fe1ecf93ba392ce84330f5883cdce95c62376f3b320acfb18c865cc2fca3b7e8

Analysis

user interaction
yes
max time kernel
123s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/05/2026, 00:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
voidclient.exe
Size 10.9MB
Sample260504-a4rreset9p
SHA256 fe1ecf93ba392ce84330f5883cdce95c62376f3b320acfb18c865cc2fca3b7e8
MD5 088a32bc33fb1f0c2fe1e803a15f47d2
SHA1 f5150949dfb5c169797645e853297707df8897e6
SHA512 480fdad32be245e0a93346678ad72881105aff5325e70db3391f3d1de5350f4d9f1fabd46904e2a88f799a206a053ed0cbdd3e899a2e65611c015a4887b78099
SSDEEP 98304:ib6cEIGKNWAzR68qXTrg7LQpAJsf/haD3pi:iGKLz4g9u/oD3c
TLSH
T108B6D5257B5A99ACC05BC4B4834B4A76497134CB0B35B9FF4494A2382F7EBF42F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
25	5208	voidclient.exe

Executes dropped EXE 1 IoCs

pid	Process
912	ui.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	voidclient.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	ui.exe

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
16	raw.githubusercontent.com
18	raw.githubusercontent.com
37	raw.githubusercontent.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 28 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\model.markov	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1486812215\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Part-FR	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Part-IT	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\male_names.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\surnames.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1486812215\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Part-ES	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Part-ZH	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\passwords.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\ranked_dicts	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\test.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1486812215\protocols.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Part-DE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Part-RU	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\female_names.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\adblock_snippet.js	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Filtering Rules	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Filtering Rules-AA	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\Part-NL	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\english_wikipedia.txt	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134223292025400536"	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
2184	msedgewebview2.exe
6108	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
5208	voidclient.exe
912	ui.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 5208 wrote to memory of 2184	5208	voidclient.exe	84
PID 2184 wrote to memory of 4668	2184	msedgewebview2.exe	85
PID 2184 wrote to memory of 2560	2184	msedgewebview2.exe	86
PID 2184 wrote to memory of 2560	2184	msedgewebview2.exe	86
PID 2184 wrote to memory of 2560	2184	msedgewebview2.exe	86
PID 2184 wrote to memory of 3708	2184	msedgewebview2.exe	87
PID 2184 wrote to memory of 5032	2184	msedgewebview2.exe	88
PID 2184 wrote to memory of 5032	2184	msedgewebview2.exe	88
PID 2184 wrote to memory of 2756	2184	msedgewebview2.exe	89
PID 2184 wrote to memory of 2756	2184	msedgewebview2.exe	89
PID 2184 wrote to memory of 2756	2184	msedgewebview2.exe	89
PID 5208 wrote to memory of 872	5208	voidclient.exe	90
PID 5208 wrote to memory of 912	5208	voidclient.exe	92
PID 912 wrote to memory of 6108	912	ui.exe	94
PID 6108 wrote to memory of 3672	6108	msedgewebview2.exe	95
PID 6108 wrote to memory of 2288	6108	msedgewebview2.exe	97
PID 6108 wrote to memory of 2288	6108	msedgewebview2.exe	97
PID 6108 wrote to memory of 2288	6108	msedgewebview2.exe	97
PID 6108 wrote to memory of 2332	6108	msedgewebview2.exe	98
PID 6108 wrote to memory of 6008	6108	msedgewebview2.exe	99
PID 6108 wrote to memory of 6008	6108	msedgewebview2.exe	99
PID 6108 wrote to memory of 4552	6108	msedgewebview2.exe	100
PID 6108 wrote to memory of 4552	6108	msedgewebview2.exe	100
PID 6108 wrote to memory of 4552	6108	msedgewebview2.exe	100
PID 912 wrote to memory of 4808	912	ui.exe	101
PID 6108 wrote to memory of 636	6108	msedgewebview2.exe	112
PID 6108 wrote to memory of 636	6108	msedgewebview2.exe	112
PID 6108 wrote to memory of 5792	6108	msedgewebview2.exe	115
PID 6108 wrote to memory of 5792	6108	msedgewebview2.exe	115
PID 6108 wrote to memory of 1424	6108	msedgewebview2.exe	116
PID 6108 wrote to memory of 1424	6108	msedgewebview2.exe	116

Views/modifies file attributes 1 TTPs 2 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

pid	Process
872	attrib.exe
4808	attrib.exe

C:\Users\Admin\AppData\Local\Temp\voidclient.exe
"C:\Users\Admin\AppData\Local\Temp\voidclient.exe"
1⤵
- Downloads MZ/PE file
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5208
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5208.4592.1777530804768280408
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2184
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x118,0x16c,0x7ff8e08fb078,0x7ff8e08fb084,0x7ff8e08fb090
    3⤵
    PID:4668
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1712,i,8283091545715137526,2338983524240876331,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1720 /prefetch:2
    3⤵
    PID:2560
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2032,i,8283091545715137526,2338983524240876331,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:3
    3⤵
    PID:3708
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2372,i,8283091545715137526,2338983524240876331,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:8
    3⤵
    PID:5032
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3580,i,8283091545715137526,2338983524240876331,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
    3⤵
    PID:2756
- C:\Windows\system32\attrib.exe
  "attrib" +H C:\Users\Admin\AppData\Local\VoidClient\v
  2⤵
  - Views/modifies file attributes
  PID:872
- C:\Users\Admin\AppData\Local\VoidClient\ui.exe
  "C:\Users\Admin\AppData\Local\VoidClient\ui.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:912
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=912.5352.13542823944856941105
    3⤵
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:6108
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x174,0x7ff8e08fb078,0x7ff8e08fb084,0x7ff8e08fb090
      4⤵
      PID:3672
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1872,i,8855074510885608866,229943453737219046,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1820 /prefetch:2
      4⤵
      PID:2288
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1692,i,8855074510885608866,229943453737219046,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:3
      4⤵
      PID:2332
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2244,i,8855074510885608866,229943453737219046,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:8
      4⤵
      PID:6008
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3500,i,8855074510885608866,229943453737219046,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
      4⤵
      PID:4552
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1664,i,8855074510885608866,229943453737219046,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:8
      4⤵
      PID:636
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=760,i,8855074510885608866,229943453737219046,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
      4⤵
      PID:5792
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4644,i,8855074510885608866,229943453737219046,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
      4⤵
      PID:1424
- - C:\Windows\system32\attrib.exe
    "attrib" +H C:\Users\Admin\AppData\Local\VoidClient\bin\lsp
    3⤵
    - Views/modifies file attributes
    PID:4808

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1298086481\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1486812215\manifest.fingerprint
Size 66B
SHA256 c236a2ac7741d48e1c56980652331cb3f1f12baf937baf0b280600fbafb143e3
MD5 c28ffa45708f10e3a35143ed2708782f
SHA1 84a03f2615333c9311dbf79d6f58f56b5c009163
SHA512 beac0eacff45a152eb2a50f4d72db2933b8f8ba97e6f0a9f6811abe866fef5c7c83068151915dbdffaccaee5d0cd335d182671f44dbab6da2222266ff8a28ff0
TLSH
T169A022F3F000F02030022F8A80203C00C8A23BA80C8020808000BEE0200322A3A0C820
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping6108_1486812215\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping6108_202401767\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

ui.exe

Path C:\Users\Admin\AppData\Local\VoidClient\ui.exe
Size 17.0MB
SHA256 76e47cc6961c848938ffb75ab35e9efd3d20d0be462766f0ff9975e42983b52f
MD5 7ceaca14342d8abcfec2ffcc94956d93
SHA1 abe86eade3f14d6ec9fb973960ed5788e7cee47c
SHA512 94d706176ea25b71d1adb3dc717c16f0bdc32653eb52100770002cc382c0e1a43ef6e18cad1e98b5efc22f8d9b57ba3090f076467ecd5bae7edb639c8b1d7070
SSDEEP 98304:XBq1En9n+nkjFFhDZUjIY/yI7XcN6O7AJ/5HFv3ogRhqZwBhlv+09q6SV5ycbhoD:r9FFFvUjtQEFABIJr9q6SLoGAM
TLSH
T15707F6217B5A99ACC05AC474834B8AB64A7170CB0B39B9FF44D496393F69BF41F38358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\VoidClient\v
Size 22B
SHA256 a5727a6ad5da9d3dbc22eec9249f0e12dba87939658a7633868125518e73d55a
MD5 5e840f2047328a68c5cc23fb553fac76
SHA1 2703dc2ad606ad2ef819cb913fa978d55e0183ad
SHA512 5432345fc5af57c07694e1c80a9623fe63193018c6ba7e5530e34b17bf84dead280c41dfa1e94065b160519cbf56393c7f920b0c48fea2fa0c60b70abeecec1c
MD5 SHA1 SHA512

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0b6031f8a20a79b68b491070e0fe369bb81c2c8734ebcdc418771507e4d6030a
MD5 a3d7f6279d732a15daed8a68717b0f85
SHA1 a6a48f5c85acee698203855a92f7995c4e8f89d8
SHA512 d754b2f96ec94d9e6da689dd69b9f0cfb54a4e504e544db3234c7dc2d5127e187eb5137729e3a211b9cf1db19df45cbf94ab762fe38bfe20e337f067d6122a84
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 5a37466b655970380f464c7daa85d1a3c57c6267df51ff0aef4310522e63403f
MD5 dd3e314987fec959dd355485dc5f9ba4
SHA1 178e5c0ec9d69ccc82d6b9ad7e04002ea53cd736
SHA512 e8cecc8fd0cde27468da316119a0156be7c80d7cf9e782e2d5dacc08d6182d65c2dddf12d90794829a484f7ca18f76a526333b122a88c88afe841ff11ef5e12e
TLSH
T171D0122637121174C0146172114366490900C40B410641009C38D52E1E540D40943442
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c6f396ef36159edef228b23ad794b5486be5800bfb25f2c26acd342278f93cc2
MD5 06c96df75d37c058030e59996e60df31
SHA1 1d58dfccb30fbd75835e25acde0b8954c9b54aa2
SHA512 c431459bf573ec6892d95e208684720fcff53c5aa67545fa7f80ff44a80a62eaa22d59878e749cc874975622b43bbef64cad2b85cb124d136b7e44559bc7381a
TLSH
T101D0122633120574C0146073118366490800C50B400640009C38E51E1A540D40903442
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 5018fc815b3f112d286239e7fc7869bb0149138da8622685e7c2fa91df79381a
MD5 b7ebcc608958fb3368c05e9793b9c720
SHA1 ae905830ffd49c1cba29644931aba274f6bf833c
SHA512 4c533c1c6b576bbd3e1c96e87fb3f4b6f3571c0a31fcb6dc1343abf603c0df5b7503353ca854edf24ed23d3c520c721d49d3e0fb8a3b4f7fd6bb6ea7fa17900d
SSDEEP 3:MsFlYhXllLlX8lN6q3Xll+M/lg7L:/Fiz10P3OM/lg7
TLSH
T1F41302DED790200EE20E0A30614D8B6057B0D905C5D60362189655615EA87004D132C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 69e28799e82e5beca55a114302f30e2e05955798564b304130250e76a8deeff3
MD5 61a8e0dbef69965759c8d9b9f0b8b211
SHA1 86912b2117a1fe1f4341c1cba64b6c7ab0dab45d
SHA512 0e98fcd60b0710c313df48868862b6523373de0211361b363b71418fe8eb2d6885a4bd6bcd65b35f6fa7a47f77132982247d759fefe33df6899f3da0344b4d53
SSDEEP 6:/M/B3V+1EUEP8m3l8x7Nj7NkwHRxaDfFz/qwFlVaVKPxFRs1RplVaVKPtb:U/uEUEkmS39kwU/FloVKP4ploVKPtb
TLSH
T19044D8CD4F465481D520917DB0F4BF2A562EC49B15EA5BA3B840D9034CCB7CC5811A18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 224a5593635d54598218503a82ebdefb81f499ecc1984ca453f3fdc3a81008a9
MD5 f075357d396182921fa46abff16b1819
SHA1 73e26ca1a04a27c10a402fbce4265f14e341ad19
SHA512 212bda945467ef49820fbb5e3223034666dda3f115ee43176565fa96fd0e938853f3512a3a908edd324ca5f021b2bc214bea2953c9b72d552b9b33afecbba8e2
SSDEEP 48:N6sx8WlPFBXdqitAUnJtHOFwalcvTNuvQGP6YrhWPaUYF:rxRFBtqnUnHuGvTNgbP67e
TLSH
T159250C822EED9949DC284779B6B65C8571B4F8D0314F657C0CD1BB5D71FA0E117D3828
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 e32dc07134864d82935c2102ad8774c327c681c6a226f409ce1cb307f179aa2d
MD5 adde6a5cb21a2bc46b6ac5a3fcc4d832
SHA1 c48e656c7d1ee76355d03cfd41d193f4ceb454ed
SHA512 78fc05bd12e6cef25572510cd47a9706baecab9e5c7cd81c538317065882dc46160b40f529ad4f09ebbf16ab95167aa18aed175556fbb448ef966919524275f4
SSDEEP 96:DYZS6MVMtfMB46MSooGbRvqrJgkgTSrNBPlQqRvT8unWFYEmyz1WIt:DY862pkRyDgTAPl7VAu+ayEY
TLSH
T1E0164CEB0F70E447D952EB7067C4DE2C6CB066577DCAA582240780E919E0FC5174A5AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 86cc45d1ebdfbc3dab2abdcba97baff6d1c1a791f88e6eda1c9fa53ab4d78bc7
MD5 a30feeca0f7bd366f611a3fa26d87c12
SHA1 2a29d64f9a2466e53d4aaa6fed498c38038fc44a
SHA512 df495ad81cc99a299c1ac5fcdde371d8f10e4b239b223f6850b5e85cb5ded8392eff52ad277ca775ab70abc022d9b107d214604dba341b7259e84453a454c67f
SSDEEP 3:Lstl8lNllkll/l8sO0lNnMsl/:LsX03lEt8smsl
TLSH
T1FF44043D47431145C34403F45040C7700335C40317CF4343000441104C517510F134C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 6d74bc628bee9cfd23dc22b668b04f82b7975efcb8ec53011c8a41d05ce923d3
MD5 6e7a04db21503ef148eb0a2ed448c3c6
SHA1 66199037d531491c51fd03538e3b0dfd857c22f2
SHA512 ff04974b1c78461ac487f4dc3b596270a91fd1ba942795088015e40c44de3f13a244c574e4cb17102c06cc04a892774c787801aa8c67ab474baef2259c53aeeb
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 1836b11f0cb41b425cbc035207d135f48c519e64c7ba23b27a2c87bfa7865319
MD5 e9db1dbd6ebb048830c0f896224d0608
SHA1 76653037851d445645a718993709977aeaf0e015
SHA512 026db182729ab8848394658d2ec663bddbc364412d27cc701dfadd89fd08b78b8266d828cea9a2475cabe59bdca56216845af613b6d36e9546e16aa8bd19b063
TLSH
T12CD002330174F853EF4D0DBD39D354467535051F56877E1151922675A604717D9529C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 28cfa3a6947945e8fbddc16dbbb65f24fbca644670e1854783bffdd0c464159b
MD5 503b33b587f03b16a0860432e5cc6bc4
SHA1 c5aabeb486993dd637bd87903854b6850a8942ff
SHA512 0865a84531c8dee384d3029afcc7dcdc4bf443aae5f465db20ebfe4cee378938c31d723004b9d74d3ebfd307e68683719c057b54c288c79aadf6e8d5be99e61c
TLSH
T1FAF065F31039E807FF0D0DBF2AD27786307A890A28477E30638213B5B600742951E488
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 67be63f59c8a81c3b34ba6eb08e9a66145ea0f4bde17f7ded6efb0bef8fa247e
MD5 9aaba6ccefa69b89227bd265f5b54847
SHA1 ed664e0507d309c38c69f4703ea10a5f01e32b28
SHA512 10188635e5f6aaa1ba123168925ebf6dfded01d630addd516055430008998ad58275a0e8625c6fb48753f85b7b96dcfc428cdeb00716cccfc6e10ee0e0587335
SSDEEP 3:LstlNllkll/l4+l:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Extension State\000003.log
Size 114B
SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
MD5 891a884b9fa2bff4519f5f56d2a25d62
SHA1 b54a3c12ee78510cb269fb1d863047dd8f571dea
SHA512 cd50c3ee4dfb9c4ec051b20dd1e148a5015457ee0c1a29fff482e62291b32097b07a069db62951b32f209fd118fd77a46b8e8cc92da3eaae6110735d126a90ee
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Extension State\LOG
Size 297B
SHA256 0c452bf07dbd790dedbb5903c6eeac9c321c3f2c1904dda81b6a1d13140196e4
MD5 95ef1dcfa3c2f00e3118c272423610ec
SHA1 754059d0a9828579abaf03ac62b83d93600af5a8
SHA512 3677eee499086722238bc31fb16e6902cac5985fcdac8bb83d0129a4d28090e0f9f7ec225defc7af2b777b483a34aab39538a6a69e12fa00b2efef2a71a9b61c
TLSH
T1E1E07D089A4D847B0A49CCFBC6755308C7E13406F7CA37044F1AEC4C244354EB548B16
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Favicons
Size 20KB
SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
MD5 babd43551f1b29eb82e221460676126a
SHA1 e9bff307613a14b35830893bdb6d1ecc931b425d
SHA512 5ab681c170dbd1d374bd66edd02cbe21272819ef7389ad1e886bcba112deb91eb68fa930747986da5ca794881939570013e38edd9f8e6f718f7d202e74a82f41
SSDEEP 24:LLipxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:UBmw6fU1zBmI
TLSH
T1C292EE075E383407DBA10E7D366B18768E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\History
Size 184KB
SHA256 6892af40bb1eb24a3511249303ce0c193f433d1d31d3329ebad5a6644dc4222d
MD5 057c783e2dd71c1a5b3b0591deedad18
SHA1 b77fdf90fa803a560d9f3dba9ff7ec322e96ec95
SHA512 cfd7f41fe8124a14c079dade3a4de8e9f82d5d756c5cea0eba2d07963946023b51b3827faea6483fa3c3ab6bc2f1bbc70775f24afbd9f70c96e72067f7edf7d6
SSDEEP 192:HBdqPH+bF+UI3iWGVoWN3qL/lVgZQW3/V:hdqPIkUI3ijVoWN3qL/NWvV
TLSH
T16E040D5E5F643612CDBD513668E749B3587DF02F87136AC62C6108B1CEE2652B02C4FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Network Persistent State
Size 821B
SHA256 0d674d565d5c9119105a37b55bbf9902182970f62b4dc94a91b1b5ac7f1f641a
MD5 43e5392594c89b1f6de05c3383598d36
SHA1 0984c57cfa04211f4d1a8a21f8eb1de6b1e01c62
SHA512 c3067875d6dc46c6e411919c78f285fe5bd593e25f08141128e5453075380e38dc46535f420615c2e8562070f753928ca700fa9d4710c803056a8872d2ce5e09
TLSH
T119016BA6C2E4C67D8A4157F026347913CD2E051992282E3BCDEAEBDE57E14B1D21050F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Network Persistent State
Size 362B
SHA256 14ad6128f819fde1ecb8e68f870bacf65fe7704b43a8e11cff39f6a71f890179
MD5 346ffed4d918e5eebe54c19d768cbec1
SHA1 70111ed42638f453a43fa363d465faf9796abd51
SHA512 e18c52f5432c67fa7cf1e24ace89c3b41c6b14dd0d31e96b4934dde9ad68be05413be640f72acb8ff92833e2aeb4993dfe130ba4b1b3e04daaecf224602b3fa6
TLSH
T16DE0C0A7C2E4C9BE474183F026347803CE3E040A93182E3BCDF9B75E47E10B8911084B
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Reporting and NEL
Size 36KB
SHA256 951ea521116baf347ce89b628eabc22479fb8e3edfb7597659db2174fbb59804
MD5 fa739570350b78ef09e5d8ca61d0d71f
SHA1 d4e932ca96e76aeb84d3a151d847658df6a5555e
SHA512 8dc44c2f20c0a051568e7479e4553dbbf8ad4ee6b4d5474d8493c4b957f563f858918d862621ff7ccb190be693877dfb0a1245998925f47f9976d431a007ac86
SSDEEP 48:TqIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB:+IEumQv8m1ccnvS6
TLSH
T1BDF2149E0B1D3A10C4F89674EAC10DC37D7D141D8B96EFC45AEC06F2FF866A2A538429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\TransportSecurity
Size 356B
SHA256 0cff6e3e0e0ebeeac3c71ce6128c146f23f03aec7ef0d74efb1742e778a9ea21
MD5 5a55b45e70ce901bbefb5069cbb73f55
SHA1 d2d7745c49edaa9c702faf7fbeee435870142ff4
SHA512 0f3f4d89ba84710b273d868598b488a136fc33d053bc4ad4d40d2b092dc2eeec16458a81630afb06fb8b31a97746edd6e0fce3d40605e54734d2909f46d50ab5
TLSH
T157E020E7A0BAE53750AC4A7378447C416B3EB93182D17AF4D667817C70C19E74502832
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\TransportSecurity
Size 189B
SHA256 a16092118298744fea674f4bb352a74abbd1567552a3fce5825289c040a7dc36
MD5 361cfaa5f6fdcb054b286d75c5bc2da9
SHA1 eb6f8336960e9d73d96a8b9504f3f4890e7cb7a3
SHA512 e5658d054e75b6ae84cee754221215ddfbcb3b52cf8bec5f1945f76f271a023ddd460582b1242c1a429b48802b4351d8e5ebd149ccd1257b33efb2574b3bfe44
TLSH
T1D3C0C0D6B075B43301EC46737804785193387972C3A12AF0CA42407C78C08E30D40831
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Preferences
Size 6KB
SHA256 926af96357643d6281a968d8af72e6f8b42ad61494e700e5ace1c80012e3f438
MD5 eb7f44689e9f6cdfa25091827e0aeaad
SHA1 4176d80992e34c4a0696240e493168e754e6baf3
SHA512 9ae98320f5aa4fe6b49c7c38860fb18c997e4e067390b9ff4916df00066c22c413a1be8875c327c28d112b3ded1218dd77ce3670cacf5d17ac4e24f0657e36e8
SSDEEP 192:stN50n/0xC85fYZ8paE1/S+WiTS4wd8kCK8:stNqn/0xR5f5/VVw38
TLSH
T187D1CA039E6869774CC7E5297A35FB12D2F6105272D10E98EBFC861C08E96CC621790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Preferences
Size 6KB
SHA256 52a38b5c29c5191f9ea3730471c78a8c7bca8ba86577a670a506120a8827d564
MD5 63b04ff358984672e86177985422c957
SHA1 a8264aa1d6a9f51fff597d46bd5c9fd76bc3b550
SHA512 bc8216dc6cd69f9077be6442ce2c36bb7b29182065aa32655bf3199b5a38b048ecb2af9d979dd79b00d912723670e4632703f987aed873ebc71d02fb25cd01f9
SSDEEP 192:stN50c0xX85fYZ8paBm/S+WiTHIQYj8UoM8:stNqc0xM5fJ/VEQ68
TLSH
T13AE1AA039F6869774CC7E62A7935FB12D2F6115372D10E58EBFC8A1C04EA6CD621790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 22e73a3fa58c39f3d3722fc555e4030db87415a42504e9041b456587509e7408
MD5 d7f65816d69b250645002ba46d25bec8
SHA1 54def153a3bbd140227ddd5193ed63ebf43a5ba6
SHA512 6e3b5fa7421c66a1b42b4d059df8c45cacb407db89e6d1038221ff56e10dc496860d72b8be73183f2c7bf40324e471fb8fc01e4aabef593dd049c281e13a8afe
SSDEEP 96:HlVijPlf/ROoKOpkF5d1ViO7sMaTEv9V5h5pg5+eeKPwPwHPf2weTyS:HCbWG129l80wH3YyS
TLSH
T155D1C6A7457DC534AF445BEBEC387ECA99A601CF98DA481A97D2C08807C2EFC21DE4D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 c7722db1cc754cac7cee44be50e9850352a1410c6bd39dd10ef1c2bfeede6951
MD5 d26ab1378bb25abc1b1ba76c09f46658
SHA1 1c150bf812356e6f9f5ebe9259ad0e13214633bb
SHA512 46d59223fe79cafa781c7bb8ce08998c10bffff433617684189e25972b20a89afc7b544c3920b159b09cd9bc1a7cf42d28ea9abff1a72007a8eefb62fba36d21
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SharedStorage

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\SharedStorage
Size 4KB
SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
MD5 b9263bbf24428aaca95d04d04f3aeb6f
SHA1 5346015345f6df766df4bc9b42da076f6fdd440f
SHA512 5bc2978bc96e1347500db552e2a2dfd9e5df25c8e16d3ab57e5519de43cb9c08f5aeefd1a6f6947d7fa253505918763b932f622636fc2a7a429fa72a5b49c7cc
TLSH
T1EE810440534000F1D05407F755D1130C0F07D3D4D5410F0355010041CC51D445C70FC4
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 7b368a66365e0fd622b94fbdf277f2cc074567100cca2317934aa4362267a25f
MD5 7242c6699851479db7703751fca7ad24
SHA1 f25ac4f3f37b113c991fe4ff2a5a73cf16e76b91
SHA512 538f404ee10aca9b0b59bd1930778425214301225c64e121abca4e98e9096bc435ad3dd539cf478f53b6bd55586b5951dbbc0c842d0c758fde5e455a49d6e617
TLSH
T178B012907B40953BC4F84E3D0284C7A06B60E203E9005413485C8F320EE63E52E018D4
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Site Characteristics Database\LOG
Size 325B
SHA256 d7704cf741d7b908134dc7468cb92f651f8a97f0aa30943207c98a753f97133b
MD5 32eb9eb1cfa96f3966b4edda2b8aa955
SHA1 4cc94039ce033b29ceb1cb5d4118c72115cc3b74
SHA512 66cd603081c14fecd8934e0bad059f2d8eda9088208d1f5622c7c2eac0f0972dbf3e3884ab744623d117fcdf29ca5c32716982bb44a50a49675b39624ef535f3
TLSH
T1ADE020105BC9897F078544EFA231E308C2F33405EBCE26110E25F648150B44CB145611
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Sync Data\LevelDB\LOG
Size 299B
SHA256 3c2bc51a544bb60b5ccb0fd77e8eb5e028250f760ac7ec1ddbc0ae5df348f780
MD5 9c263254fd96483bbd6acd12b60bb0e3
SHA1 6f33591b8eafb8126a000b8500dbddf0b1605c0f
SHA512 63fde4c5b78bcbc21733e9a6fdd2c91d79192388d1b17a25352c984d55f2e6b70fa580b5e8dcf4f8da4310f8400570514ac1ac1d4563738cf1240dee286d5a04
TLSH
T197E07D34DFC9817B0984C4E78671A70AC2F03806EBCA37840F15F508290304CF1A8552
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Visited Links
Size 128KB
SHA256 128eb6c59129158f8d3b19dbcf1a35d936c22614ce0961ba07393eccdc47e809
MD5 8735f269d14120cfa8c37323505a5dd7
SHA1 0aa22bb8a37cfa0f1b439343ae7001a50b52fa61
SHA512 29159f42cd1bd4ab3bf06ac0a90ae223077a9d6a92186f590ae35d001592ff5dd4aee6985c4304f5d1eb8d176a1575fab29ca186a8130407b8c3152654b8ce51
SSDEEP 3:ImtVue+EF/llIz1:IiVue+881
TLSH
T12BD3045F03130400F04500345455CF471471F04D1453440D17FDC5155444013C103D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eda0e618-32dd-40f7-8979-c09e569d777f.tmp

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\eda0e618-32dd-40f7-8979-c09e569d777f.tmp
Size 7KB
SHA256 e25162a9eb76ecc8746d05306acf63a10c8548cee48acd5f4841ef43a93e1eff
MD5 5c2e9d7e4529566c4c10e780f17f07b4
SHA1 458d48eccb62da4fb01a6e1185cf16259dab41b0
SHA512 c0d306d51bb863904fd961e8ce9b4dcef6eb4f2a13d65ced960d15bf28f6bc6acec87937697a2ce92ad4e77546b76ef9c10d15112419875a190ec12bd742aba7
SSDEEP 192:stN50c0xHw85fYZ8paBm/S+WiTHIQYj8QoMC:stNqc0xHr5fJ/VEQiC
TLSH
T113E1B8039F686D775CC7E62A7935FB12E2F6105362D10E58EBFC8A1C04EA6CD620790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\shared_proto_db\LOG
Size 297B
SHA256 9bae50c95976af76cade445b3d0d6df55106d76948a1410050183c702c09e03c
MD5 ea06a8819df6acc5e78bd461726e09eb
SHA1 915e1b0013ce48147be9c6c4d4eef7225336e502
SHA512 39cb542d048bd7bdb70ae7417273cf6c3ad1f12449df6d59d3943227133a69fc0cf0c1714ec855653c4dc45f6f6b567c7457944b4235122c95ecb9ac57d86a33
TLSH
T11AE0CD04FE8984BF465445F7A1355345C3D83C17FFC92A490F11E94C144355DB559653
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\shared_proto_db\metadata\000003.log
Size 450B
SHA256 d71151268baa000c1809bae3b6f24631689e5e01e665ec2e856c23192b60ad5b
MD5 6536042abaeab2c30f6b5538d109ff36
SHA1 1c3cf5dcbccb31a9672dcb15d6f56c7c4862e2a6
SHA512 750c507129253f64f561ab7d88d60d7f1034f90ec99084b3e210203d5e4817792ec62e9be4b51da9921fed03e97a4d2c00985a55c3a978202d17b9d870baf442
TLSH
T1FAF04616F7748058E01A863A64BB972223A4D4014FBCEE0B883664222F7AA141D872D4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\shared_proto_db\metadata\LOG
Size 315B
SHA256 e8b447b183071a31354144298355fe0ec1710d1f6162bb5887cdf075cbbf2db5
MD5 412d809e9a5d2385b9ddd6bdce069405
SHA1 962ebf370d5c20b6fd0033ad7b39ed8189d4798c
SHA512 670e7fffdd8fbebae7bd964b08c5df47922ea08d937e5bdbbf686335ef21ad6b0945bde96ef54adf8466d881476ddf5159fb714cf34c0c2332ff9126cce7a19d
TLSH
T159E02600FE4980AF464444F791719385C2943C1AFF892F060F11ED0C184348EB55D252
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 1KB
SHA256 e8f8b38ace121c2fcacc9b26bfac924ed5b1effba2069370b88afc8162b6aa8b
MD5 556ea2f39ae7c4b6c8eebaea032a5a4f
SHA1 e783d6ce290e4bf97693f37a449b9289537fd754
SHA512 887c2edc8b307d0f815af0c923fc820cd881bbfe15c5dbddbcaa4cf260cc459d7e488caa522ca6249f1f70ff44118b7c2cdbc13d8c97cb6b93b07167ee3df514
TLSH
T14531A973B8906B32EDE16266F143BB472D30112782614F44A0FE0B1D01DA1CCE6B7C23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 2KB
SHA256 578a148051c7a66ce5637e59eae96b5e2b8cd99e537cc5a82f732442cac7210b
MD5 25ffb349874abb533aa9c662070a219b
SHA1 ceea088f4f2751d99027fc08f7bdc5b3a969d1a4
SHA512 5bbef8ff6a76f320756a12a7886e481e3ee37dab45a637d4ffd951f07db24048a7a48a5b6426a13961697c76b6138fae9ec6bd52f6bf7863c284a23aa53bb264
TLSH
T1D151B4737C14AB33C9F29A25F94A3B126E79512396A22FA095ED1B0C01DE29C6352C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 3KB
SHA256 5ca30969e819b2db2512a01154c9fac4e2b643c486c7c9dcde2c054424eaaa90
MD5 db591117b1e8747a10ce86470b0a8df7
SHA1 742f2ecfeb168a2859631dfc7a9a7c524319a9f0
SHA512 73655e25361342b1fa1cf6f5829f4eff368ddce062ea5fd92cd52734dc3b822625b75361eb6c8b3601395f9c5c411e64f3a920374e19cf05e712ef06d200ffd0
TLSH
T1CE7194377864AA278EF29A11F8863B067AB55127D5953FA8D5FD0F0C01DB2982392C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 4KB
SHA256 615945e1f3efbf76885591d645f6d848c8dfd8f707666efc1757723b7ed9a4a2
MD5 4e2acea8fa03f90a0017b44ce745f41a
SHA1 d0d41b38080e251cb26400e3deb78d79f0b48f36
SHA512 580604802885b681d2d9cc7976b9b5eeba753d9133b390c2eb061b282aa48c6af37ee4aab54326873dd9d03aeda3c7c5c501a11b14c776e4552f256c1404a410
SSDEEP 96:zuvEk3NkCEIfo79utl+8Frh/cInURLl8DotoN5lzDeBMZEd6+jZW3QitlFa:zWEk3NbiRutHoiDUapeMZb3Zo
TLSH
T10191822679A4AA278DF2D945F98A3B066AB45123D1E52FA8DAFD0F0C01DB2DD1342C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 16KB
SHA256 27a3cbf060c09b91ec8538b2a74693283aa2986783363f69a6f11e1d8a1deca3
MD5 af5336821a5d01be29c7df22940d4347
SHA1 e8f39378a42088c039892b34b4d974a63e410736
SHA512 ab588b6a1bfec20775875bbbd5ba747ff84f1ddb0743f4b09dafed42456d5fb2fcab99b6d0a3bccabf8c6cc42b8b20d0c9d25d309e230548c0c621a0d40c15b9
SSDEEP 384:zhfTPLdSWCUkEaV8DNYi0qnSXaqZv6k3Nbf4c+MEyu26C:JTRMUVai1SKqv79+B66C
TLSH
T13B72AF636C75EA1B58BE9926F617360B99F89156C2EA3F1DEDED1F0E06C52C80312C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 4KB
SHA256 44df764e3fa8929c1da2428943f30c43f91bf132f59b0c287940603c8905554b
MD5 c07656cb5c01d49a81f831c2cd120d4f
SHA1 de0d7bc7ce99dd1e7fc8bd3b0c4aadb929c8f317
SHA512 77f94955ee4ef11ce8308bb41917d66d8e6d14d16b2f5bb6b7739aac39120b5a6c66d819ed7e91bc6ac37e62bf22f88b8e347476bec3739d52637e5e2fb73bf4
SSDEEP 96:zuvEk3NkCEIfo79utl+8Frh/cInURoDotoN5l0DeBMZEd6+jZW3QTblFa:zWEk3NbiRutHooDUaseMZb3oO
TLSH
T1009193227D64AA278DF2D945F94A3B066AB56123D1E53FA8DAFC0F0C01DB2D91342C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58294d.TMP

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State~RFe58294d.TMP
Size 1KB
SHA256 0b94df6de396503d258b4dfb8a2f95967c5a2ae544a65b126e928d9d008bb1c0
MD5 499d40c75144230f7262e0b8383ca57e
SHA1 d80d72390cb5bc22e531c8ed399be5429d3932fe
SHA512 f4df4af6a38add5166435ec40b7c90e17132318c0c1aa798b0f055fffa54dcf04da172853f26c2b0ed595d40b7569fc8500f7fd35134848510d189227d3d3567
TLSH
T116216573E8946B32E9E15525F253B78A2D60512782249F08E0EE071D06DB5DC96B7C23
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\ShaderCache\index
Size 256KB
SHA256 b50265104736f0cb24f680d30779c88744fd97800f312d5a4d22e2f246045ce6
MD5 923c458553934f988638bc7465c60173
SHA1 e549b0d1f1b87ee00b2cc01f49bf506118c3966f
SHA512 d9acfc6e33cf73e05faefaf22f308760c4675962c50db8e930120249ac8431639e4e5d7265167ed231dc19ebe6a1e9266e9a6737a3b1ea81d76388d63badb75e
SSDEEP 3:LsOllllklkXl6l:LsUlPO
MD5 SHA1 SHA512 SSDEEP

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2184-454-0x000001EB71B60000-0x000001EB71B87000-memory.dmp

Download

memory/2184-455-0x000001EB71B90000-0x000001EB71BCB000-memory.dmp

Download

memory/2184-452-0x000001EB6F3A0000-0x000001EB6F3CC000-memory.dmp

Download

memory/2184-453-0x000001EB6C9F0000-0x000001EB6C9FC000-memory.dmp

Download

memory/2288-482-0x000001C047510000-0x000001C04763A000-memory.dmp

Download

memory/2560-337-0x000001DCA6E60000-0x000001DCA6F8A000-memory.dmp

Download

memory/2560-25-0x00007FF8FC900000-0x00007FF8FC901000-memory.dmp

Download

memory/2756-130-0x00007FF8FC900000-0x00007FF8FC901000-memory.dmp

Download

memory/5032-76-0x00007FF8FCB60000-0x00007FF8FCB61000-memory.dmp

Download

memory/5032-75-0x00007FF8FBA00000-0x00007FF8FBA01000-memory.dmp

Download

memory/6108-464-0x000001F2E6FF0000-0x000001F2E6FFC000-memory.dmp

Download

memory/6108-463-0x000001F2E9060000-0x000001F2E908C000-memory.dmp

Download

memory/6108-466-0x000001F2E9DE0000-0x000001F2E9E1B000-memory.dmp

Download

memory/6108-465-0x000001F2E9DB0000-0x000001F2E9DD7000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads