Analysis

  • max time kernel
    156s
  • max time network
    193s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/07/2026, 12:32

General

  • Target
    NewBoty (3) (1).exe
  • Size 404.3MB
  • Sample260711-pqletact21
  • SHA256 612e1e3b80a32e645809f904df43b54f80f74745f8c4aa46d7b345ab4560e074
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 12 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NewBoty (3) (1).exe
    "C:\Users\Admin\AppData\Local\Temp\NewBoty (3) (1).exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1124
    • C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe
      C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe
      2⤵
      • Executes dropped EXE
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3872
      • C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe
        "C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\NewBoty" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1600,i,11440318511129385073,12407050088744026957,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1604,i,4291189374616849322,8657573150174780260,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1596 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5500
      • C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe
        "C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\NewBoty" --field-trial-handle=1600,i,11440318511129385073,12407050088744026957,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1604,i,4291189374616849322,8657573150174780260,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1676 /prefetch:11
        3⤵
        • Executes dropped EXE
        PID:5572
      • C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe
        "C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\NewBoty" --app-path="C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\resources\app.asar" --enable-sandbox --js-flags=--max-old-space-size=4096 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1783773400897804 --launch-time-ticks=639706347 --field-trial-handle=1600,i,11440318511129385073,12407050088744026957,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1604,i,4291189374616849322,8657573150174780260,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2548 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4684
      • C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe
        "C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\NewBoty" --app-path="C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\resources\app.asar" --enable-sandbox --js-flags=--max-old-space-size=4096 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1783773400897804 --launch-time-ticks=644022292 --field-trial-handle=1600,i,11440318511129385073,12407050088744026957,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1604,i,4291189374616849322,8657573150174780260,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3596 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5268
      • C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe
        "C:\Users\Admin\AppData\Local\Temp\3GJLPkzMlp37DP6zOiuwW1luLPz\NewBoty.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\NewBoty" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1600,i,11440318511129385073,12407050088744026957,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1604,i,4291189374616849322,8657573150174780260,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2392 /prefetch:10
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:2928

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\LICENSES.chromium.html
        • Size 19.4MB
        • SHA256 5d545ce8065079f38a82472ab93bd62fcdf73cd319f0771ef51c45c7e243f1d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\chrome_100_percent.pak
        • Size 117KB
        • SHA256 15a5bcb49a5c02d6a4e736e8dfa11dabb0bac0589641a4e25f0c06472ccaae6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\chrome_200_percent.pak
        • Size 192KB
        • SHA256 b7acfb068fa681f4ecb8f782bd4e3926590076c61fd0de3de4a12dde227cf52b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxcompiler.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\dxcompiler.dll
        • Size 24.4MB
        • SHA256 bbe056ae90da11a355ffa2ffca96c240d3f189de334ea4aa503c02b612bbe3e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxil.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 d34f633a9cae1d57c15f425568dc01c5cb9d310fe6210d79316ad910736b7c8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\icudtl.dat
        • Size 10.4MB
        • SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\libEGL.dll
        • Size 467KB
        • SHA256 7a8cc732a9a24884109e9cd6b85d6217c9889eca4a9564639fbdb1d4ee1144be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\libGLESv2.dll
        • Size 7.6MB
        • SHA256 ccbfb6a6dade5c4056be90c77106306b1ac1b09da1c34d4e2e7edb04352f5be9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\af.pak
        • Size 605KB
        • SHA256 d990f4ced39e31a1149d2a1842ce2504706885e6ab05957ee2f338c77d94c16b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\am.pak
        • Size 983KB
        • SHA256 8d3d5dfc64acfbb0c35036d74561d09ddf3b22058eeed0f8d26a2e9c0703248e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ar.pak
        • Size 1.1MB
        • SHA256 c54e67e232852d9b14b2bbf4c1a83f0e13a4970c2a83fd26dfb8d8c9eb40e3d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\bg.pak
        • Size 1.1MB
        • SHA256 2789212aac5f2133ed23c1f84623bc64eb4cfbd93aef7af751d1221e27a21daa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\bn.pak
        • Size 1.4MB
        • SHA256 e72b72977b40fb10472fe1a3fcffcda8b434bf52e2bb2da2935faa80da224812
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ca.pak
        • Size 683KB
        • SHA256 bc72ff7dd7c4286c1abb52da11c4dfdc42c917cdb267004eb2a906201850bca6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\cs.pak
        • Size 709KB
        • SHA256 8386f70e830a565d0674014ae4ad385a61eb43d7e7b99d4d373d14388dfd32ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\da.pak
        • Size 637KB
        • SHA256 ff687bb6dc79bb638bca4f6a9226544a783209645922d323cf777b169690b25a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\de.pak
        • Size 684KB
        • SHA256 d2dab9943eeb4c4792dc1105d58bceee0e55f5008d87e97708ffde5d725a36b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\el.pak
        • Size 1.2MB
        • SHA256 3ee2e46a5a569e411ccf9d77ee4f356e1833bfccbaefcc5e71b7c1517206ab5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\en-GB.pak
        • Size 552KB
        • SHA256 aac3b4904d021d58d053bdea2d8056a219ecda1e341d87cb70070aea2cee418f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\en-US.pak
        • Size 558KB
        • SHA256 bce3ec06227dba2273c4ff12482cba37b709cc8bf5fd29c4380f9a07b92bf821
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\es-419.pak
        • Size 674KB
        • SHA256 385691afee6f73d929007ecceca62afeccaa5411015af04cb02d49b2a757ae35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\es.pak
        • Size 670KB
        • SHA256 bcffeb2649d529c69ca2c310040f09708208bb76414b1ee6f402c5a9661acafe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\et.pak
        • Size 612KB
        • SHA256 ecc838878412cc9f28dda9efed2fc60b67315f5fdf64e912db33cee7571a5939
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\fa.pak
        • Size 1013KB
        • SHA256 5061cb29280711363d3bf7d8ec1e7e4057393056af5ae2b6e94f31714dfcaac9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\fi.pak
        • Size 623KB
        • SHA256 18d904efd7d15a49ef3638c45a40b3aa604e5ec4b68e017ab3f568e6a8202fd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\fil.pak
        • Size 706KB
        • SHA256 4034bd7ef11f48d7d646aacb7006562f0f9caec888785a13c36e31b9724dd798
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\fr.pak
        • Size 728KB
        • SHA256 1972f718698d83dd9af8ca7c77062dee0cb888de2eb096259c776752322077ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\gu.pak
        • Size 1.4MB
        • SHA256 b207f2046791aa8150015ca78f9f76f2f6509953a00c5e89b155bb40e3a26474
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\he.pak
        • Size 887KB
        • SHA256 0600c34932b58b18f1d3196567af67de09ecf9eee8ea4378a22aef74fdb0eca2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\hi.pak
        • Size 1.5MB
        • SHA256 8465aa28c6a2c74d98b2c29ea50c4f8e09aee553f8b01f9bccd1236dab3dc85d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\hr.pak
        • Size 682KB
        • SHA256 6990ba056fcd1cac97ed5b48024be4ab366846a9c517d43a181cbb0eefa095d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\hu.pak
        • Size 729KB
        • SHA256 b83fc60c6d3ce3a04338ea16ba4627d6dfdf81f4373fe4921ac01c7c9558bcb6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\id.pak
        • Size 603KB
        • SHA256 01f3853d21d4543ecad1ceeeee40fd9cfd4fd31e6822c590618aa965eb9c46c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\it.pak
        • Size 660KB
        • SHA256 683bc613c4ee53ea46824856a4b56d5b187355d2e2f6e52284c8e7fb9eee4e01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ja.pak
        • Size 804KB
        • SHA256 ba5b0b157956274ed1b8e1af1d858ca9862d59ce3ba5b833f54a613697153825
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\kn.pak
        • Size 1.6MB
        • SHA256 d154c50013245a268ba9b4b49639516ab0593922d893bdd551e4aa30ee6a3e2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ko.pak
        • Size 684KB
        • SHA256 8a899f9df64736f4f8b295361bcb95f501835350b9320c2396e1d6f03cde5ee8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\lt.pak
        • Size 742KB
        • SHA256 0c755ce72d1b71e77d58ab014228458d8ce2b0c51a9b00769635c6609255c9f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\lv.pak
        • Size 739KB
        • SHA256 911f922f6ab11d04c4913b04088619276994104979b2c5f132182953fabc24a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ml.pak
        • Size 1.6MB
        • SHA256 8beb5df27b5a1b88d0f441518a807b2c6acd99a81820cd0249710ea12bc179d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\mr.pak
        • Size 1.4MB
        • SHA256 1971da05e4868841c9d9f78be5e17ab09178af99b86a6c07df385015a0c9d9ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ms.pak
        • Size 636KB
        • SHA256 b60c552a9ced5d0e1f4ed408f65a04068acad7d80db7cf88528fbebbcd337e23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\nb.pak
        • Size 608KB
        • SHA256 cb50908b03c77263297e63ff75d4d3c58fb0cb491c69a8964239e787c762f52d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\nl.pak
        • Size 634KB
        • SHA256 b6a6cecceeb0097d5fd9628c684d53339f7871948655740e0f625bfedbf526ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\pl.pak
        • Size 708KB
        • SHA256 dee5b710ca72425cd4d1236ce260f8d68b41bfdfceaeb2f98c8e89217b24208f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\pt-BR.pak
        • Size 664KB
        • SHA256 4ce3dd9bdfe8042134cebe618aadd1d29daa91dc3bd7776a2a42639f97bef101
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\pt-PT.pak
        • Size 668KB
        • SHA256 266e49a497c6bf9e48502c7eb01aea1fa90260b6fb1609165ff50307a3d81b59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ro.pak
        • Size 693KB
        • SHA256 16b11fb73ea0c5d0336de453d3e2abd2de69b3e6c66dcd72bae318666525bb18
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ru.pak
        • Size 1.1MB
        • SHA256 f3c1d6a7344a98a150d2731f0a7009bcf3adfd0b712dc7dc41f1ba5fcd13eeda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\sk.pak
        • Size 720KB
        • SHA256 d9cf65b23dd452e4a42331b32e39b890ab47152b71ea247dff628d7cb1dbda9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\sl.pak
        • Size 690KB
        • SHA256 1550f8df161a3484a6c7af9bc5321fae524e10d6853467afcb8749054a73e601
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\sr.pak
        • Size 1.0MB
        • SHA256 a76930f2c72e49dc3a2c9be7e7bce0f9da0c93de03b6e275521fa86da0d2d39c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\sv.pak
        • Size 615KB
        • SHA256 b101225f190ed1f1738059283058703afb7eb2e0fb245dd076f919d993427b04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\sw.pak
        • Size 651KB
        • SHA256 f4e0e2f5b49d9d767884074cc3ee8d0dd83a986f7c1d2de236885998d7a53460
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ta.pak
        • Size 1.6MB
        • SHA256 9fbc40727cf1143d181fe6b21b63ee0f8ac020360ef23ce76759cbc0e4c009a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\te.pak
        • Size 1.5MB
        • SHA256 8b20dbd1ce97d4bde6273051991c593d74d51e90966dd6291b38b0185f4d0fe7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\th.pak
        • Size 1.3MB
        • SHA256 55cdaecc9ee85290679c7c7331afa321eaa346ea33e77f2f587c0844199df7ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\tr.pak
        • Size 663KB
        • SHA256 81a2cedd23026b21e617356a057839ef0f94530b51fc325c0f91ddb5b11bc932
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\uk.pak
        • Size 1.1MB
        • SHA256 39e272f1acb9c0b0bc791efa0347b92cb29e20cfbb5ae14f539628f10f45b0f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\ur.pak
        • Size 997KB
        • SHA256 0c1cfa61d9a9be6338b0a160b43ff362a982003053ae5be3b3ec867e78374d7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\vi.pak
        • Size 789KB
        • SHA256 0458ac35755d2b86a116fa4a15de9c3ca7813a12852e43d697dcff2547c323ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\zh-CN.pak
        • Size 564KB
        • SHA256 c2b05a5970bbb02226905b9e74fe44f32cd2796d4efc0669481c25f95a0882bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\locales\zh-TW.pak
        • Size 556KB
        • SHA256 39e6196432e79380a812d6af2e99fd198a5ca3e81565435af136531a4c9cbf42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources.pak
        • Size 6.6MB
        • SHA256 3868fdbc90fe7c482c6fed8bc9423a1f1fe2a64ed045791289b540444ba3b9e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        browser.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\browser.js
        • Size 986B
        • SHA256 4d6c07ad6f588ba02e250ed9467bac8a5615712b12c138c1fa6f4a3c5b0927e4
        • MD5 SHA1 SHA512 TLSH

        canvas.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\canvas.node
        • Size 634KB
        • SHA256 f85e5b19198cc4800be76346bb2868abdd45acbb314968cf2fe41cb18b502bfa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libbrotlicommon.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libbrotlicommon.dll
        • Size 141KB
        • SHA256 c62c08223e450dfc2fff33c752cc228505ffd9d755201958ba800d5d30481a2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libbrotlidec.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libbrotlidec.dll
        • Size 61KB
        • SHA256 e270b6e576594ee8ee6e33ccc54e34a54304616dd6225652e11e49d6f17ef896
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libbz2-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libbz2-1.dll
        • Size 76KB
        • SHA256 669a4bf9266d5f020e843aa5fd75b93ce8ebde27014d5ac466a8b3cf39d8aba7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcairo-2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libcairo-2.dll
        • Size 1.2MB
        • SHA256 10cb3ddfb67ef352365d5cdf1fce0376693d2d6e90aefefee41b3c0c5ce363e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcairo-gobject-2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libcairo-gobject-2.dll
        • Size 35KB
        • SHA256 bdba64fdd18aad8de2773d3553786d0f9560ae3ae005a17b6cc6bef124219370
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libdatrie-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libdatrie-1.dll
        • Size 34KB
        • SHA256 40aee3ae9a62a77454dfe8419fe21b54c54d969e0471c9e817b65d4502a9949f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libdeflate.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libdeflate.dll
        • Size 97KB
        • SHA256 fb54be03668f41fae3f5d8bbabeedbc24e71b37e637e3cd34acd54f89f128ac1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libexpat-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libexpat-1.dll
        • Size 195KB
        • SHA256 6a52ffd0ad364394cb1a9460b3c839eb1ac1c42bb0b15be0fcf3f72fc548bb73
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libffi-8.dll
        • Size 34KB
        • SHA256 ccd1c21178c2e239eaa6c904a25c7f26efdfadb0faf344e62b1bbb39a30241d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libfontconfig-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libfontconfig-1.dll
        • Size 337KB
        • SHA256 9fffc784d10b9918214d4a576b690418d8d4b9694d41d642b09ea19dd1daea00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libfreetype-6.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libfreetype-6.dll
        • Size 773KB
        • SHA256 a3271784f8366b3c6412e0c35474884fa12899c392bacb08bc8eac00f4be7e64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libfribidi-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libfribidi-0.dll
        • Size 151KB
        • SHA256 73a712fd51fa0085e8660084743a821ae7388de138069cd6cd8c171d4487da84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgcc_s_seh-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libgcc_s_seh-1.dll
        • Size 147KB
        • SHA256 c658c94c8d59c50e77a4b3b790d595daedc5422e87170dd2609bed3e733a4000
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgdk_pixbuf-2.0-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libgdk_pixbuf-2.0-0.dll
        • Size 347KB
        • SHA256 a2a2f27223a45ddffff7c7f94eec96d42367ec4056c2b3957fd72cd92d831dc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgif-7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libgif-7.dll
        • Size 44KB
        • SHA256 6bfabfac05eaa1c831c8bf3459066d336de61500a075fb0e0612d1ab75e4404b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgio-2.0-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libgio-2.0-0.dll
        • Size 1.8MB
        • SHA256 5079e3ca8cf2193be15a30d30b81d573d739e6bae907492f9560f5c9623bc3dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libglib-2.0-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libglib-2.0-0.dll
        • Size 1.5MB
        • SHA256 62196a7e69a65e52cf17a1ea985d4869d9228cf7a32e85ad898cd98d000b6af2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgmodule-2.0-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libgmodule-2.0-0.dll
        • Size 26KB
        • SHA256 87abeed897b9743b2c7d078d4db213856a246a7a2258a1a2859b0feeddbfa157
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgobject-2.0-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libgobject-2.0-0.dll
        • Size 352KB
        • SHA256 5ad4f3f566a2ff7db68052f4e7b3bed600b255c14ec76745b0bf419e9df9369a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgraphite2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libgraphite2.dll
        • Size 152KB
        • SHA256 d19e2587db996cc44799bc22bd9f7a1fda91427aa4cb63bb581da485acff66e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libharfbuzz-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libharfbuzz-0.dll
        • Size 1.4MB
        • SHA256 51082469a3877337af8266410e36c16e0288c3ccef4be7aabd76b6935042d409
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libiconv-2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libiconv-2.dll
        • Size 1.1MB
        • SHA256 94ec68fb8d342b6c91b6b48a8d95092819cdcd006a7166e0b68062f946afd08a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libintl-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libintl-8.dll
        • Size 291KB
        • SHA256 0e5a178731e6be6d115442a6ade3df7f03265cd1fc4338f8b6f86a8001cbf582
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libjbig-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libjbig-0.dll
        • Size 64KB
        • SHA256 6d1657e08318630738fb0841ee28bbe7272b41b3b2ef93adaa228c4cd10092c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libjpeg-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libjpeg-8.dll
        • Size 907KB
        • SHA256 1fbd6c1ea8929c12e1967b6ce0c4053ba3df8eea6d615d171819027295a28fab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        liblerc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\liblerc.dll
        • Size 785KB
        • SHA256 3e3aa1d6e040d9ac93eb81cb5e472543f612373c3ab653ed2b2a86ab1d7c05c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        liblzma-5.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\liblzma-5.dll
        • Size 187KB
        • SHA256 bd95aa0fda6e7c8e41b3843d6fc2942ca23b344a53721016634b905d0bdef15f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpango-1.0-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libpango-1.0-0.dll
        • Size 414KB
        • SHA256 d74291e1be6a0b5544849b1ea3fd9dee71226d5e2674d01fbcc144ff59e840d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpangocairo-1.0-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libpangocairo-1.0-0.dll
        • Size 73KB
        • SHA256 cc13ad77435617ce67248513e9d99e75ee0e4b8ae2027a55f2c757d812e70614
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpangoft2-1.0-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libpangoft2-1.0-0.dll
        • Size 108KB
        • SHA256 52752c65d3886ef32064f4d60a0639e6b453a878a2199e688778cda590f1060e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpangowin32-1.0-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libpangowin32-1.0-0.dll
        • Size 107KB
        • SHA256 e24ee31eed5d280c7b380bd3d9641a5be37d45d05b9b6df18c1076efdbd27aa0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpcre2-8-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libpcre2-8-0.dll
        • Size 701KB
        • SHA256 52ccc7e4ec5ad0aecf307c0328826340f5d504aa59f7c4143b9a1b9fff16ccda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpixman-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libpixman-1-0.dll
        • Size 722KB
        • SHA256 e2c9b3d6346ff078546d100cabc0f68bdc23cefd34f55d6fa706cfa978999610
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpng16-16.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libpng16-16.dll
        • Size 252KB
        • SHA256 0d014767b14002ad1bbcb78ee158bf97338e05520fc16607f02adaa89999d9b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        librsvg-2-2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\librsvg-2-2.dll
        • Size 13.4MB
        • SHA256 e99f5392e428675216421d93dd84d08d2deba174a9f534b18d52e02f73268546
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libsharpyuv-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libsharpyuv-0.dll
        • Size 47KB
        • SHA256 d29380c7056383f3e7a80bf9e150f0b8c425c1cf2568d1336e88979ddc2307af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libstdc++-6.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libstdc++-6.dll
        • Size 2.3MB
        • SHA256 5d882e4aa81b640c169ac08c81eaaff7474d03667ab4fa0db7d618fa64f43200
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libthai-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libthai-0.dll
        • Size 70KB
        • SHA256 d8d8b87e9089a811e088f6a01da57c19ed54d2b6613bb85697f1958473f63666
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libtiff-6.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libtiff-6.dll
        • Size 593KB
        • SHA256 876f15a6aab834a18b457bee1bf66435ae244f5f7bc27b6ace2c9cf952f25489
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libwebp-7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libwebp-7.dll
        • Size 728KB
        • SHA256 8dfe40c4e0abc90ddf18f080898987e01253d099b2b2d6daf7db521e55c00446
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libwinpthread-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libwinpthread-1.dll
        • Size 62KB
        • SHA256 95998fb52f45bf904fcfbe56129c4d8526d9b44f9a92611c8bd0125ee03ca38d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libxml2-16.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libxml2-16.dll
        • Size 1.2MB
        • SHA256 a010006f56ae15c6d5c9e835d843aeef064a98cee26f6535ec462b363659efaa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libzstd.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\libzstd.dll
        • Size 1.1MB
        • SHA256 a25427164f8775046eb8ce488d7d08842c3b33224c5817d4c0c3628b5b588129
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\Release\zlib1.dll
        • Size 124KB
        • SHA256 11cd91171765cd65f1c3362e3df67e5f5a618a6b88c8cdec899b802eaf1c7b0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        canvas.vcxproj

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\canvas.vcxproj
        • Size 16KB
        • SHA256 d95327f297312728f439b706cba61ac360ce256c56fb76624b7fa5c793ecc4f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        canvas.vcxproj.filters

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\build\canvas.vcxproj.filters
        • Size 6KB
        • SHA256 4018033b095e2f0e38714d40dc6b2cdaf342f5028d97338cf6b97608666312d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\index.js
        • Size 2KB
        • SHA256 f8f5b5b7e4c24248b6a3d50758dd7cceae5de25cf0122d9b2d73241a3e3f523d
        • MD5 SHA1 SHA512 TLSH

        DOMMatrix.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\lib\DOMMatrix.js
        • Size 19KB
        • SHA256 ba311a386284eaf44abec878c9171f7234b68c7d5707246194c2edca90aa150c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bindings.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\lib\bindings.js
        • Size 1KB
        • SHA256 6eae82a0892ba1bd136e70ff1ac9c018d5df562d06226571e2dfda252a92609b
        • MD5 SHA1 SHA512 TLSH

        canvas.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\lib\canvas.js
        • Size 3KB
        • SHA256 2fb274bbccc5e8d5b225c61748f3f7f0788248160c7e7e3a1fc368188ca0c0fe
        • MD5 SHA1 SHA512 TLSH

        context2d.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\lib\context2d.js
        • Size 205B
        • SHA256 0d6dc0b5ac3a3e62e07b41f6f9251bd25d5754ced5f186a1d5a745848d895312
        • MD5 SHA1 SHA512 TLSH

        image.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\lib\image.js
        • Size 2KB
        • SHA256 a140f2ed3b300b2e9e1f993c4bd73869fddc88a71a2d2d9b1cc7293caa27e4db
        • MD5 SHA1 SHA512 TLSH

        jpegstream.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\lib\jpegstream.js
        • Size 874B
        • SHA256 875de5c950c8ff9e6e5c0cf7290ba3743679ab39f9c884e855ee9a904b210a85
        • MD5 SHA1 SHA512 TLSH

        pattern.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\lib\pattern.js
        • Size 292B
        • SHA256 e8e56dd111a54192e47207c41f7a3cc11d80d78b59eb2183c15ad70e12ac6b78
        • MD5 SHA1 SHA512 TLSH

        pdfstream.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\lib\pdfstream.js
        • Size 679B
        • SHA256 ece1325525df874b6300cb118cb01dd36988a90804158594c499b6340f8a6f73
        • MD5 SHA1 SHA512 TLSH

        pngstream.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\lib\pngstream.js
        • Size 940B
        • SHA256 cf071c7c433208b783755c0921ce933517559e25377d43d0aa4106d627dca2b4
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\package.json
        • Size 963B
        • SHA256 580ccea6a94212fc74f60e3d524dab15e6457c35b8c6b777e04191df87b3013f
        • MD5 SHA1 SHA512 TLSH

        Backends.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\Backends.h
        • Size 193B
        • SHA256 1fd24e6ba4c50bcd7fc8c65b8f6da7432302aa602f9629bbeb7dd4e0d402cadd
        • MD5 SHA1 SHA512 TLSH

        Canvas.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\Canvas.h
        • Size 3KB
        • SHA256 8cfa4132f6616e02334c6bcc12a6bb14845e74720407ff557209175b6fc49c16
        • MD5 SHA1 SHA512 TLSH

        CanvasError.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\CanvasError.h
        • Size 977B
        • SHA256 e4bc078d1f26f233acd913cae1acd625ae02bd2da188a83e3d8bb96aa7683c18
        • MD5 SHA1 SHA512 TLSH

        CanvasGradient.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\CanvasGradient.h
        • Size 477B
        • SHA256 ea01a9e96baf2e34c6758f60a8a0185fe6386b47fdd8eff960ddc92c269a723c
        • MD5 SHA1 SHA512 TLSH

        CanvasPattern.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\CanvasPattern.h
        • Size 866B
        • SHA256 34e386a4137c25adc9343affc9ffa54853312e3e1da16b30c83713b14ad44f65
        • MD5 SHA1 SHA512 TLSH

        CanvasRenderingContext2d.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\CanvasRenderingContext2d.h
        • Size 10KB
        • SHA256 5c084b0ff3439f0951df39084e3d12d4a677dfa62244ca185f84b12e1fdd1465
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CharData.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\CharData.h
        • Size 13KB
        • SHA256 94266a26e18f90cbac0dff52ae4a6acf008d9fc18935a9620826becf4d6de263
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FontParser.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\FontParser.h
        • Size 2KB
        • SHA256 a59d1be155c6357868b1d8260c7c89903e42e557d35c5eb25817caf46b420ddd
        • MD5 SHA1 SHA512 TLSH

        Image.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\Image.h
        • Size 4KB
        • SHA256 9e37d3cec978bba6ea57cecc02639aee57b803ae802760235e60db096beed5d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ImageData.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\ImageData.h
        • Size 707B
        • SHA256 16a6ab647473a335d9c04518d81eec45fb61f8d97716b331393b28c6a9d11cd0
        • MD5 SHA1 SHA512 TLSH

        InstanceData.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\InstanceData.h
        • Size 370B
        • SHA256 972fdf049ac8efab15408b1a66ca4ac2e40cfff0abcdf790fcdfd11953b0c858
        • MD5 SHA1 SHA512 TLSH

        JPEGStream.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\JPEGStream.h
        • Size 4KB
        • SHA256 2ccf4d36a4faf2d62ad3e13ac65abf9b3b3817cdfc2999242d6dc203b487e488
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PNG.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\PNG.h
        • Size 9KB
        • SHA256 df65fe482ac28ecca679f83da9cc9ce51ecc90167a942dbaaf0da68cc2589a13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Point.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\Point.h
        • Size 248B
        • SHA256 0abe1e05ada929c38171729cdec3037bcfa741aca47feff0e62a3a1eb3469364
        • MD5 SHA1 SHA512 TLSH

        Util.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\Util.h
        • Size 282B
        • SHA256 dc9bd54b48fd673108ff204862d668de52a8da2af0ea46003eb9eefa097fcfe1
        • MD5 SHA1 SHA512 TLSH

        BMPParser.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\bmp\BMPParser.h
        • Size 1KB
        • SHA256 5a10f452774f4536c5a0a3eaada57f10804de4219d90eb0897671367095cc0be
        • MD5 SHA1 SHA512 TLSH

        LICENSE.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\bmp\LICENSE.md
        • Size 1KB
        • SHA256 bc4c710e3829994e377c65b6671d2efe79236d852f1b514514c311706ea152bf
        • MD5 SHA1 SHA512 TLSH

        closure.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\closure.h
        • Size 2KB
        • SHA256 ff2c680007443976ae16e3f12ca15755e9ab21ea0e9599c20acf3d49d0e4392d
        • MD5 SHA1 SHA512 TLSH

        color.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\color.h
        • Size 449B
        • SHA256 a29573c659573eb4ebccc657389f9dae1493845ed253e73c0bbffd84f54f2f12
        • MD5 SHA1 SHA512 TLSH

        dll_visibility.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\dll_visibility.h
        • Size 420B
        • SHA256 d556d8b6bea6f3798a6e41f9c3b6fab7837256a77d022b3407d64a138806398d
        • MD5 SHA1 SHA512 TLSH

        register_font.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\src\register_font.h
        • Size 207B
        • SHA256 9bd977777453844804ebe63dc886ee2c3c7d1e6af4fcc9932d5e33373507298b
        • MD5 SHA1 SHA512 TLSH

        has_lib.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\util\has_lib.js
        • Size 2KB
        • SHA256 3857a6dcab85c0a3cc5533f4c62074980e300a0f2008f7510e7ff51387cadc95
        • MD5 SHA1 SHA512 TLSH

        win_jpeg_lookup.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\app.asar.unpacked\node_modules\canvas\util\win_jpeg_lookup.js
        • Size 360B
        • SHA256 1d469ae4345f8ada104b52cfeff8caf26add41708f426a809b2d5d043f3b1ba5
        • MD5 SHA1 SHA512 TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\snapshot_blob.bin
        • Size 338KB
        • SHA256 2fafa820c9fb666733b6cc0539e5d9215ff76e27e46f3cb42202269f0c964fc9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\v8_context_snapshot.bin
        • Size 704KB
        • SHA256 47efa82a5cbdce5a4810e9e62e9dc04c52cbce5c7afeb38bb2b331f4243fa9d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 cc119841b682ead9306c4c4808ba61fb107f28de827327bc0f511961ad07a6df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\7z-out\vulkan-1.dll
        • Size 904KB
        • SHA256 9a1c6b2b0bf115fd0fb4544ad2840fb04b2f66ce201062d4c107824c8c11dee7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnB08A.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default.exc

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        Network Persistent State

        • Path C:\Users\Admin\AppData\Roaming\NewBoty\Network\Network Persistent State
        • Size 1KB
        • SHA256 1a9a2d7de2f280aba2e6df2138e5e3ad84b3b4e960ab45c93875661a03a6682f
        • MD5 SHA1 SHA512 TLSH

        fa681449-51fd-4d81-8469-f60cc68cde32.tmp

        • Path C:\Users\Admin\AppData\Roaming\NewBoty\Network\fa681449-51fd-4d81-8469-f60cc68cde32.tmp
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH

        CURRENT

        • Path C:\Users\Admin\AppData\Roaming\NewBoty\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        memory/2928-911-0x000001E53EDC0000-0x000001E53EDC1000-memory.dmp

        memory/2928-913-0x000001E53EDC0000-0x000001E53EDC1000-memory.dmp

        memory/2928-923-0x000001E53EDC0000-0x000001E53EDC1000-memory.dmp

        memory/2928-922-0x000001E53EDC0000-0x000001E53EDC1000-memory.dmp

        memory/2928-921-0x000001E53EDC0000-0x000001E53EDC1000-memory.dmp

        memory/2928-920-0x000001E53EDC0000-0x000001E53EDC1000-memory.dmp

        memory/2928-919-0x000001E53EDC0000-0x000001E53EDC1000-memory.dmp

        memory/2928-918-0x000001E53EDC0000-0x000001E53EDC1000-memory.dmp

        memory/4684-834-0x00007FFD3BF50000-0x00007FFD3BF51000-memory.dmp

        memory/4684-835-0x00007FFD3CBD0000-0x00007FFD3CBD1000-memory.dmp