fb8746e50fb74dd200bfd88ae2b4af807c21910727d13b70b596e3caa3773a02

Analysis

max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 07:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 10.8MB
Sample260729-hy8rrabl21
SHA256 fb8746e50fb74dd200bfd88ae2b4af807c21910727d13b70b596e3caa3773a02
MD5 2d05a76bfa83af0d237ffc041105fabf
SHA1 a943ddbf417497670150a232b6f2c51d650c82ea
SHA512 4445b3ab63fe1c7b5bc4a0235ef86150fe934b081d824d50251da6dd1c130ba72ae3b1576f2100a053b73a91c1cf92d6ca1e7dbf017203226cdd7852b0c26e67
SSDEEP 98304:IrVsxvcIDVLdyfrje0knFmTyBMiQTrZ28MRiBFkzEm9YFbOH6TsL+ZEn+SAul:ukPyfAFAAwBFkom9YQ6TuwK9
TLSH
T15EB66C03F6A541E8C0AEC5B4C35AA633EB72B88D493072AF5BD44B212F66F506F1C759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery trojan

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
49	2440	2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
49	2440	2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 13 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_1698752190\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_1698752190\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_1698752190\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_1685661394\keys.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_1685661394\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_346312252\ct_config.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_346312252\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_1685661394\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_1685661394\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_1685661394\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_346312252\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_346312252\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5704_346312252\manifest.fingerprint	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3936	msedgewebview2.exe
3936	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
5704	msedgewebview2.exe
5704	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2440	2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
2440	2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
2440	2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2440 wrote to memory of 5704	2440	2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	89
PID 5704 wrote to memory of 4380	5704	msedgewebview2.exe	90
PID 5704 wrote to memory of 4740	5704	msedgewebview2.exe	91
PID 5704 wrote to memory of 4740	5704	msedgewebview2.exe	91
PID 5704 wrote to memory of 4740	5704	msedgewebview2.exe	91
PID 5704 wrote to memory of 4740	5704	msedgewebview2.exe	91
PID 5704 wrote to memory of 2620	5704	msedgewebview2.exe	92
PID 5704 wrote to memory of 2112	5704	msedgewebview2.exe	93
PID 5704 wrote to memory of 2112	5704	msedgewebview2.exe	93
PID 5704 wrote to memory of 2112	5704	msedgewebview2.exe	93
PID 5704 wrote to memory of 1832	5704	msedgewebview2.exe	94
PID 5704 wrote to memory of 1832	5704	msedgewebview2.exe	94
PID 5704 wrote to memory of 1832	5704	msedgewebview2.exe	94
PID 5704 wrote to memory of 1832	5704	msedgewebview2.exe	94
PID 5704 wrote to memory of 1832	5704	msedgewebview2.exe	94
PID 5704 wrote to memory of 4504	5704	msedgewebview2.exe	95
PID 5704 wrote to memory of 4504	5704	msedgewebview2.exe	95
PID 5704 wrote to memory of 4504	5704	msedgewebview2.exe	95
PID 5704 wrote to memory of 4504	5704	msedgewebview2.exe	95
PID 5704 wrote to memory of 4504	5704	msedgewebview2.exe	95
PID 5704 wrote to memory of 1204	5704	msedgewebview2.exe	99
PID 5704 wrote to memory of 1204	5704	msedgewebview2.exe	99
PID 5704 wrote to memory of 1204	5704	msedgewebview2.exe	99
PID 5704 wrote to memory of 5420	5704	msedgewebview2.exe	100
PID 5704 wrote to memory of 5420	5704	msedgewebview2.exe	100
PID 5704 wrote to memory of 5420	5704	msedgewebview2.exe	100
PID 5704 wrote to memory of 3936	5704	msedgewebview2.exe	101
PID 5704 wrote to memory of 1976	5704	msedgewebview2.exe	102
PID 5704 wrote to memory of 1976	5704	msedgewebview2.exe	102
PID 5704 wrote to memory of 1976	5704	msedgewebview2.exe	102

C:\Users\Admin\AppData\Local\Temp\2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Downloads MZ/PE file
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2440
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=2440.2264.2675357075392661994 /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5704
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView /prefetch:4 /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x104,0x194,0x7ff9d7885fd8,0x7ff9d7885fe4,0x7ff9d7885ff0
    3⤵
    PID:4380
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1768 --field-trial-handle=1772,i,7345879578975113197,994328597231983800,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764
    3⤵
    PID:4740
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2184 --field-trial-handle=1772,i,7345879578975113197,994328597231983800,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764
    3⤵
    PID:2620
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2292 --field-trial-handle=1772,i,7345879578975113197,994328597231983800,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764
    3⤵
    PID:2112
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3516 --field-trial-handle=1772,i,7345879578975113197,994328597231983800,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764 /prefetch:1
    3⤵
    PID:1832
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4012 --field-trial-handle=1772,i,7345879578975113197,994328597231983800,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764 /prefetch:1
    3⤵
    PID:4504
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2076 --field-trial-handle=1772,i,7345879578975113197,994328597231983800,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764
    3⤵
    PID:1204
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4932 --field-trial-handle=1772,i,7345879578975113197,994328597231983800,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764
    3⤵
    PID:5420
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4908 --field-trial-handle=1772,i,7345879578975113197,994328597231983800,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3936
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView" --webview-exe-name=2026-07-29_2d05a76bfa83af0d237ffc041105fabf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=3.2.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4680 --field-trial-handle=1772,i,7345879578975113197,994328597231983800,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:f958809fba446e00b7afb9e96657cd302fa7f764
    3⤵
    PID:1976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 64c495aafd5ae9486544637c34c9f190273165260741bc91700ceb0878105019
MD5 b5dcae177893ac1466d087d844941155
SHA1 184cf65699bfca30bb5c430abc77c40f03383cf0
SHA512 2d9bedb88c639db10263aa789770fff7019865e4133f32fb1782a96dd832590d7e43d923638c17a2f27851c2c5486953049635d5e63fad29966fb794a4155252
TLSH
T12AD01212B3010134C13026331463B5480840C50B408540469939856D5E084501A07441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 88ed8d95b7ffb3dd679ff73d15a2967a4221bc0aab0d763ce04e9e05c7536d1a
MD5 b146364675bcc16f38c138a1caa0341f
SHA1 8fd6feea7927568c1b8dc49cb4f0dbdce3b41923
SHA512 5d2ce4aaa99fe3735759018fc262bcec40ae3f9d56fc8512f0855e943ce25fe9a7d5403151c6c7f505f3a28a507021db53b07e0b37853d87d495ad7cd461e0a3
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

2979354b-c180-4557-819d-5091a0893738.tmp

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\2979354b-c180-4557-819d-5091a0893738.tmp
Size 6KB
SHA256 44dedb0d5a279386e2fedec77c7d7eed2d261a61fe5a3b7a8b6c767673f0c6f8
MD5 7c79f947d76294a738c28eaab05acf0e
SHA1 8ee1827681b72f37d70629969aa39303ebc27aac
SHA512 fa0419c96a8b17cdbc8e40ab35e9bc9c9d816b2891e99aeb66d7aff4dbc4022dfa97abb85b6591b08d7a9f2bf955ce708d4edf25ea7b4ef6ef1cb7b91cdb197f
SSDEEP 96:stc/d/Z5b5Xb9+kIo5h16Z0ys7/x+6MhmuecJY+1ejeoK+g/B28XM1C7K:stQFr10PonysV+FdY+Qj4HG6K
TLSH
T197D1C8166E28A9BB4CC6E109BA397B13E2F66572B2D11D58E7F8471C04DA7CC630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 679e1c9219a467c0b3b8f5ba97438ddfdd6038256f882a7cf5367e70eec45f5f
MD5 c9e9093ab1ea357ab349d2dcbf8c85d7
SHA1 b76acb820e8b8adc26651e476e3e57c98be86ed0
SHA512 a97e9f6744514498b740a67e0bc5c1b65356434baebdf1f7182632c4170e69938286a7ef3d98f5ab5f889956d03ce67d3c5835be0e3cd83930a34e523107e680
TLSH
T1B3A002310248C206D167677819D201C037398C146BC7578641A060A8C8697428547400
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599b7b.TMP

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe599b7b.TMP
Size 48B
SHA256 87de765c4d3b993cf609863b0509d8881d5eb69d77dd52b76986950152f182d7
MD5 87e3d87b1f2e6cb73495d355ae6b7cdd
SHA1 06704acc40806db098983d9f63318d6c3ae67318
SHA512 452bb67ea5bda3e20f9cc3d459c1a04fa9f638a5220cb8259e880966867327ac0994ef9c9d0351aaf8ea20a4276c91b054b7a71a810cd7e9b5a9d3b53ffa1581
MD5 SHA1 SHA512

Submit Download

23fbc0fd-b9c7-4e32-877e-54875b60f25f.tmp

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Network\23fbc0fd-b9c7-4e32-877e-54875b60f25f.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Network\Network Persistent State
Size 369B
SHA256 6eb59285b6294e305722ecc1c3ec1a810823a4477cf5c417f7fb5bcf660ecee7
MD5 48e9f00b46e822726c0bb275694af4e1
SHA1 0b792868da0e91c5a413c68743f4b825b0d81368
SHA512 29cbe038cac347afc28b9e90e08be366f1e1477a34566c80ed6d768e10f90157f4d09419cc4b21bfe743869a7c3a0688b783b3dc01c62fb2095e904e4fbd1475
TLSH
T1D2E0C092C2E5CEFE4B9453B42F347803CA7D080653281E1ACAFDBB7E5392479D51040B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Network\Network Persistent State
Size 589B
SHA256 9ad42e0ab1fad0fa0a8c05d4bf24f9e5e13f39fc2b312fe5e74dd7728532f78c
MD5 5b08e5fe4602ed6d62c1278dc9f4a6f5
SHA1 acd97e632d6bb9731efb9180ea736db937a0b81f
SHA512 70eac0abe40642deadfd58eba96507f5355ec0a009f7a72489249f721841983415df9a2fe60ddb5ff1f83e0fb581d25ca42a7a5a1d4c894a5c46a5d390b59815
TLSH
T1CAF081D1C2EAC77D4AA513F41E347413C92E040D51342E1ADDFABBBA57D1475D21090B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a5f77.TMP

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Network\Network Persistent State~RFe5a5f77.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Network\TransportSecurity
Size 355B
SHA256 4a7e2ddc67902c2128746223263e32874d6bbb581374076924cf8143c5be966c
MD5 99400980b439632e8ad10d58a9dff32a
SHA1 4ab7a942041f47c969ed27667b0df7c860612831
SHA512 d660dc3c1358ab384baa01b93aed8edff37087e2d01e151c97e1c921782bc2370abeaf83903d9ee628481704e72e51e2d93ab5b03686e7e555d402003542774f
TLSH
T1BAE0269740ABA13390B88A6709887E502D79E13A0691DDE8C7CB453DE0C94B77603073
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5a6eb9.TMP

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Network\TransportSecurity~RFe5a6eb9.TMP
Size 355B
SHA256 e1c39ccae4b8ccfefc4d236af94135755e10fcf59720e8f68dd104a0a4561d5e
MD5 8aba031f9c83772471070acf62ada775
SHA1 bb47819f5c92f069b2e712822a15367defd38dfb
SHA512 9a9c7e70a6dfba93b5689561c20e9713b6d616e75d03b61d55a2f7cc1ca9948276a66c825bba1b2c59fd6c14bcd182668546b56e451d5d33374116d641173ada
TLSH
T170E020A7406B91A3A07C0A3A1D847D615D76E93D05D25CECCBDF413E60A04B7D603127
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Preferences
Size 6KB
SHA256 805675343cf53820a8e72f75ef6e044d0731ceae82e28ac2713f625d04345b37
MD5 84a4156b0ad09a39dcb9171795ec515f
SHA1 0cbfbab604d96b6ae55502940a98f0065ac9df37
SHA512 39391c8492b89ad81af4eb683c95201b8b5e135cf1c8fc0e400688f6e70bd3df26c2e32e37fd464bc836477bec0208868fe81d7cf256083392f71e9b54697aca
SSDEEP 96:stc/d/Z5KG5Xb9+kIo5h16Z0ys7/x+6MhmuecJY+1ejeoK+gIM28XM1C7K:stQFrP0PonysV+FdY+Qj4TG6K
TLSH
T155D1C8166E28A9BB4CC6E109BA397B13E2F66472A2D01D58E7F8471C04DB7DC630380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Local State
Size 15KB
SHA256 a78bc815050d0163dcb9947611478fc8449a7f3e840870f50c02e5574d50dfcd
MD5 f8f378410435669501872124ceedcc77
SHA1 88b69449bcc44e4c7b4724fb112e723ed8d6d91b
SHA512 24646d7378f129a5fae16aaa0cd7b945c50db7329148b01ce37ff98e86b75114501883dfd8c3f2b159deb3bbe3fe0d8a2f904046071aa401d5b4eb7dba208078
SSDEEP 384:J+aQikB+z/xvxjg/qhETNBS6mJY7gIn259zO:0/UxvxjgC+z82gIn25FO
TLSH
T167729E2BA4287E7795F3EA057A4D174BDBB988A2D2C27D7849FD5F0C06873A40303916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Local State
Size 2KB
SHA256 dfb1c515ff569b9f71a1f4fc17840015603b06b9b8bdbf7af81fbc23b91d6bd2
MD5 ff3a86471092c63a17fa29d2bdc47070
SHA1 8845b72ec01dae298fc0080918b73148171db9ca
SHA512 b50d7034b132df974d288365a1e37a46ddd11cab9c2a9207b900597b271bc50d17c8eae4047e31a9c847b6c442e98a348c71d7fc11c4c4b9b78c1fd867393b48
TLSH
T1C7516573B8149BF789E34B08B94A3B279A7A91A9DB912F149ADC0B0C409B25D5303C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Local State
Size 3KB
SHA256 abb4dfb79c32be3e088866db4826a9ea0438d476b74416897d94acfc0a0042bd
MD5 5d74c4bbec1c5359baf92023878685f5
SHA1 d3cd1785eb7e930749f4a453dea73230f4ac890d
SHA512 25426394c4ea935be90243fda8d6452b8c4a157d652b987fdb36c279a3237638b270c51a2ed94537f01db14ad2087c87e6d9b6abe460a85d54c217b721d20f59
TLSH
T132618567A934DABB4DF39A04B98A2B1766A58167E6C13F54CAEC0F0C009B3981302C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe594963.TMP

Path C:\Users\Admin\AppData\Local\com.jelleglebbeek.youtube-dl-gui\EBWebView\Local State~RFe594963.TMP
Size 1KB
SHA256 f18fe44d1541f6d098535f9e01fbdce8dfc36a9b62a5d2048d0e936e38096ccc
MD5 208da0097bf99d34be5c37b638a409c2
SHA1 957eda6fef7317b8012e1b56aa2894493ca8b029
SHA512 f2058ffa6483df308f71e1a52f9d0913f5b4d80e6be7bb523d9b151159f570106f8b6b3d7aa0bce6b024c7238bf31e1209ad8fb2e5b86de01376a592b26b9771
TLSH
T1E62165F3F4248BF38CD35749714A7A2B2D2591AED3919E0469DC4B0C41AB24DA617D33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1204-237-0x00007FF9F82E0000-0x00007FF9F82E1000-memory.dmp

Download

memory/1204-236-0x00007FF9FA0C0000-0x00007FF9FA0C1000-memory.dmp

Download

memory/1832-104-0x00007FF9F9450000-0x00007FF9F9451000-memory.dmp

Download

memory/3936-301-0x0000022054350000-0x0000022054351000-memory.dmp

Download

memory/3936-302-0x0000022054350000-0x0000022054351000-memory.dmp

Download

memory/3936-292-0x0000022054350000-0x0000022054351000-memory.dmp

Download

memory/3936-304-0x0000022054350000-0x0000022054351000-memory.dmp

Download

memory/3936-303-0x0000022054350000-0x0000022054351000-memory.dmp

Download

memory/3936-300-0x0000022054350000-0x0000022054351000-memory.dmp

Download

memory/3936-299-0x0000022054350000-0x0000022054351000-memory.dmp

Download

memory/3936-294-0x0000022054350000-0x0000022054351000-memory.dmp

Download

memory/4740-28-0x00007FF9F9450000-0x00007FF9F9451000-memory.dmp

Download