486d8c28dd39da3a2cdc1de072fe4ca699452d85c3637ce70b92d3027bca71c0

Analysis

user interaction
yes
max time kernel
3s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 19:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
noriskclient-launcher-v3.exe
Size 31.9MB
Sample260910-x4py6aed58
SHA256 486d8c28dd39da3a2cdc1de072fe4ca699452d85c3637ce70b92d3027bca71c0
MD5 bdcdf4ece0d3cdfe0cbd767b0758188f
SHA1 32bb4e4480211f46da24fd9451f4a440abe24904
SHA512 60546189314b2b8c5e1977217367f2fc56a4f10faa3005937c070bd18a567bad7b9970bcad004f9945dbd35efee7939f3b9c0b0bd0a6840c62d6857006a4eaed
SSDEEP 393216:RcANfB5U+NCBcW3z6j/MOXu0BObpvDrxxdnj9gZfX:G4p59CeW3z6jXXu0BOdpxgFX
TLSH
T15877AD03F69180E4D0AEC478835AE637EB72BC894535B25B5BE4BB112F79F50AB0D319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	noriskclient-launcher-v3.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\norisk\DefaultIcon	noriskclient-launcher-v3.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\norisk\shell\open\command	noriskclient-launcher-v3.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\norisk\shell\open	noriskclient-launcher-v3.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\norisk\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\noriskclient-launcher-v3.exe\" \"%1\""	noriskclient-launcher-v3.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\norisk\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\noriskclient-launcher-v3.exe,0"	noriskclient-launcher-v3.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\norisk\shell	noriskclient-launcher-v3.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\norisk	noriskclient-launcher-v3.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\norisk\ = "URL:gg.norisk.NoRiskClientLauncherV3 protocol"	noriskclient-launcher-v3.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\norisk\URL Protocol	noriskclient-launcher-v3.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4448	noriskclient-launcher-v3.exe
4448	noriskclient-launcher-v3.exe
4448	noriskclient-launcher-v3.exe
4448	noriskclient-launcher-v3.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4496	msedgewebview2.exe
4496	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4448	noriskclient-launcher-v3.exe
4448	noriskclient-launcher-v3.exe
4448	noriskclient-launcher-v3.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4448	noriskclient-launcher-v3.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 4448 wrote to memory of 4496	4448	noriskclient-launcher-v3.exe	85
PID 4496 wrote to memory of 4156	4496	msedgewebview2.exe	86
PID 4496 wrote to memory of 4036	4496	msedgewebview2.exe	87
PID 4496 wrote to memory of 4036	4496	msedgewebview2.exe	87
PID 4496 wrote to memory of 4036	4496	msedgewebview2.exe	87
PID 4496 wrote to memory of 2232	4496	msedgewebview2.exe	88
PID 4496 wrote to memory of 5112	4496	msedgewebview2.exe	89
PID 4496 wrote to memory of 5112	4496	msedgewebview2.exe	89
PID 4496 wrote to memory of 2020	4496	msedgewebview2.exe	90
PID 4496 wrote to memory of 2020	4496	msedgewebview2.exe	90
PID 4496 wrote to memory of 2020	4496	msedgewebview2.exe	90
PID 4496 wrote to memory of 1400	4496	msedgewebview2.exe	91
PID 4496 wrote to memory of 1400	4496	msedgewebview2.exe	91
PID 4496 wrote to memory of 1400	4496	msedgewebview2.exe	91

C:\Users\Admin\AppData\Local\Temp\noriskclient-launcher-v3.exe
"C:\Users\Admin\AppData\Local\Temp\noriskclient-launcher-v3.exe"
1⤵
- Checks whether UAC is enabled
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4448
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=noriskclient-launcher-v3.exe --webview-exe-version=0.6.27 --user-data-dir="C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4448.2576.11990180456186602565
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4496
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x118,0x7ffac4e8b078,0x7ffac4e8b084,0x7ffac4e8b090
    3⤵
    PID:4156
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView" --webview-exe-name=noriskclient-launcher-v3.exe --webview-exe-version=0.6.27 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1688,i,10601064008582947096,17287636026926332772,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1680 /prefetch:2
    3⤵
    PID:4036
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView" --webview-exe-name=noriskclient-launcher-v3.exe --webview-exe-version=0.6.27 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2020,i,10601064008582947096,17287636026926332772,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3
    3⤵
    PID:2232
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView" --webview-exe-name=noriskclient-launcher-v3.exe --webview-exe-version=0.6.27 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2352,i,10601064008582947096,17287636026926332772,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:8
    3⤵
    PID:5112
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView" --webview-exe-name=noriskclient-launcher-v3.exe --webview-exe-version=0.6.27 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3640,i,10601064008582947096,17287636026926332772,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
    3⤵
    PID:2020
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView" --webview-exe-name=noriskclient-launcher-v3.exe --webview-exe-version=0.6.27 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4088,i,10601064008582947096,17287636026926332772,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3948 /prefetch:1
    3⤵
    PID:1400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f8513eda5fc82802250390be35ad8e3fd42954763cd828c803891cd1d6acd4f5
MD5 3a9b0abc2b45ddf51196804d50afb03d
SHA1 f6974cfe7c13c8c114ffe446374fef1c23e5785b
SHA512 ad344eefb31d72dcb5aecc9dabb5bbaa4e5991d14e10b7423232e210b33bdeee200e6684a9fcce399644258968101d5a0e3a8d6edbfee32d927ea51a59ee32e6
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 817ee758593b9af571f9aba4cc2c03488c674343b52a1a40e45c612a4199e69d
MD5 0b6f351644a1948896b09e0aa3faa44d
SHA1 ee8ad5960591a8234d1fd168bf2b93b033e8335d
SHA512 dbd18cb499d52fe0d9d406509d2ac6f82e3405fe816e493e8e05d13d6a26a4f774fb46ab49ef73bc9eb77906ec52f9ddfe3581b6691ef319470f27f9b4ab7e28
TLSH
T187D024133343073CC41031730033710C0CC0D10F40054553D43CC51D1F544D01D03C51
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 408B
SHA256 e9427d2ac12b015ecfe1ffa89758c815ffb82e535a0284ed8a9e4edea1f2a457
MD5 74e522ff2926107fec9c8b982e094726
SHA1 4da96c4cf746ae61e728cb0358f922720133a07e
SHA512 55ad8ede11185d3bdd4e81c53f28f4882fed19e0da647c55f50348aa891882b1c074482ca210c0c55373ef5be36b1e25f4e40b60029d0aa8668eadbe43c2b22d
TLSH
T173E08C01A2028297E316813453CA12FB3BBBEAB804173D31C1F1C47980B8392572A487
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c0ab.TMP

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe58c0ab.TMP
Size 48B
SHA256 f3933986f0f11f3bbc0e8f298bab20e34398148cbcd174b3264af106778b48eb
MD5 6213c3f660a5e6c41d0144e66d291e37
SHA1 246e89cd07b8a6ca68d6ace3b30a2767c3329652
SHA512 6afcd6fc58a35b96bc30729c3705e3773f8889015a72d6f2b6f66414a398948a8f02f1e0e73e6a9cbb97da9076631a6a75e2d536b665c6a91cee2bd091fa9387
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Network\Network Persistent State
Size 844B
SHA256 46e76ba31f667470696a56af7c8508361a02708ae6ede06aab64153d23826ad8
MD5 f15a32de2159a8f553d3ddfa2e6f21e3
SHA1 d08a9a3f0033cf7b5e1235519e8373544fb40d55
SHA512 992b2d9c571cf74c902e60af5ae5c29d8f25c991f5b83293d5063b06f46e3e2ecc25fec63092bdc0bf18680f76b7def6961622bffd54da95d3db77944ac59a4c
TLSH
T1920180B283F4C77D871156E41A347817CD6D0409531C6A3B9EDBEBA66BD24B1D01110B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5978d0.TMP

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Network\Network Persistent State~RFe5978d0.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Network\TransportSecurity
Size 355B
SHA256 eaeb108f89e3944c49591bd2cb8cbf7abc5a5c60e600222bfb91bc955f3bdc0a
MD5 1c63d3b7cd462133b50d499a513e01b5
SHA1 4ad0ea6fa7a7de3e3f5972d4aff9185b4919ce9c
SHA512 aa0318e76f59fc7abab0905ae5b1810575d6a73cbe4f5fa26adcb71d1dcbc48f026a1820f921946da32c7254cee935d04007a224abb52d73d94e6f829937ce12
TLSH
T1CDE0D8A2497BA4AB507D066A58847D055E7BA836108268F8E6D6426D60655772103023
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe58dc9f.TMP

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Network\TransportSecurity~RFe58dc9f.TMP
Size 355B
SHA256 6368d931747aacfbb86a067cdd3ffb4e142ec8cdbd4a1c3573de0ea725fe3b12
MD5 dd946473a0dedd424b0cb55126c686ee
SHA1 b29bd4a3ffac0abf3f04899685613dd57a20af20
SHA512 27dad774e4b13e2612a33cd8e5f2ce8d01af3ccd53fd3554943ef3746fabf83ec23364854d669b360b673f5ce6d0cbea74c2a96d775c8d439793f9308a31a201
TLSH
T16AE0DFE254BEB8EB603E0A6618847D016E7BA83510C268F8DACA422CA0615BB2203023
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Preferences
Size 6KB
SHA256 a98e51c0e2f1a8247d5fa9602944f9ec5811fae9ec779b118ba64c4528eb6c5d
MD5 761424fbed7eba61bfb9711950e5d16b
SHA1 7696bd820ec71d3c398127288c565587d6cfdcce
SHA512 8fcf7fea7c06c1ca7090a340f8194a029182adf76a2c1b109f1a78aec5e80e4d692d94728cb9fcc71421685a3f30c9d7be11bd355dc501bf43b6e8993e17ec01
SSDEEP 96:st+05ktMJb9effWdZ8i0vhEXktBm/7qx+WVHMSm+uecJ7YMk8dQj4+gVtMEB:st+06VfAZ8pa6E/S+WiT7YQdFLtM8
TLSH
T1E7D197065E2879774CCBE6197A35BB12E2FA606261D50E58EFFC862C04E66CC321790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Preferences
Size 6KB
SHA256 913e9573abe34365ec88e4f8a5a7ae40b45ec200bffde48113c8b5504d02e04b
MD5 86741b5919328af09cff82ecc5235bcc
SHA1 575a4591007489dd8a007caf8291727af3c24271
SHA512 56ff8c07b4dd2afb758460490c15ca3eaace6d59f0eafe3e0ecf3e493662da2c12ec8185ae8c2cdf471b9794761cd2a62a571aa3708cafa19068c6adbd653edf
SSDEEP 96:st+05ktMJb9eff0Z8i0vhEXktBm/7qx+WVHMSm+uecJ7YMk8dQj4+gXtMOB:st+06VfsZ8pa6E/S+WiT7YQdF1tMC
TLSH
T1D0E196065E2879774CC7E6197A35BF12E2FA606261D50E98EFFCC62C05E66CC321790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Preferences
Size 6KB
SHA256 b720a24fe972ae03e51f1e2facc257ec44e7222fcc361aae9f224d7919823ba1
MD5 726ba3d5d64d1b28a8d34cdd35e50ddc
SHA1 2752d4b85091f9457fb66d1f901dee5352c63db4
SHA512 9a70139d3c6e7092a9200c84d779c2d0ee6f7faf7a2d3278fecc0498281e53d558e56e325eff238891bd570289701a7e625d61fcef8c0d9a14dcf56bd6550844
SSDEEP 96:st+05ktMJb9FffWdZ8i0vhEXktBm/7qx+WVHMSm+uecJ7YMk8dQj4+gAtMEB:st+06efAZ8pa6E/S+WiT7YQdFGtM8
TLSH
T139D187069E2879774CCBE6197A35BB12E2FA606271D50E98EFFC852C08D56CC731790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe58bc17.TMP

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Preferences~RFe58bc17.TMP
Size 6KB
SHA256 97e4164e79021f7e3a4aa9377a4806dda3cdf4060080304c72384cea3fb3e170
MD5 93fab19b52b6fa4331ebc13dbeb10659
SHA1 fe9dbe9497cce10aba0acbc80e9e8eac7b154cb6
SHA512 b2f04e27a0c9edb5528867e4a2633017b01d0b820138cdb999d14860b8bd380ff695fcebdd8221df1fd9064e831950c74a3c3d4dcb6ae8ae69839891175629ef
SSDEEP 96:st+05ktMJb9FffWdZ8i0oEXktBm/7qx+WVHMSm+uecJ7YMk8dQj4+gAtMEB:st+06efAZ8pF6E/S+WiT7YQdFGtM8
TLSH
T148D197069E2879774CC7E6197A35BB12E2FA606171D50E58EBFCC52C08D56CC721790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Local State
Size 1KB
SHA256 b26d369204a6181f17538138aaacaf6d60e4e30995742b13efbd5bd2dc49f7fe
MD5 949ee416836bf701dbece0b80b3087ae
SHA1 5be2ae23c8ef36b443dcf2e429f672971cfa0a38
SHA512 cab5ab5294042d7b54b70efc779e70997ceea6888e429e93b91d5bd5670d0a63b4d2cbd4b7716a8ce05e0c697172d6a9aca0d864a0bd33e50dd09ce1234767cd
TLSH
T12A31A7B2E0A03B7658DB5B4576017A5B7E30A266C2814F84B6ED473902F72CC7167C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Local State
Size 2KB
SHA256 2a27744a66003efc5b18ebba79300519ef30d0a9969883cf1bb598fbeb1d83c9
MD5 e3583eb9c4692f11fa72e77a341f4182
SHA1 a7a9913caecb93851ec916f96ed35a7bc76f3384
SHA512 58cd67329794f3f906bebc0e93f543a932bb5cbed644dc7c45a76fb7c629bf4e7364738fab07e997456b0f72bcbccc4f60543e55b4a18dfd9ebbdeb3fc6881a1
TLSH
T1B451C472B854773789E74A4479493F23BA35A26196922F90AAED072801EB29C3302C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Local State
Size 3KB
SHA256 c62645639b1529ad5b330e52d541aea93f24a43071578fe0c7a356000981bcda
MD5 ba2377e7b037b4292381b72a1db0f764
SHA1 b6c1511473e57147cab7c866a1821a48ed99d5df
SHA512 6d20cd25a6d4656ba21009e06aaada8c6352d2d7307af124e2a05480646dc8ac9ea3c3b6439957e94d9ed2cde877f877ea83c7a883a8df413562cceb162df735
TLSH
T10F718432A8A4B6374DE79A44B9853B17B6A1A127D5C13F94DAEC0F2D01DB3CC2342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Local State
Size 4KB
SHA256 3aadac80276e31ab6f548a1204c4d3d9d4042008e7184ab0570e6e71d9895239
MD5 f320df87ae2aa73dae0b69844651b1ac
SHA1 29d3a2f34fe7d99e5c65f278db8596c61c5f6822
SHA512 b0c8bac385429a08f4c1c7b6846c90a8c2c6428b5cd5d395b5221c2513b5c0ae92de21a7c0e7107f5bdfb462b78d8271492ccbfee5a610d6487e630b64f6a297
SSDEEP 96:zuOyNkCE+Tfjhpa8Frh/cInURoDoto+5f6DVBxH16S+Zi/TAlxa:zPyNbjFooDUhErxHvbz
TLSH
T13F917232A474BA374DF79A4979453B03B6A1A123D5952F98D9EC0F2D01EB29C2342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Local State
Size 16KB
SHA256 a6d003168e341b96d7f4914805c5b06cef03092ea41ea14fd2254df53c3ebd10
MD5 350590ccd7457d63c44ae97567ef5218
SHA1 2db4043c8268828a1c0f386d2dcd844e6dde8b6c
SHA512 4df042454622e0cb321b33b52f6ed9f530ab1dc7d274802df44c330283447cada06c1a972b6a47f77a6f861260145cc7b30e9c5ae5aaf898dac1e0805658e8cd
SSDEEP 384:zL+aQikB+z/xvxjg/qhEJNbeZsWz2UU9zv:W/UxvxjgC+6Nz2UUFv
TLSH
T173728D3B64693E3394F7EA057A581B5BEBB5946290C22FB84EFD5F0906DB3D81302C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Local State
Size 4KB
SHA256 d4490758e51d9e0181e28901e004814083201d48d212f87bc7d1881d0c56391e
MD5 6680872a0877513e416e33ac0bce61fb
SHA1 4e37c7758ebcf6efa7a5bf9e9d2ab39cb36fcf96
SHA512 373195b4319d5057b90cd18b9000b8a948ec35195f1ccaba83c7e707a3e0399be0956c3d18cb57015b0157c39574e39ef43aa9551b0bb38ca97dd71648a07350
SSDEEP 96:zuOyNkCb1+Tfjhpa8Frh/cInURoDoto+5f6DVBxm16S+Z5Z/TAlxa:zPyNbOFooDUhErxmybz
TLSH
T1C2919422A474BA374DF7DA4579453B03B7A1A123D5952FD8DAEC0F1D01EB29C2342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5858aa.TMP

Path C:\Users\Admin\AppData\Local\gg.norisk.NoRiskClientLauncherV3\EBWebView\Local State~RFe5858aa.TMP
Size 1KB
SHA256 897c7f1ecb0c8a4ab0027d458fbca2901d4ff1a8f3d31fd6bbcc6da1ae7790a9
MD5 bc9bc83e53e46ce49252fddc029b7227
SHA1 13860fe5b386b5a8fd164d81238e248fd72b0718
SHA512 33206e8361fc7f88487300de3bc3fae141b2abf36d140612fd6be65d5d62500a24f48c68710c130a956cda5b448716c5f9d4763f6be63b13aca43633f0cc5549
TLSH
T10D2184B3D0D43B76699B5A447601BA8B3E20A266D2808F48F5DD433A12E72DC6177C33
MD5 SHA1 SHA512 TLSH

Submit Download

applied_migrations.json

Path C:\Users\Admin\AppData\Roaming\norisk\NoRiskClientV3\meta\applied_migrations.json
Size 34B
SHA256 0f4eed815073a6b8f420ee2e10b8f5397e89c3f416f3633fe68712eab1a4a463
MD5 f54d74300b0b78081f289dc094904c46
SHA1 415c1bace9b687103a52fc6b532dee27774b4902
SHA512 8296f5d1743c6480bfc0e41ed274307cad3984c66992388cefdfaf31887ae158fed9cfc45479672ea8e0c242f9fbacf0067ffbf9a61a9f63d01c2899f7b34811
MD5 SHA1 SHA512

Submit Download

memory/2020-135-0x00007FFAE09E0000-0x00007FFAE09E1000-memory.dmp

Download

memory/4036-283-0x0000026E1AB40000-0x0000026E1AB48000-memory.dmp

Download

memory/4036-257-0x0000026E16270000-0x0000026E16277000-memory.dmp

Download

memory/4036-293-0x0000026E1AB90000-0x0000026E1AB94000-memory.dmp

Download

memory/4036-297-0x0000026E1AB90000-0x0000026E1AB98000-memory.dmp

Download

memory/4036-288-0x0000026E1AB70000-0x0000026E1AB72000-memory.dmp

Download

memory/4036-316-0x0000026E0FF70000-0x0000026E0FF71000-memory.dmp

Download

memory/4036-315-0x0000026E0FF60000-0x0000026E0FF6B000-memory.dmp

Download

memory/4036-314-0x0000026E10340000-0x0000026E10346000-memory.dmp

Download

memory/4036-312-0x0000026E1ABE0000-0x0000026E1ABE4000-memory.dmp

Download

memory/4036-311-0x0000026E1ABF0000-0x0000026E1ABF2000-memory.dmp

Download

memory/4036-309-0x0000026E1ABD0000-0x0000026E1ABDA000-memory.dmp

Download

memory/4036-308-0x0000026E1ABE0000-0x0000026E1ABE5000-memory.dmp

Download

memory/4036-299-0x0000026E1ABB0000-0x0000026E1ABB2000-memory.dmp

Download

memory/4036-290-0x0000026E1AB80000-0x0000026E1AB84000-memory.dmp

Download

memory/4036-286-0x0000026E1AB50000-0x0000026E1AB58000-memory.dmp

Download

memory/4036-285-0x0000026E1AB60000-0x0000026E1AB64000-memory.dmp

Download

memory/4036-301-0x0000026E1ABC0000-0x0000026E1ABC4000-memory.dmp

Download

memory/4036-282-0x0000026E1AB50000-0x0000026E1AB54000-memory.dmp

Download

memory/4036-280-0x0000026E1AB10000-0x0000026E1AB18000-memory.dmp

Download

memory/4036-279-0x0000026E1AB40000-0x0000026E1AB44000-memory.dmp

Download

memory/4036-272-0x0000026E162E0000-0x0000026E162EA000-memory.dmp

Download

memory/4036-271-0x0000026E1AB00000-0x0000026E1AB05000-memory.dmp

Download

memory/4036-269-0x0000026E162F0000-0x0000026E162F2000-memory.dmp

Download

memory/4036-267-0x0000026E162D0000-0x0000026E162D8000-memory.dmp

Download

memory/4036-266-0x0000026E162E0000-0x0000026E162E4000-memory.dmp

Download

memory/4036-264-0x0000026E16290000-0x0000026E16291000-memory.dmp

Download

memory/4036-263-0x0000026E162C0000-0x0000026E162C2000-memory.dmp

Download

memory/4036-262-0x0000026E16290000-0x0000026E16291000-memory.dmp

Download

memory/4036-261-0x0000026E162B0000-0x0000026E162B2000-memory.dmp

Download

memory/4036-259-0x0000026E162A0000-0x0000026E162A2000-memory.dmp

Download

memory/4036-258-0x0000026E16290000-0x0000026E16291000-memory.dmp

Download

memory/4036-294-0x0000026E1AB80000-0x0000026E1AB88000-memory.dmp

Download

memory/4036-256-0x0000026E16290000-0x0000026E16294000-memory.dmp

Download

memory/4036-254-0x0000026E16280000-0x0000026E16282000-memory.dmp

Download

memory/4036-252-0x0000026E139F0000-0x0000026E139FC000-memory.dmp

Download

memory/4036-251-0x0000026E16270000-0x0000026E16276000-memory.dmp

Download

memory/4036-249-0x0000026E139E0000-0x0000026E139E4000-memory.dmp

Download

memory/4036-248-0x0000026E139F0000-0x0000026E139F2000-memory.dmp

Download

memory/4036-246-0x0000026E139C0000-0x0000026E139C5000-memory.dmp

Download

memory/4036-245-0x0000026E139E0000-0x0000026E139E3000-memory.dmp

Download

memory/4036-243-0x0000026E139D0000-0x0000026E139D2000-memory.dmp

Download

memory/4036-241-0x0000026E139B0000-0x0000026E139B7000-memory.dmp

Download

memory/4036-240-0x0000026E139C0000-0x0000026E139C4000-memory.dmp

Download

memory/4036-238-0x0000026E139A0000-0x0000026E139AA000-memory.dmp

Download

memory/4036-237-0x0000026E139B0000-0x0000026E139B5000-memory.dmp

Download

memory/4036-235-0x0000026E13990000-0x0000026E13994000-memory.dmp

Download

memory/4036-234-0x0000026E139A0000-0x0000026E139A2000-memory.dmp

Download

memory/4036-232-0x0000026E13980000-0x0000026E13988000-memory.dmp

Download

memory/4036-231-0x0000026E13990000-0x0000026E13994000-memory.dmp

Download

memory/4036-230-0x0000026E13980000-0x0000026E13981000-memory.dmp

Download

memory/4036-229-0x0000026E13850000-0x0000026E13851000-memory.dmp

Download

memory/4036-302-0x0000026E1ABA0000-0x0000026E1ABA7000-memory.dmp

Download

memory/4036-304-0x0000026E1ABD0000-0x0000026E1ABD4000-memory.dmp

Download

memory/4036-298-0x0000026E1ABA0000-0x0000026E1ABA1000-memory.dmp

Download

memory/4036-305-0x0000026E1ABC0000-0x0000026E1ABC7000-memory.dmp

Download

memory/4036-291-0x0000026E1AB60000-0x0000026E1AB68000-memory.dmp

Download

memory/4036-273-0x0000026E1AB00000-0x0000026E1AB01000-memory.dmp

Download

memory/4036-274-0x0000026E1AB10000-0x0000026E1AB11000-memory.dmp

Download

memory/4036-277-0x0000026E1AB30000-0x0000026E1AB32000-memory.dmp

Download

memory/4036-275-0x0000026E1AB20000-0x0000026E1AB22000-memory.dmp

Download

memory/4036-25-0x00007FFAE09E0000-0x00007FFAE09E1000-memory.dmp

Download

memory/5112-76-0x00007FFADEDD0000-0x00007FFADEDD1000-memory.dmp

Download

memory/5112-75-0x00007FFADF8E0000-0x00007FFADF8E1000-memory.dmp

Download