Overview

overview

6

Static

static

3

2026-05-02...rm.exe

windows10-2004-x64

6

2026-05-02...rm.exe

windows11-21h2-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/05/2026, 11:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe
  • Size 9.5MB
  • Sample260502-nlfhbsdy21
  • SHA256 d7b46dca94e7b3ffda65e799e1a64b0573f2da794bb38a0ccaa75a59354ce700
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverytrojan

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Program Files directory 25 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe"
    1⤵
    • Checks whether UAC is enabled
    • Enumerates connected drives
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:2564
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2564.3476.7844734196640184368
      2⤵
      • Drops file in Program Files directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:2292
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffe35ecb078,0x7ffe35ecb084,0x7ffe35ecb090
        3⤵
          PID:3920
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1740,i,277083329273459047,12878750606487367714,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1668 /prefetch:2
          3⤵
            PID:4228
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1704,i,277083329273459047,12878750606487367714,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1912 /prefetch:3
            3⤵
              PID:2012
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2356,i,277083329273459047,12878750606487367714,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:8
              3⤵
                PID:1252
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3588,i,277083329273459047,12878750606487367714,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
                3⤵
                  PID:3496
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4388,i,277083329273459047,12878750606487367714,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4052 /prefetch:8
                  3⤵
                    PID:3928
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4636,i,277083329273459047,12878750606487367714,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:8
                    3⤵
                      PID:2900
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4604,i,277083329273459047,12878750606487367714,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
                      3⤵
                        PID:1152
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1016,i,277083329273459047,12878750606487367714,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:8
                        3⤵
                          PID:4132
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView" --webview-exe-name=2026-05-02_1bf948b87972be59be913e56d254b568_akira_amadey_elex_glassworm.exe --webview-exe-version=2.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4084,i,277083329273459047,12878750606487367714,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:8
                          3⤵
                            PID:3868

                      Network

                            MITRE ATT&CK Enterprise v16

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            manifest.json
                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2292_1422217508\manifest.json
                            • Size 116B
                            • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            manifest.fingerprint
                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2292_1565025173\manifest.fingerprint
                            • Size 66B
                            • SHA256 c236a2ac7741d48e1c56980652331cb3f1f12baf937baf0b280600fbafb143e3
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            manifest.json
                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2292_1565025173\manifest.json
                            • Size 135B
                            • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            manifest.json
                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2292_1659394953\manifest.json
                            • Size 76B
                            • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            manifest.json
                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2292_1768931536\manifest.json
                            • Size 79B
                            • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            protocols.json
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                            • Size 3KB
                            • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            settings.dat
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Crashpad\settings.dat
                            • Size 280B
                            • SHA256 f36c3425aad3b253bbb44ea9474ea448473e29cb79d06724d73210b8a5d66cba
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            settings.dat
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Crashpad\settings.dat
                            • Size 280B
                            • SHA256 4c6ae139c41bcc2e7bf9b103a7a8835fe621c7ecec51e5ffd3e9ead404b3eddc
                            • MD5 SHA1 SHA512
                            Submit Download

                            throttle_store.dat
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Crashpad\throttle_store.dat
                            • Size 20B
                            • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                            • MD5 SHA1 SHA512
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                            • Size 48B
                            • SHA256 5c0ed5f2994fd72cc317617166b819693e2736a9e176a69dc3cdc2d36ad8eab9
                            • MD5 SHA1 SHA512
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                            • Size 72B
                            • SHA256 4428ebd9da17334ec9db81eeb08a83b1b4c380a6d951942dbb74daf21165c9cf
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\DawnGraphiteCache\index
                            • Size 256KB
                            • SHA256 2f06dbec4c62da8ad1a383605d592c262fca7aac3b0e020da28c449334ff186d
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\DawnWebGPUCache\data_0
                            • Size 8KB
                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_2
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\DawnWebGPUCache\data_2
                            • Size 8KB
                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_3
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\DawnWebGPUCache\data_3
                            • Size 8KB
                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            MANIFEST-000001
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\Extension Rules\MANIFEST-000001
                            • Size 41B
                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                            • MD5 SHA1 SHA512
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\GPUCache\data_1
                            • Size 264KB
                            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            9da710f4-e9a1-42ff-9915-630541c8b9c8.tmp
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\Network\9da710f4-e9a1-42ff-9915-630541c8b9c8.tmp
                            • Size 2B
                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                            • MD5 SHA1 SHA512
                            Submit Download

                            Network Persistent State
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\Network\Network Persistent State
                            • Size 111B
                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Network Persistent State~RFe596c7c.TMP
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\Network\Network Persistent State~RFe596c7c.TMP
                            • Size 59B
                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Preferences
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\Preferences
                            • Size 6KB
                            • SHA256 6eba5b2e8c562453d6676db800a4d58634e08995765ec9eb5f95c66cf812bbc5
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Preferences~RFe58e5f6.TMP
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\Preferences~RFe58e5f6.TMP
                            • Size 6KB
                            • SHA256 36db2cf6bf24f1fa5e3f7794add1323ec69b056b22b5f72a0312e7dee0a3abef
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            CURRENT
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Default\Site Characteristics Database\CURRENT
                            • Size 16B
                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                            • MD5 SHA1 SHA512
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Local State
                            • Size 1KB
                            • SHA256 19cb0a4e477e708322819c43fa4f111c2cd266a941f7130079992261d6a89906
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Local State
                            • Size 2KB
                            • SHA256 ea93939b8f8ca60cf2292efce1381f37f2bb491a47bb6ca1fc491945c3ab16be
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Local State
                            • Size 3KB
                            • SHA256 79daf4c21b8f52c8ccb73b7d7b96d82a9361d4243b2788c1730c8b86fb966180
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Local State
                            • Size 16KB
                            • SHA256 fec292dbd9f496943ab5756e8349d2b8e5147e8dc21af10e2d3095a2568d235b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Local State~RFe58461c.TMP
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Local State~RFe58461c.TMP
                            • Size 1KB
                            • SHA256 fc12e4c53c655c596699110f9a4e28686798e5b95d36de162a7180d22c4fd2a5
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Filtering Rules
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
                            • Size 2.1MB
                            • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            LICENSE
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                            • Size 24KB
                            • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            keys.json
                            • Path C:\Users\Admin\AppData\Local\wearedevs.dllinjector\EBWebView\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                            • Size 8KB
                            • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            memory/1252-46-0x00007FFE45D90000-0x00007FFE45D91000-memory.dmp
                            Download

                            memory/1252-47-0x00007FFE44220000-0x00007FFE44221000-memory.dmp
                            Download

                            memory/2292-209-0x000001F23EA10000-0x000001F23EA65000-memory.dmp
                            Download

                            memory/2292-211-0x000001F240AB0000-0x000001F240ABC000-memory.dmp
                            Download

                            memory/2292-213-0x000001F248A70000-0x000001F248AAB000-memory.dmp
                            Download

                            memory/2292-212-0x000001F248A40000-0x000001F248A67000-memory.dmp
                            Download

                            memory/2292-210-0x000001F240A70000-0x000001F240A9C000-memory.dmp
                            Download

                            memory/2564-208-0x0000000003A00000-0x0000000003A07000-memory.dmp
                            Download

                            memory/2564-207-0x0000000001990000-0x0000000001A0B000-memory.dmp
                            Download

                            memory/3496-231-0x0000025A4BE10000-0x0000025A4BF3A000-memory.dmp
                            Download

                            memory/3496-146-0x00007FFE43EE0000-0x00007FFE43EE1000-memory.dmp
                            Download

                            memory/4132-491-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4132-498-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4132-502-0x0000023A0BA10000-0x0000023A0BA65000-memory.dmp
                            Download

                            memory/4132-490-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4132-501-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4132-500-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4132-499-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4132-489-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4132-497-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4132-496-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4132-495-0x0000023A0BB50000-0x0000023A0BB51000-memory.dmp
                            Download

                            memory/4228-258-0x000001734E6D0000-0x000001734E7FA000-memory.dmp
                            Download

                            memory/4228-529-0x000001734E6D0000-0x000001734E7FA000-memory.dmp
                            Download

                            memory/4228-218-0x000001734E6D0000-0x000001734E7FA000-memory.dmp
                            Download

                            memory/4228-25-0x00007FFE43EE0000-0x00007FFE43EE1000-memory.dmp
                            Download