Overview

overview

9

Static

static

3

SolaraB/So...er.exe

windows7-x64

6

SolaraB/So...er.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    204s
  • max time network
    199s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/05/2024, 17:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SolaraB/Solara/SolaraBootstrapper.exe
  • Size 13KB
  • Sample240526-vsblaadg2s
  • SHA256 a7fecfc225dfdd4e14dcd4d1b4ba1b9f8e4d1984f1cdd8cda3a9987e5d53c239
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
discoveryevasionpersistencethemidatrojan

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
    evasion
  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 45 IoCs
  • Modifies system executable filetype association 2 TTPs 7 IoCs
    persistence
  • Registers COM server for autorun 1 TTPs 64 IoCs
    persistence
  • Themida packer 13 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    evasiontrojan
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Checks system information in the registry 2 TTPs 6 IoCs

    System information is often read in order to detect sandboxing environments.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 10 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 40 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SolaraB\Solara\SolaraBootstrapper.exe
    "C:\Users\Admin\AppData\Local\Temp\SolaraB\Solara\SolaraBootstrapper.exe"
    1⤵
    • Checks computer location settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:400
    • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe
      "C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe"
      2⤵
      • Identifies VirtualBox via ACPI registry values (likely anti-VM)
      • Checks BIOS information in registry
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:4904
  • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
    "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe"
    1⤵
    • Modifies system executable filetype association
    • Registers COM server for autorun
    • Checks processor information in registry
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3160
    • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
      "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" /update /restart
      2⤵
      • Executes dropped EXE
      • Checks system information in the registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2084
      • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
        C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Modifies system executable filetype association
        • Registers COM server for autorun
        • Adds Run key to start application
        • Checks system information in the registry
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4848
        • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe
          "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Registers COM server for autorun
          • Modifies registry class
          PID:3156
        • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
          /updateInstalled /background
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies system executable filetype association
          • Registers COM server for autorun
          • Checks system information in the registry
          • Modifies Internet Explorer settings
          • Modifies registry class
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          PID:3216
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:3848

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A
          • Size 471B
          • SHA256 6d67a12ad4a1ad01801263d8ff55c616ba34ea2bcffc1e7cc9e20b285c3e77c9
          • MD5 SHA1 SHA512
          Submit Download

          E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A
          • Size 412B
          • SHA256 7b22745df31053d0f705c000108be8608615a591f8319f8ad6f1ebc3899e3d9e
          • MD5 SHA1 SHA512
          Submit Download

          FileSyncClient.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncClient.dll
          • Size 5.0MB
          • SHA256 3d0250f856970ff36862c99f3329a82be87b0de47923debefe21443c76cddf88
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          FileSyncConfig.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe
          • Size 553KB
          • SHA256 a3a4b648e4dcf3a4e5f7d13cc3d21b0353e496da75f83246cc8a15fada463bdf
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          FileSyncSessions.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncSessions.dll
          • Size 3.7MB
          • SHA256 1e0c26ceecee602b5b4a25fb9b0433c26bac05bd1eee4a43b9aa75ae46ccf115
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          FileSyncTelemetryExtensions.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncTelemetryExtensions.dll
          • Size 58KB
          • SHA256 a742c9e35d824b592b3d9daf15efb3d4a28b420533ddf35a1669a5b77a00bb75
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          FileSyncViews.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncViews.dll
          • Size 2.4MB
          • SHA256 146740eddcb439b1222d545b4d32a1a905641d02b14e1da61832772ce32e76ba
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          LogUploader.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogUploader.dll
          • Size 769KB
          • SHA256 fe49f22bb132fedf1412e99169d307fa715dbdd84fe71c3e3ff12300d30d4987
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          LoggingPlatform.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LoggingPlatform.dll
          • Size 504KB
          • SHA256 d5a538a0a036c602492f9b2b6f85de59924da9ec3ed7a7bbf6ecd0979bee54d3
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.contrast-black_scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-100.png
          • Size 1KB
          • SHA256 6f028542f6faeaaf1f564eab2605bedb20a2ee72cdd9930bde1a3539344d721b
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-black_scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-125.png
          • Size 1KB
          • SHA256 cbdcf248f8a0fcd583b475562a7cdcb58f8d01236c7d06e4cdbfe28e08b2a185
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-black_scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-150.png
          • Size 2KB
          • SHA256 36a6aad9a9947ab3f6ac6af900192f5a55870d798bca70c46770ccf2108fd62d
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-black_scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-200.png
          • Size 2KB
          • SHA256 67d1bb54fcb19c174de1936d08b5dbdb31b98cfdd280bcc5122fb0693675e4f2
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-black_scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-400.png
          • Size 6KB
          • SHA256 5cb8fd670585de8a7fc0ceede164847522d287ef17cd48806831ea18a0ceac1f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.contrast-white_scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-100.png
          • Size 2KB
          • SHA256 a024fc5dbe0973fd9267229da4ebfd8fc41d73ca27a2055715aafe0efb4f3425
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-white_scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-125.png
          • Size 3KB
          • SHA256 e8b30bfcee8041f1a70e61ca46764416fd1df2e6086ba4c280bfa2220c226750
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-white_scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-150.png
          • Size 3KB
          • SHA256 a0bbe33b798c3adac36396e877908874cffaadb240244095c68dff840dcbbf73
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-white_scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-200.png
          • Size 4KB
          • SHA256 fba9104432cbb8ebbd45c18ef1ba46a45dd374773e5aa37d411bb023ded8efd6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.contrast-white_scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-400.png
          • Size 8KB
          • SHA256 9250ef25efc2a9765cf1126524256fdfc963c8687edfdc4a2ecde50d748ada85
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-100.png
          • Size 2KB
          • SHA256 8acbdd41252595b7410ca2ed438d6d8ede10bd17fe3a18705eedc65f46e4c1c4
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-125.png
          • Size 4KB
          • SHA256 a5294e3c7cd855815f8d916849d87bd2357f5165eb4372f248fdf8b988601665
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-150.png
          • Size 5KB
          • SHA256 3df4590386671e0d6fee7108e457eb805370a189f5fdfeaf2f2c32d5adc76abd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-200.png
          • Size 6KB
          • SHA256 3384357b6110f418b175e2f0910cffe588c847c8e55f2fe3572d82999a62c18e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-400.png
          • Size 15KB
          • SHA256 deb0ec0ee8f1c4f7ea4de2c28ff85087ee5ff8c7e3036c3b0a66d84bae32b6bb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveSmallTile.contrast-black_scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png
          • Size 783B
          • SHA256 292cac291af7b45f12404f968759afc7145b2189e778b14d681449132b14f06b
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.contrast-black_scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png
          • Size 1018B
          • SHA256 8efeacefb92d64dfb1c4df2568165df6436777f176accfd24f4f7970605d16c2
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.contrast-black_scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png
          • Size 1KB
          • SHA256 262b9a30bb8db4fc59b5bc348aa3813c75e113066a087135d0946ad916f72535
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.contrast-black_scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png
          • Size 1KB
          • SHA256 9833b80def72b73fca150af17d4b98c8cd484401f0e2d44320ecd75b5bb57c42
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.contrast-black_scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png
          • Size 3KB
          • SHA256 3a7ef7c0bda402fdaff19a479d6c18577c436a5f4e188da4c058a42ef09a7633
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-100.png
          • Size 1KB
          • SHA256 4e11167708801727891e8dd9257152b7391fc483d46688d61f44b96360f76816
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-125.png
          • Size 2KB
          • SHA256 69e432d1eec44bed4aad35f72a912e1f0036a4b501a50aec401c9fa260a523e3
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-150.png
          • Size 3KB
          • SHA256 7e3f35d5eb05435be8d104a2eacf5bace8301853104a4ea4768601c607ddf301
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-200.png
          • Size 4KB
          • SHA256 85823f7a5a4ebf8274f790a88b981e92ede57bde0ba804f00b03416ee4feda89
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveSmallTile.scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-400.png
          • Size 11KB
          • SHA256 9a0b901e97abe02036c782eb6a2471e18160b89fd5141a5a9909f0baab67b1ef
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDrive.VisualElementsManifest.xml
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDrive.VisualElementsManifest.xml
          • Size 344B
          • SHA256 d21077ad0c29a4c939b8c25f1186e2b542d054bb787b1d3210e9cab48ec3080c
          • MD5 SHA1 SHA512
          Submit Download

          OneDrive.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDrive.exe
          • Size 2.3MB
          • SHA256 5d8273bf98397e4c5053f8f154e5f838c7e8a798b125fcad33cab16e2515b665
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveStandaloneUpdater.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDriveStandaloneUpdater.exe
          • Size 2.9MB
          • SHA256 969fbb03015dd9f33baf45f2750e36b77003a7e18c3954fab890cddc94046673
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveTelemetryStable.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDriveTelemetryStable.dll
          • Size 1.6MB
          • SHA256 146811735589450058048408f05644a93786a293c09ccb8d74420fb87c0a4d56
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Core.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Core.dll
          • Size 5.1MB
          • SHA256 ad44dbb30520d85f055595f0bc734b16b9f2fb659f17198310c0557b55a76d70
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Gui.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Gui.dll
          • Size 5.3MB
          • SHA256 bcfe906135d759cca8c2c7e32679c85404a288d99f3d4da13d929e98f6e607d5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Qml.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Qml.dll
          • Size 2.7MB
          • SHA256 bdadc298fda94a9ad1268128863276c7f898bef3ae79a3e6782cecf22f1294a2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Quick.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Quick.dll
          • Size 3.3MB
          • SHA256 c0d9b9ecb002635f24dcaf53eb34f46c22bacf02afae768f2d0834656a5d581d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Resources.pri
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Resources.pri
          • Size 4KB
          • SHA256 e1252527bc066da6838344d49660e4c6ff2d1ddfda036c5ec19b07fdfb90c8c3
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SyncEngine.DLL
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\SyncEngine.DLL
          • Size 8.3MB
          • SHA256 51b13dd5d598367fe202681dce761544ee3f7ec4f36d0c7c3c8a3fca32582f07
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Telemetry.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Telemetry.dll
          • Size 451KB
          • SHA256 414f6f64d463b3eb1e9eb21d9455837c99c7d9097f6bb61bd12c71e8dce62902
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          UpdateRingSettings.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\UpdateRingSettings.dll
          • Size 432KB
          • SHA256 9fb3abcafd8e8b1deb13ec0f46c87b759a1cb610b2488052ba70e3363f1935ec
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          WebView2Loader.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\WebView2Loader.dll
          • Size 107KB
          • SHA256 41a13ba97534c7f321f3f29ef1650bd445bd3490153a2bb2d57e0fbc70d339c1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          adal.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\adal.dll
          • Size 1.3MB
          • SHA256 55234df27deb004b09c18dc15ca46327e48b26b36dfb43a92741f86300bd8e9e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          msvcp140.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\msvcp140.dll
          • Size 425KB
          • SHA256 545bb4a00b29b4b5d25e16e1d0969e99b4011033ce3d1d7e827abef09dd317e7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ucrtbase.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\ucrtbase.dll
          • Size 1.1MB
          • SHA256 5ade748445d8da8f22d46ad46f277e1e160f6e946fc51e5ac51b9401ce5daf46
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          vcruntime140.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\vcruntime140.dll
          • Size 73KB
          • SHA256 c79241aec5e35cba91563c3b33ed413ce42309f5145f25dc92caf9c82a753817
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveSetup.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
          • Size 40.2MB
          • SHA256 e70e80dbbc9baba7ddcee70eda1bb8d0e6612dfb1d93827fe7b594a59f3b48b9
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          logUploaderSettings_temp.ini
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings_temp.ini
          • Size 38B
          • SHA256 884d272d16605590e511ae50c88842a8ce203a864f56061a3c554f8f8265866e
          • MD5 SHA1 SHA512
          Submit Download

          logUploaderSettings_temp.ini
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings_temp.ini
          • Size 108B
          • SHA256 c7edeead58810ce8d1b2cc5613bb196891d9b65f6775a00c9bfa13a093a25d01
          • MD5 SHA1 SHA512
          Submit Download

          PreSignInSettingsConfig.json
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\settings\PreSignInSettingsConfig.json
          • Size 63KB
          • SHA256 543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          DeviceHealthSummaryConfiguration.ini
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\setup\logs\DeviceHealthSummaryConfiguration.ini
          • Size 77B
          • SHA256 349d9f71a8aeb9521bf2480015562ca191569660a54b9ba86d8771c197f825f2
          • MD5 SHA1 SHA512
          Submit Download

          update100[1].xml
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VLW1SL5J\update100[1].xml
          • Size 726B
          • SHA256 36a6bd38a8a6f5a75b73caffae5ae66dfabcaefd83da65b493fa881ea8a64e7d
          • MD5 SHA1 SHA512
          Submit Download

          Microsoft.Web.WebView2.Core.dll
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Microsoft.Web.WebView2.Core.dll
          • Size 488KB
          • SHA256 5e7faee6b8230ca3b97ce9542b914db3abbbd1cb14fd95a39497aaad4c1094ca
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Microsoft.Web.WebView2.Wpf.dll
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Microsoft.Web.WebView2.Wpf.dll
          • Size 43KB
          • SHA256 1e987b22cd011e4396a0805c73539586b67df172df75e3dded16a77d31850409
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          .nycrc
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\get-intrinsic\.nycrc
          • Size 139B
          • SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
          • MD5 SHA1 SHA512
          Submit Download

          .eslintrc
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\has-proto\.eslintrc
          • Size 43B
          • SHA256 0694050195fc694c5846b0a2a66b437ac775da988f0a779c55fb892597f7f641
          • MD5 SHA1 SHA512
          Submit Download

          .nycrc
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\hasown\.nycrc
          • Size 216B
          • SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
          • MD5 SHA1 SHA512
          Submit Download

          LICENSE
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\vary\LICENSE
          • Size 1KB
          • SHA256 bd47ce7b88c7759630d1e2b9fcfa170a0f1fde522be09e13fb1581a79d090400
          • MD5 SHA1 SHA512
          Submit Download

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\VCRUNTIME140.dll
          • Size 99KB
          • SHA256 7d7ca28235fba5603a7f40514a552ac7efaa67a5d5792bb06273916aa8565c5f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          WebView2Loader.dll
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\WebView2Loader.dll
          • Size 133KB
          • SHA256 79d7e45f8631e8d2541d01bfb5a49a3a090be72b3d465389a2d684680fee2e36
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Wpf.Ui.dll
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Wpf.Ui.dll
          • Size 5.2MB
          • SHA256 46cfbe804b29c500ebc0b39372e64c4c8b4f7a8e9b220b5f26a9adf42fcb2aed
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          path.txt
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\bin\path.txt
          • Size 49B
          • SHA256 f99a87a0c9006940f0d9efa1331d253dcf56016c82f4e266b507c303bb8493a6
          • MD5 SHA1 SHA512
          Submit Download

          cd57e4c171d6e8f5ea8b8f824a6a7316.dll
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.dll
          • Size 5.5MB
          • SHA256 5c72240283da6a1e15ba787bb0c6f238e7d603b391a24f1774c61b51137dd3f7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          cd57e4c171d6e8f5ea8b8f824a6a7316.exe
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe
          • Size 85KB
          • SHA256 3c372a8919c28dc76414b2f30da423c3e1018b1a8444527949ce20cc3fc93ed0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libcurl.dll
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\libcurl.dll
          • Size 522KB
          • SHA256 ee94e2201870536522047e6d7fe7b903a63cd2e13e20c8fffc86d0e95361e671
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          zlib1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\Solara.Dir\zlib1.dll
          • Size 113KB
          • SHA256 945e7f5d09938b7769a4e68f4ef01406e5af9f40db952cba05ddb3431dd1911b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          aria-debug-3160.log
          • Path C:\Users\Admin\AppData\Local\Temp\aria-debug-3160.log
          • Size 470B
          • SHA256 c7682e76b379d6b7c2bdbd0408f28634100acb6274eb39350699e30fd588fac9
          • MD5 SHA1 SHA512
          Submit Download

          tmpB3AB.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\tmpB3AB.tmp
          • Size 35.9MB
          • SHA256 bbc70091b3834af5413b9658b07269badd4cae8d96724bf1f7919f6aab595009
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          memory/400-5-0x0000000005990000-0x00000000059A2000-memory.dmp
          Download

          memory/400-3-0x00000000750B0000-0x0000000075860000-memory.dmp
          Download

          memory/400-1473-0x00000000750B0000-0x0000000075860000-memory.dmp
          Download

          memory/400-1-0x00000000004D0000-0x00000000004DA000-memory.dmp
          Download

          memory/400-0-0x00000000750BE000-0x00000000750BF000-memory.dmp
          Download

          memory/400-2-0x0000000002850000-0x000000000285A000-memory.dmp
          Download

          memory/4904-1506-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-1475-0x000001D94F3C0000-0x000001D94F8FC000-memory.dmp
          Download

          memory/4904-1476-0x00007FFBF7200000-0x00007FFBF7CC1000-memory.dmp
          Download

          memory/4904-1499-0x000001D94F330000-0x000001D94F338000-memory.dmp
          Download

          memory/4904-1500-0x000001D953F00000-0x000001D953F38000-memory.dmp
          Download

          memory/4904-1501-0x000001D94F3A0000-0x000001D94F3AE000-memory.dmp
          Download

          memory/4904-1502-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-1504-0x00007FFBF7203000-0x00007FFBF7205000-memory.dmp
          Download

          memory/4904-1505-0x00007FFBF7200000-0x00007FFBF7CC1000-memory.dmp
          Download

          memory/4904-1493-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-1496-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-1495-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-1492-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-1497-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-1664-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-1471-0x00007FFBF7203000-0x00007FFBF7205000-memory.dmp
          Download

          memory/4904-1481-0x000001D935590000-0x000001D93559E000-memory.dmp
          Download

          memory/4904-1472-0x000001D933910000-0x000001D93392A000-memory.dmp
          Download

          memory/4904-1479-0x000001D94EF40000-0x000001D94EFBE000-memory.dmp
          Download

          memory/4904-1477-0x000001D94EE80000-0x000001D94EF3A000-memory.dmp
          Download

          memory/4904-2443-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-1494-0x00007FFC06E80000-0x00007FFC06EA4000-memory.dmp
          Download

          memory/4904-2474-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-2476-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download

          memory/4904-2478-0x0000000180000000-0x0000000180CAE000-memory.dmp
          Download