8b86972a9555901a53b6f79d174a77f7aabf4766923eca994667eec1a4546a9c

Analysis

user interaction
yes
max time kernel
1799s
max time network
1798s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/11/2026, 04:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
madium.decrypted.dll
Size 45.6MB
Sample261102-e9sywszyhz
SHA256 8b86972a9555901a53b6f79d174a77f7aabf4766923eca994667eec1a4546a9c
MD5 421f42d124390b98ffb47639cfb6413f
SHA1 9f53dace472fb70b8faef73e9f2026535675e083
SHA512 719231032867dde7f57354c7420327621703e5fcb458c5b16ab92e634c6fd79cc2ed966f684295bf102346433cd852444be8ab3a123673176c2df2e22f9bf161
SSDEEP 786432:3LvYvrBRVEcQhj6kF5KgZmGiwZXnPHCAvYaPL7H:7wvfQdtMYmG/ZXP7vYi
TLSH
T166A7AEF721D1A1EEC466C13A8713F93FDAAFB0352721D5D3615892564E23CC63A2AF06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution spyware stealer

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
25	4820	chrome.exe

Executes dropped EXE 19 IoCs

pid	Process
5532	FNLB-Setup.exe
2076	FNLB-Setup-nsis.exe
4116	FNLB.exe
4624	FNLB.exe
2220	FNLB.exe
4736	FNLB.exe
1848	FNLB.exe
1056	FNLB.exe
4924	FNLB.exe
5516	FNLB.exe
2544	FNLB.exe
5624	FNLB.exe
5760	FNLB.exe
3008	FNLB.exe
3464	FNLB.exe
824	FNLB.exe
448	FNLB.exe
5860	FNLB.exe
5904	FNLB.exe

Loads dropped DLL 25 IoCs

pid	Process
2076	FNLB-Setup-nsis.exe
2076	FNLB-Setup-nsis.exe
2076	FNLB-Setup-nsis.exe
2076	FNLB-Setup-nsis.exe
2076	FNLB-Setup-nsis.exe
2076	FNLB-Setup-nsis.exe
2076	FNLB-Setup-nsis.exe
2076	FNLB-Setup-nsis.exe
4624	FNLB.exe
4624	FNLB.exe
4624	FNLB.exe
4624	FNLB.exe
4736	FNLB.exe
5624	FNLB.exe
5624	FNLB.exe
5624	FNLB.exe
5624	FNLB.exe
3008	FNLB.exe
3464	FNLB.exe
824	FNLB.exe
5904	FNLB.exe
5904	FNLB.exe
5904	FNLB.exe
5904	FNLB.exe
5904	FNLB.exe

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
5904	FNLB.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Run Powershell to get system information.

execution

PowerShell

T1059.001

pid	Process
3348	powershell.exe
4412	powershell.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
3888	powershell.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\FNLB-Setup.exe:Zone.Identifier	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 16 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	FNLB-Setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	FNLB-Setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	FNLB.exe

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FNLB-Setup-nsis.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4820	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	FNLB.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	FNLB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	FNLB.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	FNLB.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	FNLB.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	FNLB.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	FNLB.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	FNLB.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	FNLB.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	FNLB.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies registry class 17 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb	FNLB.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\URL Protocol	FNLB.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb	FNLB.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\URL Protocol	FNLB.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\ = "URL:fnlb"	FNLB.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\shell\open\command	FNLB.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\shell\open	FNLB.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\ = "URL:fnlb"	FNLB.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb	FNLB.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\ = "URL:fnlb"	FNLB.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\fnlb\\FNLB.exe\" \"%1\""	FNLB.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\shell\open\command	FNLB.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\shell\open\command	FNLB.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\fnlb\\FNLB.exe\" \"%1\""	FNLB.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\shell	FNLB.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\URL Protocol	FNLB.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\fnlb\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\fnlb\\FNLB.exe\" \"%1\""	FNLB.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\FNLB-Setup.exe:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 24 IoCs

pid	Process
432	chrome.exe
432	chrome.exe
3888	powershell.exe
3888	powershell.exe
4412	powershell.exe
4412	powershell.exe
2076	FNLB-Setup-nsis.exe
2076	FNLB-Setup-nsis.exe
3348	powershell.exe
3348	powershell.exe
5904	FNLB.exe
5904	FNLB.exe
1348	LocalBridge.exe
1348	LocalBridge.exe
1348	LocalBridge.exe
1348	LocalBridge.exe
1348	LocalBridge.exe
1348	LocalBridge.exe
2452	LocalBridge.exe
2452	LocalBridge.exe
2452	LocalBridge.exe
2452	LocalBridge.exe
2452	LocalBridge.exe
2452	LocalBridge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
680	Process not Found
680	Process not Found
680	Process not Found
680	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeShutdownPrivilege	432	chrome.exe
Token: SeCreatePagefilePrivilege	432	chrome.exe
Token: SeDebugPrivilege	3888	powershell.exe
Token: SeDebugPrivilege	4412	powershell.exe
Token: SeDebugPrivilege	3348	powershell.exe
Token: SeIncreaseQuotaPrivilege	3348	powershell.exe

Suspicious use of FindShellTrayWindow 57 IoCs

pid	Process
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe

Suspicious use of SendNotifyMessage 35 IoCs

pid	Process
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
432	chrome.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
4116	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe
2544	FNLB.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 432 wrote to memory of 3432	432	chrome.exe	81
PID 432 wrote to memory of 5056	432	chrome.exe	82
PID 432 wrote to memory of 5056	432	chrome.exe	82
PID 432 wrote to memory of 4820	432	chrome.exe	83
PID 432 wrote to memory of 1744	432	chrome.exe	84
PID 432 wrote to memory of 1744	432	chrome.exe	84
PID 432 wrote to memory of 3288	432	chrome.exe	85
PID 432 wrote to memory of 3808	432	chrome.exe	86
PID 432 wrote to memory of 3288	432	chrome.exe	85
PID 432 wrote to memory of 3808	432	chrome.exe	86
PID 432 wrote to memory of 3816	432	chrome.exe	89
PID 432 wrote to memory of 3816	432	chrome.exe	89
PID 432 wrote to memory of 2308	432	chrome.exe	90
PID 432 wrote to memory of 2308	432	chrome.exe	90
PID 432 wrote to memory of 2436	432	chrome.exe	91
PID 432 wrote to memory of 2428	432	chrome.exe	93
PID 432 wrote to memory of 2428	432	chrome.exe	93
PID 432 wrote to memory of 5336	432	chrome.exe	94
PID 432 wrote to memory of 5336	432	chrome.exe	94
PID 432 wrote to memory of 220	432	chrome.exe	95
PID 432 wrote to memory of 228	432	chrome.exe	96
PID 432 wrote to memory of 232	432	chrome.exe	97
PID 432 wrote to memory of 5760	432	chrome.exe	98
PID 432 wrote to memory of 5532	432	chrome.exe	99
PID 5532 wrote to memory of 2076	5532	FNLB-Setup.exe	100
PID 2076 wrote to memory of 3888	2076	FNLB-Setup-nsis.exe	101
PID 2076 wrote to memory of 4412	2076	FNLB-Setup-nsis.exe	103
PID 2076 wrote to memory of 3348	2076	FNLB-Setup-nsis.exe	105
PID 4116 wrote to memory of 4624	4116	FNLB.exe	109
PID 4116 wrote to memory of 2220	4116	FNLB.exe	110
PID 4116 wrote to memory of 4736	4116	FNLB.exe	111
PID 5532 wrote to memory of 1848	5532	FNLB-Setup.exe	112
PID 1848 wrote to memory of 4924	1848	FNLB.exe	113
PID 1848 wrote to memory of 1056	1848	FNLB.exe	114
PID 1848 wrote to memory of 5516	1848	FNLB.exe	115
PID 2544 wrote to memory of 5624	2544	FNLB.exe	117
PID 2544 wrote to memory of 5760	2544	FNLB.exe	118
PID 2544 wrote to memory of 3008	2544	FNLB.exe	119
PID 2544 wrote to memory of 3464	2544	FNLB.exe	120
PID 2544 wrote to memory of 824	2544	FNLB.exe	121
PID 2544 wrote to memory of 448	2544	FNLB.exe	122
PID 2544 wrote to memory of 5860	2544	FNLB.exe	123
PID 2544 wrote to memory of 5904	2544	FNLB.exe	124

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\madium.decrypted.dll,#1
1⤵
PID:5096

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f53dc728,0x7ff8f53dc734,0x7ff8f53dc740
  2⤵
  PID:3432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1624,i,15961416495484025097,8574939025813955457,262144 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1460,i,17658610398098411550,734860433267432687,524288 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2228 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,4744768126698566009,17088013589452634915,524288 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2520 /prefetch:13
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,14871619130190147124,427414502346390766,2097152 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3252,i,4858188360961527610,9249673216567977108,2097152 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4480,i,12874870537848611114,14845147759647113653,2097152 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4444 /prefetch:9
  2⤵
  PID:3816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4764,i,17330317517770443365,6863861389078460807,2097152 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,5025590295097473932,2542344385234605138,524288 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5560 /prefetch:14
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5816,i,2108998935643649912,1880897350467655203,2097152 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4772,i,11337383585912871093,13644656411803444446,2097152 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3304,i,6283868511718379888,10803938904922114279,524288 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4708 /prefetch:14
  2⤵
  PID:220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4872,i,1927924019539174205,8512472726234210187,524288 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4800 /prefetch:14
  2⤵
  PID:228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4860,i,10390287580498440847,4389662290151756015,524288 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4672 /prefetch:14
  2⤵
  PID:232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3244,i,12684633521120788928,1790906796203653701,524288 --field-trial-handle=1960,i,14295392619428182460,7062231542163064987,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:5760
- C:\Users\Admin\Downloads\FNLB-Setup.exe
  "C:\Users\Admin\Downloads\FNLB-Setup.exe"
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious use of WriteProcessMemory
  PID:5532
- - C:\Users\Admin\AppData\Local\Temp\FNLB-Setup-nsis.exe
    C:\Users\Admin\AppData\Local\Temp\FNLB-Setup-nsis.exe /S --force-run
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2076
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      4⤵
      Hide Artifacts: Ignore Process Interrupts
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:3888
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      4⤵
      Command and Scripting Interpreter: PowerShell
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:4412
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\fnlb', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      4⤵
      Command and Scripting Interpreter: PowerShell
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:3348
- - C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
    C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
    3⤵
    - Executes dropped EXE
    - Reads the TCP/IP host and domain name from the registry
    - Checks processor information in registry
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:1848
  - - C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
      "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=2140,i,5317533983556487823,16352182782628324799,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2144,i,2003873824751867244,5829882242452963050,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2136 /prefetch:2
      4⤵
      Executes dropped EXE
      PID:4924
  - - C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
      "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --field-trial-handle=2140,i,5317533983556487823,16352182782628324799,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2144,i,2003873824751867244,5829882242452963050,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=936 /prefetch:11
      4⤵
      Executes dropped EXE
      PID:1056
  - - C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
      "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --app-path="C:\Users\Admin\AppData\Local\Programs\fnlb\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --launch-time-ticks=608349851 --field-trial-handle=2140,i,5317533983556487823,16352182782628324799,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2144,i,2003873824751867244,5829882242452963050,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=1368 /prefetch:1
      4⤵
      Executes dropped EXE
      PID:5516

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1420

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:484

C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
"C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe"
1⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1832,i,3871288253721929324,16463039764185240339,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,8894196420033398078,12071608204735806897,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1828 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4624
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --field-trial-handle=1832,i,3871288253721929324,16463039764185240339,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,8894196420033398078,12071608204735806897,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:11
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  PID:2220
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --app-path="C:\Users\Admin\AppData\Local\Programs\fnlb\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --launch-time-ticks=603407319 --field-trial-handle=1832,i,3871288253721929324,16463039764185240339,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,8894196420033398078,12071608204735806897,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2332 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4736

C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
"C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe"
1⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2544
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1824,i,15634453943590832174,10937818312891684185,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,2080938347137485678,6843631237911506914,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1844 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5624
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --field-trial-handle=1824,i,15634453943590832174,10937818312891684185,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,2080938347137485678,6843631237911506914,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2060 /prefetch:11
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  PID:5760
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --app-path="C:\Users\Admin\AppData\Local\Programs\fnlb\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1824,i,15634453943590832174,10937818312891684185,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,2080938347137485678,6843631237911506914,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2284 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3008
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --app-user-model-id=electron.app.FNLB --app-path="C:\Users\Admin\AppData\Local\Programs\fnlb\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1824,i,15634453943590832174,10937818312891684185,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,2080938347137485678,6843631237911506914,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3464
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --app-user-model-id=electron.app.FNLB --app-path="C:\Users\Admin\AppData\Local\Programs\fnlb\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=1824,i,15634453943590832174,10937818312891684185,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,2080938347137485678,6843631237911506914,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2576 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:824
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe C:\Users\Admin\AppData\Roaming\fnlb\fnlb\.fnlb\zenith.mjs
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  PID:448
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe C:\Users\Admin\AppData\Roaming\fnlb\fnlb\.fnlb\zenith.mjs
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  PID:5860
- C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe
  "C:\Users\Admin\AppData\Local\Programs\fnlb\FNLB.exe" --type=gpu-process --disable-gpu-sandbox --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\fnlb" --gpu-preferences=WAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAAAAAAAAAAAADgAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAADAAAAAEAAAAAAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=d3d11-warp-webgl --field-trial-handle=1824,i,15634453943590832174,10937818312891684185,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,2080938347137485678,6843631237911506914,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4008 /prefetch:10
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Network Service Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:5904

C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe
"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe" /InvokerPRAID: Microsoft.MicrosoftOfficeHub notifications
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1348

C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe
"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe" /InvokerPRAID: Microsoft.MicrosoftOfficeHub notifications
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

90ad91d7-1de7-4827-a8f1-a4daa2980058.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\90ad91d7-1de7-4827-a8f1-a4daa2980058.tmp
Size 269KB
SHA256 f606ee165e9adfd034867eb2d7eba08cfdae14801dc3f4a3932bd62b5426ef14
MD5 0004bf704ce79be196de4a865b274145
SHA1 12c6c22a18d091668bd3365a8666f1c749d5abd3
SHA512 8449e235c8812d103092cc56a91e6bc048f436350b4343fb900de03491c0b2afd8cb404f749e1b253db92c65dd4db0781688d20499865ba40d7ab81d909e9f88
SSDEEP 6144:d5yQcfSxZLpN1YNTRJsX0qZcpYPgv3pt4fLJ0L6nGJxi3bzqapJjj:dIfqrpnIlJsXzhQ3pWXUx8zvpJX
TLSH
T1794412F1D1E1AC2ECB77DB92E0777ED08EB169C1888C9F1009F24D991B9A9644707E93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

990486af-b0cf-4a83-846a-59da6b3ecd85.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\990486af-b0cf-4a83-846a-59da6b3ecd85.tmp
Size 130KB
SHA256 36450aa269adbf2a78d29a24e4120a3ebedc2c1610a7f1db53150536a6402c55
MD5 fcf70729819b6ea5b82ec67cccf7cc27
SHA1 05bfd15331331bea32503f105775f2855d239276
SHA512 731c9cefb79c0892dadeb69cb00722b0c1c772e004e42d05cef0a0a45c83daad507adcc59b6c7faaaf971bff7da8b2df9164c5df3a6d3fa7eb7a4421f6ed1ba6
SSDEEP 3072:wH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjk:Yt4fLJ0L6nGJxi3bzqapJjk
TLSH
T1E5D302F0D6A06C7ACBF7EE4145756E948F71D5C289CDBE2009F9881816CEA354A13EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 2c1ac791de8cf913a455b573604aac34d987b5e01256ffc1dcd0af3912a9e72b
MD5 1f8cfbb98ae8201ef02c280fd47b5469
SHA1 c339dc53137b24bfd48445808e9d5e26ed40a09b
SHA512 c7b0a644f28c837ce80be7a9371d048eb4702d2364ecb60b024946f809be6c2c67429fa636812527b4a4cadb62882074ce40c0ebe07513b646a2240aafefa8f4
MD5 SHA1 SHA512

Submit Download

01e49b6c-5911-4b65-826d-3d85bbb8e72b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\01e49b6c-5911-4b65-826d-3d85bbb8e72b.tmp
Size 12KB
SHA256 0322e8b05e22a59bdd3719ae8ef31aef7450a161ee8e6af9832e842a37990868
MD5 e321bd3d73c176518d25f4dd7e20af74
SHA1 b87fbebd1cf6c3742877316727168470d15f93a5
SHA512 281e57c0f6f6e6499005a73ce1d229a2551c56775c003552b7c105b091888c4c620de38a3321d3a0a57fb32aa745ef428f74fd414cf16a3c1dea3940da466069
SSDEEP 192:YR82UR0jrc5C1v7bpAPRp2Xi19/Hsb+WNnAILmfafe2SD2Leh7aVrVyIsnAUgtaJ:YR82/nxFPUX+mtwTPe72Oa38
TLSH
T15342D52EED247A7B6CDBD229F9657717D7F9102160D02E84EAFC892C14E76CC221B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c311b85-2255-4753-9fcf-0b32679266cd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7c311b85-2255-4753-9fcf-0b32679266cd.tmp
Size 414B
SHA256 f7b3562979a393a1fe414a66b104ee7ee225887500e5421133fc8223d819fee4
MD5 4bcb7156e0bb55e042d0f5d97b2cd121
SHA1 67c27c7bd381a7df075c5b7e24691a1e6caf20a0
SHA512 42206fa4221fabdf22908fa4ba6f51b8014dc001be68a703aab85f2acdc6c8c84fe5bd0ddabf6c7a1efcc69e071d3ff9f722191c9457665d0262f477a474b4d9
TLSH
T192E02B6AC821FC3719FA071C5051574AE65013172760895F7B3D911D8FB06364AD986C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 912B
SHA256 b4ee2c8f645dcfa7e952b7fd703beb5098120e8ee720c50c5438663d2d3785da
MD5 038bdc5d7c2ce82077c7b8a915e19ecb
SHA1 c5205dcc63df3ebb7f5faab94734077c5245cb95
SHA512 d1f751291a9eb6bfeef8ebf02b24fe389bf1ec32ae5414fa768cdebcf3325e516b1a933f0775cbc9daca3f379f3732803678b63e90a3c4b10107b424738373f5
TLSH
T13F11B468ACE07179DBB8C73A19FB1E26307436C88BE31E1302E103F3690238916922B0
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 20b0f63c037e159e999b3560626893f8178c0afa56f383463d49a860b1005f68
MD5 b6db8d057f166e417124d9d5817d8e2c
SHA1 1326a6e8ba946da2bbca5b11043b630f1310afc5
SHA512 4bf5a21514cd49dcba270c29b2f1fbd13b7348d12ed41ba44e445af7c09cbc574ac5d06f4e60717731a09f48fac78910b90a9582a15447e46c8e07981b84594b
SSDEEP 3:MsEllllkEthXllkl2zEklDYul:/M/xT02znDtl
TLSH
T13A4404047FC00C4DC51011304151C3700370D4110511F753345504335CCD5400C40010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3955c87c-b9ac-4d25-999a-2cfce750e48c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3955c87c-b9ac-4d25-999a-2cfce750e48c.tmp
Size 1KB
SHA256 ce11158dbe66a73cf5fa733e5c205f4cdf88a3f8e8e896bd430a94e483261264
MD5 70e1057580c934ee53e6a04db5ca0096
SHA1 a4ab3f3e7a2eeae1677a3616d0938400559190cf
SHA512 e5b1e0406a3dafadb05b0b1e6a48aaf41af5f3c9bcf3da40d12bda4b22794bf80b4e4d6b741f99b063fd281df3b5cc29d67d1fbe99dd37424cec1d4517a1ccb0
TLSH
T1FC2128A3CA6DB877507D84B70D85BC192DB5B8744247A0A9DE7A822CB0895EF5B93023
MD5 SHA1 SHA512 TLSH

Submit Download

3e207a27-5ff5-4a71-bfaf-badee45c3bb1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3e207a27-5ff5-4a71-bfaf-badee45c3bb1.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b973c3d9-8a7b-4903-b4fa-38309abe8081.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\b973c3d9-8a7b-4903-b4fa-38309abe8081.tmp
Size 3KB
SHA256 7a811449e74f0c184c6de743eeadee6d931d5987214839b96ac8fc9bbdb2a579
MD5 ee6fe0e59ebb42938a9ac9e5981bb88b
SHA1 e1c100186e610a28a1f8c2925f316dd2a2d4b761
SHA512 5ca8b224f59885637ed2feef22c4985e85d400ba648269a4823585df6d72952f45e80666799d7f6a5aba9efed7c009c4abb33b2f881bf288dadb82ecf08cd614
TLSH
T13B81BAF7C3E4866D8901D6F4EB116E2FDE2D0A14522C3C56C9E8AF0B93E2871E25165E
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 f121eae72c20ca117b7e2f99ef121d13fdfec7e612a8de471eb4c197bdc3c8f2
MD5 1a9d7e26a0e4470d796f065fe4aa24b2
SHA1 4cfa28ba8d00c3ca7d3f4b89c4f40cf7fc38852a
SHA512 fb8debfb2e0a6d9133ca9593a8b2af1d7351f137f2547990ba15ffa0bcba74bcf23805f923fc24cc2404dee537df90ae9eb873b8e90c1b690e32675efce2dfae
TLSH
T106B01216C1816302C00203B2355890543260CF39D51213C545E00D11C8362704027108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 b88b7cca1664761e96b61702ea4d6ae84a5145e9c8dcb44effd491c984df6204
MD5 8ce703bb461f01969c536dd649947f0f
SHA1 a460220ac6783a49466e38744a76f5ce98c38dc3
SHA512 2d6813d5a930ee1afd4e6de9b33f1a2940cecaf174b6daafb46b93ae5a1a1ff93a34afb8f12be4ae581735f01b5d27eeb95016977dbaf94ada5d383c6bc6dfce
TLSH
T170B02280C0022223C08203B228C0A0E83020EF2CCB03030282E0AB22CC20A308A202A0
MD5 SHA1 SHA512 TLSH

Submit Download

a784c3ec-9feb-480c-b6f4-c5a7ce3d0d0f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a784c3ec-9feb-480c-b6f4-c5a7ce3d0d0f.tmp
Size 17KB
SHA256 de13521758ef1bfcb2d2450b3cf0a7a99cd0970c06b92340bd4289551bfc2ad6
MD5 b0928f3b5aacd381a50cb79484995d2d
SHA1 ba2f982a9d1dd6c557ee7a37adadea8daab8b737
SHA512 af3e8c9148f12d0e4fb4988464bd2a8f2df2e47ea7c5f1cab56fe717533c7f2da51919aeb6a09e6a8b95119e5735947b80bbd19844feb7e8ffa58cbd1ddf81e1
SSDEEP 384:Q2j8z7KxkXqKf/pUZNCgVLH2HfgslO07pLuLceSe/XOD8P+ErU3fKHGFwjj9B:Q28z7KxkXqKf/pUZNCgVLH2HfgsI07p+
TLSH
T1E47209676C4C997B0F98CACCCC267A4FADB5024B65E9886443FA5C2903D4ACF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bb290288-5529-401a-81d6-db27202d3cc3.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\bb290288-5529-401a-81d6-db27202d3cc3.tmp
Size 12KB
SHA256 2c8631c8dfbeaadb3c4d837411d90d0334f2e2885d1d287152ee6fd22cfc22c4
MD5 c6fdaccabd6b36ba00c29a6c5c7f49a1
SHA1 6071c14f7608c5af546a70c5b56fc4e8c3368bf6
SHA512 2144bc1385ff59114f80490ce964c46cc41d094e805038107a873f119e26663bb3942f61a988f361453b1dd61d874024708c517f54993ad70a2499fa56cf0c45
SSDEEP 192:YR8mUR0jrc5C1v7bpAPRp2Xi19/Hsb+WNnAILWK2JD2Leh7aVrVyIsnAUgtaJ:YR8m/nxFPUX+mtwTf2p2Oa38
TLSH
T12D42C52EED2479BB6CDBD229FA657757D7F9102160D02E84EAFC892C14E76CC221B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c1b22e4e-f060-4a11-b10e-d5a66699d5f3.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c1b22e4e-f060-4a11-b10e-d5a66699d5f3.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

de4c34f7-5146-4a9d-8ea1-402287a13445.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\de4c34f7-5146-4a9d-8ea1-402287a13445.tmp
Size 13KB
SHA256 d4e55b6e00765ae02c5291ea22ffbc6dfdab0ef5d97881733d29ddc063fd2bd2
MD5 19fbd41865b8753360d2d19807c8cb30
SHA1 37161760240ef089e7a9a78ac68e86c4ceffeec1
SHA512 b2ba93cbdbad8945c5bfad83104d7a515b0a697e4e3fb294e380e5e6aa295ac6a1e490adaedbc1df38867bb3194f68a1dd2445ef4c9818f8b4745110d7812eca
SSDEEP 192:YR82UR0jrc5CUv7bpAPRp2Xi19/Hsb+WNrfLAILmfafevUD2Leh7aV8PyIsnAUge:YR82/nxQPUX+mtw7fPe22Oa0e
TLSH
T1AF52E62EE92479BB6CDBD229F9557B17D7F9102164D02E84EAFC8A2C11E76CC221B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe1f9f05-9dc3-4134-8cb3-a800a5074bbf.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\fe1f9f05-9dc3-4134-8cb3-a800a5074bbf.tmp
Size 269KB
SHA256 2236a27a8145060d5152afc92da9ee73caac043be7c0fecd1e4b0b8fa7662d84
MD5 9f585936fbfcddd46f58779686b23abc
SHA1 d2e535f5eb6c1257af9749aee6284a85290ddf94
SHA512 6f9f387442a2b09b544531f9f01b926d0c00837ae35ab621f837b50f075358e8c2aecc1b60acbaf60661643a9f658955d5793fc9e01b3364b0b3ce9514a90ea0
SSDEEP 6144:7AyQcfSxZLpN1YNTRJsX0qZcpYPgv3pt4fLJ0L6nGJxi3bzqapJjj:7zfqrpnIlJsXzhQ3pWXUx8zvpJX
TLSH
T1DC4412F1D1E1AC2ECB77DB92E0777ED08EB169C1888C9F1009F24D991B9A9644707E93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log
Size 2KB
SHA256 56b3adbf18e46f82c8075f712785ea8e59e3125a90ce26b8b0d20687401340d6
MD5 9957e974f5f56a44037770c8a45dfb1e
SHA1 799090afbb1a0f8ce52605687d1013278a68516d
SHA512 3967c71752cebb57254c981d715077ebd988ca8b9cab6d81aa3207770139958cbd95991d2aa0c690a7aa5908f37cba8053f388896014bbe4e47b42436cc915a6
TLSH
T1A64149303221B5D84D436F1205286AC9A2EF478AAFAC9F5CB569231DCD2A44BD7221F3
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 ba900944f499cd7b97ac04df22de91d27f2f0bfa3caf79d01f21f44683f00954
MD5 528945b4bc3910e57999d230a8cac70f
SHA1 0b3832f4a4f71c591219bd25171b1642916c2a43
SHA512 cc4ae6e4a9e5341f752fbf4c88c146ba04f33b5b4aa181e9ecbf3a968088994886c1c2db7332b5de4d86a5c4084788c4a32b10c7bbeddbdedff427afb298d4b6
SSDEEP 384:VL3H9XSS1tpChlrFRHH6EyHnnNvjs2Ciu99BxjsXXdlmNx:NFSSn0zJR6EyNvj7CiQ9Bxjsndlmf
TLSH
T1EE72C5AE714F22C3C8992378D10A054FF4F2DECD431A13D9B72E9E3B4A9CA5A517C598
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 5281a7b865f18961c3fc7a01c8fc4da0714385ca716e356f43ddceaea71e66e9
MD5 2b9823be7637459b00800561fd275f31
SHA1 93cc0781fd2da7198ce09dc64bb5ea065b01b08e
SHA512 076d0091204eb8593bf084000b9674d6f5ff91d6a7aa4fefc356d291466713eb0146b6d0d384a92268b9b245d2b0c7abcd38b351a9b876500d2bbf585e2f69b6
SSDEEP 384:9TH6Y1SGAJVYwMBsFRHEME8czNjsauD6PCbFQ8ZXTdUjJMdr+i:VSjb5MSRPE35jO2PgUjedr+i
TLSH
T14072F6AE326F2257C5A163F4D416079FEAE49DCF838886DE67448C7B15CE62580A90F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Programs\fnlb\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Programs\fnlb\LICENSES.chromium.html
Size 19.5MB
SHA256 7b328b8c7463ac9bfc7dc648c751533517c8441a0b5b21047d6c0b2620e60d70
MD5 142cea93256b2b7824b854c62af026e6
SHA1 265c66c606344122b35f20c68086890017a75505
SHA512 82c7f1c6f17ba0af42ad552062db614bca8cbb6c317a456d15c6199f11b031decf2c0816770b0004326830899264a5640796d1333c524979f9dfcf64d7b57fee
SSDEEP 49152:ZehWCrdOOoVo5TYp2xnuCQpc3txsJM+QAFId+wi4WMEAccr:y
TLSH
T16E27B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Programs\fnlb\d3dcompiler_47.dll
Size 4.5MB
SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
MD5 19e527a35241c171d37dc1e6c530053c
SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
TLSH
T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Programs\fnlb\dxcompiler.dll
Size 24.6MB
SHA256 d3d1e235dd33811bc5073cc451510c5ef550ebacce74b4f4cbe1d164e9c84de6
MD5 72415ba4a6b306ff3023ee5cbc684f1f
SHA1 7abb7e1a1391e88fd90a5d66558720531f0cbd68
SHA512 dd04c0aa43f0dfc6638561efaaabd2ae98e5b8993440c7423a9998408ad77ffd3a13b30af978e040c3d85d4d546b8812c9699c276bceb259e5fa2f8509c9cbb2
SSDEEP 393216:utVBbnfisDYebTKnU82a2dAkluY8si98FVR:OnoU82axk2si0R
TLSH
T1EB472A122646D49CC099C879C7678B268A2C30E73FA7B9DFC0F461252B79DBC5B39235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Programs\fnlb\dxil.dll
Size 1.4MB
SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
MD5 c9a7241ce83437d54a82522aa0b54575
SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
TLSH
T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\fnlb\ffmpeg.dll
Size 3.0MB
SHA256 45c9e035d19ad0764100e9e3fbeb552b00d95a4ea20597627f9a91c404e79363
MD5 dae1bb657ba5e1c0c32f4035fa45aa3c
SHA1 d70b61b656fa9cf686aae80baf4841bb51016168
SHA512 bea38aaffd659264c5a9cfe083c30f58712f83d2b95496f705d72fb7637e0300e461066520cfbd249f641bd7601b9dd57bd2d472e916f7f3755a04d0f8f37a4c
SSDEEP 49152:81p5IU7Bpdk9imZDtoAwULMsvpTwDownIxQ2t46aLuXk5vTvhDbc:8lBOimZpoAlxFaLu05vF
TLSH
T13AE5AE02F6D251EDD019C03497AB9213F271780A8F205AEF17E05A253F66FE86D7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Programs\fnlb\icudtl.dat
Size 10.4MB
SHA256 9f48c7f9c7c94d516a14870707e910ab94d75ae640ff6842c4af53276cd26ebe
MD5 c9d17441b2314fe514cd8cb951577c1c
SHA1 15cae4dee805f3e04171e00781da13fe40036439
SHA512 836d4f4fa591ee059dbfb943c2f13ded58a0f5048b5505214ec7105d0963106e0078aa262090d0dac9cca80995c7961a900ffa7a2af8ff315aabad1313bd37a4
SSDEEP 98304:1/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndPj89j:1/cBhORok2HiXUxO/RJk3IWhlYntjdOj
TLSH
T1A9B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\af.pak
Size 621KB
SHA256 3017b141bd16e24190d810f0748612f0fd4352ca8553002b9a63a7f77f7154f8
MD5 cd886deabac5d290bcfe505aec6d2936
SHA1 33b05211957f11d5d5bb563258b585c30ecd8870
SHA512 b1c79724837e2b52e5015dcb9c0b93472dca52e1c392c5b6bec3f554d3b77f74b1a0d118ea18ddf6abc8dfa175b8717a1a6c7344d479c7246bb1783e5cb9ae96
SSDEEP 12288:M1MEn7kwUPQ6tRGtAX9F17ZrzgNslCFW+pyGpgvi4H2Jyn4NsmUAAL/5THozvbjx:Mr7APftRGtAX9F5ZrzgNslCFW+pyTviB
TLSH
T103D41B0AEBC1273D09A07696FA0845F7BB5D626CC770F2BADDA982310966DFC10BD1D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\am.pak
Size 1005KB
SHA256 67b938d162bc75db067120bb8366b5bafd9a75fa99a0ca9ad4f46b47d1d37634
MD5 6d22dcd650f3157f3b500d609c630b76
SHA1 fb063a5bfae0bdc3649e772e9fd86c285b26f954
SHA512 c27e6ab4b09c527ad462b968b02d1bf85205a62f16a63bf0b97a26d1f979c69113799cf8794ff2ddf3f1a3d360d267811fc4990d1932a788b9b6e653399bd091
SSDEEP 24576:O8VvT31VYRThTCKHyWVt10RTjHgvvevzFI6XdOdvwilgB1VewHZtPoIp:ZVZBF
TLSH
T1DC25AB547EF9F7570F8E8A1994320E4F9594AE4652802C38C35AE3FC2B2DF1B4DDA219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ar.pak
Size 1.1MB
SHA256 a6eb037da4ac7930a8661c8bf602deee090fc4409bf4db24db8aab65c89b1d06
MD5 8edee8a2eccb4c26a496e9d04838282d
SHA1 27d322da64b4b359f0165fe01eef96884db53d55
SHA512 c9bf8573f5fac070399adfbb6e34780c61e31c68f761aae60328e1a73178d28007bcdab8a81000eb0c735548be01aabe4826c35470a3288942564644b365de3d
SSDEEP 12288:rlWarBHApLxC14Gei8wj3ri2XYrvZU4pbk26ISeQN7+E6W0ZYJ66:zIEj
TLSH
T12D357BE21B2984720B56DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\bg.pak
Size 1.1MB
SHA256 2eb9c74c67e4b13b45a73061fa978738e335bc245da71bab0ea9b205fe91074e
MD5 651366d5dc136aee8364ec625a917f9e
SHA1 9bfa9240d8e675a00c77608668775d9036c9a0a5
SHA512 90b84232f84cd67e88ea99af7f274629286ae02c292dd610ef4efeaa7ed4154ba7048e415f62a5c98fb785c8e4377deabead87aba2cefc1fed7a3d3429d52019
SSDEEP 24576:uuI9WglWLYxgCzQkEC1U1Vb6lNs7e373ZGm+X4KxUfVDIohD74uOVnaNmu8BtTJ1:ux9WglWLYxmEU1Vb6lNs7e373ZGm0dU4
TLSH
T1D24524A15B9A689F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\bn.pak
Size 1.4MB
SHA256 415621a5c0b1546e6e447d43b76414425a8703cc7681d637ec1f283ad0c787e7
MD5 668f9188aa073a9a1c706fb67bd1de92
SHA1 9e0b1912544d3c722d41ebbce8abcec30d606c69
SHA512 60071949463a9029c15b5f85aee8c2be008fa97bae2e07d11bda922ad92066cf92dfce0d25115c12f785c94fe1d5aed390fd29cc47fdac6620a6f16bf401a5da
SSDEEP 3072:cCpCO+qbfG/1xsOktuHrcKqt2DOUzhUygJfGCARuItWNAypbjBbLR3QXQcjC8wkz:cCpfFfGr7ktuHlIAypbjBbmwOqM
TLSH
T16865EE209C6E81B6A8C5CDC9434C6370C123AE9B9B65F74DDC17A25538ADC3C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ca.pak
Size 700KB
SHA256 6f28297c1ccb628f534d65dade167ae559f83eace359acf47e48ff890b9409d5
MD5 ddf227a00ab2b50a8de153edd0309499
SHA1 aad2e096c7b13afaaafd01261602fee51723eff7
SHA512 f10992e172cf225450dd4c90496201b19f30a57247c87a63313addb829551e1d07028f53a22cc6a94f4413963da6517aafff2f54480ad25ad327da95d8967010
SSDEEP 12288:2ztZe+rqQR7IO4yCiX7rmipFa8i5PsFzN3Mw2juwwPR9zejm0t3ltuFTjK85nCRC:stZeYqQuI59L8wWqTM0zrcC77JEw
TLSH
T1C5E4F8239BC93B7744D3331EFB46C253B48CA9847A06D254F4AE0B1622CCA9CD677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\cs.pak
Size 725KB
SHA256 799a789ce531991cb975425730db310f9a8fe74091eee568f3e65fcc7ef0cd57
MD5 3a0e295c5386eb3ad6e45a38fa8e47f4
SHA1 f5b447f009a49210af0d53358be73b737df8390c
SHA512 6abd677d06ef1297beb437a8e76907d3ca69d005b3616280e2761e690a5a2a390059786e59427685796a80d75219dcb0276d861f93e0e57e775c9ac89a33f81e
SSDEEP 6144:1ozOsvAJKTtn9093lBlu+sV5ApvDEAdzBzB4DVw8OCJSBs78QXss:m6SAJ2aWJV5ApLHzBeVw8OCJSu
TLSH
T1EBF4391EEEA36425584002487FBE4228BD5E83540B6EF5BB7CCF9C912575B7A8EF0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\da.pak
Size 650KB
SHA256 9a2cd25537a4818897481ba944981e8aee3d89c7ad37588d02f1deebff3f62d0
MD5 8f269582659ed33ada04721915062e3e
SHA1 a75712303ab59a929b922a8ee6e0422d690cd045
SHA512 6254d6a3950549010fc40da41755eda605b7f86633a9febedadeb1b8c3cf688c225e6d26cd14e98d7fc7567cc87926b7dcaf714a1df63ca5dc975e2ce4e75b5f
SSDEEP 6144:cEA+aIRt3zVmf6J/Ql5znDXyefnlI6E/92IY/wlUYJw3zbFNVSpPzv2TLqGs5LIR:5aIRtSdIKav2XDsaJH
TLSH
T158E45B4BDD9C732FD9A90729F3108DA7EF6D543CC684664F64D8943A09CBC6092BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\de.pak
Size 701KB
SHA256 fcf63fd89e613a7ef69f16054b97b3493948e5c665aad180a91d3635256fb7d7
MD5 098eb9f6f26f22877147b5ec9e430fc4
SHA1 122dfb0f1422188f7ad83b2d6f7298631b1069ca
SHA512 55bb3b30474ca8a78f7873ef2b17c75d2fec3203727a2fe8bafef74e5ee391bc8ab71bd1db6814a279776073123aac3775f77d8f2df0fd39bbc3c05819793d31
SSDEEP 12288:H6z0eZH5+8s/pEOwENW3K7UpkZEgyOqL9l0VXybQUeecCtO:Hhe55xs/iO5W3K7UpkZEgy9L9O4oCtO
TLSH
T125E41803ADDB625ED78673617705CDB77B19E36FD342312A88EDC02B650B5B283AC522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\el.pak
Size 1.2MB
SHA256 37d2e1ef69fea9bdb1e0902cbc61a458baa9009fc3761029bd1c1882a7a0c9b2
MD5 6b335073ea816b2193fda87420a8666c
SHA1 008e233d6450160f6de6527ab577312eb2708e3a
SHA512 c2f9f9070a605611863d52c42320b08a6dd6f36a148042f969dfe461f68707591575b9625b8f47301e2e9c6183cf67662271fbb613058333026faff2370d789d
SSDEEP 24576:BD9dSFbrxq539bk2tHZucYAJXDsSj8msAcByz2HSegLC0LqvMIvNAHx+4BWyjsHW:BD9dSFbrxq539bk2tHZucYAJXDsSj8mh
TLSH
T1D355BFEFB4582DED8046950785D8B07C2BC66D6CE749CBD8622DCB60BDF80719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\en-GB.pak
Size 566KB
SHA256 01d9200a5daee1770f7147b166d25baa6a8dd72c138c3c526421e656dec789f5
MD5 3382cf191387958d2dd901f22f35ee12
SHA1 8820631a23d2cc48465a619f42b4a50863c20b51
SHA512 062f6141f1f1c2a2f6900f54acff263c36313a579ebf13856b4861ee7ce8fab551fde398639283c3535db49e4f3ae26368f981ac02c1a095ec6137498a25d44e
SSDEEP 6144:q/Jlh7uqK6aG9NZxjTixh+4EYDNSPzELMxNiMP9Uh4bifaY1x+VKpDgBc7RK6:qhlxEk7Zexh+kNvM+h4bUhDj
TLSH
T161C44C1FF784122A05935162BB0AA562FF23D07CB36112667CBD811C33B6766C27B7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\en-US.pak
Size 572KB
SHA256 23b271e8009bfa14783700cd0712b4ecaa5b8f2ea28a4d81ae1d7e05bc0c96b1
MD5 3d66180f21df40a9eb941814676972eb
SHA1 b74b6ceba72cd5ca9e662acca19285037995c362
SHA512 4ef14702236e389409bd875dfc0b3f467f8b15c9e97c13dacedfc751642445141de31d6ccc574c8aa4dd788c2e756a16ded3262eb0c577b2b0e82ff526638efc
SSDEEP 6144:pUTO8xSUd/7b7/wg7HfwKOF7Nt3/p9XhMP96hgREfaY+43Um8tjmngcs/wEwj:mqL8f7/weHfwpNbMUhgR2uj1wj
TLSH
T12AC44D1FF784122A05935262BF099572FF32D06CA36112663CBD812C3376B66D2B76F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\es-419.pak
Size 691KB
SHA256 6ff6ea0a14da50cacc4b72ab8c8c7b49c8423abb64f6a3a7f1643d8c3c74e6e9
MD5 826089b2c92b1065a8f2acf09bff48c8
SHA1 98adc5c1c5852359d93932d4f8d82a14e2856aee
SHA512 c3ee92f0220775d058709d236dcbcfca28f76be48ae994d9767dd9b3c8088ac03945dac766ab944c3fbc036bf490d63c62380d9740e399fe97fea50b70b0c0b6
SSDEEP 6144:XLESsa+eyeBOFaU2tGSsSno5qM7zvsYTQoZ2zgrOJJ85A26+ZTGm/X:Xns/eXGvfSFoPr+2OJIAoBX
TLSH
T118E4E722BAC81F5314E3A388B743D753E8D89545B408D25BE8EB876522CCF8CD967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\es.pak
Size 687KB
SHA256 4578e08033967a5062bfd3b1937e711df84571d444e4940b8ffe5366bce4e778
MD5 74be7e2188f212c3ec5b2b0cdd40a13f
SHA1 e1c0ce5411129702babf1e7375d2ebd981626acd
SHA512 1ad8f1bb5890717ae3a01ffe69e1520529fbd664aeae3d1ae91f196bfad59620a615d0e6572f1e0ff457623bfc00fc3f9c05d9a8571fd759a247f9337ab73e0f
SSDEEP 6144:Hz7Y255H4JsbxtEO1XFoiDgdNh+TU3cWFGDZ8jAOKhJ8aW8tWf6k8+6PZCud:HQ25J/VtAi0tMWFeZ8jfMJfW/fb4
TLSH
T19AE4F726AACC0F6314A39349B743D753E8D89549B408D25BE8EF876621CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\et.pak
Size 627KB
SHA256 dd1205eae606f12510e24ce39f301439c98b3293d766ca5839dc292a14d7973c
MD5 1b82280edac606f3d7c318bec8a86f7e
SHA1 3304de615ec541211608f24c22b55dd96bd92322
SHA512 eea35f302b6e61865c4981ada63209f52dd78f33b95fe1673340df9bff191ed27a40b6522d730fdce5c07b236e2e3759c26fe01efafa8fa5dd2efc6948e53b02
SSDEEP 6144:yGJvIIlg3SnkZu4VcBzVOL+vNnnyW0inFaXSOJ44LsxfBPOCXy1gX8ZV1aBYvNpy:yATgioVVcG4NnfnFaXSyd1aqvNxqnzP
TLSH
T1CFD45C42A27D771B242412F9E737A937DC9FD7D8B4000D9668974A0970EEF8C38B6B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\fa.pak
Size 1.0MB
SHA256 f3675255feb8b054717be9e92e93289262f35e82f25f2f8de0d3ebf3865715af
MD5 dc57426d1b91399785531b8dba3cd3e7
SHA1 0c92c0ea4963d0b1e3fad9d0bc978ee6bec7b948
SHA512 c615d33e39aed7e55d5f23b4a31542cc67c6bf4c93f440bc31c1f83359f587ba1b0b3e1e6282d0027bb1c03236803e0d5660252f01160b502f8af36e36c2b1fb
SSDEEP 24576:DMuH/8u313uyqoz+sw2LYRmXnloThXtCfGk62Yha826JfigXnMX44OqlULakI021:rf
TLSH
T14935B1956AAC9AB25747CA0341D33834C773EF12D349FE40ACB1076609A5B139B5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\fi.pak
Size 639KB
SHA256 1f3123d7fb5c22a95b5250ea17450b665c3c6cd6a6dfd28bbdde15e1bf684a0e
MD5 26071a88b56d045fcafb610c6af8f9d8
SHA1 553bbd02c6e97cc47aab8c3f03c45c55ad168983
SHA512 8ece18be3e368a03b95092c65e3a27b2030286144ec9815cb011264249d938ec651f4f8901d9bea2a1552607cfe60dda85156ae3d1fc10330aaedabf6f89f7f5
SSDEEP 12288:J21mh0Ki36193qYvS3aAYNpv6IGp3Wa9q7Hg/:JVh05RRaQI2
TLSH
T1F7D46D915215C22137C4C29EBDB0903EF5E5E39CCC288D96E843CBD949EA9887D7276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\fil.pak
Size 724KB
SHA256 02e2c70d3d85b0deb677a9ae576ae3cf89e80774532cb3315c14f1e8ce64b310
MD5 bc775353314653b56a92b19e25089e2e
SHA1 deca4713ed0d95a96b6bb857c683d9b7d8149181
SHA512 a59e0fcbae921c3f33bd2b9de052fb4958d1ba8e73285b2ac2948433dd13c7d95bf8f1fa5d257372375ac522dbc7b94ebbe68fd3958207556013a23ee5a1049d
SSDEEP 6144:sq4QFQ/1nfokC3ZQoM6qFYNFDQIG8xVz7A0gp2ua5vwg6MoZHA1JgiW:shQ6/xwkCJthNvI
TLSH
T11CF4D715B3402748DBC352E56264682F6AE560B83F81786E4FFF269B3BE7CD5D270182
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\fr.pak
Size 745KB
SHA256 4db43f1cfba1ed1d7dd347d58fbab0b8d6d89dd008a3b9d2436d8744e3363453
MD5 00ed9456974b5e044302527d54b8c12b
SHA1 007f201c489fb44b7e3877802ddee971ef6612ed
SHA512 bdebae8af70450cb31915ece362465fc37483603a1b52053b0510d8e9b89b1ab9ec6e6f0929411144034a111c653aed9bb345e9bf85a6d2a4eb68028f1e5e86d
SSDEEP 12288:jl9g59yocoZLFCW14PGbVAZgjgiu/WAMnS86Qua6gVA8DvjH48Kh0MVSiYnYPe76:Pg5uFqV6lwC6o
TLSH
T16CF4E65FBAD432CB19C61273FB16D663DD348248F215E300D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\gu.pak
Size 1.4MB
SHA256 e86e8c240d4b6283abb03c49df9e8899607ef9def6d4933c7a541d63b5835271
MD5 d951d00d45269c6850524c5ebe07de7d
SHA1 bfb100d437d2d94095b99111af48e41b6bbb3e31
SHA512 1d12fb98bc3f99f3781c8f6ea9b8686ff46195b515597362c980455d0c4078b8a708bfa8814831420452aae32aba4292e6fc68d3e23fcff8c58d5e40342c9bc8
SSDEEP 3072:3l1X+w3eMGwqlcdzHnfWGtduO5uNCPv0QaPjAwREJKVMjNiT7llj63rA8lDcSi53:3zuEXljWGm6YVsAU+hCR1Us1C
TLSH
T1BE6518D0D7B9F07019DA9F7E819E512086699343D57E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\he.pak
Size 906KB
SHA256 ddc1f304ab1f4489d19ae2b31e7f8e3ffb47dae439520159e8975422c65e4115
MD5 d4b804bf7dc9e7118cd3d38f128cd7f8
SHA1 7a95738e91da1499c3c551fb3f27218798aa2c7c
SHA512 2a1eeeb23c4c18e06592f4af4cdab369463919f359e81a5ab23c3e20bc74895a217603b8d826a125e67a13764ded1583e0af7f083f26f0dfedef79c033ae0007
SSDEEP 12288:PWPwMLpWzu3h/aP4n6nZT4SCVu/rcW0rVWvIxLdN3Za+uiJAEVXRQeQCaj4MlB6t:PWwpf6t
TLSH
T1CB1588C4B2E492255131AAC39FA5FA285FF3CAB53CA27512CB14526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\hi.pak
Size 1.5MB
SHA256 10a6f19c1982590e33476427dee8d4293b0707e25dc536d6394b5782ecc3b642
MD5 b23c8982a83c363566730c2501347f8a
SHA1 3049610378a71bcf89d90b418cc6f67ecfd32c4f
SHA512 ed2b962bc6c609554ae1354b7553f21db46f29f4f4c2ca3655301a2d791720f103d9bd2eba4e5a95323664bc4763995cc9281ffa916f35a0c917a8fe4e4f08dd
SSDEEP 3072:3WhTplLLsvVWjC+FDejZoY44V/B90ZV1dhuBlOvXoCDtDWejYX55nFs4f4/jtRO4:m+v0O+e9oY49Ik8iidSm4
TLSH
T1EC75F40CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\hr.pak
Size 698KB
SHA256 d46c64ae8af3562e37eb80438aa2bee228fafda251d58ba4d0991291f1c72aab
MD5 8f8a2f1da61e896c7c2cf641726c081e
SHA1 867aa42a911833025ebb4cc30c14614732815be8
SHA512 90e299305b136736934dae850abbce858c5910995259a94468cf47316880fc00274e6f53fe5c6615c8f98c0185955b908f4f08dc144721dcfbfb76bda32c5716
SSDEEP 6144:Rb+L1GEcwOCRAHRG28sirAIu51KrX7K2wVO/ujQ52u:RsUEXOCRAHQ2VVggOmju
TLSH
T189E42A7DBEF2570A0897B24AEFAA43447DFD08DCE56597B7684F522E0003F4C6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\hu.pak
Size 747KB
SHA256 0a46fc8d50f74effd1cfe1979e677df3de6fc47e6b551267303d93d57bd83f50
MD5 d6cfdd7c401a644dfbcd8e66c9702192
SHA1 2a1a0b58795ea033e5f8b28cb4046180db188800
SHA512 e0cd08e23dea8065656832f696a8e0aabb6c29874ee5140c1db4a211828dd45580b4a82e07518066c099b9aaf0afa70d88d720d4d336015cd48ec201ffdb80ec
SSDEEP 6144:q8auaOrooql8FACP/XDGBrT6Nn4HIuxiXlH27lm7FW3gAezpruS85S85Z49Ka0Yn:q8WOklmxP7zXAi85S83y/7LY1k
TLSH
T162F45BB79376944ABC6C179778643F15582E481BAB2B31FB2887886D34A178D0DC3CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\id.pak
Size 620KB
SHA256 f567569c42a25bb2dfc5c33e13aac558c0e2a1d5d4b969592bbd0841b36438db
MD5 3fc5ddd09ea15b88504ae0671979f58d
SHA1 a7f2450660f45e1a860fe036a892a7f5648ef1a0
SHA512 2985a83b41ef90095b49214ac4261b873bce9b16f5eb2b7c974281afcb130650e6c176923ad6d0ad5dbf42541a866ae5663902ae6505e2ed6143814a68c1d7a5
SSDEEP 6144:6/0X4JMvgCGCBUZD1z70mQVqpffhTFjlFlLmBhpvh3xE65jXhBVbm2iTvxePHsE:6cIAGCBuzaozTFjlF9mj265bvz
TLSH
T185D4E8632ECD310C194442D9B2CEA91E7CCE233BAF05B76E8E348F7055A67686716BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\it.pak
Size 677KB
SHA256 899be10e8f46f53d9bbe7cab827fc17b7c2bd7184e31791688016e2ca4df6622
MD5 5c92bce91523a4106a653eabf79b396b
SHA1 1e72af5c303a7273d2854b12c2773e90d953a487
SHA512 8588b98851e292f5ac96b1697e5603c49df43a409518bd1db0355de108246cd9ddac041beb800de1fb407ade53bdc68fccfd77c79193b7e475c46c2dfc289a43
SSDEEP 6144:1MJJq6cv2e+rxtwaiXBRB73N+5aIwSbmCfEs61ltC5jhOfB+QcrMppzSj9f3wyGj:1M+2vLLo8yW5uPHfIYH5l+pW
TLSH
T16BE41B3AA5DA211519976359E611B185FBBAFCCCFE41721CC99B031C22CEE80E1ADF47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ja.pak
Size 822KB
SHA256 9370c20a0612f5874dff2b015f31482e167eccf1b3c1d1a2efc1c2e38cefa88e
MD5 68725e6d47e22e2e7e921c0231a37d7b
SHA1 b6a487c006c8eb2cfbf81ee801ad4ac65636bc9e
SHA512 87d934475ea8c0cfbeec35bb1d2d798a15f1ab06eb2d62790103d9be5c1b0dd347ded6d1a382d56a4709dd67ce9e618d147034e29cf174ff8c2b7b0d2225e97b
SSDEEP 6144:TkAXo72siMuLvQHciTp7ZEQ23O6fUxbdJaHczcmoVa:TBX82dhLoHco7ZEQ23OSUnkHczco
TLSH
T12205507CE3C969369D6153A22C4E36E17506AC9BFCA23A3A443DC074BD707CEE415AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\kn.pak
Size 1.6MB
SHA256 af5fed2130102ecc0c878059c88faed9d6db2e8b147fb5ae9e15e3fe69706c8a
MD5 254a621dfdcda79b0e130eea6b295e4f
SHA1 0a619e7167c51f8130e815573fd9d6b35b339dec
SHA512 62b112893735452519ae2e10a4dda74bfa42bdbd67ca41f7006f5eaa8e0599e686e2c2f05e09b60f8953decab47590d9ad36230da777ca00c076c8418429fbe6
SSDEEP 12288:Uo788nG/ywDkewDScrOagfNuLBCj+7l7nmsMh4iVW9Tmv:hlnGf6Mb
TLSH
T12E85CD18ADBA7D311BD5006B24EC643ECFF16BE29CA947C2F4DDD7802C66C6A90825DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ko.pak
Size 701KB
SHA256 0f5bc49c4d35bfea1563db6eb77a074c65b39b49a916cb35a022ef96340338f2
MD5 a2e10a8fd9c595189e3990b20bfbf8dd
SHA1 c7748e372bceaadc3978cda8479d2e017160c212
SHA512 b4f50994931f2e23cd8ee856f87ca6ff7a940f2037f371da3b73c8fadb56dbe7fe51444d906bc0f8e2e1c262f39e88449b51f177c0478d5ba63f230a48a4f30c
SSDEEP 12288:mq0BNgWqqZ4kUM1WNiPszcbifYj4ZGRyrD7bIFPgssDXCFGIE/xESJGGLhwVX0C6:j2wIRPww3+6WV0y
TLSH
T1C8E4B6F238DF63C91193CD82AEF4FA198382D976F75302A4ED44CE449E145D74886ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\lt.pak
Size 759KB
SHA256 af969f4407c190dd01a426fa1244cb1ec7cdf2909d1c3ba5b87ff662ba567303
MD5 d67db6a28c8f559d1273a460e93a5876
SHA1 d26c98cc980c9817d9e2b53be6d848036374059d
SHA512 7f9dd0b418089e214fa4f16c994d7c1bc9a4fdd816e0ef2fb9a93877c4fac7b72401804ac2eb4fc43ba81d9d4778b7f3da6c3b8cdd1e88287a9713b71f5eccf8
SSDEEP 12288:0Yl5uPBw3krMNeep3Utdpy2L71aQYj98wN6j6SFH:0Yl5+O3uMgqSwNOa6f
TLSH
T177F41C0069E3AEFB9A5467C981A8CA74DEFD50009727BC61EC69C78BC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\lv.pak
Size 756KB
SHA256 27e20dfa5585161ef8b641f628aefe6c88d9f9590ffedb647e0c9da1cacf219d
MD5 c35c4e025561b340dcb57430c912119f
SHA1 7b3f2c5b8c201d447190eb57b6d8e42da70c699b
SHA512 7928900920458ad3ad594d92fe1dec63d4a5266afa019bd5aca423719776d4b6e0c64cfee81f33b1a98bce0600e55c2cee39c8467cbf5e0d428d661ef73d1154
SSDEEP 12288:W7F1gskiXWSlZ70XM4CPPrJ0mn8cBTtStX+Gi:yFkiXWSlZ70XM4CPDJ0mn8cituGi
TLSH
T14EF42B959EC68FA94D904DCB732AD122A8CCD740FE07F112ED798B3A560F52432B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ml.pak
Size 1.7MB
SHA256 b5606265910e45098a88e989202a550531f6d00333c6b112ed4c5cbc07b2ff6a
MD5 9c29191c67c3d9539df9c936d31ca2aa
SHA1 7554192d90ed72687ae5920e464f94210177825d
SHA512 ce792fcbf46b0aabf6099904ddb9284d641f1dcf8b5ae75fdad04147affa78e0c3f109e5e31e3e884bb4f89c57c1d38c558c00e945fc54c3059c94e205a25f73
SSDEEP 24576:WiF/U/oZAuuxyYl+9y9XBkx/etEWaKfijHeBAzXT4+v2kiNk3Ma/W0b37:91
TLSH
T1DE85AD57A036CD3B0FD102167B4E2FABCD5B9FA140AF668B5869F2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\mr.pak
Size 1.4MB
SHA256 8465d4077ed5414cbcb7d9bdb00d85e515a1a069703cdc1d4d67c9d6e5623fb0
MD5 00192057578bcf97c8fdf81963e473aa
SHA1 d3441e0dd2dc3e840dca38400710ce017855d53e
SHA512 c623512e7ae3ca0acf7a65e757715449892c5241822d9f473866f742ca52fa5e041e4e5fb0d9a590870d27198e3a72fec86bb59a1831f0c9f5cb0ea1473ec4e9
SSDEEP 6144:WUASC3+M3K2rwb2XtiWUEFBhAaYRbIl9Bk5mty/DK:WUASCuMaWwCh34bIl9Bk5mA/DK
TLSH
T1B765D24DF77AF3685DACBC8E36540D3BD8FD31B1C3E9925648E1B3A74884CB401996A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ms.pak
Size 652KB
SHA256 af7021a00befa586aa067ae3ccb339079e6f13ee0cab1621836f6abb608b6f2a
MD5 4d315df981e03002091c3320cc9caaf1
SHA1 4d3869a0c4d59d808918687436c3b56d6763c6e2
SHA512 969345b9b60fa3b9344e07a14cccb48df24ca09e3d1872546d897c64833fe7cd81ecee03dc7871f87002ce2ae5a4001603ce9116192b418a4dfc686d87d920f7
SSDEEP 6144:8O3AorsPjhhrF/t3pAHglSobUHuqwjroR+DhyWSzAbaR+Ulw7QCy9h2zR:jwfrBt6gMHuqwjTwrlwP
TLSH
T13EE4C6579EDE3118085843D9E2DDAA1B3CDD3332B705AB2B4DB08FB0166E7A53315B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\nb.pak
Size 623KB
SHA256 d97a2b0cbe6adc99add2ed3ce0d15d0bb124b778086c466c126634d60ea72608
MD5 820ea44fba453034b2a8ee9bd7e76611
SHA1 bdc2faf8211ab4ce0f175b6f380ba1d252661d8e
SHA512 a3fb0a5e05d597840aea11a3105fd3c6f6cbdf15440df3733447c1359b0669ae4be3a94d669dd3e27f2da93e58249956af2dc3babad45e9a4259a03ae75c2f44
SSDEEP 12288:fGkyTyHOJDAlQSoU/Op7fDYjG7PGcu5lBoU42wW3:OkyTyHK8ofZ7PGcAlBrN
TLSH
T116D40883EE86B72EF69442A8F518865B9B7D943CCE98199B54CCC52E0CC7EF052BD1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\nl.pak
Size 649KB
SHA256 9d82c384fbb6480c7a6e721c6bcd1f2cd19665d848b056b5a2911504308ba037
MD5 66875b40b0226463846de55fd1eb9f3c
SHA1 322d02144c14bf328b10a0cfb00aca65ec7f18e2
SHA512 4b2c3b1e4001ed1c3a9f237187c18b731849d2818f5b52daa7b64c4b91cc6b6178b01f8a846fe7643d86b01f6976257f470c66f67bf86a43e484c48c5ab5ae1e
SSDEEP 12288:sKl2A8IoRhAulbJWQuslUe+Kg3MHkTFBy7K9qHhG1J:/ARhBlbJWQuslU/MHkTTy76qHhGX
TLSH
T171E4F907AC8E253E59C0A349FA084BBBBF2ED22CC26CE67DD4EDD5341443F6851AD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\pl.pak
Size 724KB
SHA256 8a0969fc743d3e2f5111387d53c0d79e8c1d9f68256ad6553b87fca2bcaa7e6e
MD5 bfb7498aaa8f4252f8fb5e521a3e61b8
SHA1 c89c6944d186987a9cb5be348d01bd52c7287bde
SHA512 9d73a56e374df5b135f85cf3fba9f2d99fbaf89110563db007d85d6e3e14c840c35905c20b3f5015bd79499f5b17de18d21614c4611b020c980ad87da5fb5e12
SSDEEP 12288:felyrOtK+N2tfQfuzSJQbZ4brnPjCUdye3m2UawMAmo1QhalNRPvLoolyOXd:GIgNrjwMQ1QhQVt
TLSH
T1E2F44B0E56E59A4E8CA008E6F6EB1B7CACDCC808F108D35FE45F452A619B19FC9BD5C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\pt-BR.pak
Size 680KB
SHA256 8272a84e2e6658dc4da17c6bd21995011fbaa6c328efafd24c4ebd4fe2e64916
MD5 1fb1aa4f9ce6069fda5d7092867ac4a2
SHA1 92e1c8f9a43330edd4aabac925bde5972854dc0a
SHA512 5c51e6a38e9747e339aeced9af15223228f498670ee51abcfd90f3dcef7b903c97621bcfdde2fa6999774c4aab13490eef8bd2f39d891827b71e206be52c9d64
SSDEEP 6144:byhojkOK6gLRGVM9NBXBLdYchaNyza5E3pzu0LsRyU1y4:bYGkX6gLfhEEgasRh1P
TLSH
T156E42B2E6DCA136615225350B75EEB03E5C80645FE0ADA87DCEF4B06A3CDE40D933BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\pt-PT.pak
Size 684KB
SHA256 bdfa7264dddf70f936f1785737969559a577b51d1952c820a468c611d18b17ca
MD5 161594d74a17bb74189e1fab6a3a99a1
SHA1 41332934f91785e616fe675317adad4a74f275e2
SHA512 81c22b6a5f2c3217d56f323cb63596ca7361a9636a314e192674c38e4807b6258c2127a603ea8b827c703abec0bb6f2675e149b0d3aaf522ab5e1d35452be40a
SSDEEP 6144:GSp8Fahf2pW8kuvFieJVJJxh/SUxNwyf8mBn9ITNKSRLc:G3ah+pW83LBn9AKSRA
TLSH
T1F7E429286EDA136605235351770ADB03FAC86655F809CA87C9EF0B4272CDF84D6B7F62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ro.pak
Size 711KB
SHA256 1e6b5b0dac63a9e951daf523de310f6bd9e5c53e281f37706d41bd35d2a08bb5
MD5 42b62d8b4ae6c44d00e8324038884bce
SHA1 4227b5185310d602cf78b9b181afee118b7b739c
SHA512 279b167f4ee8902259095e6feef515848926be23fbf566dff20520a664f1bc048444f119e8f12084c53ca6c633ff261b694e28fcc6786282303500153490e992
SSDEEP 12288:mtj+AUFtka335aKPBJ4RJBDepv5m0tsr/+Y:mN+AUb5m0sH
TLSH
T1ECF43B23A1C82A972D5152B2B73935D3EC8D105DF640E28DA4EEC97910CDDDB852EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ru.pak
Size 1.1MB
SHA256 52a31a7ca057b8c76208620932120927a089502ddfb66c30de4324959f9e0075
MD5 b807c6dcf6530310eed1a97d260d9850
SHA1 e9870241cbc63942f5c4720930bdb41a798564b2
SHA512 2394b9e18338f5286053f52d162eb7a29616b0529230a9a407575b3fc6c9319147d83370404a8a4bf2cc9d6a7d7dfe30881ecdd7af67f15281de08dddaefd160
SSDEEP 12288:vrEzIAfQeRo4YeeMObzJ9sF8aTjBL1gJqSvYsqCQKki6vR3Fo8N5K4ZM+MYHenOs:DEFL2o3A
TLSH
T152458760669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\sk.pak
Size 737KB
SHA256 a53551e8d251fa01305afe1d0d187144c56bfdffd5d1aa9f96a9350b96c0a252
MD5 2ba55cf57be2147c064a259d08ce3550
SHA1 573549af46fcef2763a620af6806df45722cb7c6
SHA512 901296af8da1ce4b8f9e77afdec85be4f17f165aa71c73303c97d91e7a0592696725d22b9bc00840c47485855ddf49d2b2406459ccaa2ea20c647fb2b4c1c4ea
SSDEEP 12288:MT1NIunNQL7DF562AexuBYinyteLKo1nszYkxb+mpTjsxt9we:M8ui156NBy3Ykcdtae
TLSH
T193F45D3FDBE7181E8E8D0144FFEA7110FDAE86508A4EB0A5944F364714E26EDCAB4E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\sl.pak
Size 705KB
SHA256 e1371c8df577b979e3a515af34b0aaa3d07153c7a5c55d39a9b49a7ffe62d3d2
MD5 acb3ab2a8c329fc279c544dfbaa0de24
SHA1 3db50d028705d92eb70890afb3870be04a15bcc0
SHA512 67842b58b8d7e2bcb189eccec9a3fc69d1ece7bafc69366582fe79b89cad0989858720db15c5ffd56ecc099a26164ae4428635ea4bd2df2659f4acc4a5cabb05
SSDEEP 12288:kOCIF0cB2t2TraflWH1ToJ/i/fzbanql/aA:kOfFv3af8H1Tqi/fzbaE
TLSH
T102E42C397AA75E0F0C9AB2CEFEA606007FDC044CE251E6A1FC4F336A5415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\sr.pak
Size 1.1MB
SHA256 be4ce17afac24dffc1eb36609cb51e766e77097d6656b1008a2a825e59609cc1
MD5 fb8f7a2776afe0eac16e9a43b6fb0601
SHA1 ea6697f343cbcdd25ff8b4aeba3c77e9ca8a20dd
SHA512 702684ca6b7506daf30ddbdccc98d08657887e1a68ff105d65acfd170da6bd50ca301ce86fa4ec9645f3e78c4e20b9d2d9271740fd93c859aae5fcc55a9ff223
SSDEEP 12288:c/gCTfk6F1tc1LcIMy3S1dRBCm3i4xsJmExKVVhvPChxV1T37Vbu9D/k/E:c4scWzVChO
TLSH
T1133546A19B9E64DB0901F41BD808BE493DAF41FE3FAB975211601DBD34E10B847B939E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\sv.pak
Size 631KB
SHA256 8bdff8855d23c739ece357f653c0a17bb36fe97577a5761912080d057ed341a5
MD5 4b9547213c2ee4e0b6785c8f65e1ee84
SHA1 36058595a34932a2820e3515c8467c4888d54981
SHA512 1646f96607bc68f4a92a0d4c7bdae7f2d8ff2cb1a99ee858828c8359f69ec8eee169bf3ee750b5a0984029cf2c4890cbaf3d547d54116155cb51d9680575c53f
SSDEEP 6144:zE6QThwkBUDnfjdInisqkqQCJYxqxEFUlTOe+9kRRFczd5RtGmNS32M0hlMSOmU8:WCY8y5xzLixM
TLSH
T19DD41B438A60F526FA72530DB608115F0AEDE25CE3F2954EB8D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\sw.pak
Size 669KB
SHA256 312b225a81cc3cc15f13f80c45dd0e0bb3655d31873d2956861207e70c33c1dc
MD5 c4c4d34f79f884b662eaf269c632055c
SHA1 ee9aed1f7b419f215afa963ccf8e5bb39fa9c05d
SHA512 1c976932ab622559c2467787fe56f14dc5fd1377aabc0572d328cbc2ef9ab6e1f36f4f9038ea66d160d53decef87fe35c9bf5efddc25d19129634ab219160932
SSDEEP 12288:9PtihCcscjas5OuexGF2qjOWd9pGIbJ/BEB5WmedqU6jRdkgbyddYDhibWShgnJe:nuHehzFCiYBr
TLSH
T17FE4D6629871E1191233618903DCFF732BDCED5C692B2D935A46BF0F218F48C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ta.pak
Size 1.7MB
SHA256 91fb1460711df108d8d435a378c8be1d1e80b0886c0158d8c6ae92f35812681b
MD5 7afd6d96cfe0cfca886da43d0ac33b84
SHA1 7b4f97d8a8775d1ac5ba56654c2bb075cbcea5f2
SHA512 58e944b4e889d3d7ee9f0a6c2ad636f2e2ba7d90ff0e16067db3826f26ab3f53210a94d90740bb525b5f0a397327111711e655af9fb1d65d34a41bf92bcf69bb
SSDEEP 6144:fqE4cGuBERDmPH6kHJgGPjkqwtRoKtm1vYpiMyZ:auYDmPHzgG4qetm1vYpiMyZ
TLSH
T1A0850CCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\te.pak
Size 1.6MB
SHA256 fc8c2706c5dfd36e7af8e380a240e0f697cc5fe969b512092a2185896512c4af
MD5 2341fc51095d918c2c32d95d9f4fd20e
SHA1 1f0e537d5e4f0751df65bb7757b9014b544ac6be
SHA512 44db2301b1686fc878249a93d76ba7d68bf936db1f1468d253add22c6c6dc51b68d5ae0f0338e73b7588a84f06aa7be72278b968aba362924ce36cf380f7d964
SSDEEP 12288:/qSLrojq7MZKNby4cJPISF602ZLHgKmoQRT51bDC52CMzRWnB6Ic3p1Fqih7Rsrr:/qSLEuIhEced
TLSH
T1237593023A6AD310DBE60273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\th.pak
Size 1.3MB
SHA256 c1f4235c31bc05153230b0e55b7aabc9020d7460d5b0a025c386885e1e4bda3c
MD5 17455a1ecd74aba39c2244730346c97d
SHA1 f5b737951c6f2dda2299e6440650661d67cbeba1
SHA512 259dd57dc99bc055c604032c44009ee58b50f43656cedf4daf4b7d3358b63c3fc12a7789b3ab9f204eb0aac9812b43629d075ceeaefc7d2deb7de8f017749a62
SSDEEP 12288:JVdax6N9LyZYAbzALaSBs6ojhCQskJUsXw+sO5eXwpbDF1uRHKHlPijR5eysD5UC:fdvsn
TLSH
T1CA554DB37247DDD479481B5B262A7789672DAE653F73F8E000C9215A73F071A8422EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\tr.pak
Size 681KB
SHA256 ae87bbd88ce0adfc2dc3c460736a7d0513472af62fc856caccc638dedfec9b4a
MD5 2ec02801a22904ff9d7a5398a676e7ae
SHA1 57fe8ca8beea60cc3374ef55935806133c3ef468
SHA512 c56fa666dd163c5b42cb39747d6acf1bb32e35bde9cc521e7981d7fd3511b61e7d7e7b8ac11cfa00ed89431846742c00c3375df6d17cf6b0bce703862065ef99
SSDEEP 12288:VYwzAbpjHpq6E+SufWHl6sgwhqlyfFfgddbeRrc4V:Gx9E+n7be64V
TLSH
T18FE4D88178EF281C8FB9278FD6E91666F8DF0666B331F4469A1A8636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\uk.pak
Size 1.2MB
SHA256 a6230520dac708a6235588f5d9e894fcc9b1391e18a70e3220e06ddf80f76688
MD5 f818709d3215dae023cddf8a1fe9d233
SHA1 9091ddb0262086c4b56f8df0b71decfa993e229e
SHA512 fa66a896949081d57b74c9eb56727646b28c45f91428d7d30d4af8159cdd5d04d9fb63227f6affa15fc52df2dca37ea624484d78793aeb7eef30cf7444d003ec
SSDEEP 12288:URMjhlk2ub+QKjbzI9wkfWd8SihGx2sSr+amnMtBps7Q3Bq3tKINnsoA6Q+qz8+f:/pxQ8+quv
TLSH
T1C645A9A19BAD54DF0105F05BE94C7A0D7DA740FE7FA6871625A43DBF28F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\ur.pak
Size 1023KB
SHA256 c218e21744df2ff0669a87d497d65d76333073577360d4c662c592de146bf82a
MD5 37e3f75291ad8763ab34dd68aa05ba05
SHA1 e0c952ecfcf67cddf9b39eac7dff3bc7a6bb4508
SHA512 38b0eee7af8e0b6e4d2f92417a1ce84ba056fd5257f907aa8f4dcb2755023e8b46ae89257b6074ea14dd234aa85afdb8c0eb18667491bff294a1d5aeb9e95144
SSDEEP 12288:9QKK9e0uiT58PPPK8VSzqtdQSSidbyKFil2iOETcE88GYOa9NQYrjEYjwadcJKwN:9hg9G3b
TLSH
T13E2500D2A6BC96B35A21D92780D33C34CB735F13D34AF285E92246C54E9A0135F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\vi.pak
Size 810KB
SHA256 42f3f0c4f645aedc66c12c74aee7256336a929798d736c56853daec91d44511a
MD5 7ae6d8de41a99566a9bd52604e975cf8
SHA1 9a385321d2b016a4643f8aeca83cfa14354b8c10
SHA512 5337d0f766e9c41963a7bd68f138b1ec4040317bd11fae4acfaa2ece4d4eb30bc08c4a958988b1490557bccf980fec9745bc9ff5d4337ff69968c075c50c9fa7
SSDEEP 24576:uHu+cOAV2zKMKoiwEwke8lg4NiOG2oq1ljV6:ui/NiST1ljE
TLSH
T1BF05951216E1702680AC553EC6CD540D6FCEE42FF7C0CFE56FE429746A221A46F25BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\zh-CN.pak
Size 578KB
SHA256 ba8ac4bf82b50728d907215d1993948457835bf2942a4d7266a3f8af5f51de15
MD5 63db84a38410314f86f27b659c96b1b7
SHA1 e264b871a59aa6445a41f84af8aaffd68d870af3
SHA512 00f0a96653e89caa96abb6f4d0f0584673e1996a9fede3c19f7e5e284fac547445d0c10a64f557f1f07ec8ff733ab2accf2ce965fca7648e27fcd10040cf02b3
SSDEEP 12288:8Ch4Rd6craOIOUzQi+lnfO26wYeDMEbjT:8K4Rd6craOIOUz1+lfO26wYeDMEvT
TLSH
T15AC48DE924F9BDEC004A90A03729613D7C40764BF627EF266ED248ED2A91F9D0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\locales\zh-TW.pak
Size 570KB
SHA256 82739378d17ea73e57c8efae31994e0c8818ab2d0d12cb1f6b20d2f340b3229d
MD5 eeea004461f1a51341865f946711f49a
SHA1 4ef822a80a1676ef60190082ca05acec104e7299
SHA512 72b5e7dd24d1b1bebf546ac7571a4b505303954d3ed1bcb056cdfa14c513902777e1ae0df28154c9f34e925a8a7fb6ae45c18cb708eea48078b37a657f90b253
SSDEEP 6144:e2lPNeqJJ0jOV4AP7lPJxgaB22Iuxau5nzOLHHDWqYi4C9aUmm1OPSTs:rlPN1JJ0jOj5gYJau5zOLH/18
TLSH
T1D6C46CBA0CFBDBEE0901F484B7C9923EBC8B386DDD337636FC851C942D69A5819A1145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources.pak
Size 11.9MB
SHA256 cdbcf9a043ddf01b0ac30d63c257131248406c3e4fe9eddc182ef6ef49a34dc5
MD5 97d71bfc530f4fce9b1d3eb44f9db2bb
SHA1 3a9fe135da801b430fe0563f02f31eddfbfc3f10
SHA512 418aad74fc7e13dbb21621bda10af24737cc42634c49a40fd09357c244a479c25cb9b05eeb0b35098ae34353809d2ff59614008aa01b6878f41ae6158a309c76
SSDEEP 196608:XRR3ZeqsPzZOgYimq8oR/5e7sbaeejrCeV32uDKOIKOrsY5OkrFAWeC/Zh20X3fT:XLZelLgg9mno8sbFurC281OkrFleCD2k
TLSH
T164C6339433A4286FDE2123F3822D1237DA29DD0B15A590E30EAC705CDEB796C9FDA535
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-update.yml

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\app-update.yml
Size 87B
SHA256 995a6fb3df2479a68056df0a01d9e018f825238dcfec67579449875fdeaf38c6
MD5 ae50cd612af5a5b5b87efa9aaff0baa2
SHA1 9c11f74ba3b63324eddadc00567405093a0013c8
SHA512 e789e01698469559a582a5c7911a509e29ceefa7a02b2c9c506318020427d393013e89784f8b0049bbef1da0f9448c6f2f647ce390a054a3e99318830df0c035
TLSH
T1A2B012308118C03003B2081D3428492170581259F081003455DA401491238640E854DF
MD5 SHA1 SHA512 TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\app.asar
Size 443KB
SHA256 a6768b7712bb2213ff45cc0debb77eecfd454f52290dcd3af90def9a5cd011c1
MD5 f47363220e44cceec01c5d5f64d5f124
SHA1 3d0085c9246f8e02c2768fdc1c1521fafe11b745
SHA512 be067f3a79584fba967510d801c4cee02f82cc78cc03ccbe42fc78311115323d846c1b442419504635e8df3fdb88dd679bcb216f4a02b9ba86b48e7a122ce61a
SSDEEP 6144:nIJIJdUNsk0BFiiiOP5XQGUL2ML4/bTRlFZoJm9e+/YdgHp/Bi0:nIJIHk02OuGUL2ML4/bTRlFZoczi0
TLSH
T133A40C562DF7603142A370B95A5BC402F338D017261CCEA4BE9C83556F8986CE6F7BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FNLB_alt.ico

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\FNLB_alt.ico
Size 5KB
SHA256 f02b25ada4191345f99172078987e2bfa35c7338753ec5ec7515524bab3f95fc
MD5 f6023ee4030cef81e2826c7668010fe2
SHA1 9609f150946d76025be93d7079b4d0220fa269c3
SHA512 e3c2e2e1d5ed7576f6ddcfffbadad964f7b0a4a240b98a1994de0394b0429500241e79eebd251740dcd0c1474d29fcd27f0b13baa0f2aaa2db388f10a2b8ad7a
SSDEEP 96:DrhZc1ZAR9uYMKVtiRilAO2DkTJR3I0cOKFtOidAnOlc/JvV:DrhZsZADxVtiR7D2P3dcO63dXlchV
TLSH
T1CFC16B48A5F9CE48CCB5A690CB7A049E3EB9A79973C926C5A1F99793644543C38C8CD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FNLB_alt.png

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\FNLB_alt.png
Size 27KB
SHA256 b32552fe3209db5fa7da58c816be95a2d116eca0f4ae49997848dc8332924b1c
MD5 bbab0cd782fb2f316c9c659b5190e886
SHA1 84de7c0f7088529b0cf75554a8a355906883bbdc
SHA512 94158244149fb3da6be4098395619899be87e70d7e36e589288685cdcb7c578527fcb9875167d3314d0c0eb244ea4e68c8bb4e17ce6e2b71c0a5372b4cae2d27
SSDEEP 768:KniZdhfKFHpSe9p7PeDPaLdaUBvyWubTY9F2FxMGOCX:/Z7fKierbeOL8wvyWMYPkFOCX
TLSH
T12BD2C0468123C2BEEB50FA384691C34B4FDFC1ECBA22516BE9943D0DE5A4467676B1B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-beta.icns

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\icon-beta.icns
Size 448KB
SHA256 549560301cd1f2b055a25abca64a98bffe2326a26008bc03d37e13aad9570aa2
MD5 c7cb1aed05e0a600b6ce1fcb4c52056c
SHA1 449dce871a164558fa9b51d8a6cabd93f9bb7bc5
SHA512 5b1f0c0a6d7efc56e8538e64be5474849b92f81b7c52ebb96acdc74a8a2a4fa1b96fa819be626505f6e6f8f6c56aff40cac4699f5274d96469a394dafa4a3c43
SSDEEP 6144:V3pPOe8U4waWTd1LDk43pPOe8U4waWTd1LDkKu12IhZSt2u12IhZStXFASP58:V3T8bwb5513T8bwb55Fu1KIu1Kt8
TLSH
T1D0A41266A563D2184FF28A24850B52F4A60C976337D30DDBBFA28DCEF542A21E738571
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-beta.ico

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\icon-beta.ico
Size 264KB
SHA256 34723863dc8e5a162a1dcf7c684af2f9620f19d73db819212059697f0c0c0d73
MD5 10b66151cd35efad9a257c07fc8dbf54
SHA1 1f4132c74f61d19662b66704b3a6249375c69678
SHA512 b55b4a037be92be297e28bcf1c0b1218e60a2c6f7197015a360a1aaa4dbaa63ce5c5fba51e76216efc896ebe33600e1f8c16528a1f6715c1a4ae288c18b650a7
SSDEEP 192:RtYymGL29cEALUH2bw+GsEsB2a7LqyppZnE9bj2tK+HhX+h5uwx41Nn4/0oUCnqc:D29oUHe97EsBjt3AH2tK+H575CnhcmJ7
TLSH
T1724400B92DB43D28CB55CA38E4564405817AAC6C8C68E2B1AD5DBD047EBFCFCD713099
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-beta.png

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\icon-beta.png
Size 43KB
SHA256 b594bc9b32ee084a58d935dd112324a4ea8235bcea215fda44d2c7660ca6c6d9
MD5 0ad9019114622887876309b8f7d87b72
SHA1 777ddf7d7a942985e996077ab65295fe45f42d5f
SHA512 199082fa956242f968967636a0b870247da491492f2f42d715f7f1b6a0c5551ac63b3c76ce204c3aeb504955acaf7a7d580b3abc001d8e14b592200e3f5ddae4
SSDEEP 768:32nW8ICQiDY8gyXURuYQC0Yvu3L4hIyOnoU8nqDtVkXaCLYvacIr2+vKM:GnWQFY8HURRrpCnFhED8vacIr26
TLSH
T17D13BE44D3AA827BF165182474A5098B06A02D3779D4CD8215DB386F338FF761CBADDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-dev.icns

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\icon-dev.icns
Size 343KB
SHA256 2114cdc18e8998c50be54e37c0681d7383daf4dc3ce879c30d92f030fa647989
MD5 4eefb3ef1a3e81d18edea0b2fbcd4e92
SHA1 fc2b7cb0a8da1199aa6fcee1a717bee0627ae116
SHA512 8a961850cdb3c8f8183eed766dd9d76036a69a7adc038523b53dc761ff4695655ab28bbdbb17ebf70806ef9f044ae89fb908cb38174e1a09605476f6703430a5
SSDEEP 6144:OTMxAUS6ZAw6F47QRhXvWPoTMxAUS6ZAw6F47QRhXvWPihB3YHnfTeIlhB3YHnfu:4iAVKSFxRhXvWeiAVKSFxRhXvWMIHn7v
TLSH
T1E074133909A1F0572C77B6F4AEE96B876D1F584807FA3AFFE8D45B1C8D14C289844AD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-dev.ico

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\icon-dev.ico
Size 264KB
SHA256 0562d2d17ece675a41b037d55b6f26f903ceee4d4620424c3d05e20ca50d92ec
MD5 b0ba09f992e913c587ed3dd8676c9e02
SHA1 9324c913e1d1f8ba475b58f75f6dfb3cafb75827
SHA512 4505898a8278c6e37a11fd6e5a0012b19c8c5b5e7db2f58afe5f76b35b1c5b9727cfa5998855f715bbacc8e199fac3c7b0d9f4e842f703afabf6fb15c30ed03e
SSDEEP 192:ogTI2TbG6GAY3Liiiiiiiiiiiiid3JpPzumweWnxPf65TdpACiiiiiiiPNjS3+aO:jTI2/G67CqumwFa6NYi0/JTHW7
TLSH
T1EF44739DAF0188A0F3D594FC53119A06D1679D20C3FB467EE4AF723B0739E63296468E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-dev.png

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\icon-dev.png
Size 41KB
SHA256 1609b0bc2743e334281f2438592be4e1c81288f069566cec83f32b97d2051ea5
MD5 0f1c49c880cdd2c6caae4443d7198891
SHA1 d1ad4364b45760df3ce87e17be45cce61f8eff8e
SHA512 2d2b3c58a55672dc961b5367fdda0897f9cc63238c2c617cd008ae03a70cded3bf45fe242b1c706cc5db01d29256880f7f0be84e4865979b7b4d396ce43f84b1
SSDEEP 768:9rpN7NhPf7HyXg4/2ZzKYKmztUvMLY3BLiBmFaz+axvtpUcnF47HqCpbLD:t/nSw4MBKmzthWiBhz+axvnUoXCN/
TLSH
T1CF13CE16C7A54037F9A0958879900BAB1AA86C77B876DE5864C7365F2353F322C38DF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.icns

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\icon.icns
Size 77KB
SHA256 2cc1f0b81c3f20ab80dd22391063fc3f80fba5a84167512f102ec58474b15b36
MD5 7ab2ff3fac068bd35451009e3aa1d1a6
SHA1 4d2b687cbd028c63789640e4902b1f9956cc6ec6
SHA512 b78c5be8f0809b20855b17c50416dd2a0df0cf80b618e1b63bb61e3fa840d052e3022ff4074c5ceb2c14e2e6c1ec81025f1ab8ce8bb5df8e74e50b04eb1027c0
SSDEEP 1536:dfI5qf/1Hxk9g85L/xHWdwszh/Y3jqq3qtBmIpPvjRT6ltRnD1rWjc+jPJQM0bUC:dw5AxxsRRpH1szh/iqbTmIpdWnD1ruDg
TLSH
T1D4730237C7D6564CEC078206B39728F90B11BF6D96F27A9953830A78F964120B5CDB43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\assets\icon.png
Size 41KB
SHA256 4cb616f18740f670b79282edb5d065e84ccc9df7c76a9299ba23041837e91b54
MD5 68719e075f0372ac17d50deb8ee675fa
SHA1 9a56b8078a681f517d1fcf300882ed5dcee932c7
SHA512 fb571dedb3c28f3f45d899431bb3cd8bb3261dd1e0c69e753eed9a43b829eca7eb9ae94925492dd5445bd6ee2cfb69313204e6c39d61510ee0c8278d514ce0e4
SSDEEP 768:l04aW8GMVQofvojtBcVETbxfPWVlejMcITfYsXLkCspSLgy15eqkFAFUxqEKoiv0:l04aL/8tH3xfPW7DKCspCeqkaFaic
TLSH
T17613E08A6C42DFB1EC8058B31CBB4B866720491E994983575B75C856B9EBBF31433B23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Programs\fnlb\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
TLSH
T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Programs\fnlb\snapshot_blob.bin
Size 360KB
SHA256 71985d35233bc9d298d333e1b2a9940b67f1cfd54abc1ba031667f189a044c15
MD5 5b981ca4f8c6665a0620ef2d409849ea
SHA1 dcaf2420c82fcd96a1ace0c1da8d1ea87be4943e
SHA512 fd1aef29035f71a29f45c181aa71ec0d786930d57b848d197fced03d1ce0f1fcfa9dfb4f8610b5c13e7b9a8282e77ec7ecb4307e2ba723954e8a63ba61746348
SSDEEP 3072:rlOt+xbRt251RnmDqKikZoQwcKWvt3E/mnqCqoW4k4DMwjZ9FTsADVYx3sXCOwf7:8t+Hw94Zoh+ncpI5TsADsqS7
TLSH
T14574FC46F15AC625CCE212384EEDCED83AB4F5CDDE4AC21B324047BDB4B96609F9258D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Programs\fnlb\v8_context_snapshot.bin
Size 724KB
SHA256 390aea732e1d72311c7993ccf5d6f3367ca1a56acfd71f1169e1f4eb680d8c56
MD5 c91ad04ceb04c2f9dfe20273f08c1654
SHA1 42bc4206941be3436460e42c67620da75e95ef20
SHA512 7a9b39df38c95b8d69b058007cc8bed7dc160298ed90efc76ad25258469c47c49a30fd393160480a3bbc143a0cb7426c169e2ac8063b8c2864eedd77f1212cd5
SSDEEP 6144:Gt+HwQVl/kJ+RLcl2W6tgrYVLrgV2wXrIr2ffnTsADsqSebb6vTB5d1wVQGdPO1G:TL8J4Lcl2W6tPsNXFydUZkOr
TLSH
T11BF4B3B6F50B8B31CA951B3D8EEB8E4B3A74F19DEE87C10B3151577C65B96A08E4240C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Programs\fnlb\vk_swiftshader.dll
Size 5.3MB
SHA256 2108602059eb529119ed7eaf89f5de96f96b1b22c805fc6c49482cdf77de0e60
MD5 549c5d210dfe92acdd9ef94c9c42f548
SHA1 a226a1bc4ad50bf2456a6bd91368fddb64476587
SHA512 a8c5f2bf13ab3092e8e6397bf1580586238c1f53881edf2604c6f8011140d1b8376f85b6c6eebd70d11c70ba2730f39ae896b532b29902501c48b080e8c6ebff
SSDEEP 49152:49bld3kgte4nPZnCN3VL4wzvBjPwnGAP/DcrxN4jepXrGLEuuJUw7KF38Q3Yod0P:49bl8i7kN1OTXI
TLSH
T1AF464903F68681D9C06DE6798B5FA623F671F8800B2276DF56A00F192E66FE0673D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Programs\fnlb\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Programs\fnlb\vulkan-1.dll
Size 917KB
SHA256 2de557a55b67211227f3bfb96a299c4096e446831300d05269c251f4da56e910
MD5 e6f6fb717766c9fb671c7beea852afc4
SHA1 fa785c2e8d1d9ba11c9fb516f3071afa5028a1a4
SHA512 22c6dde2a3014c3bcd82819573bc6fe25e2c53be014ddadd6f3d6bf74e148387c022b28758b90c69fb8d11dc84bf47c365c14466e57acf416bfe8e0f0041119a
SSDEEP 24576:V6sHcf38sq8YEkLUiMGXSEZlUE5tqtwKNlC1E+Dkw7+DQ6g3v0TAE7yoeHYx3:YsHcf38sqykoitlFnqiKNlC1E+Dkw7+T
TLSH
T17B156D63D7548AB9D676C034D9D18A0389F174812322BACF02B917147F6AFF46B7CB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_ssf2yimw.qih.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ssf2yimw.qih.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsg4695.tmp\7z-out\chrome_100_percent.pak
Size 702KB
SHA256 ab7c4b7b6cb8832a31d44b95ec50ce52294f49422a3bdde4e21968eca2930cbe
MD5 8bd180ba5ae087e7348c8e5d3fc747b9
SHA1 032e54936f0a96b9e008a77666e8739f6ff56341
SHA512 8f52ca1c25bbfacefdeb869ba8b2725a12269f5df40ae50744bcb7f4f68df6cf8ab6a6a63116969d07a9ca80caaadcd6b3542f056cf1317e55e7c1bfe8c2b28b
SSDEEP 12288:QI3HWfJwNjzgsz5B0GDJQrnKs8SNP+QSsEHeilSTe+gnzzmg/YJblIt6kjKQCrC:H32Bw7zEEmPLVbTe+gnzzmgwbc6kGQt
TLSH
T159E412E77370AC7DEEAB1677426614B0FC375A280B51060A17DAF8796923B48D8D93C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsg4695.tmp\7z-out\chrome_200_percent.pak
Size 1.2MB
SHA256 30fa4a6e27c9ff2fb0f939f01158477e621a67d86e9ecb84cf11b3947db8eb9d
MD5 62dc1994f062c83fce3944c829165007
SHA1 1ab2de2406114a4c4e32ca3dc4d6f8515cb4d6cd
SHA512 1d4b7acedaa54d376764ea1709750cb102b326fa4a993bad7b8ef4c4961950c52541dd79a8789709bfaa5aebbed0c6fe5a781866512c56da660ea7ed2c55befd
SSDEEP 24576:73WBS9n2zLmmibkFR8+mZiqr8BWhQumesXRvQtgIQwuSXAkpbaUGQ74:73P23mNbkFRJmQ+8khQRn1Q68uSXAk78
TLSH
T1754522D7D770AC3EDD520B77939B20E0FD7600271A61190F0B26BD7929276C8DA96B83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\Temp\nsg4695.tmp\7z-out\resources\assets\icon.ico
Size 11KB
SHA256 33350b7350e018895dd4c18172f300e68b9de1a83b20f31bcc53c484800f3783
MD5 12bb4550fdc005d92af236bed8fb58dc
SHA1 4672d9c88b7727547ce862625d111ef66b33c6e1
SHA512 db2f3c93eadebc1219e07f49c575da30189992290fcfcb29286bc4d3074d85aca92e5b65144db681dc26ba3b18a5966997fb04bc8f9e10f03549db1585c8ed94
SSDEEP 192:h6Oje/t5xfNAMjwlI45nm95oecorS0J5KSE/upiEBOyFx4amnS68wQcX:h+/dNAMjwljVg5olorjKSzBBOyjQSGQQ
TLSH
T14732C0F800FCD5A434C4FC744628E28C656357867F19AB3DA8E9A9D0BF142F6D597483
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsg4695.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsg4695.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nsg4695.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsg4695.tmp\nsExec.dll
Size 6KB
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsg4695.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000001

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000001
Size 40KB
SHA256 66b27c467eab3382db14bd06c9646e7ec6077c8ef9b06c815c1e24a0304f242d
MD5 5b84ecd73045a1b73e2cc8ae10344e68
SHA1 13ba74cc42ce674a8620d7f20dabd44cb32753e3
SHA512 be251c38364d290e357b6e99861a848a8d560978cf0113ed52761678f81df711cb9f3c61f3331079fde59a1f92aeca43093e54ce573c88662efa944f728231d2
SSDEEP 768:k8z8GV7KMz2+QQEJcz9GENqOW4izUwLxW3CYnILy0KFb/7L8AF5QLrhA:vZwMxIJcz9GBuwkCBLYVUAjWrhA
TLSH
T1381302FF344F1997DA6817AA54223E06AC84D3D1B7ECE7667205152AC361E2F1E43531
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000002
Size 167KB
SHA256 eb9944ddf4546a37b61b10f68fc66986a162d15fd84dcfa5e6b436163bcd5ad6
MD5 f1263d0b11cf05fce7acd15bcc858ca7
SHA1 37746ce6a118a45b53b888ffe5932c73653a8bdc
SHA512 cb216287701a49dd3021e4b2aea4be26c43158d0c866cb73b9f2f6bef290d44c1ff2f3f910b703e65c979cb9a2b53a679915b53d2fd2f8d9bca8d5258a663949
SSDEEP 3072:7ftthpsWlJq8lF0qwQIXUdzF8UQcibHi5AZad+7K9OkDkaQ3B0OgEVo1e9snJit1:7ftlsWTq8TdGUdzF8iiQd59OkglR0pE7
TLSH
T167F3232B6947CEE4FF4298B20F77E78B895D58B34B96FCE8258B7E53C12051630A510A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000003
Size 19KB
SHA256 2f5e10188e3a342c40c2ce8d854d08c050525db1a2dfab205854ce046aca2194
MD5 f4fb38e983535d5b4703ef03d882b3c3
SHA1 b8731a1a6819930338aa9df98bcadc6ee1fea5fc
SHA512 04cb6f9116360f8ee72c4a45f041e15da518d0d803d35a38dfd5eda78d6a03895de1b1b02efae11aa64e2ca75357aa83c2b7d48fde91cd802215459ab3ba79b3
SSDEEP 384:y7w4B3DrpAJuhOE3m2rp+rBZsJir1Ablbn5T0i:y7w4JDrpACtrp+lZssrMlbn5T0i
TLSH
T12292D0D0435BFA28BDA72305325A7288B5F34583F7412E8C4D3056723BD629C77562DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000004
Size 92KB
SHA256 6d0e73f2d15aa005d184bc34467911774f09d54db96be66a5d792746dbd41b4c
MD5 1f33ecf2431b32a7fa8cebcef2476a4d
SHA1 391c17c497ba1b9cb5abc38f68ac461623acb2cf
SHA512 58a63b485b49d441b50de6d5c1b1e1104c06fb5119c0d46f826d5e62f0ffd6b3e1b1ab278eefa87c4998951b3c8b710559be6b286343ad361a4e160b0d0799f3
SSDEEP 1536:YEANlj/M0zUj3A5U11q3aGl5zji6Y5Zh8EZHpd57BuZRkWZYGk9WhCaZ:LKryN1AXze35b8EZHFkYiP
TLSH
T13D9312480A4023FDA697F7AF15D0AC4DEB976FC0624DC6EA8A0E74DD674419D2CEB930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000005
Size 38KB
SHA256 7ec8974420cfba89588fdb877b043b57744ac2c9e7f7f5ada7f8ac4320262b31
MD5 ec4705f0010596b64bc1ebbb44de6259
SHA1 c62a719587ea379ab2a8824069e2b05f0745fd21
SHA512 357519bcbe561916e3b17aab0e6ce5279dc7e261cf878dc650b4945f2cc47cba8f99b7f958f37140c24b21ecae44594d5e1f14bc4ea2acb689a6a1d92ad024a4
SSDEEP 768:jhKKmwWaL4wVNVBZ0gIqDau/2lQ7z2ybdfjOIR1h3xzQ+Z:1KKhNVNau/0w6KdLO6lxE+Z
TLSH
T1E003F1D70DAF6F4EB861000754D8308BC0D9EAF0ADEA96DD593671061A4C51F7FC6748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000006
Size 16KB
SHA256 23d27248a61d867850ef958d005d438044f6d45c2817047c9246bb7ba4401cb3
MD5 682b76658379cda05319dfa70a250370
SHA1 a04c6fceb0a0a1c912d094d24fcce0b23a8b2b86
SHA512 c24fbda8051167f0d1b0d90e45fc07d284b6617ee112ec1c511f49f295c780ccf8dfd76ffd70d3b4980c028ae749a0b44e37a9759d435ac1668c4d775b647f2b
SSDEEP 384:gMuO7Vr/pHCTE9aj8cmMkND6+MzYmJFInihAIjDui:mSr/YTE9aj856DYmJFISh/b
TLSH
T1CA72E1AD1B2A1685EB1C0639FACCEFD87304DC19F43A40917067A7365AB4FC669D00E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000007
Size 78KB
SHA256 fa10e49495e38c15f980c2729411ecf2fe87e5b9551f42d54cef82215d1f8333
MD5 061ffb119ad5ac1c33c80d17bec55d9b
SHA1 02d87ee9ced19a5365cefcd902441c532955449e
SHA512 e3578c4e03b1c3dcdb6e22d5310ce2e709d91c29c26d3d7b138e9ac4eb15bd48661924d4d9d3468b0c6b1cc0241735dc901da737602fc1257d161b0b39fb3c7d
SSDEEP 1536:EY9xNVuFBwWeOtIRhJSwkx5Ye1dA9lI7YQdgu9bpqyD:EciB/6Rdt+7P+u2yD
TLSH
T129731217C0A62C357B6C3E5E8224422D62341590A098DF69BFF0E89D133EB5E79ACC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000008
Size 104KB
SHA256 8d4a5858bb7f72cb2166c6120fe59258595d8f2f9366376e898f38333d31eb12
MD5 163a7f60a7eebe6f06d0c6f6998e0247
SHA1 ac6ffc251d1d49dd870c2a82773241734a28d8c2
SHA512 8d738f085656aa43d3a8e1e44c256cdb14153f1a2f0580665834a1abedf4709469780d4b223e41f35a581f8a86b21d9143fbec63e05b97f544320080602ba73a
SSDEEP 3072:FGO9QCBJVFhoOI3wWNgYI7HugZB+OgCos7DY0of7:FGihBLFGT1N8OgZBqCDc0K7
TLSH
T111A312B0DB1C405FFFB1D9089D0A677A228DEA65FFF408B8AA6BD1475C898A0DD50B40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000009
Size 91KB
SHA256 aeca5afb9ea1c17b3c53388152c9774d346937e2d51788f0ccf1b2dc6ee7edee
MD5 a24ef7c90803e216315c496e955671d4
SHA1 f81fbcf91205409df72463ff3ff8a2bb1f2c556c
SHA512 44a02cce8742f4a39867bf9cbd036ede354940a1002e9b492ca673be308fc37931042e3d9c193ac8fb18d51806c27415c1602e54d1caa610c27bb4130adf535b
SSDEEP 1536:T3OED3+pukniquftm17dy0lBnSB3dfUXldlcR2fJn0TFdIEHBwpAY/P1lFsnL12R:T337+pukiopYAZSBdUXCaJ0hdDhS93Fd
TLSH
T1B0931226E25BB750FE33651892023CA73C5C6E20F79840F38D6C85E2797E966B643D2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_00000a
Size 39KB
SHA256 b641e2b7e8014072b7fb378648a492aa8fd249407ed9078385a4fa158216c2c2
MD5 533745ffb2c5f710801d01895e153a1f
SHA1 d5fbcd25d4a50d54e6b1475ed759bf71c31399e3
SHA512 351fb74dd7cae2db5af2bfbe49d7422fcce74763575c992a4590779eff64c5c586463383b80909b47d4b9f0324232ea07342b6bf7a30500592dc37c27561f99b
SSDEEP 768:e7Nc0K04joHTg3OVluVH5ousfosYKjLtlWzox9SZ:eFZA5oTbtwox9SZ
TLSH
T15A03C91F853C28E31BC156A67E6F9DE67938016A43058CEFCC99F82D01BE661122F9D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_00000b
Size 45KB
SHA256 64763cb5c43241133d7db4ad64f94d84c52852403c4232eaee643da4241f5c18
MD5 e17fee27d3e12a181358898a9b225540
SHA1 421f5affd785bb031fd8ca05ad4984f50adf8eb5
SHA512 f3b5dcb4b681ddaea32ca485fb1ccdec7c70fb2fc629774c10f2b120798f510f7220544dfcd111f928b7f098e7f4411421bdc0a43586b17c4359e90a78ae7d23
SSDEEP 768:R7/c0KA4jovIDTg3OVluVI5ousfosY0jLtlWzox9SyW/fHSg:RBYX5oTbtwox9S5fyg
TLSH
T1F423B71F853C24E31BC1569A7E6F5DE67A34016A03058CEFCC99F82D02BEA61126F9D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000012
Size 150KB
SHA256 230da3889205652536fa6661776bfd43030a27c0f7d827283a0954537cf2eb3f
MD5 a41cc36ae163f05271875b20905ba930
SHA1 f9ae4b7cc58b6808d60cf8ef5cb461ff37259773
SHA512 fa4ab869be19c15e77a93ea9980929de9f532f8d85d7406a4a1368e2ba2fd88e619f23b1d8cb2791d41ea1e6afbf1d3f10271114710e7a0013afb0fcd82a6a5b
SSDEEP 3072:+4j4gCVr8ZgauzvguKoUHC0+nAUyxtsxSX9HVdDxPUDBwd/fBum2:+m4gCzaEdKDf+AUUt6SdVpxsB0/wm2
TLSH
T199E312C0444F928DF8764E0994BC1FEA94F5D6865EC79643E36FB0A18C893E31E45ED8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000014
Size 198KB
SHA256 03a15357edd13913eb97beb875f012f2fd9398b2a591876ec84026c55d83c546
MD5 27001fd45c61c9b11501ada2b2a8c9ca
SHA1 44acba6b510c97dc9a0b6f5429118ab6d2fa31ca
SHA512 5773bcf001ade11c4a73428042ba1b4993ab3ff21465fec5ebf01bdaee686e8fbdb4ef069262fb701b59bfa60db04a3fc5a0124b27cb6e47d9e89fe89c6b11f1
SSDEEP 3072:jjF5jj0oLA4nfXs2msrQ1m7DnWB1X2ioCX+a/lqyjUI85y5cyIrUNbqLZ9tWcGpm:jjLIejmEQ1MWr2iTuiXUI8Qciqbt9G
TLSH
T19C1412FDF5F7852E0982DD495460011A2E3EAD2FCD65202B4663B1AD4E8E34B70CFE92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000015
Size 62KB
SHA256 67a313b46bed16c631b6fdb37b2e5603277700e3f517759657c717316e74950e
MD5 5b18edbfeaffbd2b42f4b6e0b71fba56
SHA1 2bd7b9345592a33fed8b3206518e335630c276b9
SHA512 12e3c09dff131cd47917c9a203722a8b6a07ce418ed16e44912f456a81659b99afe305a337dd3f4d4566b13e88f5dff0a593c5a08a08caf5b50cdd21149e07a1
SSDEEP 1536:eO6jGWtD0SFFmKyJ7iS1KtFKwTZGrKXLdlcgaDNanfmwA:eNCW50SzmKycK8sSZ57dl8EOwA
TLSH
T1835301A98161860BB2A2F4D4EE17B500E2666C5635DD78929EBFE4FE1310B3CECC8711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000016
Size 187KB
SHA256 315f63e0a6dd2c588b5a805035e07cfa536d54c127e4855cf98ac76b153a495d
MD5 2adfb086c8890b3b0dc1625213f68f49
SHA1 7029ebc58ec43c20c28ef54ae54b94ac495b278f
SHA512 f7e6034db8b57c09583c08d5ea03a7f56b43f1e3b3d39dba8e96ec6f9741bda9ebb004f1a5f71cda121ba8d7064244e3c0ca4fa804831c9288efc0f9a5bb859b
SSDEEP 3072:HgpXLETeGSgsHPlceGlwZaKKdYooWqUpVyqQOmQ791LtQQwfJETyFNyQt8X/moWC:ApXYOgsH+4aKOzpVye791peWmPVBIrbb
TLSH
T1181412704C148F7398E7C056B06659E47146481C86CEE3FFFB9BA65DD2890F98FBA091
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000017
Size 252KB
SHA256 8987ea174abe4ac4f078567561b05e42830872ffdb90428bd8a942a4f6349bcb
MD5 889d2fc54d14271979be004d748a102e
SHA1 24dc186d7b98f98ad53bf80e09ad6db6b4da55c0
SHA512 40687ffbb72109a66751c85f784bdc860981dd8df97cc78731324dc73c39669c247b8e9e18abfd485f7995c22d3263d1f050da5ed2ee419921271dca306a8ed5
SSDEEP 6144:i67oO4k5YjYnbV1ad2Vje+wTxmHiS7ij0g/0fuzx1U6S7J:rP5rx8d0jdwTxmP7Ct/0om
TLSH
T1A8442335EECC33CA1B20D759AFD1A46632170ED050A7B9CBF54A415DACCD92BA8355CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000018
Size 263KB
SHA256 e936d30250642029328670edeed039f958400851362a8f0c5fb67b131904a854
MD5 4be510798427b22affee6569f0e9945d
SHA1 8e8ba43f973b98c3bd83c909a989389d3a516c69
SHA512 62e945ec682e7c44ed3719d28065727089b6dad17b8f88ac4c19ecf8a6b73aa2a150b2c0d06aa2a2d8ba2d97952185fd9c07b1daa04fbcff6ed48c337d75a150
SSDEEP 6144:kUmwNH9y4Bk8B57lgxRVrBdq7xpv55T4wEv2MVIpb8:LLNH9/e8SRVLq7/cxbEb8
TLSH
T16D442335E055AE2E5572FB1BF3AE932A7415F31FB280545EBFC039E06DA921636C0292
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000019

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_000019
Size 162KB
SHA256 180a7a1bf50e42f278ca973c5c06e0e74369e1d25b73a5ad81735e853cd06263
MD5 4fe66d1cc40cfe83b6589680b5027c97
SHA1 a73249a92db424249749e9065af8a50fbdf04c70
SHA512 85de7a66195a22c232cee0e2580147d64e032c9d28c9b993eb375e0003efe559958487f1d4b0425c1acd7a2b540571472717776d6b95931a9717ed3e5344319c
SSDEEP 3072:YT7Z0ep80Nzd1WNbNGWvLpaEBigNE5hIvqbdlLYmCljKzVgMEV5ss+kuFrlQcYeB:YT7Z08801ubQWYEBi2whIibjypKjEfs5
TLSH
T1C2F312AAF3CD3888486DB8A10C43F760C6F1154B69E5B9B5F7E23353C2025B2199AF75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Roaming\fnlb\Cache\Cache_Data\f_00001a
Size 221KB
SHA256 25ee01783c51454f5c4ce78536f20da32b765364565065d711cf6ef9493bf540
MD5 8e29177459efa71b5ebb98df446da765
SHA1 c5073597ba7e4dc4282421f1eb04ff697f8cbd82
SHA512 de045f5bd72f8f614bb7d4bba47005d344e7206100877a91b7e84bf496fe08f21e76bc1eed73723ab31cd0cf24c0aa9033967b02908d288a54eee84fcab0b886
SSDEEP 6144:PfWk/V+u7/SnejXVHBsewSjqcH4AswyOPK08hU0xd8LWT+:nWk/Qu7/SejweNmDcPKBqLc+
TLSH
T19224236DA4A46D3021A3FD038A37968C4A465C3E1E83694C4B7AC97ADF04FBD7EC5E41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\fnlb\Code Cache\js\index-dir\temp-index
Size 576B
SHA256 836d00616eb216aa5ef285919895e1bea6b970142d77a3fcc482807ebe500daa
MD5 484f928c9768c61807fcdfe77edf8ec7
SHA1 542f76f27eca4aa46be6d98e5f546fa9c10b295b
SHA512 7a75535e7d3cef9266c73e1e8855550dd89403ffc2749c8a64132d06f6b446ba2a6e1a7bd7ae2eb714c4f7d830ce506bd7f2e2a32ed7279fd87b0189572ad0e6
TLSH
T1DEF022540CCD511CCF3A117691E27D626AB08C474269A703606D6CFEB8533C0EF65831
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\fnlb\Code Cache\js\index-dir\temp-index
Size 744B
SHA256 8b272f724ba02152978f1ed2d10bc5c22d689bb1bea3737d5283bae24bd76014
MD5 935546d8109e0133eb43c2d28350ce36
SHA1 8b733680a23f41067aa55a274e1fefd91c33a39a
SHA512 0ce8c7f3342162a6d0a54e3ed3259807f1d888d3bce5eea96acf36f83c67183584e4541d2d63a21745ba07510baa65854b543e160057e04205effececa71cd09
TLSH
T159018B2431E12D75CF3943345AE35D56B5A39446C1D68B079CC4507D1C923F0C975C70
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\fnlb\Code Cache\js\index-dir\temp-index
Size 792B
SHA256 2c1162c3edf0e815a3dfc652885e4fe25493f4e674cbb63c31fffb49bbbc4eb8
MD5 d6b0656e4352ac5d9fbbed163741c0b1
SHA1 50213177c56211f509b53b1a39dfe0ef47c9b810
SHA512 3bcf7889c55333a6429ce3475911dc39bbe427bbc015328c89761140a4aeceab1961e4a8a5f02d9bc29da993f6c894caa98719db650eca08df0c875633090489
TLSH
T1CA014C6431E21D75CF3543385AE35D56A5539486C1D59B035CC8507D6C923B1C575870
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\fnlb\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 071f18f0dfd653c743bd4100bcc38d2a87ab90b8421380507fd476204564f9ea
MD5 d02f6c759e94d4e6c4c07bdce7b5e6e1
SHA1 ccd0b3098ce9b9a9fce0fccd6a59f64c6edc0c7b
SHA512 f49efce602f036742b4c56af32f66845dcbf01f9989f91606b3ff32208fb00013ac8ded18d396fcaea0da02550a6d4f8dcb2386c1f7cdee4bf5e51bc67101a93
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\fnlb\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\fnlb\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 0799c964e6471924895cfd0e1b05486607835f358d42bcec3ac6b7cb7aa9ce41
MD5 6a18ab74f2328620d320c5dda129e4ee
SHA1 4e676f4fc5813cd483609ddc545ff2d48369d922
SHA512 dfef91554ba5fa70bcb2b8c8b1d70c5a63b7ad9bfcb7af93510737634f57fc4d97d733fa9b39b8872baee9e24efd6d6ab381811db118410b9eba3180b299094a
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\fnlb\GPUCache\index
Size 256KB
SHA256 6a81655f8c1c9070e7182eac8e2dd991e1a4e2b184a24ff5470e2ad55a29a938
MD5 456c113ccf128fdccd5c833c5d143f47
SHA1 1da0c62e0a49df1b8841ca8696b317092842b7b7
SHA512 22c8b7af987ef041b737c6d439762575510261308f9c2f0cef7e3d9deb216386ff002d75fc116f493a797aa843c2ebb70730297bb7cca9e057214ccf24f089bf
SSDEEP 3:LsOllllklkXlR/n//:LsUlPRP
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local Stateb2158f41-9ac1-4c26-86a9-02b51a77a3b3.tmp

Path C:\Users\Admin\AppData\Roaming\fnlb\Local Stateb2158f41-9ac1-4c26-86a9-02b51a77a3b3.tmp
Size 490B
SHA256 bddf3bc0293eae779992cc91dc131fb57f37652e4454c0e63a1a7256b36785d8
MD5 e6e7357fae98a72c0466dc41fd5448f4
SHA1 1c2bc79fb50ad0ccb03012bdbd58c56d3eea327b
SHA512 b6d2eec9f3b095ed38a8a3022c48139890e7668d4a8c8526221619e984caa0cc9ce5afdaf9bbf5a5f244b5bd85b05379327646b4c432f5f3fe319a35589a1d80
TLSH
T1AAF0D4F735516F2579D54785A56B75354D7717F7060656212ECE013306F3998420E930
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\fnlb\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\fnlb\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State3d79256c-8340-483c-a8dc-d27b7ac8db91.tmp

Path C:\Users\Admin\AppData\Roaming\fnlb\Network\Network Persistent State3d79256c-8340-483c-a8dc-d27b7ac8db91.tmp
Size 1KB
SHA256 93455e406fda98fc5b4fe94fb1cbdfb029a57a3374a301f074dab13e77d60f8d
MD5 37b020e864f3afe9f1f2b4cd63f3b88a
SHA1 a07f560ad32a07af0f1335799971f65812c0f3ca
SHA512 528401b07bf2bfa19154d452100057d187a74c6d1fbf2f6ba035359efbb9dd0da69b145d6decb687d5edaaaa2bf185acba2fdb1a1dc898295dfeb6b69ebb707a
TLSH
T191317EC6C6DC463E846627F75F31797BC1AE591C52283C03C9C9DF8E97D5032A65260E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State63605db6-ab54-4e43-a6c1-df7a71db3085.tmp

Path C:\Users\Admin\AppData\Roaming\fnlb\Network\Network Persistent State63605db6-ab54-4e43-a6c1-df7a71db3085.tmp
Size 2KB
SHA256 42139d1f33398e54d637355d72f660f71786c3a29b070b721d579556b2df64be
MD5 a6ced8eaa47ce92f2b8d3070d4a10d4f
SHA1 fdc01292a03fda8f3422f9e74b3680e2e146cccd
SHA512 9e9f3f7b2ec21b90b11f82ec9e746d4c8ea1156f686c63fa23c081db02859e6781501599a635b3e2f56c30e6fe920e61cfc537ab88992236a0786c41b8d09183
TLSH
T10A5168C6C6DC063D846227F65F21B57BC1AE5A5C52283C07CDC9DF8E57E5032A2A2A0D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State77fd61df-0154-4dcc-9c9c-7b4c818be5b4.tmp

Path C:\Users\Admin\AppData\Roaming\fnlb\Network\Network Persistent State77fd61df-0154-4dcc-9c9c-7b4c818be5b4.tmp
Size 1KB
SHA256 b1c77777956c4c341f9abf819323a3485c527f5fa96589ce04629c639a06a2e7
MD5 2d94e3c6c462b6aa5a0ca49940215940
SHA1 732b52024759f7c08fb059dfed1803c263764a67
SHA512 870fbac8bd37338904f82ddfa626fadafbb0782c7d0ad459836dbef054eaff7e9d1cff505cb8db5ebecc8c78c5a823924c096ed21660d6267dae866941df074f
TLSH
T19C3166C5C2EC067D856263F61B20F977C1BE550C52283C42CDC9EBCE97E1032A25270E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent Stateb87ab89a-58d8-4296-86cb-3f1351322f60.tmp

Path C:\Users\Admin\AppData\Roaming\fnlb\Network\Network Persistent Stateb87ab89a-58d8-4296-86cb-3f1351322f60.tmp
Size 1KB
SHA256 af738277aa659064434dfb6c2e1ecb5559dad6ecff72b4b3b3f5a94be8bee321
MD5 0850fe880a3c25e4effd28a2105e0786
SHA1 7a33647afa1f93129e0e60b80b30b1bb430015fd
SHA512 b5eae1b2ba5b3c30e2cf5a4c920e09ae8ce2b6ff96f744eafce1e2b0c606b161a9db996b9885c475f2eb0d3ca6353ad00539a811977ad6af3e577c93acdd20f8
TLSH
T1C93155C5C6EC063E856263F61B20F976C1BE551C52283C02CDC9EBCE97E1032966274E
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity721db705-e47a-42dd-87e3-8171d150f638.tmp

Path C:\Users\Admin\AppData\Roaming\fnlb\Network\TransportSecurity721db705-e47a-42dd-87e3-8171d150f638.tmp
Size 1KB
SHA256 b7c83f33f93e7d9ef0ca7cfba3e25e685b356eb6338b32d14cb36fc4e011e438
MD5 48791acd216ca34409fbb017b7eca4ce
SHA1 c9a103aba2b23539bb81793e3b778a2f41da06f3
SHA512 4ed579df75f550e87922712b697a4f2899062587e70da8a988498e8a0ba5c36d5088d12a3d16991a2b2a49e9e4b4a01ed998128a6819c16d799fecd6ca4aa02e
TLSH
T1922187D7C6BEB837403A89B70E547D056CBAB476024364F5EEABC23CA0964F7A642052
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity9159e1b3-7d34-4250-92ef-910f869d3427.tmp

Path C:\Users\Admin\AppData\Roaming\fnlb\Network\TransportSecurity9159e1b3-7d34-4250-92ef-910f869d3427.tmp
Size 1KB
SHA256 49eec7b8e9d6f104d81e28623a03e8bcb928e5a9d2be0715228809504ed5c378
MD5 3ec1d19bfec29d659fe1256604511104
SHA1 84c7e23c7c7c2b06e70e0c3bbc8f250766f4138e
SHA512 a210323aef9d04f5074179a7dfbe30fe646ce1d2edba8b1c12bafac47cbd1fb057f944e082cb3204362c5a2517991e9ce7a05cfe66d451fed15bde1932b3ee7b
TLSH
T1F521ACD7C6BEB833403E89770D647D056D7AB476014360F8DEA7C23CB0914B7A642052
MD5 SHA1 SHA512 TLSH

Submit Download

Preferencesec9d416d-7d3d-4277-9472-37661f97e2e8.tmp

Path C:\Users\Admin\AppData\Roaming\fnlb\Preferencesec9d416d-7d3d-4277-9472-37661f97e2e8.tmp
Size 121B
SHA256 89670687ddb870b856b674402696e3177a0196e01e16e9236a69e35990c81b69
MD5 a9a4ef015c6e7b79986d48813f436022
SHA1 f547f42e32a055fcd349613e270671856d73b85c
SHA512 1d14f4fa53a918c7db60878ee4357c49f58efef3610046856aeb960a324c462f18300ae640add68f8a2f5618d95130199c39f7960ad25ef5f1ad1880d416ba29
TLSH
T159B02B52343034724D0F1E21000D781904B1002149070C4341C4314D0913A0D0483009
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\fnlb\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

00000000

Path C:\Users\Admin\AppData\Roaming\fnlb\WebStorage\1\FileSystem\t\00\00000000
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

main.log

Path C:\Users\Admin\AppData\Roaming\fnlb\logs\main.log
Size 504B
SHA256 d7d37da9c1fc78d8b8cbf2d0002fb383a7b711f4a174ee43e7fef98d9e914025
MD5 1734c1ebde149c98655ad92baab07f25
SHA1 1ceedfe1edf29cf5931915a8f267fe81a7fc3a3f
SHA512 535442cba07167a537af56370479c60ae066fe6d83c15ff3ba2223caac9bb54cb0ef0f64194dfa5ef55301cac472adad09d2bc094c898f534f5ba8b5cc35b371
TLSH
T131F054310AC6E1BB11150239A6F55C5D1911AEAE0E959D7DD73AC808B141C32EAE3450
MD5 SHA1 SHA512 TLSH

Submit Download

main.log

Path C:\Users\Admin\AppData\Roaming\fnlb\logs\main.log
Size 778B
SHA256 152726ccc02018dfe4512fadf71b01d7afcb0da7a382ed221e230e5ccf23308b
MD5 5f0f815ceb01692546221eb395b9ccea
SHA1 fc1e7c8a46e2b45bee7c4b35eefaabe6fc29cf08
SHA512 68f3d89c419f1ce2a5cd682398d17603250b6395dcb55aab7bd3e3d70aa3235e4172e80aa1a7f7a6302175d0716ff3a154f43ae9fe0d0f94d4d6be02dfdb8b27
TLSH
T15C01F9310985E1FB0211022CE6F66D5D2641ADFB0EB59DBAA739C8086556C32D9E3C91
MD5 SHA1 SHA512 TLSH

Submit Download

FNLB-Setup.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\FNLB-Setup.exe:Zone.Identifier
Size 134B
SHA256 17875c7fea232604506c946dcbbbb60d8f2fca893bd573f919d681b531460b7f
MD5 084a70480de51e6a9e8fc59605ce7795
SHA1 ecd15cc6cee7f0c005ae54075455b1924a9d0df1
SHA512 8030b8485fe1b27f28a54d17cd7ee6483a7f0c0fc656da4a4c93d165dcf921df1b43c11adf1ab7bee33475052ef276f681d44ab5a7c8250579747ba6c3af4241
TLSH
T1AFC02BA3440842A413001ED715EAC1DC5007E4000C704240C580C08388CD09583CD017
MD5 SHA1 SHA512 TLSH

Submit Download

Unconfirmed 909328.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 909328.crdownload
Size 93.7MB
SHA256 19bdd3d73e27529b7282a98f20eb1524937df960dd55953e477da3e5b48fa64e
MD5 8bcbfdb17e29cb0e0f4c957d0157af83
SHA1 b02b80d9eaf3e0ba4d5791cc9b32b6462e1c7f45
SHA512 fd77dc4422cd98b8f80af1fcba6bcc979e8b0958790f51b281bc7c1e8920abdf1f55a6f2790eebb2fc124099a5eb5efe8123dc3269088708f8826961b8170bdc
SSDEEP 786432:aMKVpL0NlvnOMVDLz9/W6PD3m6klrs9wbyf:aMKVSNV3z9/rmJAwb
TLSH
T147286D43A2E751D8F0BBC23596DA5333E532BC454B3169EF21544B312F72AE0AB7AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/824-1673-0x0000024F7FBA0000-0x0000024F7FBD1000-memory.dmp

Download

memory/1348-2067-0x0000018280080000-0x00000182800A2000-memory.dmp

Download

memory/1348-2066-0x00000182801B0000-0x0000018280258000-memory.dmp

Download

memory/1348-2063-0x0000018280010000-0x000001828001A000-memory.dmp

Download

memory/1348-2068-0x00000182800E0000-0x00000182800F4000-memory.dmp

Download

memory/1348-2064-0x0000018280040000-0x0000018280048000-memory.dmp

Download

memory/1348-2062-0x0000018265DE0000-0x0000018265E0C000-memory.dmp

Download

memory/3008-1667-0x0000018BEE940000-0x0000018BEE971000-memory.dmp

Download

memory/3348-433-0x0000000070970000-0x0000000070CC7000-memory.dmp

Download

memory/3348-424-0x00000000059C0000-0x0000000005D17000-memory.dmp

Download

memory/3348-426-0x0000000070810000-0x000000007085C000-memory.dmp

Download

memory/3464-1616-0x0000012F45C50000-0x0000012F45C81000-memory.dmp

Download

memory/3888-386-0x00000000070D0000-0x00000000070EA000-memory.dmp

Download

memory/3888-388-0x00000000072E0000-0x000000000730A000-memory.dmp

Download

memory/3888-374-0x0000000005D30000-0x0000000005D7C000-memory.dmp

Download

memory/3888-372-0x00000000057F0000-0x0000000005B47000-memory.dmp

Download

memory/3888-365-0x0000000005780000-0x00000000057E6000-memory.dmp

Download

memory/3888-361-0x0000000004840000-0x0000000004876000-memory.dmp

Download

memory/3888-375-0x00000000062E0000-0x0000000006314000-memory.dmp

Download

memory/3888-364-0x0000000005710000-0x0000000005776000-memory.dmp

Download

memory/3888-362-0x0000000004FB0000-0x00000000055DA000-memory.dmp

Download

memory/3888-376-0x0000000070810000-0x000000007085C000-memory.dmp

Download

memory/3888-383-0x0000000006320000-0x000000000633E000-memory.dmp

Download

memory/3888-384-0x0000000006F80000-0x0000000007024000-memory.dmp

Download

memory/3888-385-0x0000000007710000-0x0000000007D8A000-memory.dmp

Download

memory/3888-363-0x0000000004F60000-0x0000000004F82000-memory.dmp

Download

memory/3888-387-0x0000000007150000-0x000000000715A000-memory.dmp

Download

memory/3888-373-0x0000000005D00000-0x0000000005D1E000-memory.dmp

Download

memory/3888-390-0x0000000070A00000-0x0000000070D57000-memory.dmp

Download

memory/3888-389-0x0000000007310000-0x0000000007334000-memory.dmp

Download

memory/4412-405-0x0000000070810000-0x000000007085C000-memory.dmp

Download

memory/4412-412-0x0000000007770000-0x0000000007806000-memory.dmp

Download

memory/4412-413-0x00000000076A0000-0x00000000076B1000-memory.dmp

Download

memory/4412-403-0x0000000005BD0000-0x0000000005F27000-memory.dmp

Download

memory/4624-1449-0x000002F7D8CB0000-0x000002F7D920C000-memory.dmp

Download

memory/4624-1425-0x000002F7D8CB0000-0x000002F7D920C000-memory.dmp

Download

memory/4736-1426-0x00000196F7340000-0x00000196F7371000-memory.dmp

Download

memory/4736-1255-0x00007FF9039A0000-0x00007FF9039A1000-memory.dmp

Download

memory/4736-1248-0x00007FF9043B0000-0x00007FF9043B1000-memory.dmp

Download

memory/5516-1411-0x0000012662AA0000-0x0000012662AD1000-memory.dmp

Download

memory/5624-1666-0x000002CB85240000-0x000002CB86AD8000-memory.dmp

Download

memory/5624-1806-0x000002CB85240000-0x000002CB86AD8000-memory.dmp

Download

memory/5624-1693-0x000002CB85240000-0x000002CB86AD8000-memory.dmp

Download

memory/5904-1794-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download

memory/5904-1789-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download

memory/5904-1788-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download

memory/5904-1787-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download

memory/5904-1799-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download

memory/5904-1800-0x00000284E88B0000-0x00000284EA148000-memory.dmp

Download

memory/5904-1798-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download

memory/5904-1795-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download

memory/5904-1793-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download

memory/5904-1796-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download

memory/5904-1797-0x00000284E5DB0000-0x00000284E5DB1000-memory.dmp

Download