82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316

Analysis

user interaction
yes
max time kernel
58s
max time network
58s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 20:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BootstrapperNew.exe
Size 8.3MB
Sample260420-yslyssft5t
SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
MD5 c9f1c55b26e7f781b65a96ea8190517d
SHA1 dad71e6ac2ad9e3ce30152f993d0c765008c6b5a
SHA512 aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d
SSDEEP 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+
TLSH
T169961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe

Executes dropped EXE 2 IoCs

pid	Process
1916	Solara.exe
3068	Solara.exe

Loads dropped DLL 4 IoCs

pid	Process
1916	Solara.exe
1916	Solara.exe
3068	Solara.exe
3068	Solara.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Solara.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Solara.exe

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral1/files/0x001700000002b610-477.dat	embeds_openssl

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134211890363196574"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies registry class 56 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	BootstrapperNew.exe
Key created	\Registry\User\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\NotificationData	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1"	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Mode = "4"	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	BootstrapperNew.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Generic"	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	BootstrapperNew.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257"	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\IconSize = "16"	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0100000000000000ffffffff	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	BootstrapperNew.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\MRUListEx = ffffffff	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	BootstrapperNew.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e80922b16d365937a46956b92703aca08af0000	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\NodeSlot = "2"	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByDirection = "1"	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1"	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 = 3a002e803accbfb42cdb4c42b0297fe99a87c641260001002600efbe110000009b75db1caf91dc0193d92350bd91dc01153c2650bd91dc0114000000	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	BootstrapperNew.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Documents"	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupView = "0"	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:PID = "0"	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell	BootstrapperNew.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	BootstrapperNew.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	BootstrapperNew.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	BootstrapperNew.exe

Modifies system certificate store 2 TTPs 5 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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	BootstrapperNew.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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	BootstrapperNew.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB	BootstrapperNew.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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	BootstrapperNew.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 040000000100000010000000866912c070f1ecacacc2d5bca55ba129030000000100000014000000b7ab3308d1ea4477ba1480125a6fbda936490cbb1d00000001000000100000000d48ee33d7f1af8f4b002527f82a344a140000000100000014000000dd040907a2f57a7d5253129295ee3880250da65962000000010000002000000085666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b6909000000010000004c000000304a06082b0601050507030206082b06010505070303060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703080b0000000100000052000000530053004c002e0063006f006d00200052006f006f0074002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900200052005300410000000f0000000100000020000000489ff6233f3d3c5da77604be230745657fe488cb05257da551bfd64c1f179e722000000001000000e1050000308205dd308203c5a00302010202087b2c9bd316803299300d06092a864886f70d01010b0500307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f7269747920525341301e170d3136303231323137333933395a170d3431303231323137333933395a307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f726974792052534130820222300d06092a864886f70d01010105000382020f003082020a0282020100f90fdda32b7dcbd02afeec6785a6e72e1bba77e1e3f5afa4ecfa4a5d91c457476b18776b76f2fd93e43d0fc2169e0b66c356949e178385ce56eff216fd0062f5220954e865174e41b9e04f4697aa1bc8b86e625e69b15fdb2a027efc6ccaf341d8edd0e8fc3f6148edb003141d100e4b19e0bb4eec8665ff36f35e67020b9d865561fd7a38edfee21900b76fa1506275743ca0fac82592b46e7a22c7f81ea1e3b2dd9131ab2b1d04ffa54a0437e985a4332bfde2d655347c19a44a68c7b2a8d3b7caa19388ebc197bc8cf91dd922842474c7043d6aa92993ccebb85be1fe5f25aa3458c8c123549d1b9811c3389c7e3d866ca50f40867c02f45c024f28cbae719f0f3ac833fe112535eafcbac5603dd97c18d5b2a9d37578037222ca3ac31fef2ce52ea9fa9e2cb65146fdaf03d6ea6068ea8516366b85e91ec0b3ddc424dc802a81416d943ec8e0c98141009e5ebf7fc50898a2182c4240b3f96f38274b4e80f43d8147e0887cea1cceb5755c512e1c2b7f1a7228e700b5d174c6d7e49fad0793b6533535fc37e4c3f65d16be2173de920af8a0636abc96926a3ef8bc65559bdef50d892604fc251aa62569cbc26dca7ce2595f97acebef2ec8bcd71b593c2bccf219c8936b276319cffce926f8ca719b7f93fe3467844e99ebfcb378093370ba66a676ed1b73eb1aa50dc422132094560a4e2c6c4eb1fdcf9c09baa233ed870203010001a3633061301d0603551d0e04160414dd040907a2f57a7d5253129295ee3880250da659300f0603551d130101ff040530030101ff301f0603551d23041830168014dd040907a2f57a7d5253129295ee3880250da659300e0603551d0f0101ff040403020186300d06092a864886f70d01010b050003820201002018119429fb269d1c1e1e7061f19572937124ad6893588e32af1bb37003fc252b7485903d786af4b98ba5973bb51891bb1ea7f9405b91f95599af1e11d05c1da766e3b194070c3239a6ea1bb079d81d9c7044e38addc4f9951f8a38433f0185a547a73d46b2bce52268f77b9cd82c3e0a21c82d33acbfc581993174c17571c5beb1f02345f49d6bfc19639da3bc04c6180b25bb53890fb38050de45ee447fab94786498d3f628dd87d8706574fb0eb913eba70f61a93296ccdebbed634c18bba940f7a0546e2088717518ea7ab43472e02327775cb690ea862540abef330fcb9f82bea220fbf6b52d1ae6c285b1740ffbc86502a4520147dd4922c1bfd8eb6bac7edeec633315b723088fc60f8d415add8ec5b98fe5453f78dbbad21b40b1fe714d3fe081a2ba5eb4ec15e093dd081f7ee155990b21de939e0afbe6a349bd3630fee777b2a07597b52d8188176520f7da90009fc952cc32ca357cf53d0fd82bd7f5266cc906349616ea70591a3279790bb6887f0f52483dbf6cd8a2442ed14eb77258d3891395fe44abf8d78b1b6e9cbc2ca05bd56a00af5f37e1d5fa100b989c86e7268fcef0ec6e8a570b80e34eb2c0a0636190ba556837746ab692db9fa18622b665270eecb69f4260e467c2b5da410bc4d38b611bbcfa1f912bd744075eba29acd9c5e9ef53485aeb80f1285821cdb00655fb273f539070a9041e5727b9	BootstrapperNew.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
4840	BootstrapperNew.exe
1916	Solara.exe
1916	Solara.exe
3068	Solara.exe
3068	Solara.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
2060	msedgewebview2.exe
4716	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	4840	BootstrapperNew.exe
Token: SeDebugPrivilege	1916	Solara.exe
Token: SeDebugPrivilege	3068	Solara.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4840	BootstrapperNew.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 4840 wrote to memory of 1916	4840	BootstrapperNew.exe	80
PID 1916 wrote to memory of 2060	1916	Solara.exe	81
PID 2060 wrote to memory of 3676	2060	msedgewebview2.exe	82
PID 2060 wrote to memory of 1084	2060	msedgewebview2.exe	83
PID 2060 wrote to memory of 1084	2060	msedgewebview2.exe	83
PID 2060 wrote to memory of 1084	2060	msedgewebview2.exe	83
PID 2060 wrote to memory of 4424	2060	msedgewebview2.exe	84
PID 2060 wrote to memory of 2284	2060	msedgewebview2.exe	85
PID 2060 wrote to memory of 2284	2060	msedgewebview2.exe	85
PID 2060 wrote to memory of 4780	2060	msedgewebview2.exe	86
PID 2060 wrote to memory of 4780	2060	msedgewebview2.exe	86
PID 2060 wrote to memory of 4780	2060	msedgewebview2.exe	86
PID 3068 wrote to memory of 4716	3068	Solara.exe	89
PID 4716 wrote to memory of 2256	4716	msedgewebview2.exe	90
PID 4716 wrote to memory of 2676	4716	msedgewebview2.exe	91
PID 4716 wrote to memory of 2676	4716	msedgewebview2.exe	91
PID 4716 wrote to memory of 2676	4716	msedgewebview2.exe	91
PID 4716 wrote to memory of 920	4716	msedgewebview2.exe	92
PID 4716 wrote to memory of 2300	4716	msedgewebview2.exe	93
PID 4716 wrote to memory of 2300	4716	msedgewebview2.exe	93
PID 4716 wrote to memory of 588	4716	msedgewebview2.exe	94
PID 4716 wrote to memory of 588	4716	msedgewebview2.exe	94
PID 4716 wrote to memory of 588	4716	msedgewebview2.exe	94

C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe
"C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"
1⤵
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4840
- C:\Users\Admin\Desktop\Solara\Solara.exe
  "C:\Users\Admin\Desktop\Solara\Solara.exe" --bootstrapperPath "C:\Users\Admin\AppData\Local\Temp" --bootstrapperExe "C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks whether UAC is enabled
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:1916
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=1916.1116.504537205526822807
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:2060
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffc2fc6b078,0x7ffc2fc6b084,0x7ffc2fc6b090
      4⤵
      PID:3676
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1672,i,5960089163765123330,5415896201701659025,262144 --variations-seed-version --mojo-platform-channel-handle=1684 /prefetch:2
      4⤵
      PID:1084
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1992,i,5960089163765123330,5415896201701659025,262144 --variations-seed-version --mojo-platform-channel-handle=2008 /prefetch:11
      4⤵
      PID:4424
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1696,i,5960089163765123330,5415896201701659025,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:13
      4⤵
      PID:2284
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3532,i,5960089163765123330,5415896201701659025,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
      4⤵
      PID:4780

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2488

C:\Users\Admin\Desktop\Solara\Solara.exe
"C:\Users\Admin\Desktop\Solara\Solara.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3068
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=3068.4212.1221310548748785222
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4716
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x174,0x7ffc2fc6b078,0x7ffc2fc6b084,0x7ffc2fc6b090
    3⤵
    PID:2256
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1800,i,5559009664084463743,17943027934030954730,262144 --variations-seed-version --mojo-platform-channel-handle=1796 /prefetch:2
    3⤵
    PID:2676
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1764,i,5559009664084463743,17943027934030954730,262144 --variations-seed-version --mojo-platform-channel-handle=1932 /prefetch:11
    3⤵
    PID:920
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2292,i,5559009664084463743,17943027934030954730,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:13
    3⤵
    PID:2300
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3472,i,5559009664084463743,17943027934030954730,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
    3⤵
    PID:588

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC
Size 719B
SHA256 ad2361fb0fae8524c070ae1b3b197249c7a7406ffb880346f02639a74dedfea1
MD5 4c2e1416543b42827ba097206762237d
SHA1 b3165cb92754a364dc5a75b83a24b92866822741
SHA512 e86d9c4ffef724428b7f9d37c571e15da22f9246d4774a5536c5447cba1db8b7d9a39f3e8c3890d788f145c3de585ae03e4ef3e2e6a01c6e16687a6bc9347f5a
TLSH
T1AB0199627C0068072F9E1684924E8B90B0A680B5121E746CF97157117740FDD114AE2C
MD5 SHA1 SHA512 TLSH

Submit Download

A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E
Size 727B
SHA256 fdd08d9c8ab34804dad00ef33083d838eff8ee238d3ec6161889e35abc348464
MD5 ac4279e544b17bfc2b083fc055ec298e
SHA1 e556124677cba0d6a8119f9b8ec2b38ca93f78ff
SHA512 239a8b86580a9da2992d770e98b805932017dc81bc6f4421f8f3cdfd2725d379fa7ff3e19723c1f8b180eb52b369971da02944bf09628feee51b9082d4b49ffa
TLSH
T1DC0110603B2A170B385554078E6DD6B170AC16EC0ADB218F3A3468D6704C7F3F626619
MD5 SHA1 SHA512 TLSH

Submit Download

54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC
Size 446B
SHA256 fa2d95bd7058d5294462bee757c7a16a54b7181b9ffbb09ff029c467b53ab41f
MD5 68f49496ec90df7f2a7f88b092c46245
SHA1 5419a057b055a60fb519063b2e6114d953d95c25
SHA512 97fe3b7a8b1eaca95ccc8de9dbee1e0e939175c174a127b6000df712866857b98a4c79fb5ac1e8db9b5af3b2fa626f9a9f4b4d419690b65ac82ceb1f507c9b80
TLSH
T184F0616814AE002FF476D678D7D959A1FE35F003790CB6AD01E51309D615F866D60B68
MD5 SHA1 SHA512 TLSH

Submit Download

A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E
Size 478B
SHA256 11cce6e15b90dc3d62b09331cecd091b41288c5630f42207b287664e5811e9d1
MD5 b1007728bfb6dd726f3cf5586728382e
SHA1 f9b8dfa077ecfb414a70ae5446235e73cf867d4f
SHA512 b25149f28e0c663310b1cba11ab59b932f64455553eec217077ae6ad52ca35287d3b5078757efb941875db7887efb545e5a1e7f2cf5f54f77fb982788f8c4c6c
TLSH
T188F02B883EEC1179E031EB79C6E9B2511C56F052279042B400A20A48D703F018C6216A
MD5 SHA1 SHA512 TLSH

Submit Download

user.config

Path C:\Users\Admin\AppData\Local\CMD_Softworks\BootstrapperNew.exe_Url_qklxurpmvicxreqb2idv3y4ch042z1oq\1.0.0.0\user.config
Size 842B
SHA256 86a8d26331e8759c0110fa56486663bbc092eda6fb72f5a8aab71f317347ac2d
MD5 6697ca15ba69302821682dfd716695cd
SHA1 a638fb95fb2e1a79287767f9ea2bd9c1287a16aa
SHA512 75e2e5adb887d3c05bb2a31444ed5583c51bbc93648eb3f2a595b3c629760da8fe00376ee7743ae440f8e0a2444c457e2e23191bae02700eccf9cd7f9cad75fb
TLSH
T1C701490062C4BD9F45631F36DA518704CEB1439B91362528B67E63AB8F3148B078335A
MD5 SHA1 SHA512 TLSH

Submit Download

user.config

Path C:\Users\Admin\AppData\Local\CMD_Softworks\BootstrapperNew.exe_Url_qklxurpmvicxreqb2idv3y4ch042z1oq\1.0.0.0\user.config
Size 836B
SHA256 2c26c4940c44d29f4d658573a7110db7191a1349596b54a614ef86b12341783d
MD5 a144cf196272446a05744138aaa129d6
SHA1 cceae9182cd7a4e1e7ea62f1cb3c43f2e86b3039
SHA512 dc257348472aa2266fc16af2ea84b74e4be7b038687a4621618c3e0b758a76ed655b8f8aa9eaaed74c9c1762c05bcf6831e80abc97b276fbf9e51f0380eefeb5
TLSH
T1CD0145046284BEAF45636F36DA118704CEB1479B81762528B67E63BB9F3148B078339A
MD5 SHA1 SHA512 TLSH

Submit Download

0fye3kwh.newcfg

Path C:\Users\Admin\AppData\Local\CMD_Softworks\Solara.exe_Url_vuwrx3txhxtzok0u3lwmvxxf0mqja3mh\1.0.0.0\0fye3kwh.newcfg
Size 935B
SHA256 0f751771f2088db72f3fb00851208fff1e57de56d5cfd53154576e57ea16ca39
MD5 9f896f391fe2f3ba25d388ec721b5d28
SHA1 9f909bae66c56c14f1b48f5bd4fa0940b13bba3e
SHA512 e001c2903428c925106bba90320e42559adc560ae9af571ca52fcfcb76e617c1983a24b2295bd5ac992a2258c08f4cd4bec4fe3dc7fa6a015d0c40dd04600809
TLSH
T11E11480821C1BE5B42336F32DA218640DDB187D7417A2568B47D62A79F305CB078336A
MD5 SHA1 SHA512 TLSH

Submit Download

user.config

Path C:\Users\Admin\AppData\Local\CMD_Softworks\Solara.exe_Url_vuwrx3txhxtzok0u3lwmvxxf0mqja3mh\1.0.0.0\user.config
Size 815B
SHA256 8c07ca027ee07a4a9ab98b17facadd032986912853b38e11840414114d53a395
MD5 66fa646abbfa858e860c4c26ad8d453e
SHA1 6626b08ed10eb3f23ba08a9f03b0b8f660bcfae5
SHA512 81621fb62b504b9ab2d7ddef3efbd95c6aa23142b3b287c2db9198cd2389955693fc130d5cc7928022a5eecab4611d8da08d9a5291e88b34d41b3cf7879debe4
TLSH
T1FD01681421C0BE5B42336F32D9118640DEB187D7403A2528B47D66BA9F314CB078336A
MD5 SHA1 SHA512 TLSH

Submit Download

Solara.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Solara.exe.log
Size 3KB
SHA256 6a44a07994a07bb75fdc7a1c9b7eb2c9cb6737c8bf6766304e6c2d0dd20c01ff
MD5 88062e84924eb34cd8df32ebb93a75ec
SHA1 6d82477a9ef00440df01ab3e7c50422b17ec6e1e
SHA512 15ef84983f81fae51459fcc6ec5236a97e35b3b7b5b1cfb0724be86151880c05d4d4c91da9ed0064d8024b8a9918f5cb272f80c2476b3b0cdfa185b948d074ad
TLSH
T11F51107132B1B0D84D176F571C3C65C463FF4728BA509E4CB558624EE92A00B9F222F7
MD5 SHA1 SHA512 TLSH

Submit Download

Script #0.lua

Path C:\Users\Admin\AppData\Local\SolaraTab\Script #0.lua
Size 39B
SHA256 b9e0788ab8c6408c4cd1c7a39048d919e42a426817064822b433c852cc1a4c59
MD5 8e18cf65d7bb4e2e9056b733346c8e06
SHA1 d0e7e1204cec16db6c67a4b6f6c6d391fa03e5f2
SHA512 3a6b333d440d9f3f81cea951cecd8167e0451c1baba560a227155e7219fb2dcddaa959146888e543bcec8b3f92c9aa4a4d7a05e312ed7720f240931b0fc919e8
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 fff1720e5c939442a03cc892e514a18ee8793ac01c99c67fdef9fffc10b78e0f
MD5 ea8d36614570c60f20f5c5d76c1a0ed8
SHA1 8aeb4c4c2cfd9f2a8f122317132910adb31a147e
SHA512 64966ea90ec0f8531a1c5733529f87e02c7495299253ecf64d53a7a45b7a26b87cce88d38f3e667c56243bfaf3436029e7bd8dc46ebbded30430ba84125bcdd8
TLSH
T103D01213360111BCC4102132141277090D01C81E424A4100783A856D1E098950A66841
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9ec02d8a959c523c32f8020dfde990b73fa105b36480b9ab2a4fd78013b04674
MD5 9f2caef878a7d2bc0afa46fb9bbcc6c4
SHA1 d36bddeb2404b0c6e54de306db5dd39269be5d97
SHA512 6b81c093257ddb663202214faf70dd0a11559c1bdb87f4d741f9d3d5d1ca90d51304309eec9d891bdf4a596c7651d36b0a9efe43b87afd608424f2c79a8258cc
TLSH
T1D4D00411710014DDC4411031147157010D01CC5405470500353310440445D470175400
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 775b1ccb985799e4ae76011f4bce18fabe33ce1ec95efc6f79c29ad87d4a34c7
MD5 5642268e0207648bd191195c16cc37d2
SHA1 8ff3e8532fc68d5936fc3f5a13027a5167ff98a4
SHA512 60f06d0954657d21dfdd7064b3c2405393652c1effe5bf1ac60a431b84e5bdc9a574b3a483907dc2d4e092f904dae7be23ddc61e9bd039fee01e2dd6fc7e1bba
TLSH
T167D01213320105BCC4102033145377090C01C91F414A4000783A955D1A088950A26841
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 f68ec25f2545f2fabc9b6d87a4a28a6f5ca40e91a8245a20f61f66a408493bc6
MD5 47652e4b07d29dd425a51040cc71337e
SHA1 911e8e5d8a47762c29fd64bb8b0aea4413176e23
SHA512 69e67d28e59906d58b736f819bfb3a1a229dd8f36f483230795244e36a55466acc80b7b5c5ffb796eb9770056f0c8286da8508b6c4726d04338ce0b49e88be00
SSDEEP 6:/F4P5y/lssKm/bsb5GR3+oraFjl+EKdjock:d4AssK+bsbYa1sjdj
TLSH
T16B13C97CF980FE46F580AA7C82CBCB70C3B06B4C96120AA7007572372919766529E240
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 62b1e1cc312a5c35c572aefcd099db93eba5560eb6388063152938e9f28dd70c
MD5 0515cb4ef83f6b235fb47268fafb7e69
SHA1 a92729a10a73a20c54a51cb8b80760b16152f271
SHA512 a271ded9d54cfe0da17bdbf79cb3cd04906405f2aea079d0a8a5c81a73f475a95efb2511a116925be772d0340b838724c26124563a194470830ec3b731688177
SSDEEP 24:LopZ8l3Jfb9uaZhnSjM6wZhnSbNlhZi00pkfZhfdLZ:LuZ8JJxuaZhSUZhS3hZtaEZhVLZ
TLSH
T1D54426FB51A8DC58D68211BC1822773CE63350092EF3DEEEDE398195ECE137629B2500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 2df7f0cfb08ae186ff31ed147133a6a6246aeeb5c6b7ae64fcb27a4feaf69734
MD5 e71b0d7a195661204e3bae4b0d064f15
SHA1 af21e1edf5d99c26e25818471498493f9ef57153
SHA512 994189b38ab95eab0338ad70aa808cffd7fb0551b5ec1e0dc0764124f6f5afb5a2d440dae43d84bdf108421e7c23e2dda6b5ceed13ed01b1b9b0a1a436b5202d
SSDEEP 192:tMVH+eGa+C+Fqt99U/v8jDv+FqtVlSql/GUj+FqtXMoYF8Bzjk/8:tQRfD+FXv8jb+FatHj+FiZf
TLSH
T1C2254DCA1FB9AA81D7B29A74BDC5C8683DB412C5EBD9B4433503C63E14C3BC45A2255D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 01cacc53d75533f96e2a8e0999fd70f001c1fa97b8967825f7b33d66ff83883d
MD5 9eca1a3e513a9b919485c21e0bd13054
SHA1 6e245c9cd26fa369cb7031943c684e96dd0f340b
SHA512 52ef8262cadf5ac8c78d00cc78eb69872be1f9d1bb9fc17d43ee40d7b8c78158c5a7d04c219e376bcc2f6782aac7451ac09f124417a4192409feed693c7ed0cb
SSDEEP 384:NR/ACQu+JEYsfZGoMe9aHUVeMQ3QVvZGoMe9aHUVeMQ3:NRY+gspeWvpe
TLSH
T152164CCB0F385803DB42DFBC92C4EC1B2DF462D5B9D958D3E01B82A961947C56B8B06E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Cache\Cache_Data\f_000001
Size 27KB
SHA256 e01c8fbda53cd25b4bb153924b4076090139d390727517c60edd4e3b849103a4
MD5 2bb63bc961589fa265d96c64959719f1
SHA1 342a2503343edc2693a193eb8cde67296d366c0b
SHA512 b2aa26a6cab3d90f5b65a7c617d7b8dcd2332934c38a432837765132fd4803415813d3643b91f008d3a0f855c2856dd8b745258ec6e65ca7153646b089f426e4
SSDEEP 768:eiU6blSNf76KGaFgwdR7p3+jdk51TUddjGbDAWK:eFqlSNf7OS/VOj+51TUddibDAh
TLSH
T179C2F17A900A6D3EBD2EE56CEE2C318C294DD573CAB6D51135CA05EDE223A27C1C9815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Cache\Cache_Data\f_000002
Size 22KB
SHA256 e33b43230d6d011590179b0cf99c9397908f4b86ec2a62cbda13625bd72eaf0d
MD5 119113613d7d9dfaa339a121d19d4fa8
SHA1 e42a1fba5362f9a3794f0e4de3faeb309f1a8e9f
SHA512 1362b9111f811b38b0a109367d816092a937b75dae7cd5b149b5bbddf30a24a3e056f5afda9b15174ff88afeb0fb9db4685b43b1a9969e366eefd125d62986d5
SSDEEP 384:e5tE4A3Pp4zhlBuWG9N+PP6R7X6NOU7JJadv/hubY0F3+9FBNguu7Bpg3rS:eE4kPiz1uWu+HZN97JJadv/hu1F3+3vC
TLSH
T159A2E114335D8130508B46538FE58F52AA759A27B01EF6F0D1DEB752C9E2B23209AEF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Cache\Cache_Data\f_000003
Size 23KB
SHA256 58be14836d0572e07d78a8152da5194fa70656b3ebdb972ed0dde9f8c6f10bd7
MD5 5ab830f0d4ceaca00b7b8e40fd85395f
SHA1 db1f152ad42f2602ce15c8f71454f2d37cdfdeb6
SHA512 ae7937f7f6000a625abd5f346d3a31b9b40c298bd3258c7500295b8d708994bc6292f3b3a95f20f827b23086fc93e118dda3dc1a51d5d720e8f6193b11c4d430
SSDEEP 384:mQggnFSGBxmmTUO9AaOvbp8VUTD2gYUtC/p7s7ykXEPnUAO4fdIeGF6bod77gr6q:tXBxTUO4vbOUTSlXAytLf4QBC2uJw
TLSH
T147B2E13559A0079FBA13E0FE49174477AF563EEB63D03F1F84BD0013672604D59A654E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Cache\Cache_Data\f_000004
Size 163KB
SHA256 96d5b5398c5a09f269952a8584bf713c2796063b213a33381e77eb0fb0843db6
MD5 657ba9a8ec7e7ef59687d214d8934ef2
SHA1 3248b670d2baa44ec0673e0aa26b1f9be9091526
SHA512 17ac21e68c7f6ef7aa4b92275cd2a762620f03f660e7e5a1fccde81f05e0f9ab333f2459a617914bb09a3ce78c032045c72f70ea5fe16e1d1b10753387f66755
SSDEEP 3072:FNHPq+9wVg/uY5QYMmyLkOwGSdxJ3ubO906H0RKcjtGkoMjWt0CPxNe2f3COvGH8:7Hj9wqWmMzLdwxdPebsrUvtGK20CXl3z
TLSH
T1DAF312E0D7841E25A76DBFD182ED950FBC351EE2A130E489A1CB29F55863D48ADC9F03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 279f046dbe9b5febfbee566cff64f730e71b4028402e15072d1fd19b7941e9df
MD5 c222fb0b243d500365d8230358f755a1
SHA1 7f9c64d32b20ac2eef5bce7be696877026e768bd
SHA512 f66ac61962440337dc98554ffcb9afb99329ee154459659edbb682aa47c590f0c2140bb86979efd913d5df1bd1a0192c0ba9f37b84c18688646b2fda2590506e
TLSH
T198E0A7A12141E309FFB4317E8E440ACE62A84BA64732250F44F6032C4CD5FA78D88C37
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 07c091d920276e0a2e5e8e5312bc1e3ce162c8d10d1ae05849264ae2cec2e221
MD5 e37f9cf3c1498bc85cb7c251f9c8b21b
SHA1 9cdcc5ffe9a591e16b3dc919758d9b22d72db68e
SHA512 dd94fa6609b1db90f303c5c03a88ff51f2bf56e0dbb2810bfb727815ee017daf8b322079db266c71666d8f3f8688500f399f67aa994f05c06734560402790bf9
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 f4a5c4fb50e102c9cbcdf37738fd56c1b888828539854f62543e7a128977cd49
MD5 3434eeaeff29b0fb2a5d9fcebdfe18c3
SHA1 fc5512cdd944cf5f83861d58d9077ac81479c6a1
SHA512 ec6986464f45d68ad3d9a8142be5de8ac4e0cda4c858421b334b704db9a23a0e664a05bfab1d5f0f981c9daf5de101ec2f0e5df48cd1a377d1dca577e18b8cf9
TLSH
T17FC08C137120F305E33020398F45488392D80B3B44000A0B44D50128A8548748D44E33
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

History

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\History
Size 184KB
SHA256 e159a8b30613138e5812f053c2727608d32a24324c9b3acdfdb423ca71c28272
MD5 35f8fd3e17361d28e302ccfea6cc9742
SHA1 41e7ac890911492f6cde25f8d1dbfb0331998dcd
SHA512 e22b048c6c0a21521a3ed574b4a8af00ad290dea5956e2dc2cf9e1423d9afb48dcb27580ddf663a06ea60891980d1a943a69b4a665389a5cae2eedf1401557e4
SSDEEP 96:HBuYF18Y0LYxejzH+bF+UIYysX0fxQp97sEHt/DfLjLqL/BibgI4VgNr2jWRk/E2:HB2RH+bF+UI3iWGVsWN3qL//VgZQW32
TLSH
T13504EC5E5F343612CDBD513A68E745A3587DF03F8B236AC66C6104B1CEE2652B02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 06ec2c5c79d36bb19c718d0ee202db4e28d148f993bac3029d5e592c53740715
MD5 9ba18c8e031234de79db7ae3fe2152d6
SHA1 d2176e9d453f8b23e4b4b60d26d93495c3769e52
SHA512 d38794939d5372013b9e0d6dd04f2fdd90b463113be93224dd896105accf0363820c92b606b0b029c639bba82d5776c2037b852d752011183d0db263828d0040
TLSH
T18C218BA7C2E44D7D991206F83A24AA1BCE1D481453683D2ACAD49F4B93F0C74E16064B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

dd4fb20a-365b-414e-b2ca-e09e3e4b4947.tmp

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Network\dd4fb20a-365b-414e-b2ca-e09e3e4b4947.tmp
Size 524B
SHA256 40dc471c600cbbd42ba925c991f7b0499ebc32bc577c12594c9b8898886920d0
MD5 b231876b34223a77eadab1691420505e
SHA1 1d4d074b4bb7b3c87d6cb9bc92d0017085fddf78
SHA512 2d884e3ab90f11b46b51eb8ea44cde94040a3e1d5d101ebd8fb5332d9995b06a6cb8a294eec07030eec26adae5bce32caec449cf1c14539a93c97ebaeb2f8b38
TLSH
T132F059D6867EF8B320BD056B29407C9A677DAE30E1D294E0EE62442D70D0AF31F55023
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 e7427f962806775ea0c3cd3c6147d081537010c6670778ad5ffd5348ce675846
MD5 e815644fcc00d6b0a18a379c911586d5
SHA1 41174b1f97cc60b28b08180495d4898e3b426ffd
SHA512 f01807d62c938a939db69903f4441c43ea7071597dc19004e9f8e1c53625f2e25ccd6c9078968c4a34d04edb46945bfbb93856f73dbafed7d8a7b18fb580f302
SSDEEP 192:stwCfdfuZ8paZD/S+WiGWtQxg3hnmfRXK8:stXfdRk/VZQxnfRa8
TLSH
T131E1A4075E28AD7B5CC7E61CBA35BB16D2FA106266D05E48EBFC861C08D67CC631790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 209c7d1086db03e9ed1aa10b1afd03c87e603e8fbedfe57b352fa1c5aa264594
MD5 84d23ff752b4a5943f2fb0aa401c8d58
SHA1 231bc1af0ba495ef6bdaf333605bf3fef353a4e4
SHA512 1e6f68171331bfb0bb055eedf4905e0ada49612ccc3df9e653109add383f52c630d99edc5af09ac21e096f987bac386d3259f9175869fa7fdc8a4e06068306e6
SSDEEP 96:rw851XCNb9gffgdZ8i0vhERkQaSDm/7qx+WVHMSm+uecqZkIx1ixgn+QjY+gfmfW:rw8fHfOZ8paQB/S+WiGVxwxg+hVmfWK8
TLSH
T19BD1A7075E286D775CC7E61DBA39BB22D2F9206266D41E88EFFC861C08D52CD631790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 7d1a098b0dc8f97cdf4fe1d62d14ce95903eccb4060c628cbc0b3a2a530a3663
MD5 a751853ca606935de641d111c87312b6
SHA1 9640861226199e26b0dd99011a947945f5996c79
SHA512 729f97b6323ec3fd83b787e43eb061bb091e7c681b53150a552a066a469d0e60dd6769eaa6c9145dc2b09e7c402e06a37aabbe3cc15f6f966802b202c9d815a8
SSDEEP 96:HlNinPlf/ROoKOpkF5d1NiS7sMaTEv9V5h5pg5+ee9n6xsllkXU6tQnV:HGnWGNK9lf6xXkhV
TLSH
T15FD1C6A70418D575AF848FEEDC3C7ECB9DA5418F98D54C0A96E2C8880AC1FFD11DA498
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Site Characteristics Database\LOG
Size 307B
SHA256 cae5f962a8c7c5ac62dd05d304c7d263f33220cfbb7a430a4c6dc73c35e0cd3c
MD5 7113644505fff17a49cf9093ee66cc0c
SHA1 081d0df6daee16f25e68f42b53168902540f7963
SHA512 3ef5293e8d82fb2fdf5fa6bc8ca6a04992f534d86f7a118314c73856590e16ddc7061acb8b05b752a2ffd42182285dadff4752ba613a5ed74a946ffa39c092fa
TLSH
T133E026202ACA877F018708EF4BBBA38AC7A23003FDE922290E28D1482207408B146322
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Sync Data\LevelDB\LOG
Size 285B
SHA256 aac104618383d35b9ee2e14c8f8d798403ed32ab0a825afbb209ee35d21e26cb
MD5 d8d1dee0371d615c4f9846de1bf4c5ba
SHA1 49e6948e4e766efab288fafbb8a2fe7b3c05f05c
SHA512 2c901c1ac8e979979eb010a7259cfe369fe0ace627c7f3a3aa225531ac0467f52124e0abaed6c067ea47958c9629e88a0c98fc883ba36a38d124cc7ea033f604
TLSH
T11AD0C23069CEC67A088589EFC6FA6B9FC7F47807BBD9378D4B1C94082543518B1A8763
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Visited Links
Size 128KB
SHA256 c7b092590bb9d54b399f45595c3305e9d88e4eaa7d6f08218ec0bf22587b786f
MD5 c0ea771a1a0ceab3018d4cc218e6bb87
SHA1 f04deb66bc2aa21326122d53176a58988fd3f8db
SHA512 27017d5e8cc40b85db592a23b0de5e431bf6a87aab50d7768a27ad0d56b193eb725e552b46a38d4fb5047d1b3e50f732e909aefcb8c456580bc808ec688d42fa
SSDEEP 3:ImtVuc7C/JqRB/ll:IiVucW/kRB/
TLSH
T11BD3040D01411C3FC417507DDC45051FF0DDF0540011405107341C315CC44C11317550
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 4KB
SHA256 4c20a44a69970edd83f2b8f3625afa7cf6df4ac901f3472e5d516f6777cabd0f
MD5 bfbb186cd54d5459a7f49d16eafb2483
SHA1 3736cfceed74863021e1469b97218a1a5449beb6
SHA512 6f081cf97457010b7c548fd1f6874a7f36f145b19e6e84895c7ea9d54f1855f32591f69e32d59f04c224ace16590f06572e6b84cc480076cf28f8e0362eba3fc
SSDEEP 96:zufF3NkCELfgbasxey58Frh/cInURoDotoTCxDMBYzp6AaZ1ZZTCl8a:zaF3NbGkeJooDU4gAYzQl4
TLSH
T17C919367A474AA736CE2D949B98A2B1376A05123D5D53FE8DAEC0F0C019B3D91353C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 4KB
SHA256 f96a8287813504d6c69fc771ec9187b1c08e899557e3b20ee3c2e8eaddae07e6
MD5 904c53267f2d360ad8511d41024e7314
SHA1 f011470e08116a8a76e766ee8c480baa5ed075c4
SHA512 a6b388f16f214826233b1a96cf541d95b057de0d3346a31b0af7ce73b125746dc379fb74cab04ffbdd0ccec44b426ac4219e112ed64d4475958caf99dc7608a9
SSDEEP 96:zufF3NkCELfgbasxey58Frh/cInURLl8DotoTCMDMBYzp6AaZ1ZZiCl8a:zaF3NbGkeJoiDU4rAYzQE4
TLSH
T1F891A367A474AA636CE2DA49B98A3B1776A05023D5D53FE8DAEC0F0C01DB3D91353C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 1KB
SHA256 03e0f24bcadc0f5a0244f0641be2fb0235efed051723af196c27c377bacc24ef
MD5 c5f0b8424658b8fdc1cac25c7695327a
SHA1 84a0ecea1225f2aaf16293639b0f703578184c8e
SHA512 36685c795fbcafabef5b18596264da2c2c67e9061aef4ba1d5b47a8f2d9bb6221606cf8b53b44c2bd6341fb09304772d5e25194e1a0bb6ab934db0010c8354d6
TLSH
T1563165B3E0A01BB37C81559AB9466B133E601066C1916F48E2ED071D01EB3DCD127C36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 2KB
SHA256 665262192ec0585f5f5ec6c80fdea2d55f2af97bcc333e0435aa1422ad6988f8
MD5 359dcaba27b7d84835cd2c91c12309d1
SHA1 ebe34f250284aacdb17a7d32711b98f57430adcc
SHA512 11ee9a0afbddab89ebfd160e067368e5ec4f5449cbd6d011739058b5e9382629b68a41b01c341dd4f2caa2c88c68aeeb20f8c56bae5a34f263bef20fe93bd2e2
TLSH
T18251A7B3B8545B73A8D24958BD4A2F236E7150A5D6913F90DAED0B0C01EB39C6313C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 3KB
SHA256 40cbdcfee68a4e91438b1431fec6a1a50cb5b909932a1f95d3256d9b11af9c2d
MD5 045ac843d3f594c7279c608586187f53
SHA1 b45ed52e91af636c9fb341689674f640831538f4
SHA512 df4721118c631798c719f397261edea81d84773492bf97ec6952367a292b53a366744bb84670859bf070ad94ebcf7002a704abc874cb6cb3523fb7db0b208e44
TLSH
T17C71C777A464AA775DE29D48BC852B137AA15027E5C13FA4DAEC0F0C01DB3D81353C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 4KB
SHA256 5a9d132b9d2226aa3fadab7cb90fee0eb8fc1c333b49d98bb14023d80a61fac8
MD5 5fd1403584541abad10cdd071428f23a
SHA1 92e47e44e5bbc4b877ea9521fe8e766b2aac2449
SHA512 091a8b24aebaaf9005210ff3f8ba131ce880a0130f43a0abef153d339950c3b7af3c72ac0c73e2aefd31bb67fd92b10a63971f255c3d597fd285b67bd5d21319
SSDEEP 96:zufF3NkCELfgbasxey58Frh/cInURoDotoTCxDMBYzp6AaZ1ZZTcl8a:zaF3NbGkeJooDU4gAYzQli
TLSH
T1A991A467A474AA736CE2D949B98A3B1376A05023D5D53FE8DAEC0F0C019B3D91353C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 16KB
SHA256 6f2e1c04998a7faedb8ed64590fd6e79769d7df49533f1c243016c0c564c988b
MD5 09d80e127f682ef0107b0cc7a10a6e5a
SHA1 011a1611d0e3899fcf84f3c43ab453d37c9cd366
SHA512 930db9f1a737c93c24e6b31c5a9036f3b667ab77d07ab8c36d5f658ff6d1b85f30c84c6c2c495e97bf4cb79da058022dbc7e5a400ff2104b1cb9b3461e485be6
SSDEEP 384:zDfRE5BdEZfr0kuh9Rt/nP9yqNbleDqB8/43u46mQc:nRkurqhNs8eOBY4D6mQc
TLSH
T1DE72AF6349309D277CE7850A790A6B0665F48089A6D63E98BDDD2F1D0BCB7DA0363D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58c762.TMP

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State~RFe58c762.TMP
Size 1KB
SHA256 7c7192d7d165c50455faeafedf07929b88574b430ed2762fe57df9ac48f3a655
MD5 7bf5f9b34df211e8bc63b449fbd85912
SHA1 08d6f3dfd03e4111838926cdfb566148f234baef
SHA512 d9e5e108e039481def69a8cf379860a3c820c9acedcde59030d1459b879c9b90b283458d58a3040eb9f0f4347267230d52b7f06bbeaf737a8e0cb47a287cec01
TLSH
T15B2165B3D0A02BB3B8815899F952A7473EA0506692506F08E2DD071D02EF6DDC137C32
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\ShaderCache\index
Size 256KB
SHA256 655fb8f5b3dc4fc9622bb5b4677ff019ff830ff33ea476fdddd07ed8292ed6e5
MD5 bfc207aacad419807a725ad4584e1a80
SHA1 08cc7b571a5b225606151bc57cc28e90b36e44cd
SHA512 f0d4ae220c6cf490317ce40f970207d56559cafb740d755707b8248a27fe9da5b67c736e4505dcc546cb09f56fe24a7bae4df0f9372f95204d83db92e521318f
SSDEEP 3:LsOllllklkXl9:LsUlP
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\Users\Admin\Desktop\Solara\Microsoft.Web.WebView2.Core.dll
Size 634KB
SHA256 2b999d1775004e98b32f281f4518f3952df650970748527ef5b54fa9979d6c9c
MD5 225af3c55fbb7376a11dbc4648a2b582
SHA1 89f5657f8bca7aa571d7b533933dd3ffe744fcdf
SHA512 6e550daad83e85a189a6709e4757ee8caa27604362be9945cddf1a5a59aaff0f68403255422e243a7aaa2e0fea28c6972187be72b9eb82b76a4523ba3a49aad0
SSDEEP 12288:6BfVnfFe7bqOarD6niWFynSbOR4qn7BdkJX1Il5g3dM6sq9cZwq4BTpsRkrP322i:GQcl41OZ
TLSH
T1D3D4532223FD4619F6F27FB9563817608FB9BC96B939D35E8598502D0D72B809DA0333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Wpf.dll

Path C:\Users\Admin\Desktop\Solara\Microsoft.Web.WebView2.Wpf.dll
Size 80KB
SHA256 6d329162b460515a849c693518ff626a1a3363e79d549cfd6822e5601f24603e
MD5 d8e466f3951eb9a3d22eb098f4cced13
SHA1 8db2e9b72d72ee13c2059371a0b3026137118b7c
SHA512 6ea9f0ce48f5e3b31465e7dd6e7e808d590933d99242e040c28b260f9124b0f3662d7e7356798f7e9eb09120ec3900cf98277e315a783c07cacce93ce1d0fde1
SSDEEP 1536:aU8jJ30lsivLfCoiWqhxaRkPqsfha87Y1DHfF7yEW30bpc4Jjr4YeUq+HhxU0udr:hs+vLqrThx6spa8+DHfFy30bpc4Jjr4B
TLSH
T109836C8193AC8923CBEF1FFD7C6050140FB8FA83B652D7992985B5EC0DA379119197A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\Desktop\Solara\Monaco\index.html
Size 14KB
SHA256 e0f556c791d604813a2552e4dd5af9779875563561c5bc5824b4c0bd51313ba3
MD5 126a540e637b97ba0f8abb694c5ab47e
SHA1 90530889b3a95f7c2058adc4120917b8b9498a9e
SHA512 b71054585ff453b07b5d677aa1988de8dd2392d159aea8745b8c98ee1ecab26f5b80e9fed551f9f7e48e41163b4da395b001423396df2baccb0be20ba939363e
SSDEEP 384:ttTeSQmfElKnihKRA5L1t2bVBJjjgOtu3BX+BILnoamLF:yGihVt2bVBJ70xOyboamLF
TLSH
T1B162CAB9B34F100B1282534974F67598FE2DC531C2235AAEB2EAF230D5DD8AC435A6F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua.js

Path C:\Users\Admin\Desktop\Solara\Monaco\vs\basic-languages\lua\lua.js
Size 5KB
SHA256 fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42
MD5 8706d861294e09a1f2f7e63d19e5fcb7
SHA1 fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23
SHA512 1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f
SSDEEP 96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE
TLSH
T11CB11ED89C9951594AE1E766879EE0A6E1544203CC3C7D74B7EC438C4F8CA4C86BE73D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

editor.main.css

Path C:\Users\Admin\Desktop\Solara\Monaco\vs\editor\editor.main.css
Size 171KB
SHA256 fb2cbf2ee64286bc010a6c6fe6a81c6c292c145a2f584d0240c674f56e3015b0
MD5 6af9c0d237b31c1c91f7faa84b384bdf
SHA1 c349b06cad41c2997f5018a9b88baedd0ba1ea11
SHA512 3bda519fed1cfa5352f463d3f91194122cf6bf7c3c7ab6927c8ca3eea159d35deb39328576e7cbd982cfdf1f101b2a46c3165221501b36919dbde6f1e94bf5ff
SSDEEP 1536:ZxP4PUPVP0PAPeMi76Q4TVq6bbhLynlDTkDatDF8Jmmvgs0aMJkn:phbIRkDSYmmvgs0aMJK
TLSH
T1B8041AAF96061F4F26E54423C195BFAA38FDC1B6F0128ED5E87D3B64C00D6D922961BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

editor.main.js

Path C:\Users\Admin\Desktop\Solara\Monaco\vs\editor\editor.main.js
Size 2.0MB
SHA256 93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18
MD5 9399a8eaa741d04b0ae6566a5ebb8106
SHA1 5646a9d35b773d784ad914417ed861c5cba45e31
SHA512 d37ef5a848e371f7db9616a4bf8b5347449abb3e244a5527396756791583cad455802450ceeb88dce39642c47aceaf2be6b95bede23b9ed68b5d4b7b9022b9c8
SSDEEP 24576:SmmBNDw4gCXJkB4nIg2IxhbaeZYIMsNjvit4f:wDw4gCXJk62+aeKIMsNjvit4f
TLSH
T12A95E7997155342243C7A0B6A47F050FB33A54ADE80A406CB7B8D8ED2DBE5896337F78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

editor.main.nls.js

Path C:\Users\Admin\Desktop\Solara\Monaco\vs\editor\editor.main.nls.js
Size 31KB
SHA256 fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48
MD5 74dd2381ddbb5af80ce28aefed3068fc
SHA1 0996dc91842ab20387e08a46f3807a3f77958902
SHA512 8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e
SSDEEP 384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb
TLSH
T153E2B767A78813372A8302DBB2DED194BB1A597D7351034678AD943832C64F0A3BF9F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loader.js

Path C:\Users\Admin\Desktop\Solara\Monaco\vs\loader.js
Size 27KB
SHA256 0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9
MD5 8a3086f6c6298f986bda09080dd003b1
SHA1 8c7d41c586bfa015fb5cc50a2fdc547711b57c3c
SHA512 9e586742f4e19938132e41145deec584a7b8c7e111b3c6e9254f8d11db632ebe4d66898458ed7bcfc0614d06e20eb33d5a6a8eb8b32d91110557255cf1dbf017
SSDEEP 768:3J6C/c2x0cAu57XQxJRDRi+R/TvrCv3zM2GRl0VEj:Z6grH7qTXRvmDI
TLSH
T17DD294CEBB9474234247F8E8D43F001BE2B6955E544D842C710DD8EE5CB998AA23EF78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Users\Admin\Desktop\Solara\Newtonsoft.Json.dll
Size 695KB
SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
MD5 195ffb7167db3219b217c4fd439eedd6
SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
TLSH
T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Solara.exe

Path C:\Users\Admin\Desktop\Solara\Solara.exe
Size 1.3MB
SHA256 473032c443307738fa01a2dc1d636c81f7b2def5d48d0dde91b0b896230bc83b
MD5 312746de805dc64b1ab7fcf9f4c0f1ec
SHA1 23f28f0abc2227177f8fce565c02ec2f50ec744b
SHA512 85e17706968dfa10148060957a4098df6ba91b73d6f148255352838792dcd4102bcd1ce0aaeb321c429bae816f36e6ee16549c6105ee8495cbd54c6e68f697cf
SSDEEP 24576:kVyuDb36T6hkReLXUJWpQ+NGkIAm1/Q3QQl:kAjkIAm1W
TLSH
T17455E242A2C6FD1BD3362A358594F32D89257F31EEA6930B30BD35AC553BBAD8449343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SolaraV3.dll

Path C:\Users\Admin\Desktop\Solara\SolaraV3.dll
Size 14.0MB
SHA256 2985aeb3707505433f1a37ca5d75ac305967e6dd8478d53fe56312d8acc7e14c
MD5 16845f388bc9decbfa0cec6f21b47a30
SHA1 9d40b55c3dc7eff648c2b70147b50c9933d37f03
SHA512 e4698723c0fa10d1aec780c1785f95daabd332f3132078f42336fbab09f4c371c2496d4aeacbc12e76f3e4532ce4645c9528ef658ef80ffce4852bcf9eb168d6
SSDEEP 393216:5xepwiY1bGrojaDXP700yXR+YxjfXyPFhVHhiZ:5QpwL1UJM
TLSH
T1B1E69DD760D811D9C47AC1798747A93BC2AF783583349AE7239496B60F23ED43A7AF01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\Desktop\Solara\WebView2Loader.dll
Size 133KB
SHA256 79d7e45f8631e8d2541d01bfb5a49a3a090be72b3d465389a2d684680fee2e36
MD5 a0bd0d1a66e7c7f1d97aedecdafb933f
SHA1 dd109ac34beb8289030e4ec0a026297b793f64a3
SHA512 2a50ae5c7234a44b29f82ebc2e3cfed37bf69294eb00b2dc8905c61259975b2f3a059c67aeab862f002752454d195f7191d9b82b056f6ef22d6e1b0bb3673d50
SSDEEP 3072:e5i6Uab3sFhPk6vEmG1PU6dLXm2ng3esQDqEt2JljdTu:e5P2e6vERtUyTmHEtmI
TLSH
T13FD35B5B73A5007BE1778174C4A34A1AEB76B85117609BDF07A442692F63BD0AE3EF30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.dll

Path C:\Users\Admin\Desktop\Solara\Wpf.Ui.dll
Size 5.7MB
SHA256 0ebff5461eb1984ea852566a59f08456e48909f4ea9b7ec064a219a28ece0343
MD5 1aa1a40418717dc04ada47b52a1c06ed
SHA1 4efd1787373497fe819116e2c0e81e2463cc1052
SHA512 14d632d1dbf77d4a11d21c2314a07faeaebbce3f257e36d79c63becc29b16cacd09e8b7928d79742c1ef346576134c589ece3af8d80e49def36b865cdd9b7ca8
SSDEEP 98304:1OYON/XzMvSmaRT+KcbNdvPp4zlAHDfyNr7lQ:/O9oNdvPpR
TLSH
T1BE565B9E23ED0D33D363837A8DA07323196919652142AF878F4ADB2D44BA0C5DDF16DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\Desktop\Solara\bin\DEBUG.txt
Size 345B
SHA256 48dc6702fcbccbc26ec19a16e5020e089115e0b58c1c06538d90bebc9cdfc1ef
MD5 a0b602a2bc179798f98b73a0e095efea
SHA1 62e32c86ccc1510c3f6da4bce14784861dbaa9a3
SHA512 e33500645dad48cefc9c195b9a0283841edcf84c7f99adbcb12a440caf1f4f9a00eb05b4383dfed7f11a7e518b043208baa02a24f004d5b32d102d4a04ce67b4
TLSH
T160E09A1023F8E1AE59229202EEA83EB217C17E6215500C9FA365D10674A6C150F9FF32
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\Desktop\Solara\bin\DEBUG.txt
Size 569B
SHA256 befd0c34606122acffbf1649b8020131ce7fb7ddd79dbb432a465fd167e28dbf
MD5 f613d0db6f448ad0513a6b72565893dd
SHA1 6550a2cd7d767057f6f860536642894ee294d11a
SHA512 abd25fcfe42f15bc0daa343e5771d0e5e11aad7d5ee4482bfb9a452337d2220907a48ea28b417450a8a409fa03b91b0600ed9ba185816b6428ffc9e02d434da4
TLSH
T1EAF0A91023F8F2AE19519242FE9D3EF207C0BA6318A00D5F6328D10678A5C595F8FB36
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\Desktop\Solara\bin\DEBUG.txt
Size 1022B
SHA256 651734c8dc9bc2e16617c04ba4c1e14873786339a30433b868006a5c8b874cb1
MD5 58bf90fd47259ec20b65f0fd3b5c7429
SHA1 f85c5703b05971c83475f150c46b94065e2922e3
SHA512 3c5cc909317d0486087addbecbb10692452beab00e9907967b34e24b8d365be4b3867dbd2215261cf36159413fe16d215b74c2370698204cabfe1be4ef208825
TLSH
T1D911AA1023F8B2EE1D916242FE9E3DF217D1BA2318904E5E6328E10A7895C595F8F731
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\Desktop\Solara\bin\DEBUG.txt
Size 1KB
SHA256 f207f4250c1379588c58d2d1f5fc840db3fc1fea7dc6b8e7dcc582100e2e7c07
MD5 082f3d7cfae86bf60ae4cccbe2ef6772
SHA1 82891ba3e6f265010e6320869c6c4ea2475beabd
SHA512 5dab4a9e78027f1d190230a02277b2f8cb5f974bf28b2515fd4e72d6bc4e5418a260a6a4f11ebdefd5aab06d4c27f5c6fac677f8a572c0b1ef4e8c65d92f966a
TLSH
T18A21971023F8B1AE1991A241FE9E3DF217D1B62319508E5E6328E11A78A4C595F9F731
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\Desktop\Solara\bin\DEBUG.txt
Size 345B
SHA256 fb4e901d56cbdf3d43506bee0f231d5d01eae571e18ee51ddbcb841ee7779f09
MD5 6e19ff3f5d6acbc1056f2d884731b96b
SHA1 2346cff4694155444aba651f588fc6a9c7920f05
SHA512 0931e5ab58b9899c7c093a78377111ee4a01fd0cac92665ca0fe0c7ab4e56ad3fd4804deec018cbece4204b1d21074464492f0f376f540bdcab674f93c4b1d38
TLSH
T12AE09A1023B8E9AA5B3AB102EE6C3FD207C1BB5299500DBE23A5E10674D48158F9F732
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\Desktop\Solara\bin\DEBUG.txt
Size 569B
SHA256 7db1840909586509f06cb8971d0494c53a553090ba5dae32a5fd43e7bbc3ec7d
MD5 e6efff52dfe6b86a77c12ac34fecac36
SHA1 fd186b53483a4216be96eaaa612231215d48345a
SHA512 7d0d39225f0f16dc491f18d60083b08dba3dc7c138f519a6128772fa8bd1f249f69c92451b106703750ae55480b7d728381e766ddce6036db530d96186cdab94
TLSH
T172F04C1423B8F9AA5A39B042EE5C3FD207D1BB5298500D7E23A5F10578D4C558F9B736
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\Desktop\Solara\bin\DEBUG.txt
Size 1022B
SHA256 b2c5324847dcbbe4bfc2c5f8a6269c811a082874d2ed776bb77c7fbae58d01da
MD5 423eedd3c7dc72e3e7e3355f1335a3f3
SHA1 301a2862051f9efd8ba4841cb8672a3ca3176bf6
SHA512 409b1e877ee112f95a2fa8827487e0a725c7280b8195bd9b90438a8ed3d8d47d4bd16209825991de17297ead83e709318b81b45c5d15829a17e8778964362ec0
TLSH
T1E211831423F8E9AA1A397042EE5C3FD207D1BB229C504D7E23A4B10178D4C55CF8B732
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\Desktop\Solara\bin\DEBUG.txt
Size 1KB
SHA256 4ed11d96e9dba73a770bedb629caf86553340df5a097000b146f43f55a873cd8
MD5 7748acba174d69b09a82fc23f0742bf9
SHA1 f404165515efe5688c876e965e40481137c006ef
SHA512 7571d0dbb70bce7b1d36900b9370983bbaac9b5b557df021bcd742997fe16bff7769e9a7cce1ce3b8215e524fd8b18fee274d89b84ce1c224210030a4c2befbc
TLSH
T10C21921423F8E9AA1A79B042EE9C3ED21791B7229D508D7E23A4F11278D4C95CF9B731
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\Desktop\Solara\bin\UIDEBUG.txt
Size 3B
SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
MD5 SHA1 SHA512

Submit Download

memory/1084-897-0x0000025BDDA00000-0x0000025BDDB1E000-memory.dmp

Download

memory/1084-571-0x00007FFC579A0000-0x00007FFC579A1000-memory.dmp

Download

memory/1916-467-0x00000227F0790000-0x00000227F0D44000-memory.dmp

Download

memory/1916-835-0x00000227D5E60000-0x00000227D5E6C000-memory.dmp

Download

memory/1916-848-0x00007FFC2A920000-0x00007FFC2B726000-memory.dmp

Download

memory/1916-504-0x00007FFC2A920000-0x00007FFC2B726000-memory.dmp

Download

memory/1916-468-0x00000227F04A0000-0x00000227F055A000-memory.dmp

Download

memory/1916-840-0x00000227F02C0000-0x00000227F03DE000-memory.dmp

Download

memory/1916-523-0x00000227F0660000-0x00000227F0702000-memory.dmp

Download

memory/1916-518-0x00000227F0180000-0x00000227F0198000-memory.dmp

Download

memory/1916-528-0x00000227F1AD0000-0x00000227F1B82000-memory.dmp

Download

memory/1916-465-0x00000227D5910000-0x00000227D5A52000-memory.dmp

Download

memory/1916-841-0x00000227D7770000-0x00000227D7782000-memory.dmp

Download

memory/2060-898-0x0000015F82DB0000-0x0000015F82ECE000-memory.dmp

Download

memory/2488-899-0x000002016B4C0000-0x000002016B5DE000-memory.dmp

Download

memory/2676-1113-0x0000029C6CC70000-0x0000029C6CD8E000-memory.dmp

Download

memory/3068-1048-0x00000123B5740000-0x00000123B574C000-memory.dmp

Download

memory/3068-921-0x00007FFC2D310000-0x00007FFC2E116000-memory.dmp

Download

memory/3068-1049-0x00000123CFB10000-0x00000123CFC2E000-memory.dmp

Download

memory/3068-1079-0x00007FFC2D310000-0x00007FFC2E116000-memory.dmp

Download

memory/3068-1050-0x00000123CF970000-0x00000123CF982000-memory.dmp

Download

memory/3676-900-0x0000020B3E200000-0x0000020B3E31E000-memory.dmp

Download

memory/4716-1114-0x0000017D82DB0000-0x0000017D82ECE000-memory.dmp

Download

memory/4780-685-0x00007FFC579A0000-0x00007FFC579A1000-memory.dmp

Download

memory/4840-47-0x0000024AE6260000-0x0000024AE626A000-memory.dmp

Download

memory/4840-27-0x0000024ABE9E0000-0x0000024ABEAFE000-memory.dmp

Download

memory/4840-25-0x0000024AE5050000-0x0000024AE506E000-memory.dmp

Download

memory/4840-24-0x0000024AE4FC0000-0x0000024AE504A000-memory.dmp

Download

memory/4840-14-0x0000024ABE9E0000-0x0000024ABEAFE000-memory.dmp

Download

memory/4840-15-0x0000024AC3650000-0x0000024AC3662000-memory.dmp

Download

memory/4840-16-0x0000024AA6290000-0x0000024AA62A0000-memory.dmp

Download

memory/4840-13-0x0000024AA47E0000-0x0000024AA47EC000-memory.dmp

Download

memory/4840-12-0x0000024AA6290000-0x0000024AA62A0000-memory.dmp

Download

memory/4840-11-0x0000024AA6290000-0x0000024AA62A0000-memory.dmp

Download

memory/4840-7-0x0000024AC3690000-0x0000024AC36C8000-memory.dmp

Download

memory/4840-8-0x0000024AC3030000-0x0000024AC303E000-memory.dmp

Download

memory/4840-6-0x0000024AA6290000-0x0000024AA62A0000-memory.dmp

Download

memory/4840-42-0x0000024AE6C20000-0x0000024AE6CD2000-memory.dmp

Download

memory/4840-5-0x0000024AC2A90000-0x0000024AC2A98000-memory.dmp

Download

memory/4840-4-0x0000024AA6290000-0x0000024AA62A0000-memory.dmp

Download

memory/4840-43-0x0000024AE6D40000-0x0000024AE6D62000-memory.dmp

Download

memory/4840-46-0x0000024AE6CE0000-0x0000024AE6CF2000-memory.dmp

Download

memory/4840-544-0x0000024ABE9E0000-0x0000024ABEAFE000-memory.dmp

Download

memory/4840-3-0x0000024AA4820000-0x0000024AA4830000-memory.dmp

Download

memory/4840-2-0x0000024AA6290000-0x0000024AA62A0000-memory.dmp

Download

memory/4840-1-0x0000024AA6290000-0x0000024AA62A0000-memory.dmp

Download

memory/4840-0-0x0000024AA3B90000-0x0000024AA43D6000-memory.dmp

Download

memory/4840-543-0x0000024AA47E0000-0x0000024AA47EC000-memory.dmp

Download