fe1ecf93ba392ce84330f5883cdce95c62376f3b320acfb18c865cc2fca3b7e8

Analysis

user interaction
yes
max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/05/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
voidclient.exe
Size 10.9MB
Sample260506-ppwt6aay9x
SHA256 fe1ecf93ba392ce84330f5883cdce95c62376f3b320acfb18c865cc2fca3b7e8
MD5 088a32bc33fb1f0c2fe1e803a15f47d2
SHA1 f5150949dfb5c169797645e853297707df8897e6
SHA512 480fdad32be245e0a93346678ad72881105aff5325e70db3391f3d1de5350f4d9f1fabd46904e2a88f799a206a053ed0cbdd3e899a2e65611c015a4887b78099
SSDEEP 98304:ib6cEIGKNWAzR68qXTrg7LQpAJsf/haD3pi:iGKLz4g9u/oD3c
TLSH
T108B6D5257B5A99ACC05BC4B4834B4A76497134CB0B35B9FF4494A2382F7EBF42F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
41	4360	voidclient.exe

Executes dropped EXE 1 IoCs

pid	Process
632	ui.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	voidclient.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	ui.exe

Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
30	raw.githubusercontent.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 23 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_290708565\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_1283778602\protocols.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Filtering Rules	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Filtering Rules-AA	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Part-FR	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Part-RU	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_719358896\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_1283778602\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\adblock_snippet.js	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Part-DE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Part-ES	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Part-IT	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_290708565\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_1283778602\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_719358896\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_290708565\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Part-NL	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\Part-ZH	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5904_719358896\manifest.json	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134225443370308612"	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
1504	msedgewebview2.exe
5904	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4360	voidclient.exe
632	ui.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4360 wrote to memory of 1504	4360	voidclient.exe	85
PID 1504 wrote to memory of 6080	1504	msedgewebview2.exe	86
PID 1504 wrote to memory of 4728	1504	msedgewebview2.exe	87
PID 1504 wrote to memory of 4728	1504	msedgewebview2.exe	87
PID 1504 wrote to memory of 4728	1504	msedgewebview2.exe	87
PID 1504 wrote to memory of 3260	1504	msedgewebview2.exe	88
PID 1504 wrote to memory of 4480	1504	msedgewebview2.exe	89
PID 1504 wrote to memory of 4480	1504	msedgewebview2.exe	89
PID 1504 wrote to memory of 4196	1504	msedgewebview2.exe	90
PID 1504 wrote to memory of 4196	1504	msedgewebview2.exe	90
PID 1504 wrote to memory of 4196	1504	msedgewebview2.exe	90
PID 4360 wrote to memory of 4136	4360	voidclient.exe	96
PID 4360 wrote to memory of 632	4360	voidclient.exe	98
PID 632 wrote to memory of 5904	632	ui.exe	99
PID 5904 wrote to memory of 3012	5904	msedgewebview2.exe	100
PID 5904 wrote to memory of 1448	5904	msedgewebview2.exe	101
PID 5904 wrote to memory of 1448	5904	msedgewebview2.exe	101
PID 5904 wrote to memory of 1448	5904	msedgewebview2.exe	101
PID 5904 wrote to memory of 3928	5904	msedgewebview2.exe	102
PID 5904 wrote to memory of 2552	5904	msedgewebview2.exe	103
PID 5904 wrote to memory of 2552	5904	msedgewebview2.exe	103
PID 5904 wrote to memory of 3288	5904	msedgewebview2.exe	104
PID 5904 wrote to memory of 3288	5904	msedgewebview2.exe	104
PID 5904 wrote to memory of 3288	5904	msedgewebview2.exe	104
PID 632 wrote to memory of 3468	632	ui.exe	105
PID 5904 wrote to memory of 3912	5904	msedgewebview2.exe	115
PID 5904 wrote to memory of 3912	5904	msedgewebview2.exe	115
PID 5904 wrote to memory of 2040	5904	msedgewebview2.exe	116
PID 5904 wrote to memory of 2040	5904	msedgewebview2.exe	116
PID 5904 wrote to memory of 1772	5904	msedgewebview2.exe	117
PID 5904 wrote to memory of 1772	5904	msedgewebview2.exe	117
PID 5904 wrote to memory of 3328	5904	msedgewebview2.exe	118
PID 5904 wrote to memory of 3328	5904	msedgewebview2.exe	118

Views/modifies file attributes 1 TTPs 2 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

pid	Process
4136	attrib.exe
3468	attrib.exe

C:\Users\Admin\AppData\Local\Temp\voidclient.exe
"C:\Users\Admin\AppData\Local\Temp\voidclient.exe"
1⤵
- Downloads MZ/PE file
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4360
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4360.4364.10901455478511997290
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1504
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x118,0x7ffecb95b078,0x7ffecb95b084,0x7ffecb95b090
    3⤵
    PID:6080
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1636,i,10055590405916249837,16788464101661000874,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1736 /prefetch:2
    3⤵
    PID:4728
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2032,i,10055590405916249837,16788464101661000874,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:3
    3⤵
    PID:3260
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2372,i,10055590405916249837,16788464101661000874,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
    3⤵
    PID:4480
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=voidclient.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3640,i,10055590405916249837,16788464101661000874,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
    3⤵
    PID:4196
- C:\Windows\system32\attrib.exe
  "attrib" +H C:\Users\Admin\AppData\Local\VoidClient\v
  2⤵
  - Views/modifies file attributes
  PID:4136
- C:\Users\Admin\AppData\Local\VoidClient\ui.exe
  "C:\Users\Admin\AppData\Local\VoidClient\ui.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:632
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=632.4204.13230406579945930329
    3⤵
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:5904
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x194,0x7ffecb95b078,0x7ffecb95b084,0x7ffecb95b090
      4⤵
      PID:3012
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1820,i,5239728061781124898,1675620765371413978,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1816 /prefetch:2
      4⤵
      PID:1448
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1844,i,5239728061781124898,1675620765371413978,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:3
      4⤵
      PID:3928
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2300,i,5239728061781124898,1675620765371413978,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:8
      4⤵
      PID:2552
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3512,i,5239728061781124898,1675620765371413978,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
      4⤵
      PID:3288
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2192,i,5239728061781124898,1675620765371413978,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
      4⤵
      PID:3912
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4628,i,5239728061781124898,1675620765371413978,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:8
      4⤵
      PID:2040
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4512,i,5239728061781124898,1675620765371413978,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:8
      4⤵
      PID:1772
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=768,i,5239728061781124898,1675620765371413978,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:8
      4⤵
      PID:3328
- - C:\Windows\system32\attrib.exe
    "attrib" +H C:\Users\Admin\AppData\Local\VoidClient\bin\lsp
    3⤵
    - Views/modifies file attributes
    PID:3468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5904_1283778602\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5904_2015679659\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5904_290708565\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5904_290708565\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5904_719358896\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

ui.exe

Path C:\Users\Admin\AppData\Local\VoidClient\ui.exe
Size 17.0MB
SHA256 76e47cc6961c848938ffb75ab35e9efd3d20d0be462766f0ff9975e42983b52f
MD5 7ceaca14342d8abcfec2ffcc94956d93
SHA1 abe86eade3f14d6ec9fb973960ed5788e7cee47c
SHA512 94d706176ea25b71d1adb3dc717c16f0bdc32653eb52100770002cc382c0e1a43ef6e18cad1e98b5efc22f8d9b57ba3090f076467ecd5bae7edb639c8b1d7070
SSDEEP 98304:XBq1En9n+nkjFFhDZUjIY/yI7XcN6O7AJ/5HFv3ogRhqZwBhlv+09q6SV5ycbhoD:r9FFFvUjtQEFABIJr9q6SLoGAM
TLSH
T15707F6217B5A99ACC05AC474834B8AB64A7170CB0B39B9FF44D496393F69BF41F38358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\VoidClient\v
Size 22B
SHA256 a5727a6ad5da9d3dbc22eec9249f0e12dba87939658a7633868125518e73d55a
MD5 5e840f2047328a68c5cc23fb553fac76
SHA1 2703dc2ad606ad2ef819cb913fa978d55e0183ad
SHA512 5432345fc5af57c07694e1c80a9623fe63193018c6ba7e5530e34b17bf84dead280c41dfa1e94065b160519cbf56393c7f920b0c48fea2fa0c60b70abeecec1c
MD5 SHA1 SHA512

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 049a016cc43509656f48e57311337e4d87ed94bfa53e0488ae1814dbeb2e7951
MD5 f6ab3719fd762b0d1594fda7697f24bb
SHA1 f46083120167ebf137e25331d7ece62a24010b48
SHA512 35ee00c538d92c528c1eeb1dbd6c2067e679c3309a2af22f3d8158013a024364e4bb5e6d6482a6724649b80e71660ebf9cf13827b3f3c03d6aaec1afe46bfc3a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 adceff695fd1720964eee544756d95139535caab25572aacc56e763dfda34536
MD5 684d5b983cf5095806748b421511797d
SHA1 e3b8333f5e9c6d528cd2fb738d6bd5a2c2eca3a0
SHA512 4877c7e7065c1af860e38afdbabadb878fa0827253640c6b3bcbe1570fb1021a6b579c7dcdbfef3f77971180205b71b207001c1c83290ccea368378e6500710b
TLSH
T1DBD09B327D911678C45127331551A55D1D40C60BC14A4145646666BF771C2658E56C63
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c1c3c7244804fe8beb5155cb2782a511d5a16b00fd6f089a61df255691f66acd
MD5 f6d9d6ee0c4edbc61b35e21720c6e22f
SHA1 79dc2a2b0333a83ea0c1a09444c6e2d0d2cd7e4b
SHA512 6a6ef0334fdc0ce87b4a1dbf9f8f2a793994b1751d38233761f063f6df5a583f57e3812a93f10c1519ea89625779454413ecf9b8282589a218c760f0d3fff797
TLSH
T166D0C031AD911A34C0703F33049294691D44810BC1450211105162BF3B283524F26963
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 8a107c77e6a07f6e89be39fc6f70a80e4719371be950cb4a63ee5e45116dcb59
MD5 5382efa8f38b7bd14dbae8a836b2aa50
SHA1 38b61e554e01e7e53752961bace5f855eeffe689
SHA512 1a2027dbc2a746ea741548308900bf612b48183bdf25b16dcd576493fc37643c662bad71d70b638439ccc5740ab343a20037f37291ef349fcc2fd229da37d802
TLSH
T10DD0C031AD912634C0703F33045194691E44800BC2450311105152BF3F293528F66963
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 cefa1178d00d143a106636cf9d7e3aa020dbc787d36c34e7477b2bc60cd90349
MD5 0eb89ba66fa6ce650b5e0b6d9d71bb96
SHA1 c3682f56073a8fd35b78b819336803dc7dfe1014
SHA512 dadcacbaf10205c1b42687f84c3a7e6371c5e3e9eadbc94f4d02e058ccaf5bd3aa7b101dd0222e93318b302b3e1936974ca47d66faace635b51bff49376b2f3c
TLSH
T112D01132328202BCC82028332002B20C0800CA0B820A8080A838AB2E2B0C2A08A028A2
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 468456974fd86b33647942820dce7284879acfab9e9e6eca008e1fdcf9006fb5
MD5 d1f604157b0745a40453afb93a6caa42
SHA1 3d5d77429b03674ebb0ba34d925ba1b09310df5e
SHA512 0644ce93724a57dedd8aec208e5a038e323a1b9871d5046d58a87c60479626693e6c8f25b7c7f7b60fd35aac133d2e660ecbd8f8d579ad1fc6703ae117a485a0
SSDEEP 3:MsFl/ll+l:/FE
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 6a98b3df43d59645d318ac4621ae18206d24ffa98adddd7eadc0f9c6a047fbb2
MD5 a947009e6cc581d6c9a508cbc7e6040f
SHA1 e0dc6b3514b8bf18e4df65563acc5f4c9996885e
SHA512 c6f3aaa5d8722ffccd82bf43fdc0274900a8d0337e7c6f1cf2498db4fe56ae2f33d8600a250a05fa10d271cfe9a35b3400f74742e408d159acb92bba8a6babfa
SSDEEP 3:MsEllllkEthXllkl2zEklslMlsl5llwiK/l:/M/xT02znEkEaiK
TLSH
T12D440445FFC00417C50470317013C7500374DC104511D743355104577CC554D0C01040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 0a79a795239c5527bab223f2fc1afd659f6ceb778f47775eb013a71275369cc0
MD5 856dc6137f118b3013b06128daddc26e
SHA1 a4ec4423ebff0fb6b81da265aa8f8702bee55093
SHA512 2baad43223a0bd59623c10a8d7ee9e56144690f2af13f7ce8e2c557aea77aa64ea605c738d93c56cdbd80f597dbbc223a349665ae59a68137a0496889995aac5
SSDEEP 3:LstlNllkll/lXBeKKt:LsX3lEtxe
MD5 SHA1 SHA512 SSDEEP

Submit Download

11a494e3ab7f3d5b_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\11a494e3ab7f3d5b_0
Size 265B
SHA256 be37796321f2295c4b4d5e6c9d9b01dd420e7f7d62775524160e1ddffc951d4d
MD5 2ba03f365892046dff42a43a45c7d404
SHA1 0af74b9f6dbf2546e2fd613ad1022e938d51b61c
SHA512 a974500f49b7b5e8dad28ae4489b66fc9ee64b76e27d4e6e4ee5bde2df2a5a16e77a9ddfa6a025d90b62cdcc9de88482245253af03c8d2e4953f2e9dd9e7caff
TLSH
T102D0A78FC9A25A4DD256DEF2EFADCDAEC61760B013DCD8165140E8F92585628B85C314
MD5 SHA1 SHA512 TLSH

Submit Download

21172255df3a4029_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\21172255df3a4029_0
Size 268B
SHA256 f7021632f431f01b4ce1958ed966c8632358ce350549c4d7ca69ccba483c1511
MD5 956e3d7ebe8c9f4e307c56a92e75e5c7
SHA1 0178771c7218a2c7f8d3a266c6a3188a327a225c
SHA512 2d56e1a0e6cbf3527c15d96c85bcfdede2489f288c53cbe46a7b7c4fb49df349f9a0764688c515f43b39e217fbd81c7b8cbe7c7aa17a8824a2915167f0ec2fee
TLSH
T1B7D02B8F49265514C02A8AF49ABA9A1D870FA1D0551CA4018000ECE222C111C712C201
MD5 SHA1 SHA512 TLSH

Submit Download

27ccf25222ae33cb_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\27ccf25222ae33cb_0
Size 266B
SHA256 4be87db0e19b68ae05855fd2584f95c4222577381ef0d63925ad4da6f4de503e
MD5 130a153fced14336aaffba459ca13b2d
SHA1 94791670eb508cd4e57127487e766e2028e37640
SHA512 02bc381da2fae117a45e9bddf07159c9da1745144a5d3865b5d12e411b2394d512f02b358045235a024d721a86e62291c636ccfb4a3fcf6e030e27da21e6c132
TLSH
T14ED0978F893A4948E01FDEF29FFF8419C71B85E4832CB0AA4900D8D220E2E58F528B00
MD5 SHA1 SHA512 TLSH

Submit Download

38b75b3c56a44471_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\38b75b3c56a44471_0
Size 266B
SHA256 fae336405fd8ce6959ee8e2dcc7976a91de832a818364f5b7df38f7abb1ce403
MD5 297176a609f2b71a1ec38b9db5902ba1
SHA1 1fc2432d0b70ae464a0bc9751a0671e52b2be4b3
SHA512 60313187e692a76edfe93f09b9cb02b10c219e6cf4f5bb4960667eb1bed1a6afeba69650a195757ab783d6feb26ff68d5741885b49a331635c1c08456101d99a
TLSH
T14FD097CF0A499406C08AAFF5AEFAC20D860E98E8024CA051A181F0A362E07BC366C614
MD5 SHA1 SHA512 TLSH

Submit Download

bff752f9eda7033e_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\bff752f9eda7033e_0
Size 265B
SHA256 1c0624c783971566eefb5fcd8ff278c98d8ab10a80ec939c8705e8786b5ec7ce
MD5 1b27c037a1c402ab05630b296e15526e
SHA1 647268ef88511658fed1ee19f786c12a12618e5d
SHA512 2d0447c66065d7fcfdfb71cb14fb871a79aefef1a182e43099d051e840a1cb684ecc7979d48cdd661a4bf39550938ed6fba1a93dddf21f8ed8a7f5fb3a437aba
TLSH
T15ED02E8F1B412A09C289CEF5A7FC4BAD8A0288B002B82001A021FA0A26C0F083C28B06
MD5 SHA1 SHA512 TLSH

Submit Download

c08e4f1d53545655_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\c08e4f1d53545655_0
Size 265B
SHA256 1fcb4cb3f21352fc699c635da94db830d42e6f96f032273d82dc2a4d45581130
MD5 a481552a7ec6f27d470e9973763e7772
SHA1 fd5c16a051f252f33f2d613ffc4cbae86bf872f8
SHA512 2bb85460b79f40d8ece7a6b3e46da7da20ffd995a368dffcb1f83927ba2e7ace310ecb4e5985d61cb2492a441a011425e01f380b460d3e178d156325db38024b
TLSH
T1C6D097CF0721A509E29CDEF0EAF88A8AC34D92F2022C08434480C0AD02845A47A3C703
MD5 SHA1 SHA512 TLSH

Submit Download

cd6305c8c4983a46_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\cd6305c8c4983a46_0
Size 265B
SHA256 7a9883a1136f8802550640caf2618cc0f605d1001d6c8c0d03d9adc235774568
MD5 cc14f8c401def7d60434ac25f91df00e
SHA1 3e431ce4f549b4e77407bfcd06bee1d490f9eed7
SHA512 d91fbf283dec8123fa736ad401b27952985151b61932426e1f0bf8849bccdfe1cc26b050645dd61730d9098fb1311cc9b5a5dd5a4b34258996402a084d37545c
TLSH
T19AD02E8F8A3A6A08C28ADAF287AD4789CB4A54F492AAD4459040F46A20C1178792D600
MD5 SHA1 SHA512 TLSH

Submit Download

d3fa8c27286ea8e4_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\d3fa8c27286ea8e4_0
Size 265B
SHA256 3a7d089c48a3f45a0d827c6831b262c38c6bc182b357dad69066244a11641385
MD5 8a3f37c6d960009756b173085db590e4
SHA1 54fc4b3b47572e19e19d196b83dbae52d08dae6c
SHA512 5f3e7e3ffaf65a8a84da994ada746927987624451b362f30dae2d6cf850aaae74bcefa5e8f095bb41b550453e2c3c5ba7d4511e8567ab3d3d0870d195398a0c0
TLSH
T1EFD02B8F3A26640AC5878AF0DEA95B298A07E8F0431C56038140E48B19815143425240
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 747bd4790fbab26059c5b904b69c93b3e2d6b2336731a8d0da4f32d34f8c42da
MD5 18d4c0aa8e44e90c2336aa6a7c66ab9a
SHA1 3177c18859d62c53643af44b826429eab8b117c0
SHA512 f2ae1974e31544f2f8d760dc5a0fd4aa03303164d8de8d716e6ff0a1cc46f109c53270e33f19e486fe550ac5861ade79e270aec803a93aef449af0f24a30fd1f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 601bb232f3fcc34b17d4178ca22d9ab12dcf80f6f8fbccd55cd3a2069872d0ea
MD5 4ca3859e10e29090b8855aebd7756d2a
SHA1 143de606c7bf267c04eb02407fa2cff20c162e35
SHA512 a25bc823639d4bcff5985fc97a33510a264a3dcadf65b4f52ed37d110b83c4b434bbb0f924d79a7223d6638c278770fb5f0afc913b5307e4ef36343f7363b753
TLSH
T183D04C21402089F3D74C06B77ED0C046797C9D6011CB6F4055D667F7D93474D9156A58
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 0ee36cba2b07b506cc51bf0a875ec8e55954c7a1f9b1ca0033f8894f52198bfd
MD5 934be79ec99de8d46b5bedd53cf1aadd
SHA1 f4c89c6151fada20a907b4c3c91447eedfea520b
SHA512 2fe8df13819bf577aa0efe2568479dab686156a670a2d55aef28fb406dc3f28a041aa0be2549dba1c1045f2ad72af64616c719c87de75a4f1ac3af408d87a2f2
TLSH
T1A1F03295102484F7E7294F73FAC4D08531BF8E14ED9B2F002182E2F6E220FDD840D418
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Favicons
Size 20KB
SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
MD5 babd43551f1b29eb82e221460676126a
SHA1 e9bff307613a14b35830893bdb6d1ecc931b425d
SHA512 5ab681c170dbd1d374bd66edd02cbe21272819ef7389ad1e886bcba112deb91eb68fa930747986da5ca794881939570013e38edd9f8e6f718f7d202e74a82f41
SSDEEP 24:LLipxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:UBmw6fU1zBmI
TLSH
T1C292EE075E383407DBA10E7D366B18768E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\History
Size 184KB
SHA256 7edb9d6dc5e06d3c85e5937414c6845e7ca2a9cd527f1e48d74f069fafe6239f
MD5 10bab4d5e48a384d63de6692277ed56e
SHA1 241f966306ccc52fb56b827cc6b46c5537470897
SHA512 c60c6e2ef003f849c7fc5ee2eddc867e719aa81c43979e02ba5a0899fb667a878141c02f0d660919cdfd16a2ba891f9a4ff92b4540e307501eeffb959f125a69
SSDEEP 96:HB35qUgejzH+bF+UIYysX0fxQp97d/EHt/DfLjLqL/LibgI4VgNr2jWRk/E0kV:HBhPH+bF+UI3iWGVdWN3qL/JVgZQW3/V
TLSH
T1D204FC1E5F643212CDBD513669E745A3587DF03F8B2366C66C6208B1CEE2652B02C9BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Network Persistent State
Size 362B
SHA256 646149e89da4a89a9f7d0420e839574db8df5b97c989178339ea872620f1d5ad
MD5 e321b29f1be94158e50023ed726e8ae0
SHA1 3482aa9ea7283c43c5967d6e22763a4c81856fa4
SHA512 5c93a189df184b5f024bd0cd6c0b2c5241254314975de675f024b5816698437d138b6f4adf12ae5e786a3a568181d4d3e98d72cbd24657f5ce73d0c64b3072f2
TLSH
T126E0C0A7C2E4C9FE474143E03634790BC93E0406532C2E2ACDF9B75E43E107C801044B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe589892.TMP

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Network Persistent State~RFe589892.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Reporting and NEL
Size 36KB
SHA256 951ea521116baf347ce89b628eabc22479fb8e3edfb7597659db2174fbb59804
MD5 fa739570350b78ef09e5d8ca61d0d71f
SHA1 d4e932ca96e76aeb84d3a151d847658df6a5555e
SHA512 8dc44c2f20c0a051568e7479e4553dbbf8ad4ee6b4d5474d8493c4b957f563f858918d862621ff7ccb190be693877dfb0a1245998925f47f9976d431a007ac86
SSDEEP 48:TqIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB:+IEumQv8m1ccnvS6
TLSH
T1BDF2149E0B1D3A10C4F89674EAC10DC37D7D141D8B96EFC45AEC06F2FF866A2A538429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\TransportSecurity
Size 188B
SHA256 eb3903548f5e0cdc23911edd32f045ca2853420d32c5109c5767817a3219324b
MD5 9028c0fbe379f79251eb3db4011c79e2
SHA1 a61af5d5d32a356c6ef31ad7e29648d616096f2e
SHA512 f17e8ef107e38e6f98fe259a0eb29077fc55ed3d5b16c7314dccae8c02c9517c5dd2f488c83252e61bff6aeb46701ead3d8cdb94804462a942024e3f2e122f11
TLSH
T17CC022B3C039A832103D062E5EC0AE406F37B538018254F9A96645B89060066820F102
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\TransportSecurity
Size 356B
SHA256 a1cc98609ced0c2f5e72139190dc01205d35f84812f3070245d62add9e7a7da4
MD5 ac7a7d83cd21be11fb4f7650e9f96537
SHA1 335a4954cfd1e88010442049063689f3b204f8df
SHA512 0d407a8543dd70608029af559cd0c26156b4aa74d5630af1d6e74a33647922d6b46f27cd94d67d12becfa765b0d02798d7a8f15325c264944be6210a30c63a3d
TLSH
T164E0C0D2817AFC77307E09A69CC43C454A37B632928150F8CA63402C60C05BB170F022
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\TransportSecurity
Size 356B
SHA256 5c83a99de359f7f15adef4822231bfdf0d001f1f5d1c344c697871ef9104020b
MD5 f052f83e8dd08e008afcc9356ea1572b
SHA1 52cecb91e72196b53b27048cae700cd771e363fe
SHA512 25c46f32326718a23ab5c74e6465b62b8a5e95ceb5113bb92dbf2a489c9a8634a64ee0369e10a53fd8186cbbb7c1b205cb8219085fb4fd46cf4d96f6836e80bd
TLSH
T1A6E0C0D281BAFC77303D09AA5CC43C454A37B732018110F9CB63406C60C06AB170F022
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Preferences
Size 6KB
SHA256 759533d995689ffe5e26ded8335644fda4eb199cdd256e57f6f4e0f7eae01fb0
MD5 a7aa17e442eff44a5679cad6a86ed0b5
SHA1 a80644e7c0cf79819542dc8429df5cb37a7a33b4
SHA512 d589d42da2d13a954285ae8bf6aa3b1ebb4f9a14a8bbb49138b208ab8349df206157923c5b1e5043b6d9b74ff947133eba1980c0461553d4958b83b874671555
SSDEEP 192:stf0n/YVfrZ8pa05/S+WiTtJwdbPSN5KC:st8n/uq5/Vnw8GC
TLSH
T19DE1A8036F28697B4CC7E6197A36BB56E2F9106366C00E58ABFC871C05D76CD630B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Preferences
Size 7KB
SHA256 c906374b6ecfec8a0eaad40ef150d3ec80e424fe284e64647c69637fb13b5a30
MD5 b769144da66721672be1ad302d0ab954
SHA1 ec7460993d63dabc450fbe9718570d91e6fed78f
SHA512 b039cf11ab81f941cab6d1669c2548f7505fb34cca384c8bc556592eea96a64de1684b8ac1f04b78bea78f2204727f4e4aac342efcf367be28be411806fdd601
SSDEEP 192:stf0cV4VfrZ8paRg/S+WiT4XQdbPSQq+MC:st8cIq7/VkQ8hvC
TLSH
T179E1A7035F28697B4CC7EA19BA36BB56E2F9106326C50E58ABF8871C05D76CD230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe589882.TMP

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Preferences~RFe589882.TMP
Size 6KB
SHA256 3e27c22619eccb709b5878b6500236f9d37dd9321f4d2a85bc35de1a56a0da13
MD5 e6b43d162d3afc306026aba8d649e309
SHA1 a41258aa6dde54c531d589f75bd2a8b841a04b27
SHA512 05c9f12da95d09b1f922af90e9ff339ec7d3a37d7331457fe564270af1ef124f0c47ede41405b5ac8d18283036742fa61a053981f96bc3193cdb3cbea59295b1
SSDEEP 192:stf0n/YffMZ8pF05/S+WiTtJwdbPSfbM8:st8n/A78/Vnw8w8
TLSH
T1DDD1B9035F2C697B4CC7E6097A36BB56D2FA106266D40D58EBFD871C08D65CC230B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 6a3690a40b00d482f5259f7fb1d12d4a66c7d8334e8e209af07c9e7087fc8bf2
MD5 7461c71dd83cda550989bbee33273a9d
SHA1 52d97bc54ac3df01411a785a8554e8f57d922ed1
SHA512 5706a2223bbbaebf73212f917d2b5669c623d7b634faa16a99e2475842d5ee0bb5b3564d0594c2fbff0a49c6f068136fd16f22c4632aa77b72196f6f3fae8c23
SSDEEP 96:HlBizPlf/ROoKOpkF5d1Bie7sMaTEv9V5h5pg5+eeo8mbtwUBS6VUQISc:H2rWGFG9lP2BSFQISc
TLSH
T177D1C9A3452DD535AF448AEAEC297DCF99A6409F9CD64C0986D2C14807C2AFC25DE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 54478189df305cd33d4cc87170aa7f72fd30ef9733cb4e300a5158f397a76f00
MD5 0cf75daa7bad2a32f5da4fbf068066ef
SHA1 66ca5067e681bd367a0175ba60f593259e02e1a2
SHA512 cf09f195680e4de8ecf3a6bd664e7cb54a19c291a22cf861a455b1227bf90dccbaf27d1c1867e23e4813364696a4f67e672d3b19d6fd3f32d29df641426d5649
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 834865d9944ad5d178289fc1de8f4a5a106ac724e81b6344c30eadd5b3ac20b6
MD5 3a545a7b5bf38b223dbb3d44a082b647
SHA1 86b678529b83bc0ef72723f3cb60afe6b59443e5
SHA512 66bddf2eb7b5652c5d0efbc88eab3c596fc45e57120a2cea2f5c0231ca2e52839191854f552e4c92d9d5d28486f8d7e9ab0e84db9994c89e72fb9111dac85dbe
TLSH
T150B012C1FB40A12BC0DD0E3D0284D7B07320E203650655039884CF210EE73E42E06CD4
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Site Characteristics Database\LOG
Size 325B
SHA256 00243a131019c924544db905d365a803410eb6d70824913808139f0a6c42e71d
MD5 0fe6d1acda83f8378e31fb87836d1a31
SHA1 43d5ada4e2e341b67841eae41670fd18e28dbbef
SHA512 8b993dce84df48b29cbe4805ddf428dcaa8d82461126a33e3590c1b5d41d2ef4c9a35de4e0c36189fc964192a0388d16dbbc4ad972ec476fca6e1ab2c1bc4562
TLSH
T11DE020105AC9897B068555FBB232E309C3A13444EADE26190E16FACC260B54C7159211
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Sync Data\LevelDB\LOG
Size 301B
SHA256 1735a1050450d6c58d380fe2b3d406e05de2cf20f9926af0dfa1d3602ce9050d
MD5 676fb9945038617fbea55be3ecabbdaa
SHA1 d8ad0bf14998a26ae599e8197c348bd0fa7c577d
SHA512 ebfa900747ad42cc1c6c49119cfebb6463440523a840ae736deccba15f9e6ab50c586fe41679efc486e6bd2414ff307a62a09a8813178c851cccf7cd93e691e7
TLSH
T1A4E07D30DAC889B70884CAE7A275A34EC3F0384897CA378C0F05F8883D4224CB2A8152
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Visited Links
Size 128KB
SHA256 20632ec9241a4bb24877296dc4cfde66afa514f8b04505f81968e28dd25a3a28
MD5 fbbaa214541c8af8158f09f2b8385ee6
SHA1 4f6a116899ce49a38b725b485c39a8518e5df31c
SHA512 3ae595dd0a414bad25d28d8a16d69f142901e428e5884884d360e4f9e2e2f8cb023f45c217c22b74c103e3e4f299ab68cd4e5117a20be41fcb3d2a0bc832c613
SSDEEP 3:ImtVuhjNnTllllllhns/l:IiVu1RXlDMl
TLSH
T13CD3043C15454407D50D407CD501070D1130D1504C710147073F0C33CC50CDD7557C01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 1KB
SHA256 c07d26b9fcde1fcd2402dcf68fbf8bdbe82c4ab0c00c92a97f5a31e3ddc7d444
MD5 435b7ebd0acde01815c797d1455f018d
SHA1 34eb355909379cd30bc7c284c5cae3be6c2b1597
SHA512 6fa3235b93424a3d8f539f56c7e01428e97ba3e8251d4956bb8c3ded618d35dcb1a7bedcdc18b9cbe62f5fe7fcc94a91d7f800b923613de384afcfe9c2ccd208
TLSH
T113314273E9886A765DC35987B0867E471D20506BD3604E88A5DD0B0803E76DCB92ED33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 2KB
SHA256 7c3bee42d9ab507fc7694b7c247338f154a243d820dc2ad602f51be32df95a20
MD5 6c8a5959311942261423722977ceff79
SHA1 152ae568488eaca62cfd7cc4515a5693a363a5a1
SHA512 6a04bea286198d960662ccc91467aef7004fd1c11c05ee74b6c128aef9ab848187087f78dcaba42c33a1f657310ceb14794114743df58294c64f7149d74dc047
TLSH
T1EC518733BD48BA7B8DE34D45B8463E13593550ABD7A11F9499DC0B0802DB69C371AC37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 4KB
SHA256 e8ba1f4383b860f2c0ecdf9bc30f5f7b4271a770dfe91b8f736bcce36c4b653a
MD5 a5ed1792a40bec398e49d456b82559b2
SHA1 fdb2df5573596baf286b2c6992ff0d3de5767b86
SHA512 a2a4e5236482b5b4eb8ee49f082f0bef6ec2ab165d16a14aea7fb9c95d8495db07f887c9e552eadf6ba920b0a30b3ea9f88e934a414eb12c5c4a1db4ec505b94
SSDEEP 96:zuxbNkCE8h8fGMmY+78Frh/cInURoDoto+5tqDQBHZy6ulZ39TLl8Da:z4bNbLhImaooDUh+UHZK5j
TLSH
T16F91A632B9A8A97B4DF3C945B8863F0766655067D6D06FA8D9EC0F0C02DB2D8270AC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 16KB
SHA256 23afe1bb926e7836b2d29ddd16ea859ca5880c2717be351cf9ba6a126e99c390
MD5 470e451fade89ae8141e57d30e793b18
SHA1 8cd420971b53f7b5086eb62214243752e818442e
SHA512 2f0c57d1ab3c19b6f1079069382123da652268250cb63cc36f627834bf7fe6bd18ecd54091b605f0355b4dfc1a5f377c5ece74b8f8835f175806d6d35087f02f
SSDEEP 384:zVfTPLdSWCUkEaV8DNYi0qnSXaqZvY3NbuhMiV98u1:FTRMUVai1SKqvYghBfX
TLSH
T1F672AE72AC78AA5B08FB8D1AF557364B98B9914AC6D52F0DECED1F0D06C66C80B19C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 3KB
SHA256 149053ec1eeb08df55bee107b15dfc24fb18aa35349a1978ba99d2477e68286d
MD5 b23bfad64d2e4497a87262273939ff22
SHA1 502bbcdb6bb10d5a5c8d11cd605dbfe516b6fa2f
SHA512 85fc6ba219af099bdcc583a3f1f5905c643163bcbd3a06275f0c500f7fa6e377ea735f535752694a48a9a0d654a67996b8391f90a313a47f3cc46fc8c3f44b23
TLSH
T187719633A958B92B4DE38D41B8863F0676655167D6D03F98D9EC0F0C02DB3D82716C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State
Size 16KB
SHA256 a92ee1a32ee6f287897206f3451d4e3bf7953c7d53df25b4e48618fe7fb6c3df
MD5 2982ce909c287f09c040b4fe07f8b1ec
SHA1 6653d002263a3e8af030a10b5738e9f512deea44
SHA512 22f45d2788450c760d7388cfef154860dfcc3b6912aeb8486c52fbaa0e94f21dd898392c5ea725709eafd0f69f89de5cb84583ee4cee94b223ae354430fd6ecd
SSDEEP 384:zDfTPLdSWCUkEaV8DNYi0qnSXaqZvY3Nbuhz9XV8tutukDgj:HTRMUVai1SKqvYghB+R
TLSH
T12E72AF72AC78E95B0CEB8959F6673A0B68F89056C6D42F1CDCEC1F0E02C56D80B16C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe581b82.TMP

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Local State~RFe581b82.TMP
Size 1KB
SHA256 1961022eed3b3a44de5bd8e6c0050fdaa3ca9c4bb5f163a9e10a5adce649de9c
MD5 fa683526f91982bdd3068b4fc2cab541
SHA1 c65c8868748a6bfa7a4864af94be089fb1c1aaa7
SHA512 4a0b9bdbdfd4590a8ed138bb6a25a04328ce387c4a586d5eafaa063cba22239c561aec5cafb51beea4b8af69a1855fb791d9c378889b1d3576f0d100148f0217
TLSH
T14B211233D4886A7699C34856B1927A871D50506BD3604F58E5DD060913AB5ECAA3FC33
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b0779a88f65126a9971b891b3a71f219a3d7f980d861d055770bb1c5e7dd4f72
MD5 af478bcdbf3c22adcd1555e807402f31
SHA1 dc3deb3a349581996a4efc0dc6c174960ea117d3
SHA512 0b09a620a3f6ad2eb52fe6a49b1f546340cc04d72ddebe949fcd25e1d397dc879f43b593fb11ca703527e31fdbdc2d2648cb7a5d7d3174b63642aae8cfae6f30
SSDEEP 3:MsEllllkEthXllkl2zEklScGVKt:/M/xT02znScGg
TLSH
T1134404047FC00415CD441031F011D7500374DC100531574334D304537DCD5C44C00050
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\ShaderCache\index
Size 256KB
SHA256 a90fe492eafe9c3fe1ea1dcca01d62566794135c6213b7f6660f6ad3b45cac83
MD5 4533952d1bce6a4b5edfbe08aab05e7a
SHA1 4ac7c3cb4971621552af72a8ae5a70a6ffb81ec3
SHA512 5bc762d023f1bc2a6c4f1b0ef7b8b25711768f2299f94dd7589dfc5e472afce1e2d197d0a094a110b58fddb928fd112f0657b54b06ab8666fc6f4aba4f16755f
SSDEEP 3:LsOllllklkXldKEeRt:LsUlPIh
MD5 SHA1 SHA512 SSDEEP

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\com.nuageux.voidclient\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

memory/632-535-0x000002107D4D0000-0x000002107D5FA000-memory.dmp

Download

memory/1448-554-0x000001992DE90000-0x000001992DEBB000-memory.dmp

Download

memory/1448-573-0x000001992DE90000-0x000001992DEBB000-memory.dmp

Download

memory/1504-251-0x000001AF8B080000-0x000001AF8B0BB000-memory.dmp

Download

memory/1504-196-0x000001AF81000000-0x000001AF8112A000-memory.dmp

Download

memory/1504-403-0x000001AF83030000-0x000001AF8305C000-memory.dmp

Download

memory/1504-404-0x000001AF83070000-0x000001AF8307C000-memory.dmp

Download

memory/1504-405-0x000001AF8B050000-0x000001AF8B077000-memory.dmp

Download

memory/1504-406-0x000001AF8B080000-0x000001AF8B0BB000-memory.dmp

Download

memory/1504-402-0x000001AF81000000-0x000001AF8112A000-memory.dmp

Download

memory/1504-197-0x000001AF83030000-0x000001AF8305C000-memory.dmp

Download

memory/1504-198-0x000001AF83070000-0x000001AF8307C000-memory.dmp

Download

memory/1504-250-0x000001AF8B050000-0x000001AF8B077000-memory.dmp

Download

memory/1772-735-0x0000024DF0F30000-0x0000024DF0F31000-memory.dmp

Download

memory/1772-755-0x0000024DF0ED0000-0x0000024DF0EFB000-memory.dmp

Download

memory/2040-715-0x0000013650860000-0x000001365088B000-memory.dmp

Download

memory/2040-700-0x0000013650940000-0x0000013650941000-memory.dmp

Download

memory/2552-556-0x000001E002B20000-0x000001E002B4B000-memory.dmp

Download

memory/2552-493-0x000001E002B80000-0x000001E002B81000-memory.dmp

Download

memory/3260-216-0x000001BC91320000-0x000001BC9144A000-memory.dmp

Download

memory/3328-836-0x000001B716B70000-0x000001B716B9B000-memory.dmp

Download

memory/3328-830-0x000001B716BD0000-0x000001B716BD1000-memory.dmp

Download

memory/3912-667-0x00000230DCF70000-0x00000230DCF9B000-memory.dmp

Download

memory/3912-651-0x00000230DCFD0000-0x00000230DCFD1000-memory.dmp

Download

memory/3928-555-0x000001E1D4B60000-0x000001E1D4C8A000-memory.dmp

Download

memory/4196-142-0x00007FFEE6950000-0x00007FFEE6951000-memory.dmp

Download

memory/4360-262-0x000002D19D6E0000-0x000002D19D80A000-memory.dmp

Download

memory/4360-195-0x000002D19D6E0000-0x000002D19D80A000-memory.dmp

Download

memory/4480-96-0x00007FFEE6950000-0x00007FFEE6951000-memory.dmp

Download

memory/4480-97-0x00000271B93D0000-0x00000271B93D1000-memory.dmp

Download

memory/4480-217-0x00000271B9370000-0x00000271B939B000-memory.dmp

Download

memory/4728-25-0x00007FFEE6950000-0x00007FFEE6951000-memory.dmp

Download

memory/4728-252-0x0000020284A30000-0x0000020284A5B000-memory.dmp

Download

memory/4728-215-0x0000020284A30000-0x0000020284A5B000-memory.dmp

Download

memory/5904-550-0x0000025783030000-0x000002578305C000-memory.dmp

Download

memory/5904-553-0x0000025783BF0000-0x0000025783C2B000-memory.dmp

Download

memory/5904-552-0x0000025783BC0000-0x0000025783BE7000-memory.dmp

Download

memory/5904-551-0x0000025783070000-0x000002578307C000-memory.dmp

Download

memory/5904-549-0x0000025781000000-0x000002578112A000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads