ef4a42f9281c3483f7accba5783f131b49792e4f4072fe80641893c1a83671eb

Analysis

geolocation tags

cacanadananorth-americatoronto
max time kernel
151s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 16:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SolaraV3.exe
Size 18.3MB
Sample260730-t7653ascqf
SHA256 ef4a42f9281c3483f7accba5783f131b49792e4f4072fe80641893c1a83671eb
MD5 41525e243917ceccd85ef2765fbc8f08
SHA1 de7cfb6115fd5d12517a317142db6121f5b13884
SHA512 2bbfd376933ecf102eb74f6db6522f5248a88dccab19784a7ef3c1d016bb2581f58f7441946a4acaea62e17a5cdae0132e245dacfea77e08c5534fb7e642a6a7
SSDEEP 393216:SISSzfUJkf7eGZDfx4qy7x16j713l5wLZ/TnSFSX:SISSzfUJkf7eGZDfx4qy7x16j7BwJSW
TLSH
T18417F7217A5B99ACD09BC47483478A760A7130DB0B35B9FF44D496382F6EBF42F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
10	2532	SolaraV3.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 19 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\female_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\model.markov	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\surnames.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_720195026\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_37978956\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\passwords.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_37978956\ct_config.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_37978956\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_37978956\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_720195026\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_720195026\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_37978956\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4100_373959074\english_wikipedia.txt	msedgewebview2.exe

Loads dropped DLL 1 IoCs

pid	Process
2532	SolaraV3.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	SolaraV3.exe

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral2/files/0x000300000000043e-208.dat	embeds_openssl

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe
2532	SolaraV3.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4100	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2532	SolaraV3.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 2532 wrote to memory of 4100	2532	SolaraV3.exe	89
PID 4100 wrote to memory of 6092	4100	msedgewebview2.exe	90
PID 4100 wrote to memory of 3724	4100	msedgewebview2.exe	91
PID 4100 wrote to memory of 3724	4100	msedgewebview2.exe	91
PID 4100 wrote to memory of 3724	4100	msedgewebview2.exe	91
PID 4100 wrote to memory of 3724	4100	msedgewebview2.exe	91
PID 4100 wrote to memory of 4216	4100	msedgewebview2.exe	92
PID 4100 wrote to memory of 576	4100	msedgewebview2.exe	93
PID 4100 wrote to memory of 576	4100	msedgewebview2.exe	93
PID 4100 wrote to memory of 576	4100	msedgewebview2.exe	93
PID 4100 wrote to memory of 3012	4100	msedgewebview2.exe	94
PID 4100 wrote to memory of 3012	4100	msedgewebview2.exe	94
PID 4100 wrote to memory of 3012	4100	msedgewebview2.exe	94
PID 4100 wrote to memory of 3012	4100	msedgewebview2.exe	94
PID 4100 wrote to memory of 3012	4100	msedgewebview2.exe	94
PID 4100 wrote to memory of 4396	4100	msedgewebview2.exe	98
PID 4100 wrote to memory of 4396	4100	msedgewebview2.exe	98
PID 4100 wrote to memory of 4396	4100	msedgewebview2.exe	98
PID 4100 wrote to memory of 3508	4100	msedgewebview2.exe	99
PID 4100 wrote to memory of 3508	4100	msedgewebview2.exe	99
PID 4100 wrote to memory of 3508	4100	msedgewebview2.exe	99
PID 4100 wrote to memory of 4668	4100	msedgewebview2.exe	100
PID 4100 wrote to memory of 3068	4100	msedgewebview2.exe	101
PID 4100 wrote to memory of 3068	4100	msedgewebview2.exe	101
PID 4100 wrote to memory of 3068	4100	msedgewebview2.exe	101

C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe
"C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe"
1⤵
- Downloads MZ/PE file
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2532
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=2532.1892.6318832429045223976 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4100
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffff90d5fd8,0x7ffff90d5fe4,0x7ffff90d5ff0
    3⤵
    PID:6092
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1744 --field-trial-handle=1748,i,3426329030018264633,12653353757647167176,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:3724
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2124 --field-trial-handle=1748,i,3426329030018264633,12653353757647167176,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:4216
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2304 --field-trial-handle=1748,i,3426329030018264633,12653353757647167176,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:576
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3360 --field-trial-handle=1748,i,3426329030018264633,12653353757647167176,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 /prefetch:1
    3⤵
    PID:3012
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4484 --field-trial-handle=1748,i,3426329030018264633,12653353757647167176,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:4396
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4488 --field-trial-handle=1748,i,3426329030018264633,12653353757647167176,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:3508
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4684 --field-trial-handle=1748,i,3426329030018264633,12653353757647167176,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:4668
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4292 --field-trial-handle=1748,i,3426329030018264633,12653353757647167176,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:3068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
Size 206B
SHA256 b7ad483d389c6b3335d4cad4571c101000bee2820eb3ee269cbd4c61148c8782
MD5 7dbe658e1157d243dfb9a717515c86f5
SHA1 3c6c2ef91ce496a90829abefab014da4bb44c3bc
SHA512 10d004f2744fae0bea3082063319954cb686395c4a5a4da25ce6b15b58212e1a346a4e3e0b182d8fa8d9d7201aeb5926c4780991a8198848825a7e75aecfae7c
TLSH
T102D01251A23CE8F3401B61225DB86F8DEED5F0470C020CDD331A4426779C8128E8F803
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 592B
SHA256 19a37428475ee73163133e09fcfb8503c5615a183a5c16f8e1fd0a4b7db9af61
MD5 d3af1d81741ef59542815ba12de87af6
SHA1 8af3b07e93ce062040ef048cc4b59c8dd0c8c939
SHA512 a2213538a57aad70a6730147321a0a6fbce905242b5e7d2ecccf207df55dc776a8229b6809b021d8b0d0140d2810b6698c5aba67a5abf11ebe9154f1d66b8b4a
TLSH
T120F0F043C83DD8B6096950618D359CDECCEAF6060E631D8093317270374C90F8F0F628
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 3KB
SHA256 e2869bcd1117507e221149ca6963dbb2efbdb86c836ace5366ec2d4de4e792ac
MD5 96e75fbdbf4ec28fd81f8830993d6791
SHA1 b28054fc1612a9cf046035cbe59313d4db01b9a4
SHA512 7537f347a328e0fbb29b95e06388a63275f850cfb088850a44cd2764b9b77c1ae9ed568216d293a4709c6c5446a23028e59608fc671664e36108f9e729c67dce
TLSH
T193713507D47EDDA705B81026CC348EAFDCBBF40666629D50A7716168738E80BAE2F526
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 4KB
SHA256 7f54f02f5a54f54b7ca9044a158b26d39180dd45cd79e5dd9be54cc66969f3cf
MD5 03bb17b992d1a5273d09d71de2e37726
SHA1 5ebb5f842a3c817d706c1765c91ef0b71e4ea14f
SHA512 36e252b0d04b87f5c3d4df155fe3d5f0be2b706671c998354d0bfdd24c49120834dfc897c319721e0b75c5693718df06663714774d17f0128d2581eda6c6c84e
SSDEEP 96:o7c+mhIt/twea9qO38apUJn9oknEB0eGOkC3gMuF6ywMtqtP11yG+5qCUSa4yry/:wcNIt/t2UFFN0+5SmQy/
TLSH
T1D7917747D47EDCA709B88065CD748E9FDCBBF41626A28C10B7712178738E81BAE2F525
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SolaraV3.dll

Path C:\Users\Admin\AppData\Local\Temp\bin\dll\SolaraV3.dll
Size 14.0MB
SHA256 145737d2398655e2db2aa0a880817b61af5123bd283ef8f7829cf7cce86ffca3
MD5 72b21f45bd0fc5e8c766f909da064f64
SHA1 f7fb04476eef467e90b14482620edb1f4402abef
SHA512 c5d758e6c309ce51baaeeb0ca7b46109836ede2534b0a481fc4129bced70bbd81a5bc7f4635d80edcdae5e8155e4f7b1c429cff3b70898958887d6df8e0a97d4
SSDEEP 393216:V5ArB1JKRvjSzZBToFbaieiTA3cy6nidzdK:VOAveTLiv
TLSH
T144E68CD620E461ECC426C5B9C743EA3BC66F74390329D6DB56A492A50F23ED1367BF02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b6804e6ff90018bba4c0c8a24e7a53345ab0ed3cc6043381afbaf8eeb0ec7b79
MD5 6613a0a20809305eb7616fa558097ec1
SHA1 9935a9ea05742c9415fd2bb71577353dfcac50fd
SHA512 b3efc5592b6c48148e8a9837b8d78402ec57ccdade333bb45566088b3b28f7b9f3d7aa1793bd42cf07000c9dd2ab487ad5d7e6ef68fd4e60c5461dfff87499ca
TLSH
T11FD0121236424174C610243B0002BA080402C50B410D41006438875E1B040500927442
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2be8fbdc432f17d7673fff246e9d90fe503b29a7ef7deb2572a4c53fc92977ad
MD5 674111e4c7c376edf9939881f5dec7bd
SHA1 09820d8d75c483575963156090a802f246bfad3c
SHA512 af5fe74597db968d364d6e82c2b567c81a2069dfdc5aeb9eb7f1132f394caade273125a34698958281e50e23fc7cd6c84fbd09b4580546761762723bea97fd46
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

3caaefe7-b378-466a-9c54-eab82b3d2f1b.tmp

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\3caaefe7-b378-466a-9c54-eab82b3d2f1b.tmp
Size 6KB
SHA256 f25fdcb43c6e52f36e2a738c6d5fa5f41770497e16bdd6bd79a9352446a10932
MD5 1a2701047d8cc5e4e57322a3423d4609
SHA1 f2a1eb243b556637b96cfc8196b80c027e500a12
SHA512 7873655ce77a0ae5bac3a4c812256f2380beeb21c2be44eff0875dd82653a640b1255167ac57b7324a3ba0d492b85a7db10674cb1a120971623612afa24c158c
SSDEEP 96:stS/dzpE8b9Yk+Ro5h16Z0cs7/x+6MhmuecJbJS1ejedK+gA28XM1C7K:stqpMloncsV+Fdb4QjXWG6K
TLSH
T1A1D1B706AE24A97B4CC7E509BA35BB07E2F5607271D52E58EBF84A1C04DB6DC6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 561fe0fd984e396571d3192217fc9656d9ed180924ead56c7b35fdc5acd5130b
MD5 578f94729a9681a6330e7f4d4fa5c774
SHA1 6880b3697d8d06b97ac5e748d5ba5afe98089a56
SHA512 254d2201f9394275854382f34d6f779b9945c0ba284d5970ccf0c13305c5118ba9c2f2decf7fa70d23f7232c38023ae256a4d5017db51a6291f894410a837b1d
TLSH
T149D0CAB58CC0C410DB8E1A7E42C20ACA3431362982730FFB4C892322233A384C6B63D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bd99.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59bd99.TMP
Size 48B
SHA256 ce51a7e9cf4372c1c4742c3752f03adf0222a5da0dfc8d7974dc748c548f3b0e
MD5 6bb96b1f87615ed985204d6707a94783
SHA1 1e65213c666b6c793e93a73ce0b2258e73a76974
SHA512 3dded450cca1876ab91430867db0f87db769f5df1f5cfdd646a3fcb239f7ceb6938e4bf4547b355e517379daaf8edf9bd122650b01c712c7c9c63f93a36323b1
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 9ca3f5eac50b2921247ca78f138fd92d51a63d8ad947c87c5856a7ce57fbc687
MD5 d1ec8d6e33f97921d081803d8e1e3a1a
SHA1 f8cb9e0b2204ebb0e84655ccab7d40adb9cfb24d
SHA512 4eb289784f0cd7fad3bc52500aacf7beceaf733084a8351582038250b12dc8e2afd8209c4535f9bc17d56f20f890822c35878f8cc694b3bc97dda34b5727d04b
TLSH
T13B31B1A2C7E4C76D8A4166E467347817C82D0519A2247D27CEDBFBD667D10B1E12150F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a6d80.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Network Persistent State~RFe5a6d80.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
Size 6KB
SHA256 e8128b684962f25f910d41b61361860ad809e3968b39a0fdd0dc30190f9e2d74
MD5 a4c49ce71dc3e5932593845696c1ec61
SHA1 4217dfb0170e3921f3023a73b355cf07554da9c3
SHA512 71996b1baed0641decab6c57b0609711a4e500f6901fedbd6e7f0bb86e6463c5868bca3359dbc493cd1a4954b962d32a9ad452500d62c65ccf1728cf20fa8dc5
SSDEEP 96:stS/dzprG8b9Yk+Ro5h16Z0cs7/x+6MhmuecJbJS1ejedK+g128XM1C7K:stqpGloncsV+Fdb4QjXTG6K
TLSH
T138D1C7065E24697B4CC7E509BA35BB17E2F56072B1E02E58EBF84A1C04DB6DC2307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 15KB
SHA256 de5889b47e592443412fa35ae742a812ded5ebf2399221b4a63c1fd115290c15
MD5 df6951317f4f77d303bcf62d8fa73a8c
SHA1 6f22a90b219be86405ee1c201f42c46ed57f2c00
SHA512 4890bede83464d53360d73bca93eb6b17ff5dd489122ef65627557e0ab452d5e37914b2bebd4324d4a724ec3b8398554139ef4e3e6dc2f316837f5daebc3763f
SSDEEP 384:8CkGCMZkoU5//bZ2lw/M85Z3WNBS8NiTXBp:c8koU5HbMGY0rj
TLSH
T11072AE3AAC311A3B4BBBCE2AF9593B075FDC91529284AA50CB8E4F8E42C75C41304D38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 2KB
SHA256 da56d9e3b352e4c097e495679dcbee453ccdb1269fc26c8a4a7a0ea80655ee07
MD5 f4e324bf173d750943f68ee7b74e76f9
SHA1 d95890073002ca4c65dc33fc043c3c601395c51e
SHA512 5d56851d01db0378e9351d936cc392616d765b35bafcdd766b2c2eb3be84818129bae98975e3feaf71af78c7d106e60bd816c665471ff8646da9e980cbb33281
TLSH
T1FC516433AC649A37CEF28A4AB9073B238E799096EB612F1096DD0F4C41DB55D5702C36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 3KB
SHA256 1a462ca29581adc0c4d42dd7d7f4e56cfb312febe1041228d1d89dd9e0b521fb
MD5 db15bce47a8915b872efaed0881b4eee
SHA1 d2b88f29f2ffb486171c7e17d6471d7416e9edea
SHA512 51af39a56e4c3bac9cdf1915ba43b7f3b90464171b471435c95e49a614bbfb93000b41634b62639a2e15e59ab49d78995750d1b4f372a59bcbec1d55440b58b3
TLSH
T16461653BA97499378EF2DA06B8473B176BA95067E5913F54C6EC0F0D01D729C1342C16
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5944ef.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State~RFe5944ef.TMP
Size 1KB
SHA256 43bd7f7fdeeca69b2ec574a6773fb6b2e26fdace45a27f8228f829cecee33e38
MD5 f3f12f176f5e9644e49998e7b3e5445d
SHA1 4664537ef260d8b3b26f598b0f8241359c57f113
SHA512 25b3922f76358b8ee8d728244593ee80bdd5dc5b645fd7462df24db790ff9d46bb03af18e4332690de597795d679c52b6db4962dd071db53d2e47331db1c95f6
TLSH
T18A2162B3D8B45B33DDE2968771177A230E7450ABD2204F00A1CE4F4D12EB09D9A27D32
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2532-376-0x00007FFFF5D10000-0x00007FFFF6B27000-memory.dmp

Download

memory/2532-229-0x00007FFFF5D10000-0x00007FFFF6B27000-memory.dmp

Download

memory/3012-74-0x00007FF81A6D0000-0x00007FF81A6D1000-memory.dmp

Download

memory/3724-29-0x00007FF81A6D0000-0x00007FF81A6D1000-memory.dmp

Download

memory/4396-358-0x00007FF81BAC0000-0x00007FF81BAC1000-memory.dmp

Download

memory/4396-359-0x00007FF819E90000-0x00007FF819E91000-memory.dmp

Download

memory/4668-442-0x000001F369F20000-0x000001F369F21000-memory.dmp

Download

memory/4668-431-0x000001F369F20000-0x000001F369F21000-memory.dmp

Download

memory/4668-440-0x000001F369F20000-0x000001F369F21000-memory.dmp

Download

memory/4668-441-0x000001F369F20000-0x000001F369F21000-memory.dmp

Download

memory/4668-439-0x000001F369F20000-0x000001F369F21000-memory.dmp

Download

memory/4668-438-0x000001F369F20000-0x000001F369F21000-memory.dmp

Download

memory/4668-437-0x000001F369F20000-0x000001F369F21000-memory.dmp

Download

memory/4668-433-0x000001F369F20000-0x000001F369F21000-memory.dmp

Download