6fb6fb3ffd97efda2e4eebc41d43704749fa42acabef9684f8ca8e880bcfc8ff

Analysis

user interaction
yes
max time kernel
46s
max time network
50s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 17:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SolaraV3.exe
Size 18.2MB
Sample260727-vwt7ssxeqd
SHA256 6fb6fb3ffd97efda2e4eebc41d43704749fa42acabef9684f8ca8e880bcfc8ff
MD5 3e28e14cd1e98c8e9829aecf98ff0bc1
SHA1 9ea2ffbff9fad1130aa3e6d76913c874f0f7f740
SHA512 62afc840835659263d6922dcac3fa4624036b8b57be40fec9700c31d6e2ec64ef40e80203ce7f19624366b8c9cd82ff77878bf0e1fc997b7a82a987d61430d5d
SSDEEP 393216:Z55K4FeAvqolzFd6QzBrCpWnReUcf37QDA4SXPq:Z55K4FeAvqolzFd6QzBrCimi
TLSH
T11417E7217A5B99ACD09BC47483478A760A7130CB0B35B9FF44D496382F6EBF46F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
6	5740	SolaraV3.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Loads dropped DLL 1 IoCs

pid	Process
5740	SolaraV3.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	SolaraV3.exe

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral2/files/0x000c00000001c60f-220.dat	embeds_openssl

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 26 IoCs

pid	Process
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe
5740	SolaraV3.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4156	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5740	SolaraV3.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 5740 wrote to memory of 4156	5740	SolaraV3.exe	89
PID 4156 wrote to memory of 4172	4156	msedgewebview2.exe	90
PID 4156 wrote to memory of 2584	4156	msedgewebview2.exe	91
PID 4156 wrote to memory of 2584	4156	msedgewebview2.exe	91
PID 4156 wrote to memory of 2584	4156	msedgewebview2.exe	91
PID 4156 wrote to memory of 2584	4156	msedgewebview2.exe	91
PID 4156 wrote to memory of 5888	4156	msedgewebview2.exe	92
PID 4156 wrote to memory of 2176	4156	msedgewebview2.exe	93
PID 4156 wrote to memory of 2176	4156	msedgewebview2.exe	93
PID 4156 wrote to memory of 2176	4156	msedgewebview2.exe	93
PID 4156 wrote to memory of 5600	4156	msedgewebview2.exe	94
PID 4156 wrote to memory of 5600	4156	msedgewebview2.exe	94
PID 4156 wrote to memory of 5600	4156	msedgewebview2.exe	94
PID 4156 wrote to memory of 5600	4156	msedgewebview2.exe	94
PID 4156 wrote to memory of 5600	4156	msedgewebview2.exe	94

C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe
"C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe"
1⤵
- Downloads MZ/PE file
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5740
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5740.2072.4403425456191801321 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4156
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x124,0x194,0x7ff8106d5fd8,0x7ff8106d5fe4,0x7ff8106d5ff0
    3⤵
    PID:4172
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1744 --field-trial-handle=1748,i,2229903914156780670,15171803923843391499,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:2584
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2036 --field-trial-handle=1748,i,2229903914156780670,15171803923843391499,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:5888
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2308 --field-trial-handle=1748,i,2229903914156780670,15171803923843391499,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:2176
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3368 --field-trial-handle=1748,i,2229903914156780670,15171803923843391499,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 /prefetch:1
    3⤵
    PID:5600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
Size 345B
SHA256 02dd14f554650825c9744865d5bd9641d0161f9e8b8bc00e03a9be6a0a40d6db
MD5 30a887abbc3bd271d3502f0dfbd6bf48
SHA1 c21c0c9a66955c6c41d99bac095ea5b413934e36
SHA512 8ac2a30c0a20d6dea600945d5c328bfc1131b2ebe4ff323e2626e418d91e75bb02d32c45328c646f902415464b01c871d3ae90535d9a97cc7848c1192fbe55e9
TLSH
T1B5E0BF5421BCB1F25922910796710ED086E1F45EA6980CDCA365D18E7636E270DFFD02
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
Size 569B
SHA256 2b1123f81e58bc2596521d354cd543e833cd7934f4a71f59fccc349a40f20398
MD5 4038c0a8da12ffe2a9926077b02cc11f
SHA1 dcbbf77611712493414d59caad1f87cb37fbe91a
SHA512 f966ac55c9d8aa6ccab1671ac0d7acac1c8783be69fcad12a2e40d60cc290b30a1e9d3f0aab2163b0b6183cb0bbeb67572c77ec5b817c0adfe02b8be3d2c4d0f
TLSH
T18EF0B29821BC71E21D21904786320DD086E0F45EB6D80CD8A324D1897A36E674DAFE16
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
Size 871B
SHA256 f8e9cd9194237608a879c03a325489d4bd6a9e66db892a3e160c9765654dd95a
MD5 91e31ddcf659e01cc01966f3a50a1765
SHA1 864193adf0223d79d5ba34036ac7dc46082bebcf
SHA512 f1eac288fb367e259422f06d27f409fe75ede733b37c7e8b933ce9d6720c35c344570df86a2fd86dc407cbe8145c3d29d4c523e1feafbc05e4f09edb1f162492
TLSH
T10D11CC9831FC32E21C21914387220ED086F0F52E76D80CD9A324E1897A36E674EBBF16
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
Size 1KB
SHA256 9f28862db977b57d11bb1f39c34bb83424acfd2e2cfb6105e86a135de4669096
MD5 57de13b6baf02b60f77917c47119e82d
SHA1 2ee5256669f9c60249011f51714c2f7133105696
SHA512 782905ab5b58b162e5c00ee1094e333c66b9e71d9c4e95af60f981419373ecb6f80472209f8ae2c5babd9a45827b4fec6d7fbfab7474e35d317f93067abcda5e
TLSH
T17B21CA9831FC31E21D61918783620ED086F5F52D77D84CD9A320E18D7A36E574EBBB19
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 592B
SHA256 7dfe3e6b2f3eadf1d04808655424f5c7fe51a615ae2ad6ffb25382f50bfd56a9
MD5 c7c8d69e63c7e458b307014d87090fb7
SHA1 1005a431259431dfd9f35f38b27619b4697dda1f
SHA512 cc6896c2d0b8a9addbe527ec26ae967eac1fb9525db6cecb0b9af388ef31da98f3402b94d7833d060b0cd8ff4707e78af7f4c062c7e1d0dad41a19c954b0d0e3
TLSH
T1E9F0F0E998FD14EA0D41409181279CD2D0E0B26D3BE91DC4DA2171D83746C1FADBFB24
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 1KB
SHA256 966f2a7bd67b0c4dde2c52fa0c0d0610a2201af9a82599b1e8f5971bc2abd265
MD5 d3e47cbe8dd3b43ae429e34197753c5e
SHA1 dfc72f8b986a005e8a9da5764cff3ef6470db31f
SHA512 d197962975e6ab05816f9891bf706dfcd534e926f43ef4466da1b50a37d10b8e2b32819a353cb9b59309bc53a515728723adc773be089afaa8592c73150233cc
TLSH
T17E31C19D68FD96A608905245C6424EA6C8E5B01F37E849C5DA7160DC7B13C0BACBFE39
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 2KB
SHA256 6242546607ef987adea73753ac0213f9707afd28c7fab64eba29b6f512380301
MD5 d639b5deda3c63c9b95940def591113c
SHA1 e575a9459662affc2725d377f66a8e1550ec32f3
SHA512 ffdd24ca5ddabca6b1dfdf0f4e54700b1021264ed4b8f9aece35c6ac93ce12f37e717824d4833882f98305951b26ee9814bf2e97b3bad42dfd438c301534ed93
TLSH
T1A641FE9D58BED1A64D905146C7064EA6C8E5B41E37E88A84DB71209C7B2380BBCBFE35
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 3KB
SHA256 9832956fb833dbeafa4af076e2e7bb09a7128a8b1478cc667d14ee72ad4af604
MD5 1391a49229cdc26c21f65da520ed5a64
SHA1 6646d50cb1d03fb56393ef56aeeeb034f85bf44c
SHA512 14662800b5dbb3a39d9822e47a67fa54c51de54348722a39a97e8e3a23cc13306076d4128a17ac67b74bf511fe7441c3956796907ab599f37d14df400433614c
TLSH
T17071328968FED4A60E901146C7060EA5D8B1B50E7BE89D84EBB160DC3757807BCBBE25
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 4KB
SHA256 d2af1336d4d63ce8b2674506c0944857a847b724db8de67a29007a700fad6ea6
MD5 45f5f3f37c26f4b5f101ad939bf7b29d
SHA1 7dd080499a8ccb260d7add913ebabdda95e5cc5a
SHA512 94c1a67ff1583e3eda28c17d93c219993a47cc66aeb946318573704ab7fb5dc4c6911372b9e676e989c7e950bd99de38b5c4b84d3d05f5e007ede850387914ff
SSDEEP 96:o5r+jO2d5tIpapjC4/yVRkEFgTYT9YTr1wrjIBWva2hW5wB:ard2d5tQapjC4/kxgkTaTIjz545wB
TLSH
T1F49142CC68FED0A74E908145C7560EA5C4A1B55E37E88D84EBA120CC379680BBCBFF25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SolaraV3.dll

Path C:\Users\Admin\AppData\Local\Temp\bin\dll\SolaraV3.dll
Size 14.1MB
SHA256 f29a2288f181760acc51bff0cfe761608adff4c004a8a40e6c138c70a9c864de
MD5 7c9fba922ca19ae79570510330a013d8
SHA1 4dd2f2b9da367cc482df1a066f618d968313b28e
SHA512 52ad32fda9960355233121012eab9db97a56347411fa8beec568079059cb021a04686084cfd457273810c2f753e3446c16ae485e71f4aede9ebee68a6a80dc08
SSDEEP 196608:BoiDSmPXv0xJZ96wiwbr5AzmcT0V6UMNRMXhWR+W1VbacCZLSW3y3:BoiHfO76Eh3MNRMXhWR+W1VbacCZLSS4
TLSH
T1BBE69DE724D510ACC43AC1BD8343EA3BCA6F74391724D6DB56A4A2661E23FD1367AF01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2dacb93be81fc9f51207f6b2bf91757711df9b5d9cd4ae9b4a62917647e32187
MD5 a489c1966ce84dd4e6537c34f50270a1
SHA1 715315039ac3c174a59fe9bb845e466ecb3555d8
SHA512 2541ef6f64e3320cf029b1c501c36e12f35528c3a2f4d1d95d4c91d32a4ee98827073d0a1c24a5f7540b2db009b4e9265ab41cd31e86be47b9b2aed22af2ddeb
TLSH
T122D01222B202013CC01030370592710919C1C60F808540419829862D1B080541E0B441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e29d727a3a2f0e5a74d3acf7ccfd085e375a3f2f55fd3507939185edc89da6c3
MD5 fe21866d18f5491d38769ef3aa00be6c
SHA1 9c09cbbfdbc578694b8292657ca21df0e92c5294
SHA512 43cebef4fe3aa5f37dae2a8468ff30f3527b7f539c72f11c8ce76563085f9e1e7c7431c0e3cc6581784db4646861ef9742fdc3427134d558b25c23f14ea1e859
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 1c1b34a795ba4267960e2ce5b06fcb979de02fe11a4600b7d8b5f9c04ad0f754
MD5 dad63e8512cd786738cf6966df0b8546
SHA1 366826ead5f78b6f9cd8a1e984f5ec80c006fa95
SHA512 5ac4bee2e69084529f216777e8ba56f944a3224b8bb56f3a3401e9aed3ce055ec29fc324100fcffe8d35f6fc9087204d3b8c7cc4699a644fc86efb1713e320ce
TLSH
T1E9D012144E459458FF45ABB156C28541B233F63342530FD79ACB54F6161D3C7E941134
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599f34.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe599f34.TMP
Size 48B
SHA256 6e1e2ed102acf23f35d1373d2d8c39e3fc91562bd040be35f2736b72451ba63b
MD5 90cb94ec7dbea913fbdaf7d79cb80334
SHA1 ffa9ee4ecaca3fd9cf9116e0ac91f722488591b9
SHA512 0a2f1ce6bd4e7130510e9e401aaeb3b60e322c75053475b672131bd6130124c90f31872b595a3d35736def8c227da3119ef7225af52aa5d14ae5fccdf5efcf14
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity
Size 691B
SHA256 e4dd5a3c99c8895e6d1a8cbae2ab8263df46006aa35931ce877584ebe1a86bd4
MD5 2db192703bb08519df44472647c85e76
SHA1 91f7b0edde45ed0a14cec6a41d9e3157a32c9cf3
SHA512 94f2bca9706184eb9b4aa4e1679bfd96759a24de9309ec347c4f7f6240ca82675a2a2ba0885143b19a3945b302339643d944d6d277c08393a2c2df8fce52b894
TLSH
T1D5014EA3913EA8771579597B1D4478156F7AE83541D264F4CB6B412DE0805F38227032
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe598524.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity~RFe598524.TMP
Size 356B
SHA256 efc6bbb0286c611c150505999294594fce725b8d80998e7bf75c2bc6f8fb322d
MD5 ae73ca66f189b63c36bd58810fc870be
SHA1 fa64a62c2fd1ca0361a18cc92a5c6ffe892cd918
SHA512 dd28777b25edc4dbf8463132b3c95f45e826061c3939499809847b0501c27bec97f12f43c27fc7b5e5784dd97a6f52c96ba92d81203010a73e9a2f912187ca40
TLSH
T19AE02693923EA9A610B896672C80B809BF36E93142D268E8C666416CF0915F6DA27033
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
Size 6KB
SHA256 59f416c003f3a05cc2cc30d532bcac3497eb455c5a8c9e415cc167deed1dddf8
MD5 f59d8c9419736c2f70297a7ba355bf73
SHA1 39222e9878b73e9be9430aea66b12538ef3602bf
SHA512 14c7846e778d63e815c70b08a743a57801be60cb6c559e782850d450d4a85046137d646cfe400f40b8bacba375947c2de40fe66a63fead163c5c9348b5bc0930
SSDEEP 96:stg/dzDOVb95k+to5h16Z0ds7/x+6MhmuecJx+1ejebK+gr28XM1C7K:stUp8JondsV+Fdx+QjR1G6K
TLSH
T1CED1D7065E24A87B4CC7F109BA35BB03E2F9607166D52E48EBF8461C14DB6DC6307D4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe596075.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences~RFe596075.TMP
Size 5KB
SHA256 70c48a1c9559eb30d7597767e16304ac7b4339ddf7d550db616596e5e6f622a1
MD5 6a58b23008a36952ad210282570ebb87
SHA1 f1d295ec9c379b92f8cab418edabcd3b575e1972
SHA512 2035d1440c98624b6373b3a1b8ed557ba7f5f5d3baa62300ac00f81459292bf6ec058681ffcb04afc060a24eca8d79d15b34adae01fa2e51a2a5c6f8d95757ef
SSDEEP 96:stg/dzDOVb95kRo5h16ZZs7/x+6MhmuecmjebK+gu28XM1C7K:stUp8Go+sV+FijRUG6K
TLSH
T1D8C1A5065E28687B4CC6F218BA297B03E2F9607271D52E58EBF8461C08EB5DC631790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 2KB
SHA256 6fd9df13a9cf98fd51c227513a19e96c6ed93182875fd69f958739a01a46b3ff
MD5 2129dda3e106649810f4c7e994865724
SHA1 d239ae7117d8aba842cf9b513ff42fe9f1272455
SHA512 1cbdff87c268187ca4aa0b0eaed10d94ad070a6bd54d2f59f9273faecbee92e88e09b6d80374b4b2664255f7539ae99abf3e83ff83fa857e9ca50ac8cbf69d0e
TLSH
T1465187336C21AB77CEF29A487A4A3F134E756052EBA22F1099DD0B0C11D759C6712C76
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 3KB
SHA256 b6c80e5a963f566e7c164deeb6bef213e09a2afd9d1354adeaba9c2d8e57a16f
MD5 073c325744bc5115739481eb7e9f0572
SHA1 990537fd9364f0ad811d4007607234bbd19ab75b
SHA512 7c5548594f7e1a7ef54f87528d30f24312322c3a3d34bbe3cd46ab62c009f20b5ac87b9fbf7eba6d483ac64b8247e561cf7dd5868f0e7e88a1be7b1a162ce244
TLSH
T10161953B6D71AA378EF2DA44B9862B126FA56023E6D13F54C9EC0F0C11D729C2352C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 15KB
SHA256 8a8c42c08d7d12486873aa4d44490513c630fda56a9eb58f0852b5747b479e93
MD5 824fd8a26099a385f609b3f2f34c206f
SHA1 2c66b1da8c580a1b16a27c2cc2ca1bcf1fd3f37f
SHA512 c1d389ba79338300cf0ff395105315b6716280185a10271d121116a8e9d6d0eca23a645738ad53c002a5473f6e210c1cbfacedfea613110567afd22a2e62a060
SSDEEP 384:o+aQikB+z/xvxjg/qhEwNBS5WHemRO779zV:n/UxvxjgC+IriFV
TLSH
T1C572AF2B58793D33AAF3E6447A5D0B4B8EB8987291C23FB889ED5F0D16D73D40302956
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5906fb.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State~RFe5906fb.TMP
Size 1KB
SHA256 21e90f881ab361c673c3b466a46f333b3dde3409c36499ebc666a442e1d965ff
MD5 90e918fd85cb77e77342ad45650125ce
SHA1 2652e84fa8321b0eabbc965a4c8fd95490ca5313
SHA512 8e31b4e59ae4bf56839b396cd55025be4a96a37b14a4075e124c16200dade2a18e7d5572bfc28f369393be4f2b0d632bf54bbb2e32a90194efaaebe88c04d113
TLSH
T1EB21B7B3E8A05B32EEA596997356BF171E216027D3D04F0094DD8B0C12F718DEA3AC36
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2584-29-0x00007FF82DC60000-0x00007FF82DC61000-memory.dmp

Download

memory/5600-91-0x00007FF82DC60000-0x00007FF82DC61000-memory.dmp

Download

memory/5740-257-0x00007FF809A40000-0x00007FF80A85B000-memory.dmp

Download