Overview

overview

10

Static

static

10

2026-06-29...lc.exe

windows10-2004-x64

1

2026-06-29...lc.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/06/2026, 08:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
  • Size 9.4MB
  • Sample260630-khh79sbs8n
  • SHA256 68a949b65ebf768d6678cd7cb3173e9e83d4211651a7a5b7056948fb04ad6eed
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverytrojan

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Windows directory 44 IoCs
  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 5 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of WriteProcessMemory 35 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:3776
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=3776.3084.8097865356519723255 /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b
      2⤵
      • Drops file in Windows directory
      • Checks SCSI registry key(s)
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:5552
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView /prefetch:4 /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ffbd15c5fd8,0x7ffbd15c5fe4,0x7ffbd15c5ff0
        3⤵
          PID:3452
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1768 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b
          3⤵
            PID:2688
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2000 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b
            3⤵
              PID:2424
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2280 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b
              3⤵
                PID:3688
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3392 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b /prefetch:1
                3⤵
                  PID:3108
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4000 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b /prefetch:1
                  3⤵
                    PID:2028
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4108 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b /prefetch:1
                    3⤵
                      PID:3096
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=5024 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b
                      3⤵
                        PID:2744
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=5040 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b
                        3⤵
                          PID:580
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=5068 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b
                          3⤵
                            PID:3792
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView" --webview-exe-name=2026-06-29_68ad7b1b7420730aecce018ad7498b86_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4016 --field-trial-handle=1400,i,6308617705944440891,1880736549964508931,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:28c1fdc170286b37f90bc4cea3b76357dad16c0b
                            3⤵
                              PID:2664

                        Network

                              MITRE ATT&CK Enterprise v16

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              settings.dat
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Crashpad\settings.dat
                              • Size 280B
                              • SHA256 36bdfc15585a1a01f674dc54d84b135c57a96e67bf7555d3ef522d3344c6862b
                              • MD5 SHA1 SHA512
                              Submit Download

                              settings.dat
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Crashpad\settings.dat
                              • Size 280B
                              • SHA256 1aa6561f0b5321ae45181e834b2e0ccabebde309c04850b6eb959a6b101c986f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              throttle_store.dat
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Crashpad\throttle_store.dat
                              • Size 20B
                              • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                              • MD5 SHA1 SHA512
                              Submit Download

                              2ea422f7-6bf4-4c63-85a6-24f5cac8ead6.tmp
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\2ea422f7-6bf4-4c63-85a6-24f5cac8ead6.tmp
                              • Size 6KB
                              • SHA256 99c706f593903eb87c4f3827ac7bc4df3c7e674fe97f27638b805bdd19645b90
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                              • Size 72B
                              • SHA256 18d546e538b099c1b4c7f6cc1aa9a51498c3b0b5d9a29b4cee62467b7487749d
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              the-real-index~RFe595990.TMP
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe595990.TMP
                              • Size 48B
                              • SHA256 70b788074aa1eaedbddd19fba3b412f7ce28f028cfdad128ccc02125045d971b
                              • MD5 SHA1 SHA512
                              Submit Download

                              Network Persistent State~RFe5a1c72.TMP
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5a1c72.TMP
                              • Size 59B
                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              SCT Auditing Pending Reports
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                              • Size 2B
                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                              • MD5 SHA1 SHA512
                              Submit Download

                              TransportSecurity
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\Network\TransportSecurity
                              • Size 188B
                              • SHA256 77c262ea9cbe854ce064dfc6153442dc8f9cfc1e3dc41a5e267b68acd48bcfee
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              TransportSecurity~RFe5b1162.TMP
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5b1162.TMP
                              • Size 188B
                              • SHA256 ee8e6842c30ccb637d952dbe0cb19a685ad8ceffaf17bb0d4334404c1892a398
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              a94d371e-00db-4bb7-befb-c127543a68f2.tmp
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\Network\a94d371e-00db-4bb7-befb-c127543a68f2.tmp
                              • Size 978B
                              • SHA256 b940415ef763268feef69edfd1af017c3609c177034efd131f931d289d41321c
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              Preferences
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\Preferences
                              • Size 6KB
                              • SHA256 43e57fa22e942f69795e8fcebd078acf217bd9229599d00c83cf845230e6f76a
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              MANIFEST-000001
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\shared_proto_db\MANIFEST-000001
                              • Size 41B
                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                              • MD5 SHA1 SHA512
                              Submit Download

                              CURRENT
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Default\shared_proto_db\metadata\CURRENT
                              • Size 16B
                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                              • MD5 SHA1 SHA512
                              Submit Download

                              data_0
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\GraphiteDawnCache\data_0
                              • Size 8KB
                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              data_1
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\GraphiteDawnCache\data_1
                              • Size 264KB
                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              data_2
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\GraphiteDawnCache\data_2
                              • Size 8KB
                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              data_3
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\GraphiteDawnCache\data_3
                              • Size 8KB
                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              Local State
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Local State
                              • Size 15KB
                              • SHA256 79c56a10d76f4ff5640521a6a0594918d16cd569d2dc7e5b70becc4c8f8510c3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              Local State
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Local State
                              • Size 2KB
                              • SHA256 36f664d9d73a33ead6b4438695f8cee42cbbd6b36f8753a4adad797a8b0361be
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              Local State
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Local State
                              • Size 3KB
                              • SHA256 8b65bc44e5cc4d07ff4b0008d14ce43be1ab97246f14e88905ac5ae691bcb1ab
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              Local State~RFe5907d6.TMP
                              • Path C:\Users\Admin\AppData\Local\Volk\WebView2\EBWebView\Local State~RFe5907d6.TMP
                              • Size 1KB
                              • SHA256 a37cfe6e2f4799abeef41064bfb05fbf02ca310e1cfbbf01b3b019e0e3090e89
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              Staging
                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5552_770489856\Mu\Staging
                              • Size 36B
                              • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                              • MD5 SHA1 SHA512
                              Submit Download

                              memory/2028-221-0x00000217C0720000-0x00000217C0836000-memory.dmp
                              Download

                              memory/2688-257-0x000001E19FE20000-0x000001E19FF36000-memory.dmp
                              Download

                              memory/2688-444-0x000001E1ADF20000-0x000001E1ADF25000-memory.dmp
                              Download

                              memory/2688-234-0x000001E1A78F0000-0x000001E1A78F6000-memory.dmp
                              Download

                              memory/2688-469-0x000001E19FE20000-0x000001E19FF36000-memory.dmp
                              Download

                              memory/2688-223-0x000001E1A78A0000-0x000001E1A78A1000-memory.dmp
                              Download

                              memory/2688-61-0x00007FFBF2E80000-0x00007FFBF2E81000-memory.dmp
                              Download

                              memory/2688-224-0x000001E1A78D0000-0x000001E1A78D2000-memory.dmp
                              Download

                              memory/2688-225-0x000001E1A78A0000-0x000001E1A78A1000-memory.dmp
                              Download

                              memory/2688-281-0x000001E19FE20000-0x000001E19FF36000-memory.dmp
                              Download

                              memory/2688-226-0x000001E1A78E0000-0x000001E1A78E2000-memory.dmp
                              Download

                              memory/2688-317-0x000001E19FE20000-0x000001E19FF36000-memory.dmp
                              Download

                              memory/2688-229-0x000001E1A78A0000-0x000001E1A78A5000-memory.dmp
                              Download

                              memory/2688-230-0x000001E1A78F0000-0x000001E1A78F1000-memory.dmp
                              Download

                              memory/2688-228-0x000001E1A78F0000-0x000001E1A78F3000-memory.dmp
                              Download

                              memory/2688-231-0x000001E1A7900000-0x000001E1A7902000-memory.dmp
                              Download

                              memory/2688-448-0x000001E1ADF80000-0x000001E1ADF83000-memory.dmp
                              Download

                              memory/2688-449-0x000001E1ADF60000-0x000001E1ADF66000-memory.dmp
                              Download

                              memory/2688-445-0x000001E1ADF60000-0x000001E1ADF61000-memory.dmp
                              Download

                              memory/2688-446-0x000001E1ADF70000-0x000001E1ADF72000-memory.dmp
                              Download

                              memory/2688-443-0x000001E1ADF60000-0x000001E1ADF63000-memory.dmp
                              Download

                              memory/2688-233-0x000001E1A7910000-0x000001E1A7913000-memory.dmp
                              Download

                              memory/2688-440-0x000001E1ADF20000-0x000001E1ADF21000-memory.dmp
                              Download

                              memory/2688-441-0x000001E1ADF50000-0x000001E1ADF52000-memory.dmp
                              Download

                              memory/2744-332-0x00007FFBF3330000-0x00007FFBF3331000-memory.dmp
                              Download

                              memory/2744-333-0x00007FFBF3B10000-0x00007FFBF3B11000-memory.dmp
                              Download

                              memory/3096-259-0x00000231A5C50000-0x00000231A5D66000-memory.dmp
                              Download

                              memory/3108-102-0x00007FFBF2E80000-0x00007FFBF2E81000-memory.dmp
                              Download

                              memory/3108-258-0x000001DCDF9F0000-0x000001DCDFB06000-memory.dmp
                              Download

                              memory/3792-426-0x000001F05AFF0000-0x000001F05AFF1000-memory.dmp
                              Download

                              memory/3792-417-0x000001F05AFF0000-0x000001F05AFF1000-memory.dmp
                              Download

                              memory/3792-419-0x000001F05AFF0000-0x000001F05AFF1000-memory.dmp
                              Download

                              memory/3792-428-0x000001F05AFF0000-0x000001F05AFF1000-memory.dmp
                              Download

                              memory/3792-427-0x000001F05AFF0000-0x000001F05AFF1000-memory.dmp
                              Download

                              memory/3792-423-0x000001F05AFF0000-0x000001F05AFF1000-memory.dmp
                              Download

                              memory/3792-424-0x000001F05AFF0000-0x000001F05AFF1000-memory.dmp
                              Download

                              memory/3792-425-0x000001F05AFF0000-0x000001F05AFF1000-memory.dmp
                              Download