kmsdmtn[.]msix | Triage™

resource
unpack001/MyFlixlyNetGuard.exe

kmsdmtn.msix

SHA256 bdddb50204d6867b4bd73d9cfe93cbc98c4518342da104e4608f04e675ac6cb3
MD5 d13ca3291ce587974758cf02c5ec6a49
SHA1 e3d44dd739faf442bccfc9c3e7deb5e35cf63940
SHA512 4a500e4b07747ccfbe12105bd30652f2cf761c4ef7e1befcb10eda1d622227f7372ae7d4b2227a50b80cd379a40ba842b81be6ea41a049c18ae637a0f0c573c8
SSDEEP 196608:0mzsBI1XKnm/BYPjyR4eFHK7SmhsbqqmJevf0eaMM:0khKmmeR42mSmsJmJevMiM
TLSH
T1A6D633B227E7858DF06ACEBCC76C5145DBE176ADC04B689B8610A32F6103FF452E8365
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123123

Digest

N/A

Digest Algorithm

sha256

Digest Matches

Trusted

Signing Certificate

CN=EE3C96F3-86A4-46B2-B272-C9B8C18BD298

Chains

Aug 26, 2026

CN=EE3C96F3-86A4-46B2-B272-C9B8C18BD298

CN=Microsoft Marketplace CA G 023,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=EE3C96F3-86A4-46B2-B272-C9B8C18BD298

Serial Number

33:00:57:13:c1:6c:68:62:f2:c4:81:e8:cb:00:01:00:57:13:c1

Issuer

CN=Microsoft Marketplace CA G 023,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 26, 2026 - Aug 29, 2026

Subject

CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:12:44:a2:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 28, 2011 - Mar 28, 2031

Subject

CN=Microsoft Marketplace CA G 023,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:0d:7b:1f:c6:4f:d4:4e:7b:00:00:00:00:00:57

Issuer

CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 11, 2024 - Apr 11, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:26:35:b4:3e:67:43:93:f6:1f:00:01:00:00:02:26

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Feb 19, 2026 - May 17, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

AppxBlockMap.xml

SHA256 6d2e8924aef8a2164687a525d0e6ee4f28ae0dedbb7d7bef226e38ac65802e5a
MD5 e20ae475143e08b27bc5e590ec8a2438
SHA1 e5476ecbf2d83d49d2a540493fc1729f0407ba8d
SHA512 e4df390256f0182b86cdc6cb8df1cd3cf3e2f620749dd12759567adf73935b0a9a89fef56c2e0a8cad949d58654adc4b8b29b50d37783b75af09c7924f074395
SSDEEP 384:aDHGmZGTOOB4v06tQyEkPTJbONNpeaFmi2zbqys6:wHxZGKQy7PsXdmigbqU
TLSH
T143B2B4A0113DFE2A91AC0BFD0F69F0445C76982767676E4FDC8AD6F60C2B8660E670D4
MD5 SHA1 SHA512 SSDEEP TLSH

AppxManifest.xml

SHA256 d9e4b6a72fa6313a7280ad5539fd90cafe148ec8198957ad5684ef22d988158d
MD5 b769fb848e42fe9158c48f699ffd94ca
SHA1 5f2cb554d1922f2e5ed638677b69003931e0ce05
SHA512 74e9524f1ab18a8e1af75a61455affad02b03c673ba04b48a861e9110062d8aee6d5c4c9b39d4b3241f956da981ddbc6b73b4d62c66b9f02ad76f60f457e2a8b
TLSH
T1BE515387B0D409B083718974E76BB3C3EB2D868794DA4454B8CC652F2FB239E023B265
MD5 SHA1 SHA512 TLSH

AppxMetadata/CodeIntegrity.cat

SHA256 d42f8740d8563383ad7959d36735902209452ab3e3b529704475bc35aedcbcad
MD5 c35e5cab4daf3c399d5b7e077da48d8c
SHA1 cb5d564bfd8b6a7139ec065c50163c85b25edc6e
SHA512 20c53c1c565ba4e58e95bcd4909687f9507c543e6506fd525fc2e702ce4f0ebecf72ba1db6d6e88f5fa09ebf04426ed4ec8c853ca765872aafa7bbe8c2abacf7
SSDEEP 192:7Qa4zbE3n9pEqiJFg9tDa5KHg6HqcxX01k9z3AT6awr4s:7QhzU9iqi3g9tDx/5xR9z0Srh
TLSH
T15F423AD05D6861C3EA9BAC5027E4EE5B3C3C43D7494090A62AB6F95809973CAFB1C57C
MD5 SHA1 SHA512 SSDEEP TLSH

AppxSignature.p7x

SHA256 44f0fa031eea3dc1a1cd16b2948a1e20f7a28edd221ee0d06ac7a3478154876d
MD5 3066bb4a5fe2d1964fedea3d0e9cd04f
SHA1 83a1c7ae06e8226350015db9b0b01d14ec4ba3e7
SHA512 5387e0a1f1ca79d0ec0bc76c1f38ff25db8b2f977afab311e83e607d059265bf02c76b967ae40a8a5b4fc5ac720b0fda299b88241c1cb39fe2a73b20eeb9fa8a
SSDEEP 192:Dbu4zbE3n9pEqiJFg9tDa5KH0YZUNn9X01k9z3AjyaODJOwuky8:DbdzU9iqi3g9tDx5ZW9R9zBaOy8
TLSH
T10C426CC18D3C91C7D98A6C4027F8EFA73C3D47C70A50F0565AA6F99918933CAE71856C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/LargeTile.png

SHA256 b9077e5b18734ea0ac682411a7bff8bccb9e5d822c6b5c7770b970c2db94be03
MD5 b23335aeb6a5a32401aaea132e4377f9
SHA1 e41f872f5ac9b67c79dab563f6e28df360e788e0
SHA512 053cc48da70f877823fd57a7956207d70326e59cca01e358bce95139709a62ab37ca845e150f9dc3383b7c69cf354939b5612b4bb771e6ae20efd8d86c248ef9
SSDEEP 6144:P9Pvcp0Xo/pnFLQcoWzPo5eqEuJEO17exGGSLfHTpvkxjvBAUHQy6Sm:P9vcp0Xo/AUzPotEuJEO1aufHTpvsvBI
TLSH
T1E48423F73AEDC6CBE4685BFCC7684115AB90B6DDC04A9987CE10752E6143F9461E432C
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123123

Assets/LargeTile.scale-100.png

SHA256 343a486f9f0c35a2d35428c6a5d82c7d47072dc88195f4ab7d2b28b2641e68d1
MD5 d6220919717925fa6f183fc312766786
SHA1 df9d7e890b8052fce6dcd2990420b7b621d58429
SHA512 b45aa9367c3db33c0d800ecaa8e0eaa5063fbfd3212a4baf868b7a013e9cf4e9e977bfff80e02d5359b7e333c301af499ed388e84faa2ec0ddbcf8312fce17c9
SSDEEP 3072:qOygFRGfz3qsOic1N3yE3FfVJCxEKKCltwqy7Mo6Rzc:qOymcfz3jODdyETAKstwq3nc
TLSH
T1D3E31207EBFE98C88172D6C19A20D7ECF2C68423DF21F1AEA35160DD166D3A54A7235D
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123123

Assets/LargeTile.scale-125.png

SHA256 f42d21d2fd768ae564640bcfef43756d38691bee00069450a82ee605bbc71338
MD5 7a1af2352f856e35c4a2eb8405fd282d
SHA1 8caf82a9e7cc736bf3db1dbbccf2f2f191d4584a
SHA512 9f75653752b14bc9353a147bdd89cfcc9e397dd1054bb66b2bbb6f7c3fe668c2f8fd85e2501293f467866cc7930c45b6471d210643969291c4c8abf2a1bbf9d5
SSDEEP 6144:S2qhZiRH5UNmfQopf6FC/fQ77YGTUfjzdjFE:S4RH5Um3mefpfj1FE
TLSH
T11E3413107F74085232122E30B5FBC2B592A4E767414816F7FE6FE6274F4ABEE24589B4
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123123

Assets/LargeTile.scale-150.png

SHA256 0dd7a4989b2a9144cce75aad6a21f4a10c19ffd5d0ca3433eae4b759a1079bc9
MD5 a5cf3244708a671f067ae5fd0ce65fc6
SHA1 8853785fe58a10bc7366d7833702446e2ad6cb4f
SHA512 ddce0a7f229edb185bc16d5607cbae8ace2a566625ae28062872cf504979b9b0c9e572818f37787b5576765521a0f3615e74c30213a72aa1c3e0a079af63c29c
SSDEEP 6144:RiUpf93mI1Kcb7JZOGvy946fLuAF2RMqJvYcx5IDddYNEKz+:RPf9h1HHJZOGvL6juAF+vycLXNEW+
TLSH
T1A86423DE34C1B4BED48A945C6C19B0EC6E36F08C748BA6172E3527C40698D1EA6B786D
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123123

Assets/LargeTile.scale-200.png

SHA256 bcf109f40599ed5304784510813015de3e37215d115b1b602ae1a28b60e55891
MD5 2a920909d330de601c99d5d5bfd5871f
SHA1 5cd171431b7ff5edffec17001e2653b9a568b5f8
SHA512 c4d669a8342839cb52433fbf8a3f017b2777ad32ec8e413951525d6d4ec2f8b312690eeab3837b5fa3a205b61330a6fb5b1bb73d1991dfbf8ac88b7e5e74fae3
SSDEEP 12288:YNBZTIzNJH5RcjdRkJnB/nkhVcu9/EP0LkowsG9HLv8Zu1Ogk:YNBlIx/SdR0/neq8/EaosGRvT0gk
TLSH
T199C43315E362CB0AB5DBF610FE49F06D07CAC7D86A10CBF5011D9E156627EA7308B9B1
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123123

Assets/LargeTile.scale-400.png

SHA256 b67442b5fced49e2250b214af9e447a24232866f244595ad3ffe1ee5bc8d6009
MD5 0723199668dd39fcefdab295f3111fa7
SHA1 f75f3cfbaf985aa675583e5d13245881181a7115
SHA512 392d28c5da1015129ed24a78e564d3ee36d38eed399d7706e729037fe530fcf034d5b4b0a4b9a5b82ac18c3ecd464afb57571c4994297d49d3ea9155765c4eae
SSDEEP 49152:j69mYByD50xHGd1tJkcXviimkgtljhtKaEwK/:4mVI+acXKWgHjCau
TLSH
T175953312A952C994B9FFCE0DE47EF7095D263B060B85805381EB635393BF89BC86E443
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123123

Assets/SmallTile.png

SHA256 b9077e5b18734ea0ac682411a7bff8bccb9e5d822c6b5c7770b970c2db94be03
MD5 b23335aeb6a5a32401aaea132e4377f9
SHA1 e41f872f5ac9b67c79dab563f6e28df360e788e0
SHA512 053cc48da70f877823fd57a7956207d70326e59cca01e358bce95139709a62ab37ca845e150f9dc3383b7c69cf354939b5612b4bb771e6ae20efd8d86c248ef9
SSDEEP 6144:P9Pvcp0Xo/pnFLQcoWzPo5eqEuJEO17exGGSLfHTpvkxjvBAUHQy6Sm:P9vcp0Xo/AUzPotEuJEO1aufHTpvsvBI
TLSH
T1E48423F73AEDC6CBE4685BFCC7684115AB90B6DDC04A9987CE10752E6143F9461E432C
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123123

Assets/SmallTile.scale-100.png

SHA256 78fe1431c14bdfa9940f9fc316307a98310f00678e19f12a5963cfabd01838e2
MD5 36c4d3a6b23a735c68a813465f748a42
SHA1 8c6c1686f4d51ca38bbcac83dc1b50213808ed05
SHA512 bd7c9f9bb101e4c86d03f662ad223805f5bdcadcde36b3854236fb820ad88735ca5b4efdc70c69633398ff7941e20fe026bb641cbb8eb8daa0b038c6dea6aa75
SSDEEP 192:AtebDp1wjuCJ9uIvBjWkyyIrahFZgpSd0B54x3Cd9kXeRtA6L8sFMLQ3guW9CjUG:/bDp1janp2iGpGejtA6LnMOg+jiUyIR
TLSH
T12732A0F67FD4AD7A230E433435D696CB91703A8B8A2AD095AF50EFDCE905B920F14A11
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123123

Assets/SmallTile.scale-125.png

SHA256 9c646227cd92324378092251f57bcb42aaa632d2ea9c2feb546dbe72173219af
MD5 cd84d7997dc3190521182b09f2e5569a
SHA1 a1671d024003237626e1de9e29276228abee211f
SHA512 e354be1cce1cf3dcc20c915f03e79616bf164a7876b72b11cde5cad09d3577cf8f2bc3750db56d398e3f5532f2407e21d6e2ac03a1120de89e07161de7ee2b1f
SSDEEP 384:nFf22IlGLWYMC4+SCbGeriOWyggWSBri0VH1vkNdcPB7r6/izRtgP:I29WYMuTsCWWriSI+/rRe
TLSH
T1EC72D0A44D1C874E2D1A413B27FAC36ABEC7407AB9911BF079869CF88F31D44609B3D1
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/SmallTile.scale-150.png

SHA256 ded068a4726084054b7514d7dc8850980ee208284a98c0baf8681d7f3981c6b2
MD5 e50bc94f4e670def0408b51a14ad2bf2
SHA1 55e4e89d7b4bd8b38ae232bb8cdc1cb7a8959f8f
SHA512 6ee448113a1e9428c80593bbfe87ce54820881ddbd6239ff3c8e760567cb55f6320208dbb3d3b862cfb8effe31b849364ae0adc0b823fd6e1064b6fca45184f4
SSDEEP 384:H00189SULhomkfWzrBYz5pv9wvG7NR9zq3RfWno6EL7D5mWu6CG7ftUB5de8KcaY:U01gSehPkfWztYwvmL9O38nop7Acbt+Z
TLSH
T1D5A2E0254AB845EC1E76F452C10B4BE0FADDCAFAA1E8D7561D84F327066C801B9ED027
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/SmallTile.scale-200.png

SHA256 4d21d019256b45890ce5ebe89b4ae1a4665ee1965526a463c86f67b8b9be2f01
MD5 b7f9c7d60ea80487a76bbf9bcbc06dc9
SHA1 0bfd3825c34376c6e19533160b407f1666302264
SHA512 77ca0afa12d8b3553476177068ca917a83eace8e2e726bc6a2908410c3207d51fdd4a2f20c36cc91123089bec1c52d1ba46a04b59de6e8e619c577c3d617293c
SSDEEP 768:d49s03LgrxRIN8GCq/ioGx9z+nlRUqaSEfc+G8w7ZTngGRpgUum7:O9sW8V9jq/1JlRHRETW7Zr7pgza
TLSH
T17C03F1F99EA379582E7A0051251B35095B5A6D0C31AC2BB81D72E50D28F9E831ECBF4F
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/SmallTile.scale-400.png

SHA256 ab9758928bbae6772345836db76339ed6d81a7fecc9ed4ea711811c4a1031661
MD5 f5ad45c003828ab2c410ffa2024112e0
SHA1 6177336f2f8386aa368d3ac76c9e53b77037ad5d
SHA512 1698c862511f353e1f18b50f98a4fd316406f900bf89d43eb55e1c7bda354eceea41bfc54b455828fa6a9711bdb4269dc7479afa749c0852d3c125fbba4301ae
SSDEEP 3072:Z08VeCJ92Ph0V8eE/jWG781qxGhbR3G2vELFht:3VeQ+0ZqxObR3tvE5b
TLSH
T1BFD3121012E2A334869746C412C6DFE197B25E1EDD262422B776B383EECD4BB717E0C2
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/SplashScreen.png

SHA256 b9077e5b18734ea0ac682411a7bff8bccb9e5d822c6b5c7770b970c2db94be03
MD5 b23335aeb6a5a32401aaea132e4377f9
SHA1 e41f872f5ac9b67c79dab563f6e28df360e788e0
SHA512 053cc48da70f877823fd57a7956207d70326e59cca01e358bce95139709a62ab37ca845e150f9dc3383b7c69cf354939b5612b4bb771e6ae20efd8d86c248ef9
SSDEEP 6144:P9Pvcp0Xo/pnFLQcoWzPo5eqEuJEO17exGGSLfHTpvkxjvBAUHQy6Sm:P9vcp0Xo/AUzPotEuJEO1aufHTpvsvBI
TLSH
T1E48423F73AEDC6CBE4685BFCC7684115AB90B6DDC04A9987CE10752E6143F9461E432C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.png

SHA256 b9077e5b18734ea0ac682411a7bff8bccb9e5d822c6b5c7770b970c2db94be03
MD5 b23335aeb6a5a32401aaea132e4377f9
SHA1 e41f872f5ac9b67c79dab563f6e28df360e788e0
SHA512 053cc48da70f877823fd57a7956207d70326e59cca01e358bce95139709a62ab37ca845e150f9dc3383b7c69cf354939b5612b4bb771e6ae20efd8d86c248ef9
SSDEEP 6144:P9Pvcp0Xo/pnFLQcoWzPo5eqEuJEO17exGGSLfHTpvkxjvBAUHQy6Sm:P9vcp0Xo/AUzPotEuJEO1aufHTpvsvBI
TLSH
T1E48423F73AEDC6CBE4685BFCC7684115AB90B6DDC04A9987CE10752E6143F9461E432C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-100.png

SHA256 642ad8f677b96a458b222d8fd50452e0f325e9357b201f55a15e8f62bf1c0f52
MD5 83b3b2b6dc3e3cc1b18a48eefac89a0e
SHA1 c2611957c6739e2bcca6ca838658a04a196803a7
SHA512 61b7b437da0f47912fc9599f33323a40189c74e6349d23c3675a8c3852fbbeb9e2cb29479a1f3413b9b6d68929c22bcd5feec5dd7d58ed865b52daa9b3df2fe4
SSDEEP 768:h1HgPa085Z3c/05IbzIDwFI2rRzUBdaRJAxcbhZZAbuazgLzFmFIJhEyC3G:7HUaFZnq5xVwyJX1fAghKD2
TLSH
T1B7130136073D740D6DA83BC9777FAED14A0A62571692E8EC0F85211D3C8DAB1E36427B
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-125.png

SHA256 bd18e69f098fa7f59c4c454a0e6c9407f1f130bd0fc2d7cfc883bea7e4883eb2
MD5 629bdeb18491d32dd4c3d1905f794dd6
SHA1 f521ce3af3e79d897def10627f41dca8520a10f4
SHA512 2ba5126fa0599f464a2326b41b4d4124b658eeef4bc05c4aea1fa11bdb9192329e306efcc4c029b4ef8f1767552c56dd44462e560df692bf9e430d8b7a5d438c
SSDEEP 1536:VjMGAo0CFRD9PJa34a0A0GC4MtbtH/11TG:hHATCFf03zp0GCRv91TG
TLSH
T1AD530279BBE54D397A37B76C434D1B04F2B043A8B037890A446245CBB4B61BE5D9938F
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-150.png

SHA256 eb72665a711cbc883eeb567923f98e3dc31f32e82ec30d007d555abe2ad5881d
MD5 0a44c29ca320affcfd4c78094a122ea0
SHA1 83ad08a5a8b7be33062779492cc8d730c6044a5f
SHA512 dee4d19a28f0b5921f3eb44b57575b8ed6493b6bf6c9b5db811b2d5e0bcbc61c800b2d1abeb384e3b2f881a1b23478f3ba30ba1f2d71c5d3b8bece1bff3e3f33
SSDEEP 1536:pOUfMfD8cIy3CEq0ZlnDLuUHeMLke1eVwyz8utGxplRg1lv0sM:pO3fD8hutZ1DLgMtiwywutmwlvxM
TLSH
T178830243B7A2918431C67E96427C208E17DA7E1D1428A5BE54C49FF363536A3BBB463C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-200.png

SHA256 6421c3698c731b7a840baffe6fc1f1669595d654d9916b5e12ba12c0d4244d7d
MD5 d4f5dcc994febe336dbde2e70dbf9fce
SHA1 d2880ecc7e42ec9667ca060f7f42ab0b962c972f
SHA512 d1ae54ccc4eecb5e45e44f95befffd4ed9201d1fcf8d4d6fb272c6c2d581137487f82d1f2bc37c44b5d8fb0c152f9b3b2b66691ade69be8cb7cb079bebd430b9
SSDEEP 3072:yCs4eFThCF9MY4t5x1Xq0PMh6SEvIoNRkKCbNy71vPEl1cX5P9YAtZrr9n1T:yCs/lC/MLt5XqUMh6zvIWRviy41cp99D
TLSH
T1D1E312DA3B3222E4259317A03CFE94F2CD673ED27360453CDB6DD396A42625295913A1
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-400.png

SHA256 b5fe77c97a7f0d17af6fa34b90d2cf0554ab330338fd1220b5651a3bb3b6c442
MD5 8e68464394de461f9cf3bd0be4a7175f
SHA1 62c56d81f896164a03577320d090a43800415c5d
SHA512 f99d109e0edc2ae560df64bd74555fd7f33917772c60ecfd365626f468938a448345bb978985c502bd30bc0b400c8b60a3265f94120aaa42b0a25da399b789b4
SSDEEP 12288:O1+4KOdjdsXyPNA40dwE9ZQ+HlA/rxMz9PIhXHH8cpK6n:u+4K0tPNADdwKg/VaIhd
TLSH
T18EB42333118E7EF16353C248C2DD7677EAA236B195E2FA884FE077C1C10949799AEC19
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square44x44Logo.png

SHA256 b9077e5b18734ea0ac682411a7bff8bccb9e5d822c6b5c7770b970c2db94be03
MD5 b23335aeb6a5a32401aaea132e4377f9
SHA1 e41f872f5ac9b67c79dab563f6e28df360e788e0
SHA512 053cc48da70f877823fd57a7956207d70326e59cca01e358bce95139709a62ab37ca845e150f9dc3383b7c69cf354939b5612b4bb771e6ae20efd8d86c248ef9
SSDEEP 6144:P9Pvcp0Xo/pnFLQcoWzPo5eqEuJEO17exGGSLfHTpvkxjvBAUHQy6Sm:P9vcp0Xo/AUzPotEuJEO1aufHTpvsvBI
TLSH
T1E48423F73AEDC6CBE4685BFCC7684115AB90B6DDC04A9987CE10752E6143F9461E432C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square44x44Logo.scale-100.png

SHA256 06c7e0133b7f3c525bac956eb59601494140811b6275a42499a82b71b7df9350
MD5 4c453112e6c94ad56f94cfff3cca2cdb
SHA1 01cfcb6efa4614a1e5a31e5e09180a4e2c718a87
SHA512 a527d9f6222303c8a9667f70d424ad70a0768f674f0366f0c4ded57652c0b95d7f5730da14cf3d0e928b2271f8429554c5ce077884603cd7244353ce1f686637
SSDEEP 96:g13WrnKXhkOSwzZhn/gYH9lcKxhl7/JCY9945vYwv+MzbgsscQGevWPkD:g6KXhklwzZhn/gYHXrTl7/JX4xYw3I6I
TLSH
T1C9A18EBFE2962734A1F4B7971A3C360EEE7858E3285630D0F52E12C410AEABF0825115
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square44x44Logo.scale-125.png

SHA256 842c1f59cabee17566be9b05a890e8fcabe4e60ed14f2ddff27a6ad0b184c342
MD5 264b96c6940fbf78750d33edf17eafd7
SHA1 0b27994afa6f47c9e55b2a7763bd1b6e14b22620
SHA512 f678a38e6dfb0e0d8b0461d034441acf3e99054e1c6fc94cf4257f0af1e9b8df96f981451069c29b312f92fcfa0733c8cc7c246fd4180ea4cbdbeab846e6ab8e
SSDEEP 96:druUINRwi6Wees6gDSLoiuSlk+vL5dpaerhAWWjxidaDsmO7zFqKnMwYdy3nJu0Y:BuTNITaTu0kG5Tamjz7zoKnYaA0Y
TLSH
T116E1AF035C660E828AD2A0DB8E5CCCC0C35637B98557084C367DB9ED0D28EAC3B8B6DC
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square44x44Logo.scale-150.png

SHA256 447116d5811d9d72ef74b0a6431790366c4c6dd9d4936385dabf95a70c9eca3c
MD5 7d03d1e59450654e70a07933a6c9a1ed
SHA1 c00d9668d6f9f5bd5e8aef06e6677af878d36ccb
SHA512 9841e7a27175869a5b77c6447cfa437193d94fb26e9f021e5aadbe3117dcfb8215e18762e78ac9a1167f27f2c31d2b542a839b620971708f6362aa1da767c114
SSDEEP 192:JNuSs+d4SFnFWUkXbivqY6Bxj1GAazRBe9SQZurOe1qO0nUe1MPDoISeetVAxiXb:J4xKFWUkXbivt631G9fe9+rOeP/BDoIU
TLSH
T17D22BFEE7BC8D9F6879D7C1AFC5096788D2269FF44D380363A9A517A136438AC689100
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square44x44Logo.scale-200.png

SHA256 b851eee132b0553cf78ffea7041b56746108a76d0edab1772df30650277a0d19
MD5 7a1d7dc59be3796eb14a238e5bef825e
SHA1 3c28d6be94900f766ad7a815ff2c7fa93e5d2c39
SHA512 b89ed6d3feb709743d4004427bcd66d16e860c365cda5baa1cd89f8889406dfb4acc36476ca96d240cc4070f8ff529722713d32ff90d39dc4faddaf7bf67ead0
SSDEEP 384:hgmBb9nWHR9KbvH/HPCfsbd65SxPqn1G+Bwu0+X8MHf:hgRx9KbHoQghBwxMHf
TLSH
T1FD72D01415AF76B81FC5DE3C8B2078D7DA5D3A45A1A8507FCEC2F2E6B91E2E80114A0F
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square44x44Logo.scale-400.png

SHA256 9b43f4fab79a99568b1db761953645aa41742917a8e1a86a7ff5e88caa34e161
MD5 9b4033abf7be2a1b170d72eae7e0d853
SHA1 a448f7a6f9a0bcbbe9ba8fbfa5ad48c9d89269a3
SHA512 99dd85ff8481f6bf7a3c848cc9bf0138d738afe0126ed56b586cf16435af4f1b4434ab11a4136ccf238d9907228c80973fbf1a64b43d917fb9b406bee150a854
SSDEEP 768:EK5PuSLUmQtQbwdWcE++Os6/N8ovjc9vQjbs+VcPyjHfjkSd6Vv5X1m8ViLImaw+:l5FLWamWcB/2ovjuHic1g8Xo8Kr4yW9
TLSH
T14333F248C84A826425DC986CC1C0D1666639A216EE9DF4C7CF7B079E6CE6384CEF584E
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/StoreLogo.png

SHA256 b9077e5b18734ea0ac682411a7bff8bccb9e5d822c6b5c7770b970c2db94be03
MD5 b23335aeb6a5a32401aaea132e4377f9
SHA1 e41f872f5ac9b67c79dab563f6e28df360e788e0
SHA512 053cc48da70f877823fd57a7956207d70326e59cca01e358bce95139709a62ab37ca845e150f9dc3383b7c69cf354939b5612b4bb771e6ae20efd8d86c248ef9
SSDEEP 6144:P9Pvcp0Xo/pnFLQcoWzPo5eqEuJEO17exGGSLfHTpvkxjvBAUHQy6Sm:P9vcp0Xo/AUzPotEuJEO1aufHTpvsvBI
TLSH
T1E48423F73AEDC6CBE4685BFCC7684115AB90B6DDC04A9987CE10752E6143F9461E432C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/StoreLogo.scale-100.png

SHA256 9df825c08ca8e331123b775b40058a25b490987224f3bd625676c56e022cb2bb
MD5 b58b20e6bc0f94fd4b821e027d321e93
SHA1 c7923088bb14c3a4891de5c44601bafd28e77ec5
SHA512 2c1b5481116960ef65871954fb58d642f845fd1b1d2d3016872236c96a2900edea59b82a62adf2c3dd3bce13b12318c79f8337769b2ffb9f28067eb13d909d36
SSDEEP 96:/bknZoOHFSRcT0PjWDpRCNoipJnUD6pAeZlmKg0UlJ1feur70VMRdjwsTY7tLC1:aFpRwJUP+7QlJ1m7SRDTUBC
TLSH
T188D19ED6728A41FD791118E8E84A7765CDCD028C193CE9B83B349AA4CC7D17883BB11D
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/StoreLogo.scale-125.png

SHA256 a1b8897829d7e3b1f82ac92de058e503690c9bc4c24e619efc4280eb4d3c1f6e
MD5 23f1eb3ad5d8127969adb37800310aa6
SHA1 b35096da3c35ad09f7bb7cfa285eab2152a4aab9
SHA512 32ccaeaf9b47f3d4813e0d9005c8f1409ed4f87216ea6b07a5a057964633cbfc09520014b18e3a340a95b1a79edb9996bb9490f19d467c5f8933d6566f3e4de9
SSDEEP 192:6ltrkP9+xVXpaKvhbYiY9PcoKQY6Ap6dT2SdDVTy8UmnHkmcs6ga:KtoPgxVcet69Pxi6Akpy8UmEmi
TLSH
T1E912A0E0070A25FB72D7918641DB7A3EEAA8AFECBB719545003C8417B9CE1C23585DE5
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/StoreLogo.scale-150.png

SHA256 4b088d0e02cfd8423f1d1eb8018079be29073b29e61b9ecbc33fa182cd0b18ac
MD5 d3a2d51619552bfb7a6fed027496c5ce
SHA1 c53bc805ac4316bebfe005718ba596ef5ff6578e
SHA512 9144abddc8802d8553b708cbc4643d08272023e0f2c6680abe7bbe9e0a524b790b0972f20da9769a8e5db44250c53c36a90b7113ca7967898f873edaa9821161
SSDEEP 192:ToT6QDYlrk/Omre7pUXD4qSxdPYflUHNIF5X+OvzXoMvI3o0l4VrK12dx2Mr2Mo3:+6WOUKxd+lUtIF9Xv9lcYDdxOMhMMi
TLSH
T1BB42D1DE9CA10A6F84A183F720A9DD104839FB1781E63802749C7F718B92B497C75187
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/StoreLogo.scale-200.png

SHA256 1c528690832b044ae893a3d48f35427b003368f4cbe7085b8bd0b114830fc1e0
MD5 f1779c83c2876a93b1e115e5dfc58f55
SHA1 f1bd1f49337ed23087c1fc054c9298f6593215da
SHA512 3240690d0519b1c2867b4504330e3a04faff20befc8ef491bcc42824a86a8c15caa4eac332a318b079be1044ee9420e1edeac868bdb4170fc984f1116c062d47
SSDEEP 384:z8ZzWWfR4+mQDWCNS7TeHopeQ+ayoeU2YCzmAVKHfgLPaSdVZRDRc:z8NT54+mRoh+0M2YC/KHYzaCVvRc
TLSH
T1BA92DF49EB7D39F7E563B9335B30EC2DF83C02EB6A4AA9DCD0505881781CA240B5943A
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/StoreLogo.scale-400.png

SHA256 91a81f7b8b9123dd8382bed744b24bf4cf80662cb18fc0cb3384e687133814d6
MD5 c6b22c970a2413d362fcb255a9630ecb
SHA1 271210d7b49419a2256815f62912e855a9ffa7df
SHA512 dfa2c3c149e86329d6229c4ed905e1a0dac9a454213b6c7c53ddb17ba65870f7e6b2e3f57fff56ac17a0578569bf203a96960bbd1c0f49a4dc70b12a07e0646e
SSDEEP 1536:kceqSl2zf34E/2Hel8iETlrs31qSd5MbkJ1ULqX:TxlI2qelJEprs8SkbkJJX
TLSH
T1CE63029B6E667DDA0336EB76EE80E77006B21BC2C2D57C0CA5F69B4C03462D1365B178
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.png

SHA256 b9077e5b18734ea0ac682411a7bff8bccb9e5d822c6b5c7770b970c2db94be03
MD5 b23335aeb6a5a32401aaea132e4377f9
SHA1 e41f872f5ac9b67c79dab563f6e28df360e788e0
SHA512 053cc48da70f877823fd57a7956207d70326e59cca01e358bce95139709a62ab37ca845e150f9dc3383b7c69cf354939b5612b4bb771e6ae20efd8d86c248ef9
SSDEEP 6144:P9Pvcp0Xo/pnFLQcoWzPo5eqEuJEO17exGGSLfHTpvkxjvBAUHQy6Sm:P9vcp0Xo/AUzPotEuJEO1aufHTpvsvBI
TLSH
T1E48423F73AEDC6CBE4685BFCC7684115AB90B6DDC04A9987CE10752E6143F9461E432C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-100.png

SHA256 4dda8fc78ca49b290a174184eff87dcc08865c5b0d85f47f19024f8c25eb9ade
MD5 68d9343f76e5d0a2e84397d1f1cdd768
SHA1 d0ce55857f814dde95e349b5cdfc389062eb4e74
SHA512 d611a29fe984cad13e560eb0fad6ebca0b1aaceca6da32f3ae15ba5a2018fe32feec41c9e4cb3fb4bb00fd32f90545232cc969092bd7dd75fa152a1cab75e6ee
SSDEEP 768:DL7wwSi59fF0DzQpltTw560LejZnePs92t5+UNY3gxLWQClEcsY9jwJ3uQH:/mixEzQZTfe09y1kgR02J3N
TLSH
T14003F2C2487BCA8B0A1F421E74C59A0637B90FD98F9EDA97139446179768F066FC38B4
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-125.png

SHA256 b7562f510ecbcd81d9956959bb0c9765a0af77af4792d85b811b0eb5d752f176
MD5 e2cec72399d411af5815c1cf86c993c9
SHA1 ac4da1470ad7d9a8aeef9b9bd41c2d3365b22564
SHA512 9e5be374d77d28c08a0347344dedc98c180d8fc49f62d824574898014b551003a8355910e50259fbae840cd0d9b9b30e25fe88c72c3d598d9bff85b71496db59
SSDEEP 768:infJYrzTG+dBlZzt0mAqau1aL3xspi6fgb3jZQWpvFgKJ5Cl64unD8Wp5jO4nANT:inKT/BGblYa76YzqWp9PHNDTp5jO4+nV
TLSH
T1A04302A248CA3C97386B10AEA3CF78116CE913952343CE772F6E8471BD613BC51A1EC5
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-150.png

SHA256 adfd64a8be5f5308d316539729b84619d6a5bf7f6be7ef7813563739570ffe59
MD5 c30ce29df2eddd0da7f135c5749b0e1d
SHA1 3164864364d38957c4b32ca4a4d725918c1657c2
SHA512 86272461e1dfe2cb225b0f7fa06cba5792eacd018f4e09a0a4afef3625ed73d9f0828d5b21ffb7fe4d6f5db6087115cfc4e38266f53b0576122eb7765b7fcaee
SSDEEP 1536:TTt3vcMr1jwiloWuBT2zBQlz+lQWHwt7kX8lnlJpEAKB2xLS:FUMr1wgoWoT2zBQlaBwt7kslnlJpI2xO
TLSH
T1A38302DA8B4C2C89549FCC63882A9A59B2A7E070F3461A0CE5A4FDF745F6F44EFD4046
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-200.png

SHA256 cf9c91aae455f9e7c396a4d8ff376f2204369fabb4c1ddcf47a5980b8f0d953f
MD5 408747ff7e6b83a3d18d5c32c3c1f722
SHA1 ac4b322290eb826e6175209fee7a263810a935b2
SHA512 a2b965603a64dafe4232ac770cec9517b47a3d6ea95ae6da02adfa718e44961c7413b7feb7a033ebeb2a258c7b7faa6ecb8021ec01ab6da2290ca414129e9501
SSDEEP 3072:leSj9CaIsiwrluyLD0Gi59I9ko+3UchHIG/846XJnPwLGIY+TiK7KCkZ5r10Qa:leSBCaLiwrluykGG9I+0c044PhVx5r1Q
TLSH
T154E31300A2DF594C8A276CA7081AB47B6F8D2D27DAE6B41293C8BB0D1D74FE67445D50
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-400.png

SHA256 3238baa0c1ce268b1670a5fa7dfc5a78c4f09b405f084a029df9ec541d9d395b
MD5 759c7764dd119d888a1fa1f88c396182
SHA1 5583f049f8bb2084ac4256e86d4a22b8cfa7c159
SHA512 eb8511482d6e2cc1ff208d1c26d6472d9af614276db6296314fed010878d2952183af375499e2f9c83ac752028328fee10ccf2bc518c37f0c02b9cbce7f5edfa
SSDEEP 12288:wxV55iLXI0aal+M9X3yQWroy4kCZ2UxFCSEhd8m:wN6I0awDyQ9y4kCZxwSEom
TLSH
T1B6C423A4540C71A86A53CDC1D47D4E84F0AB42D6CEAF3D7BD6B072E5FB0A2BAD654302
MD5 SHA1 SHA512 SSDEEP TLSH

MyFlixlyNetGuard.exe

IMPHASH 3c2ec5449d7662069d66758e590be1d2
SHA256 b64bb8349df04aefaab0f200cbcf3100f69e866535af4e9c23dcff0df20e6086
MD5 5ca474bfde0aa5b2819c531c2d982e21
SHA1 14bc80490a8767c13fa13e53202ec6d239d3c655
SHA512 21808fb3131699b9a84438231acad0e70881a2753f87b400fd09900dfc658b04db9ac21747cab71ce510d1630a610288ae30a4009620f9012aee1d5bdc3c9be5
SSDEEP 98304:B3oIRl00Z4Bk41wecXFgPXP0tCaGPRIgJL29gSiY5Pj+Y5qh:RB80N45d0QHIgtUrLq
TLSH
T119966D03F6A181ECC06EC1B4875AA333FA32B88D093476AB5BD49B212F65F506F5D758
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

webview2loader

CreateCoreWebView2EnvironmentWithOptions GetAvailableCoreWebView2BrowserVersionString

kernel32

CloseHandle CreateFileMappingA CreateToolhelp32Snapshot GetCurrentProcess GetCurrentProcessId GetCurrentThread GetProcAddress LoadLibraryA MapViewOfFile Module32FirstW Module32NextW ReleaseMutex RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnmapViewOfFile lstrlenW GetTimeZoneInformationForYear SystemTimeToFileTime GetComputerNameExW GetLastError GetModuleHandleA Sleep AreFileApisANSI CompareStringOrdinal CopyFileExW DeleteFileA DeleteFileW DeleteProcThreadAttributeList DuplicateHandle ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsSetValue FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeLibrary GetCurrentThreadId GetDiskFreeSpaceA GetDiskFreeSpaceW GetExitCodeProcess GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFinalPathNameByHandleW GetFullPathNameA GetFullPathNameW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetProcessHeap GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathA GetTempPathW GetTickCount GetUserDefaultUILanguage GetUserPreferredUILanguages GetWindowsDirectoryW HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitOnceBeginInitialize InitOnceComplete InitializeProcThreadAttributeList IsThreadAFiber LCIDToLocaleName LoadLibraryExA LoadLibraryW LocalFree LockFile MoveFileExW MultiByteToWideChar OutputDebugStringA OutputDebugStringW SetEndOfFile SetFileCompletionNotificationModes SetFileInformationByHandle SetFilePointer SetFileTime SetHandleInformation SetLastError SetThreadStackGuarantee SetWaitableTimer SleepEx SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnlockFile UpdateProcThreadAttribute WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte CreateEventW CancelIo CancelIoEx CreateDirectoryW CreateFileA CreateFileW CreateIoCompletionPort CreateMutexW CreateProcessW CreateThread CreateWaitableTimerExW DeviceIoControl GetConsoleMode GetConsoleOutputCP GetOverlappedResult GetQueuedCompletionStatusEx GetStdHandle LockFileEx PostQueuedCompletionStatus ReadFile ReadFileEx SetNamedPipeHandleState UnlockFileEx WriteConsoleW WriteFile WriteFileEx RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler AddVectoredExceptionHandler CreateFileMappingW DeleteCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetCommandLineW GetCurrentDirectoryW GetCurrentPackageFullName GetEnvironmentStringsW GetEnvironmentVariableW InitializeCriticalSection LeaveCriticalSection Process32First Process32FirstW Process32Next Process32NextW QueryPerformanceCounter QueryPerformanceFrequency SetEnvironmentVariableW SetUnhandledExceptionFilter TryEnterCriticalSection

bcryptprimitives

ProcessPrng

advapi32

RegCloseKey RegDeleteValueW RegGetValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW RegCreateKeyExW SystemFunction036

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

comctl32

DefSubclassProc RemoveWindowSubclass SetWindowSubclass TaskDialogIndirect

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

gdi32

BitBlt CombineRgn CreateCompatibleDC CreateDIBSection CreateRectRgn CreateSolidBrush DeleteDC DeleteObject GetDeviceCaps SelectObject SetBkMode SetTextColor

ntdll

RtlNtStatusToDosError NtCancelIoFileEx NtCreateFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlGetVersion NtCreateNamedPipeFile

ole32

CoCreateFreeThreadedMarshaler CoCreateInstance CoIncrementMTAUsage CoInitialize CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize OleInitialize RegisterDragDrop RevokeDragDrop

oleaut32

GetErrorInfo SetErrorInfo SysAllocStringLen SysFreeString SysStringLen

shell32

DragFinish DragQueryFileW ILCreateFromPathW ILFree SHAppBarMessage SHGetKnownFolderPath SHOpenFolderAndSelectItems ShellExecuteExW ShellExecuteW Shell_NotifyIconGetRect Shell_NotifyIconW

shlwapi

SHCreateMemStream

user32

AdjustWindowRect AdjustWindowRectEx AppendMenuW AttachThreadInput CallNextHookEx ChangeDisplaySettingsExW ChangeWindowMessageFilterEx CheckMenuItem ClientToScreen ClipCursor CloseTouchInputHandle CreateAcceleratorTableW CreateIcon CreateMenu CreatePopupMenu CreateWindowExW DefWindowProcW DestroyAcceleratorTable DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawIconEx DrawMenuBar DrawTextW EnableMenuItem EnableWindow EnumChildWindows EnumDisplayMonitors EnumWindows FillRect FindWindowExW FindWindowW FlashWindowEx GetActiveWindow GetAsyncKeyState GetClassNameW GetClientRect GetClipCursor GetCursorPos GetDC GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetLastInputInfo GetMenu GetMenuBarInfo GetMenuItemInfoW GetMessageA GetMessageW GetMonitorInfoW GetParent GetRawInputData GetSystemMenu GetSystemMetrics GetTouchInputInfo GetUpdateRect GetWindow GetWindowDC GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuW InvalidateRect InvalidateRgn IsIconic IsProcessDPIAware IsWindow IsWindowEnabled IsWindowVisible KillTimer LoadCursorW MapVirtualKeyExW MapVirtualKeyW MapWindowPoints MonitorFromPoint MonitorFromRect MonitorFromWindow MoveWindow MsgWaitForMultipleObjectsEx OffsetRect PeekMessageW PostMessageW PostQuitMessage PostThreadMessageW RedrawWindow RegisterClassExW RegisterClassW RegisterRawInputDevices RegisterTouchWindow RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu ScreenToClient SendInput SendMessageW SetCapture SetCursor SetCursorPos SetFocus SetForegroundWindow SetMenu SetMenuItemInfoW SetParent SetPropW SetTimer SetWinEventHook SetWindowDisplayAffinity SetWindowLongPtrW SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowCursor ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicodeEx TrackMouseEvent TrackPopupMenu TranslateAcceleratorW TranslateMessage UnhookWinEvent UnhookWindowsHookEx UpdateWindow ValidateRect VkKeyScanW

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSASend WSASocketW WSAStartup bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket recv send setsockopt shutdown

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _beginthreadex _cexit _commode _endthreadex _errno _fmode _fpreset _initterm _localtime64 _onexit abort calloc ceil exit floor fmod fprintf free fwrite log malloc memchr memcmp memcpy memmove memset pow qsort realloc signal strchr strcmp strcspn strlen strncmp strrchr strspn vfprintf wcslen

bcrypt

BCryptGenRandom

Name

.text

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

145KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

187KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

90KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WebView2Loader.dll

IMPHASH 90db803f7a0acc2517ef287c1dc1bb76
SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
MD5 b7f10b8066ee96c628e09c439b8d0b9b
SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
TLSH
T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

20:0a:0b:1d:57:67:2c:96:ed:25:eb:8b:ac:94:71:7c:b9:ef:20:b6:a5:c9:21:f6:fb:30:b0:72:47:ef:a7:71

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Dec 1, 2025

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

18608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WebView2Loader.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter RaiseException ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

86KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

[Content_Types].xml

SHA256 57af2151d8d493f98ed285267cf67621b959d076ec12ac18b08f233f66849a4e
MD5 efdaae18184c6eaf3409956e8c9ac8d6
SHA1 7777bb3d2b0772cf43bfb64994f46fc3d4fd7a44
SHA512 b1d0229aaf80a116ece419f93e82b27ec66387a5a6155ec67808d1fc366101713a6d6f900cf407ac0777e5da6bad61bdcfd35aed7a37201eb2682117277babb9
TLSH
T144019ED2707A9CB003A28DBFCD27A8541233007D54E93B4DBFA95A4EA0E075B01B13C9
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

kmsdmtn.msix

AppxBlockMap.xml

AppxManifest.xml

AppxMetadata/CodeIntegrity.cat

AppxSignature.p7x

Assets/LargeTile.png

Assets/LargeTile.scale-100.png

Assets/LargeTile.scale-125.png

Assets/LargeTile.scale-150.png

Assets/LargeTile.scale-200.png

Assets/LargeTile.scale-400.png

Assets/SmallTile.png

Assets/SmallTile.scale-100.png

Assets/SmallTile.scale-125.png

Assets/SmallTile.scale-150.png

Assets/SmallTile.scale-200.png

Assets/SmallTile.scale-400.png

Assets/SplashScreen.png

Assets/Square150x150Logo.png

Assets/Square150x150Logo.scale-100.png

Assets/Square150x150Logo.scale-125.png

Assets/Square150x150Logo.scale-150.png

Assets/Square150x150Logo.scale-200.png

Assets/Square150x150Logo.scale-400.png

Assets/Square44x44Logo.png

Assets/Square44x44Logo.scale-100.png

Assets/Square44x44Logo.scale-125.png

Assets/Square44x44Logo.scale-150.png

Assets/Square44x44Logo.scale-200.png

Assets/Square44x44Logo.scale-400.png

Assets/StoreLogo.png

Assets/StoreLogo.scale-100.png

Assets/StoreLogo.scale-125.png

Assets/StoreLogo.scale-150.png

Assets/StoreLogo.scale-200.png

Assets/StoreLogo.scale-400.png

Assets/Wide310x150Logo.png

Assets/Wide310x150Logo.scale-100.png

Assets/Wide310x150Logo.scale-125.png

Assets/Wide310x150Logo.scale-150.png

Assets/Wide310x150Logo.scale-200.png

Assets/Wide310x150Logo.scale-400.png

MyFlixlyNetGuard.exe

webview2loader

kernel32

bcryptprimitives

advapi32

api-ms-win-core-synch-l1-2-0

api-ms-win-core-winrt-l1-1-0

comctl32

dwmapi

gdi32

ntdll

ole32

oleaut32

shell32

shlwapi

user32

ws2_32

msvcrt

bcrypt

generic

WebView2Loader.dll

kernel32

generic

[Content_Types].xml