Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    21/08/2026, 03:47

General

  • Target
    ExLoader_Installer.exe
  • Size 22.2MB
  • Sample260821-eccweafr41
  • SHA256 59d78963e8f56b25b95c18d5c672789ddb62ee0e186eda49250cef99edad78b9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 7 IoCs
  • Checks for any installed AV software in registry 1 TTPs 4 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Looks up external IP address via web service 1 TTPs 6 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in Program Files directory 64 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ExLoader_Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\ExLoader_Installer.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:3688
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\ExLoader_Installer.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\ExLoader_Installer.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks for any installed AV software in registry
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4864
      • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
        C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -command "$WshShell = New-Object -comObject WScript.Shell $Shortcut = $WshShell.CreateShortcut(\"c:\users\admin\desktop\ExLoader.lnk\") $Shortcut.TargetPath = \"C:\Program Files\ExLoader\ExLoader.exe\" $Shortcut.Save()"
        3⤵
        • Command and Scripting Interpreter: PowerShell
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:5280

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ExLoader.exe

        • Path C:\Program Files\ExLoader\ExLoader.exe
        • Size 201KB
        • SHA256 f66c1efad95e723ecb9f1d35846aa46b6ebfc5a74b4293dd95e268ac07c6c196
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ExLoader.zip

        • Path C:\Program Files\ExLoader\ExLoader.zip
        • Size 23.8MB
        • SHA256 47a9bc0e5e2c3140aaf9af80706dc464caca5891843c242326fc22b5838e3932
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ExLoader_Installer.exe

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\ExLoader_Installer.exe
        • Size 160KB
        • SHA256 bec2ae84b937f42e78e99f5ac5834dacdec818cd843d34eb603749f8ac48b62b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSVCP140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\MSVCP140.dll
        • Size 559KB
        • SHA256 1e57a6df9e3742e31a1c6d9bff81ebeeae8a7de3b45a26e5079d5e1cce54cd98
        • MD5 SHA1 SHA512 SSDEEP TLSH

        audioplayers_windows_plugin.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\audioplayers_windows_plugin.dll
        • Size 199KB
        • SHA256 132c0a4ab39e030baa937e20f170c6b0d446e3b1ce07e99375023c1773d60c15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.so

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\app.so
        • Size 19.1MB
        • SHA256 ca4ef02c6f55922b4ca575406816a3e10876ce40e431be2e652dc25d17140404
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AssetManifest.bin

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\AssetManifest.bin
        • Size 9KB
        • SHA256 c8b72a7552f25f2b9d28ca794fc8a5a62715414ee2d151a85441482dd944c4b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FontManifest.json

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\FontManifest.json
        • Size 332B
        • SHA256 9e0903a9ceb64e32f7a139a143324252aae77dc58dbefb1f211fe03aa33460db
        • MD5 SHA1 SHA512 TLSH

        NativeAssetsManifest.json

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\NativeAssetsManifest.json
        • Size 45B
        • SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
        • MD5 SHA1 SHA512

        AbominationPissed_DE.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\AbominationPissed_DE.wav
        • Size 131KB
        • SHA256 c87cb5c9c64b5798769af14563e268080ed82c7c8a1958f6fa1c1b5e7f10d2e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AbominationPissed_EN.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\AbominationPissed_EN.wav
        • Size 80KB
        • SHA256 3939fcaa3b0efd6d601da475abea862d9f7c078643f1063df51c83609cf47a6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AbominationPissed_RU.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\AbominationPissed_RU.wav
        • Size 156KB
        • SHA256 d5f7ea66bb3bc77de30b0b450b37dbac1dfa2f30b8108fce9ac2752ce9ad2838
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Csgo_hover.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Csgo_hover.wav
        • Size 133KB
        • SHA256 aaa3f0f824d04ce5e93d1da17873d3aeb3c4d3a8fee25b7006851e4089bfadfc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Csgo_press.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Csgo_press.wav
        • Size 99KB
        • SHA256 880cc2be6f458bf853dba78caf06bd2b97bc4b06fea141599db74e95bbd59528
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Fortnite_hover.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Fortnite_hover.wav
        • Size 137KB
        • SHA256 3e3abb7e29d38fa4b0261ac78427633e8bf6ddf3708de5a45bbdddc2a9f4aa6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Fortnite_press.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Fortnite_press.wav
        • Size 111KB
        • SHA256 e0ecb5e92f1e13de05850d1f3894a54988e5f2c7eeded390f9040d2845aa4404
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Standard_hover.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Standard_hover.wav
        • Size 36KB
        • SHA256 46d6ccfff99264aac49bf4545b0ceb9cca2a9ee5a60d13b7017161e481440189
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Standard_press.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Standard_press.wav
        • Size 64KB
        • SHA256 fe7e148d5b80eaf49eb7564233b87679e53fa4e68371aa347f18c1886a99bff9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Steam_hover.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Steam_hover.wav
        • Size 55KB
        • SHA256 5f53f2d8499d27dd906587a6d0aad05d5c387ca2fc1c12f26c76aaefa690c7d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Steam_press.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Steam_press.wav
        • Size 170KB
        • SHA256 e7c36644507ee52d11ad20e17a165bcb4bb7efb14c573cd29921088c03777241
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Windows_notification.wav

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\audio\Windows_notification.wav
        • Size 568KB
        • SHA256 90707fa427cc0dccb0a6a6cee40ee27cf516164342f6ca19adf496f068d03c07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CatsDay.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\CatsDay.jpg
        • Size 103KB
        • SHA256 b8332b40114e2084721257c97d874e81505568d7a24cc0fd0fa3e5a4f5fa243e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Cyberpunk.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Cyberpunk.jpg
        • Size 74KB
        • SHA256 4e963580446656de3ede924b1c729eb3e0f92eeb342458d8083995c4ccfa6df1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Easter.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Easter.jpg
        • Size 80KB
        • SHA256 c8bcc97b62941f532a211a53e85e0f6d928d9e40f0c0327b2d9560af7abd6167
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Fallguys_v1.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Fallguys_v1.jpg
        • Size 63KB
        • SHA256 22d5601fe337ccf6311f18caeae8c8824b5a889b854b037eb7cd4a8335f34d0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Fallguys_v2.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Fallguys_v2.jpg
        • Size 79KB
        • SHA256 a61f74055bf69f214309ec81255dd0c49f1f8ff3092d35bd6d2530e7109af665
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FishingDay.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\FishingDay.jpg
        • Size 48KB
        • SHA256 ea45f13f6cac2ac930168ecd3e2f1409b304f8ccd1875b45e997b01743392288
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Genshin.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Genshin.jpg
        • Size 44KB
        • SHA256 f9d64e43ed49ab485ea77b842025f3a2fade14e277a8991fd32900218ec1d055
        • MD5 SHA1 SHA512 SSDEEP TLSH

        God%20of%20War.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\God%20of%20War.jpg
        • Size 85KB
        • SHA256 bd9b8ebbd5e12f111b386111fbcae08f5545e6c8bacba466a33748ebbe7caf58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Halloween.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Halloween.jpg
        • Size 85KB
        • SHA256 2aa6380396ea4a1352e62e10472751e2e9da013361786868a8357bdb94b40345
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Halo.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Halo.jpg
        • Size 68KB
        • SHA256 d20d07fa5ef0796ccbaa0a63e60a6b1005123c8e26a90b18296c5e3b95bf4ee1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IceCreamDay.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\IceCreamDay.jpg
        • Size 42KB
        • SHA256 87c21a0571bc8be8cb9dd18e14218ef7584c1d4b7ddb71c53f9273b34dafe450
        • MD5 SHA1 SHA512 SSDEEP TLSH

        JokeDay.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\JokeDay.jpg
        • Size 48KB
        • SHA256 8d35958eb67721973e9995e850d9b676b3b13e32160339d4683b34ff28656143
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LoveDay.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\LoveDay.jpg
        • Size 79KB
        • SHA256 c7b7eebad2b2a0ddf6eedc8534864c3e92b54246ef6599a85d504b82c989a4c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Ori%20and%20the%20Blind%20Forest.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Ori%20and%20the%20Blind%20Forest.jpg
        • Size 84KB
        • SHA256 3c4bf83afb0b8533d0683463da2ad126747351be380fb62db8754fa0d068be73
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SchoolDay.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\SchoolDay.jpg
        • Size 62KB
        • SHA256 1def224585afda2941efea0734f2b21d9eb46f693b0f6d73f9a0299ab9d07e6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SpaceDay.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\SpaceDay.jpg
        • Size 71KB
        • SHA256 cbf60e1801fbda3864ee6b81ed83c2b020ec64060f1e869dbf6fd83b9ad8cd8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SummerStart.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\SummerStart.jpg
        • Size 79KB
        • SHA256 3772c480c6277c988da59101fc0b6f07bbbbd2fcc1a92c205e6e3a0030f01b6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        TastyFoodDay.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\TastyFoodDay.jpg
        • Size 81KB
        • SHA256 85a6cf255ec956a5c759759122f011e32ce03139edd7041c69fe67eb856c5a78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Warcraft.jpg

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\backgrounds\Warcraft.jpg
        • Size 98KB
        • SHA256 f88b682b452ad60cf3803cefe5c5c992db9688d47e550d757fa9c2d2114e72ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\compressed_logos\logo.png
        • Size 81KB
        • SHA256 4cbd8de2536b17be3c88e55204a9adccbaf5063414eced4489d0a7e20b82e024
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\ar.png
        • Size 3KB
        • SHA256 825b68362f24ce7f883f0590b48901277717a3f5af3b3fd5204d52a0388b48e6
        • MD5 SHA1 SHA512 TLSH

        cs.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\cs.png
        • Size 3KB
        • SHA256 3ed33088d5eb9681f5beeff8891d91409e5c16d973e98631ae2be6ebb20137b2
        • MD5 SHA1 SHA512 TLSH

        de.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\de.png
        • Size 2KB
        • SHA256 6efff98164dfdaf41fac99701ab7947c871bde6441818552805db35f25246af2
        • MD5 SHA1 SHA512 TLSH

        en.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\en.png
        • Size 4KB
        • SHA256 448a32b3d50aea55f6c8060c6f09c38da95beee18d914b54f83ed27c029dfe2a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\es.png
        • Size 2KB
        • SHA256 df31aee7fff59445a784e860625379d98bcf4c409cdfe5105256f70466eaa49a
        • MD5 SHA1 SHA512 TLSH

        fil.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\fil.png
        • Size 5KB
        • SHA256 77bf3a622ddf9f62a44f9df5ed7394e297562937ba2649a601c57a4ec62cd99b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\fr.png
        • Size 3KB
        • SHA256 28d7eba3ae581920af075b4ae535a862e8161d51755447d23d746d381c682cc8
        • MD5 SHA1 SHA512 TLSH

        hi.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\hi.png
        • Size 3KB
        • SHA256 b2279f4efca958e6eb5eb6f9b1050a51516600e15d1facb9e80c890261b6e959
        • MD5 SHA1 SHA512 TLSH

        id.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\id.png
        • Size 3KB
        • SHA256 bb1ebe35eea1c8459397e2f2ad70b15a2a0d78b82ec40c1bfeda9f4016daca9e
        • MD5 SHA1 SHA512 TLSH

        it.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\it.png
        • Size 3KB
        • SHA256 324e6cefb6d3b59c39e5471c422b9e0f66bc146d6611f141fcf02a617dcc0491
        • MD5 SHA1 SHA512 TLSH

        kk.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\kk.png
        • Size 5KB
        • SHA256 e8f96e39f85c458bdb5322f59e2cd9010ac57a40ce6bba5e67c9da6be2369a48
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\ko.png
        • Size 6KB
        • SHA256 b1e31d13dc3969e160db78bc2eccdd54c3fd3ab0ec77c0adb62d99bd37deb07b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mn.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\mn.png
        • Size 3KB
        • SHA256 933638c1270f35ef544671dbe8fb1c58631533dba437aa7c87f266bc3a588ab7
        • MD5 SHA1 SHA512 TLSH

        pl.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\pl.png
        • Size 3KB
        • SHA256 9264c17b4af98e4ff2c148119cf6cd4a027d641ecc4736934bd37d953e425371
        • MD5 SHA1 SHA512 TLSH

        pt.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\pt.png
        • Size 5KB
        • SHA256 6a2d1a02147b23965982968168ae7d4b9f62f9703efddbef634946333f8e5884
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\ro.png
        • Size 2KB
        • SHA256 67f760804d132990ff089e38c2e3b295d6b4397a093f5ced56c3b31e5d87ef6f
        • MD5 SHA1 SHA512 TLSH

        ru.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\ru.png
        • Size 3KB
        • SHA256 8a37fd12d581a9028e358f99f7822c0ad67bdbfb6f8ab42d0b0590ab730a112d
        • MD5 SHA1 SHA512 TLSH

        tr.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\tr.png
        • Size 4KB
        • SHA256 92edc229bf481e2eebe9cb2c6207b11aa3f0ce58f67fb13f5613c14aa9725a44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\uk.png
        • Size 3KB
        • SHA256 f8e47f27ba271b6490fc53aaf4fe20aa0c68b319009fb502bfdf7fe5acd8aabd
        • MD5 SHA1 SHA512 TLSH

        uz.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\uz.png
        • Size 4KB
        • SHA256 c223b5a6822563cfc9fd50a1c92f0f7c1dbcce1f5c3a582e018d0e1547c081de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\vi.png
        • Size 3KB
        • SHA256 52b039c90766568a35f3dea24edc4b2288a8c6cded9ab3f901c4572be2802b70
        • MD5 SHA1 SHA512 TLSH

        zh.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\flags\zh.png
        • Size 5KB
        • SHA256 9117e4262ed145b02a7181b99aa124528e4a6be9cff00b5e29dcc41b44206c2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NoirPro-Bold.otf

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-Bold.otf
        • Size 46KB
        • SHA256 b012d85155925bbe2106b20234b96522dec7914f03b09bc6e2fff71554f31bf6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NoirPro-Light.otf

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-Light.otf
        • Size 45KB
        • SHA256 3c9ef459625f995c62b993b64da299204b741e153ba8e6d988463aaa86b1aa44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NoirPro-Medium.otf

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-Medium.otf
        • Size 46KB
        • SHA256 a728e91375dcadbdf6ef6d7e3cd0bbf5c56fb992d5b1be6640b83214c9d015ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NoirPro-Regular.otf

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-Regular.otf
        • Size 45KB
        • SHA256 c7fc6d9f2ff611073fa09a6c61a8c086da0ebe8da841a9f4ec4087a3e9b52152
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NoirPro-SemiBold.otf

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\fonts\NoirPro-SemiBold.otf
        • Size 46KB
        • SHA256 50000ce2f0f8bf3018f1d04aa5c6716583b808ca05c802c46a9de4f084a91f7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        acrylic.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\acrylic.png
        • Size 1KB
        • SHA256 6227f643aaee60a2006e5a2892b234cf17c770cb7d25af89dafedbe5079029a0
        • MD5 SHA1 SHA512 TLSH

        bin.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\bin.png
        • Size 2KB
        • SHA256 a0c0af8480f877e48615cc065fc6e29011384dee345843082a6ecdfef00a7923
        • MD5 SHA1 SHA512 TLSH

        bios.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\bios.png
        • Size 8KB
        • SHA256 089fcf367852048cb5e300a29a7e7fe0d6f6877707541c442b1f763a4143ccca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        box.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\box.png
        • Size 2KB
        • SHA256 c5023006a3e4159cc7029d2f8dca8a976694c4df5fed6992f398fae2c9709469
        • MD5 SHA1 SHA512 TLSH

        brightness.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\brightness.png
        • Size 4KB
        • SHA256 df3116d09e953f5d3118617433ae7e4415486f9dd2b0b122eca5a517dece7937
        • MD5 SHA1 SHA512 SSDEEP TLSH

        celebrate.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\celebrate.png
        • Size 3KB
        • SHA256 4f38b7b4d6a47fe26c130bab1c72de044a57c7098deeacea6b646b0af4f3e3ec
        • MD5 SHA1 SHA512 TLSH

        click.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\click.png
        • Size 2KB
        • SHA256 58a0817aede95222a7d2323b9d0e2370897cd364ae4ac6190ea101d93fe0e5aa
        • MD5 SHA1 SHA512 TLSH

        cloud.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\cloud.png
        • Size 14KB
        • SHA256 2a5515e13134d96b38a86ff57bcf9b584c150d230ad09a4d8b4773ca5f43c9f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        colors.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\colors.png
        • Size 3KB
        • SHA256 d600a8ef8d9fdd9c59b4eb0d742ca4a898174ce8eb2443cda4883c2d3a8d3c6c
        • MD5 SHA1 SHA512 TLSH

        complain.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\complain.png
        • Size 3KB
        • SHA256 825bc24602c07f51274b4a727e085d245c59d6e25e89720330044a37bbc505e2
        • MD5 SHA1 SHA512 TLSH

        crash.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\crash.png
        • Size 7KB
        • SHA256 ceb349a69344f6499e6e15a92e151a7a5c27ac3940d35d0b7dd7ce1ef8eec688
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cursor.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\cursor.png
        • Size 1KB
        • SHA256 1066cc533e88bc00a7a765420a6090d4623a486e0752817feb6f56b9a55cf14a
        • MD5 SHA1 SHA512 TLSH

        debug.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\debug.png
        • Size 6KB
        • SHA256 79cd4bdc0acc6673ebd689623998a7e35bc96636699398cfa06a0e7b50b28e5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        defender.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\defender.png
        • Size 1KB
        • SHA256 e741a4c79c808620c2b11687e002d44141f5c14128b3cadb908c46a1696930cc
        • MD5 SHA1 SHA512 TLSH

        dice.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\dice.png
        • Size 4KB
        • SHA256 949632f3beb11eacf0869b9c02d6f404672838369ef14e6ae5d6dc0692d13844
        • MD5 SHA1 SHA512 SSDEEP TLSH

        eac.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\eac.png
        • Size 29KB
        • SHA256 ac946da5e12c77c6aeb3ed63f289cea2e3a13fb703f0c9675ff8e2f76f96f6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        engine.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\engine.png
        • Size 2KB
        • SHA256 ea6c90a1dd236cac900a5db3b90fe2687698293d730a1abcda4dcbca45517041
        • MD5 SHA1 SHA512 TLSH

        eye-off.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\eye-off.png
        • Size 6KB
        • SHA256 4862f1cb3f9706ac510936a9dc32279d1c0a5c6e1700c6d063bfa8792d6e4639
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flashdrive.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\flashdrive.png
        • Size 1KB
        • SHA256 476d75395b0f2dc52252c24638f8e1b81d5f3f789b3176363152cd13eda52bc0
        • MD5 SHA1 SHA512 TLSH

        flip.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\flip.png
        • Size 775B
        • SHA256 74796afd924dd84fd6a20ca83e71ab7e12d859370ba34ced3a3d8f9ad111c063
        • MD5 SHA1 SHA512 TLSH

        font.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\font.png
        • Size 3KB
        • SHA256 c98f82fd9420f2bdcbaa428e38f8dd2b11fd1902c570202262d430dd46c945cb
        • MD5 SHA1 SHA512 TLSH

        fps.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\fps.png
        • Size 2KB
        • SHA256 8bca687e957704a3a817bb1b2c3a453075d02479f6499743d803f512828e0dbf
        • MD5 SHA1 SHA512 TLSH

        framerate.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\framerate.png
        • Size 5KB
        • SHA256 d4d701d7f8db65925fa1ec9ba83974850a5ad30792714db2d065384ee014ccec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fullscreen.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\fullscreen.png
        • Size 2KB
        • SHA256 bb516329c60f73517908595bf7af5d45da4d4236a12220c318bac15515d0b13f
        • MD5 SHA1 SHA512 TLSH

        fun.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\fun.png
        • Size 3KB
        • SHA256 7ae9a4cbd759e0c403bdc83f11b56a33e683311fc8793c7a5c2025cf249e3b3b
        • MD5 SHA1 SHA512 TLSH

        grain.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\grain.png
        • Size 79KB
        • SHA256 cc453dfe977598a839a52037ef947388e008e5cdfe91b1f1a4e85afb5509bee2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        harddrive.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\harddrive.png
        • Size 3KB
        • SHA256 312b5013208cf37c14f2a8e48bef90ac38f064b2bc6afbbec9b90f93c6822873
        • MD5 SHA1 SHA512 TLSH

        hint.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\hint.png
        • Size 3KB
        • SHA256 dde6d0f8022c62d1f128bb4fb088578ec14f4fce9e8a662658a5609f8e7238f1
        • MD5 SHA1 SHA512 TLSH

        hitbox.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\hitbox.png
        • Size 3KB
        • SHA256 24c92d4d8fca5b981e05de242659621968c09d2572f24ecb6503c6ce7c4c88b7
        • MD5 SHA1 SHA512 TLSH

        injection.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\injection.png
        • Size 3KB
        • SHA256 df15378bc2d8a3758f738df02e5ccf804a3044774218d5bb0e0d896c953a4a33
        • MD5 SHA1 SHA512 TLSH

        insert.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\insert.png
        • Size 3KB
        • SHA256 78c4233753b68eb5ed26d405d8a4e4862b2c4d52595f4f433838cfe3ed36fa0d
        • MD5 SHA1 SHA512 TLSH

        issue.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\issue.png
        • Size 1KB
        • SHA256 8862ac2dac5288fc177bf1fde73593b3cfdf62b71fb506bc20055936938b3178
        • MD5 SHA1 SHA512 TLSH

        log.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\log.png
        • Size 1KB
        • SHA256 a81eaa931d4e066ba010b227a387bd5692837b7b6d4888350bc2cc3c80cdf276
        • MD5 SHA1 SHA512 TLSH

        logout.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\logout.png
        • Size 2KB
        • SHA256 ea0c3ef2ddbb4ff007e9f9775b89b2fb3eb5c735842711639d863823dc81fabd
        • MD5 SHA1 SHA512 TLSH

        magnifier.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\magnifier.png
        • Size 2KB
        • SHA256 bedb223a118926170d8d42607ed121bbaebcfae421683af9ec2861385ee483b1
        • MD5 SHA1 SHA512 TLSH

        mascot.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\mascot.png
        • Size 72KB
        • SHA256 c9f0d00ad8d0a0b94c258bc154fe2862f39d7f4b374e33c4c86ccc0d5fd77f05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\memory.png
        • Size 1KB
        • SHA256 400ed7606b4d9bd36bba6ea7c955db486c4851238e12b6b91c54688a9c27dbd8
        • MD5 SHA1 SHA512 TLSH

        mods.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\mods.png
        • Size 4KB
        • SHA256 84f6f5707edd00dcec8a7f75c579c8b058792c5426a784d3b3424e5569b272d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        monitor.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\monitor.png
        • Size 1KB
        • SHA256 da9f50458ffafbdf3cdb3cc0996036cd0ff7540c85c602301edf5d1e6411b056
        • MD5 SHA1 SHA512 TLSH

        mouse.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\mouse.png
        • Size 12KB
        • SHA256 3aceaaac4c2105a2bcea550d5127b4360d656628d2f52b1bb702e1788c2869d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        offline.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\offline.png
        • Size 3KB
        • SHA256 cbb43fc823dfbb45100b713836289719a728c62e47c9c42ba85099311f83c3b3
        • MD5 SHA1 SHA512 TLSH

        opacity.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\opacity.png
        • Size 5KB
        • SHA256 aaf195515fca130e67549941e4de92754f8d0c1c8c5b5855fe71511895c69e52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ping.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\ping.png
        • Size 2KB
        • SHA256 76ca3022b6664df6cb89d4d84aa7882464b4ba9f17ae9cd01e2e190fb6907c5f
        • MD5 SHA1 SHA512 TLSH

        platform.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\platform.png
        • Size 1KB
        • SHA256 30f610bca538f3c636f188b6f17a70a70448d5b8c27d5f3380785bdb17c1e0fb
        • MD5 SHA1 SHA512 TLSH

        privacy.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\privacy.png
        • Size 3KB
        • SHA256 4456e7c85cdb5cc1a77016edb0fda27c6cddfe7a89019222efcb9080aa2663a0
        • MD5 SHA1 SHA512 TLSH

        profanity.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\profanity.png
        • Size 2KB
        • SHA256 ea35e15e2a3df4b1c55b980ae7ea37c143170ce7021ac35e5def387fde4e8b8c
        • MD5 SHA1 SHA512 TLSH

        rain.webp

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\rain.webp
        • Size 656B
        • SHA256 d93d33bfa57151721c3e3e196d56648c066aa100d4a26adedcd772cbbcf19422
        • MD5 SHA1 SHA512 TLSH

        reply.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\reply.png
        • Size 3KB
        • SHA256 670a2e4c66cbf80d0bb75b2ecd3850439ee8946ed217232e900dbd2041af9526
        • MD5 SHA1 SHA512 TLSH

        rocket.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\rocket.png
        • Size 3KB
        • SHA256 f32b5099ce583cd8d546b630d4fd0f1e3e48b7eb6022f0642eb5bafadc077728
        • MD5 SHA1 SHA512 TLSH

        rounding.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\rounding.png
        • Size 758B
        • SHA256 de0f4e7e3229536cdfd8c22ec856a8e80e605602ce27d522f39ece9683d093dd
        • MD5 SHA1 SHA512 TLSH

        shortcut.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\shortcut.png
        • Size 3KB
        • SHA256 a531b40c2408def163abce7d834a970b0b5f931dfb7d04a6ea28040f820b6653
        • MD5 SHA1 SHA512 TLSH

        snow.webp

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\snow.webp
        • Size 106B
        • SHA256 890d8963e3f72df8b7dbd845d3d8997765d3e756204cc20dee6e91fb54828067
        • MD5 SHA1 SHA512 TLSH

        snowflake.webp

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\snowflake.webp
        • Size 186B
        • SHA256 4ce0fa74f2351d1221bf99d793cb81436f4aff29d7c5d54a34418874ace7f548
        • MD5 SHA1 SHA512 TLSH

        socials.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\socials.png
        • Size 3KB
        • SHA256 2af3f33920844ca4f87c1e7d2c84c0da81b0a9fef22880022cf09afc79b70d72
        • MD5 SHA1 SHA512 TLSH

        translate.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\translate.png
        • Size 1KB
        • SHA256 9b11d5698115b2130c82ab860c62d80329faa2ed3ac66ea92e3d42a0b80a0946
        • MD5 SHA1 SHA512 TLSH

        trash.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\trash.png
        • Size 4KB
        • SHA256 a10a3336f46b307e8df7c3acb615ece919c5df285c0a91e0bb8855a3327e25bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        updates.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\updates.png
        • Size 1KB
        • SHA256 53280929b5f32e564ea9c00e607c5475b6554620184dee303cb6becbedd30c73
        • MD5 SHA1 SHA512 TLSH

        version.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\version.png
        • Size 899B
        • SHA256 522a0868359a82748c3ae03c4db61dfcbc6d715e7da6b24e49f184d7ce666c64
        • MD5 SHA1 SHA512 TLSH

        wall.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\wall.png
        • Size 2KB
        • SHA256 92abc3572a852e7e15481476ae947d799024b901ae668fcf8c513d84d210d8ad
        • MD5 SHA1 SHA512 TLSH

        weather.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\weather.png
        • Size 2KB
        • SHA256 e28daacfc80bbcc7e62ff17d4a7b1981372b58a0e5fbe714eab83a480dc8bcc3
        • MD5 SHA1 SHA512 TLSH

        window_size.png

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\images\window_size.png
        • Size 1KB
        • SHA256 d5e3c3aa6751c5df6dceffacf01e2905bfcbe12c7a631357f3f86e494918ba32
        • MD5 SHA1 SHA512 TLSH

        background_image.frag

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\background_image.frag
        • Size 13KB
        • SHA256 9986d66db87b6ab3ee7182a688736c411459c0ac4f583e966fe529d685c15a80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        modification_card_image.frag

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\modification_card_image.frag
        • Size 30KB
        • SHA256 880e1a838aa9b41af69fdfaf54a2a5f2ab0d60cf75d0df91acc3e8dd101c16cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        raindrops.frag

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\raindrops.frag
        • Size 51KB
        • SHA256 e139581178d563fc75aca12781a47e75c9020e13de3581273f901715afb691bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        shimmer_effect.frag

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\shimmer_effect.frag
        • Size 7KB
        • SHA256 fb4e69dedfd10f3690e863547a9a50567a1e2ab6c35ee7e56a3fa3dee7263de1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winter.frag

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\flutter_assets\resources\shaders\winter.frag
        • Size 70KB
        • SHA256 43373bf6ccc11cf8a96ce00bc33bd0f20ff116b057a587557b4279a2b23edd54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\data\icudtl.dat
        • Size 760KB
        • SHA256 c12537022ef818991a7bfed41a76d8d6ae962ffbc0e6511ac762a5d0845e7f7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_windows.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\flutter_windows.dll
        • Size 18.2MB
        • SHA256 f305282174da15723cee0913d805db06accb0b0de513fbd313affc9b173353ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        permission_handler_windows_plugin.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\permission_handler_windows_plugin.dll
        • Size 115KB
        • SHA256 67465687870f83f264c090105385217c2addbf01781b56a239b79956ffe2a49b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        url_launcher_windows_plugin.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\url_launcher_windows_plugin.dll
        • Size 96KB
        • SHA256 9ff8c50b5dd18205126d7ead03ae7d7332e3b85cd450aa2656a04321ff888d32
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\vcruntime140.dll
        • Size 116KB
        • SHA256 a06c9ea4f815dac75d2c99684d433fbfc782010fae887837a03f085a29a217e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\vcruntime140_1.dll
        • Size 48KB
        • SHA256 6d3a6cde6fc4d3c79aabf785c04d2736a3e2fd9b0366c9b741f054a13ecd939e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __PSScriptPolicyTest_31hjcyys.wfj.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_31hjcyys.wfj.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH

        locations_v2.csv

        • Path C:\Users\Admin\AppData\Roaming\com.swiftsoft\ExLoader_Installer\network_fallback\locations_v2.csv
        • Size 6.7MB
        • SHA256 6dffdf133e1c60009e17e80c548ab5a96ebf59766e92a266061cfb2a269c9825
        • MD5 SHA1 SHA512 SSDEEP TLSH

        shared_preferences.json

        • Path C:\Users\Admin\AppData\Roaming\com.swiftsoft\ExLoader_Installer\shared_preferences.json
        • Size 104B
        • SHA256 06aa5ebd5b35f7e71f08b032e5ba797f9760b2832358a2658f00019bcf853c9d
        • MD5 SHA1 SHA512 TLSH

        ExLoader.lnk

        • Path \??\c:\users\admin\desktop\ExLoader.lnk
        • Size 993B
        • SHA256 b1dbc775e6c2fbf6e4fed0b65578146c98531bc7c7d7c84d1752cf13e5a726bb
        • MD5 SHA1 SHA512 TLSH

        memory/4864-451-0x000001E6FE8B0000-0x000001E6FFBCD000-memory.dmp

        memory/4864-452-0x000001E6FE820000-0x000001E6FE821000-memory.dmp

        memory/4864-450-0x000001E6FE8B0000-0x000001E6FFBCD000-memory.dmp

        memory/4864-449-0x000001E6FE8B0000-0x000001E6FFBCD000-memory.dmp

        memory/4864-448-0x000001E6FE810000-0x000001E6FE811000-memory.dmp

        memory/5280-670-0x000001B9F87D0000-0x000001B9F87F2000-memory.dmp