Overview

overview

10

Static

static

10

2026-07-29...oa.exe

windows10-2004-x64

7

2026-07-29...oa.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    151s
  • max time network
    155s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/07/2026, 03:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-29_14a346d7b1ea9e166daa80b6da7690f8_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
  • Size 143.5MB
  • Sample260729-eb17lsdh76
  • SHA256 7c428c46f60e177abd43392dfb319f05cde9b8acb6552214698f36c1b68ef57c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecution

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 24 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Kills process with taskkill 1 IoCs
    defense_evasion
  • Modifies data under HKEY_USERS 9 IoCs
  • Modifies registry class 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 9 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-29_14a346d7b1ea9e166daa80b6da7690f8_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-29_14a346d7b1ea9e166daa80b6da7690f8_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:4656
    • C:\Users\Admin\AppData\Local\Temp\2026-07-29_14a346d7b1ea9e166daa80b6da7690f8_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
      C:\Users\Admin\AppData\Local\Temp\2026-07-29_14a346d7b1ea9e166daa80b6da7690f8_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:980
      • C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\playwright\driver\node.exe
        C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\playwright\driver\node.exe C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\playwright\driver\package\cli.js run-driver
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:5948
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-field-trial-config --disable-background-networking --disable-background-timer-throttling --disable-backgrounding-occluded-windows --disable-back-forward-cache --disable-breakpad --disable-client-side-phishing-detection --disable-component-extensions-with-background-pages --disable-component-update --no-default-browser-check --disable-default-apps --disable-dev-shm-usage --disable-edgeupdater --disable-extensions --disable-features=AvoidUnnecessaryBeforeUnloadCheckSync,BoundaryEventDispatchTracksNodeRemoval,DestroyProfileOnBrowserClose,DialMediaRouteProvider,GlobalMediaControls,HttpsUpgrades,LensOverlay,MediaRouter,PaintHolding,ThirdPartyStoragePartitioning,Translate,AutoDeElevate,RenderDocument,OptimizationHints,msForceBrowserSignIn,msEdgeUpdateLaunchServicesPreferredVersion --enable-features=CDPScreenshotNewSurface --allow-pre-commit-input --disable-hang-monitor --disable-ipc-flooding-protection --disable-popup-blocking --disable-prompt-on-repost --disable-renderer-backgrounding --force-color-profile=srgb --metrics-recording-only --no-first-run --password-store=basic --use-mock-keychain --no-service-autorun --export-tagged-pdf --disable-search-engine-choice-screen --unsafely-disable-devtools-self-xss-warnings --edge-skip-compat-layer-relaunch --disable-infobars --disable-search-engine-choice-screen --disable-sync --enable-unsafe-swiftshader --no-sandbox --disable-blink-features=AutomationControlled --disable-extensions --user-data-dir=C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn --remote-debugging-pipe --no-startup-window
          4⤵
          • System Time Discovery
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:2008
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ff9ccbdc728,0x7ff9ccbdc734,0x7ff9ccbdc740
            5⤵
              PID:876
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-sandbox --disable-breakpad --enable-unsafe-swiftshader --user-data-dir="C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1608,i,3836490313170914837,10466801258539968030,262144 --field-trial-handle=1908,i,7144949850344613751,7265720517326050167,262144 --enable-features=CDPScreenshotNewSurface --disable-features=AutoDeElevate,AvoidUnnecessaryBeforeUnloadCheckSync,BoundaryEventDispatchTracksNodeRemoval,DestroyProfileOnBrowserClose,DialMediaRouteProvider,GlobalMediaControls,HttpsUpgrades,LensOverlay,MediaRouter,OptimizationHints,PaintHolding,RenderDocument,ThirdPartyStoragePartitioning,Translate,msEdgeUpdateLaunchServicesPreferredVersion,msForceBrowserSignIn --variations-seed-version --mojo-platform-channel-handle=1904 /prefetch:2
              5⤵
                PID:5592
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn" --force-high-res-timeticks=disabled --metrics-shmem-handle=2004,i,8582542938585489569,16474479082657390959,524288 --field-trial-handle=1908,i,7144949850344613751,7265720517326050167,262144 --enable-features=CDPScreenshotNewSurface --disable-features=AutoDeElevate,AvoidUnnecessaryBeforeUnloadCheckSync,BoundaryEventDispatchTracksNodeRemoval,DestroyProfileOnBrowserClose,DialMediaRouteProvider,GlobalMediaControls,HttpsUpgrades,LensOverlay,MediaRouter,OptimizationHints,PaintHolding,RenderDocument,ThirdPartyStoragePartitioning,Translate,msEdgeUpdateLaunchServicesPreferredVersion,msForceBrowserSignIn --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:11
                5⤵
                • System Time Discovery
                PID:5160
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn" --force-high-res-timeticks=disabled --metrics-shmem-handle=2160,i,17642988508834220962,1798445767693297392,524288 --field-trial-handle=1908,i,7144949850344613751,7265720517326050167,262144 --enable-features=CDPScreenshotNewSurface --disable-features=AutoDeElevate,AvoidUnnecessaryBeforeUnloadCheckSync,BoundaryEventDispatchTracksNodeRemoval,DestroyProfileOnBrowserClose,DialMediaRouteProvider,GlobalMediaControls,HttpsUpgrades,LensOverlay,MediaRouter,OptimizationHints,PaintHolding,RenderDocument,ThirdPartyStoragePartitioning,Translate,msEdgeUpdateLaunchServicesPreferredVersion,msForceBrowserSignIn --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:13
                5⤵
                  PID:3732
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-back-forward-cache --disable-background-timer-throttling --disable-breakpad --force-color-profile=srgb --remote-debugging-pipe --allow-pre-commit-input --disable-blink-features=AutomationControlled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3572,i,17368238585616372098,2194230639219255053,2097152 --field-trial-handle=1908,i,7144949850344613751,7265720517326050167,262144 --enable-features=CDPScreenshotNewSurface --disable-features=AutoDeElevate,AvoidUnnecessaryBeforeUnloadCheckSync,BoundaryEventDispatchTracksNodeRemoval,DestroyProfileOnBrowserClose,DialMediaRouteProvider,GlobalMediaControls,HttpsUpgrades,LensOverlay,MediaRouter,OptimizationHints,PaintHolding,RenderDocument,ThirdPartyStoragePartitioning,Translate,msEdgeUpdateLaunchServicesPreferredVersion,msForceBrowserSignIn --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
                  5⤵
                    PID:2000
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-back-forward-cache --disable-background-timer-throttling --disable-breakpad --force-color-profile=srgb --remote-debugging-pipe --allow-pre-commit-input --disable-blink-features=AutomationControlled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3588,i,2419879584250668686,9312234434502605369,2097152 --field-trial-handle=1908,i,7144949850344613751,7265720517326050167,262144 --enable-features=CDPScreenshotNewSurface --disable-features=AutoDeElevate,AvoidUnnecessaryBeforeUnloadCheckSync,BoundaryEventDispatchTracksNodeRemoval,DestroyProfileOnBrowserClose,DialMediaRouteProvider,GlobalMediaControls,HttpsUpgrades,LensOverlay,MediaRouter,OptimizationHints,PaintHolding,RenderDocument,ThirdPartyStoragePartitioning,Translate,msEdgeUpdateLaunchServicesPreferredVersion,msForceBrowserSignIn --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
                    5⤵
                      PID:3372
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn" --force-high-res-timeticks=disabled --metrics-shmem-handle=4192,i,4858766285811380554,17129728852151594762,524288 --field-trial-handle=1908,i,7144949850344613751,7265720517326050167,262144 --enable-features=CDPScreenshotNewSurface --disable-features=AutoDeElevate,AvoidUnnecessaryBeforeUnloadCheckSync,BoundaryEventDispatchTracksNodeRemoval,DestroyProfileOnBrowserClose,DialMediaRouteProvider,GlobalMediaControls,HttpsUpgrades,LensOverlay,MediaRouter,OptimizationHints,PaintHolding,RenderDocument,ThirdPartyStoragePartitioning,Translate,msEdgeUpdateLaunchServicesPreferredVersion,msForceBrowserSignIn --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:14
                      5⤵
                        PID:2876
                    • C:\Windows\system32\cmd.exe
                      C:\Windows\system32\cmd.exe /d /s /c "taskkill /pid 2008 /T /F"
                      4⤵
                      • Executes a command shell one-liner
                      • Suspicious use of WriteProcessMemory
                      PID:4372
                      • C:\Windows\system32\taskkill.exe
                        taskkill /pid 2008 /T /F
                        5⤵
                        • Kills process with taskkill
                        • Suspicious use of AdjustPrivilegeToken
                        PID:3376
              • C:\Windows\system32\svchost.exe
                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                1⤵
                  PID:3112
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                  1⤵
                  • Modifies data under HKEY_USERS
                  PID:1400

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      MSVCP140.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\MSVCP140.dll
                      • Size 628KB
                      • SHA256 7c26614e1d733892c2deac7e245ce115504b1d80592dd0a01b08e3e5a55f89ca
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      VCRUNTIME140.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\VCRUNTIME140.dll
                      • Size 117KB
                      • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _asyncio.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_asyncio.pyd
                      • Size 71KB
                      • SHA256 2d13fa4b5ef94464bb94e2ec613eceb5bbad70c8e7e05f0e8ef25f6078397cdc
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _bz2.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_bz2.pyd
                      • Size 84KB
                      • SHA256 76a33e2baa3880aa46290cc7d5810b3155c5e2f5a1cc7d3f7b751f6434144ada
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _hashlib.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_hashlib.pyd
                      • Size 67KB
                      • SHA256 5eb4a2aa9e28b49cb2a4f6ecee21f3c2b629b43a0709bad1d7e6204bac74eac2
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _lzma.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_lzma.pyd
                      • Size 155KB
                      • SHA256 f221ed5f1c2789aa357f3c2dc4cd22af134b4b91acb3fb78f9fa5f7f9a7b62e4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _overlapped.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_overlapped.pyd
                      • Size 56KB
                      • SHA256 579438a55311bf39b32145b8dec7846bd6830dfa461345236a37cc0c833a4a51
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _queue.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_queue.pyd
                      • Size 34KB
                      • SHA256 6d77d15d668cb5ddff53cff1479dffc97db5858451d4b98f6e60a23cfb529e01
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _socket.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_socket.pyd
                      • Size 84KB
                      • SHA256 ba944001aa6b53350f8c64e93643742abf1a08dd07c7dbbc13996e7d4d8a9efa
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _ssl.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_ssl.pyd
                      • Size 177KB
                      • SHA256 1cf939510359f5aa3c5f51a0ad994d9b819f5603dd100872cd30a1e25cd83f05
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _uuid.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_uuid.pyd
                      • Size 27KB
                      • SHA256 e196b2a878b8a57976e9ab5d7610e35a85e2fe3043fd3952934a54b415bd2854
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _wmi.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\_wmi.pyd
                      • Size 38KB
                      • SHA256 ca38a50c27413a5acfd14b30b0433fcf80a64ad0020e41aceeb3666f8439aba4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      ada92cb5d92a588d1b93__mypyc.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\ada92cb5d92a588d1b93__mypyc.pyd
                      • Size 221KB
                      • SHA256 58c25c988641247cc153a987d1080dceb65c3a5cea68be96f0ac5b29c700ab05
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      cd.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\charset_normalizer\cd.pyd
                      • Size 10KB
                      • SHA256 77e1c9c2679ea4855d5b97dba2666c6b4cfe32636945f5bb8399ff2c7ef1b050
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      _greenlet.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\greenlet\_greenlet.pyd
                      • Size 70KB
                      • SHA256 9a899a312c56d5b4028adf00924dfb35650e43ed962a4812feac2f043c971345
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      libcrypto-3.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\libcrypto-3.dll
                      • Size 5.0MB
                      • SHA256 09499e186cf0e434ffa17ad153aa9a66d6048c54a2c03b823e2a06c49d9affe4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      libssl-3.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\libssl-3.dll
                      • Size 776KB
                      • SHA256 28c395290279fa4f4f54a57b85cd66d853895f925fefb8f6fdebc0d8b1cdd07c
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      main.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\main.dll
                      • Size 28.4MB
                      • SHA256 910938fcab45aba8ef44cb35692e0a14db42a55a06bf732d4e7e06125fa726fb
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      browsers.json
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\playwright\driver\package\browsers.json
                      • Size 1KB
                      • SHA256 ee39bc924bc3d1bd895626c2910f1292d109bbfeeb5abd113acb45e1951cc942
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      cli.js
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\playwright\driver\package\cli.js
                      • Size 839B
                      • SHA256 f1c4075aef116c766092250d7f37b3249a7cee6465d953207fc38c8f6145becd
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      coreBundle.js
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\playwright\driver\package\lib\coreBundle.js
                      • Size 3.2MB
                      • SHA256 6be5c2ea035554e9b184b1dbc7aa5e7f1fb428dd1b5c202022858dcfae9bee27
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      utilsBundle.js
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\playwright\driver\package\lib\utilsBundle.js
                      • Size 3.0MB
                      • SHA256 1295945f0054d2504c9b751945b15aa3c672530ad5a340f3f9636e5e238f304a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      package.json
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\playwright\driver\package\package.json
                      • Size 895B
                      • SHA256 0c4abd3320db6680ae6197533adb383a507023da72de8076a63aa5a95e2b66de
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      python313.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\python313.dll
                      • Size 5.8MB
                      • SHA256 3a7a6170ea840bf2a2a76d05b687b946fcdc8d0cfedfe159012b38f1e8959a7c
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      select.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\select.pyd
                      • Size 32KB
                      • SHA256 a208997eb871b5c7785eb9bcc6a22ba8c43262255b59a3394fbe9912f38b4692
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      unicodedata.pyd
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\unicodedata.pyd
                      • Size 696KB
                      • SHA256 7f8d28574732959cdb1188127fe3494c3618b602eede69c0a71846f0b5cc8a15
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      vcruntime140_1.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\onefile_4656_844524_kBsQQvKNxMA\vcruntime140_1.dll
                      • Size 48KB
                      • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      CrashpadMetrics-active.pma
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\CrashpadMetrics-active.pma
                      • Size 1024KB
                      • SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      settings.dat
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Crashpad\settings.dat
                      • Size 40B
                      • SHA256 aeac4c49b327a1f3376330fba6adcdfe9fb169e9c1fd0e11da348b59be87961f
                      • MD5 SHA1 SHA512
                      Submit Download

                      Account Web Data
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Default\Account Web Data
                      • Size 76KB
                      • SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Affiliation Database
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Default\Affiliation Database
                      • Size 52KB
                      • SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      data_2
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Default\Cache\Cache_Data\data_2
                      • Size 8KB
                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      MANIFEST-000001
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Default\Extension Rules\MANIFEST-000001
                      • Size 41B
                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                      • MD5 SHA1 SHA512
                      Submit Download

                      SCT Auditing Pending Reports
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Default\Network\SCT Auditing Pending Reports
                      • Size 2B
                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                      • MD5 SHA1 SHA512
                      Submit Download

                      CURRENT
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Default\Site Characteristics Database\CURRENT
                      • Size 16B
                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                      • MD5 SHA1 SHA512
                      Submit Download

                      data_0
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\GraphiteDawnCache\data_0
                      • Size 8KB
                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      data_1
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\GraphiteDawnCache\data_1
                      • Size 264KB
                      • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      data_3
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\GraphiteDawnCache\data_3
                      • Size 8KB
                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      Local State
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Local State
                      • Size 3KB
                      • SHA256 c5cd22b5f2021520c28267e8b9873c1388561f93a83adc7010eca5c99c531dd4
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      Local State
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Local State
                      • Size 1KB
                      • SHA256 57029850a149be42372a0782f9598d32e097896dd39fa7a6cc568377fc3ac3c7
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      Local State
                      • Path C:\Users\Admin\AppData\Local\Temp\playwright_chromiumdev_profile-uyJ8qn\Local State
                      • Size 3KB
                      • SHA256 d8dfc6ffd937d200d751767eafb5dbf21a8b0bbf5ffbb342cfb8243fc8958a67
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download