7c460565b6389e30beb532735ef4f7fd5ec2f02472a41f948a70621290522112

Analysis

user interaction
yes
max time kernel
40s
max time network
39s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 12:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fws_setup_x64.exe
Size 1.3MB
Sample260825-p32bsshc48
SHA256 7c460565b6389e30beb532735ef4f7fd5ec2f02472a41f948a70621290522112
MD5 210fa673c398ee70ee827546fbf32c55
SHA1 1e6946b4060349aa18a7009b561f244e68fa8af2
SHA512 557e741c3a986ca12c00e38162a366f14361d76e7da719f3749454a19a861a6b9a8d41b9a6f804d3ed45e7b4480489eece2fe7109d19baa12c3ca1d8ae7bc90b
SSDEEP 24576:VQitBjd13jTKgjPw+Ed53EZoMBny6YjwUVw1JzF+f/zj0c0UWDuJjR9sCjrQomvH:V97PBjI+EdFhAnydw6w1O/c8gCJmv
TLSH
T1495533C2AB904535F0F2EF707809917060767C16EC3E568928ED6C497F5EAF12A8BB47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000\Control Panel\International\Geo\Nation	fws_setup_x64.tmp

Executes dropped EXE 2 IoCs

pid	Process
2472	fws_setup_x64.tmp
2304	FlawlessWidescreen.exe

Loads dropped DLL 3 IoCs

pid	Process
2304	FlawlessWidescreen.exe
2304	FlawlessWidescreen.exe
2304	FlawlessWidescreen.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 45 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-D095M.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\Licences\is-OLQF9.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\Licences\is-R4KSP.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\is-CIJR3.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\is-DRD8J.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\settings.xml	FlawlessWidescreen.exe
File opened for modification	C:\Program Files (x86)\Flawless Widescreen\bass.dll	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\is-NCGTT.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-S4FS0.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-C4SDJ.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-KC2UD.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-HK4H0.tmp	fws_setup_x64.tmp
File opened for modification	C:\Program Files (x86)\Flawless Widescreen\FlawlessWidescreen.exe	fws_setup_x64.tmp
File opened for modification	C:\Program Files (x86)\Flawless Widescreen\fasm_wrapper.exe	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-TB67E.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-P27L5.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-DPRNB.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-KE2D8.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\Licences\is-C5B2J.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\unins000.dat	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-I8FJT.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-IK7Q8.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-5NK5S.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-LFKLI.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\Licences\is-GDFAH.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\is-OEPVU.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\is-NRSGR.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-LC03Q.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\Licences\is-0GBGQ.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\is-TATMV.tmp	fws_setup_x64.tmp
File opened for modification	C:\Program Files (x86)\Flawless Widescreen\unins000.dat	fws_setup_x64.tmp
File opened for modification	C:\Program Files (x86)\Flawless Widescreen\FASM.dll	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-2FOF8.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-TRCH6.tmp	fws_setup_x64.tmp
File opened for modification	C:\Program Files (x86)\Flawless Widescreen\settings.xml	FlawlessWidescreen.exe
File created	C:\Program Files (x86)\Flawless Widescreen\RepositoryCache\FWS_MasterRepo.xml	FlawlessWidescreen.exe
File opened for modification	C:\Program Files (x86)\Flawless Widescreen\libcurl.dll	fws_setup_x64.tmp
File opened for modification	C:\Program Files (x86)\Flawless Widescreen\BeaEngine.dll	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\is-4A07B.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-RABKM.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-3O3RD.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-MR9FT.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-M2NAH.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-8N7HV.tmp	fws_setup_x64.tmp
File created	C:\Program Files (x86)\Flawless Widescreen\data\is-53SLF.tmp	fws_setup_x64.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fws_setup_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fws_setup_x64.tmp

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/2488-0-0x0000000000400000-0x0000000000415000-memory.dmp	innosetup
behavioral1/memory/2488-110-0x0000000000400000-0x0000000000415000-memory.dmp	innosetup
behavioral1/memory/2488-122-0x0000000000400000-0x0000000000415000-memory.dmp	innosetup

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2472	fws_setup_x64.tmp
2472	fws_setup_x64.tmp

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2304	FlawlessWidescreen.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
2472	fws_setup_x64.tmp
2304	FlawlessWidescreen.exe
2304	FlawlessWidescreen.exe
2304	FlawlessWidescreen.exe
2304	FlawlessWidescreen.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
2304	FlawlessWidescreen.exe
2304	FlawlessWidescreen.exe
2304	FlawlessWidescreen.exe
2304	FlawlessWidescreen.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2488 wrote to memory of 2472	2488	fws_setup_x64.exe	85
PID 2472 wrote to memory of 2304	2472	fws_setup_x64.tmp	88

C:\Users\Admin\AppData\Local\Temp\fws_setup_x64.exe
"C:\Users\Admin\AppData\Local\Temp\fws_setup_x64.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2488
- C:\Users\Admin\AppData\Local\Temp\is-U1QPS.tmp\fws_setup_x64.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-U1QPS.tmp\fws_setup_x64.tmp" /SL5="$8006A,1069124,61952,C:\Users\Admin\AppData\Local\Temp\fws_setup_x64.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2472
- - C:\Program Files (x86)\Flawless Widescreen\FlawlessWidescreen.exe
    "C:\Program Files (x86)\Flawless Widescreen\FlawlessWidescreen.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in Program Files directory
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    PID:2304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BeaEngine.dll

Path C:\Program Files (x86)\Flawless Widescreen\BeaEngine.dll
Size 217KB
SHA256 d3239960c2794532354927581898c07ae29e14a52e25e2ef81c928a770f6cac8
MD5 b902b68233b638629c9ea4691f0db4db
SHA1 194d66a63d104a58e1221d244f7ea7569f9ed0bd
SHA512 0ebf7b442bda816f108482efb0ee5b13af7c007e594e3d374eb8858de0a81bd5c4bab17d9af92ecee1a8c11ac518a358e0ccaf3099a4d7af1a01bf9913160584
SSDEEP 6144:sCQ9NpPoEodzaaN26ldwRs1P06OkSuXjYmo0iQfUdVtYmY8YeY4YhYbY9Una2u4v:A12
TLSH
T14D24A6866B319880ED67D0BA8D138B4563EEB416234E6AEF476653752F633C01B36DF0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Logo.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\Logo.png
Size 17KB
SHA256 79315289c722e58794f767db5665f0ff0813283ab1d8772acaa065085c3dec87
MD5 6789e6916a0f0053ec03f6e074bdbc73
SHA1 e9e112c457c9bbf68b589b6cfe567ddf299159a5
SHA512 0f3e8e0342d22a21a4d12fcf4654d1682842e0d52e57c3eab6fe138b5eb114a6caea84e8cefd32a5057f0924044136169abcf6d4abc7ae24fd7784f3348c0b28
SSDEEP 384:JXE05C/1PWsZ7vYxQUd2ActMXtQqAa6dIzS8mZcSmDg:V35C/sO7gxrd2wtQw6dIzKZ6M
TLSH
T1D572E1562ACB14981FEFA322248545415BC875CC2ACA7A4C7C8B20CEE89EF6AD363815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

about_1.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\about_1.png
Size 8KB
SHA256 bef5a18882013e28a4a58a5a28786ea61fd31952fc1cdb83ed8d9bcc0176204a
MD5 603201ea857433b460405d0cf2a9ba9c
SHA1 438ae914431f36328ded1f1df5ec12ac6651dc07
SHA512 dcee7a02c06a1af0d5aa76e62b239cc4aa880556ad7bf4a985aa3bfc8abc526e2b3c6805509b72b7f92fb7b22f7fa372cd009de88adf15b2792235d3e033a26e
SSDEEP 192:xv3+FS39pZ0hd+4xv58mOTG0ioVb6w7B6zbYAd7WoFtny1:hR3CtvyVC0ioVBM5vtny1
TLSH
T13E02BFD5BDDC9D1D470815B2B6120CA28835D8EBA38C864ECF1658FE8C089DDDB80D5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

about_2.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\about_2.png
Size 2KB
SHA256 e9a5e771c1e4795bc8d338405a9cf0d111e230f73c34904c16ec4792b54b13c4
MD5 fe24524217c8beaf87dbe7c500ea620c
SHA1 4261ff732b43f5de1861a12e295d6429a773814a
SHA512 c040d242245d86b64b6ce0b4a1616cbb76112868725fd35576447fffaf204eeb23cc8ba9f58a537a35a5b3f1c909af4c2b28c942b812d973abb2aae81fe4e95e
TLSH
T106411AEB82CDD2D71C2D11BE02BF85110C2345033A54A2352C5C9FB390FF66A89D6347
MD5 SHA1 SHA512 TLSH

Submit Download

about_3.jpg

Path C:\Program Files (x86)\Flawless Widescreen\Data\about_3.jpg
Size 15KB
SHA256 9ddf76577923af2fe42372699a35abd913986cdd0b125ae0728ffaa9865f355e
MD5 104e62835bacc8fc08900d75a5497981
SHA1 5c4c6a368f8530f63422ada53088ab68f7820bc7
SHA512 338165e373dcf25c8e1911605e20c9f8411358cdefc02bf1484bc0c7d62543d325a38c3025cce191bd43033db550d8b40bead71cc6af2492a0fd4391e2ab49a6
SSDEEP 384:Uq4H09aXYt/sGyhEBSSzH8Q4F7KPo8P9NqpGugC/MIt:U3Yt0mBSqcQ+qXP9Ndax
TLSH
T15162AF1BDAA7DCAD49F1717A9422EBD44C5C60183A47AFBB9AA78A30F1115C44C180FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

donate_button.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\donate_button.png
Size 1KB
SHA256 5132f6ae94504686a9e859f3136f565282555937ae65362c32fbc2af71df9c35
MD5 5227fda92e90f5c2ae70f59fa142953d
SHA1 193a499535ae349be11cc2c8e2df3c810a644ba7
SHA512 1bfdd60934488ced9b7a0859c751c04ae896f862b1c6db10d09922601480c3ab8d2cf1543ced6b60e1bd25db727289c141bb8f3cd4a9d778a26175791a0af743
TLSH
T1D021BB27705598916D7366164B113A74B8F56615CD04B5AFDC5CE1F2A74DD148023A48
MD5 SHA1 SHA512 TLSH

Submit Download

lv-critical.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\lv-critical.png
Size 3KB
SHA256 03a0d890904b15f0e6d64d8a2a23f55adb7b9f65ead8d9ade6753e6b5fb311d0
MD5 6f4ee91650104c44a66a029f51d673b9
SHA1 443a79d992f9b751c039a1f73850177dce432749
SHA512 1afa9e52cf15893f70ec09ebf1459ced0fdc0d954d86a3351b0b04c3366b5631809c5666ce5cd47ed16eedaa40fb0772a5fd7bf8332fd79ba7e96b816a8eeb64
TLSH
T1F2615CFE9B20A04FB8DDB9512ECC1342E36D227C49A7333850E059DE0468E47AB561B2
MD5 SHA1 SHA512 TLSH

Submit Download

lv-debug.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\lv-debug.png
Size 3KB
SHA256 5333a964e5ae1791eed80ccf0597e195d19af4a5923fe2bbfb009c6200239e88
MD5 f76f777af8a24aab67154a344c2d3ff5
SHA1 60231b6a9cf75ff90d4d369d8af6b6f7236987da
SHA512 21e8d77f3efce978e90fcc60a42f7075a398684004fa992d94ff7f204219113615abf24fdb8b88445be99b70ef498700989e312e468d0e2c93cf398071ad9859
TLSH
T1BE716CAE5AB064CF9CCD75500C8D0302E329227C81273B78E0D166EF4875E4B7BD647A
MD5 SHA1 SHA512 TLSH

Submit Download

lv-error.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\lv-error.png
Size 3KB
SHA256 5dffd2c86218239b977aab78f5a329986707d45f57db4e7d242efcfebe6ea86c
MD5 81bde5b99127964bc13d2fbb8786b421
SHA1 aa748b4a46d211e6678f13482d5d99012b836024
SHA512 21096be8a61e02e99d07fa72505d8201f61b855a6db7475423e91d4dc8a09d620faab9df42004ad051e434fcc7a82e6eefc8438a18cacc08a132205909da0b78
TLSH
T161616C5FCA20615FA8EC78220D9C8642D7AE327CCB23362894D146DF1494D472B1A0F9
MD5 SHA1 SHA512 TLSH

Submit Download

lv-information.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\lv-information.png
Size 3KB
SHA256 b3de70617c4e7a237dee3703cf8bda6d848a975b619761fa79106432f2dcd827
MD5 3e8459ac9b167517c788f439ed00730f
SHA1 baae5c82d858608898e10ad35108c77416d649d7
SHA512 59672aa5e80a9487b54d65118055da853d28936993a77ca640ad8f2775a40d1ae18673dc8faa23c826a54af80e7bd3fa2447e9224108481b7f3edabc9a780010
TLSH
T11E61A0EFDEA0906E7CA875500DCD5105E31921ADD843393C8881B4FF1094D0BEB128F5
MD5 SHA1 SHA512 TLSH

Submit Download

lv-warning.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\lv-warning.png
Size 3KB
SHA256 3e66d107bbd574f8f82243db843bd3af6aa6434b38234a4b3f79bbcecc3f4210
MD5 f84238483d27e206ae1fcc94c729b7a5
SHA1 0d60f7936fd1582be47fae52ec68e7783d7205e5
SHA512 bf9ae2cf52b9acce346a394ee914dce4cc447f02e12af87e4c22703c3722c5e44cc13c96e8df65c95f57ecd79482b48297a38144041e8567fc0841643f646544
TLSH
T11C619EAED620909FB8DC79124ECC4242D76C322C56873A1CC4C1A2DD4464E0BBB19036
MD5 SHA1 SHA512 TLSH

Submit Download

tc-status.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\tc-status.png
Size 3KB
SHA256 adacb833c98b96257bfe973db97a50c01af7e2a83c512595d731ae6a2fbc4341
MD5 b1d1bfdeb79a6196efe96e4bd76b75ec
SHA1 e145aa0b0cb40bee2b87ad7b97f6393359dafaa3
SHA512 df12f50e774951964e67b72018102279e498f98b48580306f9065692151019bfecf511bf49a1d48be7e2a138352e38c358fe1c7d6a7c2a46cb365ae2d2eaa6d8
TLSH
T162617DDA98B0549EB4DA711109CE0241EA1DB3AC8A533B7C94D2A1DF0091E4BAF250B1
MD5 SHA1 SHA512 TLSH

Submit Download

tv-avail.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\tv-avail.png
Size 3KB
SHA256 0c98a64f362cddb3c1b77e383e386cf07f413cc811badf4d0854d74930a29376
MD5 decec20435a6027c55e7f02202fbf676
SHA1 1fac1996b61c525567b2c54e07f7a7b47f069bc6
SHA512 eebb0e9c041ad6972c859293e38842dcd9ae4fc5cc3d04934c91566a37fd89c1f34a23ebabbd3295fe46dea455e64fe5fae736917570752dcf941ac0193201bb
TLSH
T1C4616C6BC9A0614E78DD79014ACD0182DB2C22AC9A873A2C8CC191EF0095E0B3B7B464
MD5 SHA1 SHA512 TLSH

Submit Download

tv-downloading.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\tv-downloading.png
Size 3KB
SHA256 abe80cabce24050cc49204ee28ecf6f082929c3f975835a951a441e29ec42892
MD5 ec02defecf7eaff28d94bb10c0f3ec3a
SHA1 a0ca530aae5521ca847c993bc9c45669517c3ee7
SHA512 e41454ac6781372680b368e6167b8b847e58e712305218775d5fccfcf16e86518e3efaf8b6f2c18bb9fd195d5062aa15e373735b4dc5ca6499f4217ea333eb39
TLSH
T114618F77993071CFB84D70524CCD1041973D317CE99B3A3CA942A1DE68E4D072F66075
MD5 SHA1 SHA512 TLSH

Submit Download

tv-installed.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\tv-installed.png
Size 3KB
SHA256 7e47d5da96235c1bb28ff12a1d09c6b95034c1ae7299ec9c3fda6ab9528dbaa2
MD5 472d990d3ae9fbf5cf9b11f449ea17ac
SHA1 5aed6e9b6be16f50c0453717785ccaca5971672d
SHA512 fdeb57d462952680ab128cf59fb571ab8e7e8f7fc1f52cbe131eb52fc4fed9ba29538bc2dfbea68718dba86efae85c10ee99bd29968b94eb905ab6b428e6a8eb
TLSH
T156617D57D970E4CE68DAF43109CC11529B2E33BC954B3B38D2D181DF1496D075F594A1
MD5 SHA1 SHA512 TLSH

Submit Download

tv-missingdep.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\tv-missingdep.png
Size 3KB
SHA256 a5c8cf574eb6da448866273fdc23bd1136330ef8d3d912d472e0528d6c609f1f
MD5 0e0744ffc0e503f80003d04a12c50ce6
SHA1 dd17bac59f1823d4bfda2871cebf99a37230bca3
SHA512 cd4416f0cedc5787b631a460adfe715403cec06d896c628040814441207dbe2e1cd11f835ce2f1f8f9434fd30b629fbf6bd8e80e0229c1a24a3c637d0ac0f271
TLSH
T117616CABC5B0A49D789EB9410E8DA516DB3D221C891B333C48D0AAEF1498E075F73465
MD5 SHA1 SHA512 TLSH

Submit Download

tv-module.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\tv-module.png
Size 3KB
SHA256 0d2c581716a4034c86e53b3cc1289cad25205f8cb59335d078b7d9c1d7e19733
MD5 e74bbc0f4594a0d23e745a0555a42b9a
SHA1 64ac5a86300f0ed417e7f8fb329342e2af88b9cc
SHA512 452ea5f983b88841106968efd2af83f8d0783b139b7f01c9a0077bb8217a1c2338c99a15e63c52b9a9e22628f85ad5e64ef387143bd3ccb7054c7974577b5b22
TLSH
T196617D9BD924A1EFBA9AB1010EEC6141AB6C705CCB53336C91D292DF50E2F0B5B16424
MD5 SHA1 SHA512 TLSH

Submit Download

tv-plugin.png

Path C:\Program Files (x86)\Flawless Widescreen\Data\tv-plugin.png
Size 3KB
SHA256 f691e717953958dbd7f71554aa76984bf1a7ad0764210d77e7ae9a80c7b7eec3
MD5 53b585ea409aa18f37ed9b659089ff9c
SHA1 ce615e3619eb5fd092f564805e55889924ed3620
SHA512 f2952a757b2a0f1cce5630ef4a10beda0cfb9b486208921c8e42c46fb3bdef99f29a71312dce15e8798d21bb82855b65eb09e9c6864a2120f810cba356cb5262
TLSH
T116616DAF4C70759E58ADB5010EDD4501D76D226CA9733B3C90D2E6DF1092D0B9B660B5
MD5 SHA1 SHA512 TLSH

Submit Download

FASM.dll

Path C:\Program Files (x86)\Flawless Widescreen\FASM.dll
Size 96KB
SHA256 f208c54d2a16ffbe167e4262cb497f671eee7554454fcd38b35a13aaf19dbf0b
MD5 8745a2e355d7f6cce04bcfd00272cdf9
SHA1 a557472ab323f92a6d96ac1251c0751c7316a7c8
SHA512 b687941820446718f3324bcd6fc2f1da55e968200b19e086b0c54a585ee14747f47ac3d565d7f84e5b3ba89ffc488da240daa466f1ed73ef4351f2dcdd3ec57d
SSDEEP 1536:fVAvzqlxeGa4/303Tj0Z+K3bUjhPqHkBbbwtaIAqCw1z7q2Fqk1Itxq5+Fs1HCOh:Dx1a4kk3bShJxwkIAqj7q2I1rvmKm
TLSH
T121A35AE361F55B70C41D91BC6D32B396D86AFEF3C224AFCB33606004B99994678A94DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FlawlessWidescreen.exe

Path C:\Program Files (x86)\Flawless Widescreen\FlawlessWidescreen.exe
Size 2.5MB
SHA256 fe6911ab62fc221068c97bbafe9870dc3e1f403d2255eedb72ae9e5e0e856977
MD5 cb4591a8ce051e3823d07cf7c4b6ff8b
SHA1 01ddab86b71339f51c0a6d60fb555f0643c75854
SHA512 c2eb22f650b881e4401737f138f87c589b96ff93ff75cf98a02d8eb463ea33d4e14d458e9c695929a1e44f9a4be07fa1c318c70192ae2b469eadfc820d249725
SSDEEP 49152:U90fDZ39pX83tvCTO2T/y++yW4jjy4bGVZJThLE/BZx8WNG:U0rps3B6+Y
TLSH
T108C55B5062B610E4E8BAC0308525A927F7F17C189B7076DF08959DA96F73BE29D3FB01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bass.dll

Path C:\Program Files (x86)\Flawless Widescreen\bass.dll
Size 218KB
SHA256 eda3f66eedc49ff9b9506c1ccf679a7822104c771eaab3afa367f0d6a2c9bbd5
MD5 82dbc53c4e057ad941eb73aba212956e
SHA1 38a582ce5fbe03e8c5f040d82f89b4797e305860
SHA512 6f8e9082750c9cc8eb7bcaf7b7442f52ec55e2b712fff29a3a22868218fbfd605b594314e7be2720fd25f5a89d95774481177429de35acb48d023d39a2767781
SSDEEP 6144:zeiZg2t99AfztJKncZKwjf3F2yb0F49OLYI7:zelswjf3F2IEL
TLSH
T16B247D52B3B0CCB6E46790358A839257D7B178850B74C7CF02E4AB9A5F633E11E6E361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

about_track.xm

Path C:\Program Files (x86)\Flawless Widescreen\data\about_track.xm
Size 34KB
SHA256 170c1a4f945c2730980da5b373177b857e0826313cd60fc16a11c8f62fd1d33e
MD5 e7e25c8b63842992cbd4d2aa266379a8
SHA1 6fe3fefbec0cc062863362bcf8d827d5e189c8e5
SHA512 38854fcb34bf0e270cb7fa3c704ebf90729521a4d3cf09db0d80016b29a82b8b55d50b7685b77327f047d5d2d812155d992a45e5a1c7593150c5be71a59012e1
SSDEEP 768:D0HTIxM3QM3VXaBrp8EaA1lAq9Apb3T9P:D0HTIxMAMFQriEaElr98bt
TLSH
T130F2412AC48CDCD1E9001A346FBE156A4A95FFAB3F39B15724E83D02171FD654C72EA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b-execstep.png

Path C:\Program Files (x86)\Flawless Widescreen\data\b-execstep.png
Size 6KB
SHA256 de9428d2b87a97029513fc62009e0d805e3087a2fe7115e883a0377a480d4183
MD5 eb91a41ba8b8108de746e8b16a3f31d5
SHA1 53e08d2fb1905c5270ff9cc4e72d3da40f085785
SHA512 f524bc5795d11f45a71980e75830fa2e422892318f1d863eeca5ba1d03936dc230fe1adcde15d07b64ebd9516790c98a8b281c80d4c9a585a95675ab2d1f1b06
SSDEEP 192:TS0tKg9E05Tou9NpPS+X2prDLxrUaBuzeXT:ZXE05D9T4rHxoeD
TLSH
T1D1D1B0DB2CA4AC66DE17BA23135841028939723C15937B00DDD1EFCD04F6EAF5F524A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b-nextstep.png

Path C:\Program Files (x86)\Flawless Widescreen\data\b-nextstep.png
Size 5KB
SHA256 47ac2fd359079d991683542cf245a234939ccd4aec092cb01b0817bf3d2572f3
MD5 4ecead3ae0381f354c95d10834d328a9
SHA1 02b908a4ae826651d2ccad2e2d01d3ee68b7b57f
SHA512 d000eb115b66243b581e622bbdcbadd51920929205f0f22c898e3a69c3f6531d19d97036c3e807bd36c882bef26e8fc31237abc830c1ae2aaf653e05ba6dcd1c
SSDEEP 96:TZ/I09Da01l+gmkyTt6Hk8nT+edKOFfW9KaaLlu6/toG5/H8eb:TS0tKg9E05T+eRFfW9jU7/aGxHD
TLSH
T109B17E9E8BB06B793899F2401DCC0302A325537DE69B632990E0E4DB15FFD7B1725271
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b-prevstep.png

Path C:\Program Files (x86)\Flawless Widescreen\data\b-prevstep.png
Size 5KB
SHA256 434733a07739cfdd9e42c7816e2c02526cae41b76c000b8d7397453ba937fb73
MD5 9093661993effc7aa915d2bebe4c5166
SHA1 d740e2069c8f6bc0453dace9bf4923bc31e7587e
SHA512 d914037c7e0ac84befeacc22dd79f6f86ff9d928c182920fcef3a9253169f4efd3c3c9171c9b60a9abe8f0879df38a755af1f58fdc04aad5047e44547015fa5f
SSDEEP 96:TZ/I09Da01l+gmkyTt6Hk8nTPGPVyD7nUFKaJdPDCponkmt4UR:TS0tKg9E05TPGPV9FrJVeCkmtL
TLSH
T1CDB19EBFD4E1C5C9A89DB4930DCAD043577A226E98233F6CE4A117DD61C4C1BBE61432
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

largeicon_default.png

Path C:\Program Files (x86)\Flawless Widescreen\data\largeicon_default.png
Size 5KB
SHA256 05814578ae3418e62f152a9db65be47bcea0d1e44ceb8c45fe173370bd58b437
MD5 a6aeffc6ee2794190631741d29d49b0d
SHA1 fa04c2deff86ad377c9785063d5da08102d7d948
SHA512 41802e4796b4e56abb4ffbd6f48e1c54cf59632a82e1a3606a2a381146a455673c3336dae33602fb5bcf0caa7261ec3d8dc376213a92a8beacd1de90cb904f60
SSDEEP 96:SSDZ/I09Da01l+gmkyTt6Hk8nTOm5ipVTlbkd11+rRGY95jIY/o0uCKtDKzfIj:SSDS0tKg9E05TO8iH8GnX8Co9BKzwj
TLSH
T105C19E9B9A6626A5FDDBBD801F9E4343F27221ADEC8202F062CA35FD5030E45977107A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fasm_wrapper.exe

Path C:\Program Files (x86)\Flawless Widescreen\fasm_wrapper.exe
Size 15KB
SHA256 10f1713710008a6dd9d25a0c849707ec486ea6d7b11f9c2c13da2e3d3cdf085b
MD5 4df1e74dc3dbd190f0aac5908f52843f
SHA1 4eb72c6a773e82dd2d86945296b95560f8df61f3
SHA512 02e08d389e9aae0161404476ade0d78ac876a61586724c6b677518a5a8d0a68a511afe157520695eeb95a92c54950cf81779da9dd973bb3f9dc5bc6e21951a57
SSDEEP 384:36HN/sH2wulVoSPDWrrQw8P66wnZ93h6gNIlQHkON/VIenX:g/sH2wOKfgw33h6gqKEONtIg
TLSH
T1376239076A11C522C7DA23B6417ABE1A523BA5640FC17BC3B7C49AD60FB41E2DC33249
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcurl.dll

Path C:\Program Files (x86)\Flawless Widescreen\libcurl.dll
Size 319KB
SHA256 4afe7b6056b07417bb5e3825767e22df3d970fec894be9c30b23ed5a03ca0618
MD5 12afca5031d4d64b9c56ed78a80b308c
SHA1 c9e0c47dfd3d80de4c4b7a0ae8f49e579cc7806d
SHA512 a72ade082b6f4902354698d6be4dfca2a5b7845907b270be153e911aa19ce8c5ee7d0c74361d02c3cba05ebeab8b76e0c9e129e711c7a6a29d16faf9bcdee37a
SSDEEP 6144:rbVc37rgIunih0zJY3X9D7TDXsoHlUweLNZMrXNTcts53ruD7yqg7ZUAjcABU+:nV7bnywCnR/rBHW1Ur9Tci5buD7bgFVB
TLSH
T144646C5673B014AAE5A7C03DC6538307E7B270641350A3DB5660CB6A3F23BE6B97BB50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BeaEngine.txt

Path C:\Program Files (x86)\Flawless Widescreen\licences\BeaEngine.txt
Size 724B
SHA256 267c37f7bdb1a263b6b97a263797096bb49123027674a9b8aef37a4a1553db75
MD5 f950f6a0ad7d99036ec02f34635930c0
SHA1 618d00632c3f39b85830a7700374e61830def53e
SHA512 287c467cb6e5b6c94a6821ca03644db3607aca665e625639de7d4f1ece6af0d0f9ceac7a13315b1b5e68a07c1ee1a60cd03436867e088464b47b77614925a0ef
TLSH
T13F01D07FDB53626E06D643A6960B0DEFEF1B85DC268B1457049DB0883372B4851AE644
MD5 SHA1 SHA512 TLSH

Submit Download

FASM.txt

Path C:\Program Files (x86)\Flawless Widescreen\licences\FASM.txt
Size 1KB
SHA256 f091a4db5bc7d2e0bca7d72ca7fc4ad8bba697cc8f12a9064f4465d97df50286
MD5 81105deded1d98616b53800a8303ce85
SHA1 67dde6f38c9abfa2d37dd9c861c629994dba250d
SHA512 0c118ed1f3d3bcb135793c9a61d1e3513ca3e244b6c62ba5797b5d192448ac0e35c2b126b103f34354a537a245ed54cd1faa7c7d4f716325aa0d59c4615bc7fe
TLSH
T10331646756440B631AE20A847992A6C4B04F903D3F1B5D04287FA38D673B02DD6B7966
MD5 SHA1 SHA512 TLSH

Submit Download

FlawlessWidescreen.txt

Path C:\Program Files (x86)\Flawless Widescreen\licences\FlawlessWidescreen.txt
Size 902B
SHA256 e349c0b4e2c27a8fdf4c2e5036e32af102b41dfbdc7633bd37a8f05aa845f6d1
MD5 7ee4d7cb00ea309b99738c35940c2bc0
SHA1 64aba0aa3228e046a4f447c95e4181edf635399a
SHA512 4eea4a108707d0f64f38e8769df60c145b02737a9b35d5e8b8b02e0b38d56e303c799c4bd212d173a278cf4609da3ae17d2f09df8b23ef82e0273a7a02319507
TLSH
T10911448A72911B951411A791BCE1E88873AEF1177C073A412475F208833745DF8FA418
MD5 SHA1 SHA512 TLSH

Submit Download

Summary.txt

Path C:\Program Files (x86)\Flawless Widescreen\licences\Summary.txt
Size 5KB
SHA256 35270096a9b33693e62bff3631b1fbe009039a1332e712c1cab290bd67d014e3
MD5 247f67fc29d252e46521597855ca5570
SHA1 4b537f2a3b8a6d723b09a733167b1a7c7837bfce
SHA512 c72d9a26ca926ceba79596f2983c6723693b5194d411c5fcf75dc08a6d39767ab3cc222e58424f7f39342bf3ca703fda57f2ff2bb6fa8600d7628c28c008b8e6
SSDEEP 96:aoEQHvgOiF0m8D0TOvTCF9o8FUd4mJM/rYJ4n3J3z9ITLiCkEQHvgjXrFj5:eQHvgJ8Dp7w9zBmUrs4n3J3BKLi0QHvU
TLSH
T1FAC1C66FBE42576616E1C741BC92A9C8F35FA02E3A1B1901343AF24C633746DE5FE518
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcurl.txt

Path C:\Program Files (x86)\Flawless Widescreen\licences\libcurl.txt
Size 1KB
SHA256 949128ea4e8f7fc7644b6cd9b48c23df68547014f36f5c8502eb12a4a07bc741
MD5 6579b11ecc13510df879c11d9c47f8e6
SHA1 43770f99acc799aab9cb7b212050726c0a368baf
SHA512 904d93e45d8dd5fc9c25524f59a6ddb89b1574ba32e566602057b7b511a26ce2b71143d4453b12650139718da399e138a57e4f780e915ffaae36052c1ddd9cb3
TLSH
T1B211829DF2490F7518706229ACE5E4D8F38DB026BD2B3B84386AF245536346CE4F8858
MD5 SHA1 SHA512 TLSH

Submit Download

fws_setup_x64.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-U1QPS.tmp\fws_setup_x64.tmp
Size 695KB
SHA256 8f85358a95da42a2d937df1a4546b6aa6b4c4f13980a77ee3b7385ba94618e7c
MD5 2a8c3ac35cdee582a1d510be1631f43e
SHA1 22af52f14eec44faa42a98b2df8b2e50f288c977
SHA512 4b4c0a5772f982ee894f5eb1d36ba75b3bf3b5233bb02ef43193b8be8b81239afb2823ca982b245da9e392f8992c759f15f8fbc1b5ebdecfc25e91a171c7a567
SSDEEP 12288:JTPcYn5c/rPx37/zHBA6a5UeYpChr1CERdSrNdyR6D3o1aABbmx9i+:ZPcYn5c/rPx37/zHBA6pFpCZ1CEuD3oU
TLSH
T17BE47C32F2A0C437D4B31E789D5B82E55936BE103E38A59736E81F0C5F796817A272D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2472-111-0x0000000000400000-0x00000000004BD000-memory.dmp

Download

memory/2472-6-0x0000000000650000-0x0000000000651000-memory.dmp

Download

memory/2472-121-0x0000000000400000-0x00000000004BD000-memory.dmp

Download

memory/2472-112-0x0000000000650000-0x0000000000651000-memory.dmp

Download

memory/2488-122-0x0000000000400000-0x0000000000415000-memory.dmp

Download

memory/2488-110-0x0000000000400000-0x0000000000415000-memory.dmp

Download

memory/2488-0-0x0000000000400000-0x0000000000415000-memory.dmp

Download