05256dabc74136aec827d3e100161a8bf942f6b4f89ae3757cdd4154e1eb3140

Analysis

max time kernel
150s
max time network
176s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 19:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BuildNow/BuildNowGG.exe
Size 110KB
Sample260815-x7e85aseqa
SHA256 05256dabc74136aec827d3e100161a8bf942f6b4f89ae3757cdd4154e1eb3140
MD5 ff72acc3ff2bcb31c3dcf2c220a0dc34
SHA1 a13a82657f091bcb52aafc4d44cb420e8d37f2bf
SHA512 87660d95b68d74fde8c31d6c1ed8582da6f7e3c008a081f06f1d4ecbbcf2d188f971e3923efa440cc5e648152e7058854b3520833f047aef5260a91eda03f860
SSDEEP 3072:k2c8nchQn27vpukD5eeAvJ26bbMJKIRddVBvMdF7FzwdL3fJ4WEe0RzqQDwNnXzc:khxh827vpukD5eeAvJ26UB
TLSH
T10FB3A4456BF90209F5FB2FB4A8761085497AFD5EAC24CA5C0299D98D0971F92CCB2F33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BuildNowGG.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{A9036FA3-285A-432F-956B-358E0E4757B7}	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1392	msedgewebview2.exe
1392	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5860	msedgewebview2.exe
5860	msedgewebview2.exe
5860	msedgewebview2.exe
5860	msedgewebview2.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4368 wrote to memory of 5860	4368	BuildNowGG.exe	88
PID 5860 wrote to memory of 6024	5860	msedgewebview2.exe	89
PID 5860 wrote to memory of 4180	5860	msedgewebview2.exe	90
PID 5860 wrote to memory of 4180	5860	msedgewebview2.exe	90
PID 5860 wrote to memory of 4180	5860	msedgewebview2.exe	90
PID 5860 wrote to memory of 4180	5860	msedgewebview2.exe	90
PID 5860 wrote to memory of 528	5860	msedgewebview2.exe	91
PID 5860 wrote to memory of 2920	5860	msedgewebview2.exe	92
PID 5860 wrote to memory of 2920	5860	msedgewebview2.exe	92
PID 5860 wrote to memory of 2920	5860	msedgewebview2.exe	92
PID 5860 wrote to memory of 4248	5860	msedgewebview2.exe	93
PID 5860 wrote to memory of 4248	5860	msedgewebview2.exe	93
PID 5860 wrote to memory of 4248	5860	msedgewebview2.exe	93
PID 5860 wrote to memory of 4248	5860	msedgewebview2.exe	93
PID 5860 wrote to memory of 4248	5860	msedgewebview2.exe	93
PID 5860 wrote to memory of 4708	5860	msedgewebview2.exe	94
PID 5860 wrote to memory of 4708	5860	msedgewebview2.exe	94
PID 5860 wrote to memory of 4708	5860	msedgewebview2.exe	94
PID 5860 wrote to memory of 4708	5860	msedgewebview2.exe	94
PID 5860 wrote to memory of 4708	5860	msedgewebview2.exe	94
PID 5860 wrote to memory of 3760	5860	msedgewebview2.exe	95
PID 5860 wrote to memory of 3760	5860	msedgewebview2.exe	95
PID 5860 wrote to memory of 3760	5860	msedgewebview2.exe	95
PID 5860 wrote to memory of 3760	5860	msedgewebview2.exe	95
PID 5860 wrote to memory of 3760	5860	msedgewebview2.exe	95
PID 5860 wrote to memory of 4940	5860	msedgewebview2.exe	96
PID 5860 wrote to memory of 4940	5860	msedgewebview2.exe	96
PID 5860 wrote to memory of 4940	5860	msedgewebview2.exe	96
PID 5860 wrote to memory of 4940	5860	msedgewebview2.exe	96
PID 5860 wrote to memory of 4940	5860	msedgewebview2.exe	96
PID 5860 wrote to memory of 916	5860	msedgewebview2.exe	97
PID 5860 wrote to memory of 916	5860	msedgewebview2.exe	97
PID 5860 wrote to memory of 916	5860	msedgewebview2.exe	97
PID 5860 wrote to memory of 1304	5860	msedgewebview2.exe	98
PID 5860 wrote to memory of 1392	5860	msedgewebview2.exe	102

C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe
"C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of WriteProcessMemory
PID:4368
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4368.1172.9089430886041356016 /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065
  2⤵
  - Checks SCSI registry key(s)
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5860
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView /prefetch:4 /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x198,0x7ff839c55fd8,0x7ff839c55fe4,0x7ff839c55ff0
    3⤵
    PID:6024
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1776 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065
    3⤵
    PID:4180
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=1968 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065
    3⤵
    PID:528
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2220 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065
    3⤵
    PID:2920
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3508 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065 /prefetch:1
    3⤵
    PID:4248
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4056 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065 /prefetch:1
    3⤵
    PID:4708
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4384 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065 /prefetch:1
    3⤵
    PID:3760
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4628 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065 /prefetch:1
    3⤵
    PID:4940
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4780 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065
    3⤵
    PID:916
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4920 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065
    3⤵
    - Modifies registry class
    PID:1304
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView" --webview-exe-name=BuildNowGG.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=5188 --field-trial-handle=1780,i,676194980848886367,2458772016787488947,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:e2edc4b918d74c476c103766a8f9a494018a3065
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 8d1ec01105519779aa3cd434c58f25a72fe06a06bd0fa9b44a94dc04b4408cc5
MD5 4893eb6f31ae0e76e538ab1d594a9124
SHA1 4f79d7add0f41d5cea461180783b5c66c552fddf
SHA512 3febc9b90676de15ad738b232834761d44c9fb3bfc217590f6dff52c641a049df4d96221c60570a63adae584b8054750960326d09dc0fe713a21201cdb49ef85
TLSH
T129D08033B1854C78C47055B3440360CF7B5AD19F6365140D7479C91A5F540E899535B4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a209e339584a8bba0b1e47051ba173ac9e76f6467f975299d327c6a0aa1a23da
MD5 b74830762c5cf2f480f2bc57318041e7
SHA1 0b9cef5a3eab607842c18503f4ff6a983786cddb
SHA512 4dc83d5ace3ca779f9e153a469b1662c9d0191e23691f106b94d3cbbda66a29fe1dc6357193eaa225346add67644c72561e5865df172fddd9f33e621c1a8b3a0
TLSH
T1E9D02B22B102CC38C4B010730402B0CA3715C08E4366300A643ACE1E1F100D00A134A4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9f5ae494fe6d10358ea96f96ae3ae114439cf5cf6ce00835b85dde2557432c7d
MD5 f997ccaf17ad6bfb275fbee5a1f0eb8b
SHA1 f6581d63c720e17a69057d3f5a39c4f4ed4e62f2
SHA512 8324a1ca0c188528020c796c31c810d85edf7ab6ee4e2edd791f9c1e03aec3840a3b226209cd600b273b58325afb2f592c57a2009d3439a980bfe8b76ea850b7
TLSH
T188D02B32B101CC38C5B010730402B0CA3705C08E8366200B6439CE1E1F200D00A134A4
MD5 SHA1 SHA512 TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Cache\Cache_Data\f_00007c
Size 4.3MB
SHA256 e40cd1a40546988f96effda447918231e41742812c5586e0a0d24c2e6cdb41c8
MD5 a5437b71714877f4eed634a95704019d
SHA1 54db4d77dbf4c61562c05e14379a552fa93e6481
SHA512 bdf2a9a903a6851c998efd263b65f4e296ee066024a3ff9897657f9bdcf210bc06c99fec5f387cb5f6517a10d8240f95e5b657323a7899286ea24d268936fb1c
SSDEEP 98304:CyakVaEph5pi6S+1rVdDWPmJMOe1tWTPt2uJFlNevuOe4:CBuaEfB7SrDcTpDiuOe4
TLSH
T1812633B2D3A0AE67C0BC1B3D43764F1AB3364C5457138F9E8656BF78057AB14AE42B18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 e89ba6f5e145c87f66e7df2c6136b2fe0e7c828e0c1325d647fc367274eb18eb
MD5 1b8c213b2197a26bc2b074430af5e024
SHA1 c849364f3af0884ae10a0874aba08b6211fca7f2
SHA512 8744d9a1af90d24bd9ebcf91b37afc0565eb7c29733d20dd01a3165673bea8d5ddefe769a82eced20c1d4e7a8dc06311aa7946e30986bbc3639b30c3bcfe3558
SSDEEP 192:yZxYb15Xa+zu5ULqLkRwImVVnVaAQLjuEYUNH0KH277esACL7/kITaNG1Eis0MXR:Ph+AgvTLgGdWX4Ya3ir
TLSH
T11B12A487B1A48E12EB94493D0ECC1E8533F2E4860D374E521B84AD74C9A6FB81CC25FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a9f6e.TMP

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a9f6e.TMP
Size 8KB
SHA256 ec143ab6ecbb088090303713a981878c05439049a7c70520ae0c6286f856f30b
MD5 883b3578b588879ff8bd5c8fe807c824
SHA1 d1f0b8ceb24c3d29a6c5ae1a1ca8faf540712b9c
SHA512 4cdd4b458c0614db69c1f54bb611032d43c46818d35a252c8d23cc3cfd6642fa1e0068d0b82cb322b8aff7aa8c62555446c60d258e9ffca59b9b065c49b9bed9
SSDEEP 192:AOD8Yb15v+a+zu5p8LqLkRU2wqjpts1ZxomcasWnWxaAQnu7hR0uEYUNmhAKHwZG:l96AJNmL6kGMYvxyNQS
TLSH
T14802C38175608E21D750867D4DCD6E0633F6E4C64E334E225718AD30DAE2F181DC25FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
Size 384B
SHA256 d51769a2c56f6cb1970514dd154034b4c00cfcd5107202ac1816257c2b428e66
MD5 9fa5be4833fa3fd0609443fd0f11fab2
SHA1 e7a5cdeb4ff5ff732a8dcd0693968ff68bb7bd8c
SHA512 3229d40c6e38e2b7415b86edb9b285743f1f13c308288ada23e42bb82de586e8f8546b0c3a8851da1f2ace40f9e04e92c94e9a2ff427959179843070c5308fa6
TLSH
T160E07D1974620C02D70811B25DC62C94B3C1C1DBA972D19ACBBBFD09C0D2D8203CC350
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
Size 360B
SHA256 f86212926f56e1e5cbb0cdf5277e5f3fcd39c21c6c596629e8522af3c0c1595f
MD5 25cf743c1b82cdd3a50b5e89df71d8c4
SHA1 3728aa9d98409fe337bad08df841893ce6ee2dce
SHA512 30cd30baa90db45355a2b3acd07229ec67244e09ffe8059642e36ac7ac512ccb949fa4b1c40b7dd4821117b99705535f38001e17157bbecf6a3611e4836a7552
TLSH
T10BE0C22678A50D01D70411B29ED22CE4F6D1D2DF89B6E56997B9AD5A80D2D9302C9340
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ac1ea.TMP

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index~RFe5ac1ea.TMP
Size 312B
SHA256 5938818c0371abf711a9b431c09003ef2c3c382609ca9960d9896d49797ee925
MD5 70e19fb53dd3c3eb2be93af702af38cc
SHA1 cbf72e28549ca53b9620e2b731d65b9016179ea6
SHA512 186bfd86924012872d08848295cb97f1f48400a3c87f5d245b92801b9e3cf12a14334200480b700518e48dde38347453fefeac3a0fc3b17630304e3ab3ac615f
TLSH
T11FE0A769B5100D06E30C01752EC73E5472D1D5DB947699AA9F7ECE42D4D2D1247DA340
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 e70036ace6ab80b04c37e0ae351e64f22b2b69286cd155568643f23358d3f988
MD5 b35f6319cf3fb6492d75c8f6c0a688f4
SHA1 146a6b9883a3dc2610fb5fd60440f4672713d086
SHA512 e16e83a29cbae43ca224d1724f2df8adff8afeb6cd9aa664971ec43d531d0862d09782e7ddbb850e2ef4f3682964a7f6a2d70caa429eaf34861a911e4e8ed53b
SSDEEP 96:Dd+WleEOlvHq/xexIZ7ARojZ3YPnahOv/IwoMumNRc1oMaVIIwhVS:Dd+WleEOlvHkxexIBARojpY/ahOXIwow
TLSH
T164B19DB6D6F4463ECE2151F52B352E1BCE2D047857B8A91AC8D4EF8793E1072E28164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 6KB
SHA256 70504dcf005c8b9a0bbd5eac32784455b22cf0a7d53287a4279fd3b3117685c3
MD5 fcc11661556aad196cdb4081fb0eba4c
SHA1 adc3fc11e5dbf98a58e07a0024f8de5568981b74
SHA512 47553d3651ce8cfb93df207d1934e2d65a6c20ef76a216308a74cbc9fd74eb8fc60758abd24090877d1a2dc48551bfb5e0cb8163cecec643bc3bc4aa05276359
SSDEEP 192:EUmUrUGUQUUOU2UsUdGUcUsRUGsUgUUEUiUGQUVULUu9UoUdUNIUpU9UsKU8UxUU:EN2fAvvhkG/H5sMpTuYsl9NS2Ig4lKf+
TLSH
T13EE18CA7D57FB86B203D997B1E09BC092979A4360281ACF8DF97C26CB0E58F75712052
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 6KB
SHA256 70c827423386b518190b948d301fdd34b20052117c516560ccd16cc7ce7b6510
MD5 ff52daa148cdf6190fbbfce509fef6b3
SHA1 238ce650e7cb2ead9e9583729174ad70c2550924
SHA512 1660699d57726ec92d55626c4b23a64ad959f3307483564227753c7b11d7f2f1f29f29f33f07ac3c534c5f6b7ff5b2fccfd9d991ae230700868644eb8ae7e995
SSDEEP 192:EUmUrUGUQUUOU2UsUdGUcUsRUGsUfUUTUiUGQUVULUu9UoUdUNIUpU9UsKU8UxUc:EN2fAvvhkG/H5s5eTuYsl9NS2Ig4lKfe
TLSH
T1B0E18DA7D57FF86B203D997B1E09BC092979A4360281ACF8DF97C26CB0E58F75712052
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 6KB
SHA256 151011f52f62886411b4e29103904718a9c9776b99446afd6aaa9290a0ef6187
MD5 79f565a9b7cefd48327a137dd812e051
SHA1 f58383a1f1ed56562445e25a5b039d9ca3b9d7bc
SHA512 b7bdf9b4b70d50f6f017b29cdf7b04691b49b924c3dfd40d59ffca0068d6d4e3d676266f804909c83fa50988356547813fca865785f152ae32b88338eac23336
SSDEEP 192:EUmUrUGUQUUOU2UsUdGUcUsRUGsURUU9UiUGQUVULUu9UoUdUNIUpU9UsKU8UxUc:EN2fAvvhkG/H5sLoTuYsl9NS2Ig4lKfe
TLSH
T123E18EA7D57FF87B203D997B1E09BC092979A4360281A8F8DF97C26CB0D58F75712092
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 6KB
SHA256 7073e4e311ab59a833126b37097f1289216a3fe5703536529572cb40b07388ab
MD5 7ebde18a5e4edd3416d1308fc553a5ab
SHA1 0c7c37fbe2d5dfab47f718b6e87fdb775efa10a2
SHA512 792a4af4aea16ae813a9939d2a1533c0b7296cc4c9824dd96148d4544504614604f5c64ea2fab4b2cd071bc67cdbdbc7775a0e2efa49e335532fff716239339a
SSDEEP 192:EUmUrUGUQUUOU2UsUdGUcUsRUGsU5UU9UiUyQUxULUu9UoUdUNIUpU9UsKUPUUUU:EN2fAvvhkG/H5sL0TeQsl9NS2Ig4lKAH
TLSH
T1D8E18DA7D57FF86B203DA97B1E09BC092979A4360281ACF8DF97C16CB0E58F75712052
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Platform Notifications\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Preferences
Size 35KB
SHA256 944cc4ad8108efeca22fd86d693aef447de4cd1f6ab871939ae4aa38f202d0fe
MD5 4eee7f00e8054093cbfc999b45990cd6
SHA1 14fc0dd03f484553d1f37bff7ddad05489aaf20d
SHA512 bbc13746d87d939f285add56d50c364ff0d960f5bcee00559ffc78a3453b6770b7591e0548d85fee6fa15a6d212f8b9d8239dd48a49abda9b39a4aed5b55573e
SSDEEP 768:sGITNc2J0WOlDl1KqX8eyWEhUuWrYtwP7:9ITHJ04QyW8te
TLSH
T139F2B9A3B1B41EB91AD96472F051F27ED781046A99F48ED36BE8C92C11D79FDB800CC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Preferences
Size 35KB
SHA256 d93798ec8358af045ef0f8726227b59af30d016f17368a6941f0fbcf41549775
MD5 fb5e63bb7d1b131d6fa7be3fcd411726
SHA1 a4fbeb26d60268b7f01cc69458450198457c8e0e
SHA512 f76a17086cbc9db1d44d8aaf40e4fdfdd224eaa11f1295e2b39dac632abb7b0a1b679c50d8de9f8494e118aaa5bdb3ce881c5e0cbc237dc54a4ead0051e5620e
SSDEEP 768:sGIZNc2J0WOlDl1KqX8eyWEhUuWrYtwj7:9IZHJ04QyW8tM
TLSH
T17BF2B9A3B1B41EB91AD96472F051F27ED781046A99F48ED36BE8C92C11D79FDB800CC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Secure Preferences
Size 9KB
SHA256 cbe6b67e78dd5f1c4217dce635090598dfab540baadd2db85eae4aaa933b2c2b
MD5 9f2176390be558dda71ad7d4d9477b00
SHA1 9ecee15fc8aa6c3d7db946f144742d8b0a6875af
SHA512 b225827578d9e78c24fc0e6b2e42797175486d41aa951d357f21c877fb71229b91c65ddeb73e7c54ca7959440993d6590e99fdc080203e626a3358b601deed8b
SSDEEP 192:fSvCF9lCgaPJKbOUNLcI2TqdH9fU5vCnlG+4wSazsnMsAKbWngsrJ5hdP:fXF9CBmc/htAw+tTzsMsgLd
TLSH
T1611219F3152C9A365F4996EAEC39BEC7CCAA018FC6DD4D1195E7824806C3BED32C5492
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\e770e2d8-5ef1-4b43-a184-0edbd30ccb11\index-dir\the-real-index
Size 336B
SHA256 6529a3b4a607e6a4a42e24d0435ecfd6e55b9b1b5c32aa6682790da751353e8f
MD5 503b4c9021db4c2b83c6778f0350ec33
SHA1 7e3bca862c3c6038127c770588f5848be2bf6b64
SHA512 7242ed189ce782eae3d1e2693c6320311d01104fb6fa3faf9f588396334201136975a5623015f932ddad9ceb43e52b00c000be372a7b95b34201ae0436a48684
TLSH
T1D9E0A784923021C1C1820679E95724E1333548977B03076A07A3EB39EA556569E6575A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aabe1.TMP

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\e770e2d8-5ef1-4b43-a184-0edbd30ccb11\index-dir\the-real-index~RFe5aabe1.TMP
Size 336B
SHA256 842f567c43bb1a7968accaa8fff86ce6c965f87730136ae50b1774f5ca353cfa
MD5 8f55f9d15a0ff5bf90a503dfb42a086b
SHA1 fc1c325d1634e64107928e9ffa758a4a4b22e312
SHA512 3949c9dfea3de1f6836a6e858bdaff8b413157aed54c3f5ed37d47e36d4c73380d24bb239fed50f488100e671fd321707172a05d8c10dd84034e5150d00742d0
TLSH
T1AEE02350B548D6C4D09045B4D72B1042B3140CF8190556574795C93C953D68E5DC47C5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\CacheStorage\8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3\index.txt
Size 159B
SHA256 529fecd5d20db2bbd1372d91dbb5a51b2ef2fd288990e8f9edf4f8c728402bd9
MD5 1101221f8f816a94dbb0b7b1afbf78cc
SHA1 88ee8a55ee82c8c5bf464bcf854f1f09055a52af
SHA512 48e5a96e73f411f2530e6d773d692f1a1475e76f4fdff1d3a9c0ea21f4621500e400d58bbc8c957eec9eedfdfec5e25736f89e567c0bce69a3d03c1eaa1b81aa
TLSH
T101C04CF73A1AB6210B1486D035ADB79DCC4300CCD5E096E1B89D121607801777427E65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\CacheStorage\912709543df8651be46e48b710469d8b278c3a3e\index.txt
Size 184B
SHA256 e78a9e1a9fa1057dec2578918ac4cb845eb854f3a0e0693bf5561bc5e1dd922a
MD5 95e00182cf0d85860157b89f582f8c10
SHA1 e36dac5d18eeeee74e675c64814d606b12101148
SHA512 cc78eeb11f83373874c87c45b9030cd9f7456eae595fc73e7f94611a0bcab39ff29611d844bbc79f9a82f151cd6e9be334844e863f7818ff3b720d29a1bc34e0
TLSH
T1F8C0127B733D1B456960D3E224DE3B40E82705D5D5E9EC8828698112F28137341FBBB8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 216B
SHA256 0efd0edd3f01546f92afd54763123562923aa07a01d3d2324d01b523fdb7f1aa
MD5 379840db58d212b81a8f9e6304d00cd2
SHA1 3c201e2286bc49124d3d661a98cb5ba126553b12
SHA512 5b67285dba212f4c5612a20618c7c4ee9364b07a5f16d2643c863495ef29cc898d841e4421002d24d79b1dac0bf9858d4bd8827ac980c9aac4a76da92d190a3c
TLSH
T1D8D08041C3091540CC1402F3050454EC11E8AB75F904729F0478916D957706A5317145
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aacfa.TMP

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5aacfa.TMP
Size 72B
SHA256 59495aba531358fdf8b60a40a3c5e6cddf8edd9830bd842f96573cadeeb698de
MD5 8fec1ef73ee759b8855212ee97ef398c
SHA1 c3df1b3c2ccc5514ea6bc5c7ce87c0911e787727
SHA512 73ec7285bbe95661a4115ea4c56b55c18414bf955889ebfa8e6b6d4590bb53e0823f0fd8f994b1c89e4a5dc669767a5f6bf7ffdd27cbdba9853f565159ac1381
TLSH
T164A004314340C151D4110FF5141517D4D304FF3551414733C3F107D5DC70D70C551054
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Default\Site Characteristics Database\LOG.old
Size 229B
SHA256 45528d3438e95272b176259d2145903bf92fd80d1283f37d558e233af922f01b
MD5 3d74203f3b36e7adf383267480a03aa3
SHA1 f1b544a0b759d43a3dda7ea1f84d26dad1c86a34
SHA512 3fb116453405055626bc8f3cb3ffb92cda7819b18c47779829accce851860969a38b7c4d8d0c98a9977bd76fda265e6b890564c13d2f32fa3a68efc4d216e7bb
TLSH
T151D09521654F455E0C8111863236D6584762B4057545B3201C4CF35863190067053247
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Local State
Size 10KB
SHA256 9a24647cabb04bcd66f120e3e0aae8af3f7d231300e7f40fca9b01028a18cc97
MD5 b688a0d0c690a8d374459b4f28699e19
SHA1 87e6d71dca65ceb333c97a76786c6c34d2db636b
SHA512 4f972a8d7884d838a8577daf6c94c22df45620b63e8d179b9c920d6dd417c482c46d9a802185b30e037eb053593f5f7c9fed9a7598debfb0f6aaa76fdc7cc646
SSDEEP 192:zSS+xasuheOwQxM2NTtQRLtK6yqmiUhT96kHmIw8w2j:zvZcI9NJQ7K6K/66Nw8zj
TLSH
T1FE223B31E8B5E9B79CF396857B893A07E6F49053A69C5FD8D8E84F0D10972990307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Local State
Size 10KB
SHA256 46427a8488d4525a60ef2a9d80a75cdd321d393eef25c01429eaa5dedbc3856f
MD5 06a6aa797236e8e2f6b71cd05a1fd289
SHA1 8b336fc6d3d5d18be81e3e365373834fc34011a2
SHA512 b572c43eabb8ebf2153dc1aebbe0601cb643bc15a8b88d097b544e21b9e45ec0104fa18734d2707ac2a82d683e9678873675850298c024a001b6f7ab5958f5ae
SSDEEP 192:zSc+xasuheOwQxM2NTtQRFtK6fqmiUh89plkpmIw8w28:zrZcI9NJQFK6nuP0Nw8z8
TLSH
T157224C32E875E9775CF796857B893A16E6F49013A6DC5FD8D8E84F0D10931990307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Local State
Size 10KB
SHA256 a7c2d7d0f54fe35e39c818c1b9bdd95198a0c221d32ac51455752ec9e5a7be6e
MD5 4d88bf5439c5cbb9debdc7f9dd34f0d8
SHA1 14ef74627c464cc95243f3ccf6eef65e87cf9138
SHA512 b18b9c3cf3dc4adf6d69a8e65964be920289929b0f7249131d3ad4907d1b61a1f5e33ea073c21c0a443539c2d04395080e19604814e2ae476e661e506e4449b2
SSDEEP 192:zSc+xasuheOwQxM2NTt/RFtK6EEmiUhXw9pdH/pQIw8wX8:zrZcI9NJ/FK6Eq3HhPw8C8
TLSH
T1A2224A31E875E9B75CF7968ABA853A16EAF4901396DC5ED8C8E84F0D00972990707C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\BuildNowGG.exe.WebView2\EBWebView\Local State
Size 19KB
SHA256 087496c19d5d665876b962a64c533cdd07e294cb6252009309c049dbf93ca9e3
MD5 8f8997c9335eab0b1f26b9a2ae003af0
SHA1 6e3c7ec6b96287ca042d3b429aca849e2f722be9
SHA512 b079f4f05d9ef00a87dddc6164d84036a8531a8314b82178cea50f8d6356ea7c75d8aa232112e11c5ae04ee362fed2b9a50a4f3b1363be9b401461ab0329b634
SSDEEP 384:zM+aQikB+z/xvxjg/qhEYNJQLK6K/6k9fQ8TEAVdp5wB9zg:P/UxvxjgC+u+2Q8TEUKFg
TLSH
T165929E36E469AE63A8F7AA45770E278BDAF484A351C45EE8CDE85F0D02C72DC0303807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adlog.txt

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\adlog.txt
Size 4KB
SHA256 4ebf194158f3d47fe69e4079c7128e200bd9911549c0a11e3be0cca2214b25f8
MD5 e66236dab24b1ff3dc9d1cfe9080e920
SHA1 6ac8da169a40f53aaca1c478baf2355628c00c5f
SHA512 b47da92868713ea53cb7d190bb9fd7c7f1f500801da8c68f53a0a2b2d5b69c01c53ab09d8b2e3d46160a1ffe510c363bb766b0789db99fd2458913f8b431b80c
SSDEEP 96:5H1MWgEdhE1GOE2tFH1UE/tE14Ed2xH1GOEdKH1tjETH1GOEd01H1AEd2xH16Ed0:zFdiS2tvBeNd2LSdQtIxSd0fVd2Lfd0V
TLSH
T12391525A363E70269335E25504AE3ACA6C1331BEC4E6D3D46EBCC7552385617B4C3EB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msglog.txt

Path C:\Users\Admin\AppData\Local\Temp\BuildNow\msglog.txt
Size 75KB
SHA256 a9ef70620b6f9d72d7aefe9f91159393038fcc4626f574db32825f1375c2a032
MD5 2c9510729968dd4e3412d37240ae470c
SHA1 06363696c931bfd425969e4127b1461722957583
SHA512 46655b1209524d7065214970da0de83feb6f0ed26fe6164bbb7319f57a375fc77f962d0d6cb6c537b8cb9bb9fcee507e47e81c6954b05de129d9e54cd569270d
SSDEEP 384:8DLtBBDL3mSLcllDLc7DLc7wLM3jDLMJRLMJCvz8FrlwNe9CDLu3DLiDLvYDLtDu:Q3MoQtgcK8FJwNe935Zw68
TLSH
T11F731D3BC138B661E1331488FDAFA789ED73950E9EA45A58F39CD60120D215FF9C9E90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2920-110-0x00007FF860DC0000-0x00007FF860DC1000-memory.dmp

Download

memory/2920-111-0x00007FF8610F0000-0x00007FF8610F1000-memory.dmp

Download

memory/4180-399-0x0000029563790000-0x0000029563797000-memory.dmp

Download

memory/4180-437-0x0000029563CE0000-0x0000029563CE5000-memory.dmp

Download

memory/4180-429-0x0000029563CA0000-0x0000029563CA5000-memory.dmp

Download

memory/4180-428-0x0000029563CB0000-0x0000029563CB3000-memory.dmp

Download

memory/4180-426-0x0000029563C90000-0x0000029563C9A000-memory.dmp

Download

memory/4180-425-0x0000029563CA0000-0x0000029563CA5000-memory.dmp

Download

memory/4180-423-0x0000029563C80000-0x0000029563C87000-memory.dmp

Download

memory/4180-422-0x0000029563C90000-0x0000029563C94000-memory.dmp

Download

memory/4180-420-0x0000029563C70000-0x0000029563C7B000-memory.dmp

Download

memory/4180-417-0x0000029563840000-0x0000029563846000-memory.dmp

Download

memory/4180-411-0x0000029563820000-0x0000029563826000-memory.dmp

Download

memory/4180-410-0x0000029563830000-0x0000029563833000-memory.dmp

Download

memory/4180-408-0x0000029563810000-0x000002956381A000-memory.dmp

Download

memory/4180-405-0x00000295637B0000-0x00000295637B7000-memory.dmp

Download

memory/4180-404-0x0000029563810000-0x0000029563814000-memory.dmp

Download

memory/4180-402-0x00000295637A0000-0x00000295637AB000-memory.dmp

Download

memory/4180-401-0x00000295637B0000-0x00000295637B6000-memory.dmp

Download

memory/4180-94-0x00007FF860290000-0x00007FF860291000-memory.dmp

Download

memory/4180-398-0x00000295637A0000-0x00000295637A4000-memory.dmp

Download

memory/4180-396-0x0000029563780000-0x0000029563784000-memory.dmp

Download

memory/4180-395-0x0000029563790000-0x0000029563792000-memory.dmp

Download

memory/4180-393-0x0000029563770000-0x000002956377B000-memory.dmp

Download

memory/4180-392-0x0000029563780000-0x0000029563786000-memory.dmp

Download

memory/4180-390-0x0000029563760000-0x0000029563765000-memory.dmp

Download

memory/4180-389-0x0000029563770000-0x0000029563773000-memory.dmp

Download

memory/4180-383-0x0000029563750000-0x0000029563753000-memory.dmp

Download

memory/4180-381-0x0000029563730000-0x0000029563734000-memory.dmp

Download

memory/4180-380-0x0000029563740000-0x0000029563742000-memory.dmp

Download

memory/4180-378-0x0000029563720000-0x000002956372A000-memory.dmp

Download

memory/4180-377-0x0000029563730000-0x0000029563735000-memory.dmp

Download

memory/4180-375-0x0000029563710000-0x0000029563714000-memory.dmp

Download

memory/4180-369-0x00000295636F0000-0x00000295636FA000-memory.dmp

Download

memory/4180-366-0x00000295636D0000-0x00000295636D4000-memory.dmp

Download

memory/4180-358-0x00000295634B0000-0x00000295634B6000-memory.dmp

Download

memory/4180-357-0x00000295636C0000-0x00000295636C3000-memory.dmp

Download

memory/4180-355-0x00000295634A0000-0x00000295634A4000-memory.dmp

Download

memory/4180-350-0x0000029563490000-0x0000029563491000-memory.dmp

Download

memory/4180-431-0x0000029563CC0000-0x0000029563CC5000-memory.dmp

Download

memory/4180-435-0x0000029563CC0000-0x0000029563CC5000-memory.dmp

Download

memory/4180-419-0x0000029563C80000-0x0000029563C86000-memory.dmp

Download

memory/4180-414-0x0000029563830000-0x000002956383B000-memory.dmp

Download

memory/4180-416-0x0000029563C70000-0x0000029563C73000-memory.dmp

Download

memory/4180-413-0x0000029563840000-0x0000029563846000-memory.dmp

Download

memory/4180-407-0x0000029563820000-0x0000029563825000-memory.dmp

Download

memory/4180-387-0x0000029563750000-0x000002956375A000-memory.dmp

Download

memory/4180-386-0x0000029563760000-0x0000029563765000-memory.dmp

Download

memory/4180-384-0x0000029563740000-0x0000029563745000-memory.dmp

Download

memory/4180-374-0x0000029563720000-0x0000029563722000-memory.dmp

Download

memory/4180-372-0x0000029563700000-0x0000029563704000-memory.dmp

Download

memory/4180-371-0x0000029563710000-0x0000029563712000-memory.dmp

Download

memory/4180-368-0x0000029563700000-0x0000029563705000-memory.dmp

Download

memory/4180-365-0x00000295636F0000-0x00000295636F2000-memory.dmp

Download

memory/4180-363-0x00000295636E0000-0x00000295636E2000-memory.dmp

Download

memory/4180-361-0x00000295636C0000-0x00000295636C6000-memory.dmp

Download

memory/4180-360-0x00000295636D0000-0x00000295636D3000-memory.dmp

Download

memory/4180-354-0x00000295634B0000-0x00000295634B2000-memory.dmp

Download

memory/4180-352-0x0000029563490000-0x0000029563499000-memory.dmp

Download

memory/4180-351-0x00000295634A0000-0x00000295634A5000-memory.dmp

Download

memory/4180-432-0x0000029563CB0000-0x0000029563CBA000-memory.dmp

Download

memory/4180-434-0x0000029563CD0000-0x0000029563CD3000-memory.dmp

Download

memory/4180-438-0x0000029563CD0000-0x0000029563CDA000-memory.dmp

Download

memory/4248-98-0x00007FF860290000-0x00007FF860291000-memory.dmp

Download

memory/4368-12-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-7-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-305-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-336-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-0-0x00007FF83E9BF000-0x00007FF83E9C0000-memory.dmp

Download

memory/4368-349-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-8-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-314-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-6-0x000000001B190000-0x000000001B23E000-memory.dmp

Download

memory/4368-5-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-4-0x0000000002580000-0x000000000258E000-memory.dmp

Download

memory/4368-3-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-2-0x00007FF83E830000-0x00007FF83F1D4000-memory.dmp

Download

memory/4368-1-0x0000000000200000-0x0000000000222000-memory.dmp

Download