[Warning] Nezur Skidded, Weird Behavior

ImmuneLion318

Posts: 1479

Threads: 95

Joined: Oct, 2019

Reputation: 103

Posted

Edit: C# Source Dll And Ui Src

Ui.exe

Win32.dll

Throw Both Into DnSpy To Get Sources Win32.dll Is The C# While The Od Named App Is The Ui Check Resources For It And <Module> For The C#.

This Is More Of A Warning Of It, So Lets Get Into It First It's Skidded From This Source

https://github.com/noteffex/ImGui-Loader-Base/

Proof? You May Ask

https://cdn.discordapp.com/attachments/1066033179909177365/1158115199509856266/image.png?ex=651b1254&is=6519c0d4&hm=c3480a2ddeec3c3d345a16c53eee2a6259b5d698ead09b0694fc615ea56fecac&

https://cdn.discordapp.com/attachments/1066033179909177365/1158115375267987476/image.png?ex=651b127e&is=6519c0fe&hm=901b44dcca4de935102c70e97c06746febf314a70719cc5f3c5b6b5e45ad8f83&

https://cdn.discordapp.com/attachments/1066033179909177365/1158115375515435078/image.png?ex=651b127e&is=6519c0fe&hm=311bfc9d4c86bc2331833951d570c031ddb188de29d8051689fee01d92ff9636&

As For Sus Behavior We Got Some Obfuscated Strings And Paths

https://cdn.discordapp.com/attachments/1066033179909177365/1158116422396948571/image.png?ex=651b1377&is=6519c1f7&hm=89dbe2f9ce83ccee25ed6d097f1759adcb40020be115e8964d7e3a3eca9b7eab&

https://cdn.discordapp.com/attachments/1066033179909177365/1158116422636019782/image.png?ex=651b1377&is=6519c1f7&hm=6a5977ecd6821d2643883618142c3a3af2743f6ebf46e053ebad64530ae2846e&

https://cdn.discordapp.com/attachments/1066033179909177365/1158116422925430844/image.png?ex=651b1377&is=6519c1f7&hm=eab4cf02600742c8dc0fc3033c9d1999281578d48cf32b355501abb40762b8a3&

https://cdn.discordapp.com/attachments/1066033179909177365/1158116423160316045/image.png?ex=651b1378&is=6519c1f8&hm=f84d9b0faa4f7acc4610dbb3926275420e7ebcf880d1e09761a940cb34a1df1a&

Strings We Deobfuscated Using Their Encrypted Stuff

d2a7fa93c23a08ffbfd563b79d0deefce09e2c5ea5822129b0256c435af90e6efa438ce20d764ef519295b6f4c2171674a04762c27cb58a60074bc5ecbf33cc6
C:\Program Files (x86)\Microsoft
C:\Program Files (x86)\Microsoft\Graphics
C:\Program Files (x86)\Microsoft\Graphics\Nezur
C:\Program Files (x86)\Microsoft\Graphics\Nezur.zip
C:\Program Files (x86)\Microsoft\Graphics\Nezur\Nezur.exe
C:\Program Files (x86)\Microsoft\Graphics\Nezur\opencv_world470.dll
C:\Program Files (x86)\Microsoft\Graphics\Nezur\yolov3-tiny.cfg
C:\Program Files (x86)\Microsoft\Graphics\Nezur\yolov3-tiny.weights
https://nezur.net/Nezur.zip

1

MSDD

Posts: 11

Threads: 0

Joined: Aug, 2023

Reputation: 1

Replied

i mean using a imgui base isnt that big of a deal

but doing sus stuff is another thing

0

Kxhu

C# & Lua enjoyer

Posts: 285

Threads: 21

Joined: Dec, 2022

Reputation: 11

Replied

https://cdn.discordapp.com/attachments/1129953319348097154/1158118310383194162/brrr.png?ex=651b1539&is=6519c3b9&hm=99fb79f6af16c9fb67ba0c5c05e63c8148a9a69bb3be6fcaa203eb95437e8b46&

Comments

Whoman 20 Reputation

Commented

litearlly me reading this thread

0

0

Thx for reps everyone: https://forum.wearedevs.net/profile/reputation?uid=90498

DeepPain

Wyvern

Posts: 479

Threads: 5

Joined: Jul, 2020

Reputation: 57

Replied

Bro didn't even credit me for help with reversal

0

My Discord is xwyvern

https://i.imgur.com/mH521VR.png

ItsNitro

Dad

Posts: 533

Threads: 41

Joined: May, 2020

Reputation: 4

Replied

Using imgui loading from someone else is common practice, also I don't see anything sus with the loader code

0

nltr | Xaml & C# Developer | Former Fluxus Administrator
------------------------------------------------------------------------------------
💜 Developer of Kronos 💜

Senior Dev of Orbit

Discord

IshanjitHere

Posts: 1

Threads: 0

Joined: Aug, 2023

Reputation: 0

Replied

Hi, Ishanjit here just wanted to ask did you check its network activities? For example by using fiddler?

throw away account..

Comments

Cyros 20 Reputation

Commented

this is a real moment of ishan being smart

1

0

Syraxes_

Web Developer

Posts: 1307

Threads: 40

Joined: Jul, 2021

Reputation: 67

Replied

A tipycal day in WeAreDeVs

0

Added

I thought you made Nezur (The style and idea is so equal to Nihon is like a subproduct )

0

I'm not lazy, I'm just highly motivated to do nothing. #I💚Dogs.

Alawrpar

Posts: 531

Threads: 20

Joined: Nov, 2022

Reputation: 44

Replied

vouch /charss

Comments

Zayn 9 Reputation

Commented

bro isn't dead???

0

0

https://cdn.discordapp.com/attachments/1136067487847415848/1146449877660872785/image.png

https://cdn.discordapp.com/attachments/1098921594249814066/1112144294007029932/WRDBanner_Alawapr_1.png

Alternate

stop take my rice

Posts: 712

Threads: 113

Joined: Mar, 2022

Reputation: 40

Replied

devastating information of all time

0

we are dead

Cyros

Revision

Posts: 1061

Threads: 49

Joined: Feb, 2021

Reputation: 20

Replied

Bump
Anyways I found out their site was made using with Webflow, probably skidded and removed the watermarks which what webflow would've used

0

We Hate VOID

Kernel

1wascreated

Posts: 16

Threads: 3

Joined: Oct, 2023

Reputation: 2

Replied

Good Cw but forgot to credit others

0

the beauty found in chaos

Space

Lucas

Posts: 169

Threads: 29

Joined: Jan, 2023

Reputation: 7

Replied

This cw proved absolutely nothing lol

0

https://media.discordapp.net/attachments/981267720232382525/1048641787553661048/best.png?ex=652ac644&is=65185144&hm=c9f3f10122abc00b664b9d7b5743c5161a1e87302758d97f48a6c8437d9de0cc&=

[Warning] Nezur Skidded, Weird Behavior

Users viewing this thread: