7eedbccca8e1ea9ed101644bb290925ba2c27897e703df91be66cdd10707c632

Analysis

max time kernel
300s
max time network
314s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
13/11/2026, 21:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Feather Launcher.exe
Size 204.3MB
Sample261113-1madxsf14p
SHA256 7eedbccca8e1ea9ed101644bb290925ba2c27897e703df91be66cdd10707c632
MD5 57991930ccaf4fda7af9fd47c9fc3551
SHA1 69782f3f4362da949b01f23088f8b3c5791c85b3
SHA512 51e3104d9c56274042ebc247824471a3341e84dd787ba393be5f26375f6c1221e7f4aa10274447cf17d6a172c8caefbc64f9193b7d120567a2e723fd85381d10
SSDEEP 1572864:7F0bD02Vm2JXvkyKLOdxjRDZP7HXvx8ITBb0mDd30gSlKkSxgi1QjR60dnKVcvhz:ejlvtDtIJpNStVo
TLSH
T114A88B03E29A51D9C05DD1755B4A9233FEB1B8054B24B3DF2BA447522F76EE82B3DB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2336	Feather Launcher.exe

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Feather Launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Feather Launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Feather Launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Feather Launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Feather Launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Feather Launcher.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2322150968-3922673059-3248713381-1000_Classes\feathermc	Feather Launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2322150968-3922673059-3248713381-1000_Classes\feathermc\URL Protocol	Feather Launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2322150968-3922673059-3248713381-1000_Classes\feathermc\ = "URL:feathermc"	Feather Launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-2322150968-3922673059-3248713381-1000_Classes\feathermc\shell\open\command	Feather Launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-2322150968-3922673059-3248713381-1000_Classes\feathermc\shell	Feather Launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-2322150968-3922673059-3248713381-1000_Classes\feathermc\shell\open	Feather Launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2322150968-3922673059-3248713381-1000_Classes\feathermc\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\Feather Launcher.exe\" \"%1\""	Feather Launcher.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5680	Feather Launcher.exe
5680	Feather Launcher.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe
Token: SeShutdownPrivilege	2308	Feather Launcher.exe
Token: SeCreatePagefilePrivilege	2308	Feather Launcher.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 2308 wrote to memory of 3264	2308	Feather Launcher.exe	79
PID 2308 wrote to memory of 3264	2308	Feather Launcher.exe	79
PID 2308 wrote to memory of 580	2308	Feather Launcher.exe	80
PID 2308 wrote to memory of 2336	2308	Feather Launcher.exe	81
PID 2336 wrote to memory of 5220	2336	Feather Launcher.exe	82
PID 2336 wrote to memory of 5236	2336	Feather Launcher.exe	83
PID 2308 wrote to memory of 5432	2308	Feather Launcher.exe	84
PID 2308 wrote to memory of 5432	2308	Feather Launcher.exe	84
PID 2308 wrote to memory of 5404	2308	Feather Launcher.exe	85
PID 2308 wrote to memory of 5404	2308	Feather Launcher.exe	85
PID 2308 wrote to memory of 5520	2308	Feather Launcher.exe	86
PID 2308 wrote to memory of 5520	2308	Feather Launcher.exe	86
PID 2308 wrote to memory of 5576	2308	Feather Launcher.exe	87
PID 2308 wrote to memory of 5576	2308	Feather Launcher.exe	87
PID 2308 wrote to memory of 2252	2308	Feather Launcher.exe	88
PID 2308 wrote to memory of 2252	2308	Feather Launcher.exe	88
PID 2308 wrote to memory of 5680	2308	Feather Launcher.exe	89

C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2308
- C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1672,i,11724494611352271818,1384269129828285123,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1668 /prefetch:2
  2⤵
  PID:3264
- C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --field-trial-handle=1672,i,11724494611352271818,1384269129828285123,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1948 /prefetch:11
  2⤵
  - Reads the TCP/IP host and domain name from the registry
  PID:580
- C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --no-sandbox --no-zygote --disable-blink-features=GetDisplayMedia --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1672,i,11724494611352271818,1384269129828285123,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3124 /prefetch:1
  2⤵
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious use of WriteProcessMemory
  PID:2336
- - C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" C:\Users\Admin\AppData\Local\Temp\resources\app.asar\dist\electron-launcher\preload\preload-mod-watcher-fork.js
    3⤵
    PID:5220
- - C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" C:\Users\Admin\AppData\Local\Temp\resources\app.asar\dist\electron-launcher\preload\player-server-addon\player-server-addon-path-watcher-fork-process.js
    3⤵
    PID:5236
- C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1672,i,11724494611352271818,1384269129828285123,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:5432
- C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=1672,i,11724494611352271818,1384269129828285123,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:5404
- C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=1672,i,11724494611352271818,1384269129828285123,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:5520
- C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --app-user-model-id=FeatherMC.FeatherLauncher --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=1672,i,11724494611352271818,1384269129828285123,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5576
- C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --field-trial-handle=1672,i,11724494611352271818,1384269129828285123,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4296 /prefetch:12
  2⤵
  PID:2252
- C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather Launcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\Feather Launcher" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1672,i,11724494611352271818,1384269129828285123,262144 --enable-features=EnableTransparentHwndEnlargement,HappyEyeballsV3,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4468 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

07feec99-0e7e-4af1-9210-cd78a78e846b.tmp.node

Path C:\Users\Admin\AppData\Local\Temp\07feec99-0e7e-4af1-9210-cd78a78e846b.tmp.node
Size 11.7MB
SHA256 40146c1be5c0ddaf39b67c8ecf05539c8a949cde795b6427b547d1d3c8f7eb16
MD5 d2089f7e22236c13f4cbc683c33ae016
SHA1 b64ff2c3702123c8be483797ba8f944d03ebb5a9
SHA512 83cc7fd5c751813d7412115ee1f98fb3241c02c4efffbf24bf64f9a73bab74b5fa0cbf5c416a059ee3c82531d2b9484348d1490da95d54e85e82cd5452f19543
SSDEEP 98304:Fb0m4E+4QYWzLIl+wYoZF0MLIKfJgUO4S8nwcJT5+BY+bbLndkw9fWa:FXP5EzLIl+wkyQ2T5RcB+a
TLSH
T19CC618117A6B996CC59AC870834B4A735E2170CB0B36B9FF45C486393F69BF06B39718
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

client-id.json

Path C:\Users\Admin\AppData\Roaming\.feather\client-id.json
Size 51B
SHA256 9a841cf1fc7bcb0aee2cb0532a1e5db9f69e663d4bbce126341a44d289102208
MD5 5c5436dcd3d2ddfafbca8386c0e4f2c7
SHA1 21499f196641fe41ba51836da809cb5723aea1cb
SHA512 3f2b036deb844721a4a40bbc9c1bb590e7cc47d1d7bb38d665bac46f27fd435cb3dadd3baba57af6904ecde7a2cb8796b3cb17fae53d44cb08d8129872ef17f0
TLSH
T15C900244E245D650351A326455548080807418068505155D5959A15798890BC0736135
MD5 SHA1 SHA512 TLSH

Submit Download

0d7695e3-0f7f-4e55-9a6e-1aae04fe041c.tmp

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\0d7695e3-0f7f-4e55-9a6e-1aae04fe041c.tmp
Size 57B
SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
MD5 58127c59cb9e1da127904c341d15372b
SHA1 62445484661d8036ce9788baeaba31d204e9a5fc
SHA512 8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a
TLSH
T101900297652634755E1F1D65400B889B5CF905704E0B5E0641D032969A2A45D088705F
MD5 SHA1 SHA512 TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Cache\Cache_Data\f_000003
Size 81KB
SHA256 d37f2d0abf2f0c0518c897fdb822e1d14fcc65cf9a0b180a52a44b755af5e005
MD5 91c4dab95caa962984e748432e738341
SHA1 cc21e7d4aff6fc5a1a20bb24b4d196ca068fc67a
SHA512 b17c61e62e687c3b018694f3579451d878ae66b5240dcb79c0fc837eaacd1e3237208441cf03c674e718d5344f8d78a7b428b8d681f0d6ffb08bcdf7472fb9bc
SSDEEP 1536:IRVF/sRPtQFhqVgyT1XgGILJpAv3Z1Nlh7wDAiyW72:QJWQDyhwGSuJP7IAiyL
TLSH
T1DA83128B3D7483F4D2D369689F9D5E9BB356B7B41BCE7D0859C36D9C0819800EC411A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Code Cache\wasm\index-dir\temp-index
Size 48B
SHA256 3872fcf83abdad1af574bed84c4f211150cbbb707b6b36d105416e6bad151782
MD5 f75f40e30fd322414bdff52aaf277628
SHA1 41428acc8afec4c4404f576052e24153cd1e84f8
SHA512 b2b98a1083855cf3855e515a148b905b348f93ba80df04221791945c742027fb993e3d1adffbb4291d86fbbd04a7d2058c42a197d8ea3a5f65dd563f4c1d8f76
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

d2e8f2b8-514b-4b0f-bdca-951b212711c2.tmp

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Network\d2e8f2b8-514b-4b0f-bdca-951b212711c2.tmp
Size 872B
SHA256 c04e169337c7abc3f05821b141c75245b67c38df26d017c716dc61366b4ccc5a
MD5 8de2d158750df90b24be00cf196ef21a
SHA1 69252606d98b2b9c536334dbcde2745e04dffcd5
SHA512 51b39ef94030c3762e987ecbe001f1442773ce2266cabe542ba50fe5a1e2012d6adef316637b2a2234ab081e191ba4257f34bfca7b97b4570d40924eb055c7d0
TLSH
T1BB1125FB87B4097E4722A3F45E257E23C6FE012907EC7C4285C4AF4A47A28729501ACF
MD5 SHA1 SHA512 TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000003
Size 156KB
SHA256 f6ffec6d13dfe367acb439279525a5153e23b81adc1e8c0eb37ab2efcae68be4
MD5 9b2427962c38310cca9c7f3c8e3a34cc
SHA1 ef10786b46924c461a0a3a045f2905245a37e3ea
SHA512 3322682499a8c67ea8216f3202b48ef34f1843514e4a85debd7445c8b1083d9563a09c98c829702eb577cdfc543dcbf484331e086257eccd63cb048f2d773557
SSDEEP 3072:FbcsoxNxxAGLNRv4Q8YcC1N3RLeoFgostZOIkdTw697uXC8X8BMIF:FboN8GNRgXuN3RigBeWMPNMN
TLSH
T10BF312AB5A923F1C26EC36B80462844F447FC4C52EDFD0ED723D5C6F0B999A39D69082
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000004
Size 286KB
SHA256 831caf01f103aec188ee28c66d7c32653b8a384c4b3c6c25cd67276220c1afc9
MD5 92c05048bd46348ddb96dd0c0062c947
SHA1 e53ccfca08451253c26f48a399970435b5313e63
SHA512 ce713fb4e6998bdfc278d7657f9e1f065f859164ab848078e8d07a705722e53c48fef99c8a23e3b67103d4ba3c3f1eb9f993694a4d68544b33029784239f23b1
SSDEEP 6144:XAGwnWulCqHodolHFY3WcDL2dD1Y9tH36XmDdMsjUdg8rZQK/f:QGoCMQ3NCy6uKIK/f
TLSH
T1A954238B48BE721986F42D7E9D8DD4777479B9F073B053FAAE442602152E4A9800FE73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000005
Size 16KB
SHA256 d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
MD5 49295de6ccd23cf80b6418a2d209868f
SHA1 42a955b4560bb22cb9b5b39577f7a691ea345018
SHA512 2954ab185fd84a08933bb6e79d91e301021fce4e632b477e765c172cacf72913561e101ed2f7e66bfbdc5946b35f2b63eb2b6f878e0afc9d26ffe71ee112a1c0
SSDEEP 384:ptsKvz/u5wCI/0oMp5nh+b3fa4WKpZ5peChZBmNKduP:o6z/u5PhpNsb35Z5peCo
TLSH
T18472D17262FD7B51988958EE9F4F6ABFCDE14D753A5B942027E5010CA4470393FE0439
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000006
Size 17KB
SHA256 13f954979523c02db8bc70af9de48b97ddfd3cebb4ec4e4575bdf1298cefb521
MD5 42a1f75b767da6f6ad1974c233c336f9
SHA1 b2b29ec1b60c3c88cb4b4173baf61e37648f3c96
SHA512 c978df5c5fdf4ab7a069e70015bc444f9b73c29f8f26c9926c969623ab7071ee766b05841f9cd36bf0bcebfdbe27c9723b4e4554c6463ea911aacc72547a2035
SSDEEP 384:q80gSXUPpDr9dH5qd/I9Ri/qXy7eKskXPJHg61L7zsjg/7zHhXSjqmmKo:9SXUd9ZQd/I9RYHPJHpxzGC2qmmKo
TLSH
T16772D04404C0CD544FC8E46BB91F12F5FAEAE0609B67B29A6306F64C3D1606E6C92A7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000007
Size 25KB
SHA256 9c39210e1b4815d7df0ec9de3dbec12acd19ca27f4c4ad09c70c59dd1eda23a8
MD5 2da4d699c833c49d4a6c09e264060096
SHA1 22223f015150331a69f1035ae8f6e2f17fb627dc
SHA512 6f4e6a29a9250b8be3005c83b366fc0a7d134598e7bf36f5d147212eb0da8928a6f66a2c6bb0817218d6d1847451a0e949ef36e1eab49d4ac2c99f8358defab0
SSDEEP 768:AWKXQPPzpXrEhEFeG6XZI84A/Jxm8bD6nYcKV2HKq:AWiOzpohqefxhJxBbD6neq
TLSH
T1C8C2E0713A567E0738FF2BA890CBE8311124321886B3EEFD3709A25E49AD304D1375E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000009
Size 30KB
SHA256 e6ce711ef3ad3b74e04cfec40f8d759a0c8571a0a2918960ce68eb278d1bdf2d
MD5 d4264e58167612232c1e15b470675f16
SHA1 12b6f7f9e2f07e03f4d77a40478cc158ae81efdf
SHA512 f7fe5742db7cd2760d7be6f5b4383124cac6a0637e09d182460a819023efd4f12898d4d9bbf94500ae2f0a114abf92e614c898eee7d7f57f3de42970119ce91b
SSDEEP 768:4dJjLRDqIof3R6fMHO3NUVqB3ioUZwb6HcJJNNYgKc4dNXZh:eL9/QB6EuOBHqecJJYgKc4drh
TLSH
T168D2E103E3DAF7E304236A7FBB89A3CC9A592112509E639ED24BC45A17D0D6E9304A75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_00000a
Size 24KB
SHA256 1f95d67100bbad3a8d2006b8fe134f226072489bec2fc8521b8c0a764942b509
MD5 93a341278b7edd1f4f103e9305ed7d81
SHA1 3c4bc98bd95bfa28858007a92f1ded4af10eadeb
SHA512 994aaab501f575f9971dae424c13b6753e701310420307bfa9e98b30c45fe004182dbe2de7140af52ab5de2df4c06a95d2e577fd5fdfef95777399e343b350fa
SSDEEP 768:ToU1NuKj3LycuxlYCWYkUUbdR/fXUICdM3:To8uKluEmYZRHUIt3
TLSH
T1E7B2E06F3CE72670F154BEE5806D6BE8399118269A36F1E58CD5878E88D8E1F030778C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_00000c
Size 27KB
SHA256 04db5d2fb3e473435764b9c7cea53f0c854f9903460da52de57dded69770c7dc
MD5 02a709c6efb7f9b898b0f73f717b6f95
SHA1 5f67175b4b629f48c80ef1c7a0593d1519c0a950
SHA512 9cae96968fd2f9845852dd55a81e3540b0912cae818ca72a9f675bb9bd6596183e074c0570b434959d4485e855239cf0f41390a2d2b6a2efbe3ab3d11478b74a
SSDEEP 768:ONhatd4dMlvVtjSAyMe3VxXFXgDfZZ2Q0C/h+l:ONhodRjtmA7e37qfL2ji+l
TLSH
T1E5D2E1265C046816A4F7F1BA510E8E79DE74D7794CD8090BE2456F321E4B2A17DCBBC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_00000e
Size 135KB
SHA256 32773302cbbd263b8491f5bc83abcb5ef71bc9ceed9cd3f7384ab2464d21f15e
MD5 9b891c3f5f6317686bf0f8f6c036443b
SHA1 3659aef386761090bab6fba148ced6bf26c1c69c
SHA512 6bf7387d703a11906f028f5793dda26b8f2fecd93dc3debb919fb87bdb6417c0b0c6eb5ea190b797a04461aa2a86ced5bd672450eb39ebab501a0bc4d8d8e1ad
SSDEEP 3072:xj9pedCEpzvwzng44kQ11EqrLDcBUSo80F/uGnKJdvl5:3REdvwznr4PnDyo8gRKDvl5
TLSH
T140D3126480CE4AB11DFA40328063BB1032632A8F1CA1535E76DB5BB1FFB52D8975DF25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000010
Size 182KB
SHA256 a56e33c6c759fda45b86bd2a07a98c231207678a3f9632e68d13309add278ef0
MD5 619dcdcfe63511bec7249b08bcec95b3
SHA1 05fecaaa800245fc0988457a9b51b0278d48dace
SHA512 1a7c3b7388094bf10001f676156470f3e9da4ecca00151d3704a50148301721c30c9ef1758739bad3a3b82ff23410b5f5ab4cbdc2bd0abdc7712a56b2bd03fe6
SSDEEP 3072:gA8ZYU1oEbtpi6snQhJJ5Ky4H0Ul/VZ00tOwYFQ/FYSRqYUXHaGBPf/oOL:oZzpMQhJJuHldSwWyFEnf/oOL
TLSH
T1A504125B9A8AF1008C57F64D6689257ACD7E085D06F92FD319988C7DF273C2EB38A184
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000011
Size 16KB
SHA256 0f2226c2fb822f85a31ffd50efbc77fdef55b5fd3846cc10d831e6d7cdd1d327
MD5 6732f93efe2f21897a329a512447d3f6
SHA1 912be0d4cdd75bd98f8d7e5451b2026072d7f1ba
SHA512 d78ff92977cb02614259b38f7d2fcfbbfeb5b7c47fe6df20680865d7b065542edfc7312b1aaab0aa198e990ac0abc38024946dc3260029acc2ee22c498808df2
SSDEEP 384:xFCqXdpWzS7Pe6etwILo8BZjYNeOtyj2pW8Tn4+QnV7+b7n:WYpWzwlfI3ZjYNTnCV7+3
TLSH
T19A72D047BE60312185882346D11CBAABE5675C9718A108E982D0CB33DF767B51FF7D47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000012
Size 33KB
SHA256 e6c38f586311f887b791c83c62d03bfcaa0ca1e948a700d509bccfd1b97f6a6d
MD5 7afa3ada8c057281676f085bb5946602
SHA1 5f22c6496a1f1c31109aff1909d59fbdf6b22a97
SHA512 291247008ae7bbc17ae2c09697192d8d396f0e919153deb71f0a7d5fba1f6463c3dbc1c937006f491f2af7ab75bf4506d2d9e0fe2bbe0d382865bde8c3d92f52
SSDEEP 768:o7ucMvclmNkcxaS1bO1mVl+/IHiUIZFH8L0IiWbLVfXtaBw:o1Mm3ol+/yg8L0IiY5fdaBw
TLSH
T143F2F2A44F93CE9690D067041CDCD20F8BA4F913780667E9FDD1B6AB63762856B07B12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000014
Size 16KB
SHA256 63762af2d2c8029e91e24c88606051c8c894a813a1ce746349dc5cc6f3c2eddc
MD5 03522916a6ff7f30dba635667b695b92
SHA1 36cc55361c5e83a119b55be9d34441d946153cf7
SHA512 619205f2447f85598154597bce8096e6623eeacf44bdd9705063f8abc111d793e923d074d529e602ae7e40a45fa2c56aca2cb0f0349441220b8d318bed91fa78
SSDEEP 384:bi9Ngj4O1wNkO5TU6bu/Aw4RJspheKGyQu041Fdqro9Swr3:biG4TN/lU0uoHrgGaXOwb
TLSH
T1E272D09CB8350E89B30031764558AE6E5F662CB46647576CB4FCEF12B49DC21C6092F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000015
Size 51KB
SHA256 d0329b60d82abb32df91de5e6ca34f8c802bd3a574fd9108e835b87e37638a60
MD5 e93f4f8b164b63f5dc72338ff79164fd
SHA1 e2cc753523f875c8dacca4199aa905c0c8c76cb7
SHA512 16337c89ea960002c762a03dea62191cc6ecbaf937bdeca2811461286e3e0ee77cff45f55e201028df655c01db83a6fce913b375f8ea3211e6bde45f72b55965
SSDEEP 1536:9eniWY5OeIEmq/TSHRPpHiejLiIgUK60Oe:kiWY5OVEmjHiEpgr60Oe
TLSH
T1723302CD192D8B9F4BB9E81D42E0C43E40B98664F07BD4C7786B0A92CCE675B19F541B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000025
Size 1024KB
SHA256 7c9f49d1dbb065eb0019c0bd05a6ef682a803eea83f50f1533151080faeb02a7
MD5 378e43f6c240e660474d2591226faa3f
SHA1 4c0ae7f1ea165d9059bcf7c1eca3fc5000d5b46d
SHA512 18f26e947826d35f8bac7054e2cb97b7780a0dea0d2d60cc1918033b4b8530db2fd534ed61a068b930f67013eb7e75d7cb9b96c68977f5f443644ce929a8e6a5
SSDEEP 24576:LPIxOlRUymUh3fdcDdk7RQFPrT8FtCiWkTNOn84JoLXjE:LSiRUFU9gklePrT7sZO8qcg
TLSH
T14E25339CBB90FA64D3D66A76DA52835B78BC828051B5730F896938E104CB0F74DD1EF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000026

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\Cache_Data\f_000026
Size 35KB
SHA256 bd5f58395e7aa67a8e4ea206484fdcfb08d95608a091b1df8623284d0268fe19
MD5 f19ed9713d1f67236783ce634a153929
SHA1 43f3a93cf0c043d1cce9aab476d8f30966e38cf8
SHA512 61540f9144d3ca995baf5b22acf384059c4fb95a8addf2656c5deebf21f28a2381ebd3dd851cb6afb98e722f1e65a1263a6a6cbef6c2e0be2eaa6d1e9762fb6a
SSDEEP 768:juS//2x0mUjyAEMgRDYNBiZqAja22jpF833K/l/4VuvTVH+nPBhKk8:jj/2XIyAh4eiZqAja22jpF833K/leuxh
TLSH
T14DF2E131F7B493C59275BEB2C73D8C9BFC986971DC82DA4B8F95848485B23269A48084
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot-new.baf

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Cache\No_Vary_Search\snapshot-new.baf
Size 20B
SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
MD5 7177cd1b3e21f48a23cb47dc11b36f7b
SHA1 9e1086a6c2296b41c004834f7521790bb2941d67
SHA512 e7e8b2204e455f6e7fa5a2239cbb4c0c506562d30184fb07d63f8544cd0249226bd3d7d399ef0b69774e72afe100f9858da527b0e15a7bd3c35782d7513eff23
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

4c356c00-da1d-4d66-8bcc-9e3aae73e5a3.tmp

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Network\4c356c00-da1d-4d66-8bcc-9e3aae73e5a3.tmp
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

f218f623-91c0-4aa6-bb85-dc5f77dd4a9b.tmp

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Network\f218f623-91c0-4aa6-bb85-dc5f77dd4a9b.tmp
Size 9KB
SHA256 f08e8544975b08da9c39ae596df8a1d6cf1020729c8ff39174c30af2d8317e1a
MD5 d287f7f0d8bdec55f34d3dc9574c75bf
SHA1 c410c1747a3cd90f328d92b94546d74338dc58a3
SHA512 2e234e000f340f1e94782a7bf08b4e7406a6dd5b440b7870e07806f5aba2466a482b2fa11c2dad132adbb5d3b2d294b5f91f72ba97a5315d3b93f3ef5e3d0b7e
SSDEEP 192:DH3HBHdHuJHrJHceHuHWH3HXeHHeHXHgHaH2HeHIHLHSH6HwHrHuHOHMRH6tHRHS:DH3HBHdHWHrJHceHuHWH3HXeHHeHXHgZ
TLSH
T1461237EBC3F80A7E8622A6F95F157E27C5ED162C135C3C0389C89F4E57B1872964168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

feae1f21-41e8-4d27-862a-3deec83db2d3.tmp

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Network\feae1f21-41e8-4d27-862a-3deec83db2d3.tmp
Size 10KB
SHA256 7c94a7a24fcf05fa5b6a1ef4a8e28a6fe5600a0121b160b08ebaafc4ee245aca
MD5 9dbc6e0d627afd090803a14b6d75ec7b
SHA1 50d6f5dbd9594826bef75229f5648dc9e5737a43
SHA512 af2a95e63cd148158e963c1b719cca06b3e1173918febf7584b261756ba283f62d97bf8abfe52ffaf1ecb39dcc5492ccc6caf61916e9a2a34cefe8eb5f9b7fd2
SSDEEP 192:DH3HBHdHuJHrJHceHuHWH3HXeHHeHDHMeHxHgH+HeHIHLHSH6HLHuH2H6tHRHaHq:DH3HBHdHWHrJHceHuHWH3HXeHHeHDHMr
TLSH
T1B72227EBC3F80A7E8622A6F55F253E27C5ED162C135C3C0389D89F4E57B1871964168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Shared Dictionary\cache\index-dir\temp-index
Size 72B
SHA256 a5e17c35381aab5dc033632379301d4bfa81d95401512003f7cd62c6abdbc766
MD5 6476a72402e2af2ff8b89695810b6f30
SHA1 1ac2877fa2fdf26330e1c81311090411391eb451
SHA512 1538ca80790bdb259f4897e067f72eed9f5aac0cc0796396bd94b2b57d92ab60c60360d816fb4cb935f3fe25d1c6383826877d41f694a8e73f1df362393923f4
TLSH
T1A6A002A40B80801AC4508F71999113A12322E8A10111131340D04075CDA45E06D41193
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Partitions\ads\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 0486ba15f258d68c75035a2b7ba29dcf9f697230c45f83217aae37eca65f9632
MD5 2cfcd6cae4743947447e73844499980a
SHA1 3baa5b59ac263993e4cf51c58f43669072b41236
SHA512 14e122ef6fe73164f3edc39f57af00aafedb5529eb07e5bdee307d14c30a44f873de160d76b3cc2423c62abad2d3d590031ebbe94ff9b62446e7bd8c551cce03
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\Feather Launcher\Preferences
Size 158B
SHA256 f0d2fb236f43321bada3f48a178ccc227bae1a5a644b658b9ad755eaeabf0e8f
MD5 79b570e5ecad273854a349ce0cd7117a
SHA1 e055105d6fa40dac8ce12c2610d27933397881b4
SHA512 76523106f56e4c9c725d88e2a9c35bb6f24fdd502845e677e74dcf422ecae55aa36e5b3bcc0a50657b89a8bec36090fb4c7b34ce6750d6e897ed0f1c7112e7e0
TLSH
T1FBC08C62783064338A1E0AB2202FFC1628BA00644A07694649DCB28C482BA4D088B21A
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/3264-213-0x0000021F85570000-0x0000021F86DEC000-memory.dmp

Download

memory/3264-276-0x0000021F85570000-0x0000021F86DEC000-memory.dmp

Download

memory/3264-277-0x0000021F85570000-0x0000021F86DEC000-memory.dmp

Download

memory/5432-140-0x00007FF896010000-0x00007FF896011000-memory.dmp

Download

memory/5432-139-0x00007FF895170000-0x00007FF895171000-memory.dmp

Download

memory/5680-328-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download

memory/5680-321-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download

memory/5680-323-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download

memory/5680-334-0x0000024C56D70000-0x0000024C585EC000-memory.dmp

Download

memory/5680-331-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download

memory/5680-327-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download

memory/5680-322-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download

memory/5680-330-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download

memory/5680-332-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download

memory/5680-333-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download

memory/5680-329-0x0000024C5A640000-0x0000024C5A641000-memory.dmp

Download