fb021e75bb1cc360a37165252c952ef8c976b5532663c780cb968e807b51909b

Analysis

max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 01:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 14.2MB
Sample260730-bc434sap6y
SHA256 fb021e75bb1cc360a37165252c952ef8c976b5532663c780cb968e807b51909b
MD5 fde6d3a2a4d6de1355cfb8482d2154ce
SHA1 daac3d037823a625f26b45bf07eaa630db714d5a
SHA512 342bec6c589453962152b6b09794e5111caa805d1fb3c6b47bc20e8886079cf8ec44e1d7d20a12e76442cb986666792ae4986659bbdd850a8f0561924dc0ff21
SSDEEP 196608:BMk/TSjz4B4zdgVEhoHWblufYCbURBsEi6XahsD4:D/ef4B4zdgVEhoHWblzBsKahsD
TLSH
T14CE6F7217B5A996CD09BC47483878A725A7130DB0B39B9FF448492383F69BF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2940_1624809356\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_749479439\ct_config.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-be.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2940_838843477\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4808_1167604666\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4808_1483160024\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2940_1624809356\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_1012905797\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2940_838843477\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4808_1483160024\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4808_1483160024\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2940_1624809356\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2940_1551825936\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_515224834\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_1465463225\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_749479439\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-it.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_1266074100\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_416034194\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4808_677197991\keys.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_749479439\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4808_677197991\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_1693720255\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-be.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\hyph-la.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-nl.hyb	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 15 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{6614BB17-5928-4DDA-8382-12E2BBD0DEA3}	msedgewebview2.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{207F8396-E578-4542-88AC-8DD6E62824EB}	msedgewebview2.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{58740C43-7E10-45FB-9D15-601E95416E12}	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
7768	msedgewebview2.exe
7768	msedgewebview2.exe
7644	msedgewebview2.exe
7644	msedgewebview2.exe
7888	msedgewebview2.exe
7888	msedgewebview2.exe
2316	msedgewebview2.exe
2316	msedgewebview2.exe
8152	msedgewebview2.exe
8152	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2940	msedgewebview2.exe
3712	msedgewebview2.exe
4808	msedgewebview2.exe
1432	msedgewebview2.exe
6764	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2712	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2712	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4192	2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4192 wrote to memory of 2940	4192	2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	89
PID 2940 wrote to memory of 1056	2940	msedgewebview2.exe	90
PID 2940 wrote to memory of 552	2940	msedgewebview2.exe	91
PID 2940 wrote to memory of 552	2940	msedgewebview2.exe	91
PID 2940 wrote to memory of 552	2940	msedgewebview2.exe	91
PID 2940 wrote to memory of 552	2940	msedgewebview2.exe	91
PID 2940 wrote to memory of 5584	2940	msedgewebview2.exe	92
PID 2940 wrote to memory of 5908	2940	msedgewebview2.exe	93
PID 2940 wrote to memory of 5908	2940	msedgewebview2.exe	93
PID 2940 wrote to memory of 5908	2940	msedgewebview2.exe	93
PID 2940 wrote to memory of 1332	2940	msedgewebview2.exe	94
PID 2940 wrote to memory of 1332	2940	msedgewebview2.exe	94
PID 2940 wrote to memory of 1332	2940	msedgewebview2.exe	94
PID 2940 wrote to memory of 1332	2940	msedgewebview2.exe	94
PID 2940 wrote to memory of 1332	2940	msedgewebview2.exe	94
PID 4192 wrote to memory of 3712	4192	2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	95
PID 3712 wrote to memory of 3296	3712	msedgewebview2.exe	96
PID 2940 wrote to memory of 4356	2940	msedgewebview2.exe	97
PID 2940 wrote to memory of 4356	2940	msedgewebview2.exe	97
PID 2940 wrote to memory of 4356	2940	msedgewebview2.exe	97
PID 2940 wrote to memory of 4796	2940	msedgewebview2.exe	98
PID 3712 wrote to memory of 3452	3712	msedgewebview2.exe	99
PID 3712 wrote to memory of 3452	3712	msedgewebview2.exe	99
PID 3712 wrote to memory of 3452	3712	msedgewebview2.exe	99
PID 3712 wrote to memory of 3452	3712	msedgewebview2.exe	99
PID 3712 wrote to memory of 1736	3712	msedgewebview2.exe	100
PID 3712 wrote to memory of 4892	3712	msedgewebview2.exe	101
PID 3712 wrote to memory of 4892	3712	msedgewebview2.exe	101
PID 3712 wrote to memory of 4892	3712	msedgewebview2.exe	101
PID 3712 wrote to memory of 6028	3712	msedgewebview2.exe	102
PID 3712 wrote to memory of 6028	3712	msedgewebview2.exe	102
PID 3712 wrote to memory of 6028	3712	msedgewebview2.exe	102
PID 3712 wrote to memory of 6028	3712	msedgewebview2.exe	102
PID 3712 wrote to memory of 6028	3712	msedgewebview2.exe	102
PID 4192 wrote to memory of 4808	4192	2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	103
PID 4808 wrote to memory of 1364	4808	msedgewebview2.exe	104
PID 4808 wrote to memory of 2024	4808	msedgewebview2.exe	106
PID 4808 wrote to memory of 2024	4808	msedgewebview2.exe	106
PID 4808 wrote to memory of 2024	4808	msedgewebview2.exe	106
PID 4808 wrote to memory of 2024	4808	msedgewebview2.exe	106
PID 4808 wrote to memory of 4532	4808	msedgewebview2.exe	107
PID 4808 wrote to memory of 5976	4808	msedgewebview2.exe	108
PID 4808 wrote to memory of 5976	4808	msedgewebview2.exe	108
PID 4808 wrote to memory of 5976	4808	msedgewebview2.exe	108
PID 4808 wrote to memory of 912	4808	msedgewebview2.exe	109
PID 4808 wrote to memory of 912	4808	msedgewebview2.exe	109
PID 4808 wrote to memory of 912	4808	msedgewebview2.exe	109
PID 4808 wrote to memory of 912	4808	msedgewebview2.exe	109
PID 4808 wrote to memory of 912	4808	msedgewebview2.exe	109
PID 4192 wrote to memory of 1432	4192	2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	110
PID 1432 wrote to memory of 1536	1432	msedgewebview2.exe	111
PID 3712 wrote to memory of 1084	3712	msedgewebview2.exe	112
PID 3712 wrote to memory of 1084	3712	msedgewebview2.exe	112
PID 3712 wrote to memory of 1084	3712	msedgewebview2.exe	112
PID 3712 wrote to memory of 3888	3712	msedgewebview2.exe	113
PID 1432 wrote to memory of 2376	1432	msedgewebview2.exe	114
PID 1432 wrote to memory of 2376	1432	msedgewebview2.exe	114
PID 1432 wrote to memory of 2376	1432	msedgewebview2.exe	114
PID 1432 wrote to memory of 2376	1432	msedgewebview2.exe	114
PID 1432 wrote to memory of 1528	1432	msedgewebview2.exe	115
PID 1432 wrote to memory of 4052	1432	msedgewebview2.exe	116
PID 1432 wrote to memory of 4052	1432	msedgewebview2.exe	116
PID 1432 wrote to memory of 4052	1432	msedgewebview2.exe	116
PID 1432 wrote to memory of 6344	1432	msedgewebview2.exe	117

C:\Users\Admin\AppData\Local\Temp\2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4192
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --use-fake-ui-for-media-stream --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4192.2532.12412925232016278667 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2940
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView /prefetch:4 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0xa8,0x188,0x18c,0x16c,0x198,0x7ff8a1815fd8,0x7ff8a1815fe4,0x7ff8a1815ff0
    3⤵
    PID:1056
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1736 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
    3⤵
    PID:552
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2212 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
    3⤵
    PID:5584
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2284 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
    3⤵
    PID:5908
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --use-fake-ui-for-media-stream --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3444 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f /prefetch:1
    3⤵
    PID:1332
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3720 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
    3⤵
    PID:4356
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3660 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
    3⤵
    - Modifies registry class
    PID:4796
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4648 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
    3⤵
    PID:8024
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4620 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
    3⤵
    PID:7912
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4700 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:7768
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4468 --field-trial-handle=1740,i,5295010584703230761,18175857947112878840,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a0dfab7b85748f1ca47899f81cef47ae2613248f
    3⤵
    PID:7960
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --force-webrtc-ip-handling-policy=disable_non_proxied_udp --proxy-bypass-list=localhost;127.0.0.1;[::1];*.localhost --proxy-server=http://127.0.0.1:47950 --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4192.2532.10971074971106548542 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3712
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView /prefetch:4 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ff8a1815fd8,0x7ff8a1815fe4,0x7ff8a1815ff0
    3⤵
    PID:3296
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1772 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    PID:3452
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --proxy-server=http://127.0.0.1:47950 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2404 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    PID:1736
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47950 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2492 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    PID:4892
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3408 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3 /prefetch:1
    3⤵
    PID:6028
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --proxy-server=http://127.0.0.1:47950 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3604 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    PID:1084
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --proxy-server=http://127.0.0.1:47950 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4020 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    - Modifies registry class
    PID:3888
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47950 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4684 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    PID:8016
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47950 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4712 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    PID:7796
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47950 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4668 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    PID:3436
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4860 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:7644
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47950 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4324 --field-trial-handle=1776,i,10338736566838723716,1338969101243207426,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5db37a5eca5847dbf3c438fb6947934469b258f3
    3⤵
    PID:7852
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --force-webrtc-ip-handling-policy=disable_non_proxied_udp --proxy-bypass-list=localhost;127.0.0.1;[::1];*.localhost --proxy-server=http://127.0.0.1:47951 --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4192.2532.8917171865344483023 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4808
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView /prefetch:4 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ff8a1815fd8,0x7ff8a1815fe4,0x7ff8a1815ff0
    3⤵
    PID:1364
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1940 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
    3⤵
    PID:2024
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --proxy-server=http://127.0.0.1:47951 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2120 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
    3⤵
    PID:4532
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47951 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2256 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
    3⤵
    PID:5976
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3420 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276 /prefetch:1
    3⤵
    PID:912
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --proxy-server=http://127.0.0.1:47951 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3820 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
    3⤵
    PID:6580
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --proxy-server=http://127.0.0.1:47951 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3624 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
    3⤵
    - Modifies registry class
    PID:6724
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47951 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2052 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
    3⤵
    PID:5428
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47951 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3620 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
    3⤵
    PID:8080
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4760 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:7888
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47951 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4876 --field-trial-handle=1944,i,6197177730910673936,15652434601118108768,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:557e96b06ab3ebe2e22a657f261fa7e0fe076276
    3⤵
    PID:5112
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --force-webrtc-ip-handling-policy=disable_non_proxied_udp --proxy-bypass-list=localhost;127.0.0.1;[::1];*.localhost --proxy-server=http://127.0.0.1:47952 --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4192.2532.8696467469746378874 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1432
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView /prefetch:4 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ff8a1815fd8,0x7ff8a1815fe4,0x7ff8a1815ff0
    3⤵
    PID:1536
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1644 --field-trial-handle=1648,i,10030184645284523561,17528145107440519903,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543
    3⤵
    PID:2376
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --proxy-server=http://127.0.0.1:47952 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=1792 --field-trial-handle=1648,i,10030184645284523561,17528145107440519903,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543
    3⤵
    PID:1528
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47952 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2272 --field-trial-handle=1648,i,10030184645284523561,17528145107440519903,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543
    3⤵
    PID:4052
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3408 --field-trial-handle=1648,i,10030184645284523561,17528145107440519903,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543 /prefetch:1
    3⤵
    PID:6344
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47952 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4460 --field-trial-handle=1648,i,10030184645284523561,17528145107440519903,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543
    3⤵
    PID:4648
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47952 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4548 --field-trial-handle=1648,i,10030184645284523561,17528145107440519903,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543
    3⤵
    PID:4056
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47952 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4404 --field-trial-handle=1648,i,10030184645284523561,17528145107440519903,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543
    3⤵
    PID:4476
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4688 --field-trial-handle=1648,i,10030184645284523561,17528145107440519903,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2316
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47952 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4656 --field-trial-handle=1648,i,10030184645284523561,17528145107440519903,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:2af0605e1a3b92002a78e3e80f73b9a7c576a543
    3⤵
    PID:1504
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --force-webrtc-ip-handling-policy=disable_non_proxied_udp --proxy-bypass-list=localhost;127.0.0.1;[::1];*.localhost --proxy-server=http://127.0.0.1:47953 --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4192.2532.3695239520326735539 /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  PID:6764
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView /prefetch:4 /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ff8a1815fd8,0x7ff8a1815fe4,0x7ff8a1815ff0
    3⤵
    PID:6792
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1772 --field-trial-handle=1776,i,14532917532447104346,2536190484881868896,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e
    3⤵
    PID:6092
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --proxy-server=http://127.0.0.1:47953 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2024 --field-trial-handle=1776,i,14532917532447104346,2536190484881868896,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e
    3⤵
    PID:4676
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47953 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2240 --field-trial-handle=1776,i,14532917532447104346,2536190484881868896,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e
    3⤵
    PID:6196
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3412 --field-trial-handle=1776,i,14532917532447104346,2536190484881868896,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e /prefetch:1
    3⤵
    PID:6996
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47953 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4476 --field-trial-handle=1776,i,14532917532447104346,2536190484881868896,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e
    3⤵
    PID:7576
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47953 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4688 --field-trial-handle=1776,i,14532917532447104346,2536190484881868896,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e
    3⤵
    PID:1808
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4612 --field-trial-handle=1776,i,14532917532447104346,2536190484881868896,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:8152
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --proxy-server=http://127.0.0.1:47953 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView" --webview-exe-name=2026-07-30_fde6d3a2a4d6de1355cfb8482d2154ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4624 --field-trial-handle=1776,i,14532917532447104346,2536190484881868896,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d909a15a2892a5b39877322e8979578558aa090e
    3⤵
    PID:6024

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004EC
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Path C:\Users\Admin\AppData\Local\D3DSCache\bcc2ef54ddd674d5\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
Size 64KB
SHA256 45d326d51fc12b43cc21567b210d4d2cf9d286757e2ee80cb2540c4af9756000
MD5 473fcda1a7f0c2fd53d38be647c94dc4
SHA1 0fe533538da7525a8699e4a438471d0d8b7da21b
SHA512 21bfb59d04f11985288e899d65e8e67d3a8d3d107a90e2e31ff4343cc44df1eb83b913e8bd651cc3f6f968db57df866ee0ab9f42ba6c8a7b0cab7236c4bf54c2
SSDEEP 3:T41HlGlll/l/lXp9ZjrPBY0LlWlxemQlll/ZP:CH0dPBY0cQD
TLSH
T11953124112820517C442037006CA4A943AB46204038304118260D130D459B042571180
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Path C:\Users\Admin\AppData\Local\D3DSCache\bcc2ef54ddd674d5\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
Size 4B
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
MD5 SHA1 SHA512

Submit Download

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Path C:\Users\Admin\AppData\Local\D3DSCache\bcc2ef54ddd674d5\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
Size 4B
SHA256 326410334921c9a003ca819820b2f26e6a31201d54a4b7dec0cf621756e46a94
MD5 22d47fde80501801656894bc91506aa6
SHA1 c5550f5450eca9b24416c56d722b7a6d7d63bfb4
SHA512 8abc97b035bc4a660184b1fd51ef190fc620d4017821d5e9ced6aee82fdc720be05eb412b606c4dcf2edbe354c370609bfc6ea8b5e14b6a26122f37ea5ffc6d2
MD5 SHA1 SHA512

Submit Download

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Path C:\Users\Admin\AppData\Local\D3DSCache\bcc2ef54ddd674d5\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
Size 1KB
SHA256 40928da695b4c88e4f1487f64b20258fe457319908f7b1534ee8874e03fb895b
MD5 febfbea66e6cc686e0709f8a483cfd4e
SHA1 683597e562895538eae3005eb3335b560fccaff9
SHA512 2ae97de729e626afe740417c3b280c6b90e754077b0fe6c23a30b2c12a150dab7f016c299c2c58a892762253102159ad38de05325feac31e3b7a53c5a777b521
TLSH
T1ED112E2C37D60E30F396AA3080766A682077B1055490938D80C043260922808E4B4FA6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2e068849bb839ae539b5eaddaece13faf9bb86f546f0a5776670db3a006c5664
MD5 3e7afd25edc2f3ceb2270d56e60af31e
SHA1 e215230c661d3579b90e560c82fec8fb4c6dc843
SHA512 a13d4b9442362a9e0a3d816f22d3842bccb1797db7ebdb6b7836006467375f9a13d9ed60313a2a649ba76119b22e24b4638be9a248d511872e55fc915d729436
TLSH
T166D0121236020334D83434332402A1482401C21F808E40409C28A51F1E040500D06C43
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 633b1efc611a5b242d72880c63c9535de85a8f47b75fe6e5926defb4c2d90be0
MD5 6745cbecff7779bd77975d217d4d6593
SHA1 d919fd06b6cd8c08f8a5543e20ae9da145c34069
SHA512 21e58001c84f396b2bd39942e2b20e59150d8ea28e216eb9667a73765ec9f155081633060cbaf7879e845fb343040cc9054372a32633644c9d46858716ad6130
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

277b4e10-8b8f-4828-9bd8-db64fc257a71.tmp

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Default\277b4e10-8b8f-4828-9bd8-db64fc257a71.tmp
Size 6KB
SHA256 da643747c89a8808a2e33976d516f5d9fb6c9e250f09aa061758801cd06b47f0
MD5 53289daa3a4977268d427f614e80ec98
SHA1 392a38f1232559ed9801af353a343c67d9e94cd7
SHA512 5f149697792b9cce9371f2d1d00d203fc0f457e26305801f069652d4418472947d26b79ffd3326cf0ffbf71d6e25910bd28b39792d8faa5cf3a6d665a4a18f37
SSDEEP 96:stN/dJa0aRXb9+k5o5h16Z08s7/x+6MhmuecJ2V1ejevK+gDQxm28XM1C7K:stRSCson8sV+Fd2VQjJRpG6K
TLSH
T162D1C7066F24A97B4CC7E609BA35BA43F2F9A07275D51E58E7F9861C04DB6CC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 cb1973cec65ff0c3d683fdd868cf3f009bbb9c73fe16c3f07d6cc8107ab2ab18
MD5 60451a22e8c7083e94d132e756449684
SHA1 ca9c9a6bbe3d95b6ada0a19d12a5854ae0182669
SHA512 d5be10ac9820502a31baedd4f80cfaa2eaa4b96d306ff78149a9e56b4da2b0649db25b19153b6b9a2c63abb6e2447328503a7c607115a57b333fcea605f05bce
TLSH
T140B00253907BB01FD75A037826CF004735335F6997832AAEDDFA9474FC12740A721294
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59afbe.TMP

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59afbe.TMP
Size 48B
SHA256 f58fd7a39f81f19f8bd0220ecc06ccdc8910f68849d919b2fb5b0cbdd317c51a
MD5 beacd858052e1a37a731e8152e176e87
SHA1 3e593754ccb0c99bd1772f69150245d8febed186
SHA512 2c8e98842605e8531c06a315f9c448bace86b503b8da1174def455d1ea74270243e320d26a989a4757cb5290c73e8de80e99e313fd397375d3f38e0e17dfedcd
MD5 SHA1 SHA512

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Default\Extension Rules\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Default\Preferences
Size 6KB
SHA256 51c8a8b0de1da5cb62b5df3db969c1956fd47a18c6c40d2a4dbb97391993397e
MD5 a7ab60fb8450164410d2441865ca1abe
SHA1 7da78c4fc91c07bdb2892258b131c1c60adf8fd4
SHA512 7850cda6c3f64a14fdba7f09f34b56ab2b9956fb82692984f9745fd230ee7b3fa5c3f5b531a7d2d99e86bd430f1af184ad225c50b7446ce5ae6407e651830b36
SSDEEP 96:stN/dJa0BGRXb9+k5o5h16Z08s7/x+6MhmuecJ2V1ejevK+gD+xL28XM1C7K:stRS4son8sV+Fd2VQjJRaG6K
TLSH
T1E8D1C8066E24A97B8CC7E509BA357B13F2F9607275D51E58E7F9461C04DB5DC230390B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Local State
Size 15KB
SHA256 c509970fcbd70de1d27f91fc4b900f25cbcad3598bcbf7602660bfaed723df2d
MD5 fe97a13381e9e539759aa925e531e097
SHA1 2838c4e3a6c3c749c536bd3f4def3214f35157b6
SHA512 6d608d94342eadd0e4fc515c9ada9faac682e5b4ce0ed543a34e6031772944ebfa29a0aca9e102b5d814164e98e1beb2314f42b5955d902f47a32d93b8d5477e
SSDEEP 384:v+aQikB+z/xvxjg/qhECNBSZkinFhRuisdDE9z/:+/UxvxjgC+HRuishEF/
TLSH
T1C1729E2B99793E3395B3EA047959175BEBB8C4B2A5C26EB44AFE5F0C06872D41341807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Local State
Size 2KB
SHA256 3c489683e81318e1a20850e7ea0ac0ade1b94500e56ed08016dfc8b2393f57ef
MD5 753c18b338e19ebd1fa029af074d6420
SHA1 096025f49770d93fbea0c6ba387a777aa0ce6739
SHA512 a6823665ec9ac7033a0dbbbf13f7b9899f956aeae6bc61b0685f0b835cd004bf9f5ccc3c938f34d6a4ce0bd0fea9cfc5faff79cdf7240ea5df71a9b2cf592de3
TLSH
T1705175737E109B379AE25604B9563F23AE75D1A2EB516F50A5EE4B0C01D629C2701C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Local State
Size 3KB
SHA256 208c5fd6a499f0835caa6905eb3670fb4bdad22fbed51162b14b167381e40b88
MD5 96c48b339d08aa842d5e4622bc8caef7
SHA1 b3f382ec9fec9d82ca89df945cf95dfb154d28b6
SHA512 823411b0e745b42184ede8dbd4e956d4e7fc8e3ec8354132865228a961a8832688843a90760ad250826bcb0386c6fa61b9d7afbafaecab36e2e31c72cd842ee6
TLSH
T18D6153776A60DA378EF29A04B8863B17BBA59133EA917F94D5ED0F0C01D72D82741C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe595eb0.TMP

Path C:\Users\Admin\AppData\Local\com.vlads.audio-bridge-app\EBWebView\Local State~RFe595eb0.TMP
Size 1KB
SHA256 02c428eb11936d1e819cd7abbc92c5df22e31e2fb3fc15f9e777342c80e5cf01
MD5 77e63c28944e684a5d858bf50929aaf0
SHA1 b388fb5cbfd59fb5091616a1e937b203b2cda164
SHA512 b3f875754984c288c1eb0816fd584560f4527b298a49ae3ad6ce5327743d0b3fd903b2fc1c8e4a5ffa5a2d573a25e898345386f93528c2f30181e5b5137acf60
TLSH
T1FA2135F2FA908F32AD91664571627A5B6FB08177D2508F00B0DF8B0C02E61DD7B25833
MD5 SHA1 SHA512 TLSH

Submit Download

install_id

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\install_id
Size 32B
SHA256 893ab8b4e0625369c67863d450edb1d5d7ef8aaf6ce522fe136342462eb86d4d
MD5 ae5e1f097e4a72164200b36762456124
SHA1 d61bf2e34dc17e3ae18287bf7ce3b27186438d8c
SHA512 48660527e29f5f71f8653c9e17ac03d9c94922e2e0d0746a19b0fcb645348468217994031e0791de1994923e149a3b90f932444347451e95cd937dd580cb0917
MD5 SHA1 SHA512

Submit Download

pane_count

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\pane_count
Size 1B
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e66249dc82f915dfb769177e226d2cfa932f00cc710231d211dc8f44b161a148
MD5 df3a1dc76d227746fd2ba7d132b682cb
SHA1 20e7e15cd3d3b9f9f65c62bb08ac22b4235ad668
SHA512 9bb23fff2b714ade1945436a6bf844eff9887485df81d2ddd055c6f6dd0856ae15ec0d3af2dece1ebbc19eff345b17b6d335e5e7ef735a21c0e52be149c94fcd
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 15846a44a34c67c8465bb988a8f6ae1f5e635bc070bad35b06be8436a8ec6e8d
MD5 f13dae5ea46e18601600cc7aa0b4a717
SHA1 40b32e2e269a50b4128ea7714bd0519fcb643a7e
SHA512 0fb78f1b2690e270c96f599148e6bb0743f433ae509a9ad249056e0f8f6c41f89b94bf00602402aa59f59f18b5956803eac33b37ee3c1ee8598ee93cfb731e37
TLSH
T127D0121A320341B4C0112173121265291752C50B400550006438861E5A040500917491
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 480B
SHA256 390b376a96e9d312a1697716b7e06cd6c4f10b2600c5a10c4b514c853a268e26
MD5 8aaf2653c742f7bfb5ea6f893f3216f2
SHA1 dd35594c02b96463b9ed3484c8d68dd8b09626f0
SHA512 800da128bcf43f70d81b9564f7bd9039dca01dfe301f9e865e149b030949bceace68811f01e544c344d0eebb45c4a210968cdd1bfe48c0fe84eee4fe2324be81
TLSH
T146F0260C44008E05D370127E78C900FA717F08095C478EE880B14D76AA17FE845737D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d816.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59d816.TMP
Size 48B
SHA256 564c6d6436ddebcb9f9cab218434f218907c761fc2fb4eb8bc0e8e6da93ef7ab
MD5 2e3108bfc5643c670cdc5a354af067e5
SHA1 76a753429ca1ed1905e9059f22147d5c2908e790
SHA512 6358b81465cb2694c4003c005948490ba03a6f883876cf04dbd2beee68306dbbaaf2c4541b494ac30abc183f2cc61f2e8768e9e33313aea9289b417a73d1be1e
MD5 SHA1 SHA512

Submit Download

Network Action Predictor

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Network Action Predictor
Size 4KB
SHA256 9827429749037198cb3d19a851ccff2adafad344fbade7220aa022d3c9e2fa85
MD5 9088df5de5b8306c52e744141a100532
SHA1 0aea85a36ef3ddc53df198227fcaf212139ae1db
SHA512 96c0c8ee90bd8aec34ea905f48e76ed7dc370d24f64efaeadf36e9b59b9ff01856ed837b5169241ef2bd4a6b8fe2ee77de443b09b9ee604e39f9ba57929859e8
TLSH
T15C819285F7C02420DA346EF3A4824BBD5E72CA82A5124B93097002D0FCA74ECCC796AA
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572
MD5 78bfcecb05ed1904edce3b60cb5c7e62
SHA1 bf77a7461de9d41d12aa88fba056ba758793d9ce
SHA512 2420dff6eb853f5e1856cdab99561a896ea0743fcff3e04b37cb87eddf063770608a30c6ffb0319e5d353b0132c5f8135b7082488e425666b2c22b753a6a4d73
TLSH
T1D2A0026ADA612D881B4A839026187553807B0445130982FDE43877A841561AE582C865
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 1ac0367b5742c77cdc08d767ca882976c61661e7f66deeb8ab2ee205b385eb7d
MD5 5c27aea613391b46e722e4f467f8a73f
SHA1 72bd065b2e5f12ad42c95de7249f8148ad1e758f
SHA512 7978a2b84ebda43578bafc4e8d7571f87d714d83ff466c233829a310483d472302f8b1f741e3969e3d7ce963b9bf5b2a9971c14b2d150da6982c8ecfffcc23b7
TLSH
T19631AAF3C3B4597E8A6142F46A242E2BCF1C4423476C3947C1D89B4B97F1870E2A880F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Preferences
Size 6KB
SHA256 ab6d0e3a630b943a1dce47ab25bcfdcceec9abe9ba2387b3d1740409285b25a7
MD5 f069c0c7ff3365292a8ca0ec7bec4e2e
SHA1 dba82988f173932f00ab507e90962df48086189d
SHA512 78b8fd442e4f673d4272c629c82b25eccb2cd4918176958c74161b162ed20cfc5477c1f6e78c42893ba72d520ba167bed5b6d5c37e56fd09a0d4ccf79de31b84
SSDEEP 96:sto/d2xFZb9xk3Eo5h16ZSCs7/x+6MoqpNmmuecG3741eQW9VejK+gK28XM1C7K:stM05kEoVCsV+Fo+73EQQW9VJsG6K
TLSH
T118D1A6036F24697B4CC6E515FA65B617E2F56022BAD15E58EBFC4A1C04DB6DC6303C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Preferences
Size 6KB
SHA256 3628c35c3f85f7a46be85c2b2d33ce73ff1f8820f878bde281331709594ab159
MD5 77ff171b9d1445a0092530d40eec7591
SHA1 f53704c20b453bd0cb75333447950e180228cbb4
SHA512 41493603d78dab539e176b47f82b14d28e76929f93da3de70a84fc8c3ce753ce80c720c846e2aac83be2a6c6cffe3f3847c6e0db7369d08c0874215c2231e559
SSDEEP 96:sto/d2xMGZb9xk3Eo5h16ZSCs7/x+6MoqpNmmuecG3741eQW9VejK+gp28XM1C7K:stM0nkEoVCsV+Fo+73EQQW9VJHG6K
TLSH
T157E1A6035B24697B4CC6E519FA65BB17E2F56022AAD05F48EBFC4A1C04DB6DC630380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59b28d.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Preferences~RFe59b28d.TMP
Size 6KB
SHA256 725318077b30e0100669339bb4392264ef286f90f4522d34a65f72bc6e39e110
MD5 7d0f84929d3dd783fcd2376e2f14fff3
SHA1 1aba2f511359af93b234c741ca6d8d5108dfe6ce
SHA512 81e0781d10d642d129e8350eb037c0c983ae796afd83fef5638adf330af155b8b5979bda8812f516aca91b7df00d2345734ce973251ef22f1c9288d2dc9c343d
SSDEEP 96:ro/d2xFZb9xk3Gdo5h16ZSCs7/x+6MoqpNmmuecG3741eQW9VejK+gK28XM1C7K:rM05k4oVCsV+Fo+73EQQW9VJsG6K
TLSH
T15DD1B7036B24697B4CC6E519FA25B617E3F55022BAD15F48EBF84A1C04D76DC6303C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Service Worker\CacheStorage\869765e4f16518b22f4442ec58c8e04a9e693b19\7937e781-995d-49f0-a8c3-84e0928e3116\index-dir\the-real-index
Size 72B
SHA256 1e72a29de6d4f7457625df9dfe7a2e4d65ada67940bca03660b2dd71a3e3b354
MD5 394fce9aa07d2b192b236f1aa2c161ae
SHA1 57a4dde455b102f7f80949099b3ecb6722adb1b3
SHA512 7b72b26d6b371988b6d20aad66b8a7f4fbdbdd9029dd1985e1f68c0793ae059c024056764a612c8a8b18601f42f47b6b1dff09048949e55037df8108f9ba9df7
TLSH
T194A0021047855033D01D03B47A42194063A198280905275A70A0654C9CE458361D1BF0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c809.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Service Worker\CacheStorage\869765e4f16518b22f4442ec58c8e04a9e693b19\7937e781-995d-49f0-a8c3-84e0928e3116\index-dir\the-real-index~RFe59c809.TMP
Size 48B
SHA256 cb20f7a56eb3434db5b9dae4ee8b1124c5478ef090c6abf316aa6b63967fa74b
MD5 07a00ff115b134e38c9805e355689a30
SHA1 316f0311b8b1349836ab1c64c6e1ca2b7fa22387
SHA512 858c39228a93d5301924babafc1d6b9733dd3e8082efd332e7f44781a80d818c02ee6c751eaa52d2e1ce6f0bb7eaa81e3265e079134d0c3a62ce20ae6da02eea
MD5 SHA1 SHA512

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Service Worker\CacheStorage\869765e4f16518b22f4442ec58c8e04a9e693b19\index.txt.tmp
Size 103B
SHA256 cd5106b0d2fe437afa2310f5904deab3a9d6459f9dac8369ba06bb58c525c4ad
MD5 5acff8b7b85d47e9aaba45e6f0119abb
SHA1 acd97001a8982b1134d3be157dd6394f3660fb56
SHA512 b64955c35e49258c628e7a3a694eee956f53d9990357de932373f7b2219944ab8be7d093f205d76d36c05ecc9bb673f2c8b8f48d511cb59fb4e4fbcbe38373a2
TLSH
T13FB012F7287044A13F8E32D35151E4BCC607408E1D869905D09C013C20A2C3A9A034BC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59c848.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Service Worker\CacheStorage\869765e4f16518b22f4442ec58c8e04a9e693b19\index.txt~RFe59c848.TMP
Size 109B
SHA256 cb196658c8f81010b009c7ff4341e7192dccdabf32f6258e00ae2a1a1571d1a3
MD5 b4c0c06e530e92cfe42892f653fa4837
SHA1 92296f22855926189c48729028f0ea51bc8888c8
SHA512 0c898629dfc7262198b066622f405b42f3b51a92b570b64a58e71851139675985ca23af010204e421c80d3808798f02ff9f4f351b8fe6a2d1f5e1e7e7b137af1
TLSH
T171B012F3247004A07B8E30D39110E4BCCA034CCE0D469904D09D327830B2C37D70247C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 6adb25d61e0152e156be1358ebf4557f7f9d44bc0b1495b0cc0cd98ca8c0163e
MD5 e34609594198b5697405f3c41d03624f
SHA1 4e264c555ce90a2b48761ce11e15c956fc41c044
SHA512 d58fd8a8810f2b68762f1d88a1d31b277ae9d628d6d67fe3894d8a05af5f9229f56f8d75e6a6feadf8d614487ee3cb1a48b4a9ee696c0a872038c63d9519621d
TLSH
T1DCA00271415161B5C11426B5614681A836A29D664115624242A21A8E8C54FD54525140
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c634.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59c634.TMP
Size 48B
SHA256 033503689cdd1ea1ba07b7c1411d145e14631eb3237a8682478a018f04140bd2
MD5 ee2525a89debce348020c01cbd5b6a51
SHA1 90748593fb08d8c10fa51a3c45d753b4b6ea5080
SHA512 d0dd38c43747dcaf9653939ba4574b37dfe3df1faa8a1ba593b1a9f93f7910df88eccabd7857cc866034d8cd52eef54c4a50e7e4961b1df2efa0bae09b1712b4
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Local State
Size 15KB
SHA256 f4058447ea7b2f370e2e180e18593be4e401e16bd0bad8f8a075078c295ea418
MD5 43b73311d21f3ac24ec4aeba32b885ba
SHA1 d4c7102824b53cf270a68c7b19b2eb424ca1b022
SHA512 3dadc8b5510db98fa8d12bc0268db81165f00ba9e502176f41be6fbcb13baa6eb8a1e35190af37d8c1bc710543d13782406a28073a11d8b91538d1eee297ab2b
SSDEEP 384:p+aQikB+z/xvxjg/qhE2NBSXo56BQGX2Yo:U/UxvxjgC+JFDX2p
TLSH
T1A7729E2B597469239AF3EA01791D1B8BDBF9D4A295C27EB44AEC5F0D06C73980302D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Local State
Size 3KB
SHA256 93d740fb70a0d674695bc98f4318c3c2ba6a11c02086860ab0bc5c00284e7d2f
MD5 81cff5aa062e6a7ce3bc75d917d6fb13
SHA1 265e0aaaff0877900a89848a0fcc70ddc07d811f
SHA512 c67bc0128fa01dfb000b5ed0d519b7c1fb09144a4e351df3946f33a034c6ee2600ad6867d9af30f50df992665470120e2b843777298a177c1627e5953d9ef611
TLSH
T1216185776A74A6774DF3AA05B9863B077BA59123EA913F55D6EC0F0C01C73981342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Local State
Size 2KB
SHA256 94f5969a03a40221da0a574d43a4e4bc0f71bb28feafe4da08753e5dd73fc2a6
MD5 e585c7aced9b52949dc589c4e5a17980
SHA1 d05e415c38af36b28b152de96883cb48ca4ee5eb
SHA512 13b594cd34f53d703ce8ae1ab049c4f81f3ccaf17f259f4ae90becf13b06ee4387d8239a915460a2c75f6c70fcd499b5c890530643910857e535c6a6dbbe3fea
TLSH
T1D55175736E24977789F3AA08BA5A7F135E79D1A1EB622F11AADD0B0C00C665C1306C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe59646d.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer1\EBWebView\Local State~RFe59646d.TMP
Size 1KB
SHA256 da9b7ff8978898db8cfd908ba6999a77417ee7ef64c4e2d40dd0863db1c31d6e
MD5 f991cbdc5db1fc569aace48715d20c38
SHA1 d27e24d711b774352221c47cff7345541b700563
SHA512 b9f96dec1c4efbafd87ea700ec01c179d28855fc95bd34b8f79c01a33e9c058a319c4c4c25b4860169148efbd723a16c72fa7bb77a8e481e7d96164918dbb823
TLSH
T1B52165B3D77457729CE276067256BB471EB190A6D3214F01B1DE8B0C01D255C971BD33
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c70172433365be18ba2ab2c3942720698426030cb43135231f72e1839ae7a33b
MD5 70be3a96a82816473d73db8c8048ff4b
SHA1 54df7728599bffd3082318d904d7bc9b35c02668
SHA512 819649588327224617d8c4e04fb7aaaae8aee55c46dca8b3dac80eb05018ea991a128e66630c84d98d86097ecb4ff38bc6ce1a0a024f4db2f6e61e9b983ad1b9
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 7a91367c9eef2270db80e1a40bbef055e958f51a2702c6e80ad1372e8a17bfbe
MD5 16255faf73aaac2dd2035707344c9c07
SHA1 2217ba146820fc32ba7e82a955cdf9b1921b3dde
SHA512 37f74139851232c3fec9fa9912aa25015be13278611b13dcbc551e79f885ec8e91ac22a5592e9e8ed76b76e3e5d0b4436e5579d28e82aec025ad1c00f0e743c8
TLSH
T1D4D0112B3B820238C020203B0022B20B0C00E20B802A8082A83ECA2E2F080A80A8288B
MD5 SHA1 SHA512 TLSH

Submit Download

f_000001

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Cache\Cache_Data\f_000001
Size 47KB
SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
MD5 260c81a4759baf163c025001c4f27872
SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
TLSH
T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Cache\Cache_Data\f_000002
Size 18KB
SHA256 71d5ee93cc1e9f1d520a3a8b66456de18c7879d8df09d57fcd2eaff75fef0075
MD5 de93fdc85e3d9009340f44f401ce62cf
SHA1 9f73b2f43ea3bf37cc8e90a5aa8c7e668ec44504
SHA512 1c10e80e6fcd197c5acb2b811794a1d13f7b025868349d1b261e02424e2f1970c7f03c502c6190d386f2e78cdb126a374c64ee6c25eb848f82c5ff1462b3a367
SSDEEP 384:+llEwUsRDydOWF3kczROPIMjvFyNBNaK8QXNkhgP0DXzY0me:+lSwbdDWHeFjtyvdjX2w0DXzY0me
TLSH
T10182E043EB7D80E02039AB687545CD6B76C84AC529D993C4169FFDE6D6633C01E9F08B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Cache\Cache_Data\f_000007
Size 21KB
SHA256 160df2d71ff6dc8defd3261f4457d287f9c2dc04491d587ee4fb9d73299e22f2
MD5 b31a291bbe243202e57a219b493dc60a
SHA1 d7ddaf668b501866e07855100fc2fd5604a71473
SHA512 4a7d18a51b70b460c0d19629400d06ebc9be5da53513ab4155e4d3d683ac92d65744826a6e158ee24eb09c89cd8dd96373c849f13f8940dca57080c5cf2bc5f7
SSDEEP 384:KMlquke/3ZwdzAofXWLQsPBCvDTiqkY1nFmuYNayUafSQlsKhzRb0woFezo3v/JV:TNv/3iNdfgEH7kYxFBYNUAS0s4dbhzon
TLSH
T1A8A2E0CCA919AC4FEE9C2DBDC70A955099D773B1B3004FEC254E16261CA0FD6BE48523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Cache\Cache_Data\f_000008
Size 26KB
SHA256 caecc2b23291dc78f7962d923f6d822d625dddfbe49168e0ac2f9941efaeb615
MD5 af97896ad8a8612df6acb0af9b6ba919
SHA1 960dabd6c7cb23edc38bf7904f48edce70a72d53
SHA512 fa3f2ffff87974180f7627c959091b2a1b61ab5c1dec95cd7334cbd7f2b18d0cbe2a5976f14fe7a92836738f38f6457c7e8e2333673e67410b1560cee42141f9
SSDEEP 768:MfUdPmTNZ+4gpSO/DXqFKuPswVM+atDrTRA7iBlA:MiP4NZ+920uPswVMftDRAuBlA
TLSH
T101C2D0AAF4E2CDCAD3D50472274364C9F81EF06A4BB539C2149858F3FE691494281ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 480B
SHA256 cbc36c609fcb41319fae324a5323c888e185dc1e126cf714b00ccf93376edc13
MD5 87767f0052a8a14447ed4a47f9ba18bb
SHA1 ed15b503a9b9e76e02322d02d801b2fa19acdb8c
SHA512 e1bc5195f30ef4222098a588df5db777b54d44b5dd85c2d856658337262c728e3da7a8992aa2c4981672b08f6d7d56bd9f320e57f8708f333cc8a86bce6df141
TLSH
T179F0DF4841008C0DD321B2BE25C511697AFFC81E588F8DE184E0567C6AC3B6966A1BD9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a8917.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a8917.TMP
Size 48B
SHA256 9d3973e8fa0a738e29a078f2bcff9baafe7b38553c219bd6ca63ee13094785c4
MD5 786b8e0f9a4311448ef85d7e61040a2f
SHA1 3d8bfa23daf4f90346d69aed7c6e77c96ae486de
SHA512 21a6aed7b6448bd03492f1681304077e15e85138b7665e37d776c0bf8031524aca374fcfbab994d5fea4917729244473dc30dede5d31ebafff8a5e8de62cf4a9
MD5 SHA1 SHA512

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\ExtensionActivityEdge
Size 32KB
SHA256 82a98efe1f51a8563b600bff853ca537c225247c494950c7048004a22394edce
MD5 a23e48300fa45773d9b8d84e831a2c70
SHA1 88e29c6f99a0812f58858e14ce9eade6326bc395
SHA512 e657006f0035df4ea5a022d2f111878fa87876d6d7269cf3d7c2acbdd531f61ffee27b865806024aef201a01484150e02e652afa35371db7963659f52aeecdfa
SSDEEP 24:TLTWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/5eQQ:Tcm+/9ZW943WOT/
TLSH
T160E23A2A5E3C7121DD6671367C61A4275CB910EA977336F27EE000696F8268BC538CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a9bd6ae-89e9-4ab9-926d-98f6f775850f.tmp

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Network\5a9bd6ae-89e9-4ab9-926d-98f6f775850f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 94b79a62b855937f8a12e227e20b27e178692c004dc870758efe0a16a3ba23fb
MD5 d7f59f4dd36cd188d96a294d19101ea3
SHA1 1c738e0b0414a520496a254f1e210c57264d77cb
SHA512 2b72f0ef208ef75d7773bc3261612f3ff70fe1bc43384cbb0c151c227981dc86f5527251360e1c564c4cd82522dbce045b20d7e04328bd035812f111944a73bc
TLSH
T1003159F3C3B45A7E896192F46A242E2BCF1D4522476C3907C4D86B5A97F5860E2A8C4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 6ae2140b930698ca5ce45b4d53bd6277c3b5cc12878ab829780fde069faeaaa2
MD5 5f5c971b950cad5fa440f20764f8ee4b
SHA1 8e1ab1cf8ba2fdfdc6dc50d22765a14a231f2100
SHA512 0445c3f4d786951e81099290df56b165a28ef38cd648fb18ab3a01b2f42c8c5191a601da86e34b55bc270570b2a6124e2a987495a211684f101824d06c557c56
TLSH
T16E3179F3C3B45A7E896192F46A242E2BCF1C4522476C3907C4D86B5A97F5860E2A8C4F
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Network\TransportSecurity
Size 523B
SHA256 135327aedfac4e3f7dfe2ced64de6849d5277a4c496baa67beee2f6fe1406019
MD5 0f918600996600b76f5494ee4483563e
SHA1 f04ddbc0d45db9f8abeabd40bef7728652b387b7
SHA512 e4050b51e1f72f8296aeaf0f6b586633666956f09b13438661def418a644c875f5d5f7d8244976f67d5de038f9f1249acf029c562d68451e8d478fcd81fafd1c
TLSH
T1DFF059A3807BA42B107CCE7A0C447D462ABAF4B100916AE9ED47466EA0858F72A22812
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Network\TransportSecurity
Size 858B
SHA256 552cc4d30f45cb9609220e44a509ad672934efc7537d5c88bbe81ab673431ca4
MD5 2ebc7ad7ea8b2491fe77ad26d851999c
SHA1 9b2f8dafe609eee8d51ecf952f3c755e473992e1
SHA512 86ab11f8fbe9ad1050efb78b55f83b72796ab2729607786cc11e7d57a7fa3f0c5e082d71f552f58492ccb4e4e1a8639a20dacafcc4dce71c883eda3a1ffebe51
TLSH
T1D9118297C0BF742B103CC96E0C047C053BBAB4B204916AF9DD57856EA0858FB1A36C12
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Network\TransportSecurity
Size 858B
SHA256 6645d5785e23a52e04f07898d976a7a061b8df666352d9c230e048e8629c7c36
MD5 587d89bd58a269268aa3e40ace30ede6
SHA1 2c94ef6bad238d6be99c67aa32ccc1cd804babcf
SHA512 df27b3618983aa85068fc5463bc4a66ef730fea4b7ee2735ac12b684af5ee2dee3072af6496b191eb72cf9044ccbfa3cd19819f6ebacd0f50ca049ea38b82ff1
TLSH
T1F4116F97817B742B103CC97E1D047C053F7AB4B20091A9F9DD5B856DA0858FB5A36812
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe59c55a.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Network\TransportSecurity~RFe59c55a.TMP
Size 356B
SHA256 74a00811ecd5dced9ccb723e151bdc06a0bbcfca2ecf2831a998e36a5958e1a4
MD5 754fe968d3a1ac7bc5e56f5e1e13c0aa
SHA1 79240a37188405f9893d0e4d12781d5e49500865
SHA512 a1c5ee34a187336bd70bbd2bed2630b703e697e56d06536fe9c04d821e6ed7d327809473f34c1ae1f08645d1b313f9c04d4d2471f21cc07ee0eb3e8e9809796b
TLSH
T19AE020E340BBB57B10F89A2A08407C065F76F5B0059169E5DE57466D70C55F76A22421
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Preferences
Size 6KB
SHA256 675423d4cfcbb46c44506def8815c84f926a55f37dc5f8902d7db76b882512e3
MD5 132c82c537a99bb9cd61f4e281baf408
SHA1 a66e3100347cf1e4e9a9f8545544c3ba59978000
SHA512 b9139b1eb390585c34acdc8268912eb64587907d466cdc7b474e27686c39270aafe55736f5377da007ac055b57e7411d63cfb1e9aea326b97d56eb2052f2aebe
SSDEEP 96:st9/d268bSnb9qkco5h16ZSys7/x+6MoSp7mmuecGYIN1ejepK+g+Sg28XM1C7K:stB06UBoVysV+FoW5hNQjjofG6K
TLSH
T197D1A7066F24697B4CC6E119BA39BA02F2F560717AD51E58E7FC861C08D76DC6307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Preferences
Size 6KB
SHA256 2efa0c5f207299b55ffeadcba0a1077220391ed2efb898e8eea1905b54512824
MD5 9825d594aa73fcbc16f87660054d453a
SHA1 815d99d6ca9dc8a032770c230e65f75aa4d5f913
SHA512 3f9952e3466b4e7b4eb61072b7dcb12a987293e759f9ccb252184735fc85937d8fa251ebc9df70b5b281836d458ea2494ba21934b0fe73a302b2796bca3552f4
SSDEEP 96:st9/d268bpGnb9qkco5h16ZSys7/x+6MoSp7mmuecGYIN1eQXrSepK+g+N528XMz:stB06uBoVysV+FoW5hNQQXrSjojG6K
TLSH
T112E1B7476E24697B4CC6E559B929B616F3F56022AAD01F48E7FD861C04D76DC6303C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59bcce.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Preferences~RFe59bcce.TMP
Size 6KB
SHA256 ecd1afc6b4343802640a607d77fc15559f28f61bb20464be25e0b44d8dc3f862
MD5 85c1c31ab7d649fa8d5077e76e5e1c0e
SHA1 8c385fb92a0a63661bf61dd58d0ca008f9aae69a
SHA512 a235558e332c74d7d154d639b8569388055e3e90bc6beb94273681ef6e015acc43db063c22270f22cf9d2ab90332c418f1d2811eda87e7475013d52571ec9b2e
SSDEEP 96:st9/d268bSnb9qkWo5h16ZS1Cs7/x+6MoqmmuecGYIN1ejepK+g+Sg28XM1C7K:stB06UBoVIsV+FoShNQjjofG6K
TLSH
T11CD1B6066F28697B4CC6E109BA39BA02E3F5A03179D11E58E7FC861C08DB6DC6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Service Worker\CacheStorage\869765e4f16518b22f4442ec58c8e04a9e693b19\6979ec80-3452-417f-90d1-4ecd9ec1b7b3\index-dir\the-real-index
Size 72B
SHA256 f249572e49241e5c4c8d51a08253a6e9e624cb8ed8e0ddefa6a38cd11f662879
MD5 3857ab6be0c2eb8644baea3cc4172aa5
SHA1 c6feac09334bf4f6267f5bff6d4ed0602685293e
SHA512 626de5fe4a3e862577b9bbbd640503758a8f94b250ddbbb94373626d3ff46e8d8ce35cceb5f3277f8e7c17eea69eab82783092a8f79722b2d8277202ffea30dd
TLSH
T1ACA0026412C1D037D02903B86842154033A9E8208906475D7091305C8CE45C252C1BF0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0dfb.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Service Worker\CacheStorage\869765e4f16518b22f4442ec58c8e04a9e693b19\6979ec80-3452-417f-90d1-4ecd9ec1b7b3\index-dir\the-real-index~RFe5a0dfb.TMP
Size 48B
SHA256 c660a5b5ec31e01b5f04896d9dbe6740861ce500f7aebb5907d049eae8abdd79
MD5 6b75d8dab1b5503013ac65163bba389d
SHA1 4b3e9a769d23b7a1d509842919eed1f57735103b
SHA512 bb7fc7ef9a28021ee9b6fda49b81b8bcd85437ba3f867fe3b48caef82249fe0e2f613a7d56029bb47b323b265347bddaa632a5d5343cc04b2648f1da8b5d1c4d
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Service Worker\CacheStorage\869765e4f16518b22f4442ec58c8e04a9e693b19\index.txt
Size 103B
SHA256 2731f42d7097b03998e9d60fcea7aa9732c1ba6576157323de1abcb633e4e6e0
MD5 e53f0a4622245e74b65f3fbe23a06ec6
SHA1 3f871e32e0fb38a4466f1df2a942a52a5ff06f14
SHA512 88a7bcba7576bc3935408fe3a30e069c8996d9511fc5665889525dcc5d11f21f27cd28bd54e4d08f284ee5dfd49aec4b5b06a90c3e65cc6952b973c81ce715bf
TLSH
T108B012B3603815062BCB17C18200E11CD307448E1ACCC80CE09A017C5452C7B26418FC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a0e2a.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Service Worker\CacheStorage\869765e4f16518b22f4442ec58c8e04a9e693b19\index.txt~RFe5a0e2a.TMP
Size 109B
SHA256 450d5f1ff957edea8e8e3cd29d3ad21459b8ff2aae4df9d391a6d61624c92906
MD5 21b22c9648805a424630865ed321844d
SHA1 c81c81ed80ac9494762e2dea40ddae8e7ccfa5ad
SHA512 00f0aa1de2ebcfa66599b355fd5903531829b32ddccb6052f265daa600cbcc267068d88e87f689df69ec4af8dc7d09ed319fc82a1b233061a51ebe9cd684b22d
TLSH
T174B012B36034180137CB12C2C200E10CC7074C8C09CCC808E59B32BC2472C776780AFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 fb2bcd47af83a4f3bb564b2840b371fdb6f90e0c449dda4db0e7d0256f99c47a
MD5 b05839ff4f932f0e910ba67862794935
SHA1 1af14121c78b98f839a2fee408a59d30d10e20d4
SHA512 e697c7ae3abf3e180bf2c62c18032a524775e5369f7100a0db62a95867171b13931a55ec5d669efb4074274b569b650ae8e9c426d29f9fcd43ebb7b779957096
TLSH
T167A0027501804172D00063F3258591A832615976490A561186A31B8E8C54ED14225590
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ed92.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59ed92.TMP
Size 48B
SHA256 8e27f0844c9b9e6baffdb0c8a27a0e3cc2c1526553945e2a782dd3ae6c71b534
MD5 c374814b9a33223369f8c11ef11e772f
SHA1 a21a51566be7f92983aba224dfe671a08eccb05d
SHA512 08b88664552881c2061bc63a3cd50ab89abdaf475c6e7a5cf5b9bc958ff9c51e705b3cdeb7f424959bf1fce7494d040d442437546e0ebdf99703721bdb65e959
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Local State
Size 15KB
SHA256 34be6f89b6c9a0296ff2aff5de7e07ac79d7b497d89c2d57c81d1565245f3b27
MD5 711a038079904e0d7e6189315e581fa8
SHA1 6ab52de693a7b34651f1f6abd8ea09f81725afaf
SHA512 ef7e4f4b4217db60062ca10ca1f8ea3a2eaf383a31d7539f40613548ee14db2b1bd92c6a7847b974224993e641c8a846a839f6d6e751c28aece488f0e81f6c77
SSDEEP 192:uDFOKH/2/aQWjYhwZ00i+z/kNWIU6ZwNj1Jfo/iVQ45hgj4kENBSPXKeoDUh7NI6:Q+aQikB+z/xvxjg/qhEwNBSPKkumeL2N
TLSH
T180729E3B59B86D2796F3D9017E5D075BEBF4D8B286C2AEA44AF85F0D06C73980302913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Local State
Size 3KB
SHA256 4e36699e85855e5cf081c690a15e6527694f6f0a1c45bc13b074aeda30d41b6e
MD5 a9804114074eeb7f3c45bb2f23d03ecc
SHA1 407f0da8e58190030bbe3d404acc8b1e1c7fb7ae
SHA512 8213e6ee5f23b1eee958f9dbbc779a1acb337fdd0e25e9d66a706f2eaafa1684d53eb5dd8bb09aeb3df78bf5f10e214cfd43e7b8ade49de0641657fdcace62aa
TLSH
T186618777696499374EF2D904B9C63B1777669023DA917F51C9ED0F0C01D72881342D27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Local State
Size 2KB
SHA256 4b9715522d82cfbe778f20d8f94800363695dfb4cc0be74e8de20d219a94484d
MD5 a2f972a6c92e00e813911ffe71b629e6
SHA1 557e6b1caf428eb71055f1b38aae0b87939347e6
SHA512 9d4d88c54dcce28f4a338fa2a93391b690e9a9f1efe2f8f7dc2f3d0a20ae090abc106b35d75ca4e4ce625667b2e7c2eedc27c6ab069559cf58b00062395ed23c
TLSH
T1D4517773BD149E7789F29504B98A3A239F36D062DF525F519AED4B0C00D715C1702C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe596807.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer2\EBWebView\Local State~RFe596807.TMP
Size 1KB
SHA256 152fae3e6809498362b52675828db7ff6b60e7a58ce42b85395e9c57f840508a
MD5 86a5f07284852223f932a8dfdbb60d61
SHA1 2bbe627a1c67bdb909af8ae589cc61e20ef1de71
SHA512 76d969b4b9d5938bc54779de1961a8c514dee1ee30750228653ec9e03941bf06d7bf713a39e5c7931b222c655a08c5f8a27e850493d416d33d3b5e7af5dd41b3
TLSH
T1F72165B3E9605F339DE1614976967A676E33906787518F0055EF8B0C01E614C8B1AE33
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 020e6ee3509e45cac26afa98d6afc6bfada97d0627aba882dba05a76403563b4
MD5 7089890bca6a76b80e62b039409ac544
SHA1 12f3324b384c18c58a6c190eda0ddf91895cf947
SHA512 37e88a151baca119d4449fff40cd13d22e15a0b29073aad1ad9a487105cc6fada9d77c5c654298ab2e4f5944a4eda84ed3bfeb9220aade1c9f17e0a719e3421e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 31e5cb349df7e51f2ac3b76041bfc62bfc4b856467b3cd8286dda8cc8ecc6d15
MD5 48ddd0e5d3310402f0c83c44067e4958
SHA1 67ec08bd3689213cd159f2653f947c3916caefbe
SHA512 a634180c5ce094275d6b12d3b6ee064715765621a41979a80872bb4a492112d6111bbe4c27720ada0da6084d5e9e5acd2691937882ce88b64f0c441a1e7e44b4
TLSH
T12BD0121732414234C01030B31452610D0884C62BC10581007428E55D3B440D43906541
MD5 SHA1 SHA512 TLSH

Submit Download

c24b6ee8-0dcf-44bf-be2e-3cf8366c490c.tmp

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Default\Network\c24b6ee8-0dcf-44bf-be2e-3cf8366c490c.tmp
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Default\Preferences
Size 5KB
SHA256 4682047db41a309a29cc932610c203d7362af299b4de10a1188834098c739c55
MD5 e32718c63850a0118b468a900be852fa
SHA1 e70e7df2b5dd817ffe19267dfc4991af65d109c2
SHA512 8da7907d77755426f2821de91d47cb50d4973452ed73f5dd9245438321c2696ca6dc906cf73bedff594ab4060d2d1bc7f2b058ba6da32d0b44a4809ef414af1a
SSDEEP 96:stV/d292Geb9okco5h16ZZs7/x+6MhmuecmjeRK+gQWNQ28XM1C7K:stJ0Xro+sV+FijDSWOG6K
TLSH
T189C195025E24687B8CC7E158BE397B03E2F9A07275D52E58E7F8461C08DB9DC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f902757a-1e74-4c08-abf4-a38fe81983e4.tmp

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Default\f902757a-1e74-4c08-abf4-a38fe81983e4.tmp
Size 5KB
SHA256 15f7d32b93462d2e60b2adf720925c2bb29063fdc15e0193f46a27ccac3273d4
MD5 40acf001969359e7f75e4ff494c725b9
SHA1 7949be84237c6c4697011072298587ce4a5a86c5
SHA512 185ea00045ffbb104fd56e037d3c94114cc498533e79663321263f0d83354c49f5fbd951113e1ab21a04a6463994061687426bae6de400dd8fc8048153a2f8be
SSDEEP 96:stV/d29neb9okco5h16ZZs7/x+6MhmuecmjeRK+gZoQ28XM1C7K:stJ0Jro+sV+FijDDDG6K
TLSH
T136C196025F24697B8CC7E149BE397A03E2F9A07275D51E58E7F8461C08DB9DC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Local State
Size 15KB
SHA256 46bbfe68fcdd1d0ca3a6e7c1157fcf7f10c0a4d0cd5786bf5426f992635debe6
MD5 9e6d6043208dd4de348fe12101b67998
SHA1 fed4fb04ceff18291c80e3e01723c32bbd917b32
SHA512 057ef3ddb0bfcc6b8459043863f6f8f529483c1432160424af2790d8f0fc9c1dd4cb6e6c180e21a77e2ead5415295e879d55529cabcdc6146dc5042f065d8b4e
SSDEEP 384:X+aQikB+z/xvxjg/qhE0NBS8smwG7Pa2f:m/UxvxjgC+Idja2f
TLSH
T111729E3B567869239AF3D9017D1D0B5BEBF5D8B295C2AEA44AF85F0D06873D80302913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Local State
Size 2KB
SHA256 9352f6a592dc4ddf77cc303d62dc96587725fe64193f956a2dd3bcd04aebcfbb
MD5 83bae2c8b861ebb94b073002a47567f9
SHA1 f8b600f5fd1784c55907bd25dd75cb1e6fd703ca
SHA512 4fb53b3458db0bcee67b0e198198db91fdbdf291d2e9d9b4321f93ee688e4a6fad7ac56ac6f7aab66738daf3ac7a43a9a48284ae8dab232b1e0637454caf6cf3
TLSH
T19A519573AA109BB78DE24A45BD4A7B23AF76C1A2BF626F10D5ED0B0C00D618C1306C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Local State
Size 3KB
SHA256 a22af1a147542302e37ccd08f450ab4ed638538a3679288bcb479831531d1b1f
MD5 734bfee3360e7a9e33c9273eb640d364
SHA1 d81662790050d5e9321c59a144e3421d71fb7159
SHA512 10210489b624055dbb0ddc80541d9e0d6f42b4bb331d601641854ee162b034b05f5a740cf6ab25ff0a020b3386bff6416dd56c48f34860bfa4718784b90ccdcb
TLSH
T1C8618637AA6099774DE29A05BC863B167BA68123F9917F55C5ED0F0C01D72C81342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe596d56.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer3\EBWebView\Local State~RFe596d56.TMP
Size 1KB
SHA256 608325451f4165ca8857b28657fce85ecbfd3960daf2f34a0032c0edfa963313
MD5 284f01d9486a258b8cbf85a3d35d31e1
SHA1 afb42704cf5bfb4512eeb7fe695ae0dc99e75e18
SHA512 0a263a751bb0d2b056d89f46be25eb8b43eb080627791480df75af970810a7454df725d499da20ee7894eafad85d7afa43682798de816f3f21deba197bfbde79
TLSH
T1392165B3DB605BF29DD25546755ABA576F62C167A2118F0091EE470D01EA18C471EC33
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 bea516e50b59c0aea4671b40e2b1c617a28ca38e07caad72ef84cd58920e8421
MD5 933e970c480cb1d827b0e44723cd74da
SHA1 3fdf68b5cceba0149ba284a474443908073011e5
SHA512 1e2f20e339f6727cccf35c6a7d3e41232eb3cdac28e8be8052bbfa2d8240394c042ed862b18ebbe856bf36ff5d2d34f2e89744318278cdd3c684259e5c5a217d
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 43eb2524c8732446e549c46265833c450cc7b2d1039a5360f4963c1ec4042154
MD5 b797e7b3546caee2954f8da60d626175
SHA1 d6adad7556036b78646d273d7010e4247ddc066c
SHA512 3486e52c1e63d8a6287f0c02d022b4a0bff7fcf9b6d318d73a5b85c6abde15bc2f8bffaef08103502df8791bd99a6039a3dfb6f81e1ba355fb2e3c0523f35227
TLSH
T19CD0123276021134C0103573110375080D01C60B8045410854288A2D2E484940902DC3
MD5 SHA1 SHA512 TLSH

Submit Download

85856e21-1bd4-4961-8217-d61fb979474e.tmp

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Default\85856e21-1bd4-4961-8217-d61fb979474e.tmp
Size 5KB
SHA256 690f3ffaf2a4cf7217eefedb6b1faf0c1f3229770b225ad6bb15e5a8ef07eda7
MD5 5697fbc68b3f3acb61537cb61f1f13bc
SHA1 ae1adaebea591fa02d58c0b5347b5b798fcce63d
SHA512 1d192ebca9ceecf794fb311b98ea60ca9aebdd1f0c0fe929552da8d78a6fcd316040804dcdd084e72a3f22f9c135807d39d7b03055dfdec6eb0208f9307a21f1
SSDEEP 96:std/d2mdcIb9kQkbo5h16ZZs7/x+6MhmuecmjeYK+gV28XM1C7K:sth0m4QEo+sV+Fij0vG6K
TLSH
T12BC195065F28687B4CC6E519BE29BB03E2F9A03275D55E58EBFC461C08DA6CD231790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Default\History
Size 164KB
SHA256 deba77bc71479c2e98a7f985233a7dc3a386ebc0dce33a347c6ac21d9ee1c573
MD5 a52a55fd35156c4962d5056465aa9d95
SHA1 c22a74097d6717d550758cf6f7ac16c3a4bce1e8
SHA512 2683277a6451aec89c9e40cc554ec5d16f22cb44c12ff404ea6c13acd8306552861b279f9a4e6aea3b715ece2e0f1969ff4c37f4c2e4b67336c4aa07d0a2adc7
SSDEEP 96:MBaLqL/uejzH+bF+UIYysX0fxQp97sXEHt/DfLVVVN6zRk/E0:MBGqL/tH+bF+UI3iWGVsXWNVVV63
TLSH
T10FF3EA1E5F643722CDBD923668E745B3597CF03F876326856CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Default\Preferences
Size 5KB
SHA256 cfe83291daf7c1d5c99ec7f614bdf052180b706b31a57e9e0caf5c590ba25f6b
MD5 41505b22eabf498336c00b60bc810746
SHA1 6022e3dbc0a46267b621fecdcc1d690200b4ad32
SHA512 875f483bac230b089f690a63bbb8f5febcdfd0d18b3a4cca5c39488bb00e370e97435df36d13136f8b634d2fa6667ef27226baf42e692bbb884e46738099a873
SSDEEP 96:std/d2mdzGIb9kQkbo5h16ZZs7/x+6MhmuecmjeYK+gV28XM1C7K:sth0mqQEo+sV+Fij0TG6K
TLSH
T1C9C195065F64687B4CC7E118BE297B03E2F9A03275D55E58EBFC461C08DAADC230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PreferredApps

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Default\PreferredApps
Size 33B
SHA256 42b55d126d1e640b1ed7a6bdcb9a46c81df461fa7e131f4f8c7108c2c61c14de
MD5 2b432fef211c69c745aca86de4f8e4ab
SHA1 4b92da8d4c0188cf2409500adcd2200444a82fcc
SHA512 948502de4dc89a7e9d2e1660451fcd0f44fd3816072924a44f145d821d0363233cc92a377dba3a0a9f849e3c17b1893070025c369c8120083a622d025fe1eacf
MD5 SHA1 SHA512

Submit Download

README

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Default\README
Size 182B
SHA256 a0c9abae18599f0a65fc654ad36251f6330794bea66b718a09d8b297f3e38e87
MD5 643e00b0186aa80523f8a6bed550a925
SHA1 ec4056125d6f1a8890ffe01bffc973c2f6abd115
SHA512 d91a934eaf7d9d669b8ad4452234de6b23d15237cb4d251f2c78c8339cee7b4f9ba6b8597e35fe8c81b3d6f64ae707c68ff492903c0edc3e4baf2c6b747e247d
TLSH
T15BC0123585C365A5521A02F2694152826606E923A82ADD6097DD804C1703BF1F2112DB
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Last Version
Size 14B
SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
MD5 3b746b6e8b8e101ee7cd41df1bb565d0
SHA1 ff5ff645ada097814fb4890d00dba8a309e1a506
SHA512 71d487cff7f744f046d993889c770a877075378b8d47d6c2f80fd94a5c1150a627f4a69d9e55f272f3aa4257e5dbb5296643591d5d23804a95550a3f2d91e2d9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Local State
Size 15KB
SHA256 49c942f250e033a94f594220f0b5863383b13b03bd024d92a049028efe9b6617
MD5 07fb7b80f83b70b7afecd96055c9e121
SHA1 2a3421e68686c0b6fdc412abc29b3a542a8ffb28
SHA512 7038380b18998e34eb4762cf02ecf0088919649f77581e4218a7b7b731633b8c6bb9ebd32555eb069ef7c5d5078b5dea24a1ed96401e88b701631e228b099424
SSDEEP 384:1+aQikB+z/xvxjg/qhEwNBS/K6VVkEF21:A/UxvxjgC+H7F21
TLSH
T197729E2B65796D279AF3DA017D5D475BEBF4D87295C1AEB44AFC5F0D06823880302D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Local State
Size 3KB
SHA256 ed7399c5d8f306faeddeaf544a0ed4e93eab4ffedeee5272daf7cc5a14f10574
MD5 4c633fb6d3ed49dea5dd6723e182939d
SHA1 649cda072c02d2146d639066a1b6b665d389a6f0
SHA512 5e0fdfb2e07bca00bd7e138a1fda7c98b2b609fce296ef1f42bebbbfaa4303537b55446861e9abc5279bf182bf56beb7b7d2f11b64cc684fbd15642fb7c6a158
TLSH
T1D36186376974993B4EF38B04B98A3B06B7A59027EA907F55D6EC0F0C01D73881342C23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Local State
Size 2KB
SHA256 c5fa6dd5a24c280171d9780c941330e5558d3cff277ff71321a6cb3ae16ad445
MD5 ee23319cfea04eb148a7c74a78d8ba93
SHA1 ab264b2f49afb3f6529046594f7234fead1812c3
SHA512 9f3ab9b102258c79d6a98de13dbc6e86e69686b01c23c284c2ce72e041a4224958d11c593eac88f7b7d94ab28fc0f2d9008f559cd30c1bed363a3e55e7390864
TLSH
T1EC515333B9159A368AE38B04BD5E7B139A75D066AF51AF509AED0B0C009624D1303C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5972c5.TMP

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Local State~RFe5972c5.TMP
Size 1KB
SHA256 1f1bada268acbb47184951b30dcc4c030e1ca51a70a3bfcdbef9e158fafef415
MD5 ee5cfb149a298d9d4b79cd993b43c039
SHA1 b73fb37eaf0372f19dda76e217f00976dff2afcf
SHA512 626a9c1995acbf52361064bc548066cb0e0f63257e4f28e0e00a97739ed9876f40adc913ef8a5ad1dffdabddb57606fc2a3a13cc458c3f955c4885e7e31e9d95
TLSH
T1E221B4B3E6690B329DE35706769FBA171E30807683408F0061ED4B0D01E624D871BC33
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Roaming\com.vlads.audio-bridge-app\webviews\peer4\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_1012905797\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_1012905797\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_1012905797\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

crs.pb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_749479439\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_749479439\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_749479439\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_749479439\manifest.fingerprint
Size 66B
SHA256 923e1b9403d60f9819e125f96db6bff959afb44b142852f16b8a2dbf3f445115
MD5 7bdde4012594a290c402bc856509c0f8
SHA1 2d5c3900129ad5dff87179382b244414ba78be62
SHA512 8edc868bc97c659c318bacea8ffd3fc2c4efbe0e5f7c2c47b010179834c8858d06f5c1a4c70fed8a41b942467565d267f7844be58eba291635a23aa4c6726a37
TLSH
T1D6A00206154855DC43D28B195ED8174899D0CF59B25665404C5D4DF1846B92D5709758
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1432_749479439\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_515224834\manifest.fingerprint
Size 66B
SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
MD5 3fb5233616491df0ec229ba9f42efdb8
SHA1 18a8116e2df9805accd7901d2321c3fa92da1af4
SHA512 e9b17ac626bf6508db9a686825411e90d316a0f1dacbf63dbec5baaaf6b96af4dbc9a7332975b6d5c16c43757d79fddca6b888ea97bc07a8dffb1b3a06366b4d
TLSH
T1F8A022A0C302202228A00E0A82E20223200EA80CE880002328AC8E2A080833B00A8200
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_515224834\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3712_714158885\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.CognitiveServices.Speech.core.dll

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4808_1483160024\Microsoft.CognitiveServices.Speech.core.dll
Size 2.6MB
SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
MD5 0ee2b50c85a110689352fccfa77b5b18
SHA1 d9ecc4b12d2d50e3cbce40e75edad804c9988b25
SHA512 a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
SSDEEP 49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl
TLSH
T188C54C1FA64951E6C07AD138C543550BE2B27C60CB7263CB1BA7038A1FA37E2557FB92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4808_1483160024\manifest.fingerprint
Size 66B
SHA256 22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297
MD5 5bbd09242392aacbb5fac763f9e3bd4e
SHA1 14bb7b23b459ce30193742ed1901a17b4dcf9645
SHA512 541e4c7998e91a5113f627c2c44e32b54878fe225b3b9476572f025f51f2b4ec4a44b102498adcc22b8fe388970645bacfafb6e7fc8a216df4d7bbfc8b0ff670
TLSH
T1CEA0026342648D9FBC1C042BD478A69DCD9115B088492445A925C75BB14203389F49A1
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4808_1483160024\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_1693720255\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_1693720255\manifest.fingerprint
Size 66B
SHA256 bc8d4367c67f869cbf134ee18cc34007003022251fd5d54980fae22d990f1563
MD5 c3d8ccd4813a33b2ad5ece6575c67046
SHA1 0630d245e905f65fbb619c087fa117559ca170b0
SHA512 4691eb27a8f859aae2a4bbe5727a927674cfda0f9970d7384f01761705097bd8629562d0cef462551b9ae5699074e0d5cdb68a3e82150b21f3063012c1eb4ea5
TLSH
T1CEA022C2F2A20022C8030382A38A00008008882CCEC32030002E0E3BC02F0020022A00
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_1693720255\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6764_751832057\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/552-26-0x00007FF8C3370000-0x00007FF8C3371000-memory.dmp

Download

memory/552-1002-0x000001E6193F0000-0x000001E619549000-memory.dmp

Download

memory/1332-96-0x00007FF8C3370000-0x00007FF8C3371000-memory.dmp

Download

memory/2024-1178-0x00000246D4580000-0x00000246D4583000-memory.dmp

Download

memory/2024-1176-0x00000246D4530000-0x00000246D4532000-memory.dmp

Download

memory/2024-1179-0x00000246D4510000-0x00000246D4515000-memory.dmp

Download

memory/2024-1173-0x00000246D4510000-0x00000246D4511000-memory.dmp

Download

memory/2024-1174-0x00000246D4520000-0x00000246D4522000-memory.dmp

Download

memory/2024-1075-0x00000246D14C0000-0x00000246D1619000-memory.dmp

Download

memory/2376-1088-0x0000017E025A0000-0x0000017E026F9000-memory.dmp

Download

memory/3452-880-0x00000220DDAC0000-0x00000220DDAC3000-memory.dmp

Download

memory/3452-881-0x00000220DD9F0000-0x00000220DD9F5000-memory.dmp

Download

memory/3452-876-0x00000220DDA00000-0x00000220DDA02000-memory.dmp

Download

memory/3452-878-0x00000220DDAB0000-0x00000220DDAB2000-memory.dmp

Download

memory/3452-877-0x00000220DD9F0000-0x00000220DD9F1000-memory.dmp

Download

memory/3452-875-0x00000220DD9F0000-0x00000220DD9F1000-memory.dmp

Download

memory/3452-1054-0x00000220DA650000-0x00000220DA7A9000-memory.dmp

Download

memory/6092-1126-0x00000202DB600000-0x00000202DB759000-memory.dmp

Download

memory/7768-2175-0x000001EA31040000-0x000001EA31041000-memory.dmp

Download

memory/7768-2172-0x000001EA31040000-0x000001EA31041000-memory.dmp

Download

memory/7768-2171-0x000001EA31040000-0x000001EA31041000-memory.dmp

Download

memory/7768-2173-0x000001EA31040000-0x000001EA31041000-memory.dmp

Download

memory/7768-2174-0x000001EA31040000-0x000001EA31041000-memory.dmp

Download

memory/7768-2170-0x000001EA31040000-0x000001EA31041000-memory.dmp

Download

memory/7768-2164-0x000001EA31040000-0x000001EA31041000-memory.dmp

Download

memory/7768-2166-0x000001EA31040000-0x000001EA31041000-memory.dmp

Download

memory/8016-1585-0x00007FF8C3240000-0x00007FF8C3241000-memory.dmp

Download

memory/8016-1584-0x00007FF8C2370000-0x00007FF8C2371000-memory.dmp

Download