5f88adf66cef32bc44ee9fbfcc3b6312ded34f63bd7db45c56dd125cd9ae395f

Analysis

max time kernel
149s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/07/2026, 06:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 9.9MB
Sample260708-gzcv2abz21
SHA256 5f88adf66cef32bc44ee9fbfcc3b6312ded34f63bd7db45c56dd125cd9ae395f
MD5 4256e606e7ce4b95ee596a41bf0fb5d1
SHA1 c9ac6652c74165b6041aca683f23dbebdb2a2aac
SHA512 3f964860667d727589aaabf124fa06dcd56dd73a620a5efe406de6ea004a258b0f9a4d6725ba49be0de62bf6629cc780b42542bf7dafda5b6bea45b1755668b2
SSDEEP 98304:oKSUu+M4LnT/xTHM6qu6jFqF2a2xDBPk0ibIFPz0rKVH1s:nABqFo9iEFrIKTs
TLSH
T1BEA65B116A9B98ADD19AC870C3468A735E2130DB1B36B9FF44C495393FADBF41F39218
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3852	msedgewebview2.exe
3852	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
2908	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4144	2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 4144 wrote to memory of 2908	4144	2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	88
PID 2908 wrote to memory of 2028	2908	msedgewebview2.exe	89
PID 2908 wrote to memory of 3376	2908	msedgewebview2.exe	90
PID 2908 wrote to memory of 3376	2908	msedgewebview2.exe	90
PID 2908 wrote to memory of 3376	2908	msedgewebview2.exe	90
PID 2908 wrote to memory of 3376	2908	msedgewebview2.exe	90
PID 2908 wrote to memory of 4932	2908	msedgewebview2.exe	91
PID 2908 wrote to memory of 2876	2908	msedgewebview2.exe	92
PID 2908 wrote to memory of 2876	2908	msedgewebview2.exe	92
PID 2908 wrote to memory of 2876	2908	msedgewebview2.exe	92
PID 2908 wrote to memory of 3276	2908	msedgewebview2.exe	93
PID 2908 wrote to memory of 3276	2908	msedgewebview2.exe	93
PID 2908 wrote to memory of 3276	2908	msedgewebview2.exe	93
PID 2908 wrote to memory of 3276	2908	msedgewebview2.exe	93
PID 2908 wrote to memory of 3276	2908	msedgewebview2.exe	93
PID 2908 wrote to memory of 3852	2908	msedgewebview2.exe	97

C:\Users\Admin\AppData\Local\Temp\2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4144
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4144.3552.11506289699931362476 /pfhostedapp:73b0fa934f608d74ecfce799565fc27361b51db0
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2908
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.project.app\EBWebView /prefetch:4 /pfhostedapp:73b0fa934f608d74ecfce799565fc27361b51db0 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x164,0x188,0x18c,0x140,0x194,0x7ff8d2175fd8,0x7ff8d2175fe4,0x7ff8d2175ff0
    3⤵
    PID:2028
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1792 --field-trial-handle=1800,i,443792749002556163,12219801021285359602,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:73b0fa934f608d74ecfce799565fc27361b51db0
    3⤵
    PID:3376
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2116 --field-trial-handle=1800,i,443792749002556163,12219801021285359602,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:73b0fa934f608d74ecfce799565fc27361b51db0
    3⤵
    PID:4932
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2316 --field-trial-handle=1800,i,443792749002556163,12219801021285359602,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:73b0fa934f608d74ecfce799565fc27361b51db0
    3⤵
    PID:2876
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3424 --field-trial-handle=1800,i,443792749002556163,12219801021285359602,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:73b0fa934f608d74ecfce799565fc27361b51db0 /prefetch:1
    3⤵
    PID:3276
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.project.app\EBWebView" --webview-exe-name=2026-07-08_4256e606e7ce4b95ee596a41bf0fb5d1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=0.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4016 --field-trial-handle=1800,i,443792749002556163,12219801021285359602,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:73b0fa934f608d74ecfce799565fc27361b51db0
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 41113ececb643816251ccedb1f38ea28c1b2cdccd188b3551b2c6b7db0adc976
MD5 e6ece9b96f25711fb38b940b0e77365f
SHA1 5b7172e9d7044d9050d98db90a94a5c6a53133eb
SHA512 62058484be02ab134de72008a33649e9db00c0cd0f0987cde389d10baf0b9772f98d4c8990c2823170ca4aa2076a66cfca4e023e2e8b7ac681b240cabe8bc48b
TLSH
T19ED0121332054578C01020330C02A2080450D25B41078048542D876D1F480540902483
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2d2998c0fff1c696538bc1415ce1e8edc9b7c7c7a7483042e76abff771b11c50
MD5 1d7dba628d0d6a7afc11bef51699281d
SHA1 3807e85b6985aed90ca21df04d16dab7ab3daaa3
SHA512 ee2b38c604b23905f1c890cc16f1e2b12eccc712a7871cc86e3642cd1796745c97b2a87562cfaa2c9d9900b14c4984c9075ace7c7c58a12c408a293d73cb15d9
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 ced6602a7865e242017b58d46e877d16a71f0e0d92c21b50f4f92028996ddbe6
MD5 60b86d268138956e3e588c4703e9e02b
SHA1 ec897bb04c1e979a5708f021027c49a9eb9c572a
SHA512 2d9e30f31222c86bd16fb1ea460b3cdbbfe46b464acee5ee8c8d980da581b8cade7d552a13dd8af0bde017dcb66ff941074ca416c924fecea87b900bdd2a2cfa
TLSH
T11FD0121CD71503CBE31C76B555D13CA43E3554331D377D445EDA01751ED6754D782216
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591860.TMP

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe591860.TMP
Size 48B
SHA256 0952b661260cc1ee78608014b669ffcacd88d0b3feab6dd39dc512f8c47e5c6e
MD5 b7ac4d7f2e537b7852cb0b055329435d
SHA1 7f4c24e9ab7df20b03aa589214e80d46cff4a37c
SHA512 87b846341990482ebac588a44869e1f64eff237c60765ea8c6905bdea8de2f768b8060b21038e2ac2c46c28e1bb65bb27d3eeb88680d671fde5802588ca11fbe
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

499bb72c-3b5e-4bf4-b176-4b6ac4c320b7.tmp

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Network\499bb72c-3b5e-4bf4-b176-4b6ac4c320b7.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe59f0bf.TMP

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Network\Network Persistent State~RFe59f0bf.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Preferences
Size 6KB
SHA256 7ea00d659b57086240be130598caaf9bb3ea18dacc8b44a05a678796063a94dd
MD5 d46c946f5bb79e7495a10d6cbde8898b
SHA1 f3b758b5403a586da40c7b3ea5c6980210d3b98c
SHA512 7e638a20494eec142b09d1c9486b69f58a4ff5500655ac3d4fe64f6b0f03bef3152a950d2eca3966cbd23daaa244598ebb764275fe9695a2d8c5c60a7d05f5e9
SSDEEP 96:st3b/dPEADHZzb9lktno5h16ZP3JAs7/x+6Mhmuecp3ZD0S1ejeMJK+g5okx28XE:stTBDCo+ZAsV+FNpHQjonG6K
TLSH
T1F6D1C5025E24697B4CC7E249BA39BB53E2F5607261D51E58EBF8861C09DB6DC7303C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\Preferences
Size 6KB
SHA256 bb39e3185cf2dfb36c7fa3473dd630b24ced1d1a625755fef835121cf621b5f5
MD5 e01b162cce791290b33a723f123f410b
SHA1 3e939c4d7a247490017a45a2a421879cef8c6c0f
SHA512 8ff01bf56b4cb5c995b032fc413dd3b38dc39e0e5011e57e46d99fa6d886c66eba90da2fc9d03f32c86c1d485abd4595f6597c5882450c465829ffa605231c11
SSDEEP 96:st3b/dPEADHwGzb9lktno5h16ZP3JAs7/x+6Mhmuecp3ZD0S1ejeMJK+g5okx28U:stTBRCo+ZAsV+FNpHQjonG6K
TLSH
T1D8D1B5025E24697B4CC7E249BA397B53E2F5607261D51E58EBF8461C09EB6DC7303D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3cc1462-45c2-45b2-a4fd-9579e3caa427.tmp

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Default\d3cc1462-45c2-45b2-a4fd-9579e3caa427.tmp
Size 5KB
SHA256 1b5c9b3ccaf95a82a5faff1a47987175a1f2be0f399ecb8f9322770e4b4d47db
MD5 a36a0332118ca35510d524027698bc68
SHA1 e51860bb0e633952eadfa7555566600867b3552a
SHA512 0946e7d2ef459c1dea68171c9e0c9ba07faecffcf4d172f3e33fc457fdf78df2a53ffc2ad118420dd1f354e29d3fbd768e60ef142692d7ce8e3c64a58268622f
SSDEEP 96:r3b/dPEADHZzb9lktzdo616ZP3JAs7/x+6Mhmuecp3ZD0S1ejeMJK+g5Gpx28XMz:rTBDCo9ZAsV+FNpHQjooG6K
TLSH
T107C1E6025E24697B4CC6E209BA397B57E2F5607272D52D68E7F8861C09DB6DC7307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State
Size 2KB
SHA256 5bdb9518a9bdc59cb9dea73e8ccbc599a3ac5042c0001b0d62da2c4c6766b183
MD5 44e6c32780285c268c05e20c9352fb17
SHA1 21a85591f30867d7840c4398d87faa026423fb81
SHA512 96d7715ceb2774ee165c6277d72a180d7e672ab57610782fa1f8deb33f96e53ba073efbe7a30d3b6b49bec6bcfa3b04f362ed9fbf8fae10958eb0092b7e37122
TLSH
T1C551847378112A3795A2CB49799B3F66DF7540B9AB522F60AADC0B0C02D75AC3343C32
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State
Size 3KB
SHA256 c96e2484434539357c752258a5b8d0cd92e7fc5a47be60136a7f42303100c9fd
MD5 51bd0fbff3169861b8bdac51f96bf622
SHA1 e3e21bfc7d5d7a4b02339bf2aaeee94d6a7c3027
SHA512 c4575dc0b957ed497b326ab0a41336db88d97a335ddd5be021b390bd5f8c7e9189cdff5c9b4e20be9af7118d7c39596ef543e855fd0fa4dc96cabab37e627c23
TLSH
T18F71867B6961693749A3DA0979863B56FBA50076EA813FA4D5EC0F0C12D72AC2353C13
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State
Size 3KB
SHA256 6c81b412ced7b379be3382d7626f8061cf116ab842529cc029220120b3bcc41b
MD5 5e87d4b2cd026ae440db3cf244642c18
SHA1 520438f6b25cc08e3efe5f0764c360de006b0aa4
SHA512 6e631704fb2bfbe2df5d5d669fa8a0841d6bcb46e94577e1764b2777332536ea9c2c67406448bc104b7ff489d245a77eb95ea3c9ab072a578be3a8b7279f9f70
TLSH
T1FA81957AA961697749B2DA097D863F56EBA04077E9817FA4D9EC0F0C12D72DC2343C13
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State
Size 16KB
SHA256 1a0fe837093ce85814647e97f524155723bcf4dfbef19ac0f536ac68763aadf0
MD5 470f400b8e38f758f4fc8111538ad429
SHA1 cc633fdae1c87d44e505c2e3c1197482e11de501
SHA512 8901cce075d98fc2017d2fc400325b5517faf4c9a9ee264e18760d83053777b2aea3912b54193eb265184ee21d565f77c36e61ce1b905c1d4f1bc97c99d2bc18
SSDEEP 384:ssrv+89zHqlDNP9oid6NBSOkdYRiJyurIcPNJ:Xrv+4UNbd0+1rIcPNJ
TLSH
T1F2728E32E424E737ACB7D689B587BA47BBB451A656C14AE0D8D81F8C46C70DE2347C03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58c52f.TMP

Path C:\Users\Admin\AppData\Local\com.project.app\EBWebView\Local State~RFe58c52f.TMP
Size 1KB
SHA256 d2bd361eac408a0c5abaed3dc7bbc876bb6cf756941a27fca9f30e336b03cc2d
MD5 941ec09cc297d97c6f94489a1fa554a0
SHA1 c40674af5ed7998d6d212f880a7f8a6591ed9ad5
SHA512 fc730a0c4f57f9475a6b1d78adf75159812371a51bbfedc8b3e0cccad004c27782d46d4a53414d1689a83d9781157a89fb8bd35299e21383004879c3f4547caf
TLSH
T1393174B6E8912B329856974F32467A8BAF2000BE87414F1065CC470C17E70EC776BC32
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3276-198-0x000001A891BC0000-0x000001A891C34000-memory.dmp

Download

memory/3276-96-0x00007FF8F4110000-0x00007FF8F4111000-memory.dmp

Download

memory/3376-19-0x00007FF8F4110000-0x00007FF8F4111000-memory.dmp

Download

memory/3852-274-0x000001FBF45A0000-0x000001FBF45A1000-memory.dmp

Download

memory/3852-273-0x000001FBF45A0000-0x000001FBF45A1000-memory.dmp

Download

memory/3852-272-0x000001FBF45A0000-0x000001FBF45A1000-memory.dmp

Download

memory/3852-271-0x000001FBF45A0000-0x000001FBF45A1000-memory.dmp

Download

memory/3852-270-0x000001FBF45A0000-0x000001FBF45A1000-memory.dmp

Download

memory/3852-269-0x000001FBF45A0000-0x000001FBF45A1000-memory.dmp

Download

memory/3852-263-0x000001FBF45A0000-0x000001FBF45A1000-memory.dmp

Download

memory/3852-265-0x000001FBF45A0000-0x000001FBF45A1000-memory.dmp

Download