05256dabc74136aec827d3e100161a8bf942f6b4f89ae3757cdd4154e1eb3140

Analysis

max time kernel
149s
max time network
175s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/08/2026, 19:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BuildNow/BuildNowGG.exe
Size 110KB
Sample260815-x7e85aseqa
SHA256 05256dabc74136aec827d3e100161a8bf942f6b4f89ae3757cdd4154e1eb3140
MD5 ff72acc3ff2bcb31c3dcf2c220a0dc34
SHA1 a13a82657f091bcb52aafc4d44cb420e8d37f2bf
SHA512 87660d95b68d74fde8c31d6c1ed8582da6f7e3c008a081f06f1d4ecbbcf2d188f971e3923efa440cc5e648152e7058854b3520833f047aef5260a91eda03f860
SSDEEP 3072:k2c8nchQn27vpukD5eeAvJ26bbMJKIRddVBvMdF7FzwdL3fJ4WEe0RzqQDwNnXzc:khxh827vpukD5eeAvJ26UB
TLSH
T10FB3A4456BF90209F5FB2FB4A8761085497AFD5EAC24CA5C0299D98D0971F92CCB2F33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BuildNowGG.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 3756 wrote to memory of 3932	3756	BuildNowGG.exe	83
PID 3932 wrote to memory of 2708	3932	msedgewebview2.exe	84
PID 3932 wrote to memory of 4776	3932	msedgewebview2.exe	85
PID 3932 wrote to memory of 4776	3932	msedgewebview2.exe	85
PID 3932 wrote to memory of 4776	3932	msedgewebview2.exe	85
PID 3932 wrote to memory of 1092	3932	msedgewebview2.exe	86
PID 3932 wrote to memory of 3104	3932	msedgewebview2.exe	87
PID 3932 wrote to memory of 3104	3932	msedgewebview2.exe	87

C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe
"C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of WriteProcessMemory
PID:3756
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=3756.3776.18031390923683768866
  2⤵
  - Enumerates system info in registry
  - Suspicious use of WriteProcessMemory
  PID:3932
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0xec,0x7ffb6e47b078,0x7ffb6e47b084,0x7ffb6e47b090
    3⤵
    PID:2708
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1736,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=1732 /prefetch:2
    3⤵
    PID:4776
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2052,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
    3⤵
    PID:1092
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2388,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:8
    3⤵
    PID:3104
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3548,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
    3⤵
    PID:3388
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4040,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=4068 /prefetch:1
    3⤵
    PID:1936
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4496,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
    3⤵
    PID:4352
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4672,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:1
    3⤵
    PID:1144
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4668,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:8
    3⤵
    PID:2636
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4692,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:8
    3⤵
    PID:4224
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=5896,i,12756619522302615252,5496507639982956392,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
    3⤵
    PID:3304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a209e339584a8bba0b1e47051ba173ac9e76f6467f975299d327c6a0aa1a23da
MD5 b74830762c5cf2f480f2bc57318041e7
SHA1 0b9cef5a3eab607842c18503f4ff6a983786cddb
SHA512 4dc83d5ace3ca779f9e153a469b1662c9d0191e23691f106b94d3cbbda66a29fe1dc6357193eaa225346add67644c72561e5865df172fddd9f33e621c1a8b3a0
TLSH
T1E9D02B22B102CC38C4B010730402B0CA3715C08E4366300A643ACE1E1F100D00A134A4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9f5ae494fe6d10358ea96f96ae3ae114439cf5cf6ce00835b85dde2557432c7d
MD5 f997ccaf17ad6bfb275fbee5a1f0eb8b
SHA1 f6581d63c720e17a69057d3f5a39c4f4ed4e62f2
SHA512 8324a1ca0c188528020c796c31c810d85edf7ab6ee4e2edd791f9c1e03aec3840a3b226209cd600b273b58325afb2f592c57a2009d3439a980bfe8b76ea850b7
TLSH
T188D02B32B101CC38C5B010730402B0CA3705C08E8366200B6439CE1E1F200D00A134A4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 8d1ec01105519779aa3cd434c58f25a72fe06a06bd0fa9b44a94dc04b4408cc5
MD5 4893eb6f31ae0e76e538ab1d594a9124
SHA1 4f79d7add0f41d5cea461180783b5c66c552fddf
SHA512 3febc9b90676de15ad738b232834761d44c9fb3bfc217590f6dff52c641a049df4d96221c60570a63adae584b8054750960326d09dc0fe713a21201cdb49ef85
TLSH
T129D08033B1854C78C47055B3440360CF7B5AD19F6365140D7479C91A5F540E899535B4
MD5 SHA1 SHA512 TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Cache\Cache_Data\f_00007d
Size 704KB
SHA256 ed6bf57100fbd8670dcf23271c853f62522e325bfef77fef138101487fae749d
MD5 588e26b9e64ebfc3ec1405edc77c9faa
SHA1 f7980295ee9eb97793e15b980a3835aa6e409b2a
SHA512 75f8bfc654c6b2756294c3ee97a6b6204ad9b7f3d8f9d2b2e77afe8a63be8c174f27fb565372be5a913d2235b67ed48f76445fe8ded06823c59914b2857fb25f
SSDEEP 12288:fXdcAmq74JdS1arZRxRGN+O2gScqzRCV3ySt/c5LbqycuZOxYDjqIjU17:6Amqvmfx4+ugzcpySt/Smy5k9IK
TLSH
T1E8E42399D82F1E1D374F0FDCF181E69812E67BA7490091215A0DCAB186FAED0695E8CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 ce80f263518715fc556f9bfcda9372077941177f812baaab311f94277a2f9812
MD5 124ccf7a42169a86af1c344050eca804
SHA1 d2f81533c59522e36d3135b272e37c7fecfd63d3
SHA512 6c7c755f42c0aa9236e19ef9e1088abf429e641aafa347239c9459cae111085c14f3780d48e309ec0cec78cfc16defb305dba0fa25068e0a9b8450b7fd945c7a
SSDEEP 96:OWpbDj/aut3E5aW+SsZjAIOUxkSzTQbOg0RmtLeqLScLW61H8W7BY4GOCm0FWQpC:7pzyuoaWtsgWzTCOKZpP7DGO7Vbn
TLSH
T199121A8772AC9712EB8448B64EC32E8B72FEF50542074B6EAF589D3859F3FB411C2558
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5988ae.TMP

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5988ae.TMP
Size 8KB
SHA256 8759506b9b6a721326f6b49658d33e73186eaaec19b85f981beca31948798fab
MD5 78202c2193ba8216f1058bf544d994c3
SHA1 a273cc10956008ea2f3d3ebc2dcf30cd9f536423
SHA512 3331258b60dff7c75a3a9e725037856d95dc76359ef9e6673905076b524618345426029c8705ecddfbab9e1ab178eb0100fce2216cfbc2cb583d0150ecb4403e
SSDEEP 96:g8j/GqDGT0at+SsYumvCQOUeSzho0OtOyLtVE8ScGsu1H8Ws5i9d+hSenSDBJntU:gmuqdattsntOz60OvLQPs4d+1u7F6
TLSH
T1EB02B486722C0721D74045F64CC36F0BB2FEF644434B4E2E6B28ED799AF2F9914C2968
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
Size 360B
SHA256 831a0fd3ca42ac56da4c8344a8c95a3062d379de4dbbe6d1afa080f681e73661
MD5 c7a4e1e60ac844415e4e98b4a69905b0
SHA1 d534f6a9686711874b82eace8f8730f08b3d9208
SHA512 9b285d019dce9c202538c0b5bf08eecea4952e85c411203dc1ae3e8a96b23f1560a2fe9cde7971bef7cde5a056b7f67478c83035eee17a0006119aa6ea01a7f0
TLSH
T125E026C6B9114013D70001F38E4B2C20F5D0C3CC474C565A56F98E0D84C4ED202C8F54
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
Size 288B
SHA256 939e44939d9dd90666463b5b13b765c3070557a2660fc544159ee0f58e68cad4
MD5 dc241f1c8b880c806281e26032b896dd
SHA1 9cd0c0e4f4c38262a957d6d5ccd182916ac790e3
SHA512 55ee84c79049847a258aed35cfe6cefd3b2956a7c95d6025e459dedbecb8fb6f7de1da53deeb74ab6cd83e91efb3243fe1c6d994942d286092e17642dcb6d06f
TLSH
T14DD0A712B9214502D30401F74E97BC30F2E0C79C974D9556ABFC8E5ED8D1DE242C9E54
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
Size 384B
SHA256 32515e43b154718825e84c4a9c84bfea8183bd67c9a759832ea0357ec8348eda
MD5 7d5a5c875e52f5b30bccaca99d531a3e
SHA1 bdf596ba605cc400b002c3ce8c1340fa57b664b2
SHA512 9ba3c4428359372e0ec338ba7e61fa686e3fa248fa98b307df027e2ac22d6b6a97abd9afee338c82c20ad561dda2609b9a8634ae4de549670ae4736f89721b3a
TLSH
T199E026D6BA114413D34002F78E4B2C30F5D9C38C474C8AAA96B9DE6D88D0FD143D9F90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e8a6.TMP

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index~RFe58e8a6.TMP
Size 312B
SHA256 02cb8d3c99ef2e37164f5b23d219219ebf33c07dff5cc93dfc977ddd77906b90
MD5 1592803efe66490f4b99a70a8b13f7e3
SHA1 fdc082c9d467bf8454e36b9de334eff45a56e991
SHA512 5c5237a25092d07004eb74e6c1fb9acf5673f5815f6cb9ed069d4729a4c6480e08573b8e7f6a7ce4c1e71d46ad716aa7b68e8074d44dad7f0b720961bd52ae16
TLSH
T1E8E05E1ABA214515D30401F38E877C25F6E1C79C870C9A9EABBC9E5ED8D0DD142C9E94
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

421ff57c-57e5-4a88-9388-aef7066349c2.tmp

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\421ff57c-57e5-4a88-9388-aef7066349c2.tmp
Size 6KB
SHA256 9a9604ab68c200be0097ba7f7ed9a40eefce74bd565714cf8cb3f0ee3a3d0f46
MD5 fc4764603a13b5a8aff1c13d28715856
SHA1 59c852ba698cd2a67be686fc4e3999ddf6816244
SHA512 d0151b2b2e0584aac610b1efc23586ee830017daa2ce63aefba4228da4b823f56bd4405df7aae6efcdd4616d48384226095791bbca6ec0e37e5f6e9064906e8f
SSDEEP 192:EUmUrUGUQUUOU2UwUhGUcUsRUGsU8UUcUiUFQUiULUu9UoUdUNIUpU9UXKUCUIUE:EN2fAvvtAG/H5s8xTrrsl9NS2Ig4GKFD
TLSH
T152E1AF97D57FB86B203D9C6B1E49BC092979B4360281A8F8DF57C26CB0E59F71712052
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 12704a15f7e7a137d2ac590698f68307cb5f14b14a56d7de3a9588464443d7d5
MD5 f43a0a3844d529c1770f2a80bd4a564c
SHA1 ed1e8e7597a56202b0cae3854b84a4eed3dad749
SHA512 28e925383770b2f393839d78375f52e470b5625adba2f2c1242097ade792006a93cf716b667cc23e7d427f0a8e8c31ab737b83cf05ca9eeee041308de4f72d1d
SSDEEP 96:D0KUd+qe/WslJVeJwfWIZ3oYcjZXC/oMeawaIvIwPswoMuQEfN+hVS:D0KUd+qe/WslJVeJwfWIpoYcjRso5awg
TLSH
T1FFC18EB6D7F4463ECA2111F52B252E1BCE2E047853B8A916C9D9EFC793E1072E14164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 6KB
SHA256 163398110e0469f42d2480a7f936b7e2295966b22aa4bb371822cf0eb7f7d00d
MD5 1e4313ef845734c5bf866a3ff5900398
SHA1 34eeaf297aa32ca848e5f850bae6be8b1fb8d201
SHA512 e2e3ee75071af38b7f12cef82e835cd5c71591358b3b1d749e4dacbd100d4980494a429da5cb4df6fb83a02753c26bf4ff7a6e3d622f06b82518d769bd648973
SSDEEP 192:EUmUrUGUQUUOU2UwUhGUcUsRUGsUJUU9UiUFQUiULUu9UoUdUNIUpU9UXKUCUIUE:EN2fAvvtAG/H5sLITrrsl9NS2Ig4GKFD
TLSH
T19FE1BF97D57FB86B203D9C6B1E49BC092979B4360281A8F8DF97C26CB0E59F71712062
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 6KB
SHA256 8dd4d59b199f0ca22be25dd387ec459055ebed64597f7f7ac1779598ead11a70
MD5 250a9350f599ebc326e45e9705a0d6c8
SHA1 2d338af1c1fdf7245e2d44966ad613946bdbcaaa
SHA512 d672c3583d678c64d82cc4a12ac434ba186fe0c2ad83d3f19bdf301e34e1751d9a3177c12a505b6ff3346d42f3fe631e9af89051bee90084e228ea7bc8e3ea6f
SSDEEP 192:EUmUrUGUQUUOU2UwUhGUcUsRUGsUxUUZUiUyQUxULUu9UoUdUNIUpU9UXKUCUIUE:EN2fAvvtAG/H5sXYTeQsl9NS2Ig4GKFD
TLSH
T164E1A097D57FB87B203DAC7B1E49BC092979A4360281A8F8DF57C26CB0E59F71712062
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 6KB
SHA256 8737bbad5f07f6f075718a0a1a4c519dfc56a3999c2cbb4496cc123b79e43f4a
MD5 20786f18e77e9a8d7dce09f58b60896c
SHA1 f5322309d9d3dc87509d1e50e0e1c8dfd7e3e83f
SHA512 b7547bb19d37a7e1292cf213c4c540d991f50f81c42aea50724be9f6d8ee7081fed086e00bb65ec4421b6d04895b582505a248f4f0c6da56fc11008410e56a99
SSDEEP 192:EUmUrUGUQUUOU2UFUaGUcUsRUGsUiUUSUiUyQUxULUu9UoUdUNIUpU9UXKUCUIUU:EN2fAvvcLG/H5sarTeQsl9NS2Ig4GKFj
TLSH
T121E1AF97D57FB86B203D5C6B1E49BC092979A4360281A8F8DF97C16CB0E59F71712092
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 6KB
SHA256 3a2784879765deee522a8b77b15f133716685f72c5f77680754ee0a14a1ab4ac
MD5 5ad8d7301de04dac9c3f2cafeba4e362
SHA1 b0e4b1fc47f41e2e9b428400dccf01f8744df3a5
SHA512 2ec58e12ab1e03044f59e57102334649662c882a0bee926882baa1813c780a25775c9cbff017f3556cd4c7dfa94618676b98b008056b4e1a1ac250f914aeb856
SSDEEP 192:EUmUrUGUQUUOU2UwUhGUcUsRUGsULUUrUiUFQUiULUu9UoUdUNIUpU9UXKUCUIUE:EN2fAvvtAG/H5sxyTrrsl9NS2Ig4GKFD
TLSH
T102E1AE97D57FB87B203D9C6B1E49BC092979B4360281A8F8DF97C26CB0E59F71712062
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Preferences
Size 35KB
SHA256 29899993f3624ceca1d7da1a14230cfc33f72ca6270b9ca1c7ed4542fd38ab06
MD5 48f3a065a8bbee5d9a1e7e84947ca0e2
SHA1 ea67bef1e0fb6f2cdc524afe9dc87811355d0315
SHA512 29e86b047aedbc2697655eda116b3538ba7726a35a289c90f748a95b7c701b21299826d8cfafbe966c67dfd93d545be0a19e547eac239c60bcf6b13d6e5645dc
SSDEEP 384:sxRonH8hzU94PckRe0Or+9flYnOlDlVD6VBdxihw0R6DDgcmVcUfyOKcCQI5WrYT:sQchDc2y+WOlDl16VX8e0WECUeWrYtwm
TLSH
T1EDF2B9A3B1B41EB91AD96432F051F27ED781046A99F48ED36BE9C92C11D79FDB800CC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Preferences
Size 35KB
SHA256 0ec8a91433b24b0724a9e39b73ddd03e612b6cf37708ea6c55c3337328f1004b
MD5 c65667375fe3f261e27b40eec3690711
SHA1 6f6946f084cd3da620f1edd6003c3e409645d33d
SHA512 4bb73d144844ea230db01a14e966640dc8384f3ac1bb596f50159d4435e6cb76486a0415b67f1231ffecb6671ca242af227b746a77f612a32715efb65bdd761e
SSDEEP 384:sxRonH8xzU94PckRe0Or+9flYnOlDlVD6VBdxihw0R6DDgcmVcUfyOKcCQI5WrYt:sQcxDc2y+WOlDl16VX8e0WECUeWrYtwK
TLSH
T168F2BAA3B1B41EB91AD96432F051F27ED781046A99F48ED36BE9C92C11D79FDB800CC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Secure Preferences
Size 9KB
SHA256 ff05e39235d1568e9cc3ba9669be8733a0ca994388547eb320f0a288d4771c28
MD5 71954e49b9778a1672108e3bf65a86c7
SHA1 f9109d171a3bcd0f62eb5373ddfee0d9aba92480
SHA512 8dbf60657f1ec5b49d5d420d0de8d4c2d47eceb8df681769f904627727be54b6d58db57e3e973f3d1e9ff88a94efe3a286798344e93226cf672b5b6509df5617
SSDEEP 192:H1GWGC79lHkoPJI5y9UNLcIv9Tqe0fUW5tDrnXGbOazs5MsNKJWmgz4NrJ5kP:V379/Bgcy1A327zsWs4g
TLSH
T1411219F3486D4A365F8957E9AD3DBAC6CDAA058FDADD4D0496E6820802C3BED31C14D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\e770e2d8-5ef1-4b43-a184-0edbd30ccb11\index-dir\the-real-index
Size 336B
SHA256 ab200228596dcdca14a72dc98b18745ad735d610ed82c82e83639a5e5429dc18
MD5 1e0add4fc53eb414fa92332923565c5f
SHA1 8018bf88059a0240a196c564bf510926ae08429c
SHA512 6e3251e418f828f01e495feac3680ac0d6b5e4f576532d732e58774fe01dee2363e52603d03a3e085eb2541d5b2240d93dba6361aee5f82431d24ae1df77f755
TLSH
T189E0A798523421C1C1420679D95724A1733508573743075D07A3EB39E7557569E2574B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590517.TMP

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\e770e2d8-5ef1-4b43-a184-0edbd30ccb11\index-dir\the-real-index~RFe590517.TMP
Size 336B
SHA256 6ce1a914adef845ff90f36fdd2a531272b629eb1571411b5b53c2dcdacc64d95
MD5 e884986abad9db11b5baaa86c4b7f3ae
SHA1 8ece081d328a61b734ea95b6e2b4ec1012c7acd6
SHA512 b2f5c978c156d8a26d9b005f44501fd287664ed4f111d4fa7a85e6f6c6a19a78a3d0150ae3c5231129c99d909e76c0ab3f41fe17413ff6904788db1c0a402f6e
TLSH
T12CE023417954D6C4C0C04574D72B2142B3540C791909164B4B95D938953D74E5DC5785
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\index.txt
Size 159B
SHA256 529fecd5d20db2bbd1372d91dbb5a51b2ef2fd288990e8f9edf4f8c728402bd9
MD5 1101221f8f816a94dbb0b7b1afbf78cc
SHA1 88ee8a55ee82c8c5bf464bcf854f1f09055a52af
SHA512 48e5a96e73f411f2530e6d773d692f1a1475e76f4fdff1d3a9c0ea21f4621500e400d58bbc8c957eec9eedfdfec5e25736f89e567c0bce69a3d03c1eaa1b81aa
TLSH
T101C04CF73A1AB6210B1486D035ADB79DCC4300CCD5E096E1B89D121607801777427E65
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 216B
SHA256 fa6f42988f26d3f2114cabb5c0698e97dbefa6f98c5ef5f320ed9af738161449
MD5 2f6f27de006380edb5c5d1397004de89
SHA1 eeb461942fe5c0ddd1dd9e13e47e79874b67ff52
SHA512 545366dce0d7745515551d7a66421cac9cdc5b03b5b7aa6e482c1184661e5659ff7c751728e8260580dd2036fcc3079eb78dad245f46a6fd4d3f107506fb780e
TLSH
T1D2D02B82C00A25C0C0390BB4B10884CF313CDFBADC0233AAC935403F787D13546A3407
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590526.TMP

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe590526.TMP
Size 48B
SHA256 50e532af663eaa0ef7c022bdddcd402d3cd3957bf3af9b9b14b94721f0e73ce8
MD5 f84ac0160987da9e547aeec786ec1d54
SHA1 b42585a75df0418c8edcae1f970cd739689d0b0d
SHA512 80287de4ce78342ce15da538395b361214463587cb21ca77e058204e33c6e0b2c9b57d6fc3195808818b106e1e91bf6fa2ffe686224ce3695693fb6ea00eaeb0
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Site Characteristics Database\LOG.old
Size 229B
SHA256 478932c7b0c272538071babf8a0daf6aea15bd4b88e7ac9c1371a6bc80bc6d52
MD5 e96b8296b146cf9e146730dfdd505517
SHA1 02ea66e41c4ed04478013ea4fe6ea1a4d413c43f
SHA512 2456ac6bdda916d545af5924a52ed31c01051423c4d9c5cc6a807902320798dccbe12527cc6d2a8b51ff8a3002dec0ec75620ea54fde68d72f7bbf3878c5f804
TLSH
T14AD0A521554F895F0CD111863175D6599752B4096555B3311C4CF7D863150077053696
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Local State
Size 10KB
SHA256 bb22ff57bc3d0983a28d9bcac13fed14c7627f31975ca0edebb91d2cd8c20109
MD5 d3c1a83aaff48ab7196455d1133e556f
SHA1 215438b9ded3ee23a20f1a3398399dd4c2df28ca
SHA512 a0dc3f3ffeb448d19540e1c33a565842191af38ca522840294d675ac0c1cca8cdb047a466e97af592e985c04feb1ee0f97c44587a0f5e5729847dba51e36d5f2
SSDEEP 192:zsD+xasuheOwQxM2NTt/RTTFfEmiUh2lzl+pkIw8w2B:zoZcI9NJ//d+ubw8zB
TLSH
T151223B31E8B4E9B75CF7DA85BB893A16BAF59113969C5FD8C8E80F0D00972991307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Local State
Size 10KB
SHA256 93cf5338b1fc4fcb239969b7423be46479e9a8a919cb316d7540a2c7ac7e49e5
MD5 5fb1a26d856eb260648f35dd1140a93d
SHA1 6b8280ac0cf8c192563b01c370dd59cb86f6b5b7
SHA512 44647f3900cf542cda64ee5cb2e8f407ad7bcd052b0489219a5db6fc4becc3ef1deebb84d63f6812acb4e73de4ee0406e2c9c175eabe1dbdc1055a8a0e1b1d94
SSDEEP 192:zsc+xasuheOwQxM2NTt/RTTFEEmiUhBwlzdH/pQIw8wXo:z5ZcI9NJ//E0HhPw8Co
TLSH
T113223B31E8B4E9B75CE7D686BB893A16BAF4911396DC5FD8C8E84F0C00972990307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Local State
Size 19KB
SHA256 36392a1e36db06c039f100a5d4553315c9071fff0db3e270d10cac07b11fcea7
MD5 a5db43bba71dc43c1376abb43347b8a3
SHA1 314d25c254f3424e6bee67cd85921fb5cac16bb2
SHA512 4ed66828ec6af5801e2c7ad8b1a155937311ac380772e687388ed8d9b20de152ad91fb645121a16c06389f9e5aa7f10d8a9c6089700e336c6f004adaf5bd89fd
SSDEEP 384:zm+aQikB+z/xvxjg/qhEYNJ/OQjyqbw8Tfa9zA:V/UxvxjgC+H78TSFA
TLSH
T16B927D36A468AE2398F3EA457749174BEBF484A284C85EE8CCE95F0D01D72DD1307807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Local State
Size 10KB
SHA256 b180daa55415448831a0cb6fdc5b938e9c0199ab1a78c51183dd78cef03c3337
MD5 b0203fafbd9fdb2c54101654f36fc574
SHA1 31722793c353d67a8fd5c28f8ad43d532a6da7f6
SHA512 d4bcf43bdc5af39d918d69c49d808bd4d38a7a603391b6c3d8ecf1bee0ca8b074969cde41cbfa9a41a7c9898377332a338fe6f04a84d79702b107106dadf8aef
SSDEEP 192:zbf+xasuheOwQxM2NTt/RmXTFQEmiUhNlo+HkIw8w2oY:zlZcI9NJ/OQisbw8zoY
TLSH
T1E8222A31E874E5A75CF7DA86BB8A3A16AAF5911396DC5FD4C8E84F0D00972990307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adlog.txt

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\adlog.txt
Size 4KB
SHA256 92ab1a1c78714a0822564b5eee2f2311b2d2b9b037b47e11483affc62cf5d082
MD5 3e972890f1c7985dc95572afaab8ef28
SHA1 01dab5aa2ee21b11bae8ded28c0d3f28ed8ae4b5
SHA512 8cfc15a5016a7070731eeb16a1157df580db6b712990dac8a57d5fd17f96b366b5035794fdd59e06f2accdffbe3820d0b1440019a285f164cd8a7adfe4bcd3bc
SSDEEP 96:5H1MWgEdhE1GOE2tFH1UE/tE14Ed2xH1GOEdKH1tjETH1GOEd01H1AEd2xH16EdV:zFdiS2tvBeNd2LSdQtIxSd0fVd2Lfd0K
TLSH
T180916256363E71268335E25504AE3ACA6C1331BEC4E6D3D46EBCC7552385627B4C3EB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msglog.txt

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\msglog.txt
Size 75KB
SHA256 44b96e45960497bc619a73404223ed1738f6c4cb786d498d3cf545a4405349f4
MD5 98ecbb7d97cc7e3b46f65e7f27b6c99a
SHA1 376fd78f652c2071441b686d10b9260ab82b0339
SHA512 80b1bf364e958ddab8bcc74a60f864a38a65fffd73ccb387997335783e7b6a7b8a6bb2fee74b35f3383cd18c02334bda31e4f764613fe9bed8febe3d7763064a
SSDEEP 384:8DLtBBDL3mSLcllDLc7DLc7wLM3jDLMJRLMJCvz8FrlwNe9CDLu3DLiDLvYDLtDY:Q3MoQtgcK8FJwNe935Zw6u
TLSH
T147730D3BC138B661E1331488FDAFA789ED73950E9EA45A58F39CD60120D215FF9C9E90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3104-72-0x00007FFB8FA10000-0x00007FFB8FA11000-memory.dmp

Download

memory/3104-73-0x00007FFB8EAC0000-0x00007FFB8EAC1000-memory.dmp

Download

memory/3388-143-0x00007FFB8F5E0000-0x00007FFB8F5E1000-memory.dmp

Download

memory/3756-407-0x000000001B6F0000-0x000000001B700000-memory.dmp

Download

memory/3756-0-0x00000000004D0000-0x00000000004F2000-memory.dmp

Download

memory/3756-7-0x000000001B6F0000-0x000000001B700000-memory.dmp

Download

memory/3756-3-0x000000001B6F0000-0x000000001B700000-memory.dmp

Download

memory/3756-2-0x000000001B470000-0x000000001B51E000-memory.dmp

Download

memory/3756-1-0x0000000002660000-0x000000000266E000-memory.dmp

Download

memory/4776-565-0x000002EE9DDB0000-0x000002EE9DDB5000-memory.dmp

Download

memory/4776-526-0x000002EE9DCE0000-0x000002EE9DCE5000-memory.dmp

Download

memory/4776-569-0x000002EE9DDB0000-0x000002EE9DDB6000-memory.dmp

Download

memory/4776-568-0x000002EE9DDC0000-0x000002EE9DDC3000-memory.dmp

Download

memory/4776-566-0x000002EE9DDA0000-0x000002EE9DDAA000-memory.dmp

Download

memory/4776-572-0x000002EE9DDC0000-0x000002EE9DDCB000-memory.dmp

Download

memory/4776-563-0x000002EE9DD90000-0x000002EE9DD97000-memory.dmp

Download

memory/4776-562-0x000002EE9DDA0000-0x000002EE9DDA4000-memory.dmp

Download

memory/4776-560-0x000002EE9DD80000-0x000002EE9DD8B000-memory.dmp

Download

memory/4776-559-0x000002EE9DD90000-0x000002EE9DD96000-memory.dmp

Download

memory/4776-557-0x000002EE9DD70000-0x000002EE9DD77000-memory.dmp

Download

memory/4776-556-0x000002EE9DD80000-0x000002EE9DD84000-memory.dmp

Download

memory/4776-554-0x000002EE9DD60000-0x000002EE9DD64000-memory.dmp

Download

memory/4776-553-0x000002EE9DD70000-0x000002EE9DD72000-memory.dmp

Download

memory/4776-551-0x000002EE9DD50000-0x000002EE9DD5B000-memory.dmp

Download

memory/4776-550-0x000002EE9DD60000-0x000002EE9DD66000-memory.dmp

Download

memory/4776-548-0x000002EE9DD40000-0x000002EE9DD45000-memory.dmp

Download

memory/4776-547-0x000002EE9DD50000-0x000002EE9DD53000-memory.dmp

Download

memory/4776-545-0x000002EE9DD30000-0x000002EE9DD3A000-memory.dmp

Download

memory/4776-544-0x000002EE9DD40000-0x000002EE9DD45000-memory.dmp

Download

memory/4776-542-0x000002EE9DD20000-0x000002EE9DD25000-memory.dmp

Download

memory/4776-541-0x000002EE9DD30000-0x000002EE9DD33000-memory.dmp

Download

memory/4776-539-0x000002EE9DD10000-0x000002EE9DD14000-memory.dmp

Download

memory/4776-538-0x000002EE9DD20000-0x000002EE9DD22000-memory.dmp

Download

memory/4776-536-0x000002EE9DD00000-0x000002EE9DD0A000-memory.dmp

Download

memory/4776-535-0x000002EE9DD10000-0x000002EE9DD15000-memory.dmp

Download

memory/4776-533-0x000002EE9DCF0000-0x000002EE9DCF4000-memory.dmp

Download

memory/4776-532-0x000002EE9DD00000-0x000002EE9DD02000-memory.dmp

Download

memory/4776-530-0x000002EE9DCE0000-0x000002EE9DCE4000-memory.dmp

Download

memory/4776-529-0x000002EE9DCF0000-0x000002EE9DCF2000-memory.dmp

Download

memory/4776-527-0x000002EE9DCD0000-0x000002EE9DCDA000-memory.dmp

Download

memory/4776-571-0x000002EE9DDD0000-0x000002EE9DDD6000-memory.dmp

Download

memory/4776-524-0x000002EE9DCB0000-0x000002EE9DCB4000-memory.dmp

Download

memory/4776-523-0x000002EE9DCD0000-0x000002EE9DCD2000-memory.dmp

Download

memory/4776-521-0x000002EE9DCC0000-0x000002EE9DCC2000-memory.dmp

Download

memory/4776-519-0x000002EE9DCA0000-0x000002EE9DCA6000-memory.dmp

Download

memory/4776-518-0x000002EE9DCB0000-0x000002EE9DCB3000-memory.dmp

Download

memory/4776-516-0x000002EE9DC90000-0x000002EE9DC96000-memory.dmp

Download

memory/4776-510-0x000002EE9D870000-0x000002EE9D879000-memory.dmp

Download

memory/4776-509-0x000002EE9DC80000-0x000002EE9DC85000-memory.dmp

Download

memory/4776-508-0x000002EE9D870000-0x000002EE9D871000-memory.dmp

Download

memory/4776-515-0x000002EE9DCA0000-0x000002EE9DCA3000-memory.dmp

Download

memory/4776-574-0x000002EE9DDE0000-0x000002EE9DDE3000-memory.dmp

Download

memory/4776-575-0x000002EE9DDD0000-0x000002EE9DDD6000-memory.dmp

Download

memory/4776-577-0x000002EE9DDF0000-0x000002EE9DDF6000-memory.dmp

Download

memory/4776-578-0x000002EE9DDE0000-0x000002EE9DDEB000-memory.dmp

Download

memory/4776-580-0x000002EEA3200000-0x000002EEA3204000-memory.dmp

Download

memory/4776-581-0x000002EE9DDF0000-0x000002EE9DDF7000-memory.dmp

Download

memory/4776-583-0x000002EEA3210000-0x000002EEA3215000-memory.dmp

Download

memory/4776-584-0x000002EEA3200000-0x000002EEA320A000-memory.dmp

Download

memory/4776-586-0x000002EEA3220000-0x000002EEA3223000-memory.dmp

Download

memory/4776-587-0x000002EEA3210000-0x000002EEA3215000-memory.dmp

Download

memory/4776-589-0x000002EEA3230000-0x000002EEA3235000-memory.dmp

Download

memory/4776-590-0x000002EEA3220000-0x000002EEA322A000-memory.dmp

Download

memory/4776-592-0x000002EEA3240000-0x000002EEA3243000-memory.dmp

Download

memory/4776-593-0x000002EEA3230000-0x000002EEA3235000-memory.dmp

Download

memory/4776-595-0x000002EEA3250000-0x000002EEA3255000-memory.dmp

Download

memory/4776-596-0x000002EEA3240000-0x000002EEA324A000-memory.dmp

Download

memory/4776-512-0x000002EE9DC90000-0x000002EE9DC92000-memory.dmp

Download

memory/4776-513-0x000002EE9DC80000-0x000002EE9DC84000-memory.dmp

Download

memory/4776-40-0x00007FFB8F5E0000-0x00007FFB8F5E1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads