NewBoty (3) (1)[.]exe

resource
NewBoty (3) (1).exe
unpack001/$PLUGINSDIR/StdUtils.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsis7z.dll

NewBoty (3) (1).exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 612e1e3b80a32e645809f904df43b54f80f74745f8c4aa46d7b345ab4560e074
MD5 16b37e65729dc0f6ee69452f3e33b45c
SHA1 ffd4f480495aaf0da4d9a21bc716bba37abd5a68
SHA512 1cfe0b7109063a571f6907639224dd6f020135ac2aca9dab98d3741e267019b71589af99aafb502d76f79d90badc202b8ba9015c920a97c71739dadbc3ec6b5e
SSDEEP 12582912:+gnHzClii/CARamKuqUABNfU5I+g/Y0Iorb7:+2e/MIeNYIZA0zH7
TLSH
T1781933E6A7C66D52CC00DDBBD9D581B3B2DD3B139A7E181310C24D21BEE98829235F5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/StdUtils.dll

IMPHASH 7b79709c0d5576549eb261e3410f95f8
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

60089

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

iswspace ??3@YAXPAX@Z _msize _wsetlocale _snprintf iswcntrl _beginthreadex time srand rand clock _getpid _wsplitpath iswgraph __wgetmainargs wcsncpy _wcsnicmp wcschr calloc free _wcsicmp _snwprintf swscanf abort ??2@YAPAXI@Z memset memcpy

shlwapi

ord176

crypt32

CryptProtectData CryptUnprotectData

kernel32

GlobalFree MultiByteToWideChar WideCharToMultiByte InterlockedExchange HeapValidate InterlockedDecrement InterlockedIncrement GetSystemTime OutputDebugStringA GetExitCodeProcess InitializeCriticalSection SystemTimeToFileTime TerminateThread WaitForSingleObject LocalFree GetFullPathNameW GetVersion GetFileAttributesW LoadLibraryW FreeLibrary CloseHandle lstrcpynW GlobalAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetTickCount Sleep VerSetConditionMask GetCurrentProcess GetModuleHandleW FatalAppExitW GetVersionExW TerminateProcess GetModuleFileNameW RaiseException VerifyVersionInfoW GetLastError GetProcAddress SetFilePointerEx WriteFile ReadFile CreateFileW GetFileSizeEx GetCommandLineW

user32

MsgWaitForMultipleObjects PeekMessageW DispatchMessageW wsprintfW DestroyWindow SetTimer UnregisterClassW KillTimer LoadStringW MessageBoxW GetWindowThreadProcessId AllowSetForegroundWindow CreateWindowExW RegisterClassW MessageBoxA

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

shell32

ShellExecuteExW SHFileOperationW ShellExecuteW

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

SysAllocString SysFreeString VariantInit VariantClear

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/app-64.7z

SHA256 380376a1b7fac6b8a3c2f92c97b9642dc63b4d99d9e27e8e5be4bbfcda1605fd
MD5 4722898edeef02cf08aab57e39c5f6ca
SHA1 40f0ca19514809a5a0481659a419240b9b48a262
SHA512 2a239e7b739ecb8270f74f716d4bc738529aea89e6d07eda45cd588b44ffcb898945ba816fbe4f60511ce5bc5215e933856cf2b9cd24a1f4919ac8acbbd563c1
SSDEEP 12582912:ygnHzClii/CARamKuqUABNfU5I+g/Y0Iorbx:y2e/MIeNYIZA0zHx
TLSH
T16D1933EAA7C66D52CC00DDBBD9D581B372DD3B139A6E181310C24D21BEE98829235F5F
MD5 SHA1 SHA512 SSDEEP TLSH

LICENSE.electron.txt

SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

LICENSES.chromium.html

SHA256 5d545ce8065079f38a82472ab93bd62fcdf73cd319f0771ef51c45c7e243f1d4
MD5 a1ee17d90caa1bf1f3726ec03842f18b
SHA1 27a94b164c4255ce0dcab5c020f335a9cd3f8c60
SHA512 d9f7448213a449535f1ff43090c08f0e2388af4e72ce2f59e0b1b457a831f76c0d7d69d88cd435b1682479d31d480b19a5488dc3ef6c133c974557d5bdbcf446
SSDEEP 49152:52SFkMZThUZLQTYp281vCmR3r8xsJQfiFTuoYQdVi2Hxj37D4h:f
TLSH
T11827B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

chrome_100_percent.pak

SHA256 15a5bcb49a5c02d6a4e736e8dfa11dabb0bac0589641a4e25f0c06472ccaae6d
MD5 750913d55e87def9108e55728ba67d00
SHA1 a5944bc170d1f6c3223195c043134566471dae1d
SHA512 f5663ae3c775e2ec12dda6255afea99291673b8586048b131ca657a10be88cca61e298bb56797bcc34723fc8bf0a3dd966ad8b9f0e77747f963d8dada4f25edf
SSDEEP 3072:7lj4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:7lcYWFUbGz8LI1TdjQBQCrC
TLSH
T1E9C3D0E773B0AD7DDA464BB743560070FCB31B2907C2160E4B9AE479652AB88D9C93D3
MD5 SHA1 SHA512 SSDEEP TLSH

chrome_200_percent.pak

SHA256 b7acfb068fa681f4ecb8f782bd4e3926590076c61fd0de3de4a12dde227cf52b
MD5 d476c19d21b3c2861f08c1c82fffddcb
SHA1 6f61aab7b6fba4fed5a7c222bdb96aee11f23bd9
SHA512 36acefce9f4e6837609f801bb340380f8e3e0de3f01872ef1e9bfd769f61ec2804191b91cfd01d90fb874cc9f4e685de7f2d03c21cd7e0bc6c7d8907f41dc12a
SSDEEP 3072:y6FJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:y6IGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1DE1401D323B4AD3DDA530BB3926600B0FD7A20291AB3511E569FED397925F8889C9343
MD5 SHA1 SHA512 SSDEEP TLSH

icudtl.dat

SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
MD5 0a7cbe8e902379fc03c5c6c7c08c7d3b
SHA1 18ff020331534d21f24d922d4da3c253668e44d8
SHA512 88b94c5d350c2022aa27481e3a5c6bc74dd13ed1f2157dec4219d9b847469f7191f6fdc7305f3d27533c69f146324da8fdefbd8acbd2081965e74e8926d1e9c9
SSDEEP 98304:1/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndPj89o:1/cBhORok2HiXUxO/RJk3IWhlYntjdOo
TLSH
T180B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

locales/af.pak

SHA256 d990f4ced39e31a1149d2a1842ce2504706885e6ab05957ee2f338c77d94c16b
MD5 38fc876717fd2811593b8e1f5932685d
SHA1 3dcb3222e420713d6d731ff6bab7783dcd75c16d
SHA512 b98358fbb30f988b67edca4e7d608665ba10ba2b9c3230bee6adc9c040f974464b9e26eb72bf9a45b58d677419d8a2ed7f99d84cc1c22eefe496ec634bfa1c74
SSDEEP 12288:l+Ifrr9xi2tfxgtRGt+TkTnPxxNtEKY+53GmNAn4H2JyneNASgnALzcGfozvhpIX:ZvZtfutRGt+Tk7PxxNtEKY+53pAn4H2b
TLSH
T1EED41B0AEB91173D05B07696FB0945B7FB9CA26CC770B2BADDA982310566DFC10BD0D8
MD5 SHA1 SHA512 SSDEEP TLSH

locales/am.pak

SHA256 8d3d5dfc64acfbb0c35036d74561d09ddf3b22058eeed0f8d26a2e9c0703248e
MD5 ca12f04a04bc27a3a5fe78789091ce51
SHA1 eefa0606bcf3aa65edc124978f731336c60811f9
SHA512 07fca45e2c99ab93eda0346550f083c0e0fc7abc50d9610869ed9f558cec399a0b88434b4d8cb5a838acdec7e8b3e7a2a6c9b1171050293647977b15fdbdf109
SSDEEP 24576:Ueb6TG1orqThTCKHyK6ax0hHfjnNWNT5zaAfX8j5xi8bVdwZtPBE:lI
TLSH
T18425AA547DF9F7570F8E8A1994320E4EA594AE4692803C38C35AE3FC2B2DF1B4DDA215
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ar.pak

SHA256 c54e67e232852d9b14b2bbf4c1a83f0e13a4970c2a83fd26dfb8d8c9eb40e3d6
MD5 97f2627c9128e950f111b0f4227867b2
SHA1 525db6fdbb81481e142b8486bafbc912fcf1c6fd
SHA512 d119016080f09c83d472c662f20c369b4f46915e49906c44ee7f9e44edf9d6be388f4d7a16f52a29b8322199960127ff880261c0b277d3e06eddb504a7b31475
SSDEEP 12288:XjYc2kTDBGop7mFo2GE5Hwjdfg7P3v4Uzb6kb2QSVmNj1Eio7DAi:XMvWsEv
TLSH
T141357BE21B2984720B56DF0FD1E23668D872BD23EB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

locales/bg.pak

SHA256 2789212aac5f2133ed23c1f84623bc64eb4cfbd93aef7af751d1221e27a21daa
MD5 ea6519b0214acdfe80b9ceb590ea4dce
SHA1 49d14345b6baa6939055d7f50bf0984791481706
SHA512 28a1ddd55b55e792db5a114fd305ec3631579a3e8e5507a629144769bd25c4e2de6ef9e969ddb037f7945330be02e4951a5ba8a27881fc5e413c2a33c436b84f
SSDEEP 24576:0KWulJLYAgCzQkEC2U5Vb6IqSsl373ZWmKf3p2KuUfVDrzQE74uOVnQxRfkn4wxI:0KWulJLYAmFU5Vb6IqSsl373ZWmS3p0g
TLSH
T1863535A15B9A68DF0101F45F98087E093CEB84FE3FE7879241652DBD39E10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

locales/bn.pak

SHA256 e72b72977b40fb10472fe1a3fcffcda8b434bf52e2bb2da2935faa80da224812
MD5 ae6da45169b7a3fd99da8218c92a1e2b
SHA1 2552cffa1f63012b2fa7ef6209869f3eeae207c7
SHA512 8328e598f9c30636d60547a1d31e909b46ab6f92b3c210274c95886294af7ef20552718a536ee55c0a58d7947d2932061fea8e3113b8b331b4ca084501f51c4b
SSDEEP 3072:Y2M24emMNfpp1pomjwuquXCg/V7hq2XOUU9qygEfK8tRs3F+IBEBbaUqQsjkwgw0:Y2q+Nfcm00yg/V7hJF+IBEBbjwg/H
TLSH
T10165EF209C6E81B6A8C5CDC9434C6370C523AE9B9B65F74DDC17A24538ADC3C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ca.pak

SHA256 bc72ff7dd7c4286c1abb52da11c4dfdc42c917cdb267004eb2a906201850bca6
MD5 9c41cd6ca7b5423e60b40226e5e7fae6
SHA1 1f070aaa95377fbab2d558d0b3ce47f1999b1b58
SHA512 c1ff06fc4fb156a1dd015552024ba20cabcdbed97fefd23046304daa3e758bf9af3efffaa7b6ad9ac0bf314d49bf83b957b1c836d514dddae8e97351de6d2a72
SSDEEP 12288:R4sPQE4viqMz7hjzlCiG78lpGa8D5PsF4N3Mw2juwwPR9zejm0t3l7C7ThALDq9w:R4sYoQf0LltOZIM0s5JZusQ
TLSH
T1F1E4F8239FC93B7704D2330EFB46C253A48CA9847A16D254F4AE1B1622CCADCD677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

locales/cs.pak

SHA256 8386f70e830a565d0674014ae4ad385a61eb43d7e7b99d4d373d14388dfd32ce
MD5 fd8b34402d5e02dd82babb5a3ec5eb46
SHA1 c191efa261b84f6514227b6c41edceea7930b189
SHA512 2edfb6eb3d647a7f62d2a09cba95d6762691de9c4c73c1ad0817f9b262cee9bc20180745e64a3043a4d399cfa95fd212f2e0dd996ef3f5c212e7296989d0e26c
SSDEEP 6144:mzj1kQPV+WB/p5jDk8EmuVSG15ADF4+AP/uzBYcZ8OlJSBs98Qv:m2QNV/p5jADVz15AD+kzBYcZ8OlJS+
TLSH
T1C6F4391EEEA36425584002487FBE4128BD5EC3140B6EE5AB7CCF9D912579B7E8EF0D48
MD5 SHA1 SHA512 SSDEEP TLSH

locales/da.pak

SHA256 ff687bb6dc79bb638bca4f6a9226544a783209645922d323cf777b169690b25a
MD5 3402cf97870da2b1aec77fa74062f874
SHA1 758610d4624471ac55e9f4ac59abb07ad60fb309
SHA512 dc2bc7b982cde34e0678021a00ee92d4c21b7c91c64a33c0118f74d40eecaaf7ce5418c6986c78b4af88138cdd2949c006acf20ce7b2530a7d3747bb782d98bb
SSDEEP 6144:GXjE15yr09M10AETh/OQzVY2/QD5Qn+XgRVBaFLxE/ene2wlzqJwZBIEbPKaSpuG:GXI+rAMG+FXeRIAAmjfsPP
TLSH
T153D44A4BDC9CB32F89A94725F311CDA7DB6D443CC684264F65D8953A09CFCA092BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

locales/de.pak

SHA256 d2dab9943eeb4c4792dc1105d58bceee0e55f5008d87e97708ffde5d725a36b9
MD5 4d7d5f9444053e4ad426b197dd7dcdf5
SHA1 476ce21266c0d13e8a52b53a15fcafa37606a955
SHA512 477ddf9c5088ebd839f5795ca61a179e685c8cb7ee7e7490d38fe6208808b2b54057dc24e617045fba533776045b4773b60bc9756267dde6ce730b727c1d5f72
SSDEEP 6144:hg5gxfqV4oT3K7UpV0/b8g1aXCWQwa4edK+59/OZjeVDxe6+UAnf3UoZMReApCgW:8ufST3K7UpVdg1aP3s9/O3LRPU6ApCgW
TLSH
T1FEE40803ADDB625EC786B3617705CDB77B19E36BC346322B84DDD02B654B5B283AC422
MD5 SHA1 SHA512 SSDEEP TLSH

locales/el.pak

SHA256 3ee2e46a5a569e411ccf9d77ee4f356e1833bfccbaefcc5e71b7c1517206ab5f
MD5 b5b01fbf52e566a2042c2bf019a6fa1c
SHA1 d6764bc102d1819f48724be1d14e1f6d547d2724
SHA512 35c4d5668f9f5a1ccb25df0f36cefa9c3f3b134a0af4b9b460af5b073eb1257b131a272505b0f2823d9b0a4c21cd8ce76128fa6ec088de539980499d941c9f95
SSDEEP 24576:NRzn7HWFbrlE5Yp9Ck2twZuwxJXDsSSEumUaR67ex2MSPgL00O5B/FCyjlHvAdQ/:bfHWFbrlE5Yp9Ck2twZuwxJXDsSSEumu
TLSH
T12245CFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

locales/en-GB.pak

SHA256 aac3b4904d021d58d053bdea2d8056a219ecda1e341d87cb70070aea2cee418f
MD5 121461689d08e6e0d1e0ad4e6c695f7e
SHA1 113ec35be3b54ebf9e2b064181475bb82dda2670
SHA512 69b0d1d401aafd2fac6ed86f3c51de4889ebda123c6cfbe6267e83cd9271dccf7db2627cfaf31bf5713efad48845662763106ef26da09803a1580fa04c7416c5
SSDEEP 6144:D1Zf+l9GJBIvNBlxIxhb5E43FzcieMaMP9zQ49lfaYHEJjXCYDcBcnR7K:D1ZfqsJavNBPIxhbQvMNQ49UhDc
TLSH
T13AC43D1FF784126A05A311A2BB0AA5A2FF23D07CB35112667CBD811C33B676583777E6
MD5 SHA1 SHA512 SSDEEP TLSH

locales/en-US.pak

SHA256 bce3ec06227dba2273c4ff12482cba37b709cc8bf5fd29c4380f9a07b92bf821
MD5 6249e6f03590c631a2a873b3e79058d4
SHA1 b82396e2d4ddcb822254dc999c378642614e7f13
SHA512 3352f438f691067fcdd1cc331cac28130e464d0d9411971ecf7bf8c2d30d32e67cd9a65a71a48dc72f60eaee295dacc9055166dff0bef1f79e0ad4bbb2d0f3e2
SSDEEP 6144:JI1Ecs6drHfBLOFcGfIKUMP99Q8HUfaYQypqs5GjWngK8/uYwj:J2G6drHfBVZMTQ8HSkjZwj
TLSH
T157C44D1FF744112A06A352A2BF0995A2FF32D06DA35112563CBD812C3376B6683B77F6
MD5 SHA1 SHA512 SSDEEP TLSH

locales/es-419.pak

SHA256 385691afee6f73d929007ecceca62afeccaa5411015af04cb02d49b2a757ae35
MD5 0bde3d81c82e9b10709860c6d5ec3b2f
SHA1 5a72aa9b63ef8be73fcd788369d5d00eaf97bdf2
SHA512 a99c98da2696525ac4f372f2fafce8a5c4f1fe15bf26b585475c06f196b8834ff840f671a679c96f929627aa7b4afdbf828f22aac246e2ed08fb84c4c9f14a88
SSDEEP 6144:bypk8dVJ/bXisoO5GMYMgsoZNcNTkJXH5A4UnNyz7:bskQXX0BmkJJApU7
TLSH
T1BEE40826BAC81F6310E3A348B743D753E4D89545B408D29BE4EB87A522CCF8CC967ED5
MD5 SHA1 SHA512 SSDEEP TLSH

locales/es.pak

SHA256 bcffeb2649d529c69ca2c310040f09708208bb76414b1ee6f402c5a9661acafe
MD5 ece8f546463b732e3147bf7bc1ed5145
SHA1 52d49ded5fc0414ded145aa45fef1cf939899a5d
SHA512 d5a31d865063cfd661b286e173e3edbbc182ad3282074c91a302e8ad2888bc7032f598230b88ea9e2c3909c7d98cd663d61f70f32a6b024b4a37712550e85cf3
SSDEEP 6144:m747FyO1VPRuogNBM+7p4naYwFd8jw9MOJRev+IETiZ6PZC+t:maFNRu9HGaYEd8jqxJkv/yitg
TLSH
T1F1E4F726AACC0F6350E39349F743D753E8D49549B408D29BE8EB866621CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

locales/et.pak

SHA256 ecc838878412cc9f28dda9efed2fc60b67315f5fdf64e912db33cee7571a5939
MD5 0485794b4810c277d1215c5fc9a69e3d
SHA1 c0e9b7feb062df79ec3a1c94115efa36bc14c72f
SHA512 c694c4d2badb1c22638e7ca652ba4d801b1cf1b9f63c3f492b651c2a41c03e5c6a2e41310d129f70dbf7278fc4b6b68227e5882b86ad9fab8c8cc31f5e21dd0f
SSDEEP 6144:STM5NSzkgUaqY93DL+cfFnyN0GnFajtRvfZdkUmPOTQyXgXmjVOlvuCCn1qyzXiu:STMOzVUN8jfF8nFajtXOl2CC1qwP
TLSH
T170D44C42A27D771B182412F9E737E923DC9ED3D8B4000D9668974A1971EEFCC38B6B64
MD5 SHA1 SHA512 SSDEEP TLSH

locales/fa.pak

SHA256 5061cb29280711363d3bf7d8ec1e7e4057393056af5ae2b6e94f31714dfcaac9
MD5 fe4db3b1e835e22d92d7a45c022b57b8
SHA1 734c508379ad735900efe1dab2a403529b9a13d9
SHA512 e90961bbcb098bab86cd164ca42bfbfe89c651ff30552c3005de50bd40fd290547d698ca9fd7ccbc32e074b6663ca00cf0833338afbc72ab4b5732a5d19be432
SSDEEP 24576:T33B8u313uyqoz+sn2isRmXnloTUoXtCfGk62Yhk826JfikW0MX4dOqlUrHkI02g:bW
TLSH
T10825B1957AAC9AB15747CA0341E33834C773AF12D349FE40ACA1076609A5B139F5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

locales/fi.pak

SHA256 18d904efd7d15a49ef3638c45a40b3aa604e5ec4b68e017ab3f568e6a8202fd4
MD5 3d5e89e58a263b94ac4f49e4e8c76adf
SHA1 1d4d5c23c74c7e98ad49aea4ff1e67424afe6245
SHA512 10a1b6134dcf59d01781e59f7733aa45d3c24e76182f1da6d25921a98600571be1a3b904430dc64707b6bcfd43238929be8df37576c86df10bbcb35dac5672f7
SSDEEP 6144:8c+vwr1RbX48u19cj80ar6NmSFrGkAgoFRjPVOEmHbeaq5pLx7wvpVv7IJprWaTK:AvObX4x19C1a8GtaRvpVDIJprWa/gL/
TLSH
T138D45D915215C32237C4D29E7DB0903AF5E5E3DC8C284D9AE843C7D849EE9887DB276E
MD5 SHA1 SHA512 SSDEEP TLSH

locales/fil.pak

SHA256 4034bd7ef11f48d7d646aacb7006562f0f9caec888785a13c36e31b9724dd798
MD5 ffef924fde59f90f783517b96f700a48
SHA1 51be8b9ee59c13bd091105bc075c141a11e45a16
SHA512 fa32dd493d819bce89e1a02dca48f202e0e4b1bcc3470ea8071d1c242983bf6b8805a64acf588723f0e49fbdaf38cde322e6003e190fe2bd80bbe91ae168bf57
SSDEEP 6144:kBp5PvYzZfRuh6uNW9cqiKb8yzDQjGXa+Ea3o/VzV8H68v6/C2oVHA11EW:GpJvYzZUfNW9BnvG
TLSH
T103F4C616B7401748DBC352E56260682F6AE560B83F81786E0FFF268B7BE7CD5D270192
MD5 SHA1 SHA512 SSDEEP TLSH

locales/fr.pak

SHA256 1972f718698d83dd9af8ca7c77062dee0cb888de2eb096259c776752322077ae
MD5 7702f338d340057f449bd8de4c5673ae
SHA1 680a4fb4a6605add096f124029ab01fd08e79c20
SHA512 1c5f4c218e015b4a046239e9c51d86636253f96afbc9aec989be979957ca1ad54bf0d200ae157c318f7c08e40bdb11ceeafb6c2cbed547a63890f69c7da297a0
SSDEEP 12288:oBbVpQ3NZLkW94S+bvZZiuK6QuargVCcm8N+bezEh0y4VoZuYnYw8jw2wW3S1X4l:2b00vDVevmh
TLSH
T102F4F75FBEC431CB19C60267FB12D6A3DD348248F215E344D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

locales/gu.pak

SHA256 b207f2046791aa8150015ca78f9f76f2f6509953a00c5e89b155bb40e3a26474
MD5 7daaf6a5370eb04dd0e1d1df08d35f15
SHA1 d861655e79aa6165e9101d7de18f940b5f9ae976
SHA512 051dfe0a1ca3c09dce67456d75bf595dc36d1ebcba5f5003a1effdfb679531cd29593ebe524612c54104bba0e8f442e3588da966f74ac1655cb3fbeae501c18f
SSDEEP 3072:KD8i2t5BaX1eq0o5KPjAwREJKVMjNiT7llj63rAulfcSi5NnWsWi+/GQoynAzl/q:M8DmFT15STsPffC+1KsP9
TLSH
T1BB6508D0D7B9F07019DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

locales/he.pak

SHA256 0600c34932b58b18f1d3196567af67de09ecf9eee8ea4378a22aef74fdb0eca2
MD5 6f98d25477ee56cbe2c578bddd252da2
SHA1 f6ae5ef83d50c30fe05f03ff69ab7a2a437bc79c
SHA512 520f6e4c0b559ba058e543e3f2fb7aa92821551439952dd6e95cd85264f6b6eddd977392bcfc5b4938e668fcadedf27b8382468a904908fda722cc1ce6b55b1a
SSDEEP 12288:W3p1E6QShMPBBAoyTmXXUulrYyEQDAlCWq+/8mrgucqQANXkxeQCaj6TOi6jcAfy:upC6Qc64
TLSH
T1C01599C4B2E492255131AAC39FA4FA285FF3CAB53CA27512CB14526CAD774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

locales/hi.pak

SHA256 8465aa28c6a2c74d98b2c29ea50c4f8e09aee553f8b01f9bccd1236dab3dc85d
MD5 83110f592bcc3ec4a79e4e14ed931893
SHA1 356dc30bdd0ce60a957230c53315ff22da052034
SHA512 191b1de973a38c3aa168df6ffd1755706b29b69433e96a4b00ed9dc0efa9e67c48929fe10f8947c408f776a4aff86960e35ada424f9035c6678fe39094566bd0
SSDEEP 3072:brJeCdgKwFl8U226eHmb12NtnV/B90ZV1dWuGlqv3oJEdtDVejnPs4f4/BtROyU1:nJ5y83B2t+a4RldbPk
TLSH
T19D75050CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

locales/hr.pak

SHA256 6990ba056fcd1cac97ed5b48024be4ab366846a9c517d43a181cbb0eefa095d1
MD5 18123099716cba1fffbacee72dfc1315
SHA1 67fae0cd4739e964b59460aa1c4d8b2e6cd9d707
SHA512 ee2f3f6d54def03a8562f4b944b341d2b7e5d98a6598e05aa6009c810003f92fb1d0d9539a6f078d70a0a985e3d41958824a3d8e27ebb2b67491f0b8c36ee355
SSDEEP 6144:7hS9VbVbml6edNJgUVaT5ja46TzKzbayoE6pOWOYwhdbYu:FS9Vb4IevPVoadJJnOpku
TLSH
T12DE43B7DBEF3570A0897B24AEFAA43447DBE08DCE56597B7684F522E0003F4C6AB4149
MD5 SHA1 SHA512 SSDEEP TLSH

locales/hu.pak

SHA256 b83fc60c6d3ce3a04338ea16ba4627d6dfdf81f4373fe4921ac01c7c9558bcb6
MD5 9b7c0f6446817764f33fee01e82db019
SHA1 40061f4276cdde875303b709fe783c2d52e2a60f
SHA512 ea1ca65c71b5a216865cebb7cfd82774f0f8184a09dc0943321c9d5d44d94ca8858e99c11ff66c58cf35f943ac75ce82b917594ab21f53e1049b26a047bf42db
SSDEEP 6144:dzgVHf66Wfsxn/3BLk5dnTpJ7yHlEx+XlH2sSaa0zA4ttAuSU5TT78bZ49JxTYhW:dcHjKsx/3ykJA9U5T38e7rROyr
TLSH
T144F44BB793B6944ABC6C178778643F55592E481BAB2B31FB2883846D34A178D0DC3CDE
MD5 SHA1 SHA512 SSDEEP TLSH

locales/id.pak

SHA256 01f3853d21d4543ecad1ceeeee40fd9cfd4fd31e6822c590618aa965eb9c46c5
MD5 d72cda80a7bb69360c24b3b16471c81d
SHA1 ebd8ad98c86dd45eb42c29fd501c68006a7ae04b
SHA512 eb90038d045bbcdd650336abe876ffe008d8f84b09c3d21b1dda1aa7ce836aeca149cf80121a39cf10fdb8385bcc2c90435228d30812fe94392fb418ee97ece0
SSDEEP 6144:4wzPkpLIRUm44WsZhCNBL71y7W30ffpTFjlFKzmBHCY26kk468jWOBZFm2iTv8fa:UpLi4BLEiQTFjlFCmpCj685vC
TLSH
T1DDD4E7632ECD310C094842D5F2DEA91E7CCE233BAF05B76E8E348F7055A67686716B94
MD5 SHA1 SHA512 SSDEEP TLSH

locales/it.pak

SHA256 683bc613c4ee53ea46824856a4b56d5b187355d2e2f6e52284c8e7fb9eee4e01
MD5 ed64f56b7cf38519a4b604b8c9c95d0e
SHA1 0b2be3ad9e935dc8fa494da1989745c7698a4d0e
SHA512 e05ad14aede986f19e65be5b0ed0ecb912b70ead8a2d137ff372ecfca654fe98a91d417fb48e76e72504b0df18c13d348e4b1b77228e94e23dde68491a82152b
SSDEEP 6144:tI4qLqimzJ3ikJd52N5zVX2qlSfqBCfEs61ltM/whOea1xIkYMcrFqpzSj9f3wBy:e3LqAGu8d0gzP1npGlNp3
TLSH
T1CDE41B3AA5DA252519876359E611F085FB6EFCCCFA41721CC99B131C22CFE80E1ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ja.pak

SHA256 ba5b0b157956274ed1b8e1af1d858ca9862d59ce3ba5b833f54a613697153825
MD5 71ee525dc05162ad20fd35b2a3dcebf0
SHA1 8b9104bbe4852fc9f9098a7d01d9e8fddd5b720e
SHA512 d4364641d8e05741cf81adf941954a95592e955f2e22de5e2526bcb3b9041c5502092e5b38f5853cb774ebd476dbe9c35859890b21c11d31e4b3f5d45aa76b32
SSDEEP 6144:Dqs4O2N3leWF84EQH1oZJMxkZrQ2TMaDeCbRACGVHhsV9:m5lHtH1tkZrQ2TMqeidGVHQ
TLSH
T1C105307CE3C569369D6153A22C4E36E17506AC9BFCA23A3A443DC074BD70BCEE415AB4
MD5 SHA1 SHA512 SSDEEP TLSH

locales/kn.pak

SHA256 d154c50013245a268ba9b4b49639516ab0593922d893bdd551e4aa30ee6a3e2f
MD5 05078d08dbd65e9bc4e27a903ddd6462
SHA1 3ba2c33a01ed59102ca3cfc7d5655ea693d48bb3
SHA512 158017227b71a8701de418a0e02896a339b61c4a9416248c6684549068df241c0487ffbae170c3d5181b38b0a074c1e0eb2bbb2e4a784f53ea242d617c44b3be
SSDEEP 12288:12bz3zDwQNSWJjQgY2BQvwT7N7zSyMW4QHyGEV:udMl
TLSH
T15075CD18ADBA7D301BD5106B24EC643ECFF16BE29CA907C2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ko.pak

SHA256 8a899f9df64736f4f8b295361bcb95f501835350b9320c2396e1d6f03cde5ee8
MD5 b824bdbb456bb1c25db280e927751761
SHA1 2c77d102db32e5ce2c59b4edae5e7d4ef9a0ec9f
SHA512 7c218c980eb6e3fdeb04b391c2e06f821b4a8745057675f542f1a62f19d7bbc61f2b96977b395c54fd8120c401231d87584c087477a0b4f5432745604e4af87d
SSDEEP 12288:U+/9QDguTbckmM1WNiPszcbifYj4ZGRyzDRIE1zHFQgC0lIJ/xESJGRG1KLhw1Lp:U+/WWIQC83yyOt
TLSH
T189E4A5F23CDF63C91193CD82AAF4FA198382D976F7530294ED44CE449E245D74886ABE
MD5 SHA1 SHA512 SSDEEP TLSH

locales/lt.pak

SHA256 0c755ce72d1b71e77d58ab014228458d8ce2b0c51a9b00769635c6609255c9f2
MD5 1cf07cb33fe89bc96f45994a0ad98a62
SHA1 b8a9c25eb8fcf9f606f851b61a3e97cb2bc0524d
SHA512 2d9382136b3444b8130317ac658c04ab275a20d0e684420709840029c3c50ef69ffe19e51f6ada312439d7d2fb4a8c8d127e0202987d55612e7923ab323dcdcc
SSDEEP 12288:GXBwFUg40MQ/u3qhD78baD0dRyN7UJiuoE6SSH:GXWrMkbKQ6J3oV
TLSH
T1ECF42C0069E3AEFB9A4467C981A4CA78DEFD50009727BC61EC69C78BC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

locales/lv.pak

SHA256 911f922f6ab11d04c4913b04088619276994104979b2c5f132182953fabc24a9
MD5 797904d9b8cc446bfdc8823f8efd249d
SHA1 178b5ae7a875e50646cee8a9c34be60bf68f3ade
SHA512 854a126b5a7dc48513729d476c540608d557de3049868b2329e507451beb9a73d38a68a2517a41d9a85f2b1970087630b334323bb307af1a58d49052972f920d
SSDEEP 12288:HjFJa4VAWdx/N5g/1qrcxm29c4TloHD+oB:DFJa4VAWdx/N5g/1ucxm29clHCoB
TLSH
T132F43A959EC68FAA4D914DCA733AD133A8CCD700FE07E112DD798B3A550F52822B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ml.pak

SHA256 8beb5df27b5a1b88d0f441518a807b2c6acd99a81820cd0249710ea12bc179d0
MD5 1ee0b429a68d70f8e14d90fd5fb740f1
SHA1 704642c287bd4cbcaf472923062fe06c26a8b489
SHA512 c3961d0b06e8ac84b9d4c1a943b03049ae59f58028e0dfd99ac9e7b7b7735673c5ad936759f14dd218ba924f27170bae2093c602082ebd0f2eaf1e45a4293ce1
SSDEEP 24576:kQm/CzR/oZAuuxyYl+9y9XBkx/9tYFrKfijHeBRJzXtK+v2/idf3AaIH3F3u:PMp
TLSH
T102859D5BA036CD3B0FD102167B4E2FABCD5B9FD140AF668B5869B2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

locales/mr.pak

SHA256 1971da05e4868841c9d9f78be5e17ab09178af99b86a6c07df385015a0c9d9ef
MD5 626fbf6ed8eca2fa44e52ae9cfc8b856
SHA1 c4b8fb73e8dd22f1adc75a609fa15b917e98a049
SHA512 83534bcd0014c7431599e49da7f1c18fbdf4176085bc170c78acf31965fe375dcd1a0d2814d4374cd7509a4bd5c07859e811262bd637ef341ba822aa8a3887f6
SSDEEP 6144:VIU8ZtwrTSAld7dSCyiWUIsN00UH5rCS0mOygEb:ewrWS5TGXH5rCS0m/gEb
TLSH
T1C565D24DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ms.pak

SHA256 b60c552a9ced5d0e1f4ed408f65a04068acad7d80db7cf88528fbebbcd337e23
MD5 a31481e751f6bb180968b2381d793d05
SHA1 a8b197bfe937469497c53e7df3796d11111b6024
SHA512 5793f68de93a896b689fb52ea82e2102c7d89550236dd108758745d22e68db055c577634dc41f1e2cf80bf4954d4167a84607dd282daf98210882a996685044f
SSDEEP 6144:njqCnjw23rq9CrUOP1dXvkSLxEHuqwa528WN3wcDiGPUlw+CV9hD:njq6jwQUGX4HuqwaSZKlwp
TLSH
T113D4B5579EDE3118085843D9D2DEA91B3CDD3332B705AF2B4DA08FB0166E7A53316B89
MD5 SHA1 SHA512 SSDEEP TLSH

locales/nb.pak

SHA256 cb50908b03c77263297e63ff75d4d3c58fb0cb491c69a8964239e787c762f52d
MD5 d1ee1aee9d6944eb8ed7a658333cc91e
SHA1 1faad08736d478e7d25a144dc906147781e6de5e
SHA512 66d6741740d59d442fadd734ec4285cdb15c6559b448bad513bd9aa08062487acaa36cc0c88c289d37e64c89ffa05cedaa70f4473046b20bd6d3f850e5fc0c09
SSDEEP 12288:4FzGCp19tcd2Ql+hB/Op7fmPYiGkJcKb8B0Uim2r33:4FhX9tcWhn3GkJcq8B/gr
TLSH
T1C4D40883EE46B72EF6A44394F519865B9B7D942CCE98199B54C8C23E0CC7EF052BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

locales/nl.pak

SHA256 b6a6cecceeb0097d5fd9628c684d53339f7871948655740e0f625bfedbf526ae
MD5 712c3de8c9c0f50e580ac82074d7ee76
SHA1 9c69e08019dc195037c0d83fa0b21c8e6227a5df
SHA512 011b60ec55581ee7cf7f20715d31c46e923462fa6604e9c13c6b0920e986a54b6b262fc7c09b454791dcb96ad9c0cd27a12103659465c8ce040af17724c1c5cb
SSDEEP 12288:EUodlCCMZnLplbJWQuseUBW/gISKdaFFygn9qHgG48J:8QtlbJWQuseU+SKdavyg9qHgG4U
TLSH
T1B9D4F917AC8E253E59C0A349FA098FBBBF2E832CC26CE67D94DDD5340443F6851AD589
MD5 SHA1 SHA512 SSDEEP TLSH

locales/pl.pak

SHA256 dee5b710ca72425cd4d1236ce260f8d68b41bfdfceaeb2f98c8e89217b24208f
MD5 7a5ab308647d031a3cfa1311dfaa3ad3
SHA1 b7893bcb9951b554234f9b3fb60441617aae3661
SHA512 a5a25d3971f16ac49a20d8506a0a05de7253308cd5befdddfa232d9bbae9b5356e5c5ee02b69ce740440ab332c55f1b99c33bf327882e6b84377f294dfc7d673
SSDEEP 12288:cOQ2r1eDw9OjK4mZefQfuzSJabZ2bn6jP6CUdwe3m+UwDMSmG1Qh8PNRNGoliJSd:XJ5hwmX62DM81Qhnm
TLSH
T189F45B0E56E98A4E8CA008E6F6E70B7CBCDDC818F108D35FE45F4526719B19EC9BD584
MD5 SHA1 SHA512 SSDEEP TLSH

locales/pt-BR.pak

SHA256 4ce3dd9bdfe8042134cebe618aadd1d29daa91dc3bd7776a2a42639f97bef101
MD5 1340d0dddd09323ecd2ddfca59c9ff95
SHA1 3846b05e5529e27f02cbbb6e18cb9aa6de7aea7e
SHA512 5aef59cee675bb451926b9293755f7718010f06a91e4db072001f997a28ad3777047adc3ded2237525253e7bfd0c9863b8266a37e00ba057610bacfe88783ec8
SSDEEP 6144:1Mz1t1XWEc06kYuhvNBXBLPwVoQzyFE5EVL0oNtsRGU1pV:WRmEFAoqEvDsR11n
TLSH
T1EFE41B2E6ECA136614226350774EEB43E5C90645FE06CA87DCEF4F06A3DDE40D933AA5
MD5 SHA1 SHA512 SSDEEP TLSH

locales/pt-PT.pak

SHA256 266e49a497c6bf9e48502c7eb01aea1fa90260b6fb1609165ff50307a3d81b59
MD5 70557f8ad0981e4545ada8988c6053af
SHA1 43569e4fff4f1ec4f23e3592ab299c474ef40289
SHA512 e8df0f34431dc4fc4c0610208e93ab63c13d70e9bdd7c9153a63268a68b0d3c1d1043c7951ab6c4b007901022b695d8ea48321d5c0dd0e66a63e6b718400c24d
SSDEEP 6144:bqTin/hF2VNusBieJVJJxhTIjPNsWfwgYnbioBcSRhI:byi/72unYnbDcSRq
TLSH
T1B1E4192D6EDA132605135341770ADB03EAC85695F80ACB87C9EF0B4272CDF94D6B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ro.pak

SHA256 16b11fb73ea0c5d0336de453d3e2abd2de69b3e6c66dcd72bae318666525bb18
MD5 9b2ffd81518422f5377295885d980161
SHA1 23e2177172bb965b5faf4e4667ef000d5a60051f
SHA512 2426e87b53dd8c4d26d34aa4ff685449edbb2547c1f1ccb17e4ebb53e4372896748ec05bb89ccd7880cece4e176467b3e2c18c53694e93ee2e99e96a7ebd9525
SSDEEP 6144:1e0qK3JQ0EghDYnnfwT9o0PBciVgzD+NrF1tcAGLtOVmdO547HW2wsQo/Mr/j:1erKOVDnngo0PBhgD+VB3mw5OWsd/uj
TLSH
T1BFE42C23A1C41A972E5152B2F73924D3E88E105DF641E2CDA4EEC97910CDDDB852EECB
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ru.pak

SHA256 f3c1d6a7344a98a150d2731f0a7009bcf3adfd0b712dc7dc41f1ba5fcd13eeda
MD5 0dee825daf7fb8372078749458ace266
SHA1 8b547ff4c64422a7aec5ce6d40dc20e7f6bb22a4
SHA512 c11c512c1f8f718b87d02d92918de814a51886c250813d5e6491d3ad1c600355ce5be0525225580a15c209f95dfc852cf1e3611c7b7f4dfe1449608b109c30fa
SSDEEP 12288:x7tqPsfQeRo4Yegsp2zJ9sF+oa+UlZHO6HzW/ZqSv4sqCz6kE0LR3Q8Nirh2YH1F:xxiKoBB
TLSH
T1B1458760669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sk.pak

SHA256 d9cf65b23dd452e4a42331b32e39b890ab47152b71ea247dff628d7cb1dbda9c
MD5 473b6e2a22de2c0e2e54fb0cb9d62353
SHA1 7c772fe87405540a333597e7610924617e64a250
SHA512 5a271546178611af872a8958163349b893e9eca7e03ca44a7d11e041c54a639402b02522ab1b5be73d1e269de0a37b90439e5ef5f5b227fe0f97241499538ef5
SSDEEP 12288:vL+sJ8wowk74V2A79+bi3NWTnjzYIng9pTjsxt9we:j+s8N4VT+fYzktae
TLSH
T1FBF44D3FDFE7181E8E8D0148EFE97110FDBE8650864EB0A6944E364714E26EDCAB4E54
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sl.pak

SHA256 1550f8df161a3484a6c7af9bc5321fae524e10d6853467afcb8749054a73e601
MD5 f9983e0770e42bd3c3efd4731795efa1
SHA1 62423b22e235b64f4c0a543aa89e122437249605
SHA512 269d4877cf58ae67e713acb40acd58e98349832e8f036e2d4cce42598b52cff013eef0019fa19e65ce4e23e7478ccca77944410cc71764b3fc80518211d0b1e9
SSDEEP 12288:slQdT2FT8cB2BynElanWHDoiNi/fzoDKql/af:9duTNElaWHDhi/fzoDq
TLSH
T10DE42B397EA74E0F0C9AA2CFFEA606007FDC044CD256E6A1EC4F336A5415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sr.pak

SHA256 a76930f2c72e49dc3a2c9be7e7bce0f9da0c93de03b6e275521fa86da0d2d39c
MD5 a44e04518c70dff31799dd47379bba04
SHA1 8c4830e17cf5d7d33d5296e030c2ca4eedf274ed
SHA512 09b0193ab1c803bf2e66a998079728bb17d4daa1cd7b0a8197dff35cf59bb4d415c697dd836347c9a32ca3b16d2f37b66770c4474ae84d9a5167f9f58c74ac14
SSDEEP 12288:vwnK1PVzj34noZMFI83SS0dR3Ckdi4B/J1rpb6hKPCHxYX037XKue9/k/z:3pZjY7aC+a
TLSH
T1933556A19B9E64DB0501F41BD808BE493DAF41FE3FAB975211601DBD34E10B847BA39E
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sv.pak

SHA256 b101225f190ed1f1738059283058703afb7eb2e0fb245dd076f919d993427b04
MD5 3cbf6535f2427183553a9fd56f665f45
SHA1 e36d51088c6f3c1b2bf2bafdfdfa5e182783926a
SHA512 733fae171edebc81531e1f85a454fa724a4d434a01d5e8c52fcc6fe009d5ee80a43b64ada5420fe83392d577e71671f2082281a896f7de03d85dc603e7ceac69
SSDEEP 6144:x8AxMqKJxiS/ZQ8lUJIcpjwdux+xzL8lGswiLOVRFcz5RtGmqeqMWkSMXtSOT0Kp:CAKqY/q6cxyAipg9
TLSH
T1D8D41B038A20F526FBB2530DB609115B0AEDE25CE7F2954E78D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

locales/sw.pak

SHA256 f4e0e2f5b49d9d767884074cc3ee8d0dd83a986f7c1d2de236885998d7a53460
MD5 c45ae1d02bba66df5e1720faa9b062e6
SHA1 0281a51663763ca1a5622a4d0e15dc361b04c80b
SHA512 abfb709e1229208f68e723448b9766bbb2aca6f0d21df9effa6cb6198a00f546475fb59d760e1a634543a085c1e3e02b8b26c3162dbedf1e87fe83b9daab57fb
SSDEEP 12288:/+4khPft7byxGH2qDOKd9zGI/d5NmedqNGjRdpiayX1jt3hFinSLThYFaKI3z9iJ:/WPfNBFYi281
TLSH
T111E4D6628C71D1195232618603DDFF332BDCED5C693B29935A46BF0F218F88C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ta.pak

SHA256 9fbc40727cf1143d181fe6b21b63ee0f8ac020360ef23ce76759cbc0e4c009a8
MD5 0f1406daa2bf0b9e547a544f33390ea5
SHA1 ba89b387164702b520aa2e4b58f66673bfb09d57
SHA512 053b74f4d35b6890761d561f20ffc29d8022a47e72da13996d966382a1959871a9c86713e80e9ceba7e068867c7c2a522a6f0e8347d7688eefa010c0305c9670
SSDEEP 6144:i0JoYKj1Z/8Kz0ykwuiGP2wq1tRAwtm1vYpiMyx:ZmY01ZUsaiGXq3tm1vYpiMyx
TLSH
T10D850CCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

locales/te.pak

SHA256 8b20dbd1ce97d4bde6273051991c593d74d51e90966dd6291b38b0185f4d0fe7
MD5 488a694078bf9a18cd631d229fec7bb5
SHA1 276ce97e7202472d9f2debb0e161b7d00c7f8bc5
SHA512 23e85f283d656a323554e2079f07cca25e2003695198eaa79c3b9c66aeccf99ed1e8983799853a8d951f77ca340bdc5efc5e10668c66ba68d675adcd4e21e6e9
SSDEEP 12288:dN02Jjzg7MZKN/ywG6USF602/LDgIC8ymoQRT5qbDM52CMYRWOB6ym3p1FW1OhEX:IOYtscRq
TLSH
T1627592023A6AD310DBE60273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

locales/th.pak

SHA256 55cdaecc9ee85290679c7c7331afa321eaa346ea33e77f2f587c0844199df7ec
MD5 d1a5109d3e742d1246dc4565670993ab
SHA1 69e7303dab435c3186ff4a7bb42eaec4e47e2b7f
SHA512 361927856ce83c4f1df367dea039440368b8c3ebaad76a449000ed785d37c451a1b256f332be0c3329dc3f73ba24387c9e534a1c2fb25f3ca88b5ca67089334f
SSDEEP 12288:OTlevYN9LyZYAhzYL6Lys6o6hCQskJUseOPsO5eXwpbDFDS6Sud2mKHlojghvM2d:OhdsR
TLSH
T12B554CB37247DDD479441B5B262A7789672DAE693F73F8E000C9215A73F071A8422EE3
MD5 SHA1 SHA512 SSDEEP TLSH

locales/tr.pak

SHA256 81a2cedd23026b21e617356a057839ef0f94530b51fc325c0f91ddb5b11bc932
MD5 16383ce4611210bc709d1fbfc0c3ac93
SHA1 01e77af13f1f5436f9ee003caff6bf21b4a243db
SHA512 c2adce8ec3c1c61113ab86e2eb1a5b7d068b626a89710f50bddcc21758a002a8b5e9010fd678b4582d6dd0cdee937adbeb825c41f9d86c96bfe4fe0d2279d623
SSDEEP 12288:n549o1gVCk6Hz6sgwhqfZF4MwsN9ep84+R:n5x9QN9Z4+R
TLSH
T17AE4EA8178EF282C8BB9278BD6E94666F8DF0766B331F4469B168636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

locales/uk.pak

SHA256 39e272f1acb9c0b0bc791efa0347b92cb29e20cfbb5ae14f539628f10f45b0f1
MD5 6b422573ebc1769223710a6bd8fedf39
SHA1 0a14ebb6d3091cb3b0e9adc336e088eef87a81af
SHA512 fd7a6c02c62ba7b303f5509e947b761ed3a65af986ab8fe9b6dd5e18cb99074b96cd7bdcb81d486b4dfa909dd790f04c2da3a84880a6682813c584aa867e8eea
SSDEEP 12288:lc7n9OSlH+QKjbCI5wkO16UgBRrsSr+UznS7BNb7eBPSlFXKNnEUA6QzAz8Pi6N2:y79Sv8PG
TLSH
T19E45A9A1AAAD54DF0105F05BE94C7A0D7DA740FE7FA7471625A43DBF28F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

locales/ur.pak

SHA256 0c1cfa61d9a9be6338b0a160b43ff362a982003053ae5be3b3ec867e78374d7b
MD5 6cf3c36a589dd5dbfc00b19cd96ddae4
SHA1 2f35469dfa15eefcce47f35231b4c19b0ca5beec
SHA512 8eab2e970a05171d3acf514566bd5183155dd6bf59dd26d4a909deec18bd67d4bf9e375c85608233879ca8bcfeca93b5cf7daa8447dd53b151c465b5162b8f3f
SSDEEP 12288:KYuEnE4YoPL8P5yzqtdQeMnyyK32By98qsE8dGZOv5dQYr4KYjwadcJKwUlubcoF:duEnBLGcb
TLSH
T1F82500D2E6B896B35A21D92780D33C34CB735F13D34AF281E96246C54E9A0135F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

locales/vi.pak

SHA256 0458ac35755d2b86a116fa4a15de9c3ca7813a12852e43d697dcff2547c323ed
MD5 2ffdc0c37273215ab9541c7094711f74
SHA1 2aead8982e27ffb08ce18fa9ef4c63706ba08ae5
SHA512 4008b34f3a16018f5cd1d38bd0d80b7bd8f76284bfdb28c5aa77ceaa76524ddf8b06f463c33690cdbb3c87081fe238765cc3bb9f70454a9e7bf935ec304d15fa
SSDEEP 24576:kJ1vg+ce5VM0LMuoVbE7v8JlFtiZGfoq1ljP:S1atiiT1ljP
TLSH
T10405855216E1302680AC553EC6CE540D6FCAE42FF7C18FE56FF4297876221A45F21BAE
MD5 SHA1 SHA512 SSDEEP TLSH

locales/zh-CN.pak

SHA256 c2b05a5970bbb02226905b9e74fe44f32cd2796d4efc0669481c25f95a0882bb
MD5 a2ee554c63fb92f2dc9c89e4d4213fa3
SHA1 d6daae62d44d5bfac648d4d54d54ff2c1a31e880
SHA512 d0a05a2064e0da9a5ae8f1944ae53ea9fa41d198d3feab04594e2f15fbef9a0b0324686cc968e49bec5f2887cc3b073e0db64742b88e39934e70b003c72416d1
SSDEEP 6144:+CXLDPQ+4Cm57cDc+qvYnE7MpUcZXo9ddwTQZyRU4YoDMe2ZH/NKqglu:+uS9+qQnBpUcZXoX2Um1YoDMtH19
TLSH
T1E2C47CA920F9BDEC004650E03729613D7C40764BF627AF35AED248ED1AA6FAD0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

locales/zh-TW.pak

SHA256 39e6196432e79380a812d6af2e99fd198a5ca3e81565435af136531a4c9cbf42
MD5 bdff21272b99b07314b74d8e0bdd6d20
SHA1 692682bd7d4875121fa8d620e06f4d04f4fda283
SHA512 32d97d048ad022492b04c749d68cef9b7ddfe2fa1fe7e6906d139b65c0715442a2bde5d8aebe912b51c7035b26a9cf264cede7c4dadc0d02bae41998e26671da
SSDEEP 6144:o9uZDKLc9hr7//DAYuVJoOk6a2iuooryfew7HLD5O9B9aUmzTq:Guwwn78YlOPaorymw7HGPH
TLSH
T12DC46CB618FBDBEF0901F484B7CD512ABC8B382DDD773636FC851C982E7AA5409A1146
MD5 SHA1 SHA512 SSDEEP TLSH

resources/app.asar

SHA256 31fd4998e91ff697c09d45a46a87cff2ba05e300eb0b8b1dce0499ac5bfb4a43
MD5 6c19087dc1e7123350f84f847ae6e654
SHA1 ebbe71da31c746e322e5d25bafc47a41bd70b314
SHA512 73d79ca917dc18ddc79418b9a6b777f83bbf74baa51fee9086761eb0c72c5c5a8ccd6785daa95fb27611ac2612cd1355ee5d969d09597e5cc4e53616ce02af54
SSDEEP 6291456:pmuXz4GOglS6Q7O6cdBAIZHB7spG9Fdt3KkmzuLoze/wfw0d:pmuXzAgu7O6cBAIZh7rdFIzuWTY0d
TLSH
T1DAA91A56E5186C671A85AA650CEF45C1B869D0138C4C2CE677ECCC6C9FECE4C327A39E
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsis7z.dll

IMPHASH 2656ea25cde98f31a490513c2db04ae8
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

268568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LocalFree FormatMessageW GetFileInformationByHandle SetLastError DeviceIoControl GetModuleHandleW GetProcAddress HeapAlloc HeapFree GetProcessHeap GetSystemTimeAsFileTime GetStdHandle WaitForMultipleObjects GetTickCount GetConsoleMode AreFileApisANSI SetFileApisToOEM SetFileApisToANSI GlobalAlloc GlobalFree lstrcpynW lstrcpyW MultiByteToWideChar WideCharToMultiByte FreeLibrary GetModuleFileNameW LoadLibraryExW GetCurrentDirectoryW CreateDirectoryW CreateSemaphoreW RemoveDirectoryW SetFileAttributesW SetFileTime GetTempPathW GetCurrentProcessId GetCurrentThreadId MoveFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetModuleHandleA SetEndOfFile GetCurrentProcess GetSystemInfo GlobalMemoryStatus GetProcessAffinityMask IsProcessorFeaturePresent WriteConsoleW HeapSize GetStringTypeW DecodePointer SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA WaitForSingleObject CreateEventW ReleaseSemaphore ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetVersionExW VirtualFree VirtualAlloc GetLastError CloseHandle WriteFile SetFilePointer ReadFile GetFileSize CreateFileW DeleteFileW GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetFilePointerEx GetFileSizeEx GetConsoleCP FlushFileBuffers GetFileType HeapReAlloc LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess

user32

SendMessageW FindWindowExW SetWindowTextW GetDlgItem wsprintfW CharUpperW

advapi32

SetFileSecurityW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken

oleaut32

VariantClear SysAllocStringLen SysStringLen SysFreeString VariantCopy

Sharing

General

Malware Config

Signatures

File Explorer

NewBoty (3) (1).exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/StdUtils.dll

msvcrt

shlwapi

crypt32

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/app-64.7z

LICENSE.electron.txt

LICENSES.chromium.html

chrome_100_percent.pak

chrome_200_percent.pak

icudtl.dat

locales/af.pak

locales/am.pak

locales/ar.pak

locales/bg.pak

locales/bn.pak

locales/ca.pak

locales/cs.pak

locales/da.pak

locales/de.pak

locales/el.pak

locales/en-GB.pak

locales/en-US.pak

locales/es-419.pak

locales/es.pak

locales/et.pak

locales/fa.pak

locales/fi.pak

locales/fil.pak

locales/fr.pak

locales/gu.pak

locales/he.pak

locales/hi.pak

locales/hr.pak

locales/hu.pak

locales/id.pak

locales/it.pak

locales/ja.pak

locales/kn.pak

locales/ko.pak

locales/lt.pak

locales/lv.pak

locales/ml.pak

locales/mr.pak

locales/ms.pak

locales/nb.pak

locales/nl.pak

locales/pl.pak

locales/pt-BR.pak

locales/pt-PT.pak

locales/ro.pak

locales/ru.pak

locales/sk.pak

locales/sl.pak

locales/sr.pak