Overview
overview
7Static
static
3netfly_windows.exe
windows10-2004-x64
7netfly_windows.exe
windows11-ltsc_2024-x64
7app.new/Sy...nt.dll
windows10-2004-x64
1app.new/Sy...nt.dll
windows11-ltsc_2024-x64
1app.new/Sy...le.dll
windows10-2004-x64
1app.new/Sy...le.dll
windows11-ltsc_2024-x64
1app.new/Sy...ic.dll
windows10-2004-x64
1app.new/Sy...ic.dll
windows11-ltsc_2024-x64
1app.new/Sy...ed.dll
windows10-2004-x64
1app.new/Sy...ed.dll
windows11-ltsc_2024-x64
1app.new/Sy...ns.dll
windows10-2004-x64
1app.new/Sy...ns.dll
windows11-ltsc_2024-x64
1app.new/Sy...ns.dll
windows10-2004-x64
1app.new/Sy...ns.dll
windows11-ltsc_2024-x64
1app.new/Sy...ns.dll
windows10-2004-x64
1app.new/Sy...ns.dll
windows11-ltsc_2024-x64
1app.new/Sy...nc.dll
windows10-2004-x64
1app.new/Sy...nc.dll
windows11-ltsc_2024-x64
1app.new/Sy...es.dll
windows10-2004-x64
1app.new/Sy...es.dll
windows11-ltsc_2024-x64
1app.new/Sy...er.dll
windows10-2004-x64
1app.new/Sy...er.dll
windows11-ltsc_2024-x64
1app.new/Sy...el.dll
windows10-2004-x64
1app.new/Sy...el.dll
windows11-ltsc_2024-x64
1app.new/Sy...on.dll
windows10-2004-x64
1app.new/Sy...on.dll
windows11-ltsc_2024-x64
1app.new/Sy...le.dll
windows10-2004-x64
1app.new/Sy...le.dll
windows11-ltsc_2024-x64
1app.new/Sy...re.dll
windows10-2004-x64
1app.new/Sy...re.dll
windows11-ltsc_2024-x64
1app.new/Sy...on.dll
windows10-2004-x64
1app.new/Sy...on.dll
windows11-ltsc_2024-x64
1Analysis
- user interaction
yes - max time kernel
90s - max time network
97s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 10:21
Behavioral task
behavioral1
Sample
netfly_windows.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
netfly_windows.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.new/System.Collections.Concurrent.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
app.new/System.Collections.Concurrent.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
app.new/System.Collections.Immutable.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
app.new/System.Collections.Immutable.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
app.new/System.Collections.NonGeneric.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
app.new/System.Collections.NonGeneric.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
app.new/System.Collections.Specialized.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
app.new/System.Collections.Specialized.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
app.new/System.Collections.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
app.new/System.Collections.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
app.new/System.ComponentModel.Annotations.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
app.new/System.ComponentModel.Annotations.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
app.new/System.ComponentModel.DataAnnotations.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
app.new/System.ComponentModel.DataAnnotations.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
app.new/System.ComponentModel.EventBasedAsync.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
app.new/System.ComponentModel.EventBasedAsync.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
app.new/System.ComponentModel.Primitives.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
app.new/System.ComponentModel.Primitives.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
app.new/System.ComponentModel.TypeConverter.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
app.new/System.ComponentModel.TypeConverter.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
app.new/System.ComponentModel.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
app.new/System.ComponentModel.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
app.new/System.Configuration.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
app.new/System.Configuration.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
app.new/System.Console.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
app.new/System.Console.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
app.new/System.Core.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
app.new/System.Core.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
app.new/System.Data.Common.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
app.new/System.Data.Common.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target netfly_windows.exe
- Size 101.8MB
- Sample261102-md33zsswcs
- SHA256 4d2b6bc68df942ac6c1a6cdac71c4046ffe0a451206475c0f74ae85fdfd53619
- MD5 690c7184cee3d4fb38308229a349fded
- SHA1 aa04b4de11b2abb0d573021cf41bcc6225ac70b9
- SHA512 5455871ff8cd6313630a251ed98906ce3f18d0fe70e43c85cbe4c73ed52dfce14c1a6b22163b420459dec1488a9da86e1e606d92943389f32f5e47cfceee33f1
- SSDEEP 1572864:wTQ8Xi/8dwIyiNqXD0FarEiL4hzCDoMLhQMcNJgmsMuvtE+Is28rK+xeIZhia:wTQiMqc2eD4arH2m0UhQ7Jd86T82+I9a
- TLSH T12E3833AA1D48F46AF389C6F0345FAD65813E3D6C30BC1593666047E50C7B985CBACE2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\Control Panel\International\Geo\Nation Netfly.exe - Executes dropped EXE 2 IoCs
pid Process 2776 Netfly.exe 4800 Netfly.exe - Loads dropped DLL 59 IoCs
pid Process 880 netfly_windows.exe 880 netfly_windows.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 2776 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe 4800 Netfly.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname Netfly.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain Netfly.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language netfly_windows.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4800 Netfly.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 880 wrote to memory of 2776 880 netfly_windows.exe 93 PID 880 wrote to memory of 4800 880 netfly_windows.exe 95
Processes
-
C:\Users\Admin\AppData\Local\Temp\netfly_windows.exe"C:\Users\Admin\AppData\Local\Temp\netfly_windows.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:880 -
C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Netfly.exe"C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Netfly.exe" --verify-signature-only2⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2776
-
-
C:\Users\Admin\AppData\Local\Programs\Netfly\app\Netfly.exe"C:\Users\Admin\AppData\Local\Programs\Netfly\app\Netfly.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of FindShellTrayWindow
PID:4800
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Netfly\NativeArtwork\254E13A6FA5AC0EC0C6577686FF1F5B9C5E02B3EC79520F959DEB040479D9917.image
- Size 88KB
- SHA256 aa69169e9b49db1cf2eba14531e5cdd6f0f2fc705ca4f283d860541499dd2b02
- MD5 4344049ca5503eb7e60ff0d4af40edfb
- SHA1 a61fe17c3a9fac8832fa5d4fc8bb49dc6ae9fd9e
- SHA512 244ef603ff0c37a05b5a8f1452296fbf566e9e40b8357bb732330a8adabd8e7d53dfd3013c0d625c2e6fb4e3d46b0466478514c5141147e8bfd59426600c08fa
- SSDEEP 1536:uuNQzoyHe50Zy93vypaqTo7Zh/nV6gq9ckU4mxIH0YfpRUe3y8aeZTA45Qf52akZ:4hIaOu9TKZh/YfcbFgR9i8aeZTTif5Q
- TLSH T183931223AF4325CAC9FC557ADB9046FE63852282FE502310A2DC297091CE5BA7B3845F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Netfly\NativeArtwork\34C9C9D9F2B4D32946F6B1376611CAB09157FE4F0BCDB86F64799B48A1700070.image
- Size 153KB
- SHA256 ebcd9db15b0a37a5a00032ea006f9793b4e06ea18cea9e0629b3e0d6d69049d6
- MD5 d03165afcfa2119c33d4292bb36be342
- SHA1 e7547dc0b210b949234ad8055d9bcd39e30f780b
- SHA512 160997cc6cadc14629b0aaa0c27301d935e015096365fbb19f6362bc977137b857dd1b52ed9f6562def437ca787a8cc32c0191ad7dc4d100bf405f1e945309fd
- SSDEEP 3072:VSh5dInEvZPZhOsOX6dEvLCA6+IJk82NsYkAYh1CUYI6GpG3W8jdS3CsQYC7:wdJhHHndoMk82NsYxwBYI62GmrG
- TLSH T12EE312E5E75B07E0F19FC365FE0B8F22F6BC2DA41F8C316974A0846783DA9426325255
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Netfly\NativeArtwork\B5520083FB16051B59BCA080074C8E29BA4AC79261E837A40E1AC23C398591FE.image
- Size 60KB
- SHA256 d85dea387cf93118feb597abfd79fd6dca3dc0683a490f3883ab0ddf4425f487
- MD5 46d7d6373a3cfd538e2109a1ea7919a0
- SHA1 b0391dcc427dcc443441b38f56b61193c8d38a3d
- SHA512 dd9cdc457a20b9623324ed7effae3fb4a534d6ea73daae7ec63c4e63fc16d05324c3f076050c7e5571eb318e454258142939bd40a5e08fdd2c12b2b98b4d2315
- SSDEEP 768:FC454LYTiv+LTm1Ov0IN4159I7fbwJu91RwmgPcLstUnswRZqlqjSDevstlRpDjz:v54cOv+LTmbi9ZRPgmYajSSvsxpViPeN
- TLSH T1CB5301EF06EC5824E39DDB3589D81B39097C2F4745490FBA8CAB9DC54B18AEB2C941E4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Netfly\NativeArtwork\C32BFF9D13EA722835BEB6D565B81B4A444FB5103374538DAF6AB654B8EE7E9F.image
- Size 48KB
- SHA256 b7158b54bc53116022043f15c4299c36556448fb17834108b821950ea7b8e35e
- MD5 071d74383d3395bd18ee1813022743df
- SHA1 6399c8965a86cf434ad685ccd2dc8b8dbc840adb
- SHA512 3500efeb2032dd6f6f5de3ca8472e729f80b0662a5e553e000221d2273bd7f9d6078565e80477be4a2c0eccc6c2f43ad5bae0d01f5c727ee168ffdab8f2a9330
- SSDEEP 1536:yWNbQHB1BSCDyf7wA0I76cUPNy79aEmnLEq:yBB1eB773UPM79aEVq
- TLSH T16823F12DD1E54B0E7917116043F6178A11308EF7DBD53BAEB05C26E23D4DB31A61A6CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Fonts\Roboto-Bold.ttf
- Size 349KB
- SHA256 3a761cb420c0796ad71b7901fe1ea1da770a3513f327c418414a8245f82fc131
- MD5 d1a7c900a077f61ce6d36c52f559a0fb
- SHA1 294e828657916e823a369e310c7126d0feff6fdf
- SHA512 a38e805ed19ad185069e1b5cfd42dd9167176cb73fa34414aabf4ff67ae8c9858b2ea70ec2de1a6ddac3472994d5139e235be2c847cda4b146ff7ea10e06ba09
- SSDEEP 6144:CDCweXWUA0A5aZaydhzwFjZQH1Rdsz0d1aNaoMIP4MoBkp2J50HhR:sCweXI0AqXnwjuH1sz0d1aNaoVwnXJO3
- TLSH T139746C09E633D71DC217A6BCC477C346A6F2A819E656C71F248DBB22988B4F04F952DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Fonts\Roboto-Medium.ttf
- Size 348KB
- SHA256 836a19e6ae3bf1abc48686c45b1e5ecfba1253e9800430291a4f2a3e5d35827c
- MD5 93df0ef1ac4125a90d19078c39f21ddc
- SHA1 2f5c72e05f7718fa280f1527cea0b168b72d305d
- SHA512 fd353f42b19ef9cbc793ba8b053f3781101e51c7194730b558bda466f226b08510d082c90edd049871e3175dec63cffb4b2c64c93c519d6323536a3a8810130d
- SSDEEP 6144:YvxDivDljIpDPoAk8TZ2Mw89xYJZcbWJtbYYxF2MrVBsHAMCoB7g+4eK+:YZDiJjIpPkg5XohtbYYxF2yVBatR9
- TLSH T199747D09E662E709C61376BCC477D346E6F27829E652831F208E6A33998B0F45FD52DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Fonts\Roboto-Regular.ttf
- Size 2.2MB
- SHA256 d5633ff957d2ecb1ce7716e86e11057091c3526042efe16fe1f65dfc06a65551
- MD5 a80981e9b0b986ca1f4dc11d05133307
- SHA1 9efd8bcba95ddecb9b85458796f8e8d3746360f9
- SHA512 d020f50c35b3414d0ccb863a6858305a3cde87ae76a03140f43f57692b55495f8e6cef5da5130d80f1a0b62100f081ed73915d0c6b36ab67e2d4e6d1564dfa31
- SSDEEP 49152:xiNRc+93yCCCIAFeujdiPlWaARUai+4nG3Z72s1:xiNRc+ZyCCNAsoiPEaARUai+4nUp2o
- TLSH T124B53943FB48DEC5D0503A7641F30E8A911A5C7CAF1867879E1DB639EAB73D2EE11290
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\about_bg.png
- Size 349KB
- SHA256 066992aebe0733bec6fc42ee7589b4ff15d093ffdc17127a886851fa188eadee
- MD5 494f1e4614d06c409f161843a2eaff1c
- SHA1 c3a809d0bf764872e5ab83fcc1ee0abe21b2a23c
- SHA512 6b1368c28983a9da630d971c4f9adedd2e480103978b84301dc1dcded127f87bffeb88be48114ada44ffd98bede9f4036f891b20df1a7207a839d4c6b50548cf
- SSDEEP 6144:eanKAo5q7B9OiNlk3AsDBHqyzFSwYlqSHmkPjDPBr90Nww:1nKRYXjk3AsDBbzcwYl9Hmm/BSNww
- TLSH T1BD7423EE85AE1F298A1381EC3EB4D57912DC7296C45833C9C33247DCB1897B1D1C9DAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\add_new.png
- Size 4KB
- SHA256 68631eea146af3c1b5233b1ff053559cecc8d02bcad540281c4aae95478b14bf
- MD5 fdfc357c8d207f8623f5360835d59039
- SHA1 abc3f62cbce6005fd28aeca0b8ab220182ab9edf
- SHA512 129a17345cb6b5ed6ba35163289eac124667c28965e9e0668bfbb888011f1f2b921bcf6f6549fd4a6043e98b0275c1a6a631132af0043fcc47e0fdbcda4be8db
- SSDEEP 96:5vSBIyQ5LZl5PtIy/4OX5lrzEJv4VgsRUrsGWU+6rVroAZL5fm3Ou:XyoNDX5lP7VgsGrsHjia45fqOu
- TLSH T1E2A18D4A15BFF5827E0EE5388539BB10199DADE111831DACFB3D176E3006F09C6A80CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\all_league.png
- Size 1KB
- SHA256 03479d0dfb0d7b73d93511df07659b167c78e5dd1c1e4688789ce2a3b45afa59
- MD5 feb60912d2008c4830cbbdcad090ef38
- SHA1 2f951dd4c984b0bd8171be036a1ecdd924c121d6
- SHA512 0a8a01fdc4904dc58b7b4c69c98c3dc12b4136a41d7328d89ba3c9d4fd1a148d1eac9518a4ea0463deffa84517bf38cf0175269950ffdb1411ed970bb435b218
- TLSH T1B0412A86F180A128958532E39C573EBA2065C1F47350DCCF284464A5A2D64C2D879B47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\arrow_down.png
- Size 489B
- SHA256 423987e93c06a1aa3624c9bd0f54bab26e76f208eea97d96bc835f05db312574
- MD5 d131200126fa5d5a35de91690686e928
- SHA1 9c46d6a69226c2051551d9686427a49bc898f7f1
- SHA512 2723d3f4b4ee26f6d6cb2d0c83242b49548b37a5c5333b79b7149e5662ca45ba427c248d5548dbb1f4ef7f427cb59b3c31597eb597f466d1fe4cae21ee7555e5
- TLSH T1E8F0D4D6DFAFE26C5240146D5D3501C4802412F9D1B27CCB0892F9D1A917258B945FE9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\arrow_right.png
- Size 329B
- SHA256 3f04afa03d2dbf63e33d021fc7f95bb75fdf6c71eb564cdbc712439f929c7ae0
- MD5 56101fdcdaaca7541cacde633a123f9d
- SHA1 72ff1de197c8965b7c4999939cdbfeaada8b457c
- SHA512 9501fb5e50d8cac82e3245c0e3f637d1580352cfc2d736d46df74c7ae5d77eee9aa0830a71d0e4e39eb615ea51829ca18e48e2cef13c6785762ddba82defee46
- TLSH T161E02DF0824AD02C7283411E383328C24C7302F4314FD0289C883A3C7C53D64AB802E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\arrow_up.png
- Size 486B
- SHA256 1105abd038225d1a10085781ce24ccf4a7f5aa8addd13f6ed476dedc26cec36b
- MD5 ffd17b85cc8ef95492ed8146d4243c0f
- SHA1 1258497f5c7870888a30ca015488109c25f02245
- SHA512 44f991b2ce153e3f950d989e5c533a200d452b09a20f736e7078db25bf6ed5a602fd8a88c0b4528295ecb0c6246e83807b5340a2ce27d270537f87d01bcadf9a
- TLSH T1DFF097131D17C579D88128AEA4720AE0D46D14FED25A0DE4709A20A4281B08F1226DC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\audio_grey.png
- Size 2KB
- SHA256 7179f6d44f85cb7582aa8e24febbfa2e35c351a55f4b13d1433d7b26f35826b0
- MD5 efdee60d6bb1215a5b56728dfceb2ddc
- SHA1 ddded11c7b454aa3d55294657d27e542bd5be0ff
- SHA512 896536deae1a5ae6dab959c272d70d9f404c40bd485b0c690f6f4fe11867fe9cc60cfaf8490a97596c8d4e3649a81fc4805dafb201a136513af77257dafb3860
- TLSH T116514BDB5B32F8F6AC43803586ABAC52C60B8C4162C0379DC3FA51FD5653E74CAA8536
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_1.png
- Size 652KB
- SHA256 7958e1ef124e892c920b61b9147da0396f28d6bb014ac1f192b67e3e3b73c3a4
- MD5 ebee837d0ce13fb7612fc0991707bb8a
- SHA1 6f6788792a2f86c74d6f574d60651cc61ed20372
- SHA512 c3b22d382a3f8c1c7995dabe4caf98a9a07edb3a77c7b9f7ad27de5fc6c7e3d204ec1a0dbc755edf648ac530ec3cc707cfef8ec92659969dc27414ca73f87b39
- SSDEEP 12288:3BpAvvWJ4uk2DM8ZgrpBaWx/LRQREOqmy42jJPqNKiS2bAtY/Z:3mB8Z8rzB9czSaKiSCAtM
- TLSH T15FE42324E667BD3D84318ED831825D92C78CE052272A77E03C915DF1B73DD86BA9C29A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_10.png
- Size 594KB
- SHA256 bff1cbe1e57b5ed86167ce53978d0c3b9d425e1770f2ecd9cad46b50a0795f7d
- MD5 d169d72d1ed1caab7f9b9efe80b949d4
- SHA1 8815eea40a45f0a77c344b4bf627a584073e4660
- SHA512 dd3a3956404fadd813afa193c0d3c7ea3baae5a31ab024cc25b97db133da0c62f5aa10dc0042bb1122088e91a3bfe9b87b2994c05724750370ca5c533c53dda2
- SSDEEP 12288:9UqvW/KIsktg+3i03lhhjgB58R99N4vPOOcWmmersH0/VqO0SMrE:PuQog23lhhjgBC99i3DxmmeIH4V90A
- TLSH T12FD423D33449E550275A1CD2EF3861E13AD880D8E5B43A78950CBF99E2DA8F1A0537EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_11.png
- Size 625KB
- SHA256 7b32f33005d46f3d0ae9042d268055a94ec42add2c04afe878830890aea11431
- MD5 257bc997c938a0579ed29ab4314a4f6d
- SHA1 bc17456b8c0e656b423e24d79df4c933d957670d
- SHA512 42757a4f124e04f0d4f0ce2d53f055e7eaaa154c4a6756afad68631fdb1be5b68672e2241a22b590a4f293a3187fbaa74898c0c664ef5e3a8c74ab626ae120f9
- SSDEEP 12288:3sBOscsAkQ7+Fyfmaw7KwlHJOrjgj7kdNcC+lsyqKkKMtHN:3s8vAQnO9vHJOrEcHH+hvkn
- TLSH T133D423374DB83C6FC1231EA32B168464F0D2729097BD990E7979F1709B59B45422D2BF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_12.png
- Size 632KB
- SHA256 06d7d306ab22be6b32d964f160fa11a119d165ce3a3c84589c0f035f24473a81
- MD5 8a22e09d397a571530abdaf9bfd0557e
- SHA1 a6e2332dde71736a33c59c0ab4f423a51df82da1
- SHA512 aca1b388a39f0cf3fb2a44cd16654ffe516bda9236f6834b20043fa109ac189fb7a624c4740963a593d66c2334ee9843602ddf1e4367679d0b271a0cd8db54ae
- SSDEEP 12288:0oUZDH9WOqPgrWfVA8Aczk7mxLQREHdVRo3MhPZgO5:uH9+CCuRGR4MhPz
- TLSH T122D43321A86E7E624D0C9DFC1122E8DC8DD291887362CF98E5507E233DF1D497D2B79A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_13.png
- Size 619KB
- SHA256 4433a37e6ef868a68518d88e6c626a2db8dcae0c5ca8a0a57d2633afd72322a3
- MD5 2099f415525dc5aa61e48216e74eeb47
- SHA1 94a8a5bd1608a14e04f3241ec92c21aa58cf5257
- SHA512 7356425a3efdc75b59491e2baddfb62efb7c95e5f297157c304a6d45a12ce1311126795d65344e1a4f923ac0d996342e7e5311ef348049f84304309f05232939
- SSDEEP 12288:T9YSF8o8Fg2efx3t1+HCOp4j4unFfTuHmXpgVSpdwVxNXNW9GBBFjqc/VB8GnlUC:R87Fg2u9BC2Pr5gVSp6Vxx89GBBX7
- TLSH T19FD42302E0EFF889E60343B7C693717A74B213A755782F45E928BD895384773DE983A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_14.png
- Size 641KB
- SHA256 e625e5b0c455dfbf49006d5b8d90f2d4c4a4984e2a58845d857440e6ab9cf95a
- MD5 bd6e867e0026cfee6382a58a95d8b464
- SHA1 a667caa18b859a8529b54a75fb461ccd8ca961e3
- SHA512 033c06343258eebb45efcb9d693266d1826a2a33383dc26da706af6def9096b38331d7194c7a64cce66d8c9f12f65b1defbcd097d5bc083296af4c7e86658aab
- SSDEEP 12288:uf9cMRsaRcCd4edInjLa2selWHW1kgTuNErVBbe8HkBUJtQKRHlw2GhKomJP3Mcv:xMaaGK4cIjLa2se6STuNErVBbHHgUDQ4
- TLSH T1A5E423F728FFA3ECD5636D490E4558B2482974A6A92D0A4EC580DCFEC5FAD21ED4C312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_2.png
- Size 566KB
- SHA256 aff2017587875b958e3fde4da01c40f150a50685006ee7687e926742b3812de8
- MD5 72f71f9a6d95c161017ab82846ce1fc8
- SHA1 7471c240bd5ed2c58f72f06c6329f90407fb1d41
- SHA512 fa112384ac2545fc003235da31f44987f4f4dd621a140d8f862be1321e18af70dd24f22d3a602137808ff655d2902e84d3f354fc7e59ae146a3c06030702a6a1
- SSDEEP 12288:y5MXm2JEuZTBe32MJC67m7yblixw8UsnO23zI7mPCq3mgYC7Mnclh4:yaXmLuZTBK+Sbwx53zIlFgp4
- TLSH T137C423E2588DCFFB6FC29C6355853CC50082FD495B9E4D84D316A91212CFA8A53F376A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_3.png
- Size 611KB
- SHA256 ea619a55113897897480447bacc3e3db98ae9651060d591289e2a17c0521947c
- MD5 18371471795e65425e49da8e5730c2b6
- SHA1 6e72155c73149eaf0ddc59f5a63cdcaa14a41163
- SHA512 cd6b64ec4e15c9f01eb6e12b59ca8f5a699debf3daa5648417064735b1e9a8b68c83e2be88036b9e8c634732267a1c49c06e3450310931072bc0a53ed2a93334
- SSDEEP 12288:sQLJkus+Za6VRKD1EMXvQoCf9AH4qTHb97sDC+0+eCspuc9Mab+8Kb:3LJkZ+T61D+9wTHb97j0eCNc9L3Kb
- TLSH T114D42342DB71AD5573445EB7B2730973C0CA2E402D0E97D41B8ACF5F68863AFA9943E4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_4.png
- Size 589KB
- SHA256 fb69c8d37499582d9bae56ea17af8210e652f68b8c4bda28055ce7b4ea5c22a4
- MD5 fd0aeb1a66cd3abf9ff6b09f2a8c5da1
- SHA1 e9e51f1b0b6f2510393df0bc9d6c99d69b836548
- SHA512 8d37f442c1a344ce47c5eefafa3b4dce050b0fa93042a91933c36c44eb62b333fb3150d0623128c3bb5e3d397cc1ca9ff8f48a1d397687f4c3a1fbde2e2da708
- SSDEEP 12288:slfB654Wut1aplG1BLlN917fYtNKZi0CG/dgkYrhTSx75qxP9XZAxObjJO:yZ3W41as1BL/fYtQZiTk1YA7qP9sOvJO
- TLSH T12BD423BFCF8C37FBD9A661CA3D82436244687975E67D68344303F19A11EA523B960E07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_5.png
- Size 656KB
- SHA256 7b310f17551f192830e32585daedcf3148b08f743ed767505975325731b83044
- MD5 6e264e8cac3c39b353902ecba56b1646
- SHA1 ed8a636374cef1f580cd944a5a5834d75d7d3979
- SHA512 b1e3d44e63ee2e5f17ba93ae51ca7230cf38876f525839326a42be5155b917176ae48b2a4192795b200e75c46f75536cb86f58a38755b0cadf3a1675ff89b474
- SSDEEP 12288:2pTEx0iDM8lQ96nLCV3nXz5oJKGJ8UZNVYZZ/qCdYFN3/5U62nXBT6wEkus50A:MgWMGNRXzmPXVYZBndMl5UJnb950A
- TLSH T1F5E42323A43DE263B9106A0E9FD878343BADF0291E80173FE6BED683B15051756593F9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_6.png
- Size 609KB
- SHA256 2d16545d51b5a3b783b98287a4606695504f56d0b9b774d34b487eb0f76fbd13
- MD5 4615e81ee3885c774d87b96cc68949d1
- SHA1 6dc072f0758464462cb524ed28f3a7c0324cefbb
- SHA512 3ca538dfb2a0bb9d328d03a9d202b4f87c1d7f028b86552f8c499653725876e617844b8977633e6a4804ec1ef12e146b4eacad20d60dff751783ac733ad8a042
- SSDEEP 12288:wkERaJKq82fWU5hnGQ/bs08zTMx/1JOatGovqOTi4K6g:w9EN5RGMh8zYx/Waty6g
- TLSH T112D4230DC0AC27F55621CD343EA2297EA5C4744EB73A84B73859D6CB099B2C207D9A77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Assets\Images\avatar_7.png
- Size 636KB
- SHA256 aa4673f8cc09b848dbd81a5dda14eb4043af19a804ca38484171dacc69068a93
- MD5 27bbcd993698422db20f01487d678c02
- SHA1 dad22c037a913879fbec7398b0ddc38a128d7ca4
- SHA512 4d41caeec231caf484b5d499f7b5db9e11e3cbe1a9dec00a80354f4ef4a8508bf04bc255c0411dcae5a0296b66b7b68f3bd1c227f8a3d86c110be2a9948635dc
- SSDEEP 12288:Y+egXbUSRsSEaomD2wDi7M0dMO8mMiV1E2G4v3z9pnCs+dqfpPFOLQmQte6:Y+FLxtfDVW7M02ZqHd+dOfOzge6
- TLSH T1C9D423A1206FDC72E23398A91B8296B0D445BC0C1225DE5D8B7E53CDD0FEF6C626E647
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\FILES.sha256
- Size 83KB
- SHA256 6d528f62359bdeae89917a837aa96d6ad297b899d21d82662429ad9e695a67c7
- MD5 b7ee7051917e0b90fe551ef9f9145446
- SHA1 a2b81b454fdad754f6e4d697e0c3ce99df872e31
- SHA512 c532a80a9aa60a3615bcb8a83885ed2fa2f0e0348a0d8f3b8e85242f7111f9c3301e0e64ddbe181858411431e878566ede158a6f6439fa782a16fafb447efc33
- SSDEEP 1536:AGtstAjI0bnyc68rIr3SQgyWMnd2mflvWE2jTr:nI3oQf7km9+jTr
- TLSH T1FC83E7AE626C7C5722BC2E97A8DC8CED11DC03E3C042E469727CA5487D97EF55A73428
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\FILES.sha256.sig
- Size 384B
- SHA256 8de16966da0b07573d380401ca56aed244782e5848add6a8d9b79b676527386d
- MD5 959ad666fccc5f1c77b1048f6697e24f
- SHA1 d67ea5b1c9d592312905a801712e1c4b25170f77
- SHA512 e4c728eabc92539ddc4ae111678b8c36a02ad543b9472a9fac438805fa5635ef739be54896da546b87b0ed7a5cd65ed067f8c0db09c2193c394bc178bb63b7ec
- TLSH T11CE0F1DD90D905322035655DB2D264C166B8B0804869F5BE684EACD0A5009D0CC1602C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Netfly.Core.dll
- Size 222KB
- SHA256 a21995aa12c9fb7030dcef0cc330c3d41e06e4f21132dd6d9b7d4db57c25fe3d
- MD5 08232ddcf96a5bb8367f55e9376de145
- SHA1 3f19f413a2c2a6bca73f1456d24c65a09fee1a1f
- SHA512 23e86035dd0ef89df88991ae7af93d6256a9681141e3062cc683f307b46d7903b701008c3271a659e1b87f13c98c4ebe1536b2d34175387d441026948f342000
- SSDEEP 6144:JXS350EzjykCe/CgGxXrJnowZFYy86fu37UMKfU:xSDzjpv/CV8tZ3J
- TLSH T1D5246BA563B88B12EBFF5BB8F420A055C7FAF113A889F74C9D8D64ED1861350F4146A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Netfly.deps.json
- Size 45KB
- SHA256 f261a96c30384076e4268078d32093e613c0c38cc2977c2c4c21b32d9dba0809
- MD5 5a13770d5063b5b3e133684fdf735d15
- SHA1 5b516e6387d6a1908972c9d91ad28e48ebeff8e6
- SHA512 fea227d1eee600acde5931b498cb98628e786c617aad6fda258c38bd40f6d8beb7f8708b7803420b4eec6c6c74af6155368c919b8b53cb5db85a4fc78016f5f9
- SSDEEP 384:V3ZXE6aIiDiUn5joGmJSOBHZfZz4JZDwozVDR73U0LeCqO1WuJycTY/TJhpRuHY:VmpzVN40LZW1h/TYY
- TLSH T188230425C9640EE3180993E6247A4484E2B4439FF8586C1DB6CCB81DDF4EFBD25B9BB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Netfly.dll
- Size 3.8MB
- SHA256 54997f788ee2fd59bf22cc5665d70ea99e685cef7afb5ec65cebdecea12a3352
- MD5 16299f5c93f423cdef72332b47c1a59e
- SHA1 90e1fec83c7d82485dc44844b210486c594f377b
- SHA512 e25d67dae17bc799e904ddf52d61f39e4f797a3f1a74039d326ef46631e690268dad12cc282a16131565f6dafea2b5f3fb829bd5404296d41600d71b37be8085
- SSDEEP 98304:GylNpwpMbEFUiNRc+ZyCCNAsoiPEaARUai+4nUp21OqBpOx:GylNmpMO1NRcmSEDtUOyOx
- TLSH T1BA16AE03F798DE85D0563B7540B30A49822A1C3DEF18E74B5E4DB276EAB73D1EE01296
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Netfly.exe
- Size 275KB
- SHA256 a9f29143272e09a367c5eca62c732b5ef4074d9f25d63f8d52ec775a626c2050
- MD5 fe2034129d92162718423119a3e01c97
- SHA1 49ef3a22bfa69ffe408f51eb4fe7749e51aea40a
- SHA512 de3413ec0c2cfe86e846a545eb51f60764c711247faa81a3d3e3f6c4a3b22ceb28693aaa720c38d2b1eaa9d7bbe8aadf9afe6f46786c8acb1ba89c517fdc3d2f
- SSDEEP 6144:gHRu7F1nQnB8yxIQWbWV/7ohQEg3yGJRy:gxOF1JyD/EOxCGJRy
- TLSH T106549F17A7A850BEE1B7D638C9924941FB7378598B71A7CF03504EBA0F667D09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\Netfly.runtimeconfig.json
- Size 360B
- SHA256 79478f035e69ab7220e5a5c0f904e8f74441d8390ecea88d00f58da33c6714a4
- MD5 6efe9aef3d244f0afcc33dada237842c
- SHA1 f9485e182d62004710e528f0a38e772f900d4ec4
- SHA512 5e6ce7dc6ec7a6f7571aae94fb0cd4d850129588c46dba1e21905845c9685babffdf8dc4e04ea23bf0b9d2344063992f850be5f4b2cfb31e8adf848bacd8c8e9
- TLSH T14CE02668CA617CB315DE707A8668C0C29B30A223940C3C90B9CC080CBF4F6FD1627796
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\SIGNING.cer
- Size 1KB
- SHA256 30864e72ae7b13bd5f8f1aeb5f39c8d67c7645d536615847564924d523af9797
- MD5 8f3d21205bb48dda5c36d3d28aecd907
- SHA1 ae9ab288bef0386b891235231f64b1ff457f539f
- SHA512 15b090430a5756859ae9087fccec7d4cda36bb1dfba2238d6a62e30e0175363f6c1654c0133f9dae4424741b99169d418cfc643adf8d875b755f8470c82212bd
- TLSH T14411B5AF4DA53A30F1FA5D007F1E2F3E29E7056C6FAA0E2BF046428348745E21C17108
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Collections.Concurrent.dll
- Size 225KB
- SHA256 7f2ac0ec3bb9425017006cc750dc94a3c37ed175ba2f4eaa3f8f8e5cf35472e0
- MD5 57b88c188923a87a9075fa464fe9a3c1
- SHA1 7ca4ccea16def2d635bd110184d17f0d8a705883
- SHA512 a31aeda9fb2f9326336b6acbc04111a86cf8a3080c2766ef4cddea51bc1b2739a6ede147ed27c39e486e7dd7a26f672e3835dbee48928345e96d387eaf0e8bac
- SSDEEP 3072:pOLq9jhK86tVDNKTs4Vzof/HQLvB76qSa2ymYQraEN7Azg902igtJsPxNnUnZGAI:Eq9jr6LUTs4eQV76qOc212NnUnZGAI
- TLSH T102344A16638C0B93E5AF463DA5A3C502D633A55B1312D3EF13E8A5841EA7BC17EBB112
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Collections.dll
- Size 289KB
- SHA256 78d429a901a73a09cda6037befaa56b79bfa557000b2a69ba1c1210253c0b21d
- MD5 4b125db7c61dfb2c6d1f9223f3a6ac4c
- SHA1 9fd11a08547d73c546283850c13a89b86fe09172
- SHA512 685c89dec7a3fb3dc79074003669fc4a029d48f644126a41d3f61816e267e791247e43bd99de834b4e269816d40a822346c20ee067fe6f7040d6bed86ba28957
- SSDEEP 3072:OVUwvuGeTbhnDHdY81uFqzK4s2QMsf0r3p9dJ2SAmnp8SFK0gwsDiBMOLI6mFLa:W0G49Dj1Fe4eL8ph2wC0auL++
- TLSH T177544A1873888725FDBF41BAE593C112E1B990938350A2CB47BDF6509FDFBD12ABA015
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Console.dll
- Size 165KB
- SHA256 8be68e4cb2f0b64b5f37f7a7aa82db2ae1648115a9b7b9381a3cfac7cdb4aeb5
- MD5 3d769ee8743f62bf87b814f39a4293a9
- SHA1 c43c0b196603dcd58ec4a6463be1c91bd83a8054
- SHA512 a65c4de098a94407bfeecb7b3c4434a8c7d3148b561beae80c4aed4262b23b9c6b45b026ba950ee00aadef33712bb444e4ca21e71210080aa16e059ea205128b
- SSDEEP 3072:G/W8LvmirfHk4xuvfg7v93MtglaVRc47x3:kOirfDxuHORNkl
- TLSH T1E1F37C2A97DD6527D77F86B885934301D333B8A60307E6EB418588881F53BC2FB716A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Formats.Asn1.dll
- Size 233KB
- SHA256 614c4e1729c2011b1e40424d7b00b3dd2b76ca7abb438c62d93048c97d9ad44a
- MD5 140fe4ddde6a11d1f626e0206c603e2d
- SHA1 69723d7dda64d80f89898536547e426ccc2faafd
- SHA512 67e15f843f86134f1182c6441fbdb1152e388adb704e990f9bc4f37de5953233065ba6e5539b280faa51e1729e58a19d960ae39eac56103cf0b7db102c275e6f
- SSDEEP 6144:2+mDaPCizguDUrli39CG+if29K7UCG5J2X:2+mDaPCizguDUrlM9CGUcQvJS
- TLSH T1F9345C06F3948B93F95DCA79C2D7CA12C6397192871097CF06E985476F03BC3B93A866
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Linq.dll
- Size 681KB
- SHA256 1c6886fb239a6af59da0dc1561d9f010e2e983a1e826d6e8f8a61f7ea42a3af1
- MD5 6f6696b0e37c3f70f57acde88dfd9e3b
- SHA1 5b14eb563b57781e2c81906409928bdb22eb3e17
- SHA512 6874beda8bc899f0bce396a47bd021bdfc14e961debdb2979cb2cf59326eb825f29e988db36c0522239f3771e2a98ca743352e1419cfaa729dd637298433a09e
- SSDEEP 12288:d0GwCqPJLv73KQkvIRR/ZcC6p/XCy3esX:d0kOLzKQkvIRRKBF3esX
- TLSH T113E46D29D38C4A22CAEF467A95235161D2A195D243D2C8DB844EFD442FF3BC1677EB38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Memory.dll
- Size 157KB
- SHA256 5bbec55d9b01c664055180840b651b1b1f01c15f7f45ee84192b95a09f2c355b
- MD5 c8f86c40f5eeaf8329e52e0b1f607515
- SHA1 2ad909bd18cd99b7ef9d57b44f897d3fe888a4cb
- SHA512 6c0f99a8b4febb9c82f15e7463b2527be1035c8fc98b9c8b81a1c6a7011e5055bfccea2b43f4e9a563277bd00366b5eedc532e38e5a64eb3abaef558a6a1e1da
- SSDEEP 3072:RtybIWTQJ8tT49EggVul1co8s2pwaGrpXDXPjT/ht7oNge:X2fMhpV6waGrdPH5t7Y
- TLSH T125F35A1BD3980227E92FC6BA8B5AC602EF337515D30191CB44D4DA486F53BE1BFB6521
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Private.CoreLib.dll
- Size 15.3MB
- SHA256 69d56e12535d3a8f2f8f89ac8f97577e6dc788d26f2e7b69be8fb5f6ff17ff28
- MD5 4b69a9bc46405fbc30d6bbb294b12e70
- SHA1 9266c415902545924f1177b9844281b360b86c54
- SHA512 10725b00b1d6fc68121deacd7207218adf5105fe97b23afaf6074f9223fd1868481c91d4d4af1d63bb2622fce8290de72df05796fea34a0bf0de5495130f0a09
- SSDEEP 196608:2Lc4/yFxl+PtFnmBiRxMPtJEGQCMVft9iifQvDT2nD7CpN:2LmuXn+i8PtJECMVft9inmM
- TLSH T122F6AD10E3C98B4AF53B8A7C81739516DA71F89653269AC741E9DE8C3F23BC0533B661
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Runtime.InteropServices.dll
- Size 109KB
- SHA256 bde2bb33524a73e2964cd47ddf753150d685b31ebb1c4779e66ca426b2b419bf
- MD5 936afe1440a4b5123068c8889390ddc8
- SHA1 4c15e7944f197367c190ef7dcecf582cb0af266f
- SHA512 283fe30a8ba970074c6e3a61775458e483abc92115bbf36d05743451a734c4ac760a4c14a983fdba4623a055e7ae2eafe11eae7eaf12acc883f9dd0488d39fa3
- SSDEEP 1536:mwCS8AttQMx8PQtvC+zucKb2EW4udNY/w2yVvOIugz94RHPXF20goBzF:mwClStQMm4vg2E5udNY42ypJunPcOZ
- TLSH T107B338207B98863ADA5A873C9C336D10CDB3FAC65322A2CF4584849D0FD77C567727A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Runtime.dll
- Size 43KB
- SHA256 d6b4189c8e9afce3629b27c902c198a54ad3a355ec8409d3880b3b68fb1cf445
- MD5 cd5538e320ff86ff26885a6637ea8a4a
- SHA1 cf8bd4777724af2ad4e1036b241377fe452457f3
- SHA512 3eceee16878d7cc51e2bdd63b23f880f46bc31d4b3296e549be465db581012806cf110200a939b2fc397e8a988c274c241c1715ade6df6967fda9d30263967ee
- SSDEEP 768:kQJShN9Yzl50v4boRiPYVbugVJDPMvrr9zmRwH:kQJmN9Yzl50v4boRS0DPMjBzdH
- TLSH T1DA13C4A1EE289233CDCA93B29C73A4801EF273C244764D76556FD73524AAB89523633D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Security.Cryptography.dll
- Size 2.4MB
- SHA256 b043b1ed136164fd69606a9e7f26f1fc05d0c7cb888c0c00e3b58544623cc7e5
- MD5 de49ddd6bc8db179b5f4d4a1b8d3bf50
- SHA1 5362319cc01a41625a556c0712979c3be62c8fe8
- SHA512 d278f4f74b964a4c062f6ccdefe48c59cadbc478b84bdaa9251b8345a1fc2bb1d8261683ec99ff7d1eafc8a8a88ad03ca32ce6f3372285d6d467f8543066e828
- SSDEEP 49152:ZsYkD62fzyk6vIge390i8RjYtKiPhtJeWnzNDx+62tGvdQN:+Yk2vyhuedC
- TLSH T193C57C44B3C40607D57FC7BDC2174D15D638E8429342ABEF5685CE982FA37C2A7722AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Text.Encoding.Extensions.dll
- Size 15KB
- SHA256 fbbc0dde38272605b8b95271cca7202ca04d5fa115acbcee936e1bed611fd23c
- MD5 8480f11024f911d38fa49cf52afa9ca5
- SHA1 b4e2ba03cbbfa3b3552bc8a405c52896aa791eba
- SHA512 774a068e245823e2507bb06402c676cd8867fe21ec68a78a66c25f7066536f9b95820593a45fb69a7244eb97474d9f0f18827c9f27f1ebeae203237530d77bf3
- SSDEEP 192:XmXhpdSPxya6WMJWxOWCWKie1BzBWseawW/ch9UNn9X01k9z3Acg62hY8l2ML:WR/WyVWMJWx2ZlN2h9W9R9zzg6wYYL
- TLSH T19F624DD2CB284253EEAB5EB19AF8DA833D7C77C64811A55616D9F1581C533C0EF30638
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\System.Threading.dll
- Size 81KB
- SHA256 6c2137fb877e647a6c0f8909db8ca7af1e6fe95f19c6e531f6a74539fabcc6ad
- MD5 0557b61ec1f5a87ccb7acdc129b1aed3
- SHA1 44e44aaacdb4a13d71f5f50e021b8ef0c187c989
- SHA512 8fccbd75ffd83a9816cbc28d8d59ac536bd328fe8de4ad0eff28ea537d90750a5a2840df61b97c72891e02086bd3e641d644285dd1cefe93688f486d1529d917
- SSDEEP 1536:/k9lBo2uUTogxqwXAXXG9Rld5byF9o6sion/zq:/ClBo3UkgIwXeW9RlHGF9o6Lon/m
- TLSH T114835B11B3E8090AFB7B47B9DAB36905C172FED21B11D2CF4069910D1FA7BC496B21A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\clrjit.dll
- Size 2.0MB
- SHA256 e33038c23f32074683e170b0ea74dae6ee74a05bb5e8ef6c9fd4cc43771b34cf
- MD5 6519b3faa530e9591f37b96820db9c74
- SHA1 14cf115f78a68c42db0d8a45efbad854c8c890c0
- SHA512 6144d15d58864357f06398b69948068b29023289e5ce14db49479c5cdae53d1dd9974abaea05eb3227f2c966467dbb1a905f2aae072c0c71f7d56fa3f0e9a579
- SSDEEP 49152:p7KfDQOHKHKqjC/MR/+/yfsxc3ZO4lbIVPv8AKR9PNLDGrfzQVHxgGmaLW:pCdqHKqjYMR/+Wsxc3ZUVPvfKRxNHGfJ
- TLSH T12EA5AF47A2B901FCD46F9234C6178A1BEBB2B80513719FDF03F04A556F23BA22A6D715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\coreclr.dll
- Size 4.4MB
- SHA256 1bc65b8d45474b19adf3ca85ce881087aff599ffc72b2c1a323e878227757b65
- MD5 bc59287043c1c44e4094964894958d32
- SHA1 1399e0d3e9341f5762baf032f0e85511b2a9eaa9
- SHA512 870119155d084174fe08860ed219e7e76187e6226779ac6ce370281582e34a63b43d4ece52e89adb9dad0e8b96a569149c8979b8d9cfe4d8781e421371f4da26
- SSDEEP 49152:fqJl9k/aljiXmAQilbeWbsfvhF8b7b7b7b7by7b7b7b7b7e+K3tDNivDtOipmbJr:wlm/OOxhjQBdsQPwUho6Dw7
- TLSH T1E7268E16B6BD00DCD4B6D1B8C6D74927FAB238495338DBDB02648A651F23BE16A3F311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\hostfxr.dll
- Size 370KB
- SHA256 5b9358572daa76176f97f1bb80fe764b24ee1bc2cce0579230e7f9a28e3fbbed
- MD5 986964a61a8a5ffd3a1353a0227cd626
- SHA1 b035b6a4c4f4023374ec969def033f4eb2851715
- SHA512 3006c66a501316dd0db4a7a5e6a26d8a138499063de704e2d1434122c96de3b85077de722ecba023bf7b7433e322789fffab7b4e84706b787e02aa175def5d17
- SSDEEP 6144:Oal9vjNggqrRhxaUzIS64W+/zvZ0UCVvfpdAl0FsGxilKmkTAwBAI/UlU2CUHFhf:O1hkOOnpa2VDJe9Bqk
- TLSH T1F4840816D3E8057CF0B79678DAB29902EB727C494BB0E5DF139088651E73BD09A39723
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Netfly\app.new\hostpolicy.dll
- Size 369KB
- SHA256 84275dc570382246b4b36ebb3094c2b38190c2fd80998d1da20b95dfcae1c546
- MD5 f0effd49d38194939358362208ed2f68
- SHA1 4b888b03db5917dfec9078e8c0e181ec120f78a2
- SHA512 8cabfd1e7198e15656d266752b9ff19806ddc9d4f16383c2d4209b15f0d0b7297033faaf948b1d4b4ee889ccd06a13f6b1d2cf0821b152af42081c63d7ff7c7c
- SSDEEP 6144:ws0pbUUvKO9fssrJDpMBqyiNluCZO7ptsPB7dGdib1LcZzKr9H/VLuxJb/MDtkws:wrFvKOHlKcyiB5HBb2wK6HFTLs
- TLSH T121843916D6EC007CF0B7E679CAB28901EB727C4947B196DF139099A61E73BD09E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsbDFFD.tmp\System.dll
- Size 12KB
- SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
- MD5 564e01f2c6edfb8475573e1b809cb5eb
- SHA1 5d767e8f685449d86cd8d16c83a814ef8f7d6264
- SHA512 67486f8e996b29688cfb5a57ae4a7604fa0892ba0eeccdd55f514ca4bd9b79a6fe42bfab4fc85156c2258ae66539bdd9bb36a8b5f7f944f3007c2421f244c95c
- SSDEEP 192:rjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ80QPi:X/Qlt7wiij/lMRv/9V4b8r
- TLSH T1FD426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsbDFFD.tmp\nsDialogs.dll
- Size 9KB
- SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
- MD5 79c27de4d1c6d295fefaa70f608f1c67
- SHA1 feba90c93db3fedd450a81eb2603f793332d1a83
- SHA512 fbd79f3946032821584ea2fa4b559ac5809ab45fdc9107eb47c9ff3fa3229d7748a7b2ed588709e59cce16a4f8e58ed98b46cb061acf1080e78434d184f51ec7
- SSDEEP 96:oQEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YbNqkzfFc:oQEvCu5e81785qHFcU0PuAw0uyBIFc
- TLSH T1E612E892A2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH