Analysis

  • max time kernel
    42s
  • max time network
    47s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    31/07/2026, 03:09

General

  • Target
    reboot_launcher-10.0.9-windows-setup.exe
  • Size 70.5MB
  • Sample260731-dnphxasfla
  • SHA256 cef47d86c4d9002aafb53d4bb3190ce6e9168227698f2d560e0150e13f331106
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\reboot_launcher-10.0.9-windows-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\reboot_launcher-10.0.9-windows-setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2256
    • C:\Users\Admin\AppData\Local\Temp\is-T4RSH.tmp\reboot_launcher-10.0.9-windows-setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-T4RSH.tmp\reboot_launcher-10.0.9-windows-setup.tmp" /SL5="$B0036,73031934,832512,C:\Users\Admin\AppData\Local\Temp\reboot_launcher-10.0.9-windows-setup.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2864
      • C:\Users\Admin\AppData\Local\Temp\is-H92T8.tmp\_isetup\_setup64.tmp
        helper 105 0x444
        3⤵
        • Executes dropped EXE
        PID:1268
      • C:\Users\Admin\AppData\Local\Temp\is-H92T8.tmp\VC_redist.x64.exe
        "C:\Users\Admin\AppData\Local\Temp\is-H92T8.tmp\VC_redist.x64.exe" /quiet
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4140
        • C:\Windows\Temp\{D06C940B-3295-4737-B134-26D86168C978}\.cr\VC_redist.x64.exe
          "C:\Windows\Temp\{D06C940B-3295-4737-B134-26D86168C978}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-H92T8.tmp\VC_redist.x64.exe" -burn.filehandle.attached=652 -burn.filehandle.self=648 /quiet
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4728
          • C:\Windows\Temp\{0D6229CC-585A-496E-8C44-09FAAFAC4DEE}\.be\VC_redist.x64.exe
            "C:\Windows\Temp\{0D6229CC-585A-496E-8C44-09FAAFAC4DEE}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{BEFE4676-B644-4D6B-9CED-FA8EFF382285} {77F5FBF4-E46D-4EE3-B5A4-52E1DDBDCE4F} 4728
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:4460
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:2336

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        app_links_plugin.dll

        • Path C:\Program Files\Reboot Launcher\app_links_plugin.dll
        • Size 131KB
        • SHA256 037b4f9c0e3935ab155dfcbeb24395f3211d4ec9ed9901bb9598cd41fa98a9b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.so

        • Path C:\Program Files\Reboot Launcher\data\app.so
        • Size 7.5MB
        • SHA256 a3a87347b95d3558ea941e067bb499c816dbe2f46fb2eb5b19a406f97e9503a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AssetManifest.bin

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\AssetManifest.bin
        • Size 69KB
        • SHA256 cd6f246d68b0f60b7b568b4821a5c213df569588df251cc7bc0c619950474644
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AssetManifest.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\AssetManifest.json
        • Size 65KB
        • SHA256 4093c41db4ae76c9cd3d61ac99b53aa6a95ae50fbe692734a8eb685bd440dab3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FontManifest.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\FontManifest.json
        • Size 505B
        • SHA256 bab67ac982d2e5d466a5baafbd9e004c5ea1e6e07881327640a1028dd0395d90
        • MD5 SHA1 SHA512 TLSH

        NOTICES.Z

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\NOTICES.Z
        • Size 99KB
        • SHA256 aeba4ebba1bf23767e2d91df95c5690e7f7cf81dd8ea6308f4f7653651f4e1c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NativeAssetsManifest.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\NativeAssetsManifest.json
        • Size 45B
        • SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
        • MD5 SHA1 SHA512

        DefaultEngine.ini

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\CloudStorage\DefaultEngine.ini
        • Size 838B
        • SHA256 eaee7cc6f9be71e194bb9462180d0f67628b1c429bfe008e9b4a19f7f50583d1
        • MD5 SHA1 SHA512 TLSH

        DefaultGame.ini

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\CloudStorage\DefaultGame.ini
        • Size 3KB
        • SHA256 d6614ce021dd15fdc0bd3724bba982463b6957baaa5b650664ce6bdeadcf836a
        • MD5 SHA1 SHA512 TLSH

        DefaultInput.ini

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\CloudStorage\DefaultInput.ini
        • Size 140B
        • SHA256 fe79e7f0881f826b0ffdb7da24fa7dc7c4f1431dc56c40a51c16cdd4095acd1d
        • MD5 SHA1 SHA512 TLSH

        DefaultRuntimeOptions.ini

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\CloudStorage\DefaultRuntimeOptions.ini
        • Size 743B
        • SHA256 ff49d46eee13650648b41b38a4bb296cc93f114eb2a362aa49e2a50c6d05db5a
        • MD5 SHA1 SHA512 TLSH

        catalog_config.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\Config\catalog_config.json
        • Size 635B
        • SHA256 0a4eef6a8209257169e846ae7ae3c1684858cfbbe2e5b0e8cd8cdd1e4cc7d31c
        • MD5 SHA1 SHA512 TLSH

        config.ini

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\Config\config.ini
        • Size 3KB
        • SHA256 50aaa4c475a0aca4736fe7bd6be3101256d6e19e9e27d94a6a3a3f91b5d3f191
        • MD5 SHA1 SHA512 TLSH

        athena.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\athena.json
        • Size 3.4MB
        • SHA256 ff417351ea4c62cae7958235c7fc5289af46c7b40c1a75dde640ac5543415c2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        campaign.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\campaign.json
        • Size 1.7MB
        • SHA256 3607ba803e160dbfcfa044d90e17c35bfc40cf41265cc7694c62bf1f73421ffb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        collection_book_people0.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\collection_book_people0.json
        • Size 5KB
        • SHA256 9aa8ff09c85347e317bd70eb8ef5e1d58771ac6931babc6e38acf79fed6476c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        collection_book_schematics0.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\collection_book_schematics0.json
        • Size 14KB
        • SHA256 e31c06b4ad1effa8f47897d27ecb2c4f39a6926bdc09dd39c60d81463d2d9915
        • MD5 SHA1 SHA512 SSDEEP TLSH

        collections.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\collections.json
        • Size 318B
        • SHA256 b44bed9630622dddbe1a8fd6d2976408afe3adf670f7828624295ce9248cb1e7
        • MD5 SHA1 SHA512 TLSH

        common_core.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\common_core.json
        • Size 61KB
        • SHA256 205bf8be349b09cfe181c1a1f25a22b468ebaeda795cfca19a760e4f5273bb20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        common_public.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\common_public.json
        • Size 451B
        • SHA256 334d7bb8264008ff275edb1e03b74a79ea17f4535f4d0fb0fbd7102a40381fde
        • MD5 SHA1 SHA512 TLSH

        creative.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\creative.json
        • Size 315B
        • SHA256 d18728f8211e3e627475e329f4092b0867219bd604994314a2e7617198594741
        • MD5 SHA1 SHA512 TLSH

        metadata.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\metadata.json
        • Size 7KB
        • SHA256 b1c67941a6b5897a94dabb2d679d054131fa5694b8cdd2b138bac5eb1180966f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        outpost0.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\outpost0.json
        • Size 355B
        • SHA256 712425333fc3c65ba54a86f72113e95325277488094960386c2fc086089f3222
        • MD5 SHA1 SHA512 TLSH

        profile0.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\profile0.json
        • Size 962KB
        • SHA256 6fbc08d8e400970a01ad7324cf196f882d670a1c138b0786ce3425976c1296f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        theater0.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\profiles\theater0.json
        • Size 18KB
        • SHA256 65e1a8bd315106d9c76c019e7e1927ab42513e5a0d651e7888cca53459c05cec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Season10.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\BattlePass\Season10.json
        • Size 9KB
        • SHA256 c47df9312dad194aeff6342dbba8451951c5145db686b5985593aa5a1914a0c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Season2.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\BattlePass\Season2.json
        • Size 5KB
        • SHA256 3e350e6788bcf3989b8a74bafc2ad5d33f9d8b60a8d6c6356d916ba8d37f5880
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Season3.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\BattlePass\Season3.json
        • Size 7KB
        • SHA256 80fbc5f942b56b56aa81c29550d95e035d0e9ded59f4b5b5477162a3efd45a34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Season4.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\BattlePass\Season4.json
        • Size 7KB
        • SHA256 f4a598082ef9263f4fdbdbcdb4e2a17dbf115937d334ce9bb14bd61ef72f4c6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Season5.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\BattlePass\Season5.json
        • Size 8KB
        • SHA256 d02ebd9878892cfbc254f0df6830a5c69fd4344c0b92c9937fe0d277ee51af1a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Season6.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\BattlePass\Season6.json
        • Size 8KB
        • SHA256 eb5f67065c0de33b12ffe5157f781122c479d42ccd736bf0bc9d39e8da36b33c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Season7.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\BattlePass\Season7.json
        • Size 8KB
        • SHA256 9ccf7a0a6c6a2b6768ae26fac14c42b3905be6f048d86b392c523513aec07203
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Season8.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\BattlePass\Season8.json
        • Size 8KB
        • SHA256 4ba8dca8362da492f7409a842f27a261bac3ad15172f5edaebf17a3ed1cc5616
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Season9.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\BattlePass\Season9.json
        • Size 8KB
        • SHA256 626b8d5b3e4cefb2fec387c85e415e353ef41e99dbad66cf8ec5b98253bf3b8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        discovery_api_assets.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\Discovery\discovery_api_assets.json
        • Size 4KB
        • SHA256 480bfa9fa834a81d510f4eec6100ef838af59fd0005b4c5a983b9a61b708438b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        discovery_frontend.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\Discovery\discovery_frontend.json
        • Size 12KB
        • SHA256 e1ef77369147073c256d3fda7df5a53cdd93941a576d5653313b5c7970173a49
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SeasonData.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\SeasonData.json
        • Size 1KB
        • SHA256 4f9e790f9896675cfa208894e6c873d07bb80792f37c0b041db7965a34971632
        • MD5 SHA1 SHA512 TLSH

        motdTarget.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\motdTarget.json
        • Size 2KB
        • SHA256 4b6f850d5ef0ab4eec6c48850d65a21bc4badb988da513e8d00ca4303fa3bdfc
        • MD5 SHA1 SHA512 TLSH

        winterfestRewards.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\Athena\winterfestRewards.json
        • Size 3KB
        • SHA256 4f8a87e72236380977814612fa6d3153941f63a9e47f7c76229c74c55d3f3405
        • MD5 SHA1 SHA512 TLSH

        SAC.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\SAC.json
        • Size 75B
        • SHA256 e7e8b90237bf18690fe25f99c10bb63a3cdffefe123e3af8417710f94b90a29a
        • MD5 SHA1 SHA512 TLSH

        catalog.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\catalog.json
        • Size 368KB
        • SHA256 6791428c5fe58268ee5883d7c4b7fd7a63c0b6c57387a14b6a628738794079fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        contentpages.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\contentpages.json
        • Size 248KB
        • SHA256 6ccb67c540bdb8b5783d676b87f2dce9639de47ce5a10e93dd01736847d65ad8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        friendslist.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\friendslist.json
        • Size 1KB
        • SHA256 0e4d6aa8ed1c25d27c1456d4c50bb5dd3a08e05bc577edcb7dbb927b0cc55577
        • MD5 SHA1 SHA512 TLSH

        friendslist2.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\friendslist2.json
        • Size 2KB
        • SHA256 b05cc92d86acf206c3f760fffebab9ed51315de9b188a1ec6e886d5fa48e48eb
        • MD5 SHA1 SHA512 TLSH

        keychain.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\keychain.json
        • Size 206KB
        • SHA256 5776ef9f859559895c1dad00f1f4f565613b6ad7b8beb66babcab21e9fef9fc6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        privacy.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\privacy.json
        • Size 63B
        • SHA256 f65f929eefaf8973e73828303e80943ceea7e4a5ade567f70ffbbbcb1dc152b2
        • MD5 SHA1 SHA512 TLSH

        quests.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\quests.json
        • Size 4.5MB
        • SHA256 c0ae433c8b757e742629a3b0e204db45fa896836f7495e0e028e32a8f302a582
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sdkv1.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\assets\backend\responses\sdkv1.json
        • Size 19KB
        • SHA256 87c9996dcbbe479cdc36a40212df2f52e278f8684fd1183bdf7488b3f4889609
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-04A4M.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-04A4M.tmp
        • Size 17KB
        • SHA256 65eef2918cddca4ea10c3b9ac6b8619040faaf1da5cd85840fe3fdbf89b5f47b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-0BRC0.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-0BRC0.tmp
        • Size 17KB
        • SHA256 8b53e0b7d347aef33a8f7d3d0bd7b0a49358d0e7563576a74e8e54f0b2e17b75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-0GPUM.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-0GPUM.tmp
        • Size 16KB
        • SHA256 01cb98664bfc7af0278ed97f3efd05daf62f8111847e614842ea99d1f3e1a388
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-0KU7Q.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-0KU7Q.tmp
        • Size 16KB
        • SHA256 b7bab5c33a4cb40b779749b36cb5c1c17de1d174b84e46dc1d517c11693cb3a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-182MM.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-182MM.tmp
        • Size 48KB
        • SHA256 fc26f6e46e13715922878436d3f53d07090ec6a73d00b8fd765f86ac0c4ebc24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-18TEM.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-18TEM.tmp
        • Size 15KB
        • SHA256 1c2d03cfc710ac9b87bdf01826467ccab70c7d6696069698e35812ebbdcc24ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-2VJS6.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-2VJS6.tmp
        • Size 29KB
        • SHA256 903bd6b70c8d8be312d91aad90cc9dbca4cb322267d7ba449b59883b3614fe5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-34MHP.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-34MHP.tmp
        • Size 16KB
        • SHA256 fd09487126e613ab0bb4d65b665f05205ff5742e25354e64b8153c5cdccef3db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-3B7RQ.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-3B7RQ.tmp
        • Size 60KB
        • SHA256 66d0c4d6926177496b1639c4d08dfa18c95ea969bbf67da7c8ac972d92a3ac6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-42MRD.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-42MRD.tmp
        • Size 31KB
        • SHA256 1b61f4d223525454a9fc99527196ff677bffd62c1914a3dfd8cd58baafc67939
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-46VIJ.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-46VIJ.tmp
        • Size 19KB
        • SHA256 bad6519c8e1171763cded59c37c35b4d0a2fff88d023b4ffbc4104e8886d72ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-484E8.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-484E8.tmp
        • Size 63KB
        • SHA256 0dca4c50c5556a7ee08b2dcfc39bb4d24285ded90cd7d8173a0c1a466eaf28d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-5B7PP.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-5B7PP.tmp
        • Size 18KB
        • SHA256 d4058237dc4734445711876cb243977957297b052d188c85e7641e947fd824a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-6FIP4.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-6FIP4.tmp
        • Size 55KB
        • SHA256 0a04be6e53a5ed64013834d7ea64a84407dd269835096b810546328e7602fc09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-6VU9V.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-6VU9V.tmp
        • Size 17KB
        • SHA256 f7df2dc844b096201ab39d104767a8ce65765eb05ac4fb7721b0266ba46cea07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-7GD86.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-7GD86.tmp
        • Size 18KB
        • SHA256 b617c8ec304f4518b63ee16fd04f5ef2d323025c71d88decacbbd6c2a1b9ea90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-86PQJ.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-86PQJ.tmp
        • Size 56KB
        • SHA256 4286e35151059b2adbd9373d95a425ecd69a81b5f3d6a025d25a3d6c161368a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-8TK7R.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-8TK7R.tmp
        • Size 29KB
        • SHA256 c9699519eb8396a8e250141fff7d4ccdd58148e86f8143407da840fc30341a94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-BG898.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-BG898.tmp
        • Size 16KB
        • SHA256 a0a87358b15b7a71b13f0e8d6bea272adf8224d47fa4df81f54d2a0d5604c689
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-BIMC6.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-BIMC6.tmp
        • Size 15KB
        • SHA256 7c29e9bb329912967c2f6b23add57ebeb0b93e61205c6da4fe0b1249d6d51ac4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-CMH8P.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-CMH8P.tmp
        • Size 16KB
        • SHA256 fdc7aeeb165d34242771b686978ee226dcdeda8a4914a55ed94924e76cd312c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-DJT24.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-DJT24.tmp
        • Size 29KB
        • SHA256 90de158e3288c7553af5367a273025fe1650ce3a02718300cb7e99128a4607a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-DN57V.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-DN57V.tmp
        • Size 18KB
        • SHA256 bb684c539dba3b9483691f672d47af5ad4b564bbaf9bcd793ebe3576cfb10ac9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-EKJ3G.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-EKJ3G.tmp
        • Size 17KB
        • SHA256 bce0afb8fed96dbd49d410dfa1efb60c5baa592d2c9f80123255d65968282f01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-FLI7E.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-FLI7E.tmp
        • Size 18KB
        • SHA256 28eddc860813773da70b72e767ef321e9e93f565b480b109f4bd0e833d843f5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-GJERT.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-GJERT.tmp
        • Size 16KB
        • SHA256 1e8b2a4f6012956a92c8e9549f253fce6af7d488a75ced764249fd815b5920dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-GO5BG.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-GO5BG.tmp
        • Size 15KB
        • SHA256 0c63f184957f53d755efc9c7126f273c1426efccf7e8a60f6272299354e9016c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-H42OJ.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-H42OJ.tmp
        • Size 15KB
        • SHA256 1eac9e838c57c5c0b891ded9fbf05380eae3038dac0a5112c7c47de794570356
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-H4KJH.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-H4KJH.tmp
        • Size 16KB
        • SHA256 d75027d22847787f28cd456fb5d38238e2c81df309f9f901c8d8633ce7fb29db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-ITQJP.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-ITQJP.tmp
        • Size 17KB
        • SHA256 f4b0526568bfa0f8ec9715d29e664616128e7ef88208f50fb752a5f96d16e46a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-K0NPS.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-K0NPS.tmp
        • Size 56KB
        • SHA256 dbcf02d37aea057f721339933914489cdf2c7c93699f9f109fd6f78c04d95516
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-L2JSD.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-L2JSD.tmp
        • Size 17KB
        • SHA256 01e079f573af0cbba9bda3f36919fc91dbd509401fd50e0d589838b50cb1dd3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-L753A.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-L753A.tmp
        • Size 19KB
        • SHA256 719206d8d18b54ac8dc6b890df14101526e5ddf4e26ca728e572cbceefad9dd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-M0MPD.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-M0MPD.tmp
        • Size 17KB
        • SHA256 84c30fd2c5f90c56b3be3f937eccd7993a4d87defdfb4400bb9da449ee03edb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-MHGJC.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-MHGJC.tmp
        • Size 17KB
        • SHA256 e9263a6073b0b1f28fd3752b7f8d7e259678ed34fe27383c2bde127782aaa1b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-O2BLV.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-O2BLV.tmp
        • Size 17KB
        • SHA256 668bbecdaa09535e30d2d7fb66c26470b680419475a118756bee4c6ad151bb31
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-PCV2B.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-PCV2B.tmp
        • Size 17KB
        • SHA256 edb16195e5cf3a22446df91b11bd4a079027b69ec5f67a1c34ca3a42d35fa549
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-PFUAC.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-PFUAC.tmp
        • Size 15KB
        • SHA256 4f3e36427ba8e0e869c350ef754ef4e1f569c3ba3b1299cfebe1b791a44386bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-PGI3I.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-PGI3I.tmp
        • Size 29KB
        • SHA256 058e9b9255e713e4cf6e09eae282c72d9f852fccb02f0b90147fb2be849e3270
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-PJJJH.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-PJJJH.tmp
        • Size 16KB
        • SHA256 0a4b84f16995a13c36c9199ac4375b8e218833128e31872d4686df4d61057897
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-POT1C.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-POT1C.tmp
        • Size 59KB
        • SHA256 59e4d62b9f0f93bc22bbb995a91e73f1f21bc7c3099b024dfb84797916d721d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-RPC33.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-RPC33.tmp
        • Size 17KB
        • SHA256 c36bb2336886642f8f6bd697b21a0a98e1adf9e550f5cf1dd475ab7f34f04649
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-S6R1F.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-S6R1F.tmp
        • Size 61KB
        • SHA256 632c1b5abefc65a51d8c2cbcaa21e40330560e7d5c2be892fe92bd168677c071
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-TME5P.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-TME5P.tmp
        • Size 50KB
        • SHA256 55d164fcbedc805169004d7caeb3784f579b9b3dfa8d72ceb08cc1994b332280
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-TR82Q.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-TR82Q.tmp
        • Size 16KB
        • SHA256 1fef34dadb20a97f60d1468b48e015f0ebebfdd9f4d01145e2f8f6220183f67a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-USTIF.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-USTIF.tmp
        • Size 21KB
        • SHA256 6ee0bcaddf0ddf8a24b4c92b7f0931e1f6ea48a309155c07d74934a4b1c7ece1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-V3MSO.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-V3MSO.tmp
        • Size 17KB
        • SHA256 bb6e58153637fc1beceba0fe2b84fd70762c2c3ecfb45c1292a0b0c245c623d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-V6JH3.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-V6JH3.tmp
        • Size 62KB
        • SHA256 71f34870e22426216427239342db20cc474fd82c4352bb4f90ec09f763e9b382
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-VGVK2.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-VGVK2.tmp
        • Size 60KB
        • SHA256 4ea0103d4becd57221e583dba1ce1d353b69b6e70f1916e5ea0f984ac32400d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-VJPQ4.tmp

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\is-VJPQ4.tmp
        • Size 15KB
        • SHA256 362417115ddaa4af90a2fe51a9e35183884748f3d17ae83fbf91957f24666948
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kk_Cyrl_KZ.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\kk_Cyrl_KZ.json
        • Size 63KB
        • SHA256 23f8fd376e725b190ed78715416259b02546b3d557c057c5b581094e89daaf50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ky.json

        • Path C:\Program Files\Reboot Launcher\data\flutter_assets\packages\flutter_localized_locales\data\ky.json
        • Size 56KB
        • SHA256 b661883aa286043018d9c0f0a9c04645bad1afa11329771d3b831ff0d5e04751
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Program Files\Reboot Launcher\data\icudtl.dat
        • Size 760KB
        • SHA256 c12537022ef818991a7bfed41a76d8d6ae962ffbc0e6511ac762a5d0845e7f7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_acrylic_plugin.dll

        • Path C:\Program Files\Reboot Launcher\flutter_acrylic_plugin.dll
        • Size 74KB
        • SHA256 89b40469b227032cce7fc7afdb48846d5b1aca077dcbc4ed4ccf290320063c2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_windows.dll

        • Path C:\Program Files\Reboot Launcher\flutter_windows.dll
        • Size 17.9MB
        • SHA256 78fa8913ccb75361b1976a62c1b6af6a066133450081a61e0d4d13028eb53bbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        local_notifier_plugin.dll

        • Path C:\Program Files\Reboot Launcher\local_notifier_plugin.dll
        • Size 158KB
        • SHA256 4276a8b8aae1270490e484513373baff29bf857bde500f06faa0f9fd85a14a72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        reboot_launcher.exe

        • Path C:\Program Files\Reboot Launcher\reboot_launcher.exe
        • Size 86KB
        • SHA256 07a3f464e479003a9c598cb8a8feab17cc55298d74de34315ae78c31256fb9c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        screen_retriever_windows_plugin.dll

        • Path C:\Program Files\Reboot Launcher\screen_retriever_windows_plugin.dll
        • Size 112KB
        • SHA256 94c8bfbddfe1134c2f72e440de15a886c0adf6283bfbd140486cd8ecc72c9492
        • MD5 SHA1 SHA512 SSDEEP TLSH

        system_theme_plugin.dll

        • Path C:\Program Files\Reboot Launcher\system_theme_plugin.dll
        • Size 96KB
        • SHA256 ab29babfced2e1f897056bec830500cb95d72a80b968d9c0ed87a62b9828dca5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        url_launcher_windows_plugin.dll

        • Path C:\Program Files\Reboot Launcher\url_launcher_windows_plugin.dll
        • Size 85KB
        • SHA256 0b8a70425144c3f658f64d8c60654af777b207c2ff27d2f8bbdfe26a981c7334
        • MD5 SHA1 SHA512 SSDEEP TLSH

        window_manager_plugin.dll

        • Path C:\Program Files\Reboot Launcher\window_manager_plugin.dll
        • Size 136KB
        • SHA256 f6462f41e64f9cbfee631a34f7f5c2a4fe465adca271c6ad58eebedcba2e86ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windows_taskbar_plugin.dll

        • Path C:\Program Files\Reboot Launcher\windows_taskbar_plugin.dll
        • Size 90KB
        • SHA256 16e13f83bf6278aed3fb200f72b057605c29853d28eb51235de3f416868dd485
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _isdecmp.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-H92T8.tmp\_isetup\_isdecmp.dll
        • Size 28KB
        • SHA256 8287d0e287a66ee78537c8d1d98e426562b95c50f569b92cea9ce36a9fa57e64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _setup64.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-H92T8.tmp\_isetup\_setup64.tmp
        • Size 6KB
        • SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        reboot_launcher-10.0.9-windows-setup.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-T4RSH.tmp\reboot_launcher-10.0.9-windows-setup.tmp
        • Size 3.1MB
        • SHA256 2a19e4c85f45813d3b71d3e7a1abae45febc9507cbcbd5ae35f5ab40d36a630d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo.png

        • Path C:\Windows\Temp\{0D6229CC-585A-496E-8C44-09FAAFAC4DEE}\.ba\logo.png
        • Size 1KB
        • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
        • MD5 SHA1 SHA512 TLSH

        VC_redist.x64.exe

        • Path C:\Windows\Temp\{0D6229CC-585A-496E-8C44-09FAAFAC4DEE}\.be\VC_redist.x64.exe
        • Size 635KB
        • SHA256 8cd998a0318f07a27f78b75edb19479f44273590e300629eff237d47643c496c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2256-0-0x00000000004C2000-0x00000000004C3000-memory.dmp

        memory/2256-18-0x0000000000400000-0x00000000004D8000-memory.dmp

        memory/2256-1-0x0000000000400000-0x00000000004D8000-memory.dmp

        memory/2864-21-0x0000000000400000-0x000000000071C000-memory.dmp

        memory/2864-168-0x0000000000400000-0x000000000071C000-memory.dmp

        memory/2864-8-0x0000000000400000-0x000000000071C000-memory.dmp

        memory/2864-9-0x0000000000400000-0x000000000071C000-memory.dmp

        memory/2864-17-0x0000000000400000-0x000000000071C000-memory.dmp

        memory/2864-1446-0x0000000000400000-0x000000000071C000-memory.dmp