82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316

Analysis

user interaction
yes
max time kernel
900s
max time network
888s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 02:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BootstrapperNew.exe
Size 8.3MB
Sample260707-c64vwadv2k
SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
MD5 c9f1c55b26e7f781b65a96ea8190517d
SHA1 dad71e6ac2ad9e3ce30152f993d0c765008c6b5a
SHA512 aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d
SSDEEP 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+
TLSH
T169961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_1949121675\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_153906307\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_1276088805\keys.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Sigma\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_153906307\Part-RU	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_2126185024\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Mu\Fingerprinting	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Sigma\Entities	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_623830876\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_1276088805\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_2134118551\_platform_specific\win_x64\widevinecdm.dll.sig	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_623830876\surnames.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_623830876\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_153906307\Part-FR	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_1538000234\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_2134118551\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_2134118551\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_623830876\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_2134118551\_platform_specific\win_x64\widevinecdm.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_408471085\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-la.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_759865347\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Sigma\Cryptomining	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Sigma\Staging	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_153906307\Part-IT	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_623830876\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_1276088805\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Mu\Staging	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Mu\Cryptomining	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Sigma\Other	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_153906307\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_623830876\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-af.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_759865347\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_1949121675\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Mu\Social	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_1538000234\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Mu\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Sigma\Advertising	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Sigma\Fingerprinting	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_1538000234\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_623830876\female_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_759865347\metadata.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Mu\Other	msedgewebview2.exe

Executes dropped EXE 1 IoCs

pid	Process
5740	Solara.exe

Loads dropped DLL 2 IoCs

pid	Process
5740	Solara.exe
5740	Solara.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Solara.exe

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral2/files/0x000b00000001c7d1-463.dat	embeds_openssl

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4720	BootstrapperNew.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe
5740	Solara.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
6052	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4720	BootstrapperNew.exe
Token: SeDebugPrivilege	5740	Solara.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 4720 wrote to memory of 5740	4720	BootstrapperNew.exe	87
PID 5740 wrote to memory of 6052	5740	Solara.exe	88
PID 6052 wrote to memory of 6020	6052	msedgewebview2.exe	89
PID 6052 wrote to memory of 1736	6052	msedgewebview2.exe	90
PID 6052 wrote to memory of 1736	6052	msedgewebview2.exe	90
PID 6052 wrote to memory of 1736	6052	msedgewebview2.exe	90
PID 6052 wrote to memory of 1736	6052	msedgewebview2.exe	90
PID 6052 wrote to memory of 752	6052	msedgewebview2.exe	91
PID 6052 wrote to memory of 5700	6052	msedgewebview2.exe	92
PID 6052 wrote to memory of 5700	6052	msedgewebview2.exe	92
PID 6052 wrote to memory of 5700	6052	msedgewebview2.exe	92
PID 6052 wrote to memory of 5904	6052	msedgewebview2.exe	93
PID 6052 wrote to memory of 5904	6052	msedgewebview2.exe	93
PID 6052 wrote to memory of 5904	6052	msedgewebview2.exe	93
PID 6052 wrote to memory of 5904	6052	msedgewebview2.exe	93
PID 6052 wrote to memory of 5904	6052	msedgewebview2.exe	93
PID 6052 wrote to memory of 2344	6052	msedgewebview2.exe	96
PID 6052 wrote to memory of 2344	6052	msedgewebview2.exe	96
PID 6052 wrote to memory of 2344	6052	msedgewebview2.exe	96
PID 6052 wrote to memory of 5832	6052	msedgewebview2.exe	97
PID 6052 wrote to memory of 5832	6052	msedgewebview2.exe	97
PID 6052 wrote to memory of 5832	6052	msedgewebview2.exe	97
PID 6052 wrote to memory of 4160	6052	msedgewebview2.exe	98
PID 6052 wrote to memory of 5232	6052	msedgewebview2.exe	99
PID 6052 wrote to memory of 5232	6052	msedgewebview2.exe	99
PID 6052 wrote to memory of 5232	6052	msedgewebview2.exe	99
PID 6052 wrote to memory of 1688	6052	msedgewebview2.exe	100
PID 6052 wrote to memory of 1688	6052	msedgewebview2.exe	100
PID 6052 wrote to memory of 1688	6052	msedgewebview2.exe	100
PID 6052 wrote to memory of 2564	6052	msedgewebview2.exe	101
PID 6052 wrote to memory of 2564	6052	msedgewebview2.exe	101
PID 6052 wrote to memory of 2564	6052	msedgewebview2.exe	101
PID 6052 wrote to memory of 3128	6052	msedgewebview2.exe	104
PID 6052 wrote to memory of 3128	6052	msedgewebview2.exe	104
PID 6052 wrote to memory of 3128	6052	msedgewebview2.exe	104
PID 6052 wrote to memory of 6076	6052	msedgewebview2.exe	105
PID 6052 wrote to memory of 6076	6052	msedgewebview2.exe	105
PID 6052 wrote to memory of 6076	6052	msedgewebview2.exe	105
PID 6052 wrote to memory of 4984	6052	msedgewebview2.exe	106
PID 6052 wrote to memory of 4984	6052	msedgewebview2.exe	106
PID 6052 wrote to memory of 4984	6052	msedgewebview2.exe	106
PID 6052 wrote to memory of 1312	6052	msedgewebview2.exe	107
PID 6052 wrote to memory of 1312	6052	msedgewebview2.exe	107
PID 6052 wrote to memory of 1312	6052	msedgewebview2.exe	107
PID 6052 wrote to memory of 2404	6052	msedgewebview2.exe	108
PID 6052 wrote to memory of 2404	6052	msedgewebview2.exe	108
PID 6052 wrote to memory of 2404	6052	msedgewebview2.exe	108
PID 6052 wrote to memory of 5004	6052	msedgewebview2.exe	109
PID 6052 wrote to memory of 5004	6052	msedgewebview2.exe	109
PID 6052 wrote to memory of 5004	6052	msedgewebview2.exe	109
PID 6052 wrote to memory of 5844	6052	msedgewebview2.exe	113
PID 6052 wrote to memory of 5844	6052	msedgewebview2.exe	113
PID 6052 wrote to memory of 5844	6052	msedgewebview2.exe	113

C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe
"C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4720
- C:\Users\Admin\AppData\Local\Solara\Solara.exe
  "C:\Users\Admin\AppData\Local\Solara\Solara.exe" --bootstrapperPath "C:\Users\Admin\AppData\Local\Temp" --bootstrapperExe "C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks whether UAC is enabled
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:5740
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5740.4788.4683468550117251914 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:6052
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView /prefetch:4 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x164,0x188,0x18c,0x50,0x194,0x7ffb398d5fd8,0x7ffb398d5fe4,0x7ffb398d5ff0
      4⤵
      PID:6020
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1716 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:1736
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2072 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:752
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2248 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:5700
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3436 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c /prefetch:1
      4⤵
      PID:5904
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4436 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:2344
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3296 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:5832
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3296 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:4160
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4088 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:5232
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4432 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:1688
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4008 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:2564
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4656 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:3128
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4600 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:6076
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4588 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:4984
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4536 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:1312
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4044 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:2404
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4544 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:5004
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=828 --field-trial-handle=1720,i,13036797606294314030,9190744537149826569,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7343fb59a35d0f778319a1f355322c2cb720b14c
      4⤵
      PID:5844

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2516

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC
Size 719B
SHA256 c7fa88dfcb73126fd77c31bef314fdc3032bc4046666561db74ea50fab4e564f
MD5 eaf55528b0f5937bd8e8f316bd1cc084
SHA1 95f22f3a4fd8bbaed3b1d846bffc9c7d91b6d0f6
SHA512 b662ed48f9545b4a39b0ad121df043fc73d049473c7747eb34fbe2727c62d672351c2fe4b14fc252c8ac19d14a1ebe818b4f6ff523e7a14d1a9a94b9bb4e0b50
TLSH
T19C0199C38D3F044D1D039540DF59CA71375170E1781702A7A6B03D01A84B93D563D854
MD5 SHA1 SHA512 TLSH

Submit Download

A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E
Size 727B
SHA256 4bedb3783337243f2cf8cd4ec0cadc834963459b94a5d43289a0a54bdd3c6588
MD5 5728592d73f731645fdae6d98eebbddd
SHA1 e9fb4ee890eb234aeeeb41829afffc7a1cd8915b
SHA512 5f5ce89b52bfbd24d1594b2b99a154908f47f11b400f07888635c2281001d2958d3c048a6af0dea15044c5d0878fe04e122b6510c10bb35e523ae668e259a926
TLSH
T1690149D6182CD041BF035B041D9C9575513DD052D1F717E1326F4DC4971A6FE6853134
MD5 SHA1 SHA512 TLSH

Submit Download

54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC
Size 446B
SHA256 c3db348ae55c7257f9a4b2ea65e034b078644551558d0b85d4f10d4b94352d0a
MD5 6f6e00c35b9fea807e28c2d0a8de439e
SHA1 9223b731222047eb37b52d78b6f0c38666cb3d6e
SHA512 0409d0da8f3cfb402e26a61a0b6e9984d3ec415b7c95891bc7a3d127da50831e45a61beae38ed61f5d74998e57234c8078a18295568d0751d8459d66532fcedc
TLSH
T164F0681424FB022FE0B6967D87E642B59F29F4133908B2AC00A51319EE43F465F71E39
MD5 SHA1 SHA512 TLSH

Submit Download

A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E
Size 478B
SHA256 54bb6d2df9891210f7df3e60bd540346f012f6684fa49826a6366bd2609c74b2
MD5 11bf909b643f185210d1145395dfb07a
SHA1 fc2fc2b9ea206d1dcbed6888aee196262646499f
SHA512 62172b9c07d908c11c5e688738d8eb79bc282a4a96518e184c56ff53be2c342c906021c4d2c08452cc41cce2bf2428d2ae28f6f18c46ff3f2f1822a713321eb6
TLSH
T107F0E58C29FC113EF575EAB48BFD63614857F1A6AA4046E906A215189642B01D93206A
MD5 SHA1 SHA512 TLSH

Submit Download

0ptnboug.newcfg

Path C:\Users\Admin\AppData\Local\CMD_Softworks\Solara.exe_Url_53xuh3ye2sv3irjmmisjyux5zs5ykbiy\1.0.0.0\0ptnboug.newcfg
Size 935B
SHA256 0f751771f2088db72f3fb00851208fff1e57de56d5cfd53154576e57ea16ca39
MD5 9f896f391fe2f3ba25d388ec721b5d28
SHA1 9f909bae66c56c14f1b48f5bd4fa0940b13bba3e
SHA512 e001c2903428c925106bba90320e42559adc560ae9af571ca52fcfcb76e617c1983a24b2295bd5ac992a2258c08f4cd4bec4fe3dc7fa6a015d0c40dd04600809
TLSH
T11E11480821C1BE5B42336F32DA218640DDB187D7417A2568B47D62A79F305CB078336A
MD5 SHA1 SHA512 TLSH

Submit Download

user.config

Path C:\Users\Admin\AppData\Local\CMD_Softworks\Solara.exe_Url_53xuh3ye2sv3irjmmisjyux5zs5ykbiy\1.0.0.0\user.config
Size 815B
SHA256 8c07ca027ee07a4a9ab98b17facadd032986912853b38e11840414114d53a395
MD5 66fa646abbfa858e860c4c26ad8d453e
SHA1 6626b08ed10eb3f23ba08a9f03b0b8f660bcfae5
SHA512 81621fb62b504b9ab2d7ddef3efbd95c6aa23142b3b287c2db9198cd2389955693fc130d5cc7928022a5eecab4611d8da08d9a5291e88b34d41b3cf7879debe4
TLSH
T1FD01681421C0BE5B42336F32D9118640DEB187D7403A2528B47D66BA9F314CB078336A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 d8186047f71cecbbecc04c61b8f2d9c838519dd48d97b739ceb4675fa10989f4
MD5 868f1dbef8909a5995d0c8404b035cf1
SHA1 2b2b605c1b5ac1f2b2dbd907958eb5e3479ea994
SHA512 7902c3e8ad5fc69a644b7c466db2f5914353e0fd0791b6d84b27d1b9df34fb0f37e79f87af255a1dbbb2aaee56582b06a3692409cbef545d6bd28fe9808f511b
TLSH
T180D00414553CD700D50151310011D5C505404C440051451C441F104CCCD51005017015
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 864ad589fcd796c4a7708618ad04307a467d341399e0eabbe30c88716010fa2a
MD5 b5e047d7fc593a98c7e44b77792d2f4d
SHA1 2cceeca0b892c4d37bf20e1efe9bc58f8e1fdf1b
SHA512 527e434f5a23d9991760ae2f3de7fda695aee710e77b9e2ecca0066eb88219616d402712f4918bfc1e001d1c70f1b7949c616c2675cc7fbdb062a47f9ebcc21e
TLSH
T13FD0121636258734C41021330003B58D0840C50F40458008982E955D9E580501917452
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

8a2ae7d9-40a0-45b5-bc5d-b65e0d1d655d.tmp

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\8a2ae7d9-40a0-45b5-bc5d-b65e0d1d655d.tmp
Size 6KB
SHA256 e89e75dd57f3effe3ef0eabb35fe01563e642360d7e94f2ac5316c8c38ccc295
MD5 ca29eabd7cc42e445be2bb996dc91956
SHA1 82722dc93392cd922b4aa6852e3a210356316a04
SHA512 bc0a9db90741ce98570cd29db5710c60563622405451edfe4ce2984412d85529e94b0d810221a4504a9578e7a682047e0c7c944354ae2704ff5f2ffc3fb8b047
SSDEEP 96:stLXdXWlbob9ekEo5h16Zxa2s7/x+6MhmuecqZM91ejeAK+gIWRS28XM1C7K:stLpW5Vo/2sV+F0M9QjM7sG6K
TLSH
T1D9D1B5025F68797B4CC6E119BA29BB47E2F9503265D11E98EBF8461C08EB6DC6307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 890658546316f81251bbab0ad8037ab29ebf4ce926639fc21986f269776fccbe
MD5 03c9bc115d2287f86f66e1caa16d40e5
SHA1 b531541d7cd84285a5f7d0d374785132fa45b385
SHA512 a2b6b5692667ff35008b06d9fccf13e118a684a69a0d8c4fe99d2d315b99b8762ee1b1fa19f58ee38495dbef8f62c74b642c429a6bc38be5b54d3d4116fbab48
TLSH
T14EC02B21233041C3E301A53C50CCCCC0F1F4059600132C07C463C1789810B355C00410
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b1ff8.TMP

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5b1ff8.TMP
Size 48B
SHA256 640deae544c436f1fe0b51ad50bd7c8fa6156d92b26cc5bf10e7849a80caa6bc
MD5 cf30c6ec78c8dbf5b35bd7741d178118
SHA1 c95e9bec4c83d0dee91d9792d8f6a8f0f0bf9d1e
SHA512 1ab53f079dea62abc370527eeb01e6ec670a4249c3f13c1833c3cf14c8e78001af94d305668b89b34c2d2c70e24c9f663ab3fc7c27f9f60231f2dab8d71572e3
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 1015413bcd15514fdece3efc60d453cb64eff23df999359ecda9df1283305ab6
MD5 2fb8173172cf624fb9c0a798405a905c
SHA1 9955602abb87d6ae06be5b96d82b4d0c8de81f37
SHA512 33a82821e31ecbf569fe976bfc6a07d7d18ed886f46bbb6a72dc42f2b0512bf421faeaa1d9df75339efd2ee96e8daaf81dc4c54c06a13327bad5565ffbcda1f9
TLSH
T18D2188E7C3E84AAD9E1245F83A24BE2BCE1D541447682E6AC9D49F4B93F0C74E25074B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5be04a.TMP

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Network\Network Persistent State~RFe5be04a.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 e95d2fb98d440f31a3f9465605d2a3cae8f829b005618eed999631e0f2b6a373
MD5 026cb711ef610439ac06f48b029ac0c6
SHA1 d10c95b3dae50421a1821f1b7d4a60385651fae6
SHA512 0f92b59921087d00d3513b3f88c998fd486674fc8be8c6922efeba1257fbb4a3564272de4de8ff1623ff0c580e886326317cf0df36768154e55e7dbe624e75ef
SSDEEP 96:stLXdXWlKGob9ekEo5h16Zxa2s7/x+6MhmuecqZM91ejeAK+gICl28XM1C7K:stLpW7Vo/2sV+F0M9QjMzlG6K
TLSH
T10AD1C7025F68797B4CC6E119BE6A7B47E2F9503265D11E98EBF8461C08EB6DC6303D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 3KB
SHA256 15efb1d8d7ca6b41494bb68fc58862268d5380792d89fb497344a093c7c7400e
MD5 2e429404a94567c9d1914561cd06174c
SHA1 456cd5765d019bbac680e57b36cae52e72c71f08
SHA512 61b35cf6dc31c1ac3b0e3c921e9a7a10f2e019a895832f769fc2c7a13e52c5536d509eda0350c394087af19785c82723e3e6c5c083db6f5678cd0852780ec5bf
TLSH
T116717577AAA4A9774EB39A057C862B16AFA58027AA913F94D5EC0F0C01D77981343C13
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 15KB
SHA256 a658ec58de4f9d4ead4b4c66a791a29febc21a8a3cc055ffb09a7e8d8ae61b81
MD5 af7a9d1c42ed4f8f51bcbe95aa8ea982
SHA1 43bf4cb431f90e638cfee0f071db76cd4b75c82a
SHA512 aa9729dba10e4fb75596f06a756bc34dd805cb066239b1fdee3567ca0e29b3ba6e9e8c2e9955540db1f9fb508d49d15f8bf8fd52a596a7243ae33374321ceb6e
SSDEEP 384:0srv+89zHqlDNP9oid6NBSPBZqiRaisdGzNq:/rv+4UNbdjM0aisCNq
TLSH
T18B72AE33E97C6B338EB2D905B8866A1B3F7890A756821EE4E5991B8C41DB4D92307D03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
Size 2KB
SHA256 df51b3fc99e0c91a9f36751d1db4f3b98efa1037549bdea759b59fdd091e6e24
MD5 60c3267ff320c4672784c120244060d7
SHA1 2d17907e0eb0e15121d2648afd8a08f195c2793f
SHA512 6f28cbc65313b61384d99c0363f58c616c5fbde3f5b18dace149bcf18dbd0b3dd266c40f5b66a2bf1427fe01772a04128220a6fe874db24cd13e96c9864a3a8a
TLSH
T1C95174336A54AE778AB39A097D862B62CE7580A5AB522F90A6DC0B0C01D765C1347C23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5acaf2.TMP

Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State~RFe5acaf2.TMP
Size 1KB
SHA256 87bfda6dd1f6df7c8f99718d4545a044ca1555dfa164af1094cdce536f2bc99f
MD5 b8374aeadf5814f215f5ba99eb44bb20
SHA1 8082e724473e347bcf3da7de051e54d6d27863c3
SHA512 b0de1ec73f0e9db2292e0f6d3cb1aeb8827061b9237cc6cefdcb20a56748487988e085ca82e539c2e84802bfbf283d38c0f78694a7032380e766f035d4f5b74d
TLSH
T1873177B3D5D46F729C62660635427AA78F30407753425F4471DC470C12E764C961FC32
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\Users\Admin\AppData\Local\Solara\Microsoft.Web.WebView2.Core.dll
Size 634KB
SHA256 2b999d1775004e98b32f281f4518f3952df650970748527ef5b54fa9979d6c9c
MD5 225af3c55fbb7376a11dbc4648a2b582
SHA1 89f5657f8bca7aa571d7b533933dd3ffe744fcdf
SHA512 6e550daad83e85a189a6709e4757ee8caa27604362be9945cddf1a5a59aaff0f68403255422e243a7aaa2e0fea28c6972187be72b9eb82b76a4523ba3a49aad0
SSDEEP 12288:6BfVnfFe7bqOarD6niWFynSbOR4qn7BdkJX1Il5g3dM6sq9cZwq4BTpsRkrP322i:GQcl41OZ
TLSH
T1D3D4532223FD4619F6F27FB9563817608FB9BC96B939D35E8598502D0D72B809DA0333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Wpf.dll

Path C:\Users\Admin\AppData\Local\Solara\Microsoft.Web.WebView2.Wpf.dll
Size 80KB
SHA256 6d329162b460515a849c693518ff626a1a3363e79d549cfd6822e5601f24603e
MD5 d8e466f3951eb9a3d22eb098f4cced13
SHA1 8db2e9b72d72ee13c2059371a0b3026137118b7c
SHA512 6ea9f0ce48f5e3b31465e7dd6e7e808d590933d99242e040c28b260f9124b0f3662d7e7356798f7e9eb09120ec3900cf98277e315a783c07cacce93ce1d0fde1
SSDEEP 1536:aU8jJ30lsivLfCoiWqhxaRkPqsfha87Y1DHfF7yEW30bpc4Jjr4YeUq+HhxU0udr:hs+vLqrThx6spa8+DHfFy30bpc4Jjr4B
TLSH
T109836C8193AC8923CBEF1FFD7C6050140FB8FA83B652D7992985B5EC0DA379119197A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Solara\Monaco\index.html
Size 14KB
SHA256 e0f556c791d604813a2552e4dd5af9779875563561c5bc5824b4c0bd51313ba3
MD5 126a540e637b97ba0f8abb694c5ab47e
SHA1 90530889b3a95f7c2058adc4120917b8b9498a9e
SHA512 b71054585ff453b07b5d677aa1988de8dd2392d159aea8745b8c98ee1ecab26f5b80e9fed551f9f7e48e41163b4da395b001423396df2baccb0be20ba939363e
SSDEEP 384:ttTeSQmfElKnihKRA5L1t2bVBJjjgOtu3BX+BILnoamLF:yGihVt2bVBJ70xOyboamLF
TLSH
T1B162CAB9B34F100B1282534974F67598FE2DC531C2235AAEB2EAF230D5DD8AC435A6F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua.js

Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\basic-languages\lua\lua.js
Size 5KB
SHA256 fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42
MD5 8706d861294e09a1f2f7e63d19e5fcb7
SHA1 fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23
SHA512 1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f
SSDEEP 96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE
TLSH
T11CB11ED89C9951594AE1E766879EE0A6E1544203CC3C7D74B7EC438C4F8CA4C86BE73D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

editor.main.css

Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\editor\editor.main.css
Size 171KB
SHA256 fb2cbf2ee64286bc010a6c6fe6a81c6c292c145a2f584d0240c674f56e3015b0
MD5 6af9c0d237b31c1c91f7faa84b384bdf
SHA1 c349b06cad41c2997f5018a9b88baedd0ba1ea11
SHA512 3bda519fed1cfa5352f463d3f91194122cf6bf7c3c7ab6927c8ca3eea159d35deb39328576e7cbd982cfdf1f101b2a46c3165221501b36919dbde6f1e94bf5ff
SSDEEP 1536:ZxP4PUPVP0PAPeMi76Q4TVq6bbhLynlDTkDatDF8Jmmvgs0aMJkn:phbIRkDSYmmvgs0aMJK
TLSH
T1B8041AAF96061F4F26E54423C195BFAA38FDC1B6F0128ED5E87D3B64C00D6D922961BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

editor.main.js

Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\editor\editor.main.js
Size 2.0MB
SHA256 93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18
MD5 9399a8eaa741d04b0ae6566a5ebb8106
SHA1 5646a9d35b773d784ad914417ed861c5cba45e31
SHA512 d37ef5a848e371f7db9616a4bf8b5347449abb3e244a5527396756791583cad455802450ceeb88dce39642c47aceaf2be6b95bede23b9ed68b5d4b7b9022b9c8
SSDEEP 24576:SmmBNDw4gCXJkB4nIg2IxhbaeZYIMsNjvit4f:wDw4gCXJk62+aeKIMsNjvit4f
TLSH
T12A95E7997155342243C7A0B6A47F050FB33A54ADE80A406CB7B8D8ED2DBE5896337F78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

editor.main.nls.js

Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\editor\editor.main.nls.js
Size 31KB
SHA256 fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48
MD5 74dd2381ddbb5af80ce28aefed3068fc
SHA1 0996dc91842ab20387e08a46f3807a3f77958902
SHA512 8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e
SSDEEP 384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb
TLSH
T153E2B767A78813372A8302DBB2DED194BB1A597D7351034678AD943832C64F0A3BF9F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loader.js

Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\loader.js
Size 27KB
SHA256 0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9
MD5 8a3086f6c6298f986bda09080dd003b1
SHA1 8c7d41c586bfa015fb5cc50a2fdc547711b57c3c
SHA512 9e586742f4e19938132e41145deec584a7b8c7e111b3c6e9254f8d11db632ebe4d66898458ed7bcfc0614d06e20eb33d5a6a8eb8b32d91110557255cf1dbf017
SSDEEP 768:3J6C/c2x0cAu57XQxJRDRi+R/TvrCv3zM2GRl0VEj:Z6grH7qTXRvmDI
TLSH
T17DD294CEBB9474234247F8E8D43F001BE2B6955E544D842C710DD8EE5CB998AA23EF78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Users\Admin\AppData\Local\Solara\Newtonsoft.Json.dll
Size 695KB
SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
MD5 195ffb7167db3219b217c4fd439eedd6
SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
TLSH
T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Solara.exe

Path C:\Users\Admin\AppData\Local\Solara\Solara.exe
Size 1.3MB
SHA256 473032c443307738fa01a2dc1d636c81f7b2def5d48d0dde91b0b896230bc83b
MD5 312746de805dc64b1ab7fcf9f4c0f1ec
SHA1 23f28f0abc2227177f8fce565c02ec2f50ec744b
SHA512 85e17706968dfa10148060957a4098df6ba91b73d6f148255352838792dcd4102bcd1ce0aaeb321c429bae816f36e6ee16549c6105ee8495cbd54c6e68f697cf
SSDEEP 24576:kVyuDb36T6hkReLXUJWpQ+NGkIAm1/Q3QQl:kAjkIAm1W
TLSH
T17455E242A2C6FD1BD3362A358594F32D89257F31EEA6930B30BD35AC553BBAD8449343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SolaraV3.dll

Path C:\Users\Admin\AppData\Local\Solara\SolaraV3.dll
Size 14.1MB
SHA256 4cc1a166011b0846f5527fc086623e2ec26017c5739733effdbf8d9b07a08e2b
MD5 47492c3de2b2f7a977523420dab01690
SHA1 2a2f2a1d529fb2068a1fd8877f01ef173989e1df
SHA512 404cec6e3b097c707bf1cc8093bbc22fb7d274c712857f0ec07532ff171b3b324e43a4106989f4f324bc619aac07b23c3d63fac498d9241b7dde6a6bfcc30ac5
SSDEEP 393216:N8oFmv/jdHylDOYRX6fiKwIgOcml/fZpXIJFZ:Nnmv/xHiDEIZ
TLSH
T11EE68DD670E910ACC566C5B9C383E63BC66F74390339D6E716A4A2621E23ED1377AF01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Solara\WebView2Loader.dll
Size 133KB
SHA256 79d7e45f8631e8d2541d01bfb5a49a3a090be72b3d465389a2d684680fee2e36
MD5 a0bd0d1a66e7c7f1d97aedecdafb933f
SHA1 dd109ac34beb8289030e4ec0a026297b793f64a3
SHA512 2a50ae5c7234a44b29f82ebc2e3cfed37bf69294eb00b2dc8905c61259975b2f3a059c67aeab862f002752454d195f7191d9b82b056f6ef22d6e1b0bb3673d50
SSDEEP 3072:e5i6Uab3sFhPk6vEmG1PU6dLXm2ng3esQDqEt2JljdTu:e5P2e6vERtUyTmHEtmI
TLSH
T13FD35B5B73A5007BE1778174C4A34A1AEB76B85117609BDF07A442692F63BD0AE3EF30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.dll

Path C:\Users\Admin\AppData\Local\Solara\Wpf.Ui.dll
Size 5.7MB
SHA256 0ebff5461eb1984ea852566a59f08456e48909f4ea9b7ec064a219a28ece0343
MD5 1aa1a40418717dc04ada47b52a1c06ed
SHA1 4efd1787373497fe819116e2c0e81e2463cc1052
SHA512 14d632d1dbf77d4a11d21c2314a07faeaebbce3f257e36d79c63becc29b16cacd09e8b7928d79742c1ef346576134c589ece3af8d80e49def36b865cdd9b7ca8
SSDEEP 98304:1OYON/XzMvSmaRT+KcbNdvPp4zlAHDfyNr7lQ:/O9oNdvPpR
TLSH
T1BE565B9E23ED0D33D363837A8DA07323196919652142AF878F4ADB2D44BA0C5DDF16DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Solara\bin\DEBUG.txt
Size 345B
SHA256 8568176519706ec2c4269622edf7d76158a4e784f2ef4fab87a163b5d03fca98
MD5 55b2b877c34ebbee03e95faa6d2c80a0
SHA1 6411dea51c096121b2a89b996252b34e10d9e85e
SHA512 0b2a00f08b58adcd95d76a34ad192dcc0aa9963b1c642b436303e20e1ba48ffad4f05e5f3d1d75bdd1432e8d1490f2e14459ed06e91a16a96487eb161c6c8d28
TLSH
T162E0B6202338B1739922EE2A9C602EDA86C1F47A16980CACF34553067694C3FAD5F4C2
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Solara\bin\DEBUG.txt
Size 1022B
SHA256 ac7f5e7b70e9657aa2a679f924dabde710361b204b97fddacd6d287367648a70
MD5 e50e15d6a4e5bf9004c49da21919a9aa
SHA1 653970db69f681554e787fadf8ba9dd8612a404b
SHA512 477fc689dfde2fd695fc46e26d1bcbf7f78095ab591ddc6ea5966d8d8ddc45aaf89e47621fd2e0eee106751e207df0b7dcfc9cee922448ad6402e0877ba1ebbf
TLSH
T17511C510237C72635D22E66A8C902DDAC6C1F43A97A04C6CF304A3017A64C7FDE0F9E2
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Solara\bin\DEBUG.txt
Size 1KB
SHA256 d5f31f8e67f8abfdd2de6b60119756ff1caf503f6c88bc98052c4707d85748d1
MD5 70acc6006d6a5860825b7a3add418a97
SHA1 16f4abf68b9f556e2e7f042885b6b59ada62827d
SHA512 1e2587ae2087fda646b831eeeabc46c80990ba97b39d4a31df57f740abbfd1ddeaa65b4966ef8492849566be88f924abdcbb66cf8f38292d71443f65b2948ddb
TLSH
T10E21C05123BC31635D21E66A8C902DDAD6C1F43A5BA08C6CF300A3157A64CBFDE1F9D2
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_214145234\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Staging

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6052_35826583\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

memory/1736-629-0x00007FFB66CF0000-0x00007FFB66CF1000-memory.dmp

Download

memory/1736-748-0x000001CB17780000-0x000001CB17856000-memory.dmp

Download

memory/2344-811-0x00007FFB67630000-0x00007FFB67631000-memory.dmp

Download

memory/2344-810-0x00007FFB67570000-0x00007FFB67571000-memory.dmp

Download

memory/4160-911-0x000001D4A3C80000-0x000001D4A3C81000-memory.dmp

Download

memory/4160-910-0x000001D4A3C80000-0x000001D4A3C81000-memory.dmp

Download

memory/4160-902-0x000001D4A3C80000-0x000001D4A3C81000-memory.dmp

Download

memory/4160-900-0x000001D4A3C80000-0x000001D4A3C81000-memory.dmp

Download

memory/4160-906-0x000001D4A3C80000-0x000001D4A3C81000-memory.dmp

Download

memory/4160-909-0x000001D4A3C80000-0x000001D4A3C81000-memory.dmp

Download

memory/4160-907-0x000001D4A3C80000-0x000001D4A3C81000-memory.dmp

Download

memory/4160-908-0x000001D4A3C80000-0x000001D4A3C81000-memory.dmp

Download

memory/4720-0-0x00007FFB4508F000-0x00007FFB45090000-memory.dmp

Download

memory/4720-34-0x00000241F2570000-0x00000241F257A000-memory.dmp

Download

memory/4720-29-0x00000241F6880000-0x00000241F6932000-memory.dmp

Download

memory/4720-28-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-27-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-541-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-26-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-23-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-22-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-21-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-20-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-11-0x00000241D2FB0000-0x00000241D2FEE000-memory.dmp

Download

memory/4720-12-0x00000241D2F70000-0x00000241D2F7E000-memory.dmp

Download

memory/4720-30-0x00000241F25B0000-0x00000241F25D2000-memory.dmp

Download

memory/4720-13-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-10-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-9-0x00000241CD450000-0x00000241CD458000-memory.dmp

Download

memory/4720-8-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-7-0x00000241B4A50000-0x00000241B4A60000-memory.dmp

Download

memory/4720-6-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-5-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-4-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-3-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-2-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/4720-33-0x00000241F2580000-0x00000241F2592000-memory.dmp

Download

memory/4720-1-0x00000241B24D0000-0x00000241B2D16000-memory.dmp

Download

memory/5740-450-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-511-0x000001CD75D60000-0x000001CD75E12000-memory.dmp

Download

memory/5740-733-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-732-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-449-0x000001CD59490000-0x000001CD595D2000-memory.dmp

Download

memory/5740-808-0x00007FFB3A040000-0x00007FFB3AE6F000-memory.dmp

Download

memory/5740-528-0x00007FFB3A040000-0x00007FFB3AE6F000-memory.dmp

Download

memory/5740-527-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-526-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-525-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-501-0x000001CD73B90000-0x000001CD73BA8000-memory.dmp

Download

memory/5740-451-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-506-0x000001CD73E90000-0x000001CD73F32000-memory.dmp

Download

memory/5740-474-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-464-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-456-0x000001CD73DD0000-0x000001CD73E8A000-memory.dmp

Download

memory/5740-455-0x000001CD741D0000-0x000001CD74784000-memory.dmp

Download

memory/5740-454-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5740-452-0x00007FFB44F00000-0x00007FFB458A4000-memory.dmp

Download

memory/5904-749-0x000002B1C9000000-0x000002B1C90D6000-memory.dmp

Download

memory/5904-631-0x00007FFB66CF0000-0x00007FFB66CF1000-memory.dmp

Download