP 384:k3HfhIHBpr5iCNN8hHvFdNol5EVEbxqbpLI05vFdNd1AEVEYFGEnNt0McnNOF2f2:k3HJIHBpr5iCN4j1jchBJ05
TLSH
T17ED2FE89D0A34666D437A23D876B0138733AE41B938BCA4B394DA971FFC33614F946D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

raindrops.frag

Path C:\Program Files\ExLoader\data\flutter_assets\resources\shaders\raindrops.frag
Size 51KB
SHA256 457ca5ed415b71b2cd29a0282bac5cc5a2eedd358f9b6edb09fb61463061b292
MD5 3842e68afad33b23f264bdc1d32aeafd
SHA1 42c1f8694aa12ad276501503d6078bdbbec2b03e
SHA512 2a0c6addd3a0ffe7f1476c14a84d4fdd839102db21f30cdc55390890f5b13b5b79f1e1208211d114775c72ab7ee2434c451b9f52b1f9b1d1e4b708e8a20a0d6d
SSDEEP 1536:1fOsABeAuspFkzt8/Kxqh0bwu056RDWDr:FPzAxKD6r
TLSH
T13D331044C3B78E62DD14A03ECA672119236DF06FAB96D1437A4CF9316F12B760B858DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shimmer_effect.frag

Path C:\Program Files\ExLoader\data\flutter_assets\resources\shaders\shimmer_effect.frag
Size 7KB
SHA256 b942286a70fda0febf622b60eaf4158b7389ebe720551fd07f394bc46e2c54b3
MD5 06f30300b499b27bbfee28ed4b8e81eb
SHA1 5a68d59a3e82ba4974e070d14b32071930b923f8
SHA512 4a542e12a8e28bfa691de5440c1836e9db5988444b9d01320b4eb3e4006f69547c70b8f7a2b98c66cd001a69e0b363fffbe227ea569113793e9d10f177ec0b9a
SSDEEP 192:79Y/ho9nwnCUZCUOeMVKOUKeMVWQl69dlcZ2G7F:7m/hOnc9a0qXydlWB
TLSH
T1C4F1220CE2E64D24DC63BFBD49A7C2847377A06A0217E76F250CF1527B433AD4961AE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winter.frag

Path C:\Program Files\ExLoader\data\flutter_assets\resources\shaders\winter.frag
Size 70KB
SHA256 1bfffd711428e5d970a4497fce1f4f35eb510103ce4626e7781375d416b2fb3e
MD5 c4d81f1f427ed3efb2cb7b1c812aced7
SHA1 67abf26d9f07788cb332d71584f72bdf080bf5d1
SHA512 7ebe60fc265070f88ce2d321cd3d3cc1608b90cc7b25f0a6383d230beb35f08b555cfb8d55671f8b868eeaaa438c8f18e0f1ebab0bdeae6c5fa3970955a18e29
SSDEEP 1536:rU894f/OMr9Qat7foLWFK7Eqs2KJ7vqiaPJymYM1xsFk5EBS6ree72s/FK7Eqs2r:cBQa+LrjeKekXdMo
TLSH
T13A63554CCBA74661D82DB53E8F67211C636DB05FA75685027F0DFA253F4223E0A81ADB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Program Files\ExLoader\data\icudtl.dat
Size 842KB
SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
MD5 018361032ba13dfeab636138ab6b9831
SHA1 8f9c259d3a330786ab8bbd49e7e79abfa1d552ed
SHA512 d7d3fffb41576cf2c90cd260727cc0ea23c5a4c458f84b01426c2a4578004b94168047c7282222e9ffade2f082e189cf167146cc3303bd7dbbb252a593236967
SSDEEP 12288:8Mlhw771h0jM7ykPG07rr4c8w0P4N48Rkjt3dPHz982VYhq:Zhw3zVtjLbGu4RjTPHzMhq
TLSH
T199056A17B0435E6FE0C48277C652E7B65637838DEB3317EAB698B5593E8A1C20241BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path C:\Program Files\ExLoader\flutter_windows.dll
Size 19.8MB
SHA256 c0304beba5fe98477177e151c673adad98d0442f50efa25d03ff5f207cc21056
MD5 d58a8db7631d3577b3cc9abe14cce466
SHA1 c42e1571ddb6191789331f3db60783cc8a539b78
SHA512 89bdff0faa6ea9f3d89a8bde8e381f82996931f22fc695d1c26e28fac59eff9428ca8e65461373337035233fc4e732c8643b2460290af5393d63e643e626955e
SSDEEP 98304:QPe71P0UiyfxPUBJt4D5hrwgRk244TtFkJp7KYx8m3aIw3v8sDM0p1Vw3/tJjkad:Q+CYrwgRPLYFUZw3vjRfIS5XQe8I
TLSH
T1C9276B03F29640EDC459E178971BAA23F671B8490720BADF27584B223F66FE05B3E754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

permission_handler_windows_plugin.dll

Path C:\Program Files\ExLoader\permission_handler_windows_plugin.dll
Size 112KB
SHA256 eef73ed37d9917ea863f8cefeac67343f088272c196cb378030f7b365777b6b3
MD5 d3a61d703310d74c384ab4dc203d7c57
SHA1 4aed24bab076024e6df3b18df8ab224a2951254f
SHA512 cf3b1e7fbc581679e7a9f64c11ed1b0ad2db0b64896325cbb5a33ede3e51743dc1ea161b6a2a5bd49167a44999b3f32e742c9572b2f8d1469212330fb42ab44d
SSDEEP 1536:3wdqy4lJGRCpqFFYuAriT5ee5bPwL5csFMAY46GjZOdoCq5AS3AaTAx1:3wdqaCpq8uAaeeKi2MAY4EdoC31
TLSH
T12DB3290BBA7A426FD11AD978CA879D06DB32FC965BB1A34F67510B9E1F136204F3D201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

url_launcher_windows_plugin.dll

Path C:\Program Files\ExLoader\url_launcher_windows_plugin.dll
Size 91KB
SHA256 eb7d33cae135b87271d23d4b5932331ea703689a975421d0180764d8f32f8ced
MD5 22be4cf0ac9a4e9bbf4e0b4b21e6ec39
SHA1 54bcb39b421de790c0ece276147a89e61a2af560
SHA512 43e8dd7c70635764e05c7b986744ffaf564772e3c5106f0f7d9c6ec218eb7124139677d0a5a365813d6e7f5b95cf7a5a11a6773ecd249d8d5b1bcebdee354539
SSDEEP 1536:RuMKOkFGY8NRgvc2kLlo+FBqvoXEZ3M8ZV9ZnKD:RhKx8NykLlo6BioXEhM8ZV9ZnKD
TLSH
T1BA933A1BF72A40AFD26AC9B8CA474D06DB72FC8647A1A34F67914ED60F176601F3E601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

launcher_profiles.json

Path C:\Users\Admin\.flauncher\launcher_profiles.json
Size 174B
SHA256 6bb7fe0747f5a241293ed991377895fa928d48c2e226f38ef867e97d94d2b4b3
MD5 f0a7e353a4695f7b1e83c008a20d0df2
SHA1 e663337bf48f44f4c59c33c814df54b232ad6e73
SHA512 04ce9f0ddf76e3d032993b2bc6c7ad3e56c9a1578238ebbaf4390cd436bb6f4af43e97d9d522a8c83316d9bf9a4697cb8d41e4a9cc88720f28384d8486b78b74
TLSH
T15CC08017DB940453CFD522636DD94055053B296101493D3F5D939A140247AAA47E7541
MD5 SHA1 SHA512 TLSH

Submit Download

launcher_settings.json

Path C:\Users\Admin\.flauncher\launcher_settings.json
Size 412B
SHA256 6ee8ae0e47084c0bc4644ea1a2d8b38d8aeab787953e69e4fd6a64b726a8bbbb
MD5 405928c5833d60a4c19f8e42d96b935e
SHA1 417174b7372169bdf2e0f4ada10e14c09ce94097
SHA512 f6e2eee5fa5b5852f536545ed8e675f5ce71e9e6e469a603ce0d41b8e43126c2cc1a9ef0a4bafb05b5c38e4f9404507c4365d850297f63c6400684702b0dc9b1
TLSH
T180E02B0452110833B2E89779086D51C159A44C0B01013C7C39EF654D2F4D79B117B757
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5b1905cc9f6bd87ebf03db1ef813decfa5741243ad2ecfc73b8f2e1444575da2
MD5 c7f59683d1343914162b709e3ef59a10
SHA1 9419001d605e5470236340945ca3be733e2b408a
SHA512 0a5be4cfc961de8a462fb010c1cf60009447dea4d802cac4938caf3fcab984968b3a8772f4a32cf0c7468d870d7d96fbf5260f59e78f7b1b98e67ec88fd61bf1
TLSH
T126E02BAAC835EC371CFE0B5890905746EA4513972740492F7A3D920D8FB1A3F1389C2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b9d170eb786d5949347dd38e1e8dedb36fcb00b37ed9965adf1490498e8b4834
MD5 c790b127055176e0615b7076b3c49362
SHA1 98dce0e54a627e0e3e61270d4ec36fb54c9ab238
SHA512 449c39d7d3f152147c26e727dd25ff90a7f9d3bc6d564b50866be45ae77e1fc6e43adb8f734a63fbec44608d210a8554ad0b49ff3d1912cfd55dcb350650881c
TLSH
T17E715FB68DCDF2A5FBE601F5ADC60E4130B93109D8575FEB01D8957EAD03BEB2910819
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 82cb8861037874daf6ee0a0c74f3cb42e5f27df5594e3023aade66db82ebc2f9
MD5 9d8d54cd91eb7d2924adfd4a5e1b337a
SHA1 70b6f746e7616645fb1aeaa0ff72921d11712461
SHA512 32e3e1f99cf9694612eb1c97e53a8bc95e27e097661a9188ba0f4ab258a9a7cd3ddb795794124618e9eac2e512bf5467d901b70bff95c75d8393b12fb9099b65
SSDEEP 192:DHufltqmlZNMk67ewxL10EMaIaQUKdVmOKmgmmmtmrmDmgmzSuSkqSTKDrR1TTCM:DHufltqmlZNMk67ewxL10EMaIaQUKdVr
TLSH
T1E72269F783E4866D891266F4EB15AF2FCE290924432C3C7689E5AE47D3E2432E11175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 c759f271c7c5292382b85e7ead1949f95da7860b17080eb7b842d6a120b03dcf
MD5 e2424d354d8bcd1f67ad0bbb8a125231
SHA1 f7541f83d74d3c9b121ac74f5d703aacc42d18cb
SHA512 7854ed17fdb3614fd1db16486ccd43ee4798a0d2539f5a86d7b3d23308e72b8be94c060dcb8a810ff645fa9da4cd7ee77b02b9d7339186e5e1b6b2ec333b1e6a
SSDEEP 192:DhufltqmlZNMk67exL10E9XaIaQUEdVmOKmgmmmtmrmDmgmzSuSkqSTKDrR1TTCo:DhufltqmlZNMk67exL10E9XaIaQUEdVl
TLSH
T19A2269F783E5866D8A0266F4EB15AF2FCE290524432C3C7689E5AE47D3E2432E11175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 d9c4ac9cfd521d1eded257614d0acdae358ad177752bac774c12e7d65b436d11
MD5 b264d3e04de1d07a29e2a9683e66545a
SHA1 719550519e9f9f4e6c1cc4eb58913a4b7a10a319
SHA512 caacc6f2c0b7f673fda5be774bcf222c90d905d9b7ec571cdee570bc7745a5c90fd23b7a9624fab4ba1ac5eefc5de37b4b439a8074d89a1eb277d8616aba689e
SSDEEP 192:DH4ZseOm2CEFbgxezcgaIaQUKSVmOKmgmmmtmxmDmgmeGstIAYaSVKDrk1TTJvX9:DH4ZseOm2CEFbgxezcgaIaQUKSVmOKm+
TLSH
T1DE427CF7C3E8862D891256F5A7156F1FCE1D0928431D3C6AC8E9AF4B93F2831E21165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 4acace70f3f12228baa7845b986b9b9d3cc2e8b67161233671f0835bf764c364
MD5 ff0bfa89ce6f3570f6d8a5171bb0a306
SHA1 7f8ac14ac95c61bcf18dd0b21095c2468c99d290
SHA512 6b82fbebbf23bd00fa14a1982316b5ec61c9a29e18c8d6901d172aa4f559a193af6c424e5416ed2a6cdd03d092511dd7cfc19087f4b5b3d502df30c920b7e507
SSDEEP 384:DH4ZseOm2CEFbgxezc0oX0aIaQUKSVmOKmgmmmtmxmDmgmeGstIAYaSVKDrk1X6X:o/JX8AiJj84p8
TLSH
T102426BF7C3E8862DC91256F5AB156F1FCE1D092843193C2AC8E9AF4B93F2431E21565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 808ecdf5f8fc09479c90b31f1e7fe73d4c38e5ebc1696dba9097c0d23996efc4
MD5 f0705a2fa0a6af7189b97cf5d56d29e0
SHA1 9afc97e42c77c6faa6277510fd80ec13961b3a81
SHA512 a7707d15610642b3a991e932a73ec7cef9cdc555679417850996246fb7e11cbe57ba454e4eb9f4e7657bdaca580029f8d4d5e7bbb8d98a3864ab5883a047f006
SSDEEP 384:DHufltqmlCEFbgxezc0oXoMaIaQUKdVmOKmgmmmtmrmDmgmeGutIAkaSTKDrk1X0:wiJX8qiJ9mTpV
TLSH
T17C426BF7C3E8866D891256F4AB15AF2FCE1D0924431C3C6688E5AF4B93E2431E11575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 e139785220d1ff60513d56adc2243f884dbcaba52a7934f3f5739d11ba7563e0
MD5 d08237c0541cbfea38ad5252f73d0bf7
SHA1 aabe4ebda1cdf85613509ef1c3a7989afeae97c2
SHA512 3c68e52cb727695a7c9ec335ae8720e1b875ec549323fe61527c8f2217713453a75e6b882b6066c450952d7cedbdb7a20c99e19ae27ce7638026b7f32d9f2d0e
TLSH
T193517AE3ABBAB85B607C49E71D0478061ABFAC314291A4F4DF63816CB1C74E71F2543A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ec5c16f64509f29ae44141cb401f0578e624e79b7c5f5e8abe2d005f69d1a5f4
MD5 f2a0477775a35285aa02985f97e5c08a
SHA1 a3dd0bc688da8fbb10040747f32a88f2000508d1
SHA512 14040ac88ac78a3033e3007a5e9ef81917a7f856e48cd4dd24e038abd9f7d9aea06f37af2e1d4694107f1a8b88f66ddd7ec902c3bfa0a4ca1df0d8f9449ee943
SSDEEP 192:gROcBz3tjUwAE0v7+FhAPRp2k9f9hHsb+WNnbE4Oj2HIe1kxVfaUVyIsnAUgtaJ:gROmz3q6w6F8XjbwYt2/kfaQ8
TLSH
T1C952E66EE92075376CEAC219FE217757E7F5102121942EC8EAFC8E1C25E75CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 217ac444286d6bf9264f5fcab0a5c070d9a3773afabbebdae085f12d322a7d4f
MD5 a620c8781c3ad9181cdb3d848ce543cd
SHA1 ba98d9ee010b492dc4197ef07fc1cff701ca2b32
SHA512 84bade61f2249ac93951ee8331fea95f6e52534a75b5cd131fac26e78d2f63f4dae6745693a8952f6927fc72b87270f989253733e10345677e2df04637cc2ef1
SSDEEP 192:gROcBhptjUwA69v7oFhVPRpBci7stI9hHsb+WNmM9bEGmr+QJedIe1kxVfacVyIg:gROmhpqA9EFbXDbwoXvexkfa4vE
TLSH
T11162F86FE92029775CEAC619FD21B75BE7F5102161C41D88EAFC8E1C21E76CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a469fdb5aa5a9e4544f2efd918e7ce883b29a52cb4a1fdd6b756954f3c50884e
MD5 0f6cecbfd365417453e349192433ab87
SHA1 d4b3cb01d71f6a6d03d1494895220782ff90f958
SHA512 8dae992f47e447a52ffd3cef7a92f1ceb99d65b65db18293e03a949fa4a17f477042f526ea836394d37fc66dead75887ad9ddf9ac700b581e8388c1b1dfb807b
SSDEEP 192:gRncBhFtjUwA6Fv7oFhVPRpBci7stI9hHsb+WNmM9bEGmr+QJedIe1kxVfacVyIg:gRnmhFqA1EFbXDbwoXvexkfa4vE
TLSH
T14562F86FE92029775CEAC619FD21B75BE7F5102161C41E88EAFC8E1C21E76CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e4db7e345824287c0e986bc87e022a2ba27b56303324f44e1b968437767d0f68
MD5 9a134662ea61e317beebe3c079cf2b66
SHA1 9444e372afe862ea877d26c96008f240b93d8278
SHA512 efd849ca4a83a61b94f866b7365db5166622f8b357595aab5f25cc87abe156f494963f900940be49be4682c9085e6363077fb3b1cb016103b65c21680a1bbe47
SSDEEP 192:gROcBhptjUwA6qv7oFhVPRpBci7stI9hHsb+WNmM9bEGmr+QJedIe1kxVfacVyIg:gROmhpqAmEFbXDbwoXvexkfa4vE
TLSH
T15662F86FE92029775CEAC619FD21B75BE7F5102161C41D88EAFC8E1C21E76CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 1b6aafb72a81982e51537aed663f4e861f024549eaf75702a959b696f7569cec
MD5 0b7ca2aaee370a8195e60925fe4ca0ce
SHA1 02599e609252b45c542b92f63135e8c52510fcd3
SHA512 3d847ba5f2be843c4a2ce25cdb304c9c18085daf0a22705014ab222c3073bb1cb2c8ac73cca2af77a6b6289b6c392a58ff8f6c0cd56c2663c2c59276bb69a2e3
SSDEEP 192:gRncBhFejUwA6Fv7oFhVPRpBci7stI9hHsb+WNmM9bEGmr+QJedIe1kxVfacVyIg:gRnmhFDA1EFbXDbwoXvexkfa4vE
TLSH
T10D62F86FE92069775CEAC619FD21B75BE7F5102161C01E88EAFC8E1C21E76CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f61e336247d451afb37104fbcd3923ad9546344926613cbf57aa1819b3431399
MD5 e2aae2aaeac028379ea6b09a4f495fac
SHA1 5f7d10a212f6b745d6ee9b67cdc8680ad2123e4e
SHA512 570911ad9a63247ea523cc7de0a23fe9a0b6af4ddaa4d0fd90e9380b490797edc42fe54bc071005584fb7dc1a2271aea841cfe57352b24324860dbdd8c536ed0
SSDEEP 192:gROcBhptjUwAjcv7oFhAPRp2ci7stI9hHsb+WNmM9bE4QJetIe1kxVfauVyIsnAQ:gROmhpqVIEF8Xobwo9ehkfamvE
TLSH
T11762E76FE92029776CEAC219FE217757E7F5102261C41D88EAFC8E1C21E76CD222740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c2d478d999d0c7f48d400e75fd2d6c7f5f22ef5b415ecdee998be916b9eacc63
MD5 42defd5c01a46132a62d60a5dc049299
SHA1 8d488074048a379298171221a548010b0ea1e683
SHA512 900c1ccd797c582ec7573693054d669176ec27974b96901ee76c0460384c00c560e0f768726f36ec6035be8a1c931faf81c5fb11dd7ab593cb206ac6af49fe55
SSDEEP 192:gRncBhktjUwA6Fv7oFhVPRpBci7stI9hHsb+WNmM9bEGmr+QJedIe1kxVfacVyIg:gRnmhkqA1EFbXDbwoXvexkfa4vE
TLSH
T1D562F86FE92029775CEAC619FD21B75BE7F5102161C41E88EAFC8E1C21E76CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c3c9e4f2a37df338041b886e4225c0f00e09e29c773d852002bb9baddf7a3fc5
MD5 79316d1a4f3121a64222ac4ccc7e628f
SHA1 d3fca1b140795510a57d5bdc4cc57941f70d2f86
SHA512 4e41d79bbf0d2d565c21beb5852bd6673c399e5357bc6e82207629731e237f0d6df3cd459ed52d9825745a6d87a1aebd186a264543b46040c1104ab35ce9c22c
SSDEEP 192:gRncBh/tjUwA6Fv7oFhVPRpBci7stI9hHsb+WNmM9bEGmr+QJedIe1kxVfacVyIg:gRnmh/qA1EFbXDbwoXvexkfa4vE
TLSH
T1D862F86FE92029775CEAC619FD21B75BE7F5102161C41E88EAFC8E1C21E76CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e0c85f42825ab4e999465e0bb8d61d93ed8fe0d6888bc5ba76c5eee5df97ea70
MD5 7cb6321753664d28bfe3e171ca085240
SHA1 fef948f3ba946fd1836973a87fee480bf328f29d
SHA512 c7df6e5e2c71fd86f25ae3e2868739ad961aaf796e980a102b296080720ccab5a6f784fa1fdb917c50fb5d465ab43db168c0c879575edf607812e3e9f04e7d44
SSDEEP 192:gRncBh6tjUwA6Fv7oFhVPRpBci7stI9hHsb+WNmM9bEGmr+QJedIe1kxVfacVyIg:gRnmh6qA1EFbXDbwoXvexkfa4vE
TLSH
T14E62F86FE92029775CEAC619FD21B75BE7F5102161C41E88EAFC8E1C21E76CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b53fdb8571510e7afac3b23066e105b4488bc9f25f56f683b177dbe11bad96ee
MD5 4a46d65cd3528502b2b40e62d06d7e37
SHA1 c3b9b4fbf8da3c2d9bec1228f9659e125db3532e
SHA512 490a2872d309b4f9efcbb36f5edb8a50ebead8f8e2f01ca4431919211463d36bd38c385380a4962f1303777f4c7778cac244797d45849541e48fd09efe5f19d6
SSDEEP 192:gROcBh3tjUwAj0v7oFhAPRp2ci74tI9hHsb+WNmM9bE4QJetIe1kxVfauVyIsnAq:gROmh3qVwEF8Xwbwo9ehkfame
TLSH
T1C352E76FE92029776CEAC219FE217757E7F5102161C41D98EAFC8E1C21E76CD222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 82f19bdaa200c3a3056c6486f8d9171c832143077338572b10c4c0ee03580c4b
MD5 80e775e497e26256725722f158c1a7e7
SHA1 24ed3e37ba5a437a46beacb73c33c43eae3aec98
SHA512 09ac01744410777e518bc948ab2c8649e18de947108d5d4afd77f70e32dbc68ce133ca9306edde725939c3c02ac6e14f160c2e4f358579e678e152b19c349bfd
SSDEEP 384:oSj0X7KxkXqKf/pUZNCgVLH2HfgslrL7pLuLcifyTXOD0b+ErU3wRHGU/QT:oy0X7KxkXqKf/pUZNCgVLH2Hfgs1L7pY
TLSH
T1E77219676C4C9E3B0FA4CACCDC16BE4FADB5024B65D9886843FA582903D5ACF11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1ca32d668735d181226e33abb3e498e2af15f98f1c98179b898a656789f77b9e
MD5 29393cba1b149d876768629ffe40b065
SHA1 b430156e9ba7c8cc664b729a8323f0711002dcf0
SHA512 25aaf31bfcc67dc49019b00f93f2ca141435d5dd3da9550892b05d4914869fa9e32bb1b1c9ce1a3988039637f28290dcc44c2665c1f74a56a31cceb2a8b86e2a
TLSH
T124B012608446F512C48303F011D3049971149F10C705130653F06972DC262A14014161
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59239b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59239b.TMP
Size 96B
SHA256 402f93a32b98df04780a0dab4858ce81c052fbb277fd61ab1408499ac2d213d6
MD5 7434517a4442f5764a9c0991b9515770
SHA1 3a9ddd1558169e8104a8fcc018242a565b8ead18
SHA512 4741b3940294757c05472b6e66420893f8a10b0b53246879df662fc6f2c83e1b7829a4f34c8e0492da3104ab45591242eb3011e7f55c0b3e3bc17dade2c987ed
TLSH
T150B0222ACC82B222C0CA03B0208AC8EC32A2CF20C203022282E00E2BCC22BB02820020
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 a1e203dc51034b4614987c195d28242580436c6cf09ac05126b341f5a12551b7
MD5 9db5aaa8d0d15d324b3e5e5ec88e2444
SHA1 984ba1a67a56157ad7da5319ac4c911af29da44b
SHA512 f49b4a568f6572b7521524eadf83663b6ce73d07dc858b8149134595362ec6e710388ae6af11271aeb467e5fd101e5314c6e045fcb2cf28d5a938315f14ceb6c
TLSH
T118C02BD30D00C54B4734EDD82418321CC11BC19C4CC0CDFCA408700A16B4F330103738
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe598ab2.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe598ab2.TMP
Size 157B
SHA256 83826a327f66391912e933503052c768a59392db2af6bf940c59635cefd436fa
MD5 44ced20ccb5bef74b71ca9a46a4708da
SHA1 9e7cf3ef685a9ceccd890c53940774b3f984b98f
SHA512 8a2ea99f00ebb7cd766d17062c755917786371bbfcf8b2b16650a3465b4f13e41786fd365a1e10a1ebbc2b70a9b722a4cf66ae6d2c5726c8252d83a2324abcab
TLSH
T17CC08CD3091086474730A8D42428725CC12BCCAC4CC0CDE8A409700A22B4B334106638
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 6e07d6ab022337436dad7ab7dc81b84fad1d111b8a590d0a2bd57789d3da1c16
MD5 d9c61bcf4ff01beed217a1480668b624
SHA1 f41d58fb4f291df2767061c54f93d083d9fd1cc4
SHA512 478d710b492a6824c4a2b83dbcc39c93bc8b95f96f16ac186fc6a8651faabd87963b1505f2bef6b2e4817f6dcd0952df651f6df171e338ea4be5e802471d6938
SSDEEP 6144:vsT5qm1f+EXG1zQo5gb6R++JjcMW2VcVLM:vIwgf+EXGEb6jOMWO
TLSH
T1F2141371C62A6C9A17BAA692A00BEEDDCCD1584F1D0C616C31A26F5D1CDE277834FD8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 567edf173b785aed784396af2f1ceb7c84fb12e2eb9dbec8592e40f40be1c7e5
MD5 c754e1b8abd780f437d466673e221f99
SHA1 de4d57bae285e810f199fe77f4fa6473d6351807
SHA512 f852f79c7bdcfe3acd03bc1b99403be7dd0fd1904003599daa57a29671d5e3375f1f0b52888b882441b3500144c3a5827e10cdbd935d863237bbff1f18a8fcf8
SSDEEP 6144:TsT5qm1f+EXG1zQo5gb6R++JjcMW2VcVLM:TIwgf+EXGEb6jOMWO
TLSH
T14F141371C62A6C9A17BAA692A00BEEDDCCD1584F1D0D616C31A26F591CDE273834FD8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 50379a44f6dfd3cf2e7b613243d1fcf6be821cf8eeefae38e598adeb33e97d49
MD5 47a78dbbc703246ce8b6ae5017e7b5e9
SHA1 b3f88522be00e6b92685aa1c46be2e51c0ec33f1
SHA512 60bbc10641546996ebe4e5c605ca22e4c611ca2e6dea48c037aa2879474ae115125a87c8c19d32ba6ae9883062e2139623671841e9a087f2ef150dd52e50323d
SSDEEP 6144:8q5qm1f+EXG1zQo5gb6R++JjcMW2VcVLM:8qwgf+EXGEb6jOMWO
TLSH
T111141371C63A6C5A53BAA362A00BEEDDC8D1584E1D4D51AC31A3AF5D2CDE263434FD8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 6dd67ae78bf4bf5b45213e63e7ea03f2c0cfa3bdaa63a4c2fed70fceba8764c5
MD5 1809e2b3f20254035c32d66943bcde59
SHA1 0b0d88fa9674bab4edf5f4193db6a16ae33cdb0a
SHA512 83cadcc3b6a40e6e9f19368e0ad7fc820a8d0eb08c03c137c8d5a1fa5640efaa0c3f9287f1073c69643b985d6f53fcf8551edb1abc6a5d93a76e0cc72b07b8ed
SSDEEP 6144:Fq5qm1f+EXG1zQo5gb6R++JjcMW2VcVLM:Fqwgf+EXGEb6jOMWO
TLSH
T1C0141371C63A6C5A53BA9362A00BEEDDC8D1584E1D4C51AC31A3AF5C2CDE263434FD8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 a6bfe220e71eb134be267ce72830af6a0db83ab3cfc86567528a3c4247e86478
MD5 8e27f26fc6880c75f252011933b17c93
SHA1 0828d9540f382c7803fedc14fdef541a691b6d00
SHA512 08a1153d5ef0573ba273ba944809661ae9834cf5c7d4c58ac48965826854920151539b81f3dc9cc537df6951a822efe420ead7ccff65549e63f7249e2aba4413
SSDEEP 1536:eGyl1P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:ct++J3qUQm08KMWF0bFTcVHr6zD
TLSH
T1C49302B9991E7D75636AC6D690079CAC8CE3DCCE1514117C30C7AB1E24BE393A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExLoader_Installer.exe

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\ExLoader_Installer.exe
Size 160KB
SHA256 bec2ae84b937f42e78e99f5ac5834dacdec818cd843d34eb603749f8ac48b62b
MD5 28fc6a8a974e2272a37046f9fc30bf1f
SHA1 a90e3827ae9a6ea1a2d33d7d72669b8231330eb5
SHA512 6fc08adecf12b81c91e70e58d1023208c2ba852d44a78455ab8816fd32d07a54538b9fa0ca027ce6aaa194d157359e55d112834d629d82a1d875c192febdf835
SSDEEP 3072:lu578mYx6xJDbRUogxzHmF5gnoDZ0N7ctnnJ4sMK5Hme:lu578mYx6xbUjxzHmF55eN7ctnis
TLSH
T15CF3AF36E75DC896D345C8BCD9038945D931FC520769AACBB3F03E6A0979BD15E3A203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\VCRUNTIME140.dll
Size 116KB
SHA256 a06c9ea4f815dac75d2c99684d433fbfc782010fae887837a03f085a29a217e8
MD5 e9b690fbe5c4b96871214379659dd928
SHA1 c199a4beac341abc218257080b741ada0fadecaf
SHA512 00cf9b22af6ebbc20d1b9c22fc4261394b7d98ccad4823abc5ca6fdac537b43a00db5b3829c304a85738be5107927c0761c8276d6cb7f80e90f0a2c991dbcd8c
SSDEEP 1536:BqvQFDdwFBHKaPX8YKpWgeQqbekRG7MP4ddbHecbWcmpCGtodMzDZ92zfa:BqvQFDUXqWn7CkRG7jecbWb9toaera
TLSH
T1E1C37C4573A402B7D62AC274C1E35A46EB71B5458770ABCF03B689AA0F13BE1AF3D345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

audioplayers_windows_plugin.dll

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\audioplayers_windows_plugin.dll
Size 199KB
SHA256 132c0a4ab39e030baa937e20f170c6b0d446e3b1ce07e99375023c1773d60c15
MD5 8ef71a370f5840e6293d635fcc540333
SHA1 e2e789d1cd643a4fea652325ef525595cbfc0218
SHA512 f57be579d2c197376957da0d047df7f7e99ea4fc00f030e56b8b52e2a8b2338889c8d719282b1e89baca989ce890a6bfb222fbee0ffd081519c700870a25f253
SSDEEP 3072:U3pLbFAXfORkr5vGRkrhCpq6xWt6qeYOPFkmjVwEpYMAnt/dZsN2C7S:0VFAXfBvBCs6xWt635YMAnt/dZsN8
TLSH
T184143A2BF75940A6D12BC178CD474A06F77278A647A0A7CF675007BA0F6BBE45E3E600
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.so

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\app.so
Size 19.1MB
SHA256 ca4ef02c6f55922b4ca575406816a3e10876ce40e431be2e652dc25d17140404
MD5 0f09aee3effcee05c489c8bee495f10a
SHA1 fe50f53e1d9cabe33f1856530e92d2437757eee0
SHA512 86f7630c6d69c90de55c670eb94ac857b18070f50d905de52e16b53462396de457e790c9740bc8f1502125d9c8803abf9b508be3f5b2624b7694a697f8f919a2
SSDEEP 196608:Avhg5mJ4wzPgoAminpaZE2USd7uYLwC2R90/6q1XC47mKC50OyUm:AyuYnmNXLc+dOy
TLSH
T1D0175B8FE0A45310D07BA6F8F7BEB6928A187DE84774D38A45D706493A87D705B8E313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssetManifest.bin

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\AssetManifest.bin
Size 9KB
SHA256 c8b72a7552f25f2b9d28ca794fc8a5a62715414ee2d151a85441482dd944c4b3
MD5 4a2ba2b38d20514915e880c395705155
SHA1 4a4c6b6d52ad722f3bb56bf7322d11f4d945b6e2
SHA512 16be8bcc5786a3a0360f70a65c798104e600d6bd09f7abfa44183a37665d6642402149c9506182d9a0b98a5aa147eea0014e9e5c0e937acbe6063a99be1997ef
SSDEEP 96:+5AEnXfm4BuhX1mXIz4XyzXA43lAmmwG+e3:+5AEnXbsXsXIz4XyzXnRe3
TLSH
T1EC12815B83A065FFF571702568AA21645A02CE01D1B9EF9FF339941AA1F33E508FBD24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FontManifest.json

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\FontManifest.json
Size 332B
SHA256 9e0903a9ceb64e32f7a139a143324252aae77dc58dbefb1f211fe03aa33460db
MD5 abfb6c8e4501348bbd701d03698e9b3e
SHA1 242fd377e9edfb075022ceb8e4c7079fc8360c99
SHA512 52ee71f765f130849464ca9b03bc993894400d8fc8237761f73a32205a811bc86282f0dad99e7635aa450a3a60c8f7bc66ea4ac2886a6be55ead904656a17a89
TLSH
T1C7E04F1395007578C778945BE52217551D587388721DC45ED31D1662E1F626430B27A7
MD5 SHA1 SHA512 TLSH

Submit Download

NativeAssetsManifest.json

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\NativeAssetsManifest.json
Size 45B
SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
MD5 f3a664e105b4f792c6c7fe4e4d22c398
SHA1 adee29ec4f2b3cb2ec37ec3368f37ff805695d36
SHA512 b7df555970e20c6a50f650cd0df6ab782fba7004782b3f7921ccfd314db53bfb61523986628d2e05d085f4c2263dfcf54000ffdfc946b0158c5766fc6f1d0a86
MD5 SHA1 SHA512

Submit Download

AbominationPissed_DE.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\AbominationPissed_DE.wav
Size 131KB
SHA256 c87cb5c9c64b5798769af14563e268080ed82c7c8a1958f6fa1c1b5e7f10d2e2
MD5 b287fcc8278972ff72b8e46b481c4ab7
SHA1 71a91ebbcfb6debe7673a0b59079c5e90cb2ede3
SHA512 746f5d9232a06b5a415391dcc191902c7ec12465a22551342823da5880a16e9b9cb44da7052638fd0f5a2211ba8b97be6d835f5931bf34eb4fb1b96c6c529c40
SSDEEP 3072:vqmfGrs2QiZVhikBP8KKFgkrpuWle4iscIhSj/S7U5lip9/VrhCL:8w2/fSJrkWw4ivPzSYLE/bCL
TLSH
T1D7D3E112EA830A44D5B30735DEC028505EDAFE4CBC69666F701BCE90B353378E9657B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AbominationPissed_EN.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\AbominationPissed_EN.wav
Size 80KB
SHA256 3939fcaa3b0efd6d601da475abea862d9f7c078643f1063df51c83609cf47a6f
MD5 04de7b1fd5d0fce157b378ebede59df1
SHA1 97709ff9bef57080569f04f99efec6098cba3bc1
SHA512 31dcee1e7f1da84853bc8e41c108b1856020ea8da09bf2dd75b2902223f96540e148be9daa2e802358a5d78296ca5c90fa68c8f34f0a52b610f9bad446fff728
SSDEEP 1536:S14LKwKeetzn+sXGAxqcMN5fU0gB35ZIlRMjzVG+G894hDL0MZxvpKi:7LK6wznrvMcMNgxoMXVG+39+PVPh
TLSH
T1AA83E193F451D7500833C9225D467C004F9BFE9FADA72A1BB507EE80F163351BA766A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AbominationPissed_RU.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\AbominationPissed_RU.wav
Size 156KB
SHA256 d5f7ea66bb3bc77de30b0b450b37dbac1dfa2f30b8108fce9ac2752ce9ad2838
MD5 5c4c79ff61bc28f30fc6b2a221975b98
SHA1 82bbdd2bf6c5bb2941788c0ea594c0185c6a17b5
SHA512 d2fe68b06c3852111cb03ac6b55cdccc6cf232aed1170eeb4709493e6b1e87a2b8b2c30223e502dacafb3a2d0b07b62a595086336cc42e63b83e8443244b5954
SSDEEP 3072:0JvNZioDD5SvL/addGwHBdlNB4HQB+iyl3lIl7ka56mAzM/LBqH4C7iaC9e4pb0U:0JVZR5STaewHBvNBQQYJ2l7H56PzM/VF
TLSH
T12DF30212F4438308D53FE336ADA158E40AED749EFE91266F708ECEA67243350B927B15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Csgo_hover.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Csgo_hover.wav
Size 133KB
SHA256 aaa3f0f824d04ce5e93d1da17873d3aeb3c4d3a8fee25b7006851e4089bfadfc
MD5 8d6e22bde35607fe3801e02fdb12b022
SHA1 9bfc38b58bca7b17e48a864ca2e0b312c86b146e
SHA512 5623151380eb43a2191c639c940473114e47a579dd65970934ade8965ffe76e4b7018fa008e6412db91fcce6bc89aad9e3a4358e824f5caf0021ea58ab19c49b
SSDEEP 3072:fK3m1UDeeoncYepLphHTWrUASR0Sx3X1uuTMquPYzBRKgNK5NsA:8Aeo1wrixSR0SxHQu4q8OBRqDb
TLSH
T1EFD3B093FAF408B0E86A65776E1204828F233597EF81614D71CDC929FFD32668AD7706
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Csgo_press.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Csgo_press.wav
Size 99KB
SHA256 880cc2be6f458bf853dba78caf06bd2b97bc4b06fea141599db74e95bbd59528
MD5 5cf6f422f37b61b16f732e177c4a67ce
SHA1 3e227d262159caefd259921cdb888872ffeb8989
SHA512 b05219e87e9117195b3fb17a1075f4ef0c126de333618f1b87ef75813f3c6db40647ec53777d101bf1fafec99e275a8e9d048aeab5715b16e0ae2ec2f1293d1a
SSDEEP 1536:03g6O6sFvcKvm59Oawo31MnTocfrH+hr31DlzqVZ3Nk82dlk:03g6OOKO59/31MTocfrGthqVZW8oe
TLSH
T1B0A3D2A45BBC26A2F01F23226E4538413BD1219274E7287D799F5AB83BFF3C16176907
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fortnite_hover.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Fortnite_hover.wav
Size 137KB
SHA256 3e3abb7e29d38fa4b0261ac78427633e8bf6ddf3708de5a45bbdddc2a9f4aa6b
MD5 b66b7d55b6eeb2ff344a1af41e42a27f
SHA1 fa6d73d1a35e6098748997cd8c259b4df00d1f9f
SHA512 3bbde1d2426cc02fc2f034ff9276a23f2060a385b4fb4f6e17ff1b91b6ce904e807e9151c61b9133de3f5218a4dfdd8d0cdece9c2c165186acb92abe51f4b97d
SSDEEP 768:z5qzevj5RnMNTYWg34Jx2jxsF3HvOOLB2UImSw/5JPYLe5UlihX6xvDxgx1fLz4m:zAz+RnEa34T2loPRdnp4lUGxI
TLSH
T1DED319967AF292ECEE4963B21E46E9421F217442E9C1895FB0BECD4F3F20B1551CB139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fortnite_press.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Fortnite_press.wav
Size 111KB
SHA256 e0ecb5e92f1e13de05850d1f3894a54988e5f2c7eeded390f9040d2845aa4404
MD5 17112a672b04374113400b1c3c6a014e
SHA1 5214a72c0527fa73d25ce810f759cba05739b34a
SHA512 e319aa4852835b3d039dd63db981f197bdce301710a20fe7719b7fcacad152067f5033a846f0b556385b6f84364e66af5edbd4a6f39fa2d751ed0437e314dc6b
SSDEEP 3072:ofD2+DE780NFf3KTuRHMlgPspFerJpchpgat:Z+I82Ff6TOkXu0Z
TLSH
T103B37DA77AF196EDE80962721E46D9815F263502FDC0898BB0FDCD4F7F30AA905CB125
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Standard_hover.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Standard_hover.wav
Size 36KB
SHA256 46d6ccfff99264aac49bf4545b0ceb9cca2a9ee5a60d13b7017161e481440189
MD5 be6cc8afdd2ca2870982a0933cd9c8b6
SHA1 e3d9f678ecec58223e2d60636cbdcaf1b5d6d01c
SHA512 b58b789db7e6d65be7e5963387f7a8e095a2fd73d43400a6ed3c186babb880e541effa1f6265d4f89b8ebb7ebcff080dca656862cb19a5cdb67a5197c9fe6888
SSDEEP 768:yOaGEXZJgoB21WI0hVI1DfKy48/Z2ybz+9:yOVEbgByhVINU
TLSH
T19DF21CA2F4D09912DC4CB9365C77EA614B323953EFA11A0470CCFE156FD32968B87A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Standard_press.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Standard_press.wav
Size 64KB
SHA256 fe7e148d5b80eaf49eb7564233b87679e53fa4e68371aa347f18c1886a99bff9
MD5 f9a86f1da07c3dea7445f34ae4f793f3
SHA1 17e4f9d7d5ce2b209b513a3b1a6745adcd898d98
SHA512 2052873fba1482616e7be708f6328d708bc095b327416bae6c83679ef4e5f829e8d4667292868fb7ad8fbea52a54d069ef6a52f8ae603d9fabffab4c51336c84
SSDEEP 768:KKeoQaXRJsFTfQOhgiIzqkUS/K5u6sov/GEs1YyKNXf763lQniApC2ySz+9:Ao5sxukhvDs1vKVj63Ae
TLSH
T12953AE92E9F352A8E41462722D96BC441E123ACFDDC10A67305DDD17BFF15920ECB2D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Steam_hover.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Steam_hover.wav
Size 55KB
SHA256 5f53f2d8499d27dd906587a6d0aad05d5c387ca2fc1c12f26c76aaefa690c7d6
MD5 2d9be331ac50c9a82af0ffc0678bd575
SHA1 c455196af8db5823ce8f6735ea4a4f70a595a2ca
SHA512 645210077b7110661982a76484915f6f6e63267de472db86a89e5ac8d65a790a01df8bfe807e8d309c3609ab009c1fb1e221799223c648465d22763e7ba00bbf
SSDEEP 768:TBlMhyvnjSIr/fqtrcdDcPY4gspSp4xsbJg4y87H4PNBRpFwLJJX2K3DfLRN4MHP:ohyPjTfwCDcPYIptxsG/f3Fqv2O/
TLSH
T1CB438C57BAF5262DE48473762A862A014D23118395E22D88B0FFCE5EBF745238DC752F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Steam_press.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Steam_press.wav
Size 170KB
SHA256 e7c36644507ee52d11ad20e17a165bcb4bb7efb14c573cd29921088c03777241
MD5 f8eab8f1b49b806f490f8716a8208190
SHA1 d5e7401f403733c071347616a2c0a069f74be52e
SHA512 71a75f1e5fe3204caa70adc9d8c8a96155dfbe0b131afcc4bcd55908048ae314b81a84b54be21a1f99321e89cc4c77042bd0d0ad4033988af8d0042060631d31
SSDEEP 3072:MMbqqHdE7++/ieS7egbwyo5RCRYQkMpHfBEp3ZDJgy7iFM/DhHK02vN:MMbfHdEK+/E7pg3xMpHfiHJfmFMtvk
TLSH
T13204AE02B2A95329E1CC1E321C4589C11FB5B54EEE81997AB1BDC643FBA14235ECFE1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows_notification.wav

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Windows_notification.wav
Size 568KB
SHA256 90707fa427cc0dccb0a6a6cee40ee27cf516164342f6ca19adf496f068d03c07
MD5 bfad965214e05d9e1f6422b203ddc31e
SHA1 23b439523914e55321a115cc1debf6d12fd545a7
SHA512 7c8cc4d06214053bfce98d4a5e860c966ac645952163e0f36636de3f97fee10cede49c7a174498548dec8de1ef0b3a0b4c3ab48e872505b8edfdfb7f57d849bb
SSDEEP 6144:08IXyFTO11dT364hJzhfu5HczqxEud1fYqMGpXHA0GtizL05823s8bJNjNGSZi4:0VXyF8DT36CzlIH8epAOXgvB3sWNJZ1
TLSH
T1E4C4D086E0668B81C4DD55369013DAB607166FCBDE034AB0307CFB52B4F24576EC5AEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CatsDay.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\CatsDay.jpg
Size 103KB
SHA256 b8332b40114e2084721257c97d874e81505568d7a24cc0fd0fa3e5a4f5fa243e
MD5 a1f96b617652f4403c58dde351de9ab9
SHA1 87b868edcbd6930506fefdf8fd86c6b19941516e
SHA512 9959767827239753d7cbc87d027d560f636ed5a24e2539fd46fcc6f3376496fa3519274246b93ac6a8265c670d1c013e30739505cc86975ead6100865cde9160
SSDEEP 1536:Z8P1qhZ3y680yWiu6U7JclEe/j5dPtYub5lStQz4HyXq+QlOJN96HiSo/QOrGjN:Z88iOVsEerLnbjSayqqpknkzOr8
TLSH
T1AEA3E1338308D2A7D5680F71D59B6F103FEA95A1E2208D87D714327E98B532ABDDE2C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cyberpunk.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Cyberpunk.jpg
Size 74KB
SHA256 4e963580446656de3ede924b1c729eb3e0f92eeb342458d8083995c4ccfa6df1
MD5 43979b091ce838cc5e4ae14d9ce4f884
SHA1 c297977637a3745e16a0b099297d455028744593
SHA512 3331548d88a6e8bf3763604700ccd6c4507806270f9a6d4197263ad98b6380cd8292e94094cd773116606a356e3366171f2b0fa4ab69a9fd2ad8fd0d60ffb52c
SSDEEP 1536:MvrZhsGuOluip1e6DWNILnUGhPsn/W16gwari+1Ep8gYKcWpqGUxYQSD:MvthGOUiptHC/AftunqwD
TLSH
T1C273022DF553B211C82F8EF9DA46356863CF9EC8EA06225E5C54927F2AEB344D010F8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Easter.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Easter.jpg
Size 80KB
SHA256 c8bcc97b62941f532a211a53e85e0f6d928d9e40f0c0327b2d9560af7abd6167
MD5 0d369ae944642bb9181c4592ee7b9b1e
SHA1 0b2a5b437f7e524d55e80c6ca8d0b75728f14687
SHA512 5829ea0b79315ac34b542992e9808d6fbdc98227abd29bc5068bf896fddfddc4d0ec104f68355736337adaeea503fc5ed8674936c07281c231aca810b2754be3
SSDEEP 1536:0JbWlxLfQ7XQGJz/A9VGjRVnElf7JRlBnxzA+YMrx:0ksXQGWGjRVElfVXB5AfMN
TLSH
T1C18302629EBDBE2DF2735D793112EB13226281B2150219CA27DDED42DF55A470A330EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fallguys_v1.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Fallguys_v1.jpg
Size 63KB
SHA256 22d5601fe337ccf6311f18caeae8c8824b5a889b854b037eb7cd4a8335f34d0c
MD5 9f9f08e3873d306bbce569c7a6597c80
SHA1 408cc8c551b9f7b4e38252f316d8d10690ca8dc4
SHA512 4f184987a34699827ca422b2ee495ce0035e118e2fd7716a0a3e7c7642a6612b1811399804e21bb91466d95cd105e6cd97a43fb0c071176ed8f63a2bf24b3c31
SSDEEP 1536:nPteMPY0ViAxdIor7gyQgTWlXOfuHHMWOeK8onAjsRh:nPXPQlMgHflXa4c8onAoRh
TLSH
T17953F293F3420D9BE6DC0A31ECCB4BFDA950FC9095E4A26507AB39838679DB43D76110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fallguys_v2.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Fallguys_v2.jpg
Size 79KB
SHA256 a61f74055bf69f214309ec81255dd0c49f1f8ff3092d35bd6d2530e7109af665
MD5 085ef851d7782bb627fa3a96f65fd2f0
SHA1 5dd95690049d4ccf81189475ba02a04fb5638523
SHA512 286bc7b200acd7f9721b70c9e868c88294d13510f19d3bc7988713c5a8538d1906b37789937f9d635ee3779ff5ca99681201e36cdf31bf0ccb59ba1ef9505871
SSDEEP 1536:tkDbrAso11T0wrHzE1GGK1UU1QSdnqs+dqr6PQM9foocqN+8XFW+RXaZ/7:u8711TbzE11aUU1QSMp26Ph9ftcqoQXQ
TLSH
T13683025B76BADE5380A483A0E663EF5E4FEF550811A80BF2B0D435E137B39DA46548D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FishingDay.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\FishingDay.jpg
Size 48KB
SHA256 ea45f13f6cac2ac930168ecd3e2f1409b304f8ccd1875b45e997b01743392288
MD5 fa0290a7b30ea4c41bc8bb2bbcdc22cb
SHA1 bacb4d6e6090249a43a7add53a4608afcc9f02de
SHA512 eca8b744d4c8f757d80b6cb045ff68f1d4700573ceda13ad9246803ab272dee5ac6429001ea7b39a75241caef1df0c4d0e74d6983a023b64c78dfbf13ada388e
SSDEEP 768:ooSX9cG1C1ujP232ZVG/zal2VbdWERm8lXYnkIH94sDqtWzlsx1f9:ooQUcjP2YRaQERm8Id7q0zc
TLSH
T14F23F2083D0DB07EE9B644577184DB05B4DAAC16FAD3D26331D49A41EA4B04ACF92EEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Genshin.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Genshin.jpg
Size 44KB
SHA256 f9d64e43ed49ab485ea77b842025f3a2fade14e277a8991fd32900218ec1d055
MD5 812f5fd3b0ce0d6d26e793acc5b2eed1
SHA1 f9fa1be5237cbaa858a9858d7976653e5716fc44
SHA512 d6a34c3a07ed3eff9740b4df3ce690de5e6a71fdfdb4d640f957ca33d1de1f9e7e069a93c3465eeeec4dbd5a2b9cf4bf2fe419894578001110e000140fa52c68
SSDEEP 768:L0+lBDce6xcriOzRauhIP9KODXJcsMj7t2SLnkcB6nlZCbdlNItOhfw:weVeOz7I9rO7t2OB6lZCbvRhI
TLSH
T1D023F124DF63E413D093DEF0FE9D0F958195E59C2C891B7714A0E47C942AB091A4A9EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

God%20of%20War.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\God%20of%20War.jpg
Size 85KB
SHA256 bd9b8ebbd5e12f111b386111fbcae08f5545e6c8bacba466a33748ebbe7caf58
MD5 d40d3b1641dda951397f85d91cc7da84
SHA1 605fe73ea3d21abd3de674152cacc77cabcf57bf
SHA512 18fa5dcb676a43e1ea2d7384f7fe34db2da738fa3b96f374b673fa935303c1226c72b2eeec65f2c96081e4da1a8ef742c60cef82a003510defc48e8bc91d3fef
SSDEEP 1536:KVbo5/ZD2KHfgrFRZL4+SQ5sYobwGLSSNk6n9IsTET0YC9UrYXyS46APK1ZZ:KVbo5/cKHIrFRZ8+SQ5sYobwGLSSND7R
TLSH
T121830281EBC19676CA6C06305AD317262A316DB38FF2F503055BB4F9B9BE6432DB16D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Halloween.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Halloween.jpg
Size 85KB
SHA256 2aa6380396ea4a1352e62e10472751e2e9da013361786868a8357bdb94b40345
MD5 b1667406a07854d612d31a5bc3a903f7
SHA1 4a41499f9810a3269ed6739be8d6de87f873647d
SHA512 94915c09d8aa046e63c3dc660b3713c5a4274a4c5dbca3b32ebdc02fa0221495bd7cfcbd1408c01308f4c61151d4ca18ee6fc0c37bb7418e96a6ed9fdf532ccc
SSDEEP 1536:bsuJIHp6cE3kAvnGV0FiGFjgCyIF2T9CAYY4ShNsXvBjL6aHQPBZpQmjUpi+P1/O:bsu3/RGMgPMpAYYjhNg2awXpQmjGtNJK
TLSH
T1F3831398226A673D5A6DECF6D826436F823FC1B54F47774ED2C11760CF88A86C4AC6C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Halo.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Halo.jpg
Size 68KB
SHA256 d20d07fa5ef0796ccbaa0a63e60a6b1005123c8e26a90b18296c5e3b95bf4ee1
MD5 3e6dfc7fefd784766fb0b18e33468c79
SHA1 412c5a7cafadb65531790e392ad2a8bb897ec859
SHA512 d3d3a655f2d82e5df43a118b45d8cbe9617ec1b12640bdf7c3eff01cedf1af90c794c8ecdee6d7c9dcd7f5417c6751bb70fe8ace33da01568eaafe70e543e773
SSDEEP 1536:gOtIGhTagKdHcV7HhlIjr2vJBeaRnogsQh1rz3Dzl9aPb:ZSGhegKd8NHrIjU4aFogLh1rzTzXaPb
TLSH
T19063F2524FADEDA3C49F253502DB278BFD167F29000147655BA9F20ABE367B83D59E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IceCreamDay.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\IceCreamDay.jpg
Size 42KB
SHA256 87c21a0571bc8be8cb9dd18e14218ef7584c1d4b7ddb71c53f9273b34dafe450
MD5 a2920f9b0f77ce3f1a7f6b81ff32ef2b
SHA1 67f279ff65376502e2aab9f8b8d4235d04f19dfd
SHA512 f5b5353aef05bb55f2be8c8c9f3cff0bcfcdd15cb2a78ad278b7ace492cb9b943e01cb1e9b422c5997eae833287912ffed6f48fbe4597d03baaa05a48fe77afd
SSDEEP 768:NGtOWQCiq2qNlmTkvBiGMDdGWQXJ3R40qCuE433SOSf0JtuDUjXdqFkeVnL:NK/iq2qKTkpWuUE4n/SfOtGYXdgpN
TLSH
T139130257277013EEEE7CBEB124EF0E45AB99390080F5E9477E924231C650D029FEDA12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JokeDay.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\JokeDay.jpg
Size 48KB
SHA256 8d35958eb67721973e9995e850d9b676b3b13e32160339d4683b34ff28656143
MD5 10afd0c069c62d3dd89f470218529c9c
SHA1 f1780a4dfad2af62b1c6ff21be1147cff88258c0
SHA512 1a318d2341ab751d1ae4e5fd2370f40a9b54124a11bba49f00004ebb9ab9c6bd5ef9edb9e3a6d9694e0a150fd339cfa3b31f38f45fb52b9ffb285c8295595ed6
SSDEEP 768:0NfR9jNTwSTVmaBu7/Tq+dt/ZS/5NdDKBBNUU5tamW4PWzrOSsG82O8ugKQ5MPdL:0tR9+EV0T3dN0NdCX5tamdOHO6OPgMdL
TLSH
T12423F204ED02D101703897B3955F6F61C747F990DFAB405B26266EE886E0ED3528FEA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LoveDay.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\LoveDay.jpg
Size 79KB
SHA256 c7b7eebad2b2a0ddf6eedc8534864c3e92b54246ef6599a85d504b82c989a4c9
MD5 a4924bda63e4734ce6feeb6376555c0a
SHA1 1241bdb1bc081f4f932554c028fadd7a2045de9d
SHA512 603cb167c2d87961bcf8a3eb461994cad5cef5d1da08945fb584f6647b25b317987732e732f0e60b5f92f4ba7b6b3fcad4157ac922bc3887dcac438a78fa5ea5
SSDEEP 1536:VHJ2v8aYFgI6VdOAC/aLsKvFkWV65Gy/gwdpzKn+SY:FJS8DVp/ivFkWE4yYoZJSY
TLSH
T1048302D3CB012004D438AFF0CD1B37D4AB2AEF9977251DB6AA8DD27616332141954F97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ori%20and%20the%20Blind%20Forest.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Ori%20and%20the%20Blind%20Forest.jpg
Size 84KB
SHA256 3c4bf83afb0b8533d0683463da2ad126747351be380fb62db8754fa0d068be73
MD5 6db610dba286395d41ad12361b3662bd
SHA1 0e7b14f8f0fa79166e2476d777039a8597dd3661
SHA512 830e9213622770300114a1d14cd23306ddddfaf53dec7eb464dd490de1241881a618ad7d83c78d66336eaa0ae9918ba6d40567d4e9e5e4355ea79090519245ac
SSDEEP 1536:2REHUFkhfoMVdVoDssRPeCWpeP1YuN07pLufwJbhLPaNm7nIzdK:2Rmoaf/sHjCeP7OpLPFhLiMUzdK
TLSH
T1A28302D099D78723B9448F0303EEA6D59DFF4F5E2204BC166B4F9EA8105E1484E589BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SchoolDay.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\SchoolDay.jpg
Size 62KB
SHA256 1def224585afda2941efea0734f2b21d9eb46f693b0f6d73f9a0299ab9d07e6c
MD5 87a3fe79d1b4f3a293b4d2e28bb91d19
SHA1 3315115fa9f5b05a9560da92aefecbcd1eefe592
SHA512 a390a650f327b25ebdf84d47a95a653b62f5605aafe61a88abaa40c70d2b6e67402970a5c530a17c770108cfddc542f0b1598f7ac0c52b32e4c9dc18b798a36c
SSDEEP 1536:VYDgMnoyL1uaGU55AjSSaEs6OScqPGeEieh9C0:60lnaGUXSavCae5oC0
TLSH
T19C53F157AF0CE4CAE86957B6D4B703B33FA14CD9879B3BC172887062947A29A9C351C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SpaceDay.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\SpaceDay.jpg
Size 71KB
SHA256 cbf60e1801fbda3864ee6b81ed83c2b020ec64060f1e869dbf6fd83b9ad8cd8c
MD5 3ef7a4f699c34f37a6ba64d14f15a97b
SHA1 6eeaca884c284d0a28e795f191fce0a077123645
SHA512 6818db2633a01454fcc2aa14d053d2cd9bb9ecc3a7b76e05ea254e17fe834e7e382cf16f7e86e872fb16368f93089706a06bc5e243f335892ed9b27fec0abb37
SSDEEP 1536:wHaS+yhn3Wf886ZiIq0axzoCwRkM/tKm/BzZHhAdWFFcGyfkd6:w1JhGf881fJzoPKOKOH+daFSfkd6
TLSH
T19773015F60D6BD82A71AE1EB97710B59435B3DA208E4396CA63F7077663ACD0E3801DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SummerStart.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\SummerStart.jpg
Size 79KB
SHA256 3772c480c6277c988da59101fc0b6f07bbbbd2fcc1a92c205e6e3a0030f01b6c
MD5 090bcd03ad0333cc1bb843cee4d274c2
SHA1 b50814dfca4103f21d7f3cc14e89c71197b46a34
SHA512 fecdf39280fbf5cb4e49312497451c00adb14883e2cbbeb1a42fafaa8b9ccbf1c45232330cfca3f98392c1beeac1855e7a7529ebcaaf988f5e02cc786e62efef
SSDEEP 1536:k3ZJ5x+lVDbLOjBCMJAHFIvvB1egxgZd22gUu098554gyb4Esys:k3LTkVIBCMJ6KTPxy2DUti6sD
TLSH
T14B83136D260164709972C8FC070FCC3AB494C85A454733F761FE4A89646ED22DFEAE5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TastyFoodDay.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\TastyFoodDay.jpg
Size 81KB
SHA256 85a6cf255ec956a5c759759122f011e32ce03139edd7041c69fe67eb856c5a78
MD5 8f56457e50a75c36cb473acab262cbdf
SHA1 7cfd112eb9f259d517a989c7cf39d0a7d87efbcb
SHA512 7f71932f4f05e3021f91278bc3d76601547ce112852d516a927aaa58157c990413bd284eef65dd5bcb085a65352434b0008e614e242d833a7ad9101f53720e9f
SSDEEP 1536:PpyQsz2+PJv7QhZt8MqpQlfAgO4TZtHouFp9xPJ52Qh8pAGuE7SNltYVSpo7vT3:PpyQf+hv0eMqpQlfAgH96uHPth8pAGXR
TLSH
T196830232A789D99492F03D76A9ED073AD5DCC0B86F4E64B333404BE89694FE4D71A270
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Warcraft.jpg

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Warcraft.jpg
Size 98KB
SHA256 f88b682b452ad60cf3803cefe5c5c992db9688d47e550d757fa9c2d2114e72ec
MD5 0141badd4ae9147a4058fdde8f9c272f
SHA1 d8ced687bdb7be0fb534a62e28d1909b9e615e19
SHA512 3d5a0526c32eb28fcf3ce84d3c9abc446215de98c18599985bbacbba262c9c961566595cd374b69f0a8feae5b4ce4de616f8d411eb7eb71adb44929e6a8a6bcf
SSDEEP 1536:zFtXFrwwhfbbdLB77j9GoVdIIh9jCEkkKPegLKva210zJKf4jrvXGaiCYuM8Mn0b:zFtVJH775xjCA+/uSU74j7SuMf71SWS
TLSH
T1FAA312F86160E8A343F56BA37D32B5829F138FEE65349C5194F10F12277D819FB6211A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\compressed_logos\logo.png
Size 81KB
SHA256 4cbd8de2536b17be3c88e55204a9adccbaf5063414eced4489d0a7e20b82e024
MD5 e3585f97ff175947ea2230d7f61bf635
SHA1 72a93bc95ab63af417bc4e4b576d3182f739ce2e
SHA512 6d2e31706bf59ef78cad0c3006c11f3b8e91402d1d94cb67a0de2541d68136b848e576aa91a6e020b775f93228223daaa57aefc31e41431d381d5fcc68a97cb1
SSDEEP 1536:4UHktrHtHj1RWMk3MPTUIPMLCELOfqSu8eyihKAgpn9lI4cdI:4UMrHt5RWMkOPMLL6qSXkg3lIDdI
TLSH
T18983128B46CC2ED7C6465BE3133D147693230C37BA3A50A161D2FAE6E7484BD99C18E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\ar.png
Size 3KB
SHA256 825b68362f24ce7f883f0590b48901277717a3f5af3b3fd5204d52a0388b48e6
MD5 38ebf85cba841d9324bb40bde8ca09fd
SHA1 4a6c5098a578fd19b641d1d2b46e2658d24c7303
SHA512 5f24b796c2ae38c867e601b0f34f6c93af6f9c5e5ef652dbe092760eb3bd28bbc445358461c778d90669f73323ba8a06a0c2551f32a59ed99d97005256a715a2
TLSH
T131815CF5A9AFA05FD3D2396093049127AC3B07D138FD1A5BAB71A51D45AC335E40CD29
MD5 SHA1 SHA512 TLSH

Submit Download

cs.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\cs.png
Size 3KB
SHA256 3ed33088d5eb9681f5beeff8891d91409e5c16d973e98631ae2be6ebb20137b2
MD5 641547e903368877e1b280b3312552fc
SHA1 896f2d3e7a9d62a85793284862dfecdff2ac8c7b
SHA512 8fca14814912d84ac5311e7b1c23c0e5df3db54cc30b60b775bf44c8719e8f306c433fe1ec23066e37ff5f56c0e9fba8a093df49a1f548144de80777f3571668
TLSH
T1D0715C6227D5D4EEA3948911F3759331E44CC0948494B0933F29D0EF66FFA1C10C27AC
MD5 SHA1 SHA512 TLSH

Submit Download

de.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\de.png
Size 2KB
SHA256 6efff98164dfdaf41fac99701ab7947c871bde6441818552805db35f25246af2
MD5 fb91471aa0f62ba437fa596bbafde6e4
SHA1 16da871688db0f6deb815af8cb2b04b1790bbb00
SHA512 a4aa3c5c9efaf5d6c41f5d2f1cb0bb864edd28d2e972b84094169cd104bc21f8ffb02c1301d09156a2102827c9c0d7f6267f978d1d61a5e16cc103e588d05b57
TLSH
T1F6515AE277C7D93ADF118877AA4706E23E82CB8114605E4086200CF190DE6B1A83EB5B
MD5 SHA1 SHA512 TLSH

Submit Download

en.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\en.png
Size 4KB
SHA256 448a32b3d50aea55f6c8060c6f09c38da95beee18d914b54f83ed27c029dfe2a
MD5 a59145bbe0ccb2be20027ffa0954eb11
SHA1 d6e6d9d8ed593c39c2e0f3d41f4b180d31ad3650
SHA512 a846f4f0940eb4c508bc0f4f8a7c3e2f5a1ba32eb277ea21e51f0ac772f8022610e0bd7286aefe9ed821fe9f242a132b6abed1e6bf5ff667cffa894c744459fe
SSDEEP 96:acHPxLunLZhe+HkwLhrtmi80PzCsVVvSEolRwerikCl790yoAA:aOJiLZc+HkGhhmeHVSlrriH0bAA
TLSH
T188A18E9B8980C000EA0C0E624B1869850E2F4299450B6B83D7BC8A1A076D4FBDB771BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\es.png
Size 2KB
SHA256 df31aee7fff59445a784e860625379d98bcf4c409cdfe5105256f70466eaa49a
MD5 ebe44eda234e7bfda7c43815ee855e76
SHA1 9dedb3b5691e8ce4d7365c20cc6e57ab4aec7025
SHA512 7f555feb797edd06b36d120e274fc21b3e80d68e42af16395f01a03f47c73e9cdbdf616276675a11c6ec7e83760b194401a0a86068d0d6674b5df5e0d95f6ea6
TLSH
T12D516DC368C05125472F917B4E2B34B1EA375A0AC218B8353F648ABCB604171B15257F
MD5 SHA1 SHA512 TLSH

Submit Download

fil.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\fil.png
Size 5KB
SHA256 77bf3a622ddf9f62a44f9df5ed7394e297562937ba2649a601c57a4ec62cd99b
MD5 df960e69526990bfdbb2456c285157b7
SHA1 f97d5a440849d1a1c8ce0bd0a276661c7b6f524b
SHA512 944911c8f9a29562888e3226b6b12e391852a1bdd98cc711f98a25a5e217f84bf685c2566b6d11cc3aa1dd92b8b7d5a674f97216a7e43162430067be7d501325
SSDEEP 96:Ou4DbYK2QBRxoqk3GEETfRUb/0TgrVuDA5u7qFmWUUDnyKCRBnbnjPZ5z:kDGQTjkWEETJUz0Tgh2A5u7qFmqANnjP
TLSH
T164B18E523313790490AE2E240AF3FA25E52258F91D776592912F1DB8CDAE30551BEA4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\fr.png
Size 3KB
SHA256 28d7eba3ae581920af075b4ae535a862e8161d51755447d23d746d381c682cc8
MD5 3e8a6a6d38ef80ec7807202235e09066
SHA1 85242f3115d7eb1f21b5273cd1af2211f5338e24
SHA512 700e2cc3f959f600be50e102314d3db78c76658a1bdd45b2951b2dc7aa58b405eeaaa3a51bef95c46d137b697325c63063af28d126c6a05920ec98e7c8e333ab
TLSH
T191716DA8A7FE38B4FC2FBC992C635D5811931DC06D45A125021D5C7C26F88C582FE4E4
MD5 SHA1 SHA512 TLSH

Submit Download

hi.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\hi.png
Size 3KB
SHA256 b2279f4efca958e6eb5eb6f9b1050a51516600e15d1facb9e80c890261b6e959
MD5 5026218735e8f7ab69e728b8ed45df7f
SHA1 82a224bdb48c1073d5d5667075d1ea760c83195d
SHA512 e97a034c75f3b300072e8fdc2d218cc0cd2b76c280d1d2b146e85520ae60cca9c225ec6323a1a0fe5eff70e2e63fe948f77c17aa7f8d332eb6fb1bb97075dfa0
TLSH
T159713BFAD91D98FCC36F853111064B1683A178B47915A21E50013598DFAF964C3F965B
MD5 SHA1 SHA512 TLSH

Submit Download

id.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\id.png
Size 3KB
SHA256 bb1ebe35eea1c8459397e2f2ad70b15a2a0d78b82ec40c1bfeda9f4016daca9e
MD5 085ac2b7a59644233c4fdceda3b07be8
SHA1 befeafea6348c83b93a8400a8c191f3461134a14
SHA512 b574981e960ee27f305608c950338589fa7924c1424cdd7aec853d3b62d54a5b24f2a09b770f67baf81bd9082698c553a42f5a363ec4d8d2d20cf33f912ad0f9
TLSH
T16E612AA6ECB91E8582C07AA291F6207FC460117E48F675917F926CFA6084C8C45E5BB3
MD5 SHA1 SHA512 TLSH

Submit Download

it.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\it.png
Size 3KB
SHA256 324e6cefb6d3b59c39e5471c422b9e0f66bc146d6611f141fcf02a617dcc0491
MD5 6b9c17a6feb40fc3f4a443db57696a31
SHA1 9817c4ef5e3cadbbdc691f561e3ff0b3700d0480
SHA512 87cc28ef17d19f5eac7381241e6cc3e994d351a9f8e199ceb0ba47a2aa749db4e4bb4afd5796a462dd92bc59e04bae4530779d129cb4f33a2dbb1ac3151faf07
TLSH
T189714C8217F786A9C730FAADE063048E44EEABED9C655DC4D578D57A0877487A340543
MD5 SHA1 SHA512 TLSH

Submit Download

kk.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\kk.png
Size 5KB
SHA256 e8f96e39f85c458bdb5322f59e2cd9010ac57a40ce6bba5e67c9da6be2369a48
MD5 a30a24d1ceea5b68ca43dccfb163dbcb
SHA1 b4591fe45e117557c2fc62a4cf06587caa63515f
SHA512 322907e3696c38eb8f74792e9557c7ccd4b166cba7506619c61eda1c28b638e029fb472d79f1950863d9abb75b97b7661c31c361e2710d92746cc12b5a4feab7
SSDEEP 96:uQPAHCVbX86RBs2YvflKeOixvnhubRNl6Ph81CPyyN16bY0vCerX+jSgRJOAONIy:dAiVbX8Sq2yRnMbRNl6PqOyyNgMJeafE
TLSH
T11CB1AFA0FAD5E6EFE4E0D5108F00AE531C772EF129F8616489BCC6CE1908CE56651E77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\ko.png
Size 6KB
SHA256 b1e31d13dc3969e160db78bc2eccdd54c3fd3ab0ec77c0adb62d99bd37deb07b
MD5 eb11b42615822f97de85e8b55b596af7
SHA1 7dfc9984985344d4b478459a5aa984a9ea97a1a9
SHA512 815c15f138ba850fd03890bbd4d5a5b490e906f1b526cebbd292b025d8cca3ec0cea5b697c3d647062a4e0dfa0c4380bcb1113efd18b33f9dc2f39d952489a5b
SSDEEP 96:2BXo12sMaTnWReC+kFQlJQRldmuWRtTqIC1wuaov9KuDym8UnoiUGSY+mH42vK4M:CXo12VaTVwFwo7OTCtKuDL8oZxTVCZh
TLSH
T1ACE1AF81F1B9D1486269C07526CF8D77C7A627D0520DFD34F3AE68A80A12BFEC45868D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mn.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\mn.png
Size 3KB
SHA256 933638c1270f35ef544671dbe8fb1c58631533dba437aa7c87f266bc3a588ab7
MD5 b686068d7e2b699398226f0a79cedec0
SHA1 b969ee6f8d4a0dd8031fbd54b742a9b90059ca04
SHA512 4bc2a641ddeb132f7e9b7a41ddd531a82738170d124bd25ef6faac6ace45fda9349913ae4b03f2ef84b8706a1229ed6502a52ed3d57c75175b6cc7ec50092a7e
TLSH
T176816DFEFA1E84888B7FB61F04D7609A6D6221667B254102F87E321B1D0509970AFE43
MD5 SHA1 SHA512 TLSH

Submit Download

pl.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\pl.png
Size 3KB
SHA256 9264c17b4af98e4ff2c148119cf6cd4a027d641ecc4736934bd37d953e425371
MD5 28526ed077c502b6e1aa13f5ff02d680
SHA1 84c445ecb04f308e4e5ebb81402edd90559d4d7b
SHA512 7088979635f2086fd0038b2572897978ff7be8218b12ce8fa820cb12f94e6124001c1952b72d9b5ffe18f73de3f2394838a89f3acb26301148cf5caae656e28f
TLSH
T10A61AF8134F8EC8E66B809F391B6FC25D42A123FC67A7580663683DD03171829D38B23
MD5 SHA1 SHA512 TLSH

Submit Download

pt.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\pt.png
Size 5KB
SHA256 6a2d1a02147b23965982968168ae7d4b9f62f9703efddbef634946333f8e5884
MD5 ae35607f43416c2b8a87729be699a7a5
SHA1 e0f01d184c39de29c4e4c8008fa305b8d609462d
SHA512 1c4a2afa70e05fcf4445c4ec11d5b221ffd6710deadde27059bb1cf50c4959daacacf3faa38dc0a7b5b2b8bf87e14475123726f5a87279d0cb4eaa1355547c57
SSDEEP 96:uqSkA8avgQuq0xbTVD2EH0ARhIkN1HervANyP3x4VNRzPUmoIkZQYMOhN3QEReAB:u4DKeq0x1Cw0ZkN1+rv+yPmNlPUmohNn
TLSH
T199C18F75F30ED76581746AB7E523BC744753558A85C8ECC31A57AA34C1F711C2344E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\ro.png
Size 2KB
SHA256 67f760804d132990ff089e38c2e3b295d6b4397a093f5ced56c3b31e5d87ef6f
MD5 75136aa615b40df332fe4861c09f72f8
SHA1 86b2686f2a0a265a80f7a40ca3a082b7d5850bb8
SHA512 832663ee31997aa90317e06960e8b125c07b00006814ba82d7a8f216088c7dfc15f8ea52ec5f146129f2ef3c9a1613e982841e9f9370d8059f646579fb3bb58f
TLSH
T1D0513CD5B05FF3258B2402DE3F49B8EB9F679616545E65FDC92B6E0A056280D914800D
MD5 SHA1 SHA512 TLSH

Submit Download

ru.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\ru.png
Size 3KB
SHA256 8a37fd12d581a9028e358f99f7822c0ad67bdbfb6f8ab42d0b0590ab730a112d
MD5 447d17d746d32b352ba4f7a2075902cb
SHA1 97c91f2b6c6e05fb3844cf5fe84542f1f907c422
SHA512 27af0e167a275a4cef283b30c764d3f328222b7e875de411404004929ae55026e83294d5591475ce6ae83e0a514868aba37cf1396aa51ba04d8e57b2d113b56c
TLSH
T13B716C8E659F31FB4ACD0D2F85C251BF4D0F921B8D823C57645C83E30625B55C3BAA82
MD5 SHA1 SHA512 TLSH

Submit Download

tr.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\tr.png
Size 4KB
SHA256 92edc229bf481e2eebe9cb2c6207b11aa3f0ce58f67fb13f5613c14aa9725a44
MD5 f360031a67cec956c78de6fa1d8abad8
SHA1 6d23f3d1fa29941f8ea7c30fe8da7142372535b0
SHA512 c8479dd53df166394a874e6712de269f78a5c6a4d48452d0fd350390db59d20b72913cb3fa4cc923bb29487e60eafdf575b556c573cc941968e59bbd13a42f53
SSDEEP 96:M/L1ZqCERKgzbSuvl+ddWaFWWoDerlTFUk6qTS43DpMClBa5WJJ:AUbSOAIaUWGyN3TS43DLJ
TLSH
T1F8917D7311D7905A84570B5E802B9FFB44F8AE348490F32A4A0EB9231B85716F599F05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\uk.png
Size 3KB
SHA256 f8e47f27ba271b6490fc53aaf4fe20aa0c68b319009fb502bfdf7fe5acd8aabd
MD5 8f852eb4d647844cc7d295123139fce4
SHA1 174911cbb8556dccba377b459ee3a57b038d4f22
SHA512 27af92eb1e6a98f748b68a3900f46e7c73defadb6aa411356d6e89477b74bf1ec9c42b6e153fb37e90d8fca219af59c3310b0f30f69a7cf1ac053520abb40977
TLSH
T119616DFE2B841324E249C1F20E0FE3928D0756C10D27B00F61B9AF99E52D3C27AF8596
MD5 SHA1 SHA512 TLSH

Submit Download

uz.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\uz.png
Size 4KB
SHA256 c223b5a6822563cfc9fd50a1c92f0f7c1dbcce1f5c3a582e018d0e1547c081de
MD5 7cddbcc67fe74e56e498d0695a0595f5
SHA1 f06d06cca951b7a7b76aa05473ec21861d9c454a
SHA512 5040f7debf619bf704215debf509f23260ca2c6f1add741838dfaf220c95ed45dd75b1f100f174496f705a27e7a31c1c128dea0220e0b5317254b0cf82892b08
SSDEEP 96:uvbCr8I7hXwBzGmfvmqCKu7aPlFaInm7ushajY6YYgmTF3MMxYBt:iCrp1XwBzGIjuMrKhuLcMxYv
TLSH
T11AA17F8298EF6025AC7103555921E3B3FA60BF151C92F75CA81A243CDD199C19D81FC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\vi.png
Size 3KB
SHA256 52b039c90766568a35f3dea24edc4b2288a8c6cded9ab3f901c4572be2802b70
MD5 11f46cd46bbe6ec346512ad968c31262
SHA1 5e243e1dbe46d28c8394675cecaba2015780fbe3
SHA512 3f2dac8a072b9a87c8c7a1ba42109f23f6ccfc03d15c54e9c3206a203a70456f01060f99977d9b7a2e004fa7eff7f17c3008e34b1ec836f829c1a1995eed9cf3
TLSH
T17E817E8D95EB944DF0D27D68A71E1CD4EE71D44E0FD3488DA67A4438C1161B5A2CD713
MD5 SHA1 SHA512 TLSH

Submit Download

zh.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\zh.png
Size 5KB
SHA256 9117e4262ed145b02a7181b99aa124528e4a6be9cff00b5e29dcc41b44206c2d
MD5 d67bb365dcfe3a545f75e1eb7ee62c34
SHA1 0b0a7fa85bbc0295157714065bdaa190417d56ab
SHA512 f3ede1edb2b25077a2b66b673b04ee86f34aba22f20ff35aaebf16d8fe4d8bf668e634cf93c1767a183e88dea15af1e37011d2cd2bf232659753820be2e4770d
SSDEEP 96:phZwz/rjLPJRvYsXu1BEMYN63CMEKuL2HSoqFGbO6o94Y70oktFlJDm:pDwzjjbvYsezxQ8CTBK8Gi/DZuK
TLSH
T125B16CE7265B1434B3438C1A68CC81D9B8E78F1A7084C8B41AB235A81D7A506EEEC95B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NoirPro-Bold.otf

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-Bold.otf
Size 46KB
SHA256 b012d85155925bbe2106b20234b96522dec7914f03b09bc6e2fff71554f31bf6
MD5 e57b6bc24b970a377574124e026a7c01
SHA1 00184aedd4ee4d2ca6b5c87cf41e78f64304c89b
SHA512 c162cd8a7130d2c94dac5c3dad58794f368436cbf782e8063c245d4cae405af6aa25c2f381549defd520c3f7cdbc04a27f891798697e9c291317d3b3ba82efdc
SSDEEP 768:JpCoXk4xtsCZDUqJB8WA6JIPvX0isBZspMBdgcOpgUd0AkMKc2dAWBYejEARJWsl:C08CZDU+FrJIPBTu89gUd0AEm7A2sfag
TLSH
T12E237D5FE38A8B12C3CA0E3416B0637563BBA91045158B5DF7889F10AF868B67D6D3CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NoirPro-Light.otf

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-Light.otf
Size 45KB
SHA256 3c9ef459625f995c62b993b64da299204b741e153ba8e6d988463aaa86b1aa44
MD5 d10d77b03ba3abe6ccc1c142d9852595
SHA1 6108edf0cfb3d5f25e3c593949c301c5c2aa5f25
SHA512 71c4fc3b6f43b4125c5ea5ae09297d72446de81ffc2928fee33aef386754e60dab11cc170c4d6689dd6eeac451f2a57b9d3372278f750dca6ed39ec82fcf9368
SSDEEP 768:UVKxtsCZD7MXJXAWYO3LtAgTPpOKp0mKNTiamxAvq7jo03xfzIhZ3t+TXLu3w:0K8CZD7MXJX1hJxpST/omq7jzBLmZ30p
TLSH
T1DF238D0EF3594B02D3CA8F7E07B053366712A26A85004F4EEB849BA47E515B7F66DBC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NoirPro-Medium.otf

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-Medium.otf
Size 46KB
SHA256 a728e91375dcadbdf6ef6d7e3cd0bbf5c56fb992d5b1be6640b83214c9d015ed
MD5 df63e8855d04ab0e25d2bb6a0b1fabfb
SHA1 5512dc285f36cdf7da5ba5eabaca128ca3442537
SHA512 eba8afd3289089841e4eda4abd992c2e2020d18d44741733b5a51a2a1e0c0982ffd9da187aa56ba3b891bc259398ec156e08e45265f7218e87eb914794ca69d6
SSDEEP 768:iuEi6qnatxPsnZDkt+BJzvAFEhe/SJI9mqbN6z8r77Ty5CYs2K9ffBwOmzPKYTAd:tEi4unZDk0vHhe/SqmqbN6svKCF2KUOz
TLSH
T1C323AD1AB74A9BC6C3C34E3A17B1432973A29818D53A8F9FF7D0B7055BD19902D0A3A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NoirPro-Regular.otf

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-Regular.otf
Size 45KB
SHA256 c7fc6d9f2ff611073fa09a6c61a8c086da0ebe8da841a9f4ec4087a3e9b52152
MD5 d969db6adb881f1dfa91a5b7ec0154d9
SHA1 d7b44b20eb246b0ff5c41147c0d0fb96fde47c48
SHA512 2a225a8c12b46aa14e14dd547c6a55c80aef6bfe8cc791dcf60a14ef91994eddc4dec473d856f7c2446d62a41d017d256b64b603d87ae45e75fdeb2230deb5b2
SSDEEP 768:DOWxtssZDH8PabnLLjnAfeVnHl0RoW+KIBGGuJtdIaUSCtLbyk2qdhuGtRfH8Txd:qWgsZD/nLHncehWaW+5pAtTUfNbykXds
TLSH
T1EA23AD1AF71B8742E3CB0E3A07B043B57B27A24589124F1EE7445A647E414E3BA4DBD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NoirPro-SemiBold.otf

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-SemiBold.otf
Size 46KB
SHA256 50000ce2f0f8bf3018f1d04aa5c6716583b808ca05c802c46a9de4f084a91f7d
MD5 5177edfb54762b59df676052d11b363d
SHA1 fa18815bf4914b93d587c2758b65e234ad51b38b
SHA512 7475fe248eafd528a05acab94f3973eeeb0d169203769ee6b42d007b5fa0605a58a290e145d74d57e17486367bacffed22e4a88e576fa9f65d000e487aa78e27
SSDEEP 768:OZxrsZZD7GhsAHrQzDQmWw/OQuyQDaAumdLgQaVVcUiKv+xX7u3w:OZqZZDqSar4jQnD0iqQKGxqg
TLSH
T14F23AE22B34D7BD7C6830E3647725379F3E68926A5378BADF78097006FC16E02959398
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

acrylic.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\acrylic.png
Size 1KB
SHA256 6227f643aaee60a2006e5a2892b234cf17c770cb7d25af89dafedbe5079029a0
MD5 2c24eb3cdc3a1c40c6c73f41778db980
SHA1 529d58c606e929065ba41b6244f8514fe4d0dd7f
SHA512 168bf482d0647c359e093117b42655b8aed0312c2696144ae491d3635ba3ea2807cf943c3353f89cad86e7e742d8f195b0400016d4c720df27b6265d64588311
TLSH
T1804108F443A411FCC9881137C0DFD3A649B8BA4B0898B21EA394EF660C4DC390B8576B
MD5 SHA1 SHA512 TLSH

Submit Download

bin.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\bin.png
Size 2KB
SHA256 a0c0af8480f877e48615cc065fc6e29011384dee345843082a6ecdfef00a7923
MD5 96723ca32464bf6546510d3fa0ec149e
SHA1 1457a4945a146965283348e0d79613c674bd5104
SHA512 a3405fd16385527a6444fe65a303e87650129269a9683f178defe03a101e53308ff7b0f9cad567220db101e1b2227ff3d61507eaad403a3b78aec4dd32910177
TLSH
T147411BD726C199BB9B17813C494069EA10D7B1A7F00662051ED242F35A3FB7568D22F0
MD5 SHA1 SHA512 TLSH

Submit Download

bios.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\bios.png
Size 8KB
SHA256 089fcf367852048cb5e300a29a7e7fe0d6f6877707541c442b1f763a4143ccca
MD5 13c99b325bd5f57472b7e4c3ad81c889
SHA1 f9fe36fdbde2dc0012af7ab7402a2f001a3c1d36
SHA512 31077a37989d1bb46f80fabff833f2101e58c3020f686649987f04021458037dadff2add4a39de0892320a25d7c09b8e69012d980b66542cd1bbe79ee8575296
SSDEEP 96:jBzC4pF030ZrE2dVJKxq0xSphQ08h/dkF9lzkpjQk091I3AVKDl4o4yzeO/xyf7d:fpa30ZPuTxSjXYnjKO/4zOphgZ+u9X
TLSH
T1B4129E01DE670C897A8D4C519917A6B7D17AE26644CD90E8AEFB086B4C86E479F87101
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

box.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\box.png
Size 2KB
SHA256 c5023006a3e4159cc7029d2f8dca8a976694c4df5fed6992f398fae2c9709469
MD5 f8e5341fd958807e611f62a69b6588fb
SHA1 70eb4bef0a22ff99bce232df8e1b910b43eaeec0
SHA512 46a7933fcf6e09c7d53997feb4336852e68e3f3e7164ca8fb6b1d2b4f3eac40d3505516a8bf164304eeb70fe1b06c8cd8643d8e137124d78bac73d75e8493c13
TLSH
T144515BFF11D30A72EB746971537A482864279F89B38D1784D43F84ADAA227E04DBC15F
MD5 SHA1 SHA512 TLSH

Submit Download

brightness.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\brightness.png
Size 4KB
SHA256 df3116d09e953f5d3118617433ae7e4415486f9dd2b0b122eca5a517dece7937
MD5 132ac9d76be4f9441ac49557e0fd1a8e
SHA1 0c7e882f5ba4f2d2996b242ac9295c7369328811
SHA512 5b195f2bdf02562644920bac1382f0c0ccbe0cd21485a30ae6c4c0e113d716ef61a422ffab0e1d40af5cba4aab0d06986bb3f67659dc9822adb5cf11964b69f4
SSDEEP 96:ISESTv83VWPXW5CtxSm5v7UDtSJb69pFt5DZwGQe6vYiPZZA:ISdT03VQXW5C3rv7UDtkuHFt7w9YiZZA
TLSH
T1AF917DE2332674B1E8EAC64C7471C892445A38B181DCB583A61A883FDB5ACCD8C98096
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

celebrate.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\celebrate.png
Size 3KB
SHA256 4f38b7b4d6a47fe26c130bab1c72de044a57c7098deeacea6b646b0af4f3e3ec
MD5 1fd5c65f96672146491517de07d310e4
SHA1 f24da49cf483a59f2122844682e591f45d79f639
SHA512 947aae73cf6089e9001367625ecc6d016069dbed1a89430b306ef62078d27475d86ed9fd293d38f692c1ade17c5e95eee35eea8be192ede45b1fcc3c7e6689c0
TLSH
T1D0716D208E3E016EA918C5D9DFF3E9D2A53F0E72812F1FC953750D3688122B67B53926
MD5 SHA1 SHA512 TLSH

Submit Download

click.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\click.png
Size 2KB
SHA256 58a0817aede95222a7d2323b9d0e2370897cd364ae4ac6190ea101d93fe0e5aa
MD5 bb057bd24699c337902b4e86d140adfe
SHA1 181fd57e2d600e07b827c116f0f55e457d5a53dd
SHA512 f6925b5dbb9e0d585daa2cec07038562f6475cdf2b19086dfc88489a2fa217231307c3fd76f9002318455c26c9371037f2d938be5a4aa3ff3cb56f477e7494c6
TLSH
T1E9410BD18FDA6DC61EB9E8211451B6E315EB4F3BD7FA06349C84ECB55E304033D60686
MD5 SHA1 SHA512 TLSH

Submit Download

cloud.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\cloud.png
Size 14KB
SHA256 2a5515e13134d96b38a86ff57bcf9b584c150d230ad09a4d8b4773ca5f43c9f8
MD5 4e33a88060a2aecf121ae479710dcc95
SHA1 f70695f0db1304b22d529f6968e2b398fd1e54f3
SHA512 e724dbfe191bcf2587e95881de177c3b03532c430f9767ec45002fc4114a926dedb43d37b78acd07aa94dd3f6472f31b7151448ca0b4635f0d9405198130f04d
SSDEEP 384:Oo37l3LBXqvDnp+HDbhFysi+prpWPTlSyrb:J7lbBX8rp+isi+HWP5S0
TLSH
T12B62B0A6D0EFEECC7682C3DC5B833594EF51A5854AA0297917BF248740BD8FD5D01888
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

colors.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\colors.png
Size 3KB
SHA256 d600a8ef8d9fdd9c59b4eb0d742ca4a898174ce8eb2443cda4883c2d3a8d3c6c
MD5 64e5a1decd0d7046c40d52b031dbf210
SHA1 a92a5527d65093d4c3f2562f0b2f58f268d545ae
SHA512 af0c1313c3c12c6a040f08c6f3f6c843c8378f6fd4c21e997eabbf37fcec04e2085fe8a19c0c4fad5149b89fb0b401546c4668586fb07ab8fff249e8a97f7750
TLSH
T1E4717CC0403A05BD21F453843AE46A3BC4FFA80B0B4A90504B41EDAC27AABAF59AC123
MD5 SHA1 SHA512 TLSH

Submit Download

complain.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\complain.png
Size 3KB
SHA256 825bc24602c07f51274b4a727e085d245c59d6e25e89720330044a37bbc505e2
MD5 e7c36f855acdea19b9902ed4ccfb667b
SHA1 69222357e6224c4ec9a1fc8e1aff42797f7120a1
SHA512 56ed67721870db3fa2cb8481ffe5dcd1f6e6753af651ac6f39c933145f84e2cce10ad6d76f00cd4b47f3005e1358067bfcf2c5d5ee8fad8fafffe879510ec653
TLSH
T1E3719E9C1840996064A95D34E3A8D4D870020586EBE77B770EFA44F134BBF720D15CF7
MD5 SHA1 SHA512 TLSH

Submit Download

crash.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\crash.png
Size 7KB
SHA256 ceb349a69344f6499e6e15a92e151a7a5c27ac3940d35d0b7dd7ce1ef8eec688
MD5 7e643542d5522b7c563eed99f8b89223
SHA1 86d3a4250df087e2bdf69fa5a3a619f4565f7a13
SHA512 4169abcc0a11a0b73351c5d2bff706592bad23afe1db7dcee48eb8e55b8dc411ebbea3f39bc867c29a9dd62e3d610e08fe8ab2895ed637f3ac9014576a90b20a
SSDEEP 192:ZStJ/3WxhbObVetGJpmoUx6RTsZ5nguAI0:AP8kpmoUx6Rs590
TLSH
T1E7F19FBC684B5AB3591D5267D101B3ABCB427DD96470DE001D08EE21206F7FD52CB6B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cursor.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\cursor.png
Size 1KB
SHA256 1066cc533e88bc00a7a765420a6090d4623a486e0752817feb6f56b9a55cf14a
MD5 04cebef9d39378f4e1a5112ae8403a99
SHA1 1f52a499b3c511a22244d50944e01cd600e7edeb
SHA512 53add41a739839f1e17bfb785ad955903662fd994ab397540396d962c1a917616d8c9b2abea3459780b80b54e30930459915db5322be9174866773fcc510cfe9
TLSH
T147311AD227D23C3FB50C0B755214C1B3E64BE5045B2708463950C2D662538C76225376
MD5 SHA1 SHA512 TLSH

Submit Download

debug.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\debug.png
Size 6KB
SHA256 79cd4bdc0acc6673ebd689623998a7e35bc96636699398cfa06a0e7b50b28e5c
MD5 f71c272ec52effa9d652888e17bc283c
SHA1 e1920f50ff0c40e2fa2c9365d69a391abd819ca6
SHA512 695a7212c572e5c1265c1ee45bd86422c80a09e8ea6ca6ae2dd67962ac75fcce96b672f5b474dfca9a9c8973d81a9e5c19118bd7eedebe65121afafa39f31589
SSDEEP 192:ISgg5x93ayu8m3hv0le9zho2aXk1Two0zRNtVP6IHa:Pgotmx0le9zy2aXk1gdTVP6Ca
TLSH
T114E1AE45CAC25376859ECEDA93A4EAAC8C2D1C8DB4305FF4CC05403B52A4FA89A44ABC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

defender.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\defender.png
Size 1KB
SHA256 e741a4c79c808620c2b11687e002d44141f5c14128b3cadb908c46a1696930cc
MD5 214bef7e8ffa6c30c7eb8c58565dd2d4
SHA1 1eef22b0372d0e197da09226fb74b8c8ee107583
SHA512 b63308e218f7c8e3638f68daa23141937d67e41eefe1070be21b52eef1fb7a142b9596276f32f27088b2a053ed55c2022a9243317c1fade378dc9bbf2b8e8800
TLSH
T1E3310CB6F3D835721481DDFBA341681347D6010302BF855FF5D348A75509257A1D969C
MD5 SHA1 SHA512 TLSH

Submit Download

dice.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\dice.png
Size 4KB
SHA256 949632f3beb11eacf0869b9c02d6f404672838369ef14e6ae5d6dc0692d13844
MD5 587d84a16dce60d19224a474aece6f6c
SHA1 6c76dde139c4d47077194e45bc8fc2ee4609ef92
SHA512 5f68181904d3bad9233258727bdf0f1bd217a899bb5a3f4367598af68986130d5473c28109968520809b4ef5256f09be15a314ac048f94cfcce243a9b9fd61d6
SSDEEP 96:ISzZQ19gbhTYGRKS4ODqj1Ctz569K9cml/yUL5TNedT68ev1f3Bp:ISWfgbxD4ODMCdzmSyqB4dW7fv
TLSH
T1C9816DCCCBA7415D75CA210C888A36B9C7B0985EF5A6F56C1CB20122210FA34DF9AFA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eac.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\eac.png
Size 29KB
SHA256 ac946da5e12c77c6aeb3ed63f289cea2e3a13fb703f0c9675ff8e2f76f96f6c8
MD5 ebc45a4d34b8e4a4e9dfb53f9ad4d81f
SHA1 f44226a85a4fcf854f7499cf5a21bc1c2ec76ce7
SHA512 966682ad60ce5a37d3727d4fead4b169f18708bf71e50eaa8efe7345ffcaf71ff0efed31af24362c30d391f0238fd4e0ede5cf7a0b20b1e711e544ee49bc1615
SSDEEP 768:nHqjuJloE7vWpAAlodWQKbcqsH32uVPTr7x8ORTd:nHqjuUE7vWpAAlod4ZsbVbr7mo
TLSH
T165D2F1945E28BA065B2E1624193A9D09F503115E3A9C69F346BDB4FF8FAC43072C5B23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

engine.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\engine.png
Size 2KB
SHA256 ea6c90a1dd236cac900a5db3b90fe2687698293d730a1abcda4dcbca45517041
MD5 af468afa75f13a3adcd87621aed143fd
SHA1 94050815620efe393176acad3649799c95e33a1f
SHA512 81b8f61f0cf497428266b298a3bf8d274e5cf173617b63d590dcca6433861ac7fffd95b9f3cc51671fb9bd53cf20713181cd484ac95af31147ced7baebe5f27e
TLSH
T1A5516CC19226A10AD82FDAC1F0A5ED9FC3E92DBC67021249E63004AF2015937F49F16D
MD5 SHA1 SHA512 TLSH

Submit Download

eye-off.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\eye-off.png
Size 6KB
SHA256 4862f1cb3f9706ac510936a9dc32279d1c0a5c6e1700c6d063bfa8792d6e4639
MD5 0532bd0b1d4bbcd7fcaec6c4681a98d9
SHA1 b1fe12e4d6a51dc21a965f6341550f30311628c8
SHA512 9bb59a4f0657cdc255bfe1d0974ce9f6fff2ca25046573b570b8ef69fde11a7dcfd572e060743eb34c842175a9c4b3eccbd04a72e2b9efe54cbd076ae17fa2d6
SSDEEP 192:IS8X6NwFg1Y+uwGpAgQgWV2Z4u74Bpwr++AvD8i:P8FG1Y+utATgWU+i4BpAAvF
TLSH
T1E8D18DAFE706A77ACE445A32F02D858BA005885D93DD315C516CFCF191B5F60822ED57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flashdrive.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\flashdrive.png
Size 1KB
SHA256 476d75395b0f2dc52252c24638f8e1b81d5f3f789b3176363152cd13eda52bc0
MD5 849df8b40df792d4fe28f73a7ade2c3c
SHA1 021a732efe2c3d15522e0517da15b6fa6c7cf307
SHA512 a0976e29577dfbc2506d053b47dbbe7c511138fac89f7f002f24084a417bbdee17faf03e8e208a4e67bb2346f3698505aeb829214d07b07c6f23fbb610ef99d1
TLSH
T1C641089EC2A74CAA48DF632355C8E106B8AA1B353DBF16708279430830808FEC1015DE
MD5 SHA1 SHA512 TLSH

Submit Download

flip.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\flip.png
Size 775B
SHA256 74796afd924dd84fd6a20ca83e71ab7e12d859370ba34ced3a3d8f9ad111c063
MD5 ff29386c2e7a5b235102459c44a3a344
SHA1 a8c0c26ac364cdf4da25364e0e79bce10354e273
SHA512 6fe873875e7503dcf339422757354f9e1d6ea3f1b7ab12e3444295966a19ca388f5ae9d34155b4622799c1747aa848b24e75314f90c77408ee227c7f378402ff
TLSH
T140016AD85344501FC6FC5C31490D67E7E55159188F1725F6D4BA495705D4F5235EB340
MD5 SHA1 SHA512 TLSH

Submit Download

font.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\font.png
Size 3KB
SHA256 c98f82fd9420f2bdcbaa428e38f8dd2b11fd1902c570202262d430dd46c945cb
MD5 b1cdaf138312ac81f056e6f2eeb18bae
SHA1 fd74372d47b49a24bc1ad087c7099876c66611f1
SHA512 6b407ac2d1998c5c574d65525e22f74a193370e0c16395e9afb1d5459dff293388bccd5a2efe6e6a55a87d3e211b771e057f1110521d294205535d40e4c2d81c
TLSH
T11B714B4CC7F093D96921EA25D865BE91389BB01B38845EB1E11132E23F2C396B7405F8
MD5 SHA1 SHA512 TLSH

Submit Download

fps.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\fps.png
Size 2KB
SHA256 8bca687e957704a3a817bb1b2c3a453075d02479f6499743d803f512828e0dbf
MD5 a45fec1ce5fc2030d69e9fcc9aaaadc8
SHA1 e9c01a76b6e4d8d1e1256375cd76efdfe03f82c3
SHA512 aead6b4beade2aa5a8e5e902f0cf61e9fd77caf3fe06306864494f758d739bd43584a9df108a2563ead0994e26bfc632f6ea53df7d231469132258bcc653360d
TLSH
T1F1515CDDD43C2D6D58B6029CD37FEA9A832CA94CA3295C0236EAF895614FFCD1144382
MD5 SHA1 SHA512 TLSH

Submit Download

framerate.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\framerate.png
Size 5KB
SHA256 d4d701d7f8db65925fa1ec9ba83974850a5ad30792714db2d065384ee014ccec
MD5 eb898c3bc44618fd3caeb451aab371ba
SHA1 8b58360f30b9209382e16cdaca29540b16d9a77b
SHA512 efa5b71ab191ec6a2d25353c70742e7afef4927b6e8991e28110b074985dbbc511cfdd0e7b7b93e30a7af96527e48a1327fdb21b09a84350809d5f89da52ca25
SSDEEP 96:y4ffPDbGez3uUiAAo3q/Eo9MNX9mpFxKNb5ozUXkFnbLaA+KnPUUdh4:hnD6qexAJUpxzU0FnPfH9i
TLSH
T1F0C19FC0CA5F44938999D4CC06717B73F4059B7E10B8E9AA0F9752D0FC63898A19E1C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fullscreen.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\fullscreen.png
Size 2KB
SHA256 bb516329c60f73517908595bf7af5d45da4d4236a12220c318bac15515d0b13f
MD5 41a39120ba966b2aa8970d3d34fac875
SHA1 71af76e71721c681ca629010adee1d5c27996b0d
SHA512 4a61ad8c1b78945bbdd5959f85bda148ec3b28acf96c0ee99c1df4dde29676f262bef87af434fe7b819f9fa48a038172d5b4aedf7013bb890639e26cbbb09b91
TLSH
T12F513BD2B35FE06385CD7837029B6865D6C20A7E0C57195757B3947904EC24CA6C53BB
MD5 SHA1 SHA512 TLSH

Submit Download

fun.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\fun.png
Size 3KB
SHA256 7ae9a4cbd759e0c403bdc83f11b56a33e683311fc8793c7a5c2025cf249e3b3b
MD5 7b98429885a910ea1be4eea70095cd5e
SHA1 2fdfea8cd712f4ffb2a57a0f3cb688fcf95e489e
SHA512 de88653f96c9c2417a9c9a8f985d1f929de078cae6e1f1b704bd354812428ce59d01613b774847bd9e4909b3e1d9045f63572320f87077e0dfe2191fe383ed03
TLSH
T18F818EB137E06939451A6390835EE39DE19A8900CC5D2A83303277932C5F65D7ECFCC5
MD5 SHA1 SHA512 TLSH

Submit Download

grain.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\grain.png
Size 79KB
SHA256 cc453dfe977598a839a52037ef947388e008e5cdfe91b1f1a4e85afb5509bee2
MD5 3577f702479e7f31a32a96f38a36e752
SHA1 e407b9ac4cfe3270cdd640a5018bec2178d49bb1
SHA512 1a4a03931ab56c8352382414f55eb25b324e11890d51ba95597dbd867b35db45db5adcefb47d95b3763f413a66e3228e59531bdbd5ba5541469196adb5eb3d70
SSDEEP 1536:ygn6EEaCo3NdxZJL8+cGKCYlHaUtoCliskGzQ05zmYmizqvNKmYk/7Xc:ygZNdZ8qE/isBQ05BFS9YkDc
TLSH
T18D830271D6C60F82EB2708A7B2738132652F96CF3A358051A4ED87D7967341FFD9A281
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

harddrive.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\harddrive.png
Size 3KB
SHA256 312b5013208cf37c14f2a8e48bef90ac38f064b2bc6afbbec9b90f93c6822873
MD5 b9c55c5c8c51d9e1d3f6708b3898107d
SHA1 4f1f82199791dc0e5f2291cbf4e582781bab65ca
SHA512 9d22fb0d0c4a0e5ce179eb806a1a40832bf95e1c96fe58ff1808c6a493ff52ae3ea256fad0aa267a84ee340ff3bdab0b0bdf1efa3150bc6f764b895cb3868172
TLSH
T11E815D830B473222C7398A3FD3510463BFDA7F7D1077D46030759C556768ED94A195E2
MD5 SHA1 SHA512 TLSH

Submit Download

hint.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\hint.png
Size 3KB
SHA256 dde6d0f8022c62d1f128bb4fb088578ec14f4fce9e8a662658a5609f8e7238f1
MD5 0538eeb1c39950e17939bf0b5831b6c1
SHA1 c5f1326e6113fd223761721ccd1ef0773d13cc32
SHA512 8d94c722eec41aed947c2c38ff3d9af24d83f86bfa46c45145d2afdded0f6947a2af092f485b04f474fd08331f9603e7e1a695240eb540e3f342c897d81e2cef
TLSH
T1C4515AF45376323958769500A5B6068F803A5E1619147BAC28789CBB413F3229FFA352
MD5 SHA1 SHA512 TLSH

Submit Download

hitbox.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\hitbox.png
Size 3KB
SHA256 24c92d4d8fca5b981e05de242659621968c09d2572f24ecb6503c6ce7c4c88b7
MD5 3e0ffe20dd9265731375b776ef2c5abc
SHA1 88f3f43d81d1dc49dbd6a67e54bff3498753f222
SHA512 393dc3c527cc5f2eefe6d4b0411e2a5654e7cdcea959ef1fc158561c18b9e7db8cb6a63d19e97aa948a34090ac0672ad6b647e3ee8c383595821f4573b094e8a
TLSH
T184816CA29D616622D0BD4C33FE76881F168A78701F224ABBE979643907B1CCA64D834C
MD5 SHA1 SHA512 TLSH

Submit Download

injection.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\injection.png
Size 3KB
SHA256 df15378bc2d8a3758f738df02e5ccf804a3044774218d5bb0e0d896c953a4a33
MD5 e0d07908461a2b85e6b4d8ac4de35fba
SHA1 4bff718aeed1dddead98e8e9aa8f547cae2adc0f
SHA512 7dbfd9d262112280950ce71d7bf42ab046a7132345084b855d973ccc027816b010ae81dc91fbdae5281c6adc3f27ecd1e061191fb70e750fff77471ba7f6744e
TLSH
T17E614CA5138D4427D69F9B836314A5435A5767E11B052F09EA32F07B1983E1CB0A036B
MD5 SHA1 SHA512 TLSH

Submit Download

insert.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\insert.png
Size 3KB
SHA256 78c4233753b68eb5ed26d405d8a4e4862b2c4d52595f4f433838cfe3ed36fa0d
MD5 1d4a25ebf968cf4736759bcb5171af7e
SHA1 f3683c167106e28466d199d4b99029ca73a7f506
SHA512 88019ee3f89df7253b70b639bd547766e06e1726a26e42f3d164b115f4817a8a1e5a4f26b170a46df098bd54c46847f96c24e292aeafd514c41d04f3d3151003
TLSH
T1E1815B7606EEC2C7D47A1D9E41FDDA00E78C266FA210F704B741069EDC6F2A825545D7
MD5 SHA1 SHA512 TLSH

Submit Download

issue.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\issue.png
Size 1KB
SHA256 8862ac2dac5288fc177bf1fde73593b3cfdf62b71fb506bc20055936938b3178
MD5 84a7dc9ae3ad789a33ef0370ca21fd5e
SHA1 feb9f1bdcf85f9b324001a75b4801160831e8464
SHA512 20a73d5010c069d617d35b4af82cf3592bf67d8e3ad483ac57ea0729cc48ef0fa204d016b7351184fd5cdd1908993ace577425466a18406fc7b262b14cbf2999
TLSH
T16E310BE8CF20291728FA043A93A1205764EE807D003F993DCD625AA1B14167DD49B5A5
MD5 SHA1 SHA512 TLSH

Submit Download

log.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\log.png
Size 1KB
SHA256 a81eaa931d4e066ba010b227a387bd5692837b7b6d4888350bc2cc3c80cdf276
MD5 faad015705d0e487af97a78cbf0ac6eb
SHA1 c28c96bef1e218e2ee96dfdcead71fb4b762068d
SHA512 4e573acdadd9f803cc4f46e8847d016c33a07ba1cef8fee7a151f880ff63255d065ce79d7cd2870c60c2688e03c4ae3c6270182d5da94a5bda9a406cc27492f0
TLSH
T1283119AD2150C5BAE20E2D72F8464C57AD42093808FDB0129048309A0D47329FFE10C8
MD5 SHA1 SHA512 TLSH

Submit Download

logout.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\logout.png
Size 2KB
SHA256 ea0c3ef2ddbb4ff007e9f9775b89b2fb3eb5c735842711639d863823dc81fabd
MD5 bc3eac0b5e9c244692d23030bd89b590
SHA1 7a7665dc1be0919d08e79006a1fe50ebc9231113
SHA512 1336331f5c2bcd6dbff612bceebcd354028d3d50cf63a47d798f6fa9006941a68f60ee7247312acb33b3dea08ade8c51a437bacf96fdc4c4a120c38b74bb1605
TLSH
T117515CE41C4A9D82719030FF105B15A2E0149FD2822A17D63B2E581CCC23D0EE734E26
MD5 SHA1 SHA512 TLSH

Submit Download

magnifier.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\magnifier.png
Size 2KB
SHA256 bedb223a118926170d8d42607ed121bbaebcfae421683af9ec2861385ee483b1
MD5 95407f4b177c46c22f5f35a168e0cb9a
SHA1 bdfc41e9dd5004add141e059579e5b63390dc664
SHA512 b3668f34940e06234b5d8883b2b6f3cb2035c1eb664b3b688895a9c51749de7540f0479e1cb343697f2cf1c953bb02a5cd79d1527600d0002cb88ab31dee93d6
TLSH
T11E41F8C34D4A24EFCDA72E16C086EBD34AC6ACA3001B44816C0121B369DDE6AEB556E9
MD5 SHA1 SHA512 TLSH

Submit Download

mascot.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\mascot.png
Size 72KB
SHA256 c9f0d00ad8d0a0b94c258bc154fe2862f39d7f4b374e33c4c86ccc0d5fd77f05
MD5 75234c44100858e10f0e63291aa574c1
SHA1 a75298b7bb6eb16c58204dca8cf2de5091f39381
SHA512 718b029600c9c4ae685e19c67bc07e550025214982efa6142add5d17b45829855900eb1b1cda52d8a5d4b0284f32f13801100172f5c46d512e7350d730872104
SSDEEP 1536:vdJxAdeZq0nUszW5TBPL7BVSS5fk9QIFhFyqQJ:FXA4q+i5BPHBVSYiJ4J
TLSH
T19F73015260341AF93CF69EC9BEF1BC998419DED08587685217CA3E3A63702F8692D264
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\memory.png
Size 1KB
SHA256 400ed7606b4d9bd36bba6ea7c955db486c4851238e12b6b91c54688a9c27dbd8
MD5 a531269d135f60183bea37b4eea6d852
SHA1 6b0174c755e471ea896cafcc9ff624a6c42db9c0
SHA512 82974fb18f8fd5ad5a2f87fd763f76284a9de6b8d1da4a3c4de9a6100bbc70aaf7a2d2af04ee5a4a904c4d90cae102419c640fbd7d3720a0f18fdfe8899abd40
TLSH
T1B821E6A0E1D178ECD22B294324480133DBE29CAB87A7BB4C1094BE741624227E4F3029
MD5 SHA1 SHA512 TLSH

Submit Download

mods.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\mods.png
Size 4KB
SHA256 84f6f5707edd00dcec8a7f75c579c8b058792c5426a784d3b3424e5569b272d4
MD5 abc8d78d9898cb8ea560beebeb06c9c0
SHA1 01c2285ee2daf45c15a84cf317586201b77a62f1
SHA512 7a8b4acad584c7da91e748444c0abff19d81af1b009fde0b0f458d4a43d36a3f05538b3da904050a7ea36d78e950083b75d60ed88b4ec383a1de79848b27be4c
SSDEEP 96:ISckA2941BFzmdyskKDrw5l0/yocvuBTf:ISckBK1vqdDD3f
TLSH
T172817D764CB8DDE2D52EE14EEDA8C011A62777190220B0344C68CFE923DD7421D875B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

monitor.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\monitor.png
Size 1KB
SHA256 da9f50458ffafbdf3cdb3cc0996036cd0ff7540c85c602301edf5d1e6411b056
MD5 1450ad6254e040eb850ef10ff2eb5c80
SHA1 1b8d37d17494ddb31c4c05965cc75ce3b68d7069
SHA512 b70e1958b040d2fcb32006a9fc187f9cb66839fcfa90c2967ce84b4364d589d589b06eadc5cbbabfbdf5abe3ecdde9f88bb62e5b42950e8da698c4bf28196ef0
TLSH
T180310AF72415D7D4D40328F7D15B5A3CB52F6E03082B8D3E5BD06C66D02545564C8679
MD5 SHA1 SHA512 TLSH

Submit Download

mouse.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\mouse.png
Size 12KB
SHA256 3aceaaac4c2105a2bcea550d5127b4360d656628d2f52b1bb702e1788c2869d9
MD5 9fe7233ee712d53e0a481091a24050cd
SHA1 5d6e8af0c83a3bf8fce20ba67c38b5a3074cdb44
SHA512 30ac1e6554972c4db8161bead64429da2efc27c87388a55de1aa833a7a084e4430bc433a6373373431ca1daee968fe742b33f17f27389bdc03278b8a89b01132
SSDEEP 192:i/eV0VmI5l3bSzaxF+rqCmJGoWzQEtL99PeqLv5gP23rLX5WKRufG1BadwFRWqHk:iGV0VB3mexJC53E4hguhLmL6FRFfDgnl
TLSH
T1F942C093F012CF25CA1662A262DA6D53C9EECD0D43FB081742765F7B13A1F18756C62D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offline.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\offline.png
Size 3KB
SHA256 cbb43fc823dfbb45100b713836289719a728c62e47c9c42ba85099311f83c3b3
MD5 1615c039122acc145cb94518ee810369
SHA1 a4da5ca29fcf521b19683a3e8271b955184c6d21
SHA512 bdc1fa6afe2640311fcf8742b93e509755c15e2011c3d4377f4686bb6e48a969b99424fad1fa04292914d9ddb58b27e9ed2402c4e05dcd83e0a16927533a9bc8
TLSH
T17B717D8DEFC1E0103787EA11C189C826DB27E59917D54234B275CA18AC05F72E9A69FD
MD5 SHA1 SHA512 TLSH

Submit Download

opacity.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\opacity.png
Size 5KB
SHA256 aaf195515fca130e67549941e4de92754f8d0c1c8c5b5855fe71511895c69e52
MD5 723c51abde1f2ef5f4b92991168a7c3c
SHA1 a33cf0d74a27d393ca2f3e2aabec17dfea844d77
SHA512 f8b62c177f4b2b7ddb9ab9a42ba49fda3e531a00216627758dfa651d60e8cda056101e0a607be19d1d810d8c2c4aa35ef592c9b695a3e50ca678e5a1e27ed94c
SSDEEP 96:ISk4EAnesZqTke8WCiZzFoc2C3PxlXqeyQQNgvt7iCMXYMcUWvYWDN6GEM:ISresZqQe8W/ZzKcxLtyZG17i9XYMcUY
TLSH
T120B18EFB048665936DEA06CBCAF37032006D60994E7D8B21207411BECB96762B39F91F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ping.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\ping.png
Size 2KB
SHA256 76ca3022b6664df6cb89d4d84aa7882464b4ba9f17ae9cd01e2e190fb6907c5f
MD5 66380fa70615fb8296d61f04b5fa9c33
SHA1 3d078c7b34beaa0e6a59d747064bc3af368afb32
SHA512 4674ad84ed6f139396dbb0603e53218b3111b7675fcf1d6047a40551bd4aaded52a84ccec1466a8219044c44e30fc699c0bac6715aba27c69731c40374c0fb5c
TLSH
T11C514D4433F468B57E3A693D090103DE82BDDE98C5331546211CC0B93D05434D515275
MD5 SHA1 SHA512 TLSH

Submit Download

platform.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\platform.png
Size 1KB
SHA256 30f610bca538f3c636f188b6f17a70a70448d5b8c27d5f3380785bdb17c1e0fb
MD5 c9ce9e9bf9d4d9e2eaf4c22703143fd9
SHA1 a2c1b77c979e2bcbdceed742c74d7f045717c467
SHA512 184b029d850c304c08e1a87b0f58451324e4282b39db4ca1918df18a2cf16fe6aaf1b845c9ecb954ae749f2d64d754e4a7c4c404586452bebdd6fd9fe0ed7541
TLSH
T1BC3108A12BA33162DDBD1AB7E45B911C4CB2CE1132040EC90C6291AE71787DCD1272C7
MD5 SHA1 SHA512 TLSH

Submit Download

privacy.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\privacy.png
Size 3KB
SHA256 4456e7c85cdb5cc1a77016edb0fda27c6cddfe7a89019222efcb9080aa2663a0
MD5 22bc8c0df35d41555c4babfc8a718614
SHA1 64b61f450e8001a6d07719ebe589f9370146d042
SHA512 5a879ed3c06f13ae6ac47c1a2cc8ed56474f0cc5ef32302f4f57a8fa689a524e084af6a2c6b040b16615690943d00ceac07aa24160af526872c46a0fbe4d781a
TLSH
T1B2716DB28144072B4052641C456D9A29C67B3EAC3D68345D3FB8C0BB10577ED3DA0B0B
MD5 SHA1 SHA512 TLSH

Submit Download

profanity.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\profanity.png
Size 2KB
SHA256 ea35e15e2a3df4b1c55b980ae7ea37c143170ce7021ac35e5def387fde4e8b8c
MD5 69d9cf877dec97da8ce7cd88942e8cb0
SHA1 918fac91f9a04a78343ff809145f316e365b5df2
SHA512 a734b9db8d7738aa7a31d07e2d24575da38593a45fc4005d5452cf03ce391289af7a68697f400556617ea841a2cb33969ce94f1cff87ff2c6bd5cd013b3fa64f
TLSH
T1A041390E21269D6A3D421CF190F41CB95E40078EA322915870A90B46A9DF3BA3B82F18
MD5 SHA1 SHA512 TLSH

Submit Download

rain.webp

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\rain.webp
Size 656B
SHA256 d93d33bfa57151721c3e3e196d56648c066aa100d4a26adedcd772cbbcf19422
MD5 be14922d4d3c0caa92982861045a678a
SHA1 6420897088656598492473cd468b072da532dabb
SHA512 43290f48dd58e85cf6853a900bc469848e99e01faee4644d5605ed4079ae4cbda8e2483d81f847010ab60ce9ee808d54729c75ac5f14a965e7e2cf4c28599f86
TLSH
T1CFF02318E7FB698AEF4E682CA44E23062B23AC24861B7E48C0F861A190E7505B175940
MD5 SHA1 SHA512 TLSH

Submit Download

reply.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\reply.png
Size 3KB
SHA256 670a2e4c66cbf80d0bb75b2ecd3850439ee8946ed217232e900dbd2041af9526
MD5 d6c7bede37f1d31e9719de8638e58da6
SHA1 45e452cf733783f150de28b4e8a06faefff15eed
SHA512 ca1556757bc880401d8647060c657ba0e8e763079754e1458b8f71337ce0e5b4e3a1061b4c53a20ae7025312f4d98c39182a27b862f321d50408b88a19a3bf90
TLSH
T1CD617D0837E6056EEA760FA81C73898356CE0182401E3502C49D813EACECDC8FDED716
MD5 SHA1 SHA512 TLSH

Submit Download

rocket.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\rocket.png
Size 3KB
SHA256 f32b5099ce583cd8d546b630d4fd0f1e3e48b7eb6022f0642eb5bafadc077728
MD5 fca05601ce993c283a34e7859917001e
SHA1 e95b272c83869147cdd09f5135bbd924f79a1c9e
SHA512 169de95e42434db80b494cc00f605bd4524cd98298aba23072153ce992b2672e86b9b790da5ec344bdf348143c30de799bfbdd930e59385236160abd12f327e3
TLSH
T132515EC2FEC154EEDE40E402FDA5D301AE1B7494AE473F23DE8544B23B68E119685C13
MD5 SHA1 SHA512 TLSH

Submit Download

rounding.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\rounding.png
Size 758B
SHA256 de0f4e7e3229536cdfd8c22ec856a8e80e605602ce27d522f39ece9683d093dd
MD5 8e2f18f91da49712b587bad1d80c0655
SHA1 2607a4533089ce9a4ea81df6c111892a5eee7da3
SHA512 f4fbeaa152fc81c56741b19bb9f741b809454f33d3651f162b8aef1b7e071f94def768686ef1e427ebcedddd7249828b70843d5298925ed94b42a123cb9ce7f5
TLSH
T1AD0120E13FA55FBAC324DF70A8A75251693302160B539C80B6930AE275474209DC6310
MD5 SHA1 SHA512 TLSH

Submit Download

shortcut.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\shortcut.png
Size 3KB
SHA256 a531b40c2408def163abce7d834a970b0b5f931dfb7d04a6ea28040f820b6653
MD5 afd47ad7c2ebfbb64a056d5a1cbf647c
SHA1 76e0c69d766480a0cc1896c33587a6038a23fcf6
SHA512 5359b10ab5a1564fc49e31ec3c9a69b1c2a50a011f0d3117509b7551202922f88a6a9cc747b340c00cc03989e71c918931a5966202f9a5851a0ad7aeb200dac4
TLSH
T178717EDEA5F9A5725C2F316C109F01AA91C57ED9D6C388C8396039E1234BE3E0345B3B
MD5 SHA1 SHA512 TLSH

Submit Download

snow.webp

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\snow.webp
Size 106B
SHA256 890d8963e3f72df8b7dbd845d3d8997765d3e756204cc20dee6e91fb54828067
MD5 e2002d0e20b636bb2ee67a869e9d37fe
SHA1 dfee3c36543b1d638bfaeeb528cc27a0e5cbca30
SHA512 24f516da534505b0169366d4819bc6acca9b4699071ba77c21c5a442ef6f37633bb5440978297c130f77d34421d0fbb6b9029e74d6e273bfe9a03874e4d67004
TLSH
T1FAB09B05C919554045966A6D4371453953714B8D98175E599551C01444B01013112610
MD5 SHA1 SHA512 TLSH

Submit Download

snowflake.webp

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\snowflake.webp
Size 186B
SHA256 4ce0fa74f2351d1221bf99d793cb81436f4aff29d7c5d54a34418874ace7f548
MD5 f9c1907707176cd7fe3cd65be308fe72
SHA1 052819f51ffba24048170bdbb59dab035975657b
SHA512 69b264fb74020718b3b824e9d6ff1fb9ce08925d678cb47df4f388c6d3b062d6fbeb109ed7b2c286d77b1fa177110156dc5d4ea47f23754aade539fb114b3072
TLSH
T1F3C08070957C7739EC065CC983958F5D541C305DE4C5B7FA1CA625B08905164F9185DC
MD5 SHA1 SHA512 TLSH

Submit Download

socials.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\socials.png
Size 3KB
SHA256 2af3f33920844ca4f87c1e7d2c84c0da81b0a9fef22880022cf09afc79b70d72
MD5 60c05340fc10d33db667f47b681756db
SHA1 338787f4529f767e63b33414a4f9772af2203696
SHA512 5ead0d1c243813890cacfc1dcb5edcb369c715536759b8bc8b8dfc5d78f5e8722d00324b99e701339072bec101ab88dff1b1b95c59fb9e88e31abde048128d93
TLSH
T181616EC782389134FD3AC2CC6879423188907967F61DA92234A615E41FBF7983E39974
MD5 SHA1 SHA512 TLSH

Submit Download

translate.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\translate.png
Size 1KB
SHA256 9b11d5698115b2130c82ab860c62d80329faa2ed3ac66ea92e3d42a0b80a0946
MD5 6b062f2e94654fedb4975c93b2f69cd1
SHA1 92ffd9912889c9018e91295e6c243f3dcfd3479a
SHA512 d2ab3008d7fa681cf826413b84401df44f3f0f8005163f9b5cc2d9603735fffb9383a74d5f697d7109dd30200b7a45c1b9b4308aec5bc69b2c368cfc6a72a185
TLSH
T1EC414AA0E4D0E15DCBF085A381CE4B42B4EE994E227247B24A207897ADAAC0CCC79708
MD5 SHA1 SHA512 TLSH

Submit Download

trash.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\trash.png
Size 4KB
SHA256 a10a3336f46b307e8df7c3acb615ece919c5df285c0a91e0bb8855a3327e25bd
MD5 a37aed43e17033a8242d750262dfc41d
SHA1 c8cd20f854050e8b726ec6f7bcb3a8482d735b19
SHA512 9ecee866a0df4aee97075603aa5b6dc48604d90fed9b2d9aad392c9a2d023e5cad0d0d76a484e119132782a07c3ff045e838530b9c205e2a027b149e1bc4c5e6
SSDEEP 96:IShII827zLH//40rJG/+emVT9K+3Nn161aOKkootXX4p/2EnRC:ISr5r/A0rJq3mVTH1e5Kk1tXX3WI
TLSH
T160A16FD9326520D9DF184E295813A4E40F76DEF50159BF8C06DFB857B8127C809B4BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

updates.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\updates.png
Size 1KB
SHA256 53280929b5f32e564ea9c00e607c5475b6554620184dee303cb6becbedd30c73
MD5 ed5ee314e2eb7c9d223abc43d8f224cc
SHA1 184b9310a9952de11ada6b41352c0ad4c99e732b
SHA512 d3d0e24df4168411d9df4c351bb5b2ecf5ebcb568d6eb0855d4a60d9ba7dc4e2272a1217e8f3c5048524767f02e8e13fa9c6db0a470f041616cbc3565a3b894c
TLSH
T1AF412C937586A733C79C453F96D95D7610BD775C53818B3112348CCE78DB055A871728
MD5 SHA1 SHA512 TLSH

Submit Download

version.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\version.png
Size 899B
SHA256 522a0868359a82748c3ae03c4db61dfcbc6d715e7da6b24e49f184d7ce666c64
MD5 550b58e80d73a805e914e157f1805d48
SHA1 9ea9a9c39cb87824b3516d4090ee295ac3a8f727
SHA512 3b44aadb39318d48e537758a03be29cc296b89714b5878fb31c167a706e80943c4f39598b14b6dd5344bdcc7b66eb5cb8bd27ea90cc2db2f59471642ce0f110e
TLSH
T1ED11B3AD257AA4305025C033322E6263C56A8EFF1020CB1C1979F43E20DA0DB2BA02EB
MD5 SHA1 SHA512 TLSH

Submit Download

wall.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\wall.png
Size 2KB
SHA256 92abc3572a852e7e15481476ae947d799024b901ae668fcf8c513d84d210d8ad
MD5 17565b8f769b5b6ecef1950d2fa26c41
SHA1 5fd17eec9cec55b888cbc7793f7aa65f6d263a21
SHA512 690b27143765b7f4a5c9124c20d7f142f52fc431a6f05b0ce55d427cd7611c52223d04fcda812862a343803ad2a79ed1c67814890304fbb2e444e47ef48142bc
TLSH
T1CD514AF613F607F7407AB4B3C51DBD63E8F66C2A402AD2C54A6AB4094221AC210D9AAD
MD5 SHA1 SHA512 TLSH

Submit Download

weather.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\weather.png
Size 2KB
SHA256 e28daacfc80bbcc7e62ff17d4a7b1981372b58a0e5fbe714eab83a480dc8bcc3
MD5 5f62b3b054f201d656d33ea72d0940c0
SHA1 b8a34a54e3b51a5230ef7764ce07be60a642a709
SHA512 326745213491ea424fc63af0ea3110403ece157b33b52fc31ad719142503f4de1c7c14dc4110944313eb56a757d3a8b64e1de914c18b61b9f7324e121f214fd8
TLSH
T106412BAFF3EA70530D5070740A2A937E906B883D1D1A7EBC85A98D467FBDE18F8165C1
MD5 SHA1 SHA512 TLSH

Submit Download

window_size.png

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\window_size.png
Size 1KB
SHA256 d5e3c3aa6751c5df6dceffacf01e2905bfcbe12c7a631357f3f86e494918ba32
MD5 8194f40dd0160affb0b0902bed4c8889
SHA1 bbd460aa83b1c5e9fff2b68aac22aa257acefa6d
SHA512 d76209c51c3a9a3a19b49535b75e00a106f12a9418e3057544f74cd254e76ed5f143265e2cd9a9e15ec3efa5de2b0d3b7a7f25909252537a8ccc2a7e094541b8
TLSH
T12121C8E19B6AC8A4C4169C1F137318F5E8D325B7E68D3CC42535BCE967C58E94544398
MD5 SHA1 SHA512 TLSH

Submit Download

background_image.frag

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\background_image.frag
Size 13KB
SHA256 9986d66db87b6ab3ee7182a688736c411459c0ac4f583e966fe529d685c15a80
MD5 ac4cbd471b19bd3c363ca24d4ab3a3c4
SHA1 76381fafe8aba3e59237d2c8a3712dc0a9f4f6e7
SHA512 13b8a1cdf4fe8686def63b45b7c9a4e15bb8eec83b01944240eb63949faed0751212d1231ff7a53426ae5320219a8899cde5c5ed8c9ba16a11defecb0737524a
SSDEEP 384:YUhhimwAQBkUWVCszGiXe436Qb/nXe43PQ2ZBWPBZEMefB:YU3imwAQBkHgIGGF7zeBZEMeJ
TLSH
T1C1523009D2B28931FC1B513E8AA70225333AE46B8652D74B3B4CB555EFD23351F817E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modification_card_image.frag

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\modification_card_image.frag
Size 30KB
SHA256 880e1a838aa9b41af69fdfaf54a2a5f2ab0d60cf75d0df91acc3e8dd101c16cf
MD5 a85a79da23f2d5917aa459dfe9aba52f
SHA1 d2cba0c88672c5f08b927784fd7b26d56d72b9e0
SHA512 423ae56c76fc639719ce9828e5f72ffb0b890b152b7bb89a7f7fbde03a23c3e244156cdc699338344237b1831743af35fab126ea6fbb2ff89c952756b4cca89d
SSDEEP 384:T3HfhIHBpr5i1L8hHvFdNol5EVEbxqbpLI05vFdNd1AEVEYFGEnNt0McnNOF2fBc:T3HJIHBpr5i1yj1jchBJ05
TLSH
T100D2FE8AD4A34666D437A23D876B0138733AE41B938BCA4B394DA971FFC33614F946D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

raindrops.frag

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\raindrops.frag
Size 51KB
SHA256 e139581178d563fc75aca12781a47e75c9020e13de3581273f901715afb691bf
MD5 31dbefc2e514a7e94c08eada33e9e2bc
SHA1 e2ef0b5d421a23d5c404cc80e74faf08b4025c06
SHA512 9e47046640e004529384b74df19145488d6dcdbf9c323b1e86c37cbf3b18ed957559044a45714d5743d26104b11586c95e7297f94cec6e3d345b07ca55262543
SSDEEP 768:AfOsABcdASB1souSjtoTZmV9jYia0bwja056RDWDr:AfOsABeAusouSjtoTueh0bwu056RDWDr
TLSH
T1F7332144C3B78E62D914A03ECA672119236DF06FAB96D1437A4CF9316F12B760BC58DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shimmer_effect.frag

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\shimmer_effect.frag
Size 7KB
SHA256 fb4e69dedfd10f3690e863547a9a50567a1e2ab6c35ee7e56a3fa3dee7263de1
MD5 e142f591b21c37868dd2e34cb96f7bab
SHA1 67ef66a0db891194a5e6a9a131db31fb1e561100
SHA512 6a7744c8d466713073dd392df71078d5437a8e43cac6d6d989791f510be82190152372b13b275a948284aeca087af4b49849152a889c2b281b1067fdc6a7e3c1
SSDEEP 192:49Y/ho9nwnCUZCUOeMVKOUKeMVWQl69dlcZ2G7F:4m/hOnc9a0qXydlWB
TLSH
T1E6F1220CE2E64D24DC63BFBD49A7C2847337A4AA0217E76F250CF1527B433AD4961AE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winter.frag

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\winter.frag
Size 70KB
SHA256 43373bf6ccc11cf8a96ce00bc33bd0f20ff116b057a587557b4279a2b23edd54
MD5 be2405e6e76a8d4b06db6cb5441f616b
SHA1 046e32a0d3dd19d92cc0276157eaf5b2d2d38553
SHA512 24c0324c36c480824692859c897ce8c839c00b547955643898af3a6f67b06427536a32b8ba0d6faef3910ebea9ebbac4de16350663455ec1c4f73d1af931062d
SSDEEP 1536:oU894f/OMr9Qat7foLWFK7Eqs2KJ7vqiaPJymYM1xsFk5EBS6ree72s/FK7Eqs2r:FBQa+LrjeKekXdMo
TLSH
T1E663564CCBA74661D82DB53E8F67211C636DB05FA75685027F0DFA253F4223E0A81ADB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\icudtl.dat
Size 760KB
SHA256 c12537022ef818991a7bfed41a76d8d6ae962ffbc0e6511ac762a5d0845e7f7c
MD5 692337664e861ad322138061132dddc6
SHA1 8a99bc860eda0772f3b1f4a125fa4d474410e21c
SHA512 3e2e6adb651e37e530734f999634d7c101fa1c45ae380be8ad169bbfb0a047f2878ff6c8d1428d6b9e7301b447ab2f8839484322ddb3831984be71d442829a55
SSDEEP 12288:HMlhw771h0jM7ykPG07+r4c8w0P4N48RkjtYdPHz982VT50q:ahw3zVtjsbGu4RjgPHzfCq
TLSH
T18CF47C03B1D79C9FE0D48636C9A1E37A9A33978C5B7311D67E6D45887F4A0D70282BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\flutter_windows.dll
Size 18.2MB
SHA256 f305282174da15723cee0913d805db06accb0b0de513fbd313affc9b173353ca
MD5 d0808e136c36a6315bb18312b4c3ad5f
SHA1 fc16afe27ba67352050e3cc6c9b0a0227394d7a0
SHA512 146c5abbd40ebd8e353dfa120e08c096cc9598612c8ed78876cb6e81f5d8755865f53bd03f86ae1774cf8857e950eed9dd991957a7cb514da4c0511c71a0fd3c
SSDEEP 196608:g+i/pbmdgziGvxKJIXXjgnKXK5zdyGwXMB:gLmPEKIjgKXky
TLSH
T10C178D03F19640F9C48DE2788B5BA927F671B84A0635B5DF279807213FA7BA01B3E754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\msvcp140.dll
Size 559KB
SHA256 1e57a6df9e3742e31a1c6d9bff81ebeeae8a7de3b45a26e5079d5e1cce54cd98
MD5 c3d497b0afef4bd7e09c7559e1c75b05
SHA1 295998a6455cc230da9517408f59569ea4ed7b02
SHA512 d5c62fdac7c5ee6b2f84b9bc446d5b10ad1a019e29c653cfdea4d13d01072fdf8da6005ad4817044a86bc664d1644b98a86f31c151a3418be53eb47c1cfae386
SSDEEP 12288:mPeu+VwM4PRpJOc8hdGE0bphVSvefIJQEKZm+jWodEEVwDaM:sqwpzSFJQEKZm+jWodEEq9
TLSH
T1BBC40923B75906A0E195E3B8A1834316D7F0BC4A8322A3C752FBD69D2F673D5673B250
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

permission_handler_windows_plugin.dll

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\permission_handler_windows_plugin.dll
Size 115KB
SHA256 67465687870f83f264c090105385217c2addbf01781b56a239b79956ffe2a49b
MD5 2e5b0587075575759e4b242481d7c85c
SHA1 27d2f0b6f872c8df85adae284cf36e71c34999df
SHA512 63772f22498f6ce14aa3c84203b87b18eef957af8d6278134680eb1ca0532b4cbdffa770910570138b939a551239487e65b491fda4b0a3bd7f78f86de51260a9
SSDEEP 3072:VxpD9Meiv+cR6NE01Kx6nskLMxfMAY4NZy17LWkJ:VxpDU6Nn+1kLMlMAY4NZy17Lz
TLSH
T181B32A2BBB6941A7D12AC57CCE838A45DB71B88557A097CF17510BDB0F23BE84E3E601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

url_launcher_windows_plugin.dll

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\url_launcher_windows_plugin.dll
Size 96KB
SHA256 9ff8c50b5dd18205126d7ead03ae7d7332e3b85cd450aa2656a04321ff888d32
MD5 6de190291b6f77a4140d85123b71d40d
SHA1 61b2dd051a1315633474c1c1e552143545f5ff5d
SHA512 935ab7f31c44ee0290f9be2e9e78e4137bc23cc2e2e2d4668c8e749b91c56d124465f49b1068cb3df240b2ca5c6d6d0b50cf2c2563225daaa9df4bb39e807dcb
SSDEEP 1536:OGpJk8hcotFnvx6p1C6qSjzbAB8J9legdXBaM8aV/XijHrU:O0xhcotFp6W6zPL0M8aV/XijHQ
TLSH
T117A3293BAB1D10ABD269D5BCCA534941DB72BC854791A7CF17A00ADB0F27BE44E3E201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\vcruntime140_1.dll
Size 48KB
SHA256 6d3a6cde6fc4d3c79aabf785c04d2736a3e2fd9b0366c9b741f054a13ecd939e
MD5 eb49c1d33b41eb49dfed58aafa9b9a8f
SHA1 61786eb9f3f996d85a5f5eea4c555093dd0daab6
SHA512 d15905a3d7203b00181609f47ce6e4b9591a629f2bf26ff33bf964f320371e06d535912fda13987610b76a85c65c659adac62f6b3176dbca91a01374178cd5c6
SSDEEP 768:oPIyGVrxmKqOnA4j3z6S2X7pudLAivD9zigElY7ivD9zG:XBr87uWFLpudBvpziZ1vpzG
TLSH
T176236CD057784082E9AB89B0C5E6EE577D7CF6A20B50968B07A1D1981F637C0FB3D21E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_npy3gqq2.tmk.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_npy3gqq2.tmk.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

01ea7e9f526e177156614da305eb369b.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\01ea7e9f526e177156614da305eb369b.webp
Size 6KB
SHA256 9c8c8158daa6be8f4c2fc78df57f450d2d9bc0a4f77850251901e03deba238fd
MD5 7fadc97f07c6f8ae64a90c8d4ec91af8
SHA1 36b6dc9edd6f12070cc7db0eb6456609ae95ea7c
SHA512 a526b2783f21b49896e2483c756db070ed087d75cbbb76f27de011955fe93f5c571572ee2f440eca78ccc3b335cd4dd724086fa67ce421e95f67cbd422c33fd5
SSDEEP 192:sQbcA0CISMqn2ETJuSFscpELI8RRx70R7:d/NMqnTTpCcV8jx7q
TLSH
T192D1AF0AE5AD1A34C9762913B35854311D50328EC6357B63B3CD267A2F8D4C6596132A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

077603ea89180c0a13a7fea7cf20e2bd.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\077603ea89180c0a13a7fea7cf20e2bd.webp
Size 53KB
SHA256 968d82be69cc73ac53bb7cfbea933570b6f1075d2717163ad925bd18f956f28f
MD5 845bbb72fe15db5a21361f002ec5f264
SHA1 c1f8e812583125b7af074bb5e3f744bd16b97276
SHA512 877969c1fbe8e0234fcfeeb2d97608577f4ed89573302c109dc06b6c4e36eeacfe7b2f11d326c782069fc38af8a287b39175320078e280acd7031111aa80f18f
SSDEEP 1536:9vfztj8GIFVuCJf8rl9WggVihTUOX91Klr7R8T:NZnIfFKpMjViG6+GT
TLSH
T1E043F060F3C6D700FB4B098E26AE7C7BA357B0C84AC872D714E64D775694B20B50B2B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0eb49e5656ace9453048eed0256286c9.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\0eb49e5656ace9453048eed0256286c9.webp
Size 11KB
SHA256 5abffa29a60a346f79cf7b93699be1e89059412da2a042403ee0c0e41255306d
MD5 970d602d7089eb3bbf712978bf36d263
SHA1 1897d377a87c01d2ae5790676c24407f5da5d9fe
SHA512 93ef418cf661d45f3a235a5a193acbe81e7590b4f42e122b727dfc499e5e290ad5261b0a6c5d87b3c4b9029fd4d7647b2566c2e026360f58588d1a00c30d33b0
SSDEEP 192:DDuiezgDhXVmzojBazAtjQyaydAPgPA5xaM+bhISTNI8yUTCJvu77kndc6:misgDzm0jBasxY1gpMCFK83T0W7QndT
TLSH
T17032BE09EA43795F86372A1B2EE4B2C75760C3E5090569001CF8996787790F19E6E6F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0fe7b3b45ea6e145be94bb22895cbaba.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\0fe7b3b45ea6e145be94bb22895cbaba.webp
Size 8KB
SHA256 69f9ee75e9e0f815bc376170e30a44702a36d9977edcc0161fe278729f70893b
MD5 cb064a8d9e596308913fc10ee028e096
SHA1 8ad32f650ac6a927ece803bce9468ee8e2090bb3
SHA512 c71447fe6d829eae1ef3b0c75bcf6193cc9ce9401895dbaccd8d57b9bd7a1ea49098e228200378e3fa293cf7571e22ac9c6d8ae108c2d2206a5cc5be0604185c
SSDEEP 192:/7yFeKnM7RxiPBEEVoqykC8lCH99akleidHVIuzrIGdhb4tuWCvrV:/7q0RsPBEfqlCH9a4eOVjAGdNdWCvZ
TLSH
T1B502C0B9948B218DE48650CEBC573E19E6C6E7B6B0B92D81E97D02F05A478C3C54C43A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13c0aa4c8798b433117c0503052b36f5.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\13c0aa4c8798b433117c0503052b36f5.webp
Size 23KB
SHA256 dbc93c5f9c1a11bfb1edc2406f6081df5014dabf55cedd5edaa4bacf1e143c44
MD5 596a2c3a72a5c91f4594bfe01a239472
SHA1 a22ec67f7352805886df9ebe1fedf276038e1587
SHA512 3c72a25199809aa746cf302182d746eca1cd6c9204055bcde0a4c84d7a3806d744ebf24602c261374fcc36d07bfb54c4cf328f3ec2dba83790000ac8b8ccd31d
SSDEEP 384:hiB+pCKPW14TKGl/iV6ZHMZx5eewXizojGEt0bBl11+rQXi5BwbTHb:h2+pC4TVAVJZx5eJXigr2lV+MXcBwb/
TLSH
T198B2F1C77E0AB9750847CFDE249E1022C315C3D56832E15E8B99EC7359526B20B97CDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14bfc36f0daf68f45cb75e1ab2b61db9.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\14bfc36f0daf68f45cb75e1ab2b61db9.webp
Size 20KB
SHA256 da6c73046f75e19855d93e530a94e83cb3990fb52043dbb9dc3fb54db8696471
MD5 5f3349158c09ece02bbe286757657c3f
SHA1 b1fa72fadba59cd429f2911b3cc5c9a9234322fe
SHA512 e46205fecc4867c5dcbfde58ca789518b4bc76c266eb5b21db94513179bede554a8a8ad1091fc5e6ff9f568ddc8df5970d13c367cf2d5260ea1b195bbeaff1ba
SSDEEP 384:eQ8r7NpWgz6GanHw5aMCz0Qnc+tjdOFLh7sFpHPZLewHclAVG:T8rRpWUaSdCzrc+tpOFupHRSlAc
TLSH
T10D92E14182EAB43CFF0593BCC4BB759BB7207C547B443CA58F5A4C0B5A41698D1B907B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

178adac81c1363d482ee3422e343e5ad.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\178adac81c1363d482ee3422e343e5ad.webp
Size 8KB
SHA256 4c8c0c800cac848814295336a61a09437eee94ee510ab776e05e4b88e804edb6
MD5 50d4c09081c8a392495ed3593fbc02c1
SHA1 75bcf6db8f3dec56a41aeddbbb783785063065b1
SHA512 f4100471f12aed84db4645cc810ad6dc6b87eb175b61f94250b2e67c892aa225e7a105ade2e5f88a6670b1d04237de55757a4e09a07df7e94a58c84efc3f5fc2
SSDEEP 192:VihOm+RkuOJkS/DOtxtbSA+1fiSbJwu+F/FT8g5lSknEz6c6:Vy5DLOtbSA+rI/FT8g5/nEz6T
TLSH
T1A4029E49F4B39D80EF49EFA219EE23079C134D90904A4464BDCC908BBF77562167A57B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b3ee957c1d8922cdf1a0b10c6de1675.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\1b3ee957c1d8922cdf1a0b10c6de1675.webp
Size 17KB
SHA256 4fb3aebb69cd7b3e7f9a34f9ff1eb1c826f0a8f179f5852827628edbcffab17f
MD5 a62e489c7461d065eefa5b928c90444d
SHA1 524aa45eb37a341d90274684857e49049f2e1982
SHA512 5a2298bba51341b6e27fdc4710e0d47fb7527573ca401d537c1c891175ba69c5043889abc299a04249901252c7d25c8ef0d3d53ee03b49f4d37e388b2f74cc4f
SSDEEP 384:7NUMWpKTdWEiceKhurbZNkQMVKu6fOjRB4ZkMbxMk57TLO4+yMzeRa:bsKTkHceK4rNOfvjRBe1bxn5bO4meRa
TLSH
T13C82C0015B55BF07753AB7B52B744F22F50BF689651222CD0C9782F857CFA1186AFE20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1cc191434b7c5a0ddfb7e8933c6ffd39.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\1cc191434b7c5a0ddfb7e8933c6ffd39.webp
Size 9KB
SHA256 5e3d81502496414d15804f7d99853b12b1a5dd0f91ace565b6ed1b77de32e3c1
MD5 a16c5fe06ba0078e728497fccef05d01
SHA1 06b6b14161812ec954572f958cb1c8b7fb409658
SHA512 72e1d0e45db94da3ff55002d4234498dfa36be1808f1361debdc398e9f1a76084ebacebeb9ce16e9273737fb1334b079dad20512a1a50b7489d32f8c899445ef
SSDEEP 192:qT8QY37hbBHEN2npTD1tDbqpnHNJoQhTOj5syUgogYuUJIknEO65yTDE:qT8QY37hNk4pHanPoWij5zUgovtJTnEv
TLSH
T107129D11BE022C6157A22E19ACC7B14B57B399018CE8A4672C869C83CCE16FCD9E9792
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f97590d229e484c25eda2b3a7e5e2b5.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\1f97590d229e484c25eda2b3a7e5e2b5.webp
Size 9KB
SHA256 d239fbc9c4d199c6e6c19e3d6c009c81e7a985ee7f30a5b0eecdf7cdb906e65f
MD5 0a6cc50e921c38d86ad6da65eca89afb
SHA1 b1eeddc7bc94576fe49f2520d579bb2a39089d59
SHA512 e562ad23dc1d2afbb943589eb57f3c6781db686d6ebaf2672fe14f0992c0550ddd780dd35940b70c5d18c05c7292c56e93a32745f1c4e6b5c449a06464e4c1f1
SSDEEP 192:MbjSXAa2k6iEX3mQ2o2BbfLQ8kJOMmiebfoOZRySvknET5cC:M/R26TX3f2o6LQhmPbbcTnENcC
TLSH
T19A12AF09DC1518209B4ABCE1BDED632E5AF3AEC0D98167A536C5C84254311E8CCDD7DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20d5acdd6b6aa1f32386e853341a3246.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\20d5acdd6b6aa1f32386e853341a3246.webp
Size 4KB
SHA256 db05cdff89e196d79c615b17c8b304bab9d37d958f8f6f0cddc1ee5024ea41af
MD5 26972dda8fff5a59d20ec799152f9d2f
SHA1 83ca0efcafdd336441934c66a787ae4e72b4575b
SHA512 582cce894f5412fd5b473f5dc938f04e27282418203f801ba5fec8cab7fb35f7117f48b7a6671a7628e83edf959063d46bdc46f0cf76a6e40b47a6d40eb65ca4
SSDEEP 96:wjDKknawPnLFb4uVR432Zd3f68f5P5GPwCb/nMSa7knmWIFaVPGVRFRcRDRHzH86:wvUwPlbf68xBGo+nFa7knIrgNTc6
TLSH
T13CA17C69C62014984F0969422AB7B1576E37ECC469C4B420FCBEEC237A105FAD057B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3015fb8e938e1218d3fc36eba159df5f.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\3015fb8e938e1218d3fc36eba159df5f.webp
Size 51KB
SHA256 ff3d40120f197df7921ffb2d715576d47109d0c0b41769b84328992c9df6c0c9
MD5 188c69521e67728ef6d20fc345054b6a
SHA1 9fd3a8d6dd96be27ff5b9b405efb9b0615c48084
SHA512 4b37405fa195fae750c02de0d10ec5d925e9e0ab635f8c37b0ccf00ebb432a984e83d35cae467ad9565fd4bbdf5d99e47306292e891d4c963628215aa3ad7d80
SSDEEP 768:QnlNX0S07CINFD1cOUQVRbLoSeV2tChuQ38rJFC0+2jSuXMoCQyNNi5SI/xg+TU5:CXx8TcMmxIk8dF+2goCNisI2+W
TLSH
T10933025E874F75E84A432B8445AF882F9F8C17DCB43E212E3FA71751886C60D52E4E35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35aec07e89e7693c5bcaf8d48c6c4802.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\35aec07e89e7693c5bcaf8d48c6c4802.webp
Size 9KB
SHA256 e30b0c38f77077a53f945db9ec8db8fde6b73f146f36f5e4310823a50a44f103
MD5 7ea840c22465a01ddc8d083be68cc315
SHA1 00855efb25c3af6615c25d64ed73978d172ae73c
SHA512 efb719b5e3e57b189c82e299f2c86cdf091980ec02fb5b25e69a0a8f98644bb89231908944c82adf4b979ff617441709795e0d3520cefc8f199654d06c582e86
SSDEEP 192:cqQjh3PegIr9P2XFpmhtqsKN3M/+yQQ97yY5x5/Cd4Aqd3VBW:XQjhfe3saXAMGyQQrxBq2tVM
TLSH
T1C812C1691F80D7ACF9C53A2AD93E8048F341CF6D72F9DD31104A9A054B85697FD02D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3623c6ff5bba27dec8ffa0959b5b6325.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\3623c6ff5bba27dec8ffa0959b5b6325.webp
Size 7KB
SHA256 cde09c86abee7e00f36a0cbe0a1ad59cf5471f493629759cf64b5114a8710e2a
MD5 3b217849bcadfdbd0b1e88af6665f80b
SHA1 b02a204b0d198458906c0030103e9de55f582dba
SHA512 2ddc4f4a380b0b3791d510e1142908b2c3516ca2dff7eadfca7ed740daa5c585038e74e89120530adb80010a437740142c973de07bf193ea00e60a1d2a7f0e7b
SSDEEP 192:34QfpmS+Bj0rgy4Ied2JjcBp7/hw4n+ToAIknvc6:Imr+tSgy4IO2uBJpw4nPATnvT
TLSH
T1ABF18E66F2017CA4672DEAC128E818C63A6399664FC1E4B67CC6D44F48F2D7B110E2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49dbae98f42a555e86271620815dd7f1.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\49dbae98f42a555e86271620815dd7f1.webp
Size 21KB
SHA256 3299f010e348901decbd649d40ffd624f54f4ebc1dd606eb93b8d40eb9999fa0
MD5 6e87280b9abede3a18653f78d249705a
SHA1 0692a101ae67060f84d446fb745697a2b83b90cc
SHA512 adf9e3f02c25de4aaa02615f54ed2f52bf4f881cc0558da8ab3a52e4585c010cd52bf71a70fa1439478b0c407ff7c4afd7f0ee3375702603300754f2e40a548d
SSDEEP 384:4RNrtToQNWpCdf6tlpAIYL5oXPUX+qmI+3kP6LlgT7QOOBk5ig:4rqusEcTquXMX+qd+3kiLlgT71L5h
TLSH
T1A4A2D07D6A0BAA4517AC7F271F1438D964D8DA2C60E13F8F1179E91EDA30112439EF4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c0295aa195e7777d94e5cd9468e649e.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\4c0295aa195e7777d94e5cd9468e649e.webp
Size 13KB
SHA256 81857f7643657a9e59cb1ff27d662363f21569ed02b585d2b4ab4d660ef8c32a
MD5 3ac373f8655f5906df1cac87aff407a4
SHA1 273a3af8b9813b081ce762933e4904e91414cac7
SHA512 92d3da061df3422f7f81918e1b17951f63bca34c36426c868f416c4df4a290001060e042a3e328e1806a44b7be9522e04eae457415f366bc3b97690844ba58a9
SSDEEP 384:mgb4oLwTWwGLXhLbAbdtsRZ1N0s/cJm6yPmMsDEuR2DTP+x:mg1LhX7Wq30s/ARyPO3MzY
TLSH
T12952D03C3A4D04B0FB81B60EC484A5D534EB2249FD85E6F148DE1E2F4A14B5DA6C3AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e161316be78ce9ced668c6ebb375323.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\5e161316be78ce9ced668c6ebb375323.webp
Size 35KB
SHA256 d7d72cae352f5f9a92245b92e726a83c447163d2ba1445a296d243ab36058412
MD5 cd9fedcd42b0f579dad0366b4d30560c
SHA1 a9e76a3e7923faf59372a101c164c4834428a343
SHA512 88cf2ab456d124c3af52b5a037c7e95ea47db0c108ad3357db3d3f6a48b59d082e312d2c754f1f984016dd911d53faf6481e73bd00899bc2f81b05f05193e7c3
SSDEEP 768:/5m2s9J3tp6NmMT7l224neB0wz6wXG1vTCYgXKa9XMF8XtaoR5vjbgs1G:/9sTqNhl2BCBGvgXKa9XMqXt9rH4
TLSH
T174F20274276AEB808AAE249D37DE7DE1C31C11DC2F33829719B0B9280F79009DDA79D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

626af0d33d4a22b0652f5a521b661e2d.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\626af0d33d4a22b0652f5a521b661e2d.webp
Size 8KB
SHA256 fe27b62403fd57a7e1434355c02c1dcdebdf4a4caf53b931e98d71df0ba0a347
MD5 afb2a884601439138dce70a371601a22
SHA1 f949ced44b0b30237dd3dd65fe081702a09adfdd
SHA512 10e519a3d195274b58c9412f81a300b8bf2fd711a649b41e62740786e1943983ba5114af789b666009a48104a301d636affe3c0b56381b98e8884de5893dc1ca
SSDEEP 192:dVfAFCh6XQ6mn5dW3D1JUYFwQkqzMuu9sssXEVkR1Ao3At0V2PvS:Qg0/UYmhqzMuGsUkR11M0VI6
TLSH
T1BE12BF8B0F2FAA90231D522ADA2D07CB6DE715E530750449717B8DFF8C9C13628C6CE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

667029da6e795af6da90cef7ffa64376.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\667029da6e795af6da90cef7ffa64376.webp
Size 85KB
SHA256 698d4fcdf9dc36dee92e5c81dbe8b6ae44888c6e8f42441621b487b867c8be0b
MD5 a4e74b2f5ac3c15d84476c16eb8ec6ed
SHA1 ae3dea9243ed40cf4974dfbc360991e48e49d171
SHA512 c99430e65f01be53981262fdb53d6c453f48638579af36c57a3a00abcb4fd1b212a1b913ff5d101f8d24ea6f6e5a8ab63fd8070da127ed2579e567a0373a255c
SSDEEP 1536:IQGSDbj/vQqq9FQnd9jKaOrHKZO19Yy+NHBnjAE:xDbTcSddzOCrBjAE
TLSH
T16683F17EF796D3502F0E560CAD7CBEF26305724A10D98C438A9ACC9536CABF1163742A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

731a8729c158a7b043c4cb6537d7f4de.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\731a8729c158a7b043c4cb6537d7f4de.webp
Size 38KB
SHA256 16e6c64d225248e992f44fd36812045e8e674f942f476c94af5d43fa3d425bf6
MD5 7d5f0520258030b0810b23ba831edf6a
SHA1 4dc0ad04c5b76772ce5a04d6b7a0d341a56a0032
SHA512 a3f84b22c1f52a4a585d10856de5d8160956b4f0a70bdde69161103c65131bc03e69c50c7d86fa810fa8d6bc5018142be5827189ac6487d0faaca12efcda3514
SSDEEP 768:5OCnvaQoiv+SpN5DkCSt7aZ8Qd3zXMvutj1QYWhnQMlR/dpw2:ACn3r+UN5ACW7aZbjXMGjBMlR/dpw2
TLSH
T17103F17233ED3D695D85EB3142AED14950BEB61AA491EBADC0FD881A707538D70C3293
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ab710414ca1f7f5d5b9f98431982658.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\7ab710414ca1f7f5d5b9f98431982658.webp
Size 84KB
SHA256 26f5b4861dc4c4347f582769da6e077b2f876e4626253c1a9cf5b7f4daf29adc
MD5 1f5b8e77dc9f1ccb3ffa7d55e1a952ed
SHA1 bfef9af119566f545c27a3b7f4a86687e6694bed
SHA512 e39e1ae9db2408526ae0a45b684e152c63f2672fcd85a60dfd00cbae35721447ae282118454eb04960206071b621db7aeaf3288994f46c837468a292753b4d18
SSDEEP 1536:FZ+/dVbL+/l8CU3K2O8RdUPx7RcbjuocQM1C3RvpdM7iLTxtWYWu4IIB+:b8JCjU3dLdUJ7RauFSvpdlfjBr4IIB+
TLSH
T1B8830132E83BFA45F70F836F456D1C7B07DB157F48821A27209E9C893282B649B575B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

816468bee988a6b92e8d0e284672d2cb.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\816468bee988a6b92e8d0e284672d2cb.webp
Size 9KB
SHA256 0e55f67339b355f38ba4d824ddd97a2110723bbfe5ac73256ab3c289823cc7a2
MD5 de0677090c72d093cde2ea3008cc3db9
SHA1 563f575c753bac046e5a6ab699fb617b033b661e
SHA512 536f54d99a446f6d23f5594fe1f70245ea34581ff056f72ccca99b6381e589c3d3137ead69e24c374dfc621c02acef37e59b54a50fc72153b0910b77a6efb10b
SSDEEP 192:MJqBfoQVy2LDFBNPPmlDXuJXO8UQ0y2FYi0EkjCNJo0r7MomxtIknEZiop2:bfDdFBwlmXl0nqJZH0XMogJnEZtp2
TLSH
T1D6228D00F6161424415AEB80ECFD42AB16BB2945EDC06186BECDD91751B21FCCDA6BEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8288ed517e2ed373c4b6085fe8102e2c.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\8288ed517e2ed373c4b6085fe8102e2c.webp
Size 10KB
SHA256 984ab612f0fbc871c4c9c9b70b0c6dca64a68651c000f9266f6390e1618544c9
MD5 6f01a55729749ede3c20db0f0081a16a
SHA1 0f8e515433acb9678abaaa6dfa66380428713674
SHA512 65b6b7997ab0738bddcfc33c9a8cbe74fb93eeb84ee0716c734c9a0062ce10c3bf9b02e30992ef68992a3ce175faa063b1adb63294159e5082a9bbaa6fc2af9a
SSDEEP 192:vaXlzinphwYbu1J8Pz6SoMqEoyEB/XfbfQg+AJ/WUKOEIAcknrc6:vaXJinLg1J2wBvfbITUKOEIAvnrT
TLSH
T14932AE11C1D19E80294575561DFF2882293B68D446C2ECEFEECED1623D322F6334D82E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c0cb4d64385aa26273fe0c82a4acaac.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\8c0cb4d64385aa26273fe0c82a4acaac.webp
Size 14KB
SHA256 8085a3a72304a37c6b4cfa8e3e0ce3ef0cd563b173c0fdbe0fa330360049b6eb
MD5 f247aa4dfd6516512541f84be489ba66
SHA1 85deceec7f58a73c965f13cd0cf5ea8bb9a5eee8
SHA512 7f8a58557d3e8e72900de6a237e652210e259a81e5ceda0bdbe230bd7d9240cb6d024ce215c34afc587f05600163a798247ddf4bb17c42472283e5d5d3aed288
SSDEEP 384:FP32HKIDQ8VUXwbAp89UhdZ6HGRH53pP5vx65CPCdi1IO:FuqIQV8ahdkH0v5vrCdiv
TLSH
T1BF52C06FB685DA07EB9FD98E5746231C5363BA205681F133B68F5F2E407110C0972F91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

908baa2268b23536c3984bdfc4e652c0.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\908baa2268b23536c3984bdfc4e652c0.webp
Size 34KB
SHA256 c6476f83d2c875055f16245bb9be44e670fa6f7aca17bb8b8ac9fa82faf2db71
MD5 3ac69d548ed2d2a48b296e1d0ac27075
SHA1 700a397f8a85a38990c225fde4d79d7a361fd23c
SHA512 79bef06ccf8ed36fe8a6fa1c362e4371a7982e14193dc4fe2e521cebbc568fa61d540426e41c1136d29020b44892e5fd75a631adac1f82010a9fab2eedb570ba
SSDEEP 768:nOM37o+kyCtuRXenl2UIKzj9GKalwKdBibDknh+oOFJcsK6Gz:nO07oOCyol24zcddBqknhHOwz
TLSH
T10DF2E1DD786EF8B7F901026D2A0EE78034C94C9EE1316F5CE46C56967CC670B5D4621A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

939c6438c0f3e8c055b22796e394035d.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\939c6438c0f3e8c055b22796e394035d.webp
Size 66KB
SHA256 68a6802512d0432458743a6107195b2590ac391b73b8ffa613b8042226d40f5c
MD5 1a2a4ac32eb8c8a487dc17868a5a6f39
SHA1 d30659dce5bc6393d474d5e3cf3904d41e5d2905
SHA512 b04596f8dfc3ec1263b1ac9c307c5c08d7b7942a7b85670f39cc6d9576baa9838c3c5c1fd001e9eb7c6e5deaedbc3d01f16a223c4fc9bfa39ee654aea1cc3fa7
SSDEEP 1536:WIZda2LFF2CcT6yOojfwTLrXSufIdAcqUOC8IVGhO:X62TG+yOojoTvXSLdAcqUO5IVD
TLSH
T12063D03AF7D7C310532B906C323DBD3B57962CD061E91297589F0E421A91F3922A36BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9875c9610b069277fef546eb9ce8f871.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\9875c9610b069277fef546eb9ce8f871.webp
Size 11KB
SHA256 30a9baffaaf909a78874422558c78cec1c1514cb6c47ecfae445dc666f98775a
MD5 1a6e2db8f5661c61272cb52e95c81e18
SHA1 d012f97f475ea899612973862033862b96326c03
SHA512 1e65c3f68e3a273dd137adbcba8252b0fa5148782bf0020e362e68332d37fa2a1326d103790373bc25c2434e502111d7dc0a13330932d123655ccc76849591c0
SSDEEP 192:ziLVF1gFkVrH8kWvhSwGbTBqa7jV/YIudmkzYCH4c2+0JfwUubfNZsDaknpalEDT:WLV3ykCkWvhoBdYvky4c50JfT3npalEX
TLSH
T1A542C02BC433D840F245F9263CEF244A274F6946E7C4184AADCA88FE49E04FB1A14E79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a7d857fd557514347dbdcab5acdd884.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\9a7d857fd557514347dbdcab5acdd884.webp
Size 31KB
SHA256 01e13af46ffa8af5c01be216814cdb404b6b9c5d4e2938e3c5747f881ab72329
MD5 97455f2df5b266efab228303dd0e6ace
SHA1 abf8f24c280b54fc00288233bdf129c74a68e957
SHA512 977778321103a3a6d08ef8342f856ed4948b6a81e9ed4abe7ab45c89e3ac6f21e4a71a82ae4d663aaf8c0258e36c2658b85ac6edca568bb98f07bed3dad1416d
SSDEEP 768:XfMCSjpFAW7b/QC1aci0q9/6qQv+WZcvz8nTS:te7brab/6q++WZ20S
TLSH
T178E2F171C0EB8C325FB554EE5320E1D2B15398CE16B9B76B181F19CF572A46CE94250F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a708ba242bed939ff0186903886f05e9.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\a708ba242bed939ff0186903886f05e9.webp
Size 8KB
SHA256 9e2f4290ff8ab8abeb14f32374646262d933393d465ce8083f55a96a6c2c108c
MD5 7fda09b3a6c4216e4410e467444ee579
SHA1 f8c51d2f56ba3bed8d74bdf36bb10770520fc66e
SHA512 695fd676a15815600d021d27039a04c10a9e4d91df64fe2ff9d4cbd77a458dbd4fb4be15f774286ecdc378411923ea6063e3f16ba7d261b99e9b00e724da55e0
SSDEEP 192:1K4nOTBLr+mek8+aAJd4CKY5Ctcf50EFNUuwpJrkO:7OdPot05COf50EFqucJoO
TLSH
T17B02AE53E7DA1C62A5F1E895AD2D7CA1182CC0142119A279673EAC29D89CF242F2638D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a75576de6b0aea38b72399121ca6e8b7.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\a75576de6b0aea38b72399121ca6e8b7.webp
Size 11KB
SHA256 ea60599df2a03b9ddb1f77d9d564f947739150844f76cea685f84beedc56af64
MD5 c119175e7527393d58cbb8d76f110c91
SHA1 5249cb2b46fe51d31a46355494cae165457725a8
SHA512 28f03a39c59a6c4675b6183f9788fa62da83f95033b223ffe71c9365bd40d7036ca2eee85029bdee9b92115221a6306d27af541634dffde970c459391b7390df
SSDEEP 192:G0oGQQPnTyS7k5wEN652MRS96eYAK1fnWcpus8Rpb9M6cPsMXTbJfSqf4jEweYxn:G0rfuS7k5i57C6eYAm/Oo6c0MXTrTd8t
TLSH
T17532CFE99F0289FF63A3C7B7158620248692A7C9CE2D28C77D4321D17E50376465C4AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa90bf347f741536f777e3560c53ea67.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\aa90bf347f741536f777e3560c53ea67.webp
Size 28KB
SHA256 cddd8f2e36b5f86c7eedaa8f0e98feb3c5513c5eb0f0bd298aad6a9bff550b77
MD5 b5e56e87f0e9969d286b7f0fd2720e24
SHA1 c8dbef819d9eee36c6e59d48ce23b467b5d5e5ad
SHA512 e049b75d77058890168ce3d06d657a0d2c9eb68ac996eadac3d4996c95a41949f5f4ca03a29b2522d101e56ca79e4b03c581106aa6640eb32271e04cd6368c80
SSDEEP 768:Hp7zOzTjRd/SZlhuxsY4xrz3nMlLUVVsdRubv6Lz9U+EH51umaENEQ:HB63cKv4xrLoJo6vXEH5PaENEQ
TLSH
T106D2F2D54AEC5CA6F289423B5935F5B501FF441745B383CB8E93D8201918B9C78ABE8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae5e5005cc18ce5ab8ebb277d99564bc.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\ae5e5005cc18ce5ab8ebb277d99564bc.webp
Size 15KB
SHA256 1c0890ad59c0db29064d73de2fcd696b0fbd459ae2be6373df79f11ee6ed6607
MD5 1d948fa94ae32afd5bf944eaad03df9d
SHA1 845e2ac71c04c670cd8d30ba132e3430c528c6a7
SHA512 0ad17a5cc8570c9163dabd268b4139c42371c02df333c5fd9e9318056d91a7d8fd5942f1bc215eb173d8330ce50c5bda8be6e60b9f5dbc171b049891457b21d2
SSDEEP 384:i9J8InQbRzTm6ODCM9mJXgVEbCSsL5pMStTmdn1SCT:FrJF89mJXFbCSsVpJtTmdR
TLSH
T17462D12FF519F9D106ECF95AE9C0AEA6B11109D0A75304C7F9D227628F658F1E44C1E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1e70c017c0196d9ad41b86e0d9128e0.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\b1e70c017c0196d9ad41b86e0d9128e0.webp
Size 15KB
SHA256 0e17a6abfa98127c1e039a4dbe3ba9e0a34fc95e5531c9b1ebd40f41df8756a9
MD5 75bbf457a73c38e07a05384641f1478c
SHA1 11a296ce6f9001862f3b46c7bb8c0046b17e8010
SHA512 6fe56782cc155b2585e4f4974cd1a87d57d8e74acbc80852ad73fb303a69e9597ecdf13175812191e691c744a3b55be12274b4e5569ec0d7995bc83682bfd1ca
SSDEEP 384:zLPCDU0yWbihYXzDKUDCMlHGWghapUsHtQtdQJ2diHMIf8d:zuI093/mM5Gc6KQt6zfa
TLSH
T1CA62D12A6C23CEB812CA2163CD3DB1E924101DF44FA64320EE65EEF571E5F706CA1497
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d635892aa9a4d2b896a39737bb8f9f80.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\d635892aa9a4d2b896a39737bb8f9f80.webp
Size 39KB
SHA256 cb842639cb623bdf6092353fe9c67e34c7b0d06cbbf809e6fdefcc89f72615b4
MD5 db6ddc56d1565136ee79ddb15a81b28c
SHA1 dc59c0d8655bab01dadd96517535b87b1ab32881
SHA512 66228d15bb05bbf199c9c1e712950745094fa8de852a6b5bdb91c5e5131e14b6254d1173421a02a0c562c44e3138b4ff17259863919806b02f5d04ee633ab713
SSDEEP 768:+k3bA9DtVWO9Y8DsbS1bo87fdbmQFlZRYLTeqWKrVz5RJs0L22Ddt5jqxTR7:+k3s5fsbtylRqqqFRzvyOf3EH
TLSH
T1F10302D10013E3A92DDDECAC8A2319DF9D09B4B1ED14A28765C9834D8192739ACB6DED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d842b0a6ffc8f0c686497037623fb2bf.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\d842b0a6ffc8f0c686497037623fb2bf.webp
Size 9KB
SHA256 ff4c27421cca4f750ac1ba54dee31d6f3bb688b45b05f462a2cb963d60585faf
MD5 73af00fa6144566885217ca4f29f73e1
SHA1 ea367270000485e11706506adee764cd52445835
SHA512 f7de150eec8055fb375eaf1b8d6d497e565b9eb571e7263458ae910b56de34aee3eed9e726192e8253c87e95bd7cf1500d82b478c9689f64e9cd633135d746c4
SSDEEP 192:oYKLQACxJjs/T5ooZo7J8KA0lG23xfKkWV+DbbDP2bknEGJuGw5:VK0AujsrLZgJ8KAwG2BfA+j72wnEeRw5
TLSH
T157127F58F50221000B8A3F496ABF869B4A37458B5AF07097AFDACC012C550FFD9567EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d957df5ffd7094ce8f53ed4fab03901a.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\d957df5ffd7094ce8f53ed4fab03901a.webp
Size 6KB
SHA256 f1cb5a83f8b2741a7a20827d3600a02c926f69af9e12274ded70291a2910ec25
MD5 6fe34b549e026867c5e5505a5a3135a5
SHA1 5359c2424a822d627dd94023c6db82804f90b582
SHA512 cbeea7818972e6f4e9a068876227ae32e2cd8b76ae3049bd88bc36a37ef6c8053b846c6a43d0d503df54c343b8ba9d40d03052a3e25cac7297bcab76ce6bb27c
SSDEEP 192:4NeW2njGAJ0DwHEiEJSeFvEJUkWtknhc6:4UW0HgwWJbbHOnhT
TLSH
T139E17ED295F34C94BB306C807ED4C2D32762A5D50A8154C36CDA7CDB93762B06AA52AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd191ce20c0b448ff4f96e3faa35707d.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\dd191ce20c0b448ff4f96e3faa35707d.webp
Size 15KB
SHA256 ea59b03ddf672a970a28416295e2e726951ec710f09836c0836045718d139cb5
MD5 225443550cf8e83874a2da30358d19c9
SHA1 79728cccdafb87492d5d3d951523b0bdde319ab7
SHA512 3eb591b876da8c568fcaba00df6e6482cb300fb67e14f9f3bc44ab2fcb47e50e92a75e9a2d9570a7a745a747576b5623c86cd7d794d96b21f17da335ddd62410
SSDEEP 384:Wq4eAXgp5iq+ALLMjjOkdNxo3MAjwuXjG0yIp74wc9RFy3:WxXUiqxLMjBdPIwwjT4R83
TLSH
T1F962C0A2531D1B007661D63FD47BDF4AEE2990FC81DF2929DD20E0A90BED5664CB1A31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd919fec3fdb56bf251854d5c29fc9e0.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\dd919fec3fdb56bf251854d5c29fc9e0.webp
Size 9KB
SHA256 46e210aa8d765d2cfde603c4c27643a38e8710aed3249441f5b1cc69d8c9a8b2
MD5 588aa85ee052612aeabe6004afba59ab
SHA1 565db370eea274452cbd5b0f7983d0f5d9e1d61e
SHA512 36671ce8cd1d8a8502df86c4440e578a381eebc53474d02ea86c8ed23be62f32a057e80c1b93dfe741de52f3a31d0be5d1c4e6348ed70f7a152d5ffd5ef3935d
SSDEEP 192:KbY6Hbb/A+f6yDIe/9oSQrcfbGm/XZaL4ivoQOj4ZT9qHyEQUrH4Zkn/c6:KbY41P/WZAf364iAQIgBbEdTrn/T
TLSH
T124129F1ACFC0D82C3708D8482AB62287072EEAC15FC594A47D9FD83779345F7999E865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de7912048910995cd25c720efe2a3696.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\de7912048910995cd25c720efe2a3696.webp
Size 31KB
SHA256 fbc8b619b43abcf3fd38aabf8ba9f8dc673957d76a08ed0e8e7aaf4c106ea3fb
MD5 d22c83d666f431ec2b3921dd3d7a93dc
SHA1 17967dc2c1c762b998adfc884f3f791f3e3d506b
SHA512 858cf439170acf23ce0f44196e82162ee663b688dae11caa204959e06de74b77c3672de0be5a8a71c9f1437da8362e95719e7e847fc557faf45344c86a501860
SSDEEP 768:HoR5EhdU3FxyijKhbCf8QlX29Lc3T2YCtiCBUboBEFl:IXEhGv+hOfpFqLsCWWil
TLSH
T15FE2E1CB2CDDAF584BBB411E5E7B0F8A6E2C4BB2567B09D7BC000D91A33962137D11A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfc86cc55e88d2e58422721cc12e186a.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\dfc86cc55e88d2e58422721cc12e186a.webp
Size 3KB
SHA256 9b445a05c6e650e01c20755a199bb86ca20784c1c2436866ef5029bdbd3f8f65
MD5 d125fcabc510781cca8a55b8cb3c8f98
SHA1 3cfeb563e862db36f5ec7309c6a0dfdbcb52a25f
SHA512 bc1e6c8a363d7b8898ff9f8e1c9402ea6c49959a6d2873a8885fe0f0fd6ab9e33b4ad579b62aa8f54efac4f6db8c08789db5e85331e820c16891cd15d21799b2
TLSH
T1B0816C8D2760874A74C473EADBDB1F520149840A3CED4DC93876A7EBFB9B9120C43597
MD5 SHA1 SHA512 TLSH

Submit Download

eeaf324c921ac5b1ee4972584f7438b7.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\eeaf324c921ac5b1ee4972584f7438b7.webp
Size 9KB
SHA256 49298589a2af4650bef80ec531ffef11563a748a3cdef0ec20063569077c9c57
MD5 dd3a2c93d81229f2748acd0c7d9133a5
SHA1 7055c497b9ee35a9522cdde383215f8b9e0bb062
SHA512 e1ca876fac1126b4b1bbc0949416093b10b1ccd432d2f6ef7659fb37345ddd84fd1ff8daaecb82a806b61bba7a5b59b55cc04e0bc370e5aa67ece0e73e8bdbcd
SSDEEP 192:JNTxQXF/9GI58ZHXoNJCeW0fz57y50jPNQKjJAREsXFvknA4b+wc6:fFc/9GIOWkgbGuPNVkFcnJT
TLSH
T17722C05CF961AB441D162028E5B8E7F6E1A32680EEB2D4B06CCD746230F5933DBECD55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffe635c7f29e1588441fddfec12dee69.webp

Path C:\Users\Admin\AppData\Local\Temp\libCachedImageData_v2\ffe635c7f29e1588441fddfec12dee69.webp
Size 29KB
SHA256 53448fdef87d0360483a41510b334682122aaeafb3d1d6f4aba4cca1cc51beb0
MD5 56d26801a595fe26f98fa90f74430c33
SHA1 241471caff5c0052c9bca940b95675572a383820
SHA512 3242a2f4999dc17c3fbb8d6312ee1719eb16c7381f55c0d10e9e0554b9b36e54aa4dcac35893f45cba6cb800725509e15d807ba829b1db520a145f514a7766bd
SSDEEP 768:fAhubSYR3NgF8I5e0EcjUtSYu3s8RZCSKaJ9mHG/:ohunSuKLPjUtSYu3sM59mHG/
TLSH
T130D2F13900CE5969E26345F0710A9A7DB398EB1A065D0DE311B83F86F9D6A1DC7C21FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Update.exe

Path C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\Update.exe
Size 1.7MB
SHA256 19a9ed41a69c74f130f53572aa1b07b1fa35d93a408dcf9d3f16f0fd72dd1e69
MD5 4a5dbd3d6263eca75561a21b98aa4353
SHA1 9308061daf870e2c3b002c5b5ba81556c6e03873
SHA512 1741d133badccedeedc68079e1f6dcaf116bad58b85292031da2759ca0648416054d5806edcbf0910a276a95a76c4b21d2465dd1d994a068a1db5ee47632bd11
SSDEEP 24576:nh2mtSvdt2h7tDo4IFOtKhuqhju3hUjZtUagcR:nwlr2ptD5uuqY3hE
TLSH
T1C4856C11E7DC9E2BE9AE277AB475019813F2E6866372F74B2B0CA5792F933504C01763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui_36.asar

Path C:\Users\Admin\AppData\Local\flauncher\app-0.0.36\resources\packages\ui_36.asar
Size 3.9MB
SHA256 6617deca97fd580061a8603106f3f7a6bd1d01e9b290f6d820c1ac281e8e0ee2
MD5 500dd99527485b10f7b20e3a0b0d29de
SHA1 30e93e500800aff42d0095557631e640d2080b3c
SHA512 1f14ab5883b8dda5cf4f6a4fa8bc651092930a7a17f8c7729146c65d251e7a0c128036061e522593156070ac193167baf7e783fba8619735f9f58bb36ed7cd5e
SSDEEP 49152:QQVrP1rdLwz7W1ckFiRz5skhL8Kjej0xGg/yDKrsRIgoMeFChBsSqU3gQoetNC:lJAIeLN4ESA
TLSH
T117164B98B291703543D761B5803F150FB23A6449B40B81A8F678E8EABDBC94D6277F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\FLauncher\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\FLauncher\Network Persistent State
Size 1KB
SHA256 15bc528614cc9d4c008ce9a1bbf29644a307c2aa00dbe4f04c51d14d3d46de51
MD5 bd67b3d7bf4b6e72354de3d80daae320
SHA1 30185e4fc25366ec3909fd920056865097adeefd
SHA512 60988e87ae419dbb998619ff9bbeb0939871aa848a4a7e6a4b7ff8215c925640b30b725abd944de6831fe63453d981e925d33ca93fe0ca950982923931976e47
TLSH
T1CA319C87C2D84A7E855393F257353322C27E459C92153D0DCCD9DF8F63E4876661246E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\FLauncher\Network Persistent State
Size 1KB
SHA256 c6c6ab7798c832abaf8ffef858fd74f979a915f776dea639a8bae1a6ab9faff6
MD5 c2497388d21c5c6880e3505617f2244e
SHA1 4accbf79064bd8457e2be066828d7a0b6309212b
SHA512 75d8ff27751c4c3d431bb5e7cb4a95cf5a229cd9147a786989691be61050009e3535882ef8107e6a3b3d2a84f0e9c2b78830b30f35b52d4f62210f65ecd67469
TLSH
T10F319C87C2D84A7E855393F257353322C27E459C92153D0DCCD9DF8F63E4876661246E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\FLauncher\Network Persistent State
Size 59B
SHA256 c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572
MD5 78bfcecb05ed1904edce3b60cb5c7e62
SHA1 bf77a7461de9d41d12aa88fba056ba758793d9ce
SHA512 2420dff6eb853f5e1856cdab99561a896ea0743fcff3e04b37cb87eddf063770608a30c6ffb0319e5d353b0132c5f8135b7082488e425666b2c22b753a6a4d73
TLSH
T1D2A0026ADA612D881B4A839026187553807B0445130982FDE43877A841561AE582C865
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5d6823.TMP

Path C:\Users\Admin\AppData\Roaming\FLauncher\Network Persistent State~RFe5d6823.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

a6b0989c-c110-4207-9573-075cf920b1bd.tmp

Path C:\Users\Admin\AppData\Roaming\a6b0989c-c110-4207-9573-075cf920b1bd.tmp
Size 537B
SHA256 ce33e676ba1e4bc14ccde565c9fcf15fc5f3d044377342c774469cd892b12e3f
MD5 04df6aa1d5a4945924d972c6419fc394
SHA1 23e65c391bf67a8210a5b09e2a2110ee67e5ea7c
SHA512 91f24bd517946a7ffd94d1b5131f3d0d8ce02202fa9e4574db784132f1dfaa35850cef22bc9f50224cb6e5265fcbf8d04c02190e72bdadd82ef0e4f6d615244a
TLSH
T1EAF02B6292FAE527607C0AA60C58BD296F7AA03C428150F5DEE7427CE0C55B7060B077
MD5 SHA1 SHA512 TLSH

Submit Download

game_icons.zip

Path C:\Users\Admin\AppData\Roaming\com.swiftsoft\ExLoader\games\game_icons.zip
Size 150KB
SHA256 d167fab38e0bd9a5f9cbb8b983f1c2238ea09840e85e45add0b709988b99adea
MD5 fff54882c4fdf5d056233d1314e30ebb
SHA1 18fed8b0ba2c50b49d8600b305183ea7477d5e43
SHA512 9643b6cdc2ecfeb40603f947164b39261a768d1e50ccb3d08ce4f6050249d68ff1afe060bcbd4114b77a92826d272da08c1abc053f12d5b43fa13d97a9cc8dfc
SSDEEP 3072:lCO5Wemvcm5WMW1PmUTQHN0wiNvrbOH7oGLQnYy8whuw:r5WDKPrTKNaNDghLQYyDhB
TLSH
T174E302571CA1C644D12F89794653829F098C49899260BA9F8202DD3A6FE4BAC4F4EDFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shared_preferences.json

Path C:\Users\Admin\AppData\Roaming\com.swiftsoft\ExLoader\shared_preferences.json
Size 190B
SHA256 8ffade77dc7073f72fc73b6510977ab0f425852d5c5e523f7432d5e6f26e7cf5
MD5 165ca7113da2b970a1bd7b921312c17c
SHA1 1b17c845eaa73975cefa4854315aa85e564775f7
SHA512 27d127b8bb02183ef11781c83b525b305cb58739c8fb90706ee023d9ae8656934c6339923a63b8149bc721c1bd9fec5bfbccfee8077e371314a68e11b33cab0c
TLSH
T12EC012C69FC402C17DE5CE41947D75F192BA5945C9C2040E0A3D105C8783A2EE7EF936
MD5 SHA1 SHA512 TLSH

Submit Download

shared_preferences.json

Path C:\Users\Admin\AppData\Roaming\com.swiftsoft\ExLoader\shared_preferences.json
Size 563B
SHA256 81bd6a94a05ad40e1fa9d940b92b1f584aa535280d9f81676105a5c1d78ede77
MD5 f02d99ce0692f2c4e9a960e618268033
SHA1 e632ddb03e1db1085c43d8d525b58edac653773d
SHA512 cd8abf77d6947514c27aff0331ae5649d805ae298b6f6d44d15d52b174e9de40b1a17efc42dcb1ee7a80e5e0bd854eacfe2c35a5ef102f561e7604f24970d6d0
TLSH
T1FCF028F5FFE040A17D89CC94603EA4F245535C05D8C70445987F008CC34222AF1DF46B
MD5 SHA1 SHA512 TLSH

Submit Download

locations_v2.csv

Path C:\Users\Admin\AppData\Roaming\com.swiftsoft\ExLoader_Installer\network_fallback\locations_v2.csv
Size 7.9MB
SHA256 f2dd4bf55fa510a89a8e267e936946f3335417c85a0a4c88c1b4d240a93ad6a1
MD5 00f97e6216e82a66ab759e5dc4ae24c6
SHA1 3aaa256854ff4fd9a5510d3c133c85d6cb1b7b7f
SHA512 b17767bc4c452207daa64a230001c06dc816f1772c988a0ff06f65d8e5ff5f6ca3668c20cdb560a2eb09980288fcda655cff3773da077bec1b65c0a0655c9879
SSDEEP 49152:gNC36DYkXxJHnDyx3xrDOD4dXMtvwyubD7nLXxzc85BTC3Ah7ij0Fan0kR0hYc49:m
TLSH
T1DB8608E01660DDDBF3EAC793C5621C1D512BE02B222616B4B5C7F1AE891FBD090B1D9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExLoader.lnk

Path \??\c:\users\admin\desktop\ExLoader.lnk
Size 993B
SHA256 74a55fa4f1152d1c8b048db72583dd61cc6de392fb7c60213d2795b5304ed7d9
MD5 7d5932fe867b593dc3cc7a4edfb164ed
SHA1 50bfd012421b9334cc2b11dfa193b8318461432e
SHA512 8132a900ce5459e3ef41c3081469eb861636fc072e2cbc418cd7d1cb6a83e0eeefe513db2755b58733b9f23c5adce53e94a264e018e314b5195333c38602dab6
TLSH
T169118E140FD71B3AE276C13899724B12C325F402E35EDE5F41C8428848B220176ADFBE
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1212-1990-0x000000000AFB0000-0x000000000B08A000-memory.dmp

Download

memory/2080-1225-0x0000020949C20000-0x0000020949C32000-memory.dmp

Download

memory/2780-1981-0x0000000004C10000-0x0000000004C30000-memory.dmp

Download

memory/2780-1986-0x0000000004AC0000-0x0000000004BAA000-memory.dmp

Download

memory/3252-1992-0x0000000006930000-0x00000000069C2000-memory.dmp

Download

memory/3252-1888-0x000000000A040000-0x000000000A078000-memory.dmp

Download

memory/3252-2051-0x00000000051C0000-0x00000000052AA000-memory.dmp

Download

memory/3252-2052-0x0000000005DF0000-0x0000000005ECA000-memory.dmp

Download

memory/3252-1886-0x0000000000760000-0x0000000000924000-memory.dmp

Download

memory/3252-1889-0x000000000A020000-0x000000000A02E000-memory.dmp

Download

memory/3336-2132-0x000000000B490000-0x000000000B56A000-memory.dmp

Download

memory/4196-1989-0x000000000B4E0000-0x000000000B5BA000-memory.dmp

Download

memory/4300-809-0x00000235107B0000-0x0000023511C89000-memory.dmp

Download

memory/4300-866-0x0000023514940000-0x0000023514952000-memory.dmp

Download

memory/4300-808-0x00000235107B0000-0x0000023511C89000-memory.dmp

Download

memory/4300-810-0x000002350E130000-0x000002350E131000-memory.dmp

Download

memory/4300-806-0x000002350E120000-0x000002350E121000-memory.dmp

Download

memory/4300-807-0x00000235107B0000-0x0000023511C89000-memory.dmp

Download

memory/4432-662-0x000001FAF1930000-0x000001FAF1952000-memory.dmp

Download

memory/4432-676-0x000001FAF18E0000-0x000001FAF18F2000-memory.dmp

Download

memory/4432-675-0x000001FAD7B30000-0x000001FAD7B3C000-memory.dmp

Download

memory/5436-450-0x000001F225400000-0x000001F225401000-memory.dmp

Download

memory/5436-454-0x000001F225410000-0x000001F225411000-memory.dmp

Download

memory/5436-453-0x000001F225930000-0x000001F226C4D000-memory.dmp

Download

memory/5436-452-0x000001F225930000-0x000001F226C4D000-memory.dmp

Download

memory/5436-451-0x000001F225930000-0x000001F226C4D000-memory.dmp

Download

memory/5544-2127-0x000000000AEE0000-0x000000000AFBA000-memory.dmp

Download

memory/5544-2474-0x000000000AEE0000-0x000000000AFBA000-memory.dmp

Download

memory/5544-2563-0x000000000AEE0000-0x000000000AFBA000-memory.dmp

Download

memory/5544-2328-0x000000000AEE0000-0x000000000AFBA000-memory.dmp

Download

memory/5912-2403-0x000000000D510000-0x000000000D511000-memory.dmp

Download

memory/5912-2405-0x000000000D510000-0x000000000D511000-memory.dmp

Download

memory/5912-2404-0x000000000D510000-0x000000000D511000-memory.dmp

Download

memory/5912-2395-0x000000000D510000-0x000000000D511000-memory.dmp

Download

memory/5912-2401-0x000000000D510000-0x000000000D511000-memory.dmp

Download

memory/5912-2396-0x000000000D510000-0x000000000D511000-memory.dmp

Download

memory/5912-2394-0x000000000D510000-0x000000000D511000-memory.dmp

Download

memory/5912-2406-0x000000000D510000-0x000000000D511000-memory.dmp

Download

memory/5912-2402-0x000000000D510000-0x000000000D511000-memory.dmp

Download

memory/5912-2067-0x0000000005A20000-0x0000000005B0A000-memory.dmp

Download

memory/5912-2054-0x0000000006780000-0x0000000006CAC000-memory.dmp

Download

memory/5912-2400-0x000000000D510000-0x000000000D511000-memory.dmp

Download