hxxps://gofile[.]io/d/UIuGu0KX

Analysis

user interaction
yes
max time kernel
3s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 14:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gofile.io/d/UIuGu0KX
Sample260930-rtcyysvgnd

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
35	api.gofile.io
27	api.gofile.io
28	api.gofile.io
32	api.gofile.io

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
556	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 1824 wrote to memory of 1308	1824	msedge.exe	87
PID 1824 wrote to memory of 556	1824	msedge.exe	89
PID 1824 wrote to memory of 2356	1824	msedge.exe	90
PID 1824 wrote to memory of 2356	1824	msedge.exe	90
PID 1824 wrote to memory of 2356	1824	msedge.exe	90
PID 1824 wrote to memory of 764	1824	msedge.exe	91
PID 1824 wrote to memory of 764	1824	msedge.exe	91
PID 1824 wrote to memory of 4544	1824	msedge.exe	92
PID 1824 wrote to memory of 4544	1824	msedge.exe	92
PID 1824 wrote to memory of 4544	1824	msedge.exe	92
PID 1824 wrote to memory of 468	1824	msedge.exe	93
PID 1824 wrote to memory of 468	1824	msedge.exe	93
PID 1824 wrote to memory of 468	1824	msedge.exe	93
PID 1824 wrote to memory of 4916	1824	msedge.exe	94
PID 1824 wrote to memory of 4916	1824	msedge.exe	94
PID 1824 wrote to memory of 3016	1824	msedge.exe	95
PID 1824 wrote to memory of 4916	1824	msedge.exe	94
PID 1824 wrote to memory of 3016	1824	msedge.exe	95
PID 1824 wrote to memory of 3016	1824	msedge.exe	95
PID 1824 wrote to memory of 2216	1824	msedge.exe	99
PID 1824 wrote to memory of 4652	1824	msedge.exe	100
PID 1824 wrote to memory of 2216	1824	msedge.exe	99
PID 1824 wrote to memory of 4652	1824	msedge.exe	100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gofile.io/d/UIuGu0KX
1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff91a6ac188,0x7ff91a6ac194,0x7ff91a6ac1a0
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,15114353189760802956,7869854600505025578,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:3
  2⤵
  - System Time Discovery
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,13139326151605736259,12150221222848932492,262144 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,3240661994071679581,8965118191983704535,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,5668996918359331645,14630011072937954425,2097152 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,13841379698959911325,14379492463563404088,2097152 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,6130895558046352146,815357120051763200,2097152 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,10803222739655209383,6060044886246222204,2097152 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,3624087742637783287,9524599099683740945,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,12911199426914377302,17098311066199736730,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,2742496069161561708,4144039824104079553,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,2742496069161561708,4144039824104079553,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,2319890123523728212,12381638192400684070,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6324,i,16843954855869807330,1123519422492710844,2097152 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,18170243679819046975,6588482624958380364,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  PID:4676
- C:\Users\Admin\Downloads\Nemesis Launcher (1).exe
  "C:\Users\Admin\Downloads\Nemesis Launcher (1).exe"
  2⤵
  PID:4752
- - C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt4752.exe
    "C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt4752.exe" install
    3⤵
    PID:5848
- - C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt4752.exe
    "C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt4752.exe" update
    3⤵
    PID:6064
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4752.5964.2826911818526476037
    3⤵
    PID:5996
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ff9150db078,0x7ff9150db084,0x7ff9150db090
      4⤵
      PID:4604
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1812,i,1968099464580992770,14361515277924749188,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1800 /prefetch:2
      4⤵
      PID:6980
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2068,i,1968099464580992770,14361515277924749188,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:3
      4⤵
      PID:7036
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2388,i,1968099464580992770,14361515277924749188,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:8
      4⤵
      PID:5596
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3636,i,1968099464580992770,14361515277924749188,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
      4⤵
      PID:4676
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3920,i,1968099464580992770,14361515277924749188,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
      4⤵
      PID:2016
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4784,i,1968099464580992770,14361515277924749188,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:1
      4⤵
      PID:2348
- C:\Users\Admin\Downloads\Nemesis Launcher (1).exe
  "C:\Users\Admin\Downloads\Nemesis Launcher (1).exe"
  2⤵
  PID:5340
- - C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5340.exe
    "C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5340.exe" install
    3⤵
    PID:5960
- - C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5340.exe
    "C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5340.exe" update
    3⤵
    PID:4484
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5340.6008.9494937414781519865
    3⤵
    PID:3988
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x174,0x178,0x17c,0x150,0x184,0x7ff9150db078,0x7ff9150db084,0x7ff9150db090
      4⤵
      PID:4104
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1800,i,16019534391310209095,2831977769986667673,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1780 /prefetch:2
      4⤵
      PID:3520
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5340.6008.2749370439771580539
    3⤵
    PID:1396
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ff9150db078,0x7ff9150db084,0x7ff9150db090
      4⤵
      PID:6540
- C:\Users\Admin\Downloads\Nemesis Launcher (1).exe
  "C:\Users\Admin\Downloads\Nemesis Launcher (1).exe"
  2⤵
  PID:5352
- - C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5352.exe
    "C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5352.exe" install
    3⤵
    PID:5984
- - C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5352.exe
    "C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5352.exe" update
    3⤵
    PID:5704
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5352.6016.12693865043574181330
    3⤵
    PID:5960
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x174,0x178,0x17c,0x150,0x1ac,0x7ff9150db078,0x7ff9150db084,0x7ff9150db090
      4⤵
      PID:1616
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5352.6016.17130365044599817783
    3⤵
    PID:6508
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x174,0x178,0x17c,0x150,0x184,0x7ff9150db078,0x7ff9150db084,0x7ff9150db090
      4⤵
      PID:6532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,6738608826084165117,7912247900008817755,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,2660326819541986073,13397415157205022097,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:8
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,2688712913419524395,1545399273661193613,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6412,i,13826529044432330954,7896253691240380199,524288 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,16638451992519710621,7753691480144777149,262144 --field-trial-handle=2368,i,7171779621197950709,3817629271585352168,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:3508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4676

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5644

C:\Users\Admin\Downloads\Nemesis Launcher (1).exe
"C:\Users\Admin\Downloads\Nemesis Launcher (1).exe"
1⤵
PID:5724
- C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5724.exe
  "C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5724.exe" install
  2⤵
  PID:6692
- C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5724.exe
  "C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5724.exe" update
  2⤵
  PID:6636
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Nemesis Launcher (1).exe" --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5724.6880.692381992225225426
  2⤵
  PID:6884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cvt4752.exe

Path C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt4752.exe
Size 24.1MB
SHA256 f4386f7627416fb760bde8e009246e5d4bcc78966032f42652d0bfae8ff6a27a
MD5 24a2ebdad7e6631cb89ea478182ec3b0
SHA1 24833e4b9e0f791798ccbfbc0a58fdb8d96e55b9
SHA512 4f415bb0ca428cab585fe3062ace4cc80e14443442e33921661fcf28cb63e4bc49a7609bc3bca4cdf85b52593f4d74123fd5e938ff0bdf14dfc86196ec26d4d0
SSDEEP 393216:J2DGiCoXul0hAlYe3ndtnZ6I8/K7v0hJUOaNPnQ5ZTBBGU4q6D:AadZcAlYunUry0hJUOaNPnGiD
TLSH
T1F6472382A8D991FCC7928630D3861EFDE29E74CA4F7A542FBB8944013132D56CDE5D3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cvt5724.exe

Path C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5724.exe
Size 15.2MB
SHA256 2bca11109591bab341b67ddb9e23d5432f403beaf771af72140ba84c8fbc8092
MD5 24b157d48ab76e7dbeaa8e10d8da4943
SHA1 9af4d20a4deafd5a59dc679b5bb8d6dde05d0d9b
SHA512 a71376ef29dfda7dc2ed5ca2bca6589de30c137b860f3da11daecf9d78b030a90f3bee6016f9614df24ef5dae0df3ef6d5401150c8bd2db97f09eaf084b2abe1
SSDEEP 393216:J2DGiCoXul0hAlYe3ndtnZ6I8/K7v0hJd:AadZcAlYunUry0hJd
TLSH
T137F62362F8D6A1D9F33FDF32D6A66A28D73B73AB2F01818F0128529125133538F55D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cvt5724.exe

Path C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5724.exe
Size 15.9MB
SHA256 4770186e4a56efff173f13bf59ab1ee1b17e044795c1fda2c0ad4fd4b1200815
MD5 d2346837f27645884bc454a3fb27d63f
SHA1 ddc1eee43526f45818aa05914454c78b0dd39049
SHA512 525dc98412ccbcf0821b6ca7b61fae2c4fbe0e79e71fcb9fd5808ebd5de89eab4ac56c43cc316431d6df7b581e2117f636c39c246fef2bdb4039d5accdbdf90b
SSDEEP 393216:J2DGiCoXul0hAlYe3ndtnZ6I8/K7v0hJJ:AadZcAlYunUry0hJJ
TLSH
T1B5F62352B8D5A1D8F37BDB31D6A66A2CE73B73AB2F12814F036851802533253CF55D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cvt5724.exe

Path C:\ProgramData\Microsoft\Windows\Caches\{6B1758D4-1A2B-4C3D-9E0F-8A7B6C5D4E3F}\cvt5724.exe
Size 15.6MB
SHA256 72b9862535389c9ea5987395d419170702fc7f1474fd110af1f0c1a4abdd70ec
MD5 6523cb893c06ea6a1795eacacab52698
SHA1 aa85fe8a335043abebe3baa971c98d157ac2327f
SHA512 c5ac3b3375ec046f755692d8aa18fea6656899cb3e982af84b507944840419fced107e18ac079cb70bb0dad503ddf3266c2694a1f0b66f48d92c6d0a1b139ac7
SSDEEP 393216:J2DGiCoXul0hAlYe3ndtnZ6I8/K7v0hJM:AadZcAlYunUry0hJM
TLSH
T102F62352F8D6A1D9F33BDF32D6A66A28D73B73AB2F01814F022852912523353CF55D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8ed3f6d32b7bc481807172cb5a566f4949f6659d3c5c32315637facab4ef83fc
MD5 f4dacb9b40aabf644c1ccde5b8e9ac88
SHA1 6f7dd606d71ee19dc661c547f52661e3ff83b1f1
SHA512 45681307a52ccae1c91eb6ca19d58ab1f98a90934d6ae66dbfc6ce1679f269bea9decf534f128a58b5446e552aa523522be6654748ba84d190496b22c4d2bf06
TLSH
T1BB810D92BAD08213F76642B06CCE2E77B632A55840731E72027ED5FABEB27670745390
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0b8d088caad974b9b5a994718fafa7a239d5702fdd244a886d4f4eaeb0be60a8
MD5 76db307128ee2499f438d32039a9ac87
SHA1 72f58b9620510ae0e3785071def076ce5be30b03
SHA512 9314666eb8e05a45995a50bda710b62596a170d1b45995e1a2197122d292086357cc16c8932896f704eb0f7488ab0cc9ea7bbb36bdffd37e5d5dad986f32892f
TLSH
T1E521BEF3C3E5956E8D2556F0AF14AE2BCE1C0515832C7D29C9D0AE2793E3471E00165B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d12adc6fce6fc9c2c515b4cc590f19aab5be8ec5976d60011578c0cec5529551
MD5 58fd413816e2c2733e3a7d37f0e3cb87
SHA1 b770a6e39f7a236aa9f6b64575feb2aaec54ea9e
SHA512 fb03fcbb4a0aa1e8d8c76bbec1ffc08a38afc6ab6eb0856d0bb50bb52e380a9a538af125664c78d5d3d581527cc9dafc74b6b4ae0488d119135a888c6f2778a0
SSDEEP 192:sxZEbRYnIr/fXs9ywMIdpjl0HW6+WNe9i/YgfADIgrJ:sxZ0Ym/fXsoeOHbt/29
TLSH
T12722B8516E34A97B8CCBD20DBB15BF53E5F9503291911E48AAFC861C05E76DD2207C4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 846ad188b55dfdd5bd88f513fc89d4259c55a6850b76bedfe423fe5bdcd77432
MD5 9cc76147d9c51a0648753117f2871392
SHA1 06427e56a62798d6a7bde9e8513d8b00b9597cd8
SHA512 7b210004561e52ff1381f0c2af2a122fbfadc70e213dfab38895bc71f45cc2ecb53d659b608e654c1a37e7b9318efb0c909ab43ef006f300a3aab30ae4739464
SSDEEP 192:sxZEbRYnIr/fXsvywMIdpjl0HW6+WNe9i/YgtADIg5RJ:sxZ0Ym/fXsaeOHbt/Yt
TLSH
T10622C8516E34A97B8CCBD20DBB15BF53E6F95032A1911E88AAFC861C05E76DD2207C4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e8bbfc6dbacaf4c9ad24a2ea21c45eac58f1e6dbc85f85533ec7825e65631097
MD5 9c199374fc1cd2311a0a84608ec64ad3
SHA1 d917746cf42f9636dc210f30bcbfdaaf6fd5c712
SHA512 440a9704d49b0134567f5adfb6747b40d04529aad8506c453bd1a1810d6eaf468dabcd0062d5f70dda0ca68b7e3cca99e68754e1e367a80c781efc427b6b8876
SSDEEP 192:sxZEbRYnIr/fXsfywMIdpjl0HW6+WNe9i/YgtADIg5LJ:sxZ0Ym/fXsKeOHbt/wj
TLSH
T16F22B7516E78A97B8CCBD20DBB157F53E6F9503261911E88AAFC861C05E7ACD2207C4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4fc9cb83426a354030ac0afa78164d9af7b32246c1401216c8f507e82d8f4d29
MD5 b2ed5d6a64cd79909cf206780bf4d20b
SHA1 5a843e35da0bf56f03ec91fd0d32830be946f88a
SHA512 d13d9156640be06da0e06f4b339e3e5717f40ff524d1f2b205ca120282e319c8b5ed03de499042ab6b720f879530db8385938849fc4ebdb1aa29fae6784c17d1
SSDEEP 192:sxZEbRYnIr/fXsfywMIdpRl0HW6+WNeFKXYgmADIg5LJ:sxZ0Ym/fXsKeQHbFX9j
TLSH
T15432C8526E38697B8CCBD20DBB15BF53E6F9503251911E88AAFC861C05E7ADD2207C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3369de353a2fec6ab72c7c841330a965c25bb3aa081a01f1394e63ea98f0e642
MD5 843ff94435186b472a7a43061a663707
SHA1 1902e066454ef371809d19648bf0abe723b4aa54
SHA512 eec47a74057789bacdb2198dff3abfbdd7b5e0e205cf03455038a673fcb388029d7b84c521653e808d71a568e6fb3682dca1c5bc400206d8cfa4b21c32abbcc4
SSDEEP 768:BCichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzKrofHb:BCichfPWvPZplu1jan+LKgzhvb
TLSH
T1F2C2FA3B644CCB7E4FC01A9DDD5A6F9B7EA802C7A6588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 d5d21dd522e9e9018d304b2dc88b4d22b264f58443c73ead323ef1c154fe44df
MD5 b5c8d01b08920be7d1efb6898f3e08a3
SHA1 6d5ad98410390457d2a966f6316086c671e43754
SHA512 e99f53d99c09fdc2aad17a01b334e52d72ea5d39c634306d0a21ed4ac39fe69abf1ff71cfde1f4f2bf6863697b12b6665b0f262d782b017f40d30af3d56d2f3e
SSDEEP 48:K07+/bldd+bNglIS7+K9L1J+xTuYIZrfyL4N4s4h494P474/4gb4T4m4zIS414g0:KEIQKFW6WruKAs3bWKQMi+BiK64L
TLSH
T198B1F281307B064638BD254C80B5872E464231B7716DF6BBFF7D08A68A6AE441DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a01a7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a01a7.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fbfcc5b3894ad098418ebc6dcfc6a1f032c16061dfd7aef8898abaafb762bfb3
MD5 acb1465655692cdd453f099767c1c5c0
SHA1 3bb92da0d133c5f476a6d6e872766fd97c4fca8e
SHA512 cf8a93d8c62369ea6cf3eb762680309f814de28cab8d03ab7719c33956b8f3ec4a5abfd122584825d3d07116947941570db71f5b2a1dbc2fba9cf2a39aa76c8c
SSDEEP 384:6ZcIosNJhPuj5E3bpTS9CBGYX5EDtOxlL9ODtgOIwZOywLHoU:4oTjZuGYuDtOTL9ODXsrrn
TLSH
T19E828E32ADB8AC7B1CE7A145F14776035FB89027E7C4AF90D5EC6B1D01DA698130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e331d0e3c068b5687bc43f264c545052ab2f8448772660299e39801f80a10a30
MD5 cf19baec92fd9e425c301003ad9b72b6
SHA1 c0518bd0191c140b3987ff491a7320891dac2c89
SHA512 576ba2d908b6618b0c366e9d012ff0b7b136bea8093a8f17def9315e62e638bda845b8fbde837cff2be480c4a0f4cd488f3f73886d357a73bf4c8c045ddd8999
SSDEEP 192:LJON46DphmqQmiUyXEXXq8wGYX59ezSCtORX/kk7OnU6:lON4619IeXRwGYX5EDtOxncU6
TLSH
T12C02E835ADB87CBB9DE26E45F58B37139FA4212BA6942F84D6D81E1C01D768C2306C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 be31bcf6744ce4f9ad8d9e8758d879edb24bf7ca92fbc3e6eb7133977450879c
MD5 0e0ab407c75fa41d1a502e6f6b7f8b6b
SHA1 d159c7fab2f7a1822d5b95ff42d79a71c6cf4833
SHA512 6c5a716140952c1682ed5f03190f339374509a722861fe44d5288baf5cfa65cafda32ddab5bde8b522c55c69410657e0e0c101e94768ed2ac3e1249934e5c395
SSDEEP 384:GZcIbsNJ4Puj5E3bpTS9CBGYX5EDtOxlL9ODtgOIwZOywLHoU:UbSjZuGYuDtOTL9ODXsrrn
TLSH
T1FA828F32ADB8AC771CE7A145F14B36039FB89027E7C46F90D5EC6B1D01DA698130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 98200003eaa0a0cc6d924d6eb5d4d7f5703a4dda6144d95c38dd7eb9996c550a
MD5 b0589be1be9a08dd6a1328f347ac47a7
SHA1 fcf4ece20a6d391711b8f5482216f9ccb8e5258e
SHA512 da90445e8ef1fd19315f60ca16804e905954d30c69924498ff8e94bc68d6f49919cb5289f10ce3648cde96173b232ff94c70536508d7e03dea5cccd546ab4ab5
SSDEEP 384:EZcIbsNJ4Puj5E3apTS9CBGYX5EDtOxlLdODtgOIwZOywLHoU:ibSj8uGYuDtOTLdODXsrrn
TLSH
T14C827E329DB8AC771CE7A545F14B76039FB89027E7C46F90D5EC6B1D02DA698130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 67c7002f9304fe988ab642f9b8c20d498bb1d5be172c3d5eaa46d5f74e80f685
MD5 4f702e393c05f528680d19713dd4a0de
SHA1 d11ea6af171809649d5b66404a61cb0d9216e1ca
SHA512 495c7eab607b26b2cd01c7e90c9f66abea5b7b33d051fc33c7cd85ed8369a82806a9c9abad72e7f4533ab87c2352915f6560857dd6bdf8c7d029605254e89618
SSDEEP 384:piFPZcINRsNo8TUNTUlIl4Puj5E3apUS9CBGYX5EDtOxlL3ODtgOIwZOywLHoU:AFH/TwgdjfuGYuDtOTL3ODXsrrn
TLSH
T1C4C21AF249E7987AD8AE5743E77D2D034EBCC027B584AA50B3981A1CCD961BFD306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bd47db46a6191d229f1bf085403798958d02263b2f7ebd62ab16d20a34946863
MD5 dea8536f22baf43dfeb55d08b9c2d524
SHA1 783fd4bd8504b31a33afe05fbd85a18e7c57377b
SHA512 f4705a6f92d5354b76e3adae1b650eabf276a5f501cc56e5c5025c8a6868d3c4ad5a06c999f42d4cd2df884b68e829e64fa02bf62be32c99c40ad8520953c705
SSDEEP 384:rZcIbsNJlPuj5E3bpTS9CBGYX5EDtOxlL9ODtgOIwZOywLHoU:zbTjZuGYuDtOTL9ODXsrrn
TLSH
T127827E32ADB8AC771CE7A145F14B76035FB89027E7C4AF90D5EC6B1D01DA698130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5b20ee791ec52dfab5e3e3a7237dee2d56bdb9276a887786305bc103b41cf715
MD5 ade34675866a227ae9a17f67c96b0ddc
SHA1 487f37172fb1bbe5e3ed34ee7cb41e5b8f1bce5e
SHA512 909e01e0ac841d29eac32d6df93867b7d4c01330346e3e919275ee0d087e8387c29db0cce1a11249ad5c1c1dc3c887b1d4c7c67570215520608dfcb8972d57a5
SSDEEP 192:LJON86Dpha3oqQmiUyX+XX9ewGYX59ezSCtORXlL8kIIuq5cDU6:lON861Q3dI8X9ewGYX5EDtOxlL9ODU6
TLSH
T1EC120936ADB8AC7B1DD26554F08735139FB45127EA847F90D5DC2E2C02DF69C230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d8f5ad3-fea3-443d-b9dd-35ecb7864c62.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5d8f5ad3-fea3-443d-b9dd-35ecb7864c62.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c4cff303706b7f4d4ad768ea91dcfe2a9d74fcc0fa3cf95f962ca2a853a7395c
MD5 5d446d32a9e2f0c537f54e3d3a56e807
SHA1 6586f35ee9ceaf468ee64c8af49ff46f016ac872
SHA512 4e2bce6e0163d9324d0847e6eac0fd7d26c809b6ff82626bfd255eed40a517cf1ca984cd40636918ff763fc6e246df6c883663a8380c847fd410a4c037a0f33e
TLSH
T160412658AAE91148B3B77E5AABF6A86D487ABD732F07905D00100D8F0663A44CD61B33
MD5 SHA1 SHA512 TLSH

Submit Download

loader-port.txt

Path C:\Users\Admin\AppData\Roaming\Luria\nemesis\loader-port.txt
Size 5B
SHA256 fd94f84bd1ed99eee5bd193ff306be325c96de5be16435b13b551f61b957d48b
MD5 c0f43f92577e6a9e94982dfda4565340
SHA1 8c13364f7225f3b156948e135c2801d3ee8abd8c
SHA512 7c93ff15d4026d46306944f26ab5bcf6cfacd023fb61db106bf7e4f361e1eb19cf1e5865f99b6043491a1202b42a64e5041fab69b07ced42370ab08f1ee058ba
MD5 SHA1 SHA512

Submit Download

loader-port.txt

Path C:\Users\Admin\AppData\Roaming\Luria\nemesis\loader-port.txt
Size 5B
SHA256 4f9281ca547ab52e02cd0e7de249d67f319faccaeb6a3a68462a1039a9cad7be
MD5 61ba87bf4177f576150389d84d14bb01
SHA1 07aa5d620b1f566dc83aa49505cf5855b7c8737d
SHA512 34a5bf7cf8a135ec6e0624e5ac00d738837d3391360fea9f1e7367a02eb0da9403e73af76d1997fc85d7e9e95676d81cb3283c0088434e62c74f7fa4938c2a8d
MD5 SHA1 SHA512

Submit Download

Nemesis Launcher (1).exe

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe
Size 41.2MB
SHA256 9a44409b8e490d4dbabfeda4117891b9226850155d1b4729f09eb87b7e2644a0
MD5 b4aba6fccd812d09509a4afb90d0185f
SHA1 6f76ac73ce41fc2acac62b5d9b13307c6d5f6327
SHA512 8415c5415ba8d777be53be4e99381f5c492785e0bc7d07c00a14ceabba71488ca60aaf50116b21c94dd1ae6121357df8908b04660cc5247d06208444110e5739
SSDEEP 786432:RogzXJEqGLVvEeryXvhoggxDr2O4mAR+HEodBu1sTjmh:B5ET6wyXZoggxP23lR+oQjG
TLSH
T1769733E7E1099662E0E8D0F3AFFF74510131AC8E574DB634C2E81131EA1927B5AED356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Nemesis Launcher (1).exe

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe
Size 39.4MB
SHA256 f33e8285c346317c8bc72fee98efe3f4b8e833b7f05a976fc1f8c2471a2fbb23
MD5 8ace6f4450e6f1bc6a329b21570e393c
SHA1 78ab717f7a216000c7d9f4756b2c8018fc8d0af7
SHA512 b293ce60801689bdcbf0c8235a4c39820948fc38accdd71e174f77afe61c2163d606e5b95bf3f484fffb5aeea99c0e4881f92588b0fc6afbb6cff8d72c300ae7
SSDEEP 786432:RogzXJEqGLVvEeryXvhoggxDr2O4mAR+HEodQ:B5ET6wyXZoggxP23lR+c
TLSH
T1E29733E7E1099666E1E9D0F3AFFFB45501306C8E574EB234C2E42031EA1927B5ADD293
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3745aeba581d0a9b070faa2f27760a193ca79b09f72735340b18e755c8ed94c0
MD5 faa752d4bca3963acb85e4fe9f3cd993
SHA1 c73d8767c92c463e3eaf1242e12fa67d5c9c63e5
SHA512 e91ad331f7ad358f2173ca9dc8623db5131eff6697bfdadec6e4c4c4192ceaf8b256ad9a4c07aed0d13e0ed27424e7c915bcc8db0c7602c10a3c5bac91002c7a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1602174b4fdaeb7391074b62478c90aaf34c197258d0b08478b96579dee84220
MD5 2fca77e0d8b52b0985cabc0bfa1eba81
SHA1 c35621e1f5f77cf4e8071526a2b5377137cc510e
SHA512 7b2037184643447512300f401a9004fcc7a50a13c4ab830c23b53d759540c1ebb8e6e0a5f6b091975e29586d609b06ed18954b518ee8ed7b0ad08c12758f11e9
TLSH
T19AD0121B72054374C8102033001B65090445CF1B41058144682CC71E9A040540903442
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3d88fac1cfe07313b179f132ee86eb0afd36a65ec73f37a3d260684d6dc8cac9
MD5 74f14812e425ba1a6e96bd470052ddc7
SHA1 ce45d006a0f14bb85da2b09a93f36f2ac9d7e570
SHA512 d0296d3c703d9e1e3dddd2b397b593d60c040cae3f916dc56f848b47b574c466f3c7cd38ecc11f848712ea08b689326f3d255655ad85d162f9b2e03fb97ca8a9
TLSH
T19ED02B6B221D0771CA1031374086E5481005CF2F010685442E39FB1D8A400E10C82842
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

f_000002

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Cache\Cache_Data\f_000002
Size 47KB
SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
MD5 260c81a4759baf163c025001c4f27872
SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
TLSH
T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Cache\Cache_Data\f_000008
Size 1.3MB
SHA256 5832b066582747d260649ad19b5117a58a77ee13955016e76cf891fe35bd43b6
MD5 d10eb31525beeb9f6f1cd73fed5e7f36
SHA1 2b4325f6db0e3efc549964497548e98295b0d826
SHA512 42184debfd9a615dab711a70136ecd28f65c988602809092ebe4ada56c21ee61560acc15829d26910d69ff915018c109e20d1990cd8b81a3f2cafce54dea4b51
SSDEEP 24576:yUO67XQLrTiBKWj/h8izdUGns5HW1krxeWkJdDS6Sc65x2LS8ZnMZTDiq:ytLiB7Si226xe3JDSvQZnSn1
TLSH
T15E553346B6CA9BF3C83761C0637A4749A9D9176721E1CE8BA87EC0D470B9F01B50EB46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Cache\Cache_Data\f_000009
Size 1.5MB
SHA256 b6d82cb44e8ed65eb5f166bfa9b663fe3ba5e4fddf110e76b5919351c8afad1d
MD5 3b6258274852872c14217e570951bd53
SHA1 98f58022fdc0aea4dcd4d9a88e30e5b07507149c
SHA512 4bbfa863ecce3e098644f7c3fd747727784f749349c2aee49978ad128c4b50513095b8b6f108649c0e8358067f346df42707986f9b189379a7e50f65fe0e778d
SSDEEP 24576:2W/n2DoLegiKCQ5YW2gAyde0UCoexSboFdzsiS8188QzWZAvfCW1y5Ofeb0uzDtA:2W/n2MLe/tQCwpqCoeIoj3S8zQqZO6WH
TLSH
T190653323E3864FFBDB8B27A1B35D95066EF1E0552225D7702232892DCE24A0578D7F9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Cache\Cache_Data\f_00000a
Size 7.7MB
SHA256 3167b8cb93929a80eed405325d74079abb1652b7302ccd8461827add25bdf086
MD5 ace8d6fcf594a37bcbd09a236b2d89bb
SHA1 3c1598a7aec9ea48e3aa68b39857a2ea11cd7964
SHA512 7a0d675979f5514cb75e7d62b92cf7671616bc9db5c7a4412d3b09bee7f6c6ca3debb3687485bf8643da0476b759a5f362d812f88c7cbbff59b3a0e1ce502b5e
SSDEEP 196608:4kW7WXcJ3EJk8njRoLVR++sUrlac0eK49CLCsKGaBOt:lW7caikEjmX++3rO49tsKGaq
TLSH
T1848633D2D2D31BF5DA9B707625AEAAD18E50968277E823211AF7C4CCC56CBF06102FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 d0ff678c1d77981363c5f409c79c7a088e16c2e3ab96bfdb7dc74b76e7262ee1
MD5 b7be222730e7696b138118b7b94954b5
SHA1 dc7c8d30b9dca45b9edd3576508d291ae1320d20
SHA512 1c8307814eafa2649267d19078ee2d97a36f3d4159064daf4894cbcbc975094584ca08a47817346d8fa2ea95afa0f52ec458c10092cc8d6db8d56a2b1115f21a
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 dda2d38b3a33ac68d028069653d910077ffb337e248e059ba4fad1b51688b2ed
MD5 7fc8da8c8d9e1a889230b5f7645f33a4
SHA1 20ee47a887cbd94488fbf28ccf70daab18bf7885
SHA512 0a61c8bf55812fcc685209d5511d8d424812e46ac9e06483c4127e19c4b0f1888bc0e29602d49446cb3eda265b0a6db17ab50fcbd1b7085674693aec4141383c
TLSH
T167B0922918A04682D2024374938A51A0B139082013021A0A13AC217EF8B83908748748
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 38339c9e615fc889659c9c1242ca62ceaa25a1074a47190703bc16cab6936716
MD5 12e2991d8d3fe87c913d935e598a857f
SHA1 d71a23456ee06d2db883907df34d46ef5dd5edf2
SHA512 3b5a78c2262078a62b7f29083ee1b841b24d5172a2bfaac189df8a6b6d386d1df45d82390541d63d2bd9032287801578f5fb1142a67d2ebaf987fa69f1df05be
SSDEEP 3:LstlNllkll/lj:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 407eb2a45c99a40b2c428449e046a949a44a21ca5b3040f25bbfd15807327c3c
MD5 acf5bab3f223e954b8e09f6d78a8cc82
SHA1 f24908b3f5717e49f5f376ba478c5b5a5a2738a4
SHA512 b82dcfe7d0730e1da69be96f5c3e9dc8e705ac8a443a576dd18ec4d94ec73e3ef5f561e54b89a87e2bec31d859e0036b55a765d3b366d3b201267b1338826d29
SSDEEP 192:stPW0uJfmZ8pasU/S+WirIJebtieFSwY+8/MaMC:stPjuJJQ/VzsfwS0C
TLSH
T145E1C9065F68AEB74DC7E6057A35BB16E2F6502261D40E98EBFC8A1C04E66CC6307C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 e594bb9da04ea32331ad84f85282ad0ffbf93f843e62475d96b7a86a31880c89
MD5 b96fd8773212b1ff0dd370f902182e11
SHA1 a7c6bd2a0f5d663143d91241aaddd69808fa6676
SHA512 35ad1c49d1e96ca251dfef67cd281e5f7969f9110ef248236ae593bd1255c1180c1c31e53ebb72f278aaa5f5f09e858727d5de753225a9d2b3ba440ee77d1d75
SSDEEP 192:stPW0u3fmZ8pasU/S+WirIJebtieFSwY+8/taM8:stPju3JQ/VzsfwSN8
TLSH
T126E1C9065F68AAB74DC7E2057E35BB16E2F6102161D40E98EBFC891C08D66DC6307C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5a663d.TMP

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Preferences~RFe5a663d.TMP
Size 6KB
SHA256 11240f3591054449a939bc2e07957fba69d13a0661676ef3a7b96305f85a8680
MD5 d6c85ae551633d4f4e45e8250338f824
SHA1 7a5845984ac355385584ba54b180f1655173449c
SHA512 e0ad24d8eff219b345e734c410ffcd9c0cf78da90ca366c77e42b7241cbcc67af2498b9895018034efa4344a36d2d432a54de670ac60cc9098bc8dfa2d5eb9f5
SSDEEP 192:stPW0u3fNZ8pass/S+WirIJeeFSwYI8/VaM8:stPju3AQ/VzfwQl8
TLSH
T19FE1C9065F64A9B74DC7E219BE35BB16E2F6102261D40E9CEBFC891C08D56DC6307D4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Local State
Size 1KB
SHA256 97a4b932f9900030abe965c9d517c36deb464fa41d1ea89753a5c0b32bfb4a0e
MD5 7f0366cf975d1cd750eb1d13a456b622
SHA1 faef233808c37c64edb20293363ccd95f6eec0a1
SHA512 bc4cbfa70a273c11ce921e1e6e7d5ef3329a388cf7ef497aa6b1036f75bf8e6748c3e10e8cf2c420188fa8d39738b1804ba47f1b89c19396f284d3b51c6d8365
TLSH
T181316773F8A46F7678D15983B2117A6F5D2040BAC1518E8CB5DE4B1846D768CA32BC37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Local State
Size 2KB
SHA256 037d12eef692d3db12e5ba754767c64ad747711873a41c620196a2ea0373ae78
MD5 5ecd9515987b89339a0977f7e7a3daae
SHA1 7ae7fbbe9d61d85b502ed5392f1c427f1ecc7b5b
SHA512 f46121a26509394eb49350ae1f43aa7038488b1a00f87a7d301a51aec39ea2e898a7146a25435e2b872702e2d5116ff86e6f4d4b16eed464d95fe404817d6fde
TLSH
T12B51A733BC58BB7799E38941B9093F27D93550A596915F98E9DD0F0C41DB66C2302C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Local State
Size 3KB
SHA256 27579544d6a7460be83f9940a0ee8c51bc8c8da01b5d4e18e596f506ec9a6084
MD5 e8f31171998cb4940d8c0098c90590fd
SHA1 5bf49d4bebf7809d481967847ba7071904e65e24
SHA512 ebc181ad4d8f51da062d05588aa6543f80ba264247355018244cb2380ac189fc5526841800a5871c334c71e38023cb7bd9cd6df876ede7c9d7c27337235c704e
TLSH
T1B471A532A9A8AA3B4DF29941B8853B1AB6654077D5D12FACD9ED0F0C02CB79C2342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Local State
Size 1KB
SHA256 3d6d7267c3dd3a415a72b662c0bb2536441a1d11d3e3b1db26e43ddb1f709274
MD5 1ca90ca4788ab132bd902ec2f7f87ee5
SHA1 e2fd1d31957a953543b38902e88daeb27ea704c4
SHA512 417996f69e62faf5df89127eb7b53f65f7c8b41bd3510632b469daa2fdf83c35cf8eacfe6320abd4eed66faf36bbe3593ba476abc3ec87128954513403d9ae9f
TLSH
T161317772F9D46F726CD15582B201BB6F6D2040BAC151CE8CB5DE4B1C06D768CA22AD33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Local State
Size 4KB
SHA256 bf49a61be06c3090f96aa459b2e8fe0afdc052d78bd5a924ecdd6484c219bb9c
MD5 d00576f8a72d3f8f2a67bb9a5c9d839c
SHA1 7100a0ae6e119038f5f428b481ca487e5a713c76
SHA512 d632bbcd087f63a17fe285e75e9182ee31c1c5efd86d3c5ff702154a8b3814ad284ba74e3c50f34864a2da102f639eeb73b8a0d09c9311f70e95bacf6b870eb0
SSDEEP 96:zuAbNkCEzfZXOFr8Frh/cInURoDoto+5UuDWB7BZ56RmZ2H8T30z0a:zbbNbSeiooDUhvG7BZ2HEs
TLSH
T16891B522A9B4AA374DF3D945B9493F07A6A44067D4956FECD9ED0F0C42DB2DC2342C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Local State
Size 16KB
SHA256 ad62ddf57851d24c4053591d4b6359a8d6cf79ce541f0f56670395959bd9753c
MD5 5bdcd55974bfe185e7702be09067fc6b
SHA1 b62014a23568179bab59e58f5d19c0090a593b7c
SHA512 b2d44f5c0aedc44a2fd4abed8c60c628c485d0d0de7b2c54a805f0c7fc3a378f50f83c2561794f477cdd173903bfc29e5681a4d466a6a2a5497faf68076e5aea
SSDEEP 384:zv+aQikB+z/xvxjg/qhEsNb/o7C0lJVkQ9zR:C/UxvxjgC+FdlJLFR
TLSH
T145729E2B95A83F2755F3F9457A480B5FDBB888A290C16EBC49ED5F0A06C73D81302C46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe598ad1.TMP

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Local State~RFe598ad1.TMP
Size 1KB
SHA256 3fcb36c98505b140513c41aaac303cf3432072036b1be1233007a9c9c1c4be0e
MD5 cb65b5f9803b583dd8bea68adad49519
SHA1 970971d44773c86c525e528b09412adb00a4533e
SHA512 d823d3532b9d81b4d57817a6aec75aa4a7c5f95a2f7e29f34645d0bfd571f2c8a577bacaad6608d8c3fdef9dd867870c010c2dce9113eee4cbcbaa71f8073339
TLSH
T164213233E8986F75B8D15892B212BB5F6D1040BA81908E4CF5DE471806DBA9CA32AC73
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\ShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\ShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\ShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\ShaderCache\index
Size 256KB
SHA256 c6323cc0c37a7029a865829cfb5fdeebb70160288ea4d1d8e4cb0793088805c7
MD5 6e07d22ab12838ce72856b621f888b19
SHA1 fcfa3e4e87df5ca8ae88063dab7639c7f023c128
SHA512 ce41f8496dd1b8417ece62e322b9c876f6e73545fe29a97716acf832ae946e9fd7738d20f3d19b66536bac6c88632f3c0f5b22f13766c620bc8b5ce52874da17
SSDEEP 3:LsOllllklkXlSUXe:LsUlPSo
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\Downloads\Nemesis Launcher (1).exe.WebView2\EBWebView\Variations
Size 86B
SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
MD5 f732dbed9289177d15e236d0f8f2ddd3
SHA1 53f822af51b014bc3d4b575865d9c3ef0e4debde
SHA512 b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4
TLSH
T168A012078473800AE4184092C45C024114A480460119D0015070931314950CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3520-387-0x00007FF936690000-0x00007FF936691000-memory.dmp

Download

memory/3520-423-0x000002A348150000-0x000002A34817B000-memory.dmp

Download

memory/4676-559-0x00007FF936690000-0x00007FF936691000-memory.dmp

Download

memory/4752-258-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-314-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-353-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-432-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-246-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-251-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-259-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-260-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-632-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-271-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-670-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-276-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/4752-603-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-390-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-277-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-770-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-257-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-757-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-733-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-317-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-274-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-272-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-356-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5340-275-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5352-278-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5352-357-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5352-282-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5352-318-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5352-407-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5352-284-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5352-262-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5352-281-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5596-470-0x00007FF934D20000-0x00007FF934D21000-memory.dmp

Download

memory/5596-471-0x00007FF936760000-0x00007FF936761000-memory.dmp

Download

memory/5724-315-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5724-731-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5724-693-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5724-323-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5724-322-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5724-635-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5724-316-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5724-358-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5724-321-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/5724-435-0x0000000140000000-0x00000001433CE000-memory.dmp

Download

memory/6980-702-0x000001709C9C0000-0x000001709C9EB000-memory.dmp

Download

memory/6980-735-0x000001709C9C0000-0x000001709C9EB000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads