5f88adf66cef32bc44ee9fbfcc3b6312ded34f63bd7db45c56dd125cd9ae395f

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 06:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 9.9MB
Sample260708-gzcv2abz21
SHA256 5f88adf66cef32bc44ee9fbfcc3b6312ded34f63bd7db45c56dd125cd9ae395f
MD5 4256e606e7ce4b95ee596a41bf0fb5d1
SHA1 c9ac6652c74165b6041aca683f23dbebdb2a2aac
SHA512 3f964860667d727589aaabf124fa06dcd56dd73a620a5efe406de6ea004a258b0f9a4d6725ba49be0de62bf6629cc780b42542bf7dafda5b6bea45b1755668b2
SSDEEP 98304:oKSUu+M4LnT/xTHM6qu6jFqF2a2xDBPk0ibIFPz0rKVH1s:nABqFo9iEFrIKTs
TLSH
T1BEA65B116A9B98ADD19AC870C3468A735E2130DB1B36B9FF44C495393FADBF41F39218
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 7 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2964_73585662\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2964_73585662\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2964_73585662\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2964_1365526487\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2964_1365526487\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2964_73585662\keys.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2964_73585662\LICENSE	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279648681551571"	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5728	msedgewebview2.exe
5728	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
2964	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2932	2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 2932 wrote to memory of 2964	2932	2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	85
PID 2964 wrote to memory of 3696	2964	msedgewebview2.exe	86
PID 2964 wrote to memory of 852	2964	msedgewebview2.exe	87
PID 2964 wrote to memory of 852	2964	msedgewebview2.exe	87
PID 2964 wrote to memory of 852	2964	msedgewebview2.exe	87
PID 2964 wrote to memory of 2036	2964	msedgewebview2.exe	88
PID 2964 wrote to memory of 4148	2964	msedgewebview2.exe	89
PID 2964 wrote to memory of 4148	2964	msedgewebview2.exe	89
PID 2964 wrote to memory of 1044	2964	msedgewebview2.exe	90
PID 2964 wrote to memory of 1044	2964	msedgewebview2.exe	90
PID 2964 wrote to memory of 1044	2964	msedgewebview2.exe	90
PID 2964 wrote to memory of 4980	2964	msedgewebview2.exe	104
PID 2964 wrote to memory of 4980	2964	msedgewebview2.exe	104
PID 2964 wrote to memory of 5728	2964	msedgewebview2.exe	105
PID 2964 wrote to memory of 1168	2964	msedgewebview2.exe	106
PID 2964 wrote to memory of 1168	2964	msedgewebview2.exe	106

C:\Users\Admin\AppData\Local\Temp\2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2932
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2932.2016.5664486502266749832
  2⤵
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2964
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.project.app\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffc46a4b078,0x7ffc46a4b084,0x7ffc46a4b090
    3⤵
    PID:3696
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1740,i,4778756428003254500,2419060718136428172,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1736 /prefetch:2
    3⤵
    PID:852
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2052,i,4778756428003254500,2419060718136428172,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
    3⤵
    PID:2036
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2388,i,4778756428003254500,2419060718136428172,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:8
    3⤵
    PID:4148
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3652,i,4778756428003254500,2419060718136428172,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
    3⤵
    PID:1044
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=756,i,4778756428003254500,2419060718136428172,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
    3⤵
    PID:4980
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4380,i,4778756428003254500,2419060718136428172,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5728
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4384,i,4778756428003254500,2419060718136428172,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
    3⤵
    PID:1168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2964_1365526487\manifest.fingerprint
Size 66B
SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
MD5 3fb5233616491df0ec229ba9f42efdb8
SHA1 18a8116e2df9805accd7901d2321c3fa92da1af4
SHA512 e9b17ac626bf6508db9a686825411e90d316a0f1dacbf63dbec5baaaf6b96af4dbc9a7332975b6d5c16c43757d79fddca6b888ea97bc07a8dffb1b3a06366b4d
TLSH
T1F8A022A0C302202228A00E0A82E20223200EA80CE880002328AC8E2A080833B00A8200
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2964_1365526487\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2964_73585662\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3e75913426bf27485763ec4060558a90e0a2e96a99996d2e90a46c52d8968fa6
MD5 1844d06fcbc2e902095c141d2b3f0287
SHA1 5be3bfaf6325b37a0d2c752ab2567e644de16bdb
SHA512 05cc831b8205bff31f143ecd180b9406406039b5ac7098d921be35ac18b6f739c3936510e369f042de6897d5cd4a4401db1fde3c54828ffd03f83267c0fde254
TLSH
T148D0121736011134C0202073001271090800C10B904640479468DB2D1A148901912C41
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 8605cf222388002c191af25325d83819941f707dc40abca6f65d6c2fd47a875f
MD5 07eeb95ba357ac8cd0e8744fdda4c4c8
SHA1 e9849d7e38701d258844f039036736eddf7cb70e
SHA512 d81f0dd0cbfd358a8460c23d238992b95caa0c1bef84b97b99d1a03846c376079fb3c02e7e119770c0239732fccee305ed3e17c9811cfeef9639237b9f4e48c3
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 ae2751346cefb14ef190c216265af6647504cd67c3a8766bc06866102df8d4cf
MD5 5ba8cd9491c0b2456f8c9fcfe6a1dd82
SHA1 402daca2fc9f3db1697cc42a1cd42552780c8d10
SHA512 644a4b3980ee962499a55d2228845c449e34e8eba84e7d29f01726c4727b7bd4e32b45aab1c445fc40326a77d6d566893e57ceb4f461b34c7c5799a9c98ea701
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 a165b4de14bb594f53f397a272b0586d80fd797dd2aa87db5db7841cfb623567
MD5 53f074bf427cea317f55168ef59125bc
SHA1 f291fc6437593140eec35b7016b3d625217dcb0f
SHA512 db89ad63080b43a6a57cfa5ef2f3b176dc18d73ef9f959f77131ee9476eff864bf6f144483e11c229964b0e0f65ffc7be41f9ddc045b3dbb15459ec70656c47c
TLSH
T1F8D0121C930811FDD3733BB1F7C211B03232576426375C4012E9F5751EB63E1A490151
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe592dcd.TMP

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Network\Network Persistent State~RFe592dcd.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Preferences
Size 6KB
SHA256 717f94aa7090b1e032b2050be1f619ac8a67b913b96dddd2d5690a0d680d4bce
MD5 a79b29778a574ce92654f4479d3a64da
SHA1 c49b6f33494e916a49db49d4affc2c0a876a4b6e
SHA512 ea18a6611a8a639809cd41375951c0e1b5a88d600346c979e01a8731e398215841aff17a0feb33ec307e926ca5f18da1d335f624e9d0ffe8eb0e482bf9b9098f
SSDEEP 96:st3Q05FEoHWT8b9IZUffJ4Z8i0vhE8JkU3em/7qx+WVHMSm+uecp3EDm1idQj2G1:stA03HfqZ8pa4b/S+Wi7UKwdoPE4MC
TLSH
T113D195035E2869775CC7E25E7A35BF52E2F6203266D50E58EBFC870C09E66CD620790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe58a544.TMP

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Preferences~RFe58a544.TMP
Size 6KB
SHA256 63a2f07d99790467c92f8449444a0a33e08acad48d818292620bc2f4e51e033f
MD5 c8ab9ef99b97c8420771e8652f961c8d
SHA1 30e35d9e3c65666cd21be85d937d014903c0b53f
SHA512 36c644ef90e7ca06d45802294f2a7a1e2da2e6489984ba21043833c3e69da9e3760edb456af5294980f2581affbc550d394b3a092af21358cae9d61da5e8c730
SSDEEP 96:st3Q05FEoHWT8b9qUffJ4Z8i0vhE8JkU3em/7qx+WVHMSm+uecp3EDm1idQj2GPh:stA033fqZ8pa4b/S+Wi7UKwdoPS4M8
TLSH
T139D1A6035E2869774CC7E25A7B35FB52D2FA203266D50D58EBFC861C09D66CC6207D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State
Size 1KB
SHA256 d6c08df94107c4cf223088fb47e089e565bc4e33353e2be0ebd25a140311bdd1
MD5 9274eb89851600357f16fca88ddfb717
SHA1 6e89fa33129847fb8e62b4c68e45ccfde8e230d1
SHA512 9f75d210fbfae6508e358f4e5f9fe9b949140df47a737a20a648bb175c97589d4cf09fe20a48c665a1e5cac4fa58252aaa205c53cbdbcb59bb020b788469cf29
TLSH
T18B316773F0A46B72B8C2E58772867F137E30503AC2554E5851EE470C11D75CC6626D37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State
Size 2KB
SHA256 0e2be5fa8da1312f55ed316ec3688726743c6341555a37adfe5d202dfc163e8c
MD5 35578315520a7bc332bef3379f1ff9d9
SHA1 4cc9150389464584ef6393b83c6d759012664ff6
SHA512 e7886b56e97f1422f862693deeb2a5ab59f326ffeafeb783e54c0afeb26c5af057c7f83489f55f29137dca94aa52e7634ab5f1743917dbd8eed5a72959634400
TLSH
T13D51B633B454AB3799E3E58A7A8A3F13AA315069C6552F6495ED0B0C01DB59C3302C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State
Size 3KB
SHA256 48f58fa17013305661708c232fa66e2b6e9d8e06263c3c5b20e1a0370f7741ed
MD5 ecd42767f7bb6ae052efab2d1f990387
SHA1 7bf4172b55e6430f86d1e9c8b864e7a10f38b757
SHA512 087921ac961c72af39dab61b4e63181d77a096f6be0302d10900bac79670d5577be78e0177099ae8d9a85f70c2b723eedbf267ac9edd94ba92079f8dd15dc116
TLSH
T19271A523B464AA275DE3E946B9C62F02B661513BD1953FA8D9ED0F0C01DB6D82302D17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State
Size 16KB
SHA256 d3c6327b235e2baa4d0110cb791c47119884642a877c2e84b1a3dc24933363e8
MD5 214890f8acdf82940136067bbb64127a
SHA1 95558442b35257e638fc1aae177c18aec6a0c384
SHA512 c9abca97326802e6edb4bad28fa38ab4eb9a130f155a49c57ce6f81f73eabbcbb9c9b73eda5ad163391626a60a53e15a4234da379b81454f2d0dd572813ff201
SSDEEP 384:zTsrv+89zHqlDNP9oid6NbMsTR1+g7yLNk:Erv+4UNbdC77yLNk
TLSH
T1F0729F33A17CA7379CF2D94AB5896E077B78606A91C10BB4D9DD1B8D429F0D92313D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58052b.TMP

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State~RFe58052b.TMP
Size 1KB
SHA256 6b63327371701dcd0baa46a4b4b2edf7f8008dc3ccc573c476d20237cdff4fb6
MD5 376c0c6ad8a9cf5267f4f24cd48648fc
SHA1 b0d102f03ec4fc0fa25ff2dbc6739e6a11574da3
SHA512 4544fef2eaddb8fa9c2de876c2531de71238d0add8f8e3f17d10d644617e07408d3192ba34f6f90f598e0205d2354f75b1ae644b923b600c3a5638e5eb5e9440
TLSH
T150216573E0A46A72F8C1D487B282BF023E20503AC2184E1C91DD030802DB9DD6A22D37
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\TrustTokenKeyCommitments\2026.3.23.1\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/852-25-0x00007FFC62990000-0x00007FFC62991000-memory.dmp

Download

memory/1044-141-0x00007FFC62990000-0x00007FFC62991000-memory.dmp

Download

memory/4148-68-0x00007FFC61B20000-0x00007FFC61B21000-memory.dmp

Download

memory/4148-67-0x00007FFC61E00000-0x00007FFC61E01000-memory.dmp

Download

memory/5728-304-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download

memory/5728-305-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download

memory/5728-316-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download

memory/5728-315-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download

memory/5728-314-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download

memory/5728-313-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download

memory/5728-312-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download

memory/5728-311-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download

memory/5728-310-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download

memory/5728-306-0x00000209A41A0000-0x00000209A41A1000-memory.dmp

Download