f8b4c5385e2e32ba4eb783e1d54cfa3ab4d3c73ca6724593e6a836b5de031910

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 14:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
chlauncher-setup.exe
Size 13.4MB
Sample260808-rkmrsssvby
SHA256 f8b4c5385e2e32ba4eb783e1d54cfa3ab4d3c73ca6724593e6a836b5de031910
MD5 0a56e7d2e0932bea65ad149e70af1b61
SHA1 33e7a0e4af1af9d7bf6046cf753a5ece107e7650
SHA512 ddfb42ff3e0329dcbca7a66b9d1b72cef0acd774f2c5c772a78e5504f4130e08a9bda36cc2763ac07e67f1deadc898ae23e409be1a3860172fa0b530b7075a4e
SSDEEP 393216:DgbQvbzGMRZCysxMvonYNWNJHVF4qL2RqzPgqQxNml:sizdhsPnYQXDbxz1l
TLSH
T150E62323E18AA73FE06D2B3759F2A2605D377E21681A4C429AEC7C4CCF651601E7F647
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
1860	chlauncher-setup.tmp
5160	_setup64.tmp
1512	ch_launcher.exe

Loads dropped DLL 9 IoCs

pid	Process
1512	ch_launcher.exe
1512	ch_launcher.exe
1512	ch_launcher.exe
1512	ch_launcher.exe
1512	ch_launcher.exe
1512	ch_launcher.exe
1512	ch_launcher.exe
1512	ch_launcher.exe
1512	ch_launcher.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 58 IoCs

description	ioc	Process
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-8LXDY94IB6.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\is-XC6RCHHX1G.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\is-VN58NY8Z0H.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\settings\is-DRDX5RWCDW.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-FNJZFFHSY0.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\is-C0K7JISTX5.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-B5MDSTSLIJ.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-QTNWK1URII.tmp	chlauncher-setup.tmp
File opened for modification	C:\Program Files\Clone Hero Launcher\unins000.dat	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\is-XC563LDB5K.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\is-9EHOH5LDXL.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-UOJDYKYGL7.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\is-E3TKBVSNDM.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\is-859OI5E52C.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\is-GHKJWVFCAP.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\ch\is-F0SRVPX8AS.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-UX13B7A6UD.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-EDNGAVX8HW.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-7SA7ZP63LY.tmp	chlauncher-setup.tmp
File opened for modification	C:\Program Files\Clone Hero Launcher\window_manager_plugin.dll	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\is-JFWXU6WZ0H.tmp	chlauncher-setup.tmp
File opened for modification	C:\Program Files\Clone Hero Launcher\desktop_updater_plugin.dll	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-5HPW6TX0HN.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-KW9PHMV0ZO.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-QI81DABU07.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\is-AD4CQV8R4A.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-0FEV5BATED.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\shaders\is-LW5CFJTC3Z.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\packages\cupertino_icons\assets\is-9A5J83A77A.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\shaders\is-C4AWM8DAMU.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\is-VJ26RODU7S.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-VCV3H0F8E7.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-YACSF23W5W.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-53PBJH2JB6.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-7TUOYJCHO7.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-8E7I6B7V0N.tmp	chlauncher-setup.tmp
File opened for modification	C:\Program Files\Clone Hero Launcher\ch_launcher.exe	chlauncher-setup.tmp
File opened for modification	C:\Program Files\Clone Hero Launcher\url_launcher_windows_plugin.dll	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-RFP9JQCAD4.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\unins000.dat	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\is-J1EBWQZF7U.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\is-LACUP3Z00B.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\is-GVSS0UN7GD.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-4BOSDRBLIL.tmp	chlauncher-setup.tmp
File opened for modification	C:\Program Files\Clone Hero Launcher\flutter_windows.dll	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\is-Z0JXKNTISK.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\is-3APZXDOEO2.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-1UVR40UXFF.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\settings\is-5P1MUHVJ4S.tmp	chlauncher-setup.tmp
File opened for modification	C:\Program Files\Clone Hero Launcher\screen_retriever_windows_plugin.dll	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-WWD8IF0JXS.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\difficulties\is-C9K8IDVX06.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\is-AIU01127GD.tmp	chlauncher-setup.tmp
File opened for modification	C:\Program Files\Clone Hero Launcher\rust_lib_ch_launcher.dll	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\is-ZIZQUAGYGH.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\is-UP46D8LNGM.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\is-ULLKRBS34A.tmp	chlauncher-setup.tmp
File created	C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\is-LEOHNCHOET.tmp	chlauncher-setup.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	chlauncher-setup.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	chlauncher-setup.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/708-1-0x0000000000580000-0x0000000000674000-memory.dmp	innosetup
behavioral2/memory/708-11-0x0000000000580000-0x0000000000674000-memory.dmp	innosetup
behavioral2/memory/708-149-0x0000000000580000-0x0000000000674000-memory.dmp	innosetup

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1860	chlauncher-setup.tmp
1860	chlauncher-setup.tmp

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1860	chlauncher-setup.tmp

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1860	chlauncher-setup.tmp
1512	ch_launcher.exe
1512	ch_launcher.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 708 wrote to memory of 1860	708	chlauncher-setup.exe	89
PID 1860 wrote to memory of 5160	1860	chlauncher-setup.tmp	90
PID 1860 wrote to memory of 1512	1860	chlauncher-setup.tmp	92

C:\Users\Admin\AppData\Local\Temp\chlauncher-setup.exe
"C:\Users\Admin\AppData\Local\Temp\chlauncher-setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:708
- C:\Users\Admin\AppData\Local\Temp\is-ZCRA1W6N5B.tmp\chlauncher-setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-ZCRA1W6N5B.tmp\chlauncher-setup.tmp" /SL5="$400B2,12755112,937984,C:\Users\Admin\AppData\Local\Temp\chlauncher-setup.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1860
- - C:\Users\Admin\AppData\Local\Temp\is-JH518PNUO3.tmp\_isetup\_setup64.tmp
    helper 105 0x90
    3⤵
    - Executes dropped EXE
    PID:5160
- - C:\Program Files\Clone Hero Launcher\ch_launcher.exe
    "C:\Program Files\Clone Hero Launcher\ch_launcher.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of SetWindowsHookEx
    PID:1512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ch_launcher.exe

Path C:\Program Files\Clone Hero Launcher\ch_launcher.exe
Size 66KB
SHA256 6fe56526a525e66344dcbbfcc198dc6f7759603dc6101225b9c305e035cf52ea
MD5 ed4d68bbfdc778fadedf0395d4b8cac0
SHA1 aa680a37cf24c4e95bb7c080631658417cae1de9
SHA512 ddf2cc6628af19e657e63ea16895f08a4eebad8f7e657ef0ed486bd2c5eb43b0b71a71860da5730aca13902c44528acca54da1a31cf78d806a28f1402b25adac
SSDEEP 1536:JRM+No0aPKmL26MgkGgnXlh7rWD8Yz/B7:JRM+ajhq6Hkplh7rE8Yzp7
TLSH
T15B630916D915C0D7F2488978CB534F65CAE1BCA68FA192CF57F01D971E62AE06F39203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.so

Path C:\Program Files\Clone Hero Launcher\data\app.so
Size 10.7MB
SHA256 d4dc825ed0bedab1c02a39c83ca45a4d433cc97eac8c56b8360279c656aefaba
MD5 f7e57931a13ecce486e8e1463d5100a0
SHA1 4511925b40495b56d67f5378251e282545442823
SHA512 4612aee8c4c1f8c7e01ef61bd312cf1a57590f75523ee9b03d2ec0e611c97c61b626218e3a501eb7b192f5f9745457c041829aa07e488e87c2ec972e9255fbd0
SSDEEP 98304:eDa96+qb0CFgfR2MgRCDfMmnUNzr2qmeepKUG2gfgl:sa96+qb0NZ2M8CDfMmUNzr0eKzafgl
TLSH
T1E0B6FA97E0F44360E463E672F76F66E19E1439D88F30B64A069856693E46DE04BCF332
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssetManifest.bin

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\AssetManifest.bin
Size 2KB
SHA256 401da8dc9b42b0153480bf7580924f583b0f2dd6e9745f7ac97e5af4190a7fcf
MD5 2e15a080c2c37ee52bfb9da1b6282135
SHA1 30a1d8b9078e7c466a46d61638a22bbdb1cf6c46
SHA512 d2344a6b185577d8a96d6af719438065c112a8c325fecc68c36aeb0e37599765b46a0ffcf7fb90d6cf3736ba6dbf85f2d6b5c77c2f46b0c8ce668e61880bc271
TLSH
T1B6415B19C66511EF2C02B02475AE469BBE020B6184A2F7EE277DC58DB0D09790DBFEB1
MD5 SHA1 SHA512 TLSH

Submit Download

FontManifest.json

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\FontManifest.json
Size 791B
SHA256 e80b9f5fceafa1f8e1f99f804d72a59a39086a977abf5420d7768d071e87c7e6
MD5 d4fcea98838df3579f443d8e06b71d21
SHA1 8f5381ec25eb54e5720b8ad3310518e525ff1318
SHA512 13371cb10d60463b6c881ccf1f509e7931af78ffd4ad27533457156df711d04384d12420a616c142300438429e79785cc6e991c0d1309debb2525f38fce3cd85
TLSH
T16B01C80A1009597B849CD8AAB1E762427C8D36155296D45DD6B849F0E3B26F43333763
MD5 SHA1 SHA512 TLSH

Submit Download

NativeAssetsManifest.json

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\NativeAssetsManifest.json
Size 45B
SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
MD5 f3a664e105b4f792c6c7fe4e4d22c398
SHA1 adee29ec4f2b3cb2ec37ec3368f37ff805695d36
SHA512 b7df555970e20c6a50f650cd0df6ab782fba7004782b3f7921ccfd314db53bfb61523986628d2e05d085f4c2263dfcf54000ffdfc946b0158c5766fc6f1d0a86
MD5 SHA1 SHA512

Submit Download

chcrown.png

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\chcrown.png
Size 17KB
SHA256 ddfe5b57747f8b5ad7578cd2ba6917ae36207a14c176ecf03d53604c40bb1be1
MD5 cacc0653edf7c9e9601aca920ee83139
SHA1 2ac0311b9d6f75a1cb1cbbc3912505037f1dc20b
SHA512 cfa42f0cddfc9bb885c797cc78daf23c546f8a2cfe2515b13a3bebd15ef7e5e580b93d2e277542cbdbaf46dcf27c50e5d0e70531187e5be0c6706ee73aed8367
SSDEEP 384:rJnfsywhjsFBimaR4sRJ8S5ka4pCOoZttIKanl1CUNZ7TntJ1b:dUyuEvTSCpETaWUD7Tnt/b
TLSH
T1B872C00DBC11A139E3D0C8545BCA512BC1A259E8C921AAE57F47C7A3420F6FCC3673E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chlogo.png

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\assets\images\chlogo.png
Size 55KB
SHA256 d7df3b3e20ccbad77e3887c5a2f1ca9782e2aa74cedc0a58ba9675063b1e4b4d
MD5 6be4c24bc4b3c3703376d867c9735c98
SHA1 8517024a93dd0ddb713a08b4757b221c7f3d60e0
SHA512 bfd8b909652fed6e24fd6fc082e3689d2e83264bd1c9c505d9313f69893cd6ab3be89ebe83322c04138ad8caf8c77f8f1801246f9eb0807cd717a9bbb38c0234
SSDEEP 1536:+pA5vdM8VFCA0CgvUsFzlPwcQGVrmjgBAgheMCfTtQ:+S5vd/7CGgfFBYvmrmjg5XCbW
TLSH
T15343F19CAD8AE93CFCA1B378442BE46100F11CEAD61E77C4CBA8F05665F5C1916CA4CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-Black.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-Black.ttf
Size 67KB
SHA256 abf64cfa14645043a7c33f76435125f8b3de79c510adb938a1c16085518d4341
MD5 d83ab24f5cf2be8b7a9873dd64f6060a
SHA1 a001eb827743636e04f8efa7d4aeedf0541c46ac
SHA512 dd8ae58594748f15ddca9cca134eab12bd571f219c810789127ca6e7a75ee2c70a92f14642391d2c1e8d80721600cda4bfd548cdb44b0bb6eda7e0e22859cdb4
SSDEEP 1536:Ndwa7z3EtBCeRvfB8syEISJVRPajzWtMRAaM8sRRbWPE9T1Uciaab2khgM5XRVvU:NdwSEHRKsdJVRPanOMXmJWPUOCkfXRV8
TLSH
T1A163090DFB4B6340E9675B38257D6323AE31F8391B1187EF680E37768C8A2C159527D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-BlackItalic.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-BlackItalic.ttf
Size 70KB
SHA256 e1eb271de3a571d566e534d3e521cfa46becfc789821257bc347455167d586f3
MD5 047217f671c9e0849c97d43e26543046
SHA1 b490ec02c69bb74f5b4f487c59e984891c8da71c
SHA512 837268a0250bc93e63eac099d9a0826c473424157de372d1c7f99d2936111276311bea296f1ab1a0f80a16bdae1b983379fae01c264129f9488b12dde1180c37
SSDEEP 768:xuwa0kScqA9BC5ytAyu9Ol2SWky4KT9RZ/fYpWYl97oU7SQxmm1T9yNS1r8He4AC:8waCcqgBCIAT9qbWfUWGeJUyN5bMQP
TLSH
T13863081AFB4B7780E977173C24BD1322AA30E8392B1287EF640D37779D862D259523D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-Bold.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-Bold.ttf
Size 71KB
SHA256 d7f0b7f2570f2f28b504da1181b4d71b1420b10be2c4fd690927f1c8ee3b19c3
MD5 24b516c266d7341c954cb2918f1c8f38
SHA1 542498221d97bee5bdbccf86ee8890bf8e8005c9
SHA512 e8d26a275d257dce57cd05de36f6477a974757068fe2b130ea2b11b9f28afaca14261c20ef16030554560a42ee3c4bbd42f40fc9b41d5f716495a896a4719326
SSDEEP 1536:FwagpjsF5A0RreeaonU7NtM1V5i1z8B8RVRb:FwRyR5ar7A1V5eoyRV1
TLSH
T1B463F619FB8BB741EE265F39147E1337AA34FC392B0687AF280E33248D522C159567D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-BoldItalic.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-BoldItalic.ttf
Size 75KB
SHA256 e38611f4c0ff3251a58fe751991c39784d8f9be420b004891e0b9277228ec32f
MD5 acc03ac1e9162f0388c005177d55d762
SHA1 6bf491e78e16d3b9c8a55752e1bd658e15ed7f19
SHA512 e753dee54cfa54802582639e600e6ed55dfdc21469ead93802379a76c89c23f2d14197042ab4a17fb1389150518ae4aebf15efb993288fea73d97b22fd9065ad
SSDEEP 1536:fwaIP6TF5ApSc/N6aKtdjCvDiJ5L5eaZmBX1v:fwJP6TGedZZmBFv
TLSH
T1E8730816EF4BBA81EE261F3C20BE13239A34FC39271287AF680E3325DD562D115527D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-Italic.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-Italic.ttf
Size 74KB
SHA256 3be26bf6973f49df6a7dfd130041017354342bfbb023e6b9610b42daeba6de34
MD5 5d22f337a040ae2857e36e7c5800369b
SHA1 190187b720ec2f2ff2e4281237e301000e09673f
SHA512 58436a042ae4d1fa77e5504d9ff08129ae106b7617df950157b62fc4e582cc9bbff7b1a3177560abe65780934faa4b20cdb05c7a39115b255e69425db268119b
SSDEEP 1536:BhwaopshMSTQAdIR0mK1mYmRu0AID23Gx8TZ0dRV49I/:/wRgMSuRzYmRM53GxU+RVp
TLSH
T15873070AFF4B7641EE3B1B3C28BE03739624E8382B5587AF381E33658C561D159567CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-Light.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-Light.ttf
Size 75KB
SHA256 fb5343c4375c38b1c3026336d355335e6a5b8531cbc9c6506eb4b6f6d67c152f
MD5 2bcc211c05fc425a57b2767a4cdcf174
SHA1 ad0d178564445a535b15d417f5b18019923d3bab
SHA512 f431dbed65a46db47ee9ac2ded8f75c1e2dcda62d06d8b17f6d84a3312cc6a618b4ae2c4feb659f9b8a0d9ab773004d29e6cd76f8a5f9aa3472ee2a297bf34a3
SSDEEP 1536:HBWMnTxskb+JxrmA1XLvRTuLCKgAIWk4m+Iw0WOSE4UiSNGjm/7QUmVaaRINkd:HB9TxsyKhmAN5uoAIWk4m+IKE4lyGjmU
TLSH
T1BA731AABDDEB1D07F7A71EF5CDE2556B42A5F006DF32728C1C059080CA9B2506897EAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-LightItalic.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-LightItalic.ttf
Size 47KB
SHA256 6d5176f3babd0ccba79845088f8e9ede5dbb7b408fb40161963daa95a71cef2e
MD5 2404a6da847c878edbc8280745365cba
SHA1 34388d9a3b64380c9f08d424d0adaa88a0d1650a
SHA512 7d2e42ea2599f93adf8c970213f1f44f829d7f7226522154ae712bb06c23b966fde79042a2663cfd066aef533cd0de641a66fc1df9c5d3835fbc074eeeaeba30
SSDEEP 768:3LDw4Dt0a+XIFjAVbmXLPybC04JWF5rUlwo8WxyTKQ3TTK4QnmVdK:7Djt5ymXLPybC04JW3HRKia4QnmVE
TLSH
T1522317668FFF6617FB576EB48DE2A35105B1B423EF32B11C2C198A86C99714088437DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-Regular.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-Regular.ttf
Size 73KB
SHA256 e82542aed8293f49fc83c4aaea566b1f6b4fc7a9ab5da11e6fb9bc0973b5324b
MD5 122dd68d69fe9587e062d20d9ff5de2a
SHA1 e923c72eda5e50a87e18ff5c71e9ef4b3b6455a3
SHA512 30c39f8e242efd6671b9ca59436db45ebffe5cc7f7dbc5a53fb21b399f2a52a9f2e68611b4241163a7de5ce934ad9dc9c6c9845e80bea7982ad6b6cda05dbc61
SSDEEP 1536:2Nwa1uUiFQAScR26iS0TFTn1HgUSE3iVfRVT:iwhmcR6bFxcNRVT
TLSH
T1C273F709FA87B241EE3B1F38247E4327AB35F8382A1687AF780E33359D561C155567CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-Thin.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-Thin.ttf
Size 68KB
SHA256 fee1bd1daaa5efbcb93c8d074c61378dce155df0d32e00199b6a9457e427bc45
MD5 7ab0bc06eecc1b75f8708aba3d3b044a
SHA1 07290446bee3f81ce501a3c3dbfde6097c70ca15
SHA512 a6e5b114e9e87de79b5d23f7c502d848c1ba9fab9ad577029daa87c844f85f792b5d4d6c31329d1bd822da33ddde8f414a5c376c4685046d722fd0757e4123e7
SSDEEP 1536:8Ep2GOAu55/E28/91mL1Pii/kr/J6+vfD/31VmOQm:8Hf8/91WS/J6yD31Vmrm
TLSH
T10B63E8A9DEFF6D07F79748F58DE2622A04B0F012DF31B1CC2C199585C9AF2801957EA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-ThinItalic.ttf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\Lato-ThinItalic.ttf
Size 47KB
SHA256 8130560da30ad6f19994fd410f71985acafca1576592235161ffb75757635594
MD5 2b26bc77c3f9432c9d4ca4911520294d
SHA1 ff4a1a9fe2dcc41d993f4c5067a3baa1c456ff97
SHA512 44c82c7bb4892fb023e54ff04c2b4568a53183574e72fb9236780715b2ebabf4fc21032f59c00a16ef84b6cb8ab1a51da8aed35c3abb79a04f63026001045170
SSDEEP 768:7Htc4DlU1YsNzc4A1XW3xgmGjI/9HTMWFDIZPvvL47tZf6le/cqmE1VILJn:7NvODNo4A1G3xEI1z/MZHv07tZfKe/cv
TLSH
T1C323065A8EFF6607F3A75DB48DE2431509B5F823DF31B98C1C1A8982C9DB30058576AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MaterialIcons-Regular.otf

Path C:\Program Files\Clone Hero Launcher\data\flutter_assets\fonts\MaterialIcons-Regular.otf
Size 1.6MB
SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
MD5 e7069dfd19b331be16bed984668fe080
SHA1 fc25284ee3d0aaa75ec5fc8e4fd96926157ed8c4
SHA512 27d9662a22c3e9fe66c261c45bf309e81be7a738ae5dc5b07ad90d207d9901785f3f11dc227c75ca683186b4553b0aa5a621f541c039475b0f032b7688aaa484
SSDEEP 24576:PsSIRolMKvGXtkXKLkMp2fXrNsAxI6zD2/qxDoq4eeeDrG2eOeGr2lkzhlTMrRoV:P9njdzbwc9
TLSH
T1787529100276EF4CC1EF507D43B74A48F4C59AFEA53ABB1AF9B64795220BDBDA1C8181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Program Files\Clone Hero Launcher\data\icudtl.dat
Size 842KB
SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
MD5 018361032ba13dfeab636138ab6b9831
SHA1 8f9c259d3a330786ab8bbd49e7e79abfa1d552ed
SHA512 d7d3fffb41576cf2c90cd260727cc0ea23c5a4c458f84b01426c2a4578004b94168047c7282222e9ffade2f082e189cf167146cc3303bd7dbbb252a593236967
SSDEEP 12288:8Mlhw771h0jM7ykPG07rr4c8w0P4N48Rkjt3dPHz982VYhq:Zhw3zVtjLbGu4RjTPHzMhq
TLSH
T199056A17B0435E6FE0C48277C652E7B65637838DEB3317EAB698B5593E8A1C20241BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop_updater_plugin.dll

Path C:\Program Files\Clone Hero Launcher\desktop_updater_plugin.dll
Size 115KB
SHA256 06a279125254509792cb39a96978251f21b1128bbf49a902c616088f01570a5d
MD5 3d4bc0d7b0cf42c2d00c846f676736f2
SHA1 824c902ec309c03ab4c3b8a60ddfc6dd77a306c0
SHA512 bb8e7fdcf411d4456ff26e560960fba8fa117ad993141ff516c81fd92f609071847f6e6d8c52f494b300e3337af13824b2fd0c1bcf8443e0748ba63709e0a850
SSDEEP 1536:89zJqmsr7PvM1xQ3p6+UxERqDnZuKtU/DjM8MrpCnbf:89Hsrb2xQZ6dTrZuKtUrjM8MrpCnbf
TLSH
T161B33B3BBA1D40A6D26AC5B8CD434941CBB27C8647A1A7CF57D04ADA0F23BE85E3D711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path C:\Program Files\Clone Hero Launcher\flutter_windows.dll
Size 19.8MB
SHA256 e225762642535e2f31b9ebb3d7def4dae93162d357e09bee241e19d461b9ff46
MD5 4f110b4f83285c211d56a503bc300c7a
SHA1 5dbe13d3231cfef7e09447948bb7d8c5324f788f
SHA512 66526e7017f4b0f380ba1787afb38646a90c5fc8328d1e41c0b80d3c3524f570b578a229116956d320a5a2b8382b118765a856e080e725c08729c91cc05038e9
SSDEEP 98304:r8wG47fQ6x7Foser61UwcaRdKckSYIrZXYh624nV4lkmHKVGsvvNSQE1bSsKZU/7:rbZvtdKcy0pdeSslYe5qfNODaq
TLSH
T1EE276B03F29680EDC459E178971BAA27F671B8490720B6DF27584B223F66FE05B3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rust_lib_ch_launcher.dll

Path C:\Program Files\Clone Hero Launcher\rust_lib_ch_launcher.dll
Size 1.0MB
SHA256 bd9fd6dcd2795de27a56d21eeade8cbef7f275eca3204c335a87b3694f4ecd7b
MD5 3505b5dca519b09c5f817f17d94d268e
SHA1 7b248dc173c262b73d05393a74b9cb49480f3ddb
SHA512 a3020c24a60f85f82b5687c93d96259cdcf97b2d62e7c37514ac4572a7e1d405d622e704bd74c50305d6080a81dd81a6dc237f580f899de40f40f1bd6d86a927
SSDEEP 12288:rwW2dWDFE0hffkYm0JCBLs1oraYMxEVQ2BfJwfrAFKMpJ9gAPYpoRJ1Gw5wCIC:riTykp0JCBLs1osfrAFKMJ9gA3GwDIC
TLSH
T1E5358C66BA5581ADC45BC074C2864763EB3134CA0B246AFF8295DB782F26EF51F3C394
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

screen_retriever_windows_plugin.dll

Path C:\Program Files\Clone Hero Launcher\screen_retriever_windows_plugin.dll
Size 116KB
SHA256 441bc139a25b0c46ce3fca332cd927703e1e40f9054253b86872825eaaf77213
MD5 ee15cb687ee7f5898458740a8024883e
SHA1 001f6d2e9d13c5669debd082497e13b16e6f2a4f
SHA512 a2354c04f115da328464a06f7286443afd458e9223b9f42f21000573282b3862d3a446068eb837cdf88fb4c32d4f6c2a73ecd859ff50d767d5312a561a9696fe
SSDEEP 1536:KsILOR6ScJJsKeRcz06Z7xS+kZ3hhrSoqz1wKnqMp+eCFAaSHvD:KDOcOw063KdGoqvqMp+eCFAas
TLSH
T157C33C2BF75940A7D26AC4B9C9438D46DB71B8914B91A7CF57900A9B0F27BE84F3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

url_launcher_windows_plugin.dll

Path C:\Program Files\Clone Hero Launcher\url_launcher_windows_plugin.dll
Size 96KB
SHA256 ff54564d18f048982a25e8ad6ebe4eb0b4a008d28b2fa8f052e101dbdbf5c8af
MD5 1d6f854d392e1ed461adfcdb0ecf7931
SHA1 2a7906785e55ecea3d2f567e09a3145f7df379e3
SHA512 5fe4f5707682390bd6471384c8ef16fe0ccf6fb6b6578cb51a3f64e96a40638808c3e5e760269c6611b367a32b6416f4ae2662a2ecee9e67a47b9169202ab194
SSDEEP 1536:oGpZRNr942MEIxKj2a66rzCiVB2iN9LBwdIBBaM8xV1ipjigb:okvr942MPa6n7EhBsM8xV1ipj
TLSH
T18DA3393BAB1D10ABD269D4BCCA534941DB72BC854791A7CF17A04ADB0F27BE44E3E601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

window_manager_plugin.dll

Path C:\Program Files\Clone Hero Launcher\window_manager_plugin.dll
Size 127KB
SHA256 12a048e38f01205253b6749273f9251bb249b29408fca03605cc31c1687d5dfb
MD5 e8bcf8f96253a893f9eae3117dd2c181
SHA1 e330a89512b80ab5c81ce500e97f0112893becca
SHA512 6bc5606c1e58df881b6521b1b45b1502729e270994f22194157df8efaf3b096037d2f0c4a766524059548e70076726f8e88da4aab797048ef284b953aef836c8
SSDEEP 3072:w8CLcqRAwiPnX6CQ9H0ToNP0YoPvpZJHJTlKQIi:dCgqRAwiP6CQravpZJHJTlKQI
TLSH
T17BD34D2BF75900ABD15AD4B8CD438946DFB2B8854B91A7CF07904A9B1F27BE41F3E601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-archive.json

Path C:\Users\Admin\AppData\Local\Temp\desktop_updater21353051\app-archive.json
Size 5KB
SHA256 c13f4cf71c45557021779e40b6e627c771401e72ddf4600b8f40ebf2e7cfdcda
MD5 236b43e030931a9e55def6df583316d2
SHA1 fbe3459d7ae27cbec977558092e3fe47d6a42f22
SHA512 8e11812c735f6ebb426720f021dac3dae1eeb630e42cb7463f69a61a525bd2fc5c006877dcbb505183c62a3bcdb1a00cf1edcbf4c51192ccae12475c518fbdb3
SSDEEP 96:iJMq5jrq5SxOc2xO1/nL+/nNDUsxDUOgGImvgGIt:iJMq5jrq58XA+/nL+/nNLxrgGImvgGIt
TLSH
T102C1596BC131AD3716B31366A2A96691F36513AF1240181F37BC918C0F77E2B614BF5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_setup64.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-JH518PNUO3.tmp\_isetup\_setup64.tmp
Size 6KB
SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
MD5 e4211d6d009757c078a9fac7ff4f03d4
SHA1 019cd56ba687d39d12d4b13991c9a42ea6ba03da
SHA512 17257f15d843e88bb78adcfb48184b8ce22109cc2c99e709432728a392afae7b808ed32289ba397207172de990a354f15c2459b6797317da8ea18b040c85787e
SSDEEP 96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
TLSH
T198C1E80ECA279263FD5A09B79E8219C46FFC262339C6623FCF0045D667C1E4E59A17B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chlauncher-setup.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-ZCRA1W6N5B.tmp\chlauncher-setup.tmp
Size 4.3MB
SHA256 5aeeedf9a5953fb7dc335efc284ed42510c1e18b400e6a15f47aee4ed5bf1bac
MD5 5fc0ad9495586a8e8989e4c9ea54a585
SHA1 90141683fa5af81b96027deb0b996ee31a1d4d4d
SHA512 25424f6c13e51b2a0b1c26d1594b054dc94f141c32a7de61dcc78c3e9cdcfa13de5ea781230c0f8847c0839dd34abfbfe7c751c02779bf6825db7b450e344de7
SSDEEP 98304:/Svzlk8oZUtpjcblfUnBS5ukmo333p333Mh:CzlYblfNEh
TLSH
T1FB267D13F3C9613FD05A1B3A6837935498BF7AB03916AC975BF8394C8E791402D2A787
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/708-1-0x0000000000580000-0x0000000000674000-memory.dmp

Download

memory/708-149-0x0000000000580000-0x0000000000674000-memory.dmp

Download

memory/708-11-0x0000000000580000-0x0000000000674000-memory.dmp

Download

memory/708-2-0x000000000063D000-0x000000000063E000-memory.dmp

Download

memory/1512-145-0x000001C841DC0000-0x000001C842875000-memory.dmp

Download

memory/1512-142-0x000001C83F140000-0x000001C83F141000-memory.dmp

Download

memory/1512-146-0x000001C83F150000-0x000001C83F151000-memory.dmp

Download

memory/1512-144-0x000001C841DC0000-0x000001C842875000-memory.dmp

Download

memory/1512-143-0x000001C841DC0000-0x000001C842875000-memory.dmp

Download

memory/1860-140-0x0000000000AA0000-0x0000000000F0C000-memory.dmp

Download

memory/1860-15-0x0000000000AA0000-0x0000000000F0C000-memory.dmp

Download

memory/1860-13-0x0000000000AA0000-0x0000000000F0C000-memory.dmp

Download

memory/1860-9-0x0000000000AA0000-0x0000000000F0C000-memory.dmp

Download

memory/1860-8-0x0000000000E4A000-0x0000000000E4C000-memory.dmp

Download

memory/1860-148-0x0000000000AA0000-0x0000000000F0C000-memory.dmp

Download