Overview
overview
7Static
static
5Feather La...13.exe
windows11-21h2-x64
7$PLUGINSDI...er.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...64.exe
windows11-21h2-x64
4$PLUGINSDI...ll.dll
windows11-21h2-x64
3Feather Launcher.exe
windows11-21h2-x64
7LICENSES.c...m.html
windows11-21h2-x64
3d3dcompiler_47.dll
windows11-21h2-x64
1dxcompiler.dll
windows11-21h2-x64
1dxil.dll
windows11-21h2-x64
1ffmpeg.dll
windows11-21h2-x64
1libEGL.dll
windows11-21h2-x64
1libGLESv2.dll
windows11-21h2-x64
1resources/...up.exe
windows11-21h2-x64
1resources/...app.js
windows11-21h2-x64
3resources/elevate.exe
windows11-21h2-x64
3vk_swiftshader.dll
windows11-21h2-x64
1vulkan-1.dll
windows11-21h2-x64
1$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...7z.dll
windows11-21h2-x64
3$R0/Uninst...er.exe
windows11-21h2-x64
7$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3Analysis
- user interaction
yes - max time kernel
300s - max time network
310s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
13/11/2026, 21:45
Static task
static1
Behavioral task
behavioral1
Sample
Feather Launcher Setup 2.6.13.exe
Resource
win11-20260911-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win11-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/VC_redist.x64.exe
Resource
win11-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260911-en
Behavioral task
behavioral7
Sample
Feather Launcher.exe
Resource
win11-20260911-en
Behavioral task
behavioral8
Sample
LICENSES.chromium.html
Resource
win11-20260911-en
Behavioral task
behavioral9
Sample
d3dcompiler_47.dll
Resource
win11-20260911-en
Behavioral task
behavioral10
Sample
dxcompiler.dll
Resource
win11-20260911-en
Behavioral task
behavioral11
Sample
dxil.dll
Resource
win11-20260911-en
Behavioral task
behavioral12
Sample
ffmpeg.dll
Resource
win11-20260911-en
Behavioral task
behavioral13
Sample
libEGL.dll
Resource
win11-20260911-en
Behavioral task
behavioral14
Sample
libGLESv2.dll
Resource
win11-20260911-en
Behavioral task
behavioral15
Sample
resources/app.asar.unpacked/dist/native/cleanup.exe
Resource
win11-20260911-en
Behavioral task
behavioral16
Sample
resources/default_app.js
Resource
win11-20260911-en
Behavioral task
behavioral17
Sample
resources/elevate.exe
Resource
win11-20260911-en
Behavioral task
behavioral18
Sample
vk_swiftshader.dll
Resource
win11-20260911-en
Behavioral task
behavioral19
Sample
vulkan-1.dll
Resource
win11-20260911-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260911-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20260911-en
Behavioral task
behavioral22
Sample
$R0/Uninstall Feather Launcher.exe
Resource
win11-20260911-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260911-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260911-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260911-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260911-en
General
- Target Feather Launcher Setup 2.6.13.exe
- Size 122.6MB
- Sample261113-1madxsf14p
- SHA256 28fe94c0d6135dd9d45e0b370265d68804688167bada7ed072acb33b5b08e7db
- MD5 2f25ed52765463d37dfe6c377eace83a
- SHA1 0d50a8deb13d45434fa90b353e9ec2985a00094c
- SHA512 e1fe9e450534a05c5d9a12134c705d9329aa913919de67514a78e72e5b87ea41d9cad5c975dda7a3556663ee730ebbb9df49702df76ed52c0d8d15c4a70c64b1
- SSDEEP 3145728:qxXHEl9/DEVVXQ9GGkICa69V6EgsmlzBbAyd3PeaE:BFEbXQ9G/IH69VOPeaE
- TLSH T11758332414E9DA1BE611F9F49B64D748C7F4AFE504BA10276F3E79A4C03EB437A9D022
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 16 IoCs
pid Process 3976 Feather Launcher.exe 4536 Feather Launcher.exe 3096 Feather Launcher.exe 2400 Feather Launcher.exe 3708 Feather Launcher.exe 3036 Feather Launcher.exe 1496 Feather Launcher.exe 916 Feather Launcher.exe 1456 Feather Launcher.exe 3752 Feather Launcher.exe 4460 Feather Launcher.exe 3116 Feather Launcher.exe 420 Feather Launcher.exe 664 Feather Launcher.exe 5068 Feather Launcher.exe 4024 Feather Launcher.exe - Loads dropped DLL 26 IoCs
pid Process 1408 Feather Launcher Setup 2.6.13.exe 1408 Feather Launcher Setup 2.6.13.exe 1408 Feather Launcher Setup 2.6.13.exe 1408 Feather Launcher Setup 2.6.13.exe 1408 Feather Launcher Setup 2.6.13.exe 1408 Feather Launcher Setup 2.6.13.exe 1408 Feather Launcher Setup 2.6.13.exe 4536 Feather Launcher.exe 4536 Feather Launcher.exe 4536 Feather Launcher.exe 4536 Feather Launcher.exe 4536 Feather Launcher.exe 4536 Feather Launcher.exe 2400 Feather Launcher.exe 2400 Feather Launcher.exe 1496 Feather Launcher.exe 916 Feather Launcher.exe 3752 Feather Launcher.exe 1456 Feather Launcher.exe 4460 Feather Launcher.exe 4460 Feather Launcher.exe 4460 Feather Launcher.exe 3116 Feather Launcher.exe 420 Feather Launcher.exe 664 Feather Launcher.exe 5068 Feather Launcher.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Discovers running processes 1 TTPs 1 IoCs
Running process information can be used to identify security tools or plan follow-on actions.
pid Process 2736 tasklist.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 5032 cmd.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname Feather Launcher.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain Feather Launcher.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname Feather Launcher.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain Feather Launcher.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname Feather Launcher.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain Feather Launcher.exe - System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language find.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language tasklist.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Feather Launcher Setup 2.6.13.exe - Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4" Feather Launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" Feather Launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads" Feather Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0 Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\MRUListEx = 00000000ffffffff Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0 = 50003100000000002b5d8a9b100041646d696e003c0009000400efbe2b5d1c8f6d5d8bae2e00000037570200000001000000000000000000000000000000eed91a00410064006d0069006e00000014000000 Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 Feather Launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}" Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257" Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\0\0 = 56003100000000006d5dc0ae10004e6574776f726b00400009000400efbe6d5d95ae6d5de2ae2e0000008fb3020000001a000000000000000000000000000000ef0618014e006500740077006f0072006b00000016000000 Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" Feather Launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}" Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3 Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000 Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\NodeSlot = "2" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1" Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0 Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1" Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\MRUListEx = 00000000ffffffff Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\0\0\NodeSlot = "4" Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0 = 56003100000000002b5d1c8f12004170704461746100400009000400efbe2b5d1c8f6d5d8bae2e00000042570200000001000000000000000000000000000000e7e264004100700070004400610074006100000016000000 Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16" Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 = 19002f433a5c000000000000000000000000000000000000000000 Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\0\MRUListEx = ffffffff Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU Feather Launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Generic" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1" Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\0\MRUListEx = 00000000ffffffff Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\0\0\MRUListEx = ffffffff Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4 Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff Feather Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\MRUListEx = ffffffff Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\0 Feather Launcher.exe Set value (int) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\0\NodeSlot = "3" Feather Launcher.exe Key created \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg Feather Launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" Feather Launcher.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1408 Feather Launcher Setup 2.6.13.exe 1408 Feather Launcher Setup 2.6.13.exe 2736 tasklist.exe 2736 tasklist.exe 4460 Feather Launcher.exe 4460 Feather Launcher.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3976 Feather Launcher.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 2736 tasklist.exe Token: SeSecurityPrivilege 1408 Feather Launcher Setup 2.6.13.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe Token: SeShutdownPrivilege 3976 Feather Launcher.exe Token: SeCreatePagefilePrivilege 3976 Feather Launcher.exe - Suspicious use of SetWindowsHookEx 21 IoCs
pid Process 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe 3976 Feather Launcher.exe - Suspicious use of WriteProcessMemory 28 IoCs
description pid Process procid_target PID 1408 wrote to memory of 5032 1408 Feather Launcher Setup 2.6.13.exe 80 PID 5032 wrote to memory of 2736 5032 cmd.exe 82 PID 5032 wrote to memory of 2260 5032 cmd.exe 83 PID 3976 wrote to memory of 4536 3976 Feather Launcher.exe 87 PID 3976 wrote to memory of 4536 3976 Feather Launcher.exe 87 PID 3976 wrote to memory of 3096 3976 Feather Launcher.exe 88 PID 3976 wrote to memory of 2400 3976 Feather Launcher.exe 89 PID 2400 wrote to memory of 3708 2400 Feather Launcher.exe 90 PID 2400 wrote to memory of 3036 2400 Feather Launcher.exe 91 PID 3976 wrote to memory of 1496 3976 Feather Launcher.exe 92 PID 3976 wrote to memory of 1496 3976 Feather Launcher.exe 92 PID 3976 wrote to memory of 916 3976 Feather Launcher.exe 93 PID 3976 wrote to memory of 916 3976 Feather Launcher.exe 93 PID 3976 wrote to memory of 1456 3976 Feather Launcher.exe 95 PID 3976 wrote to memory of 1456 3976 Feather Launcher.exe 95 PID 3976 wrote to memory of 3752 3976 Feather Launcher.exe 94 PID 3976 wrote to memory of 3752 3976 Feather Launcher.exe 94 PID 3976 wrote to memory of 4460 3976 Feather Launcher.exe 96 PID 3976 wrote to memory of 3116 3976 Feather Launcher.exe 97 PID 3976 wrote to memory of 3116 3976 Feather Launcher.exe 97 PID 3976 wrote to memory of 420 3976 Feather Launcher.exe 98 PID 3976 wrote to memory of 420 3976 Feather Launcher.exe 98 PID 3976 wrote to memory of 664 3976 Feather Launcher.exe 99 PID 3976 wrote to memory of 664 3976 Feather Launcher.exe 99 PID 3976 wrote to memory of 5068 3976 Feather Launcher.exe 100 PID 3976 wrote to memory of 5068 3976 Feather Launcher.exe 100 PID 3976 wrote to memory of 4024 3976 Feather Launcher.exe 104 PID 3976 wrote to memory of 4024 3976 Feather Launcher.exe 104
Processes
-
C:\Users\Admin\AppData\Local\Temp\Feather Launcher Setup 2.6.13.exe"C:\Users\Admin\AppData\Local\Temp\Feather Launcher Setup 2.6.13.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1408 -
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Feather Launcher.exe" /FO csv | "C:\Windows\system32\find.exe" "Feather Launcher.exe"2⤵
- Executes a command shell one-liner
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5032 -
C:\Windows\SysWOW64\tasklist.exetasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Feather Launcher.exe" /FO csv3⤵
- Discovers running processes
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2736
-
-
C:\Windows\SysWOW64\find.exe"C:\Windows\system32\find.exe" "Feather Launcher.exe"3⤵
- System Location Discovery: System Language Discovery
PID:2260
-
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"1⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3976 -
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1660 /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4536
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1840 /prefetch:112⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:3096
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar" --no-sandbox --no-zygote --disable-blink-features=GetDisplayMedia --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1794606208647580 --launch-time-ticks=551979555 --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3136 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:2400 -
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar\dist\electron-launcher\preload\preload-mod-watcher-fork.js3⤵
- Executes dropped EXE
PID:3708
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar\dist\electron-launcher\preload\player-server-addon\player-server-addon-path-watcher-fork-process.js3⤵
- Executes dropped EXE
PID:3036
-
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1794606208647580 --launch-time-ticks=562349741 --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3124 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1496
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --time-ticks-at-unix-epoch=-1794606208647580 --launch-time-ticks=562350317 --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3220 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:916
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --time-ticks-at-unix-epoch=-1794606208647580 --launch-time-ticks=562350144 --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3200 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3752
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1794606208647580 --launch-time-ticks=562397974 --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3264 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1456
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4484 /prefetch:102⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:4460
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --time-ticks-at-unix-epoch=-1794606208647580 --launch-time-ticks=717640529 --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3836 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3116
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --time-ticks-at-unix-epoch=-1794606208647580 --launch-time-ticks=717652789 --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3848 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:420
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --time-ticks-at-unix-epoch=-1794606208647580 --launch-time-ticks=717683963 --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5232 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:664
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --time-ticks-at-unix-epoch=-1794606208647580 --launch-time-ticks=717754442 --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=3940 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5068
-
-
C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe"C:\Users\Admin\AppData\Local\Programs\feather\Feather Launcher.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --field-trial-handle=1664,i,8510785754800946767,6050075389155865034,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5996 /prefetch:122⤵
- Executes dropped EXE
PID:4024
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5060
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Programs\feather\LICENSE.electron.txt
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
- MD5 4d42118d35941e0f664dddbd83f633c5
- SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
- SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
- TLSH T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\LICENSES.chromium.html
- Size 15.2MB
- SHA256 906d201edf135559c06f326eec1ec2eaf3fdbef9f669031c716ba404f34657b7
- MD5 b067767a9f096881ffe44ba00ee92ffa
- SHA1 2567080e59fd99eee569efbb2497895dfec9484e
- SHA512 7b7579b1053b5820cdfaf0dc1d9fac0856ffd18b1796b2f6b9e4bc2171b112f9debcdecbda67672caca745491a4f3c8d0cd7fc6c97403c4bd2ca6f6e9246c754
- SSDEEP 49152:/NQKqPgOqRpTYp2kGYCTNr8xd2zJQf8xF6D7gQdGxs:C
- TLSH T12DF6B56BBB49037316F242626B4BA5CAF31EA03F375A1654309CC15C1B7B92483FB69D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\chrome_200_percent.pak
- Size 182KB
- SHA256 6593ba8ece63001a3fb77bd1d872566edeb26213a1be8e852dd956f6d0e2c93e
- MD5 ed7b4e5eb15a086ce7e117a3228e3f15
- SHA1 bb6debc27ed4e2f20149a17e36a24ef4482a96a7
- SHA512 7278e0acdd8a1806bbdfd147d5439f7f849fbf95f1be1ffb741ea84cecad2557469e99f91cca66ce36349a9aa55d0107e34b9499b8fcb3e7fb3a8bbf84c1e911
- SSDEEP 3072:CJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPoLjQBHe7YAP10uxR/TbIM0:7GQ+N6uSZQDQYakvyAkcjQBQNd4
- TLSH T1EB04F1D723B8AD3DD9570B73926610E0FE7A20291EB3110A5A9FD8397925E8CD9CD343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 fe86899dadd7cf158ce8dd1105c4d2d5c8adf5eac18928ba4e847da7596a1400
- MD5 ec36d8978bd65b8395fcd466af62523d
- SHA1 268f3f71da909f3a5336dadd8a971f857ae94c7f
- SHA512 9b7cc7669ad27d0a3cd796c403b0b46ada08a34f10abc5dbf23f44864d1ce2e30113a7f486fc9e7c0abfa62a2387c636c391113dbd49ce4367afa060341988b1
- SSDEEP 49152:d6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLv7mbpJ3M/J:dUdeqt737jFmFwB
- TLSH T1A0268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\dxcompiler.dll
- Size 24.4MB
- SHA256 f997358321c35776ffe273dd4316cd70b402282125f996f01554842b5fc7ad45
- MD5 376e0cb32a4be0723bbe2cefc0cb2dde
- SHA1 6fdf3d7df0b527fdbdec626b5c02330d6d1e2d31
- SHA512 14814035a6ca9503046e5d8d5bda1f4bba0fb734568c33be846628a82c5ce3d254a614122d02b7b68dbc2f3c4e42fbab3e1c8ee723dae309c46c5b997afdc617
- SSDEEP 196608:7SaXVggEbtjr5DjzsEJ3paT6PuydwHHRqw3rrpaxlFaMY5K4sdPq5:OaXmgEbtj9DjoEJ3gT6GyiHAw4HMZsA
- TLSH T1B7472A122646D49CC099C879C7678B268A2C30E73F67B9EFC0F451252B79EBC5B39235
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\dxil.dll
- Size 1.4MB
- SHA256 179ab53c75008d91d71bee43fd3ca697d5b5a9f08795146818e6dab62ac86394
- MD5 6ffe5f1ba23ef80a8e231bb376ac7d35
- SHA1 be28eb4571dac13a40d01f8be003f1da2c3fd518
- SHA512 e58ba8ad024860ece59b4f8830cebd9bba92f5436bd63a86f7ba1b79ded163a6c876d7eb02bc067f5b110e4c161379bd672ed0fecd4c1a552e148021db6f309d
- SSDEEP 24576:dcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/Q:dsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bd
- TLSH T183656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\ffmpeg.dll
- Size 2.9MB
- SHA256 4c154f87225445e0ec05d173624f56aeffb8076b0e43b3cf25f99a3cc3b85726
- MD5 b441270143147e76b48c0d2f443a4a65
- SHA1 a46460f97bd263eb2300acb7a7d3ec40bfef1ea2
- SHA512 e158f6b6181d83de51befd329d01f00ad7e22a8042a023a0124574717a26608d02fc356ecaed619d65c44c2135c8cf3683f6a6a97c03bc44eb3b86eb93b296ce
- SSDEEP 49152:SbWcG+wH1tqJ58lI2T6lHZIqKZfcoUrP199akLKIb+7k6yoepijzNoJl7OTma80j:S6cG+wH+ANGlHCqQ0oUrBoDNoJ+2
- TLSH T18BE59E02F6D651EDD019C03497AB9313F631380A4F205AEB16905A263F6BFD87E7E768
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\icudtl.dat
- Size 10.3MB
- SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
- MD5 5bfd3eefca4b5ef2d1a869396390a7de
- SHA1 c58567f7fe308ccd43f406b70aa8bf6fdbea4f3a
- SHA512 4489a55fa0b47c8d1e9679032e036c7998f82efb4191b98900ae40cfc30a26b65290867527161c594c42fe7999b2314f8928a5d717d65d4eeedd4fdb0ed0f427
- SSDEEP 196608:A6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0G:AqwKLBHiXUxa/iJ53IWhls2E6G
- TLSH T118B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\libEGL.dll
- Size 498KB
- SHA256 d6392352338083d1c34d921841a863694a75098dabd73894e56ca1eff03851a6
- MD5 767eb70def1cc5ddfe461a187c8adb6d
- SHA1 f0a72492c49625393b516a9530184b37712377cd
- SHA512 7acebd8fd069782f915eee65f22e8898128547b5565fd0c7b7a6f9e424b7de306ad813a4cb356c29e55b44f6cd9b3e85dc3503d3e9a333430d255b5158093413
- SSDEEP 6144:wDV+QE9iLeypMKxz9sKyoulRz5NyhuM4vvj8FvgcdsWnVheSR32OCPh:sYAMOy7xyhuj8FvgcdsWnVhJlCZ
- TLSH T140B48D15F7E94AA8D07AD0388A538643EB7174550F65B9EF02E052392F3BBF45A3E324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\libGLESv2.dll
- Size 7.6MB
- SHA256 216ac98dd8fdf6d6246928b9fff8c75f7de2119862f78b26e3fa5b3e615c30ee
- MD5 fae52a0e40d73f9bb62199f2db33be3d
- SHA1 a44d04101db55d328acef161464004724c739a32
- SHA512 51bfc8f94590ec2c3dd94d97c74efa5a70d924639f753146141287da269451be7dd813e39a66fa11004cad9992a8c820df27c8034163d8da968076a9b04b08f8
- SSDEEP 98304:SAuS6hkALz58COM0aBxyDdUzWfNmKug1efxD7BAf:tuSSt58kx/zzJh1k
- TLSH T1AA866A03FA9641D9C05DE274876BA223FA74B8450724B7CF2A6453162F66FE0EB3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\af.pak
- Size 582KB
- SHA256 f500ba115f773738d84feb12a909f8e9509f94b1d45bc86ff6eefdca6c7f1fa7
- MD5 f1978bab9ca51bb7ca7c6bd7b240bbb1
- SHA1 bec1cfc82a629ab6944a8015ec0fbc9326cae292
- SHA512 422a06b47838df8689c0caf52d1592fc194f28cb6b2bbba83e7d65fa92048f66b309f19afb7fe2874cb300dea482c6a0a788f2fb5cb9c56e7ca95db41abcd9b0
- SSDEEP 12288:CQbZNFR7xgtRGtlo/znPwlNBEKLF3GO3KL4H2JynPN+DgTALXkno0v/AImgD249D:DZrR7utRGtlo/bPwlNBEKLF3JKL4H2Je
- TLSH T15EC40B0BEB81173D09A07696FB0845B7FB5DA26CC770B2B6DDA982310566EFC11BD0D8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\am.pak
- Size 946KB
- SHA256 4b2dcc369fb50860cc87929488aa9b6e35d973a5234b77ec907e2fe2a8790931
- MD5 d2605307f09e91cdfe64dda22536961f
- SHA1 d4a0b408703255d702a2776b690cbcbd211e235a
- SHA512 9c7c3f64f39e804e9a178bfc807f0fdb799633218687fe326cb2bc36a2cb5466ca3b2b6b6eb723be88f3c7c7283fb6d984652b11b6b028fba717b9aa9ba54ea9
- SSDEEP 24576:WVVjTe1QAQhTCKFyGtxkWjfjnLFTqzeHX2glFiJdVmUZWPk7:gw
- TLSH T188259A547EF9F7570F8E8A1994320E4E9594AE4692803C38C35AE3FC2B2DF1B4DDA215
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ar.pak
- Size 1.0MB
- SHA256 71d8f4f3a910647572ccfaa9b75d1cc158073c7aac9fa4372578160380f71475
- MD5 b323e56013b93243f7466c018c0ecd45
- SHA1 ddeb150eba12660fc7c68dd5f535f7fc001b3027
- SHA512 8498d936560b815b43b9f55a9f4cc55742a6ed53475a40ac896de795739982b776e6775634ddc448dc890b00cce65c1da8cc9155d6d3a419cfdf722e681c3803
- SSDEEP 12288:n4z0YBtdp7N09HGSpIwjd0uyK3v4UC6Tkz3eSZlNjb4EtSnxi+:n4z0/Ei
- TLSH T1F4358BE21B2984720B56DF0FD1E23668D872BD23EB4BFD3124934A2156D7513E78E638
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\bg.pak
- Size 1.1MB
- SHA256 7ab64589cb8b221ddccd0bba60cd27b57445dcfa1d1bf282a908afcbe24f8205
- MD5 bbb06e83d39efd91d2d34727a1af176e
- SHA1 55c6ecedfad9a9e254a2fe374f97737036f11cd5
- SHA512 c1c6c5f3383c9ca078e4d39615e5d7d8cda3d3a174309e797fe232d2779fb1f8c67b2da02524f7eafebc4d282b8e32a15571885dd40008a9b789c0c9c4544e2f
- SSDEEP 24576:WcxJDWaydLYezQkEC1UcVb6tM8dl373ZGmUG3GjKnUfVDOUQe74u2VnsXGgqnx91:Wc/DWaydLY78UcVb6tM8dl373ZGmh3Ga
- TLSH T10E3535A15B9A68DF0101F45F98087E093CEB84FE3FE7879241652DBD39E10B487BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\bn.pak
- Size 1.4MB
- SHA256 fca72236cef1f37e81a0002b18473237e1fd9c170bd809f2d82dee5617abf082
- MD5 7a11bb1ea1684f9f6501b5e39e15c61b
- SHA1 d8319af0853bcd8189ed471b9dea9efd32a3aa8d
- SHA512 54495fb6878b25299d438a7e1e3bd6df2e92f4bc7d553596fd076f58f5a66e4c3dcdfbe0ab324d3deadf1496422d03fcfe36af10607f06e2e3542fc34d17becb
- SSDEEP 3072:GaF9YJWTVKFujJBC7kpZlLqeRwrVp5qB8720OcvQagEfAhKHRYn6jEyWyBbDgQ0A:Gy9jRKFurCOLqeIrQ80zn6jEyWyBbww1
- TLSH T1A065EF209C6E81B6A8C5CDC9434C6370C523AE9B9B61F74DDC17A14938ADC7C8CADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ca.pak
- Size 656KB
- SHA256 8076fe9de4102465252ec963dbd26149918bcd4c8c71bc16ddb5b691f78da14b
- MD5 5049f6dd430ba07cce2c32516bcfd333
- SHA1 9324b84de13dba1fc5e183814c38d3368b264268
- SHA512 16e038c47d235944b29bc5bd1cab6ed9ebd91356e47c21411203ef18be9c825f387d8fc4b45253c7a93ba363a5d92bd415bef08ae4db2a10399f5232dd4bf458
- SSDEEP 12288:fdtBg7hjRlCizLapQU8t5PsFlN3Mw2juwwPR9zejm0t3l7A7T++LwdvwTLS/fnWJ:ZccGCLop3G+MNsZFV+XUg
- TLSH T1B7E409239FC93B7704C2330AFB46C257A48CA9847B16D254F4AE1B1622CCADCD677AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\cs.pak
- Size 682KB
- SHA256 d3043f0ea0a91d7089b9bd46ebd2192cfa77a1ad9d07d6dd0e72db2f03307db4
- MD5 ddc31700d157563c13620b8de43dd100
- SHA1 a7c9746b72210f9fb69db6e7fee6f487a1f6ee46
- SHA512 790e952c3452d8a82d3d8b6039e34b39d24575e27809b8fab32f20586cc3dcfa56767a6f74f659b6dbd4c020f1a9ebde457a24b5ce9ea1b32a80877bad35368f
- SSDEEP 6144:dxks9Tq5VKPuvSkDvh5Ak0jaAmWpzpoGZGOzwJSBuf8QS:dxnKVnbh5Aka3zpoGZGOsJS3
- TLSH T179E4381EEEA36425584002487FBE4128BC5EC3140B6EF96B7C8F9D912675B7E8EF0D58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\da.pak
- Size 613KB
- SHA256 4a80237c4e8761925583a5f404f1eb9fc4b0591724cbef057b50c935e67f9893
- MD5 b5b5333213bcdc10c8c789a281d834a4
- SHA1 278da65eff3c92f7e9842d2d9c6f4de212ac0c84
- SHA512 1b831c2a246d696bb3fbb2720f639f43ac2b9dc1962364b7d2506093ec6d7b3a554415c9c6cb0465a7cbe81bf1c9d6f7d19e14f29ba22985774c40b20ad9a386
- SSDEEP 6144:+s5c4lqFIibJsYn+QwASzVI2Q859FXbcQPJVE/esoBwlASDJwezobPvNSavmdccd:/cX9bmM+QwA6PGo60NmGUsu9
- TLSH T140D44A4BDC9CB32F89A94725F211CDA7EB6D543CC684664F65D8943A09CFC6093BE2C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\de.pak
- Size 657KB
- SHA256 b0fcc971930feebd20752910406a251ab515dd8377c926efbf0730ecdadac00f
- MD5 87f68f0d1f1ee847386c62a9db39ac9d
- SHA1 53bec8a005f17a5846165dcdf5f29a0988ee93dd
- SHA512 c94de36994e57c55c44d6701742bc728d3d3c5051b75d97afad1ac0c299f0320b39e1bd7519d65317127c9572cf637df180ffe21e5f2678aa78e4e373350029c
- SSDEEP 6144:kNyDm26RDI4TcI3K7UpTb8g4ax7EQY4+0Ir5w9QRbsJZVYMI5Gnm9Uj9MBeN6C6l:eQ/wnt3K7Up0g4aSIaw9wb/sYUDN6C6l
- TLSH T11DE40803ADDF625EC686B3617705CDB77B19E36BC346312788EDD12B650B5B283AC422
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\el.pak
- Size 1.2MB
- SHA256 1079cd78b3cbaa80bc5a1068dde1201eae8211f935a4faa8fd1b2e881ddcfde1
- MD5 ca3f2fdcbf02be3602f12d8e96f19fcc
- SHA1 087016858b49c4ad48c61c27e419326104e79fa1
- SHA512 02dc15cdf5b5fdfb8efc6d50703c78e9141317130a4602ee4f51d3452bc8f66bdc5f45c3726d99d34c44de7679ec68155bbc64a862d9cb9f1576cc52e7ee54dc
- SSDEEP 24576:iCVHWFbrlk5Yp9yk2tRZu1xJXDsS5A5m92kd7QB2oSk0RBucuyjUHvDWQVoyNJm+:iCVHWFbrlk5Yp9yk2tRZu1xJXDsS5A5H
- TLSH T14145CFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\en-GB.pak
- Size 531KB
- SHA256 d7ff81e2cb2956bc159b6ff806d39177b1f886f6c0de88e5e3a42655b3b0b2c3
- MD5 8baf00c88d7ebb228b7e69a5e509e9cf
- SHA1 c3d98a602e2c05956b29150e30b2d70a66c5edba
- SHA512 6c0be1d71dded35abd55cda3034dbf9372fdbaa4992792576b542a1e3396c6697c13e2e6b0f83701a775922e051a12b518e6a7d220e8ff71e72f817e9b3b31bc
- SSDEEP 6144:LjE/xfJuWc6jhJxhKEBIF0/2aMP9JQzXafaYHDLjZlBDbpBcERU4:LjE/Du9Kxh2aMjQzXiRDN
- TLSH T132C43C1FF744126A059311A2BB0AA562FF22D07CB36116663CBD811C33B6766C37B7E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\en-US.pak
- Size 537KB
- SHA256 ef30389492cc2d31bc5c162056fe68c27a5d57b0a69f5f878562325f795c5185
- MD5 0604e26677ebd9417c7de4c421f6254e
- SHA1 ed023212b6951afcd80ece283d6ddc68b663e079
- SHA512 8af64b75a40a6dca6ac5feef06ab5e8c898bf30b50be73e480df923461d42e2cc417bad5151eb957c9606540321e0dea48820b2c5009408e0420e1ebe1b01a29
- SSDEEP 6144:K7dq1yx5HfUOQkbaqMP9qQ0BFfaYQDp9I3AjkgngP8/I2wf:K74k5HfCqM8Q0BkTjzwf
- TLSH T1BAC45C1FF744122A059352A2BF099562FF32D06CA35112663CBD812C3376B6AD3B76F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\es-419.pak
- Size 647KB
- SHA256 0f5af329aae315473ef60e4e9e4cf2168af9a5a53c24c5d6367dd87b7e3f146a
- MD5 fba2a1dbb1d77d68d888440cb7efe921
- SHA1 2c68d055f7e8e07dd55d8ab46e98ad6c398e387c
- SHA512 29774a168fe2f0bb0f00e04143498a61c4be380180646b7dad1a52ab3aca5b4e416fff0668b921caec1ed4a5374b69077d7a885b6d7f68fdaf850fe57b778dc8
- SSDEEP 6144:myla3/s3ZzAvpWZE1qWSYmkUo5aNne5a5AFosjI6E:U04GMmZeSAj5E
- TLSH T1D0E40922BAC81F5310E3A348B743D757E8989545B408D29BE8EB876522CCF8CC977ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\es.pak
- Size 644KB
- SHA256 cc3d7c3f694333f8b83127131b665130705598ab1ad7e1e16a0359ad52a73aa6
- MD5 d94259fcae165cb976d0aacf9146699d
- SHA1 0624a0765776ed85e3dff2dbd3e2d326c56d8c6b
- SHA512 76899a0e53a208474b65fd6c5f65f8041cb5f764dfd0db9d865a3ea3e2eeab5ffdc6d0286dd8aadd81333c34118763afdf177f53bae8dd28a6977d82e7980514
- SSDEEP 6144:IlgByU1wcl2NpgWqM+pDfkgZj8jdOMVJ6lvJGkJ4z6PZCF/:cuye2ND6fkej8jYOJ0vUk4Tl
- TLSH T1BFE4F726BACC0F6310E39349B743D753E8949545B408D29BE8EB876622CCF8CC967ED1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\et.pak
- Size 588KB
- SHA256 2d9edaebd948a518ca0074ee9b3e0840bdfafe4391ec8435a1f0f7072d88ac7d
- MD5 3e6b06980ae0def0f6387897fc07b963
- SHA1 189ee469f464b7870997433e92d31ad9b07bb543
- SHA512 37bf599bd117c0e1e43ffbd280be0400e063aa61a02096ed6580aeaf9756390acfd27cfb5b552ee09b48381a0b8d873c7be311bd3852975401e59dcbb2d2abab
- SSDEEP 12288:RPU9tia/SSN0vFxDunFatACMEflgAXqEr:4iYIvFxDunFatACMEflFqa
- TLSH T156D44D42A27D771B242412F9E337E923DC9FE7D8B4000D9668974A1971EEF8C38B6B54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\fa.pak
- Size 975KB
- SHA256 d26e6e0cf1786b01e3f7257469fe048871218113db5c51b9f72a5fa0d242e8cf
- MD5 a8f6c88fa42bfd9152834663025994ed
- SHA1 72538f957eafb06d430453e1c3f6448790360f1f
- SHA512 ca08ad9bc4ebb0a478ab2b1abc2f450e01aca268770f67b5bd78562630cd12c31d2ded664ecbb14e9abfac0208730565d68b261a0f41f8592f598136836bd945
- SSDEEP 24576:rV8u313uyqoz+sE2iRmXnloTUoXtCfGk62Yh686iTE8MX41O4lURikc02mkFUeH9:bC
- TLSH T13925A1957AAC9AB16747CA0341D33834C773AF12D349FE40ACA1076609A5B139F5FA3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\fi.pak
- Size 599KB
- SHA256 b87cbc298d42619699a207cec6bbc34567528cc0b37ea2059f48cd2c63b857a0
- MD5 5126a065496f96cb6922f0a0387b7077
- SHA1 6db444c48b373240ebdd25a9d4ebc6c3cc80be02
- SHA512 dba709eaec35c2f67eae2a60011abc2c6da4f4e1890d5730e4e5dfedd2efd1a513dd7ba77fe95e4d81a3ad0bde2ec81cbc91f375435a31f5d9dda76f668cbcc6
- SSDEEP 6144:2VUKOT+VgQBer19cj8bb6a1mS0r5tAgieswCaXOERHq7aQmLy3wmHPIZprWaCLnJ:2VU4VgQG19KA45uam3wmvIZprWa412G
- TLSH T1C6D45E915215C22237C8D29E79B0903EF5D5E3DCCC284D9AE843C7D849EE9887DB276E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\fil.pak
- Size 680KB
- SHA256 be9a51a3e3bbb334ef1dcec3f85f5d884e04d5580b4e7a24e9d5bbf84fa56e1f
- MD5 73ac58f1d32dd061f858757db19b8610
- SHA1 4cf94db854bc2a92642210366a80f779d9c7e4d7
- SHA512 eea35e40893d875fa6ba10a5150492026f8f654b44cf4fe8854f1b67db1f6f5e377349a954ed4f1a99c023e8ccbee04364d76adb4ad9639405ae7dc54511007b
- SSDEEP 6144:ox+EKwo43MLOr3dWzA8y+DQXOp9lrlt0FhDAG3sYT2v//9/oVoA1CKO:ox+ER73MJRvt
- TLSH T1B7E4B616B7402748DBC352E52360A82F66E560BC3F81786E0FBF26977BA7CD5D270192
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\fr.pak
- Size 700KB
- SHA256 2a7e6756253d85edb24a27e4e3f8e43ba1b124160cc1adae9792195abbbf7a5f
- MD5 4e3c7a0617b4bc6a512e366034331b65
- SHA1 cc5dc3559f8ff0b298d53757240dabdcc62202dc
- SHA512 5e2155cec16d9e9ab6199407f6066924e24ab9594c3d12ab31b9db7a7545ab7d5df5b14c7dc4794b8069c1f4c3ba68e7253fe34cd6b85d8d0e40cf26a0a0230d
- SSDEEP 12288:+B5l3eALWJ3TZLrCk27hbTZw66QuaHVsVyH8ATezI7oO9ZuYnY38jw2waxFVDX4c:+B5ZICvVIgEQ
- TLSH T1D4E4E66FBDC431CB19C612A7FB12D663DD348248F215E340D89F4296129A8ECD39F6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\gu.pak
- Size 1.3MB
- SHA256 2623480ab810561ca86eacaa6b09ec67d4716e74484917a9931caafe57f183d7
- MD5 f361cb58e8a89046611c0d805cd61eef
- SHA1 e8b4462e33cdffc03c1dd7c054eac619444d0a31
- SHA512 879f91e7743f7df6cbbd9259808acdda048eb7b36311f8f29c6e63f095cb97e3fb0b91b76dfb8316f2d22542e27beb8131ae4906412206b3847f3b819dc7c8de
- SSDEEP 3072:XYy89LQtEnpDUB4TLS53LHZDmiUy8iPjAwREJKVMjNiT7llj63rAulfcSi5NnWsx:XY9QApxu3zZSiRVCdsqUWcCj1Istw
- TLSH T15D6508D0D7B9F07019DA9F7E819E512086699343D57E230051CEEE898801DDF3EEEA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\he.pak
- Size 854KB
- SHA256 c6712be63d5d0337c345cf03af8a492200e1cdbfa124801620b58f7212c20c90
- MD5 63181ee578a7a64e73c2836435e08e88
- SHA1 2e92d130aa799c5b37c7de5ca2d3172c4dee06dd
- SHA512 66eb184a1433b4d92b3b4935e1f5728725de19e9239e5e1cbd97a38036002633c6e16365fd799eafffa1d28f60627a445b6f4de72a90776a0303c276c9c54c21
- SSDEEP 12288:WZrefchOFlxc3Tm+F3r1f0fBAlzWq+/KU466MAeBXlieQCaj3dto6kvAXS5mJmm3:LT6n
- TLSH T161159AC4B2D492255131AAC39FA4FA286FF3CAB53CA27512CB14526CAC774F1BE530B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\hi.pak
- Size 1.4MB
- SHA256 04007246aa9acde32d4ab3e0edb6c898e995d6b716579911d76a8e169538074a
- MD5 5ebfc6ca0ca5e4a5266bc8d7ff7d3d81
- SHA1 b60cbe9aa2da097fa7f6ac20a5c4099e78a02573
- SHA512 ce3ca3a661228c0ef69479eb785c69231f5455134be3ae78d7ccd0725f73c90d206e8fa808ea201de467f444cd2ddbc8bc2f12973dddf143f698fd06e9911a02
- SSDEEP 3072:EXFa7fdZPwOWAyMLTd0pup1CKDOV/B90ZV1d3uGlqvN3dgYJEdtD9eLn1s4f4/BE:DTdj9SSCa2XpytdcUY
- TLSH T12765050CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\hr.pak
- Size 657KB
- SHA256 a6c1d62d5ebf72aba06b83da68c2a7e4ed77817cfa6e5f6f531df9ddd2d67f12
- MD5 faf7e8f5c81ef13535f3e8504bf6c678
- SHA1 b406c925e17ec1cdbd6783f8b4e59ed918eaaf47
- SHA512 65b19405abeb9474ceadc0735ae13f652dfc230901915eb80cbc7aefa6255bbbf030659cc7dfe9eec3760b3ce2ea13e6a955a7f4b4a9d635ad62e4e86b0f085a
- SSDEEP 6144:ofaujUoH+0wbiUvZ33KnYbQbcE7PBO2qNdvjJ:oCuj+HiW3QdlOlHJ
- TLSH T1CDE42B7DBEF3970A0897B246EFAA43547DBE08DCE52497B7684F522E0003F4D6AB4149
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\hu.pak
- Size 702KB
- SHA256 bd054c1c8c9f4a53106accc3c61310322a160d9c66c6317a63c91d17eacee23a
- MD5 a98eec67c28a433d2117cb4d30baa1a1
- SHA1 1be598907e0a239e8656e1f6e3a70d21fcc4fc27
- SHA512 fa79ba5a1e266878add04e84aedb8dc61a7a3bf64f43cca329bd24f5dd3b9be7e5033e36e2418d98ca1d8be3977cb9fd8cfd8a5884433ad852ee38cb5e181dc3
- SSDEEP 6144:3WlDYKCjKdhTpepbHlhlLH2pfaHIA4jt+uLU5iTt8gZ49Jx/YhyoVm5Ws/kYsyeC:mlDBCjKaWAIU5iJ87+0BMo
- TLSH T193E45C7793B6945AB86C179778643F16492E481BAB3B32FB2883846D349178D0DC3CDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\id.pak
- Size 580KB
- SHA256 81574aa518c3cf7dab5e08510db9180a7a4d1e115a97fee8ae471b423301e793
- MD5 e5650846e5ed16b9b301cb11717f0a50
- SHA1 4bf3f3063f2204de0fec56a3aa6a85acb24b1939
- SHA512 0e62dc2a43302c8651efcfbe34c7f9cdeeed8852da5dd09efc8d178c33ae940795f228ccc2c51176ef0ef96d37e3d85fcadb525cf0bcf615a6cbeb6b383b1551
- SSDEEP 6144:+Opx1YvrUTJmh/x9ijBz90bpbfjzTFjlFlXmBMMBp691j6nsWOBRLmIiTv8oyHS:vpDsuM+jB2dzTFjlFdmOMS6nH4S
- TLSH T1CCC4E7632ECD310C494842D5F2CEA91E7CCD233BAF05B76E8E348F7055A67686726B94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\it.pak
- Size 635KB
- SHA256 516392ee5c30cce472c5e2f6ea72c9607fde7d543791840b2147ba126277fae8
- MD5 4cf9f6a0bf3b717bbfd368c4364a3354
- SHA1 d1f833655de6aa32f178d9edda19882cc42f4903
- SHA512 17a98946370e8e455f8f9656e9145c4542cb3d3a64697380485fcff10eaadbe9f14f31ddb08dba5a979e5d58b0431e0cebda990ba2e84c5785ef8dc5dda50f4e
- SSDEEP 6144:2yDn3efbJsn8fnd1ymik/y52N5azVd2sYSfqBCfYs61wtn/RT9TbhOKa1iTURWYS:pDn3a6n8112dZZ5c8tN89M/MPqlVVN
- TLSH T1B8D41C3AA9D6212519976359E611B085FB6EFCDCFA41721CC99B031C22CFE80F1ADB47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ja.pak
- Size 774KB
- SHA256 f83467016fe545c2d7ffb29818b63141936ddbeb347eecb94dbcc4dd7aebc160
- MD5 14f61ba3138ed44004f7e33d3d327e05
- SHA1 810e79439928e3bd95aaaa5d85c8317e5138c4ea
- SHA512 9be122474b1d37b4808278080f24c2f5025e1d91ba61bb0c9c153f1759a559897be60150cfc201f2c1d126bd635ae319d4240d0394e8069b83faa70370609cf7
- SSDEEP 6144:ONtXfJkvxEYOJB37QOCe77fJ9ZWQ2cX7fBubP/VQpMzVd:CXgxw33kho9ZWQ2cX7B8dQpU
- TLSH T1B1F43F7CE3C969369D6153A22C0E36E17506AC5BFCA23A3A443DC074BD70BCEE515AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\kn.pak
- Size 1.5MB
- SHA256 6e4307cb71b0086f9173fe76675f12d017f2318f31930c9b7551552d10608876
- MD5 d92e7040d9625aa1281f6212c9d5d50f
- SHA1 239f29b087f32c6fdd32d471a97efcf406bf22db
- SHA512 0a4bbd552e5ca72d0f3f4c10ca9ceef221f5f4e79db9e9f37527d55afa6d0e100a86a223177bb1b6df5c34a5548b441df534638b2d47944fd53e3dad34cddcdb
- SSDEEP 12288:+cqT8qq7+xz7EjHSvboMU3lhYWx75NfMa4I8yopb:9E2ZjMX
- TLSH T19675CD18ADBA7D301BD5006B24EC643ECFF16BE29CA907D2F4DDD7802C66C6A90865DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ko.pak
- Size 657KB
- SHA256 ddee44a6cb30a5f19fb7e2f475ef38ca866ccd9454807f04b028f211d6e0638d
- MD5 1cb9ece1511920b83016066b122f7833
- SHA1 e375f2c866e65560fc8249819ee220d4e6716467
- SHA512 fbbf24e29ca21c81161f16d1833be174867891b3f5b327650543eb44561f4076a3815961a56b40f1ce2bb0d150c82780860b688dbbe301325f8ffa1ccd8ad03d
- SSDEEP 12288:Z+uTsUgukKirM1WNiPszcbifYj4ZGRyzD9Iu2eIzRfgCx9IJ/xOSJGRG1zLhwgtl:HslIKW03+muW
- TLSH T1F4E4B5F238DF63C91193CD82AEF4FA198382D976F7530294ED44CE449E245D74886ABE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\lt.pak
- Size 714KB
- SHA256 38a85c44924159a7096ac757e11a6e3ec94058e40d661b45e796c29b1ffc2fe6
- MD5 0ff3893259295282ad36388b038428ca
- SHA1 fed6c79a284fff806b0ee825f3aba35796fdaeda
- SHA512 7bd057bfb80b8c52aa9e7cde64c8be9f6062c92afca309f019d014016a710ea656483795d1740908cdde1c86ff13f1a028af8cb8c14e80a9ef7b592703c046dc
- SSDEEP 12288:oUi/g4jMRmqR/R2OKF44CO7q2bAJy6SoA:/6MfTPd12cJu
- TLSH T1AAF42B0069E3AEFB9A4467C981A48E78DEFD50009767BC61EC69C78BC43BF4525A0F35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\lv.pak
- Size 711KB
- SHA256 b1789efbe97746e1ceb8eca5fec1bacf84e2f157cb24ba10487141f80a8d0fe6
- MD5 1e32b817d3f9730c9a929fa86ecf3c2b
- SHA1 94b5e88a96b8457b05f20d8d5abeb98c21f6aa52
- SHA512 788b7c29db58e87f143a4abc5b1df5f9c52a4fe2e8b41261cc63101828809b935206f332fd718caff1c42cdb9467ef4d5758ce631519557e0d5c1699d611e23d
- SSDEEP 6144:BVo5uG5JOaqP28DBqBtNDqNg+Y9NVtVFxgzEIwL/jWWq5VbpGnmNnaogA+cJTz/1:3oTRqnBqHNv7+zwrzOrGo+cJTzuuTx5H
- TLSH T12EF43A959EC68FA94D918DCA7336D123A8CCD740FE07E112DD7D8B3A510F52822B5EE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ml.pak
- Size 1.6MB
- SHA256 35e3ecbc30a2ba8eeeafa884b63b502876086e4f58694aface215280620b6ff4
- MD5 d0c861f218d4521dbcafb3df92a8dcb4
- SHA1 e593c75658aa61350cbe4764338794b24ccde272
- SHA512 f55212944854eab006e9d59614af8fef78174ab2fad603bc2ce9d8864e8694a841080ac706a2e105d06cc79c32b2809e4ad522da3edc140084e1308cfb693a76
- SSDEEP 24576:mbHkT3g/oZAuuxyYl+9y9XBkx/9tH32KfyBR+zX0v+v2hitT3/aJRAZ3R:zTN
- TLSH T1B2759D57A036CD3B0FD102267B4E2FABCD5B9FD140AF668B5869B2628C59F7D0C99031
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\mr.pak
- Size 1.3MB
- SHA256 20121228e7790b61c69d3e8a825098002bae61884b2c6cd84189c31415a594f6
- MD5 a582466027e5460b0a8f53ef533f9bd6
- SHA1 223b8f70a5ff9bb9826407efb37ffbe2bcd4b76b
- SHA512 e018a475e53d2fe74621464cdd570126d652666be9bfe32e025b265ddcd370adb027d08dd68a7527ec85aa56eb448ba2611bac463ba666689b711ece20636613
- SSDEEP 6144:ejhnaK7mqDh3c/PciWUenZ0goG22sYmGcAb:0L7nDhd6VG22sYmGcAb
- TLSH T15855C14DF7BAF3685DACBC8E36540D3BD8FD31B1C3E9925648E1B3A74884CB401596A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ms.pak
- Size 610KB
- SHA256 3d504ad265b71b6de6e1d65a5a92c0a5f3d9ac188cb073d6391a0884217d6580
- MD5 6e7b1fcaaa449e7f9373f2b8fa1ecb18
- SHA1 45382fecd95d835f8d1d0be218fb94f245e22442
- SHA512 284a75e6b2ef82f838bb184e61b31b4ea43495f205e44df33b5c2dadabe755410dcb555a5b7346298ba9e1c8ed7a7c9c9930ef52718bbeec711e6d4da7a15545
- SSDEEP 6144:3XbsRy3VRYXAWpvb2DgxcdyABinEC2HuqwhYn8lNswzJTauVle13VDZY:L3VaASv5xkyyJHuqwhcOZleC
- TLSH T177D4B6579EDE3118085843D9E2DEA91B3CDD3332B705AB2B4DB04FB0126E7A53316B99
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\nb.pak
- Size 586KB
- SHA256 bf454559af0c66c2beb108b45664bbce95c8fc6ca6e9e176d77161c2ac3c2c09
- MD5 479f57b828bc42d3344c175ceca646e6
- SHA1 30130b144b86600f7b042c7e585d26d26667caff
- SHA512 a9e484103d1f1d5409218d289e30270dbefab2c289cd72a367f9935b470b0ec9fa84153396333ac7b7dc3310c3f171b43aba0eaf8e5e38d526143892ac10db0e
- SSDEEP 12288:vjS2rwbS3XY5sQlx72jOp7fYaRMGvNGCatB3jH7Jhu:5rwbS3o/7y7GvNGntBzbK
- TLSH T119D4F883EE46B72EF2A443A4F51986579B7D942CCE98199B54CCD23E0CC7AF052BE1C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\nl.pak
- Size 610KB
- SHA256 6562756131ac1966805981bddd08c4330ab4cbcfed836482203bd6a819e6d99d
- MD5 bbd69342844647e830bbc127c8a4484a
- SHA1 5d1e4de6c15f73b5459ddf4709c8b13954460914
- SHA512 bc1168fed928cef6722e2712a1090b01bd260c3d13ac7320431181abf6278cb3ba5fdda01b4930f6ce3748e3e936127071427064e4164038eb342174a40fc314
- SSDEEP 12288:QhQ4lbJWQusEUFXZgtfzNLt9ywGgqHgG8DTF:6lbJWQusEUKfzNLLywhqHgGcR
- TLSH T1FDD4F807AC8E253E59C1A349FA098FBBBF2ED22CC26CE67D94DDD5340443F6841AD589
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\pl.pak
- Size 682KB
- SHA256 a7266a664cfb74895e2b9099f67f179043df848e8bdf97264756e8383367c66f
- MD5 7788f12a722053cf77d7a5865103db01
- SHA1 4401b4b3ff19d4fbbec101fd9fc268f4452c3727
- SHA512 7174499accfd14fc4de0465a8eadc696b13312d3dccdd3452e604de3cd7d039e45491f8c9b4a052d85595025c61b961a7fef9123429b1c281ebed871383602c2
- SSDEEP 12288:+7PiKphZwfQfuzSJabZ0bn6fPPCUdje3mcUQLMrmE1QhHbaIFolm8TT:+7PlhV6OLMj1Qhan
- TLSH T138E45B0E5AE59A4E4CA008E6F6E71B7CACDDC808F208D35FE42F4526715B19EC9BE5C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\pt-BR.pak
- Size 638KB
- SHA256 1ab6dee0fb09dfe1c53cf196efe404041835602bce797877f7fa89b2011becf6
- MD5 46e54eb73ec95669ffc92af97c023410
- SHA1 aeda3a1b295bd4f9510938a985e22d898d9b8305
- SHA512 a7b60c536e5e4a79101ce7ccdbd09d07eff31485a157729e0f9393d94798d0385a35cc6589192c73d08839996044fedab30cacae23a45642086afad61ec7efa2
- SSDEEP 6144:BZBt1mcqSYfMlQAkuNBXBL5ogLly8SEpvhfgusRUUgv3:BxoiYfgqEnvsRDg/
- TLSH T19DD41B2E6ECA136604229350B74EDB47E5890745FE0ACA87DCFF4B05A3DDE40D933AA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\pt-PT.pak
- Size 641KB
- SHA256 1001af3f01e2e52b535b8c9f9e37f356998b597ffe6bfa90d23a2500d0efc3a4
- MD5 cfad5cb76c2a50a33aa6eefdabc1f8ba
- SHA1 4c2041fefb3bf9b7142f81cd95f325174b7702f9
- SHA512 015c7364b59f01137a3edbc3c3c163d9b0c376b242e6f82e5ef2614275c47f1529fd89ed29fa7eb2055018663762231e8c9cb98c7e769050e49f3707e218b78c
- SSDEEP 6144:kMHX9cyaSq/TE+kxTieJVJJxhLREWNh4fDA9nBis8zSRnC:dNc7SqnEZ9nBczSRC
- TLSH T1A6E4192C6EDA136605135341770ADB03EAC86685F809CB87C9EF0B4672CDF94D6B7B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ro.pak
- Size 666KB
- SHA256 2feca2991c73a665d1503b9c1320b518658ea940a62f35b75f7780d4ef0b054a
- MD5 1e405336ebb9d3214003205448f53946
- SHA1 bcbfbc7da72466eaf7520628dcc6194061fa6eaf
- SHA512 cdcad7f6b1bb7242cbed50409c2cb0ce9d1dc0a4fb35e8e9f21ae7651d483d7eebce21b44c2cc702b09fe766a20ef6aa95b3abaef1ec70d0394cf382044ee55a
- SSDEEP 6144:nY2Xm8yL4tE57smbwV9RnnB4mEgCLPuWJ+t9GSlCEB53csW2b3da/1ref:ByUts71KRnnB5QzH0XCQ5Mk3I/Uf
- TLSH T1A0E42C23A1C81A97295152B2B73634D3E88E105DF641E28DA4EEC97D10CDDDBC52EECB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ru.pak
- Size 1.1MB
- SHA256 8487e04fab7b7350e17f3441455c4995d12ac870ff8f2b97dd44aeed1a3f0169
- MD5 ef8c384edb9f7ef0cbffda4797783381
- SHA1 77dfe67238ad9e4818ed09517309a747edb767ba
- SHA512 f39c8bab9470b11937a80e8ed8f9ad2d9113cbea95626252cab666dc44590059b171cbe68cf7d5e1009fe07dfb59e66f206ac302e154df545a275ee2dc974ca3
- SSDEEP 12288:tps3/osHfQeRo4YeWspFzJ9sF+oa+O1zXx6HzW/oqSvgs2ACWEN2igA8NiadQYHS:gv9L2DoSi
- TLSH T101358860669E64EE1101F01BDD08BE0D3CEB45FE3FAAA35619642D7F34F2024C67E65A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\sk.pak
- Size 693KB
- SHA256 abe4f0f69555a929f3f9e992208cf178b86c300803fb1e01c7c78e5fa96ce1a2
- MD5 68f8a1e5c326c8f132ea90b3409dd26e
- SHA1 15e2abc6cca94cfaa512af3769fe717c79cdcaaf
- SHA512 0caee634c451485d532e527610859bed07af9f666b5b7d9b5c78eaab14f5ca18071343bb0b09394ff02b4c73aefe7bdc0324525cf54f3541836b197bb102e17c
- SSDEEP 12288:FDfRbbCL37/L+ABiPiXeJn5BYn6U8pTjsxt9Wi:JR6P/L3iBYp/tAi
- TLSH T169E44D3FDFE7181E8E8D0148EFEA7110FD7E8650864EB4A6944E364714E27ED8AB4E44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\sl.pak
- Size 664KB
- SHA256 105f19bd95178afdd37507b09187b7e57f660fc8cbaf61840e770a0dbd624989
- MD5 2673e04aac61d2b16cfaa79f8e623c5b
- SHA1 ee5926ca90d894ae6b4e78af8a93c29b98a9ecc0
- SHA512 669441539eb4dfa96ac34d89762ff7c761aed2d0833c3880ff4a82d7e66b5fc8225684d779769f0c82243089d1c10b93403142e1a9dd9ac9bd7c7da60fb975fc
- SSDEEP 12288:ZXXvcB2vBZI5frHrIWOq9Qyi/fzW8oql/ad:ZXXBI5frHr7i/fzW8U
- TLSH T1ABE42C397EA79E0F0C9AA28FFEA606007FDC044CD252E6A1FC4F336A5415A3817BD595
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\sr.pak
- Size 1022KB
- SHA256 c85a6a25a18cbf773861255bdf09dbbbf6e7da0b56196d02ed9ed48b7c1bfa7e
- MD5 95a3731e07f124bea3e89980c42bf2f2
- SHA1 ba37f6e78e32ff5cab09a158c503defeee90973d
- SHA512 9d82d6a6b00c1e2b50a7e36b618570404045e5f0e17c461d627660164c587094d587d4810b4a2be615559ffd25552dff64db144f0110e55366401c7eceae90cf
- SSDEEP 12288:MAlKhZ3X658IAo8S0dZ6C0YAi42CJKMZp3ehMCexKIE37FtuXU/k/m:b8hxux7Cll
- TLSH T1A62546B19B9E64DB0501F41BD808BE493DAF41FE3FAB975211601DBD34E10B847BA29E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\sv.pak
- Size 592KB
- SHA256 50ee47f0ecab084a1e47fd1055f14204a904e02e76cc11f056880027bb30f0b4
- MD5 d02cb5e8bd91f2b132352002f8950de1
- SHA1 e8a53e906c1220a0b06db5240759dae44bffca0b
- SHA512 879d7136a3c299f60787cd42c13e4341de5d18a3af4dd757e07b51a5cac14d6090b521e220223c06643870db39df08a56161c011dfa3b5e1df8d0ff628fdfd7e
- SSDEEP 6144:90Ij9KxZZV9QZA37JCyOzxnqx0xflMT3LOVRFcz5RtGmgYSM4pmFM7OSO8XU/rih:WIjAV2GEnBCihG8l
- TLSH T156D41C438910F526FAB2530DB609015B0AEDE25CE7F2958EB8D9883DAD8BD5805FF347
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\sw.pak
- Size 626KB
- SHA256 039c517ef328c62d1fed7e8b6d229f6d30f09df5aabd79503d6798e37ed89315
- MD5 8c77972584b7d08a70555fab8820bccb
- SHA1 73957dfced7cad846137fb4501934ea4bdec1b26
- SHA512 12de731371851ebc59240bc17d9b573ffe3d89805585cec79ebd261cbc0913ef18b8ae0e760c9b2bbc2c6b59ec704f6813708b58b06e19f79b13883667614d83
- SSDEEP 12288:a+pOm72YxGy2qWHZIcA5YmedqNGjRdpoPiM4+1GKL3fyi8SLR64GFp1dgNUiFaX3:3OKZGFFiizl
- TLSH T15FD4D5629C71D1191233918603DDEF732BDCEC5C6A2B2D935A46BF0F218F48C56ABE49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ta.pak
- Size 1.6MB
- SHA256 b629034f195f1b354f959186f9c9de6a8e5fcb8ed98f2b120cbe574681a96f6d
- MD5 e37e931e75ef0fb38f2884247ed38274
- SHA1 b37e746b6b539855574d18b56909bd89343e725a
- SHA512 18774fc9b57a87aeb939fe012fb701bb59fe48ac0e8e956b53511a9dab5ea62951e65ffc08ab8a57d92dd89f465f268a5f715ae73b3c233c7041758cc7bc36cf
- SSDEEP 6144:rW4LwarWhOkCKasGPssqVtR95tm1vYpiMyN:/FXsGBqJtm1vYpiMyN
- TLSH T111750CCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\te.pak
- Size 1.5MB
- SHA256 b226521143030f9c0253e26e45603db8817a106253f085e731ded1269be74127
- MD5 b75beb2304300d0c972bf77a4f9e8041
- SHA1 0ee4561f7dff256f56e97b90048388819662adfe
- SHA512 4ab491bbe18e74e12a8204f649723a644aa894a2093af7d50654891ebe8c837096a4e4dd3ed54e74bd6565d97593bcd9161b8dbb2b5f8fbc5d02be9c1de74ae4
- SSDEEP 12288:vyvTjmvCA17McKNzywGnNqSF602ngIC8ymoRRT5JbIe52CMsWuB6mI3p1Fn1Ihba:6rjmCAWCtcue
- TLSH T1E86592023A6AD310DAE60273752CF66C49781B8161D6732C1EAFA357FB87D7E0843676
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\th.pak
- Size 1.2MB
- SHA256 adec2c1293d2bfc4c4e49d78b4d1a27f1d68b79398935aa45219736ab90903e7
- MD5 eabc9d3e15a284ec169eb1b50dee913f
- SHA1 188546cf445c922dc49b4a4ce7b3d91ec329c1c1
- SHA512 1dee6fdcd40e28bfca4e3b77e38ae20b9f097bdc1c0a2536e3326924c8316118ec9dff7a62cb9e8be49ab2098e8faedee7f9001586f5797eb594c9d04dda2bcd
- SSDEEP 12288:XCz0ynjBc9fN9LyZYAozYL+xWspoihwkJUseTPsO5eXffpbDFDS6Sud2OHXJjxcK:XCz0yjBc9gssk
- TLSH T1DC553BB37247DDD479441B5B262A7789672DAE693F73F8E00089215A73F071A8432EE3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\tr.pak
- Size 638KB
- SHA256 b38c37fbc4de0d502fa8fdb0e628d40e84dd4c3ae9a5d3191405635f8c815343
- MD5 91bf08b5be7bc906cc191354e214e09e
- SHA1 38d3a9fc4f437f6ef5110608af596d3178917e2a
- SHA512 f17c587c2d32c88d095b98217e4d816ab598cda751d757752281ef95faa31f86302e5928b248a3a9e47d116863f348bba80daaeb4cc6b7b23c30b3ceffb432cf
- SSDEEP 12288:0oIBxQq0XhH9fnHz6sgwhIfZF6c8BG9u+4C:NIBxxcxzG9z4C
- TLSH T168D4E98178EF282C8BB9278FD6E90666F89F0766B331F4469B168636774535703E360C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\uk.pak
- Size 1.1MB
- SHA256 3d19684ee617aa6465e25db6927e257f290ded63ead9402c440a34d5983b7585
- MD5 ee2a5dda05b0e3cfc17f84fc460a6fd9
- SHA1 561a0b34c4a4674e9a1b224a806b9c406a934a36
- SHA512 608222b50b9fc12f0f2d8e5be35acf099562dd286b1ec46f75ab34d8f63821ea1eea69944735030dc992a08ff034e47c3e78f5318ea9a93b1925c9b98d56fef1
- SSDEEP 12288:OByGuTS+QKjbwiIykki8URqvWvsSr+fXnwYV2onZSBdISWASNY+A6QFD8rJYurLg:KK8HP8m
- TLSH T1A235A9A19A9D54EF0105F05BE94C7A0D7DA701FE7FA7871625A43DBF28F20248A3C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\ur.pak
- Size 960KB
- SHA256 4047d247f7827a03a5c64f252a9e5a5ac9fabc75bdd03b87a3d248eefca03648
- MD5 45d05ed2dec83dae002a141cb9cee0ce
- SHA1 996e0f92f89c8785c110a65107cb4cf1157ff114
- SHA512 9d3a282c0795fa930047341392eb643f5f95bd63231f504ff748b80f6637608b238e34393c0da63ce22f9a830e85c9fef2936d0d28fa348bc9c8db83a155b8c4
- SSDEEP 12288:wk+hB2ksdQZJpc4Uoew8PCK8qtdQKruKy3lVbnQiEh+GoOZxDiQYrwuYjwadcJKJ:0ZnKYGKo
- TLSH T1742500D2E6B896B35A21D92780D33C34CB735F13D34AF285E52246C54E9A0139F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\vi.pak
- Size 757KB
- SHA256 263dbe4ea8b3ab7f189b91d6707fdfba604d02894bc50483a8b562334d303a4c
- MD5 a3a49fcfb58e509e30d5fb4370ca64d5
- SHA1 a518822d0f73c2ae391ec0ec0708906bca46880f
- SHA512 1544a9f034c81da802562800cb3dab4d410ca2980aee757486a3fd010c1dfdde0a8f23722774aa782fc83475510ebe85005d1f9e871a6f8de2f7ae4d7f6f23e8
- SSDEEP 12288:h7VkS7I+cM5foEWoVuBOhbCT0+CKVN5+Fc1haRzeyV8iVyloINjZyjelyezicR2/:Jv8+cMjVm0rF8cx8JtQKlyYichfJq1lF
- TLSH T1FFF4951217E1302680AC553EC6CE540D6FCAE42FF7C18FE56FE429747A221A45F25BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\zh-CN.pak
- Size 542KB
- SHA256 cba14b4e279269daf8e7e7925039df8eb37a9b7459a27a41e57c933fccb745fc
- MD5 b3928453ff2df74ae9a10367e52f334e
- SHA1 c5b7cb8954a9efea37f733279f6a4b1afb7305b2
- SHA512 6cbd1801519d4287ed202b9df33a472fd6994192ba0d2a07f00070d59e3e362719ba3ac6e3eec8bb02a4ef8ae226d3f36c368858590475f7dcb53be3fe2faf4a
- SSDEEP 6144:2fc69+mPNLWktYLinT7hpU/kfehd42YYXv3cYPDMZ2ABN+WmYGlw:7IiQYen5pU/kfevlYgMYPDMLBNd
- TLSH T193C47DA820F9B9EC044650E03729613D7C40764BF66BEF366ED248DD1BA2FAD0757A07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\locales\zh-TW.pak
- Size 536KB
- SHA256 c425d71d1d06ba214857efda2a33b098d8d8469705840e13aa6e663963871db3
- MD5 e98148ef5f3f9afcca1fc584e5dab9cc
- SHA1 7b529a2174a1d9dea1cff44463eabde9c470521a
- SHA512 772db736f28a9c2094b26a76e60a3eb74941e99794fff181e4b73ffc839bf3b0f617979a16bba986c8b0f39934ba942373a60292ca96282878f164350a395fe5
- SSDEEP 6144:Jfz4ABm587DouImLIICVzENJVJm7DCa2ju3fpQzFQfiHHDwS6CX2CXUmITZ:Jf0+DxBcoN07W0fpQzmfiH0vCq
- TLSH T1B7C47DB608FBCBEF0901F484B7CD522ABC9B386DDD777636FC891CD42E69A540962085
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\resources.pak
- Size 6.1MB
- SHA256 8ca2bfe185e2d076219d0efcf6771a7aa0d83e72392542168097dd9bcb6f0fe6
- MD5 1b96392fb5b29bdb86a8c66dde5766e4
- SHA1 640e1dc667b7ce18b08f0f49eb308a3190af0217
- SHA512 a5fbf7937bf3a62ac489abd01223509eb35875b1f44dfff9027186cb94a00f6bede9cc08fd9c1ba4bddcaab38309594d77cf47f0c8bcb4f7226043ec168c8d0d
- SSDEEP 98304:8DjUxE2dPJ13mRplWYNvogy4VAHlzJRPrwr15DWcp8AGN843RTwCp3iXLPC1G6B:SUxEeBR2lD3azHkrucw3wS3K2B
- TLSH T10B5633E973E078EFC584577E405A8734266CB56E358132591E8C6230EDB592FAFC823B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\resources\app-update.yml
- Size 172B
- SHA256 d19bd6ece3162842d98662aa2a192af84bd9a61b0fa1da26f91cdb89adfc8349
- MD5 f8a143a37423bcaa8b54fdb60b8bb906
- SHA1 14a69d0a7621b7396c8e60e3342a59a30c7ce81b
- SHA512 aa080e3ee4971b344277a5475cb492b22e8c2a98c5cc99d7a4c737dcf5e931de2b49bc4754819bc550667ee7fa73910dc8ac4779f0acde4cc85438b670abbfaa
- TLSH T1E7C08070434040654311D7593465561455C97557C8854256C4C5405481D7911F99D2CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar
- Size 37.4MB
- SHA256 c479b84d7c4a83c0da8ac83761d2252044b60f82ad3bcb0ec3d08d735fffaff2
- MD5 cd0721f7c5d6d15324111153ff90ae01
- SHA1 298b088279837acad77a57f03ff36570a14e1814
- SHA512 73349843317fb826637f82250384a6988962adbe8360f34fe11e5c3881244ee48e00473c81736defe7954adb2bf8f713e60da6ae3f148c5b0d7b4fec4814b422
- SSDEEP 196608:iyXUZMPd2bhA1F40MUd2bhAAUnW0dK7bJMdd2bhAJqfhXP5EzLIl+wkyQ2T5RcB4:6bhIF6bhHm65bhwcFmzLqc2T5RcG
- TLSH T185879E38A358D2BCCD53C5BCCF2E50B5611DB0DE52A1D3A7A15CC4703BA65D8E22FA98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\resources\app.asar.unpacked\dist\native\cleanup.feather
- Size 988KB
- SHA256 7c7c4e65f874da00f6fbb6c98128da45c2a3d388613aeff0179a22132ec1c27a
- MD5 ba6ac5d674875688357cb498a31146de
- SHA1 b7297c9b768ffdea35c600fd66e0e37648144838
- SHA512 59f931c8fc0866be6a3ebe581774c6e8c4b22106217b839d24c92598a66c1bc6ab8fe83b460f885beb2bff8710c61474e55c6fbcbc7c8d044213970b1a0660d8
- SSDEEP 12288:O0dD9oALKpJk9ptMn+lYv58SwpJXkvprbCBTmPxVZIVKayDSY1q:O4xJiJkicM8Swp9yrbCBTmP+zOrY
- TLSH T1A3252A59B69B69ACC05AC4B0835689622E3138CB0B25BDFF05D061353F6ABF46F3D319
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\resources\default_app.asar
- Size 108KB
- SHA256 ba7945028c515f55715aefc66f84ee41fdbc56a60a795287bea4066abe643acf
- MD5 521d2abd54279294c9e61821125ba99b
- SHA1 18e9c6e36970cfb29e8198e60d17c3475dde2f39
- SHA512 c4d06bab9c45cb6c696c66ecad86eea3cdb4abc5efea4d5604a5bfa5ecad12221177043afec8e11d7305d104185081b37c76651bf30ea0d5080c50cb0b610a6f
- SSDEEP 3072:UWDxvTvFRWrjXxs8xbKNkCeF1SBRbFdPQrZsHtL5uRF:UWDd5R4XxRYmS7orZsHtLI
- TLSH T16EB3E09012F20231D86B4AFE9FAF162676352417328DD4C4732E87649FE15D6A9E3BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\resources\elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\snapshot_blob.bin
- Size 331KB
- SHA256 81ce6161502faa15e5eb290e54dad17a48230387e946222ba176ed64742bacb2
- MD5 58fb8322e2802a8958ba7432545adf62
- SHA1 1da603b1a5edcc0e64fd11989c108abebbf2a5b6
- SHA512 906c7f75161dd319cf46b2bd60919ffc1c32a1a785730ea8752502be12175424289e14b7fdebe657d7daf568943a77efb95223b6297616ef7e1f907016cc694e
- SSDEEP 3072:T/nTOiXKMOt+xbRu2frRO+eioXw1Wu+P7YZo1A8GV61HfuOLQK+:bT5Xkt+H9F1Wu2cQxtHf/N+
- TLSH T14274BB06F759CB26C9893A745DE983982E2072CD9D55B30B3109B37E78BA3740D3A72D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\v8_context_snapshot.bin
- Size 696KB
- SHA256 6c890447d4edd953a1ec1c53293c74b2136c3241ad29b9661a4c137de6eaf6ba
- MD5 701fb35a91190327c7484161b6f49f9c
- SHA1 f0cef5279db84e8c8939d4ca037bad21f96a550a
- SHA512 5c74235e8fa4f8c456a2120f77ff713325992b07ebeade82cf668dbd121a1e7f70bb98d35eb01a6672caeeab5c7954892acca3415da0c99d136b63264f768922
- SSDEEP 6144:Faf8tLrT5X3ukt+H92AqDRcQxm2NyhaigNw69I3ndbkboE/UZ703yCTzrWD:Faf8tL35X3usno2NyI4NbkboE1rTzm
- TLSH T107E49761F71ACF26C6493A7D8DD657463930B2CE8E46E24B3406B33E78B96704D3662C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\vk_swiftshader.dll
- Size 5.4MB
- SHA256 9cefc470c455e874ea748a6a9369f5db6baae6411f982751f7738f4897a4b7ad
- MD5 de023dd3be8efcfd4f5595126e26ae9f
- SHA1 ee9e3f2b4b97f8ee489430fcdbdc897bf0bc8f78
- SHA512 5a66ca460f3165a438965b59a2c3f2290d404c3711cdfc97207c408dd361020f2cc10d4ea07024b5a4bf65a2130bbe54c6d425ae9ca050d80807d3c935e7876d
- SSDEEP 49152:xFdtiSIz4kPYFJBK5YAVKlCfuPkb6wQNecPAhUcknxrOgPniWaUCkS5iDOCpyFRb:xdiSI01rOQ7+2QrT0cCyD
- TLSH T18F464803F28681E9C06DE579875FA623F631F8840B2276DF56A00F192E66FE06B3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\vk_swiftshader_icd.json
- Size 106B
- SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
- MD5 8642dd3a87e2de6e991fae08458e302b
- SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
- SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
- TLSH T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\feather\vulkan-1.dll
- Size 933KB
- SHA256 a3425ea8384d16fc8983ff274a6a2f76c9349b2c6994f0c3c2984aeb256c6b0e
- MD5 67a9f7c7d2c99d0df014d886e39d6dbf
- SHA1 bc41775da61e90d303b0204d1cea51727a379f34
- SHA512 7255331cf69f1762f10b521af139453c82d847c1e9d067abe92bb53004bdbec3a7a452e5fb1d74c608399e3a0be2c7e82ff951fc0c8a10f2f13c759c342056f1
- SSDEEP 24576:e5mfUR+TKqlPgLgDE7zuU6Z5WGcXDYsHQDJ6g3P0zAk79oOHOwRU:2mfUR+uqlPDKzuU6Z5WGcXDYsHQDJ6gS
- TLSH T1A1156D239A544669C57AD034CDD2870789B074822327B9CF02A857097F6EFF47B7DB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\1fd21097-fffb-400b-bcec-8fb4d2240825.tmp.node
- Size 11.7MB
- SHA256 40146c1be5c0ddaf39b67c8ecf05539c8a949cde795b6427b547d1d3c8f7eb16
- MD5 d2089f7e22236c13f4cbc683c33ae016
- SHA1 b64ff2c3702123c8be483797ba8f944d03ebb5a9
- SHA512 83cc7fd5c751813d7412115ee1f98fb3241c02c4efffbf24bf64f9a73bab74b5fa0cbf5c416a059ee3c82531d2b9484348d1490da95d54e85e82cd5452f19543
- SSDEEP 98304:Fb0m4E+4QYWzLIl+wYoZF0MLIKfJgUO4S8nwcJT5+BY+bbLndkw9fWa:FXP5EzLIl+wkyQ2T5RcB+a
- TLSH T19CC618117A6B996CC59AC870834B4A735E2170CB0B36B9FF45C486393F69BF06B39718
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj9C2C.tmp\7z-out\chrome_100_percent.pak
- Size 112KB
- SHA256 cbe052e9bd36032cde9d0ad7496d611c6a3c98a130b960e1298d490254be1159
- MD5 129f8cee761c5bb414b2270356177f6c
- SHA1 0a10b55daf24c7f9fff1b22f853dd87a98433b7d
- SHA512 33f4ceb0ed18b2172e2f6d203ccab2954dd900592b2e62ce4a1019ab9404889ebdcf462a2479f1847c01b2835473e83859c77816e83ef76ee133990be3d55eb4
- SSDEEP 3072:DS4PisCv+/P9NebGz8LI1TwuLjQBHe7YAP18RVC2I:LYWFUbGz8LI1TnjQBQCrC
- TLSH T136B3D0D7B3B09D7DDA460BB783560170FCB31B2D06C2120A5A9AE479652BF88C8D93D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj9C2C.tmp\SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj9C2C.tmp\StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj9C2C.tmp\System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj9C2C.tmp\WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj9C2C.tmp\nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj9C2C.tmp\nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.feather\client-id.json
- Size 51B
- SHA256 6a9036b25c8547a3c2c18c036b4bd660b2000831f78a666a0dcaddb8c02c67a8
- MD5 48c1347b71475521f1db31fc6563be3d
- SHA1 81177d507ff589f220293beb7406a032f324b5b9
- SHA512 08397c7f12d429bf2f09355dde39d40cc612eb5c69fc5420be2c25f7facdde093b2f88ac78455e10e2fe1ca2be8019d0fede4db953b7c0d4854a9b79518e2a5b
- TLSH T1A3900287400525D154C04300555E945149692460C54258178496681449084C6257AD52
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\78c6bda2-19a6-4240-84b1-ad3a08e32993.tmp
- Size 57B
- SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
- MD5 58127c59cb9e1da127904c341d15372b
- SHA1 62445484661d8036ce9788baeaba31d204e9a5fc
- SHA512 8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a
- TLSH T101900297652634755E1F1D65400B889B5CF905704E0B5E0641D032969A2A45D088705F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Cache\Cache_Data\f_000003
- Size 81KB
- SHA256 d37f2d0abf2f0c0518c897fdb822e1d14fcc65cf9a0b180a52a44b755af5e005
- MD5 91c4dab95caa962984e748432e738341
- SHA1 cc21e7d4aff6fc5a1a20bb24b4d196ca068fc67a
- SHA512 b17c61e62e687c3b018694f3579451d878ae66b5240dcb79c0fc837eaacd1e3237208441cf03c674e718d5344f8d78a7b428b8d681f0d6ffb08bcdf7472fb9bc
- SSDEEP 1536:IRVF/sRPtQFhqVgyT1XgGILJpAv3Z1Nlh7wDAiyW72:QJWQDyhwGSuJP7IAiyL
- TLSH T1DA83128B3D7483F4D2D369689F9D5E9BB356B7B41BCE7D0859C36D9C0819800EC411A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Cache\Cache_Data\f_00000b
- Size 16KB
- SHA256 13232c4850db3285b4224c9c8b6e4b5cd176de7a857444129d0725bfab3353d7
- MD5 6338ce30cefeb3e75dac504aa00235bc
- SHA1 0296f222b748ed2982cc268d18af22b571d8a4a9
- SHA512 fdceca29c218f5aec5cf9d5eb6938761b62c840d1d2f3e967b611d07f8dc42bf3b53d4ae1b561d1eab60e213f84c553195e4c407b9ca70fb65f3790bf46753d4
- SSDEEP 384:FDvcFBiQBEp1EfzIH708NVmNhH5wzJx9e5ovatWSGu4SXNIy:BcjiQCKEHY8Nc185yb/4GIy
- TLSH T10472E13E51D948C7E472BD6C7970C0F8A539A87526AA0BD83E21F64A39D0B08D9DD181
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Code Cache\js\index-dir\temp-index
- Size 48B
- SHA256 4080f4f083d70f40e6d5aeae6ad03b05d116677e972822d2515311df45c7d844
- MD5 25880645c745e0fb0f055fbe0cc0060e
- SHA1 cc9957467d6e529a92d9ee2462867e03ebe4b107
- SHA512 bda067657505baea046cd5fd6bfbaea6f28252a0700645b5b4eaf228140a5a9778811467227f324ce04c25e00649d18db5b3252f920bb1451f9f1a4c6b2da88e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\GPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\GPUCache\data_1
- Size 264KB
- SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
- MD5 f50f89a0a91564d0b8a211f8921aa7de
- SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
- SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
- SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\GPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\GPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Local Storage\leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Network\82c8b61e-8088-4de7-8ff1-f7444b7760f9.tmp
- Size 1KB
- SHA256 87d6299a366254f046a1b45dba1092b7d49afae41ad27d63017b0eb4310ed109
- MD5 c6e66abb031c41c7cd1580d59dff8fac
- SHA1 587508085dcc12b73ae6c44c514ed86e8df4566a
- SHA512 7691aeafbe1f2526c5027b1627204e3860955439ae1b75004476437b1b0ddbe5501952726600a437a10433514b7d97a3824a817177596c9880ee531add726361
- TLSH T1E51124EBC7F4097E4722A3F46E297E23C5FE012907AC7C4285C4AF0F47A2871A54098E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Network\b8d2901a-c9f2-4947-8963-66e38d5506c6.tmp
- Size 872B
- SHA256 30fe9fc08b288c327ed7a6699649d155ce83637368ad443299acf2b2cf6a4180
- MD5 d534314e73145dd3dd5b22355694c09b
- SHA1 52228bac4a4d7a247288fb18f8de122fd1404d48
- SHA512 d28c164f436749507d110014e199723df432c1aed2763f921d7ae1fd87d93927f692fa7b54d0bdc3184649441abbb9d0e875626c3846c612e026aec02a53b523
- TLSH T1E61125FB87B4097E4722A3F45E257E23C6FE012907EC7C4285C4AF0A47A28729501ACE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000002
- Size 34KB
- SHA256 541d0e0a809088125564c25285d86b44ee58f6da81e981ec7511a6423c976867
- MD5 0301463c6ca9e3fd60910b14da626e03
- SHA1 89b1ba3554ee95ec29b47746fdb1e755dcd51f50
- SHA512 01b8077c4a14aeb7c155a8a6daa48987a3bcc2d52ee51912aee4c148a6610a75eaf65fe0eaab9c897bf667422d12e75a4c876a2d761be5f6c6bafae36185cfdf
- SSDEEP 768:R8K11hnezVRzGs6FKd3ERO3Bg8MyWaF/Q/4wq4K7g6mMmj5:R8K11hnezSs6wd0g5TFo/27g+mN
- TLSH T1A7F2F1B0053DCEF20E5D0C5CDA9B0F5E106B494D7864F8A1CBAC2A68773957B13B886E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000003
- Size 156KB
- SHA256 6a879228024ad2560881d214f9b952f50036dc300d5f8ad0486629553ae5e964
- MD5 316720adc2174267eab846a397771ba9
- SHA1 b1eaf4d8ff6feda2e46021d8f5cf2a5aa69620eb
- SHA512 a399355713a51c2fb1e717260529c8e1d76bf4bad12edff3cef294d15508aba9bfd9249a53b6c3d53e729fca1cbc8ac363c08e0294dcbfc503f9ce2580d9b0ae
- SSDEEP 3072:RVWBSBmqKYaHAyBiaHbiswte6+GNgCrKBI/CvfTNNg:RVbmqIAywaUIcprClg
- TLSH T197F3228A3C116C88689CF1797442142C5A581CEA4A2256C3F163CCE46DADB1FD3FE7BB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000004
- Size 286KB
- SHA256 831caf01f103aec188ee28c66d7c32653b8a384c4b3c6c25cd67276220c1afc9
- MD5 92c05048bd46348ddb96dd0c0062c947
- SHA1 e53ccfca08451253c26f48a399970435b5313e63
- SHA512 ce713fb4e6998bdfc278d7657f9e1f065f859164ab848078e8d07a705722e53c48fef99c8a23e3b67103d4ba3c3f1eb9f993694a4d68544b33029784239f23b1
- SSDEEP 6144:XAGwnWulCqHodolHFY3WcDL2dD1Y9tH36XmDdMsjUdg8rZQK/f:QGoCMQ3NCy6uKIK/f
- TLSH T1A954238B48BE721986F42D7E9D8DD4777479B9F073B053FAAE442602152E4A9800FE73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000006
- Size 16KB
- SHA256 d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
- MD5 49295de6ccd23cf80b6418a2d209868f
- SHA1 42a955b4560bb22cb9b5b39577f7a691ea345018
- SHA512 2954ab185fd84a08933bb6e79d91e301021fce4e632b477e765c172cacf72913561e101ed2f7e66bfbdc5946b35f2b63eb2b6f878e0afc9d26ffe71ee112a1c0
- SSDEEP 384:ptsKvz/u5wCI/0oMp5nh+b3fa4WKpZ5peChZBmNKduP:o6z/u5PhpNsb35Z5peCo
- TLSH T18472D17262FD7B51988958EE9F4F6ABFCDE14D753A5B942027E5010CA4470393FE0439
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000007
- Size 33KB
- SHA256 12f7a2ba40fce051a2d7f605f5baa1942cf628ecddee965fa08cdd3022658be7
- MD5 d6c543798636095e75c07a60c4726ce4
- SHA1 3ef109f5edbf443ad91124b9367bba3e2eb328ea
- SHA512 7cddca969f7f0c972aac21990fa4e3d9e6f5534e59ef21f77ba9508c86d3de8036c2a511bd9b8e282b7cb73c2f5a53982db0b02ffa361fc6b869924392644daa
- SSDEEP 768:fgZdyyfQgf0svNuZdiurfSk+UZHiGnm19gfhMwXx2UVdQTU1j36ErM:feyaRf0MWiur5+UFiGm3gfawhRe4t6
- TLSH T1F2F2F1411336EECA461D727E4D49F61F34FF2055879049AF8B8B2C9C721DA75BA2708B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000008
- Size 25KB
- SHA256 9c39210e1b4815d7df0ec9de3dbec12acd19ca27f4c4ad09c70c59dd1eda23a8
- MD5 2da4d699c833c49d4a6c09e264060096
- SHA1 22223f015150331a69f1035ae8f6e2f17fb627dc
- SHA512 6f4e6a29a9250b8be3005c83b366fc0a7d134598e7bf36f5d147212eb0da8928a6f66a2c6bb0817218d6d1847451a0e949ef36e1eab49d4ac2c99f8358defab0
- SSDEEP 768:AWKXQPPzpXrEhEFeG6XZI84A/Jxm8bD6nYcKV2HKq:AWiOzpohqefxhJxBbD6neq
- TLSH T1C8C2E0713A567E0738FF2BA890CBE8311124321886B3EEFD3709A25E49AD304D1375E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000009
- Size 30KB
- SHA256 e6ce711ef3ad3b74e04cfec40f8d759a0c8571a0a2918960ce68eb278d1bdf2d
- MD5 d4264e58167612232c1e15b470675f16
- SHA1 12b6f7f9e2f07e03f4d77a40478cc158ae81efdf
- SHA512 f7fe5742db7cd2760d7be6f5b4383124cac6a0637e09d182460a819023efd4f12898d4d9bbf94500ae2f0a114abf92e614c898eee7d7f57f3de42970119ce91b
- SSDEEP 768:4dJjLRDqIof3R6fMHO3NUVqB3ioUZwb6HcJJNNYgKc4dNXZh:eL9/QB6EuOBHqecJJYgKc4drh
- TLSH T168D2E103E3DAF7E304236A7FBB89A3CC9A592112509E639ED24BC45A17D0D6E9304A75
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_00000a
- Size 24KB
- SHA256 1f95d67100bbad3a8d2006b8fe134f226072489bec2fc8521b8c0a764942b509
- MD5 93a341278b7edd1f4f103e9305ed7d81
- SHA1 3c4bc98bd95bfa28858007a92f1ded4af10eadeb
- SHA512 994aaab501f575f9971dae424c13b6753e701310420307bfa9e98b30c45fe004182dbe2de7140af52ab5de2df4c06a95d2e577fd5fdfef95777399e343b350fa
- SSDEEP 768:ToU1NuKj3LycuxlYCWYkUUbdR/fXUICdM3:To8uKluEmYZRHUIt3
- TLSH T1E7B2E06F3CE72670F154BEE5806D6BE8399118269A36F1E58CD5878E88D8E1F030778C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_00000f
- Size 16KB
- SHA256 0f2226c2fb822f85a31ffd50efbc77fdef55b5fd3846cc10d831e6d7cdd1d327
- MD5 6732f93efe2f21897a329a512447d3f6
- SHA1 912be0d4cdd75bd98f8d7e5451b2026072d7f1ba
- SHA512 d78ff92977cb02614259b38f7d2fcfbbfeb5b7c47fe6df20680865d7b065542edfc7312b1aaab0aa198e990ac0abc38024946dc3260029acc2ee22c498808df2
- SSDEEP 384:xFCqXdpWzS7Pe6etwILo8BZjYNeOtyj2pW8Tn4+QnV7+b7n:WYpWzwlfI3ZjYNTnCV7+3
- TLSH T19A72D047BE60312185882346D11CBAABE5675C9718A108E982D0CB33DF767B51FF7D47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000010
- Size 17KB
- SHA256 13f954979523c02db8bc70af9de48b97ddfd3cebb4ec4e4575bdf1298cefb521
- MD5 42a1f75b767da6f6ad1974c233c336f9
- SHA1 b2b29ec1b60c3c88cb4b4173baf61e37648f3c96
- SHA512 c978df5c5fdf4ab7a069e70015bc444f9b73c29f8f26c9926c969623ab7071ee766b05841f9cd36bf0bcebfdbe27c9723b4e4554c6463ea911aacc72547a2035
- SSDEEP 384:q80gSXUPpDr9dH5qd/I9Ri/qXy7eKskXPJHg61L7zsjg/7zHhXSjqmmKo:9SXUd9ZQd/I9RYHPJHpxzGC2qmmKo
- TLSH T16772D04404C0CD544FC8E46BB91F12F5FAEAE0609B67B29A6306F64C3D1606E6C92A7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000011
- Size 27KB
- SHA256 04db5d2fb3e473435764b9c7cea53f0c854f9903460da52de57dded69770c7dc
- MD5 02a709c6efb7f9b898b0f73f717b6f95
- SHA1 5f67175b4b629f48c80ef1c7a0593d1519c0a950
- SHA512 9cae96968fd2f9845852dd55a81e3540b0912cae818ca72a9f675bb9bd6596183e074c0570b434959d4485e855239cf0f41390a2d2b6a2efbe3ab3d11478b74a
- SSDEEP 768:ONhatd4dMlvVtjSAyMe3VxXFXgDfZZ2Q0C/h+l:ONhodRjtmA7e37qfL2ji+l
- TLSH T1E5D2E1265C046816A4F7F1BA510E8E79DE74D7794CD8090BE2456F321E4B2A17DCBBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000013
- Size 135KB
- SHA256 32773302cbbd263b8491f5bc83abcb5ef71bc9ceed9cd3f7384ab2464d21f15e
- MD5 9b891c3f5f6317686bf0f8f6c036443b
- SHA1 3659aef386761090bab6fba148ced6bf26c1c69c
- SHA512 6bf7387d703a11906f028f5793dda26b8f2fecd93dc3debb919fb87bdb6417c0b0c6eb5ea190b797a04461aa2a86ced5bd672450eb39ebab501a0bc4d8d8e1ad
- SSDEEP 3072:xj9pedCEpzvwzng44kQ11EqrLDcBUSo80F/uGnKJdvl5:3REdvwznr4PnDyo8gRKDvl5
- TLSH T140D3126480CE4AB11DFA40328063BB1032632A8F1CA1535E76DB5BB1FFB52D8975DF25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000014
- Size 182KB
- SHA256 a56e33c6c759fda45b86bd2a07a98c231207678a3f9632e68d13309add278ef0
- MD5 619dcdcfe63511bec7249b08bcec95b3
- SHA1 05fecaaa800245fc0988457a9b51b0278d48dace
- SHA512 1a7c3b7388094bf10001f676156470f3e9da4ecca00151d3704a50148301721c30c9ef1758739bad3a3b82ff23410b5f5ab4cbdc2bd0abdc7712a56b2bd03fe6
- SSDEEP 3072:gA8ZYU1oEbtpi6snQhJJ5Ky4H0Ul/VZ00tOwYFQ/FYSRqYUXHaGBPf/oOL:oZzpMQhJJuHldSwWyFEnf/oOL
- TLSH T1A504125B9A8AF1008C57F64D6689257ACD7E085D06F92FD319988C7DF273C2EB38A184
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\No_Vary_Search\snapshot-new.baf
- Size 20B
- SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
- MD5 7177cd1b3e21f48a23cb47dc11b36f7b
- SHA1 9e1086a6c2296b41c004834f7521790bb2941d67
- SHA512 e7e8b2204e455f6e7fa5a2239cbb4c0c506562d30184fb07d63f8544cd0249226bd3d7d399ef0b69774e72afe100f9858da527b0e15a7bd3c35782d7513eff23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Code Cache\js\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Local Storage\leveldb\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Network\19daecc3-46d1-4152-8691-585f5f2315b7.tmp
- Size 8KB
- SHA256 8793f5a1ba90621e047cbd1fed8ce2ccb8d062ebfe9706c54b168babe22f4a50
- MD5 d75a41de1eddc8a4454bcf109d6b41aa
- SHA1 c533360c07a98432886f719b853a4679c8c410a2
- SHA512 85032a11a1699eb21933812ce0f74922ed94ec4296dd135a81392a8285125094865a0eaf1d9d809a19cb923cfc510bb1839876baef8a2082dcf5912a3d0d5fa3
- SSDEEP 192:DH9HuHQHyJHbH/JHoeHZHFHgH43HyHeHIHLH2HqH6HLHhiH6H5HiHrHKHSHHHOHn:DH9HuHQHqHbH/JHoeHZHFHgH6HyHeHIQ
- TLSH T1DD0216EBC7F80A7E8622A6F55F153E27C5EE152C139C3C4389C49F0E57B1872964168E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Network\40ee4c56-9482-4f47-ba86-b89bc6af1ac7.tmp
- Size 27KB
- SHA256 6dcd2acd6dc34bca2462c8117801ee55848de1397552560cb5d171ad4907b1aa
- MD5 e7e1f44febae18b9e24b142a2eecabc9
- SHA1 aa78bec638b5b22dc301abc2d6b84f41fcec87de
- SHA512 cd8cad75f7481878e44c8d43373eb14b031f61adf4d44e1110274677d7dc22e7e11b95d90ea10659a8c261d0a94bfd94f29cb944dd52fe4e606a7609f7c5eb3e
- SSDEEP 384:DH9HuHQHqHbH/JHoeHZH9H5HrHiH/HIHBHGeHVHF2HkHBHAHRHJHkLH7qHaHuHj+:47XvjOpOpJonYpoFQ9yA
- TLSH T1A0D205EBC3F80A7E4622A6F95F253E23C5ED152C139C7C4389C89F0E67B5872964158E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Network\5228be2c-469e-4c6d-8a13-d043a5c6c389.tmp
- Size 22KB
- SHA256 993735ef11a6d25b0aaa1abbae87faf7dce2205ebd09d4e9c80e2f16bfbf6646
- MD5 949454260cdb683dd9f078c64c7ced78
- SHA1 6d4e020900daaa5e3ec9b10f3491003b29f37f03
- SHA512 cd11ba0b3676e107afcee95c18807e2acc9774c5a4e5c89105e86b3958e7722de27ccfee50e34f3a5fac9a79d57ac3fc623bdfc8eeef9a80776764d275c10278
- SSDEEP 384:DH9HuHQHqHbH/JHoeHZH9H5HrHiHjHkHBHAHRH5HmHwHkLH72HMYHEH6pHwHoHPU:4TXaXmMJ+WBalBio/Z
- TLSH T181A205EBC3F80A7E4622A6F96F253E23C5FE1528139C7C4389C49F0E57B5872964158E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Network\814a811e-8ca1-4ad7-92e8-e86fa1b8d88d.tmp
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Shared Dictionary\cache\index-dir\temp-index
- Size 72B
- SHA256 04eb92cd49201631cebf435fb1f5f7131ded31d63209bc71e688ae8fba4f17cc
- MD5 e941356edeed9fcd6df627a9415f8b61
- SHA1 75537cd425d713749aff2f6daf67210d92b0d382
- SHA512 6a87c5c383542abc0b702fa0bce062e184cea69f248a4335803216d6a54f04e5dacf7aa1f767c73baab77b95b5694f340d3d6513b227a88b962a55dd5b55cf29
- TLSH T143A002912F552111D8025A7050B307C67B65CE914146035355D01989CD502C0DD01485
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Shared Dictionary\cache\index-dir\the-real-index
- Size 48B
- SHA256 40182e72a5e3645820d17a786bf5e7a9fbe40a25f4de1079381274c32c3ede2e
- MD5 9be9e38c0acd34993943ad7e01b023a8
- SHA1 ba2b978e0978d310a739542f2ad78395ec3eb77a
- SHA512 7351517f972004ea84023c9b59f8ad6f22449e3f474b8ac0dea371abfaa37287cfb297223a78beda805b6f0a59d29e27b9bc526a51586d77661bea4340cecba4
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Preferences
- Size 158B
- SHA256 f0d2fb236f43321bada3f48a178ccc227bae1a5a644b658b9ad755eaeabf0e8f
- MD5 79b570e5ecad273854a349ce0cd7117a
- SHA1 e055105d6fa40dac8ce12c2610d27933397881b4
- SHA512 76523106f56e4c9c725d88e2a9c35bb6f24fdd502845e677e74dcf422ecae55aa36e5b3bcc0a50657b89a8bec36090fb4c7b34ce6750d6e897ed0f1c7112e7e0
- TLSH T1FBC08C62783064338A1E0AB2202FFC1628BA00644A07694649DCB28C482BA4D088B21A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512