eb7de6404b7dfff908ec62a84afe1559388af1669de899bff43baf520dafdf48

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
577s
max time network
578s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
03/08/2026, 11:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 332KB
Sample260803-n1gc6syscs
SHA256 eb7de6404b7dfff908ec62a84afe1559388af1669de899bff43baf520dafdf48
MD5 b6545fb0c5cb06a41edd7f88c1fb1652
SHA1 850c347129de21ecc9712b6f72ed49ba7304e2c9
SHA512 2c8a95a5af8e7ade88e0fbcd609974303e4d965f026aa8592e8beee292215c9f337dbf20a9fadba68f121c6e75e2cee48323c8c5d2d629e7692bdaa5651e0167
SSDEEP 768:OQLrFE7TrxJU34Z8q/WVpXsw2mNXUrJb5xkAQfNXUrJb5xkAlaa3GLwG+l5fsmlL:XgY9ay4JUnXI9GdXY5Q1FblIymMupWy
TLSH
T1497450236005E0106CF3966EEF9A5509FE145103FB32C1967ADC129F1FFADE85662BAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence ransomware trojan

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
71	5924	msedge.exe
429	1796	SolaraV3.exe

Executes dropped EXE 1 IoCs

pid	Process
1796	SolaraV3.exe

Loads dropped DLL 1 IoCs

pid	Process
1796	SolaraV3.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	SolaraV3.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral2/files/0x00080000000287dd-1643.dat	embeds_openssl

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5924	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302315625080338"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-101591186-421676486-4137282292-1000\{DA3D9DE5-0549-4A12-862A-6342DCFDA0E5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 36 IoCs

pid	Process
5324	msedge.exe
5324	msedge.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe
1796	SolaraV3.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs

pid	Process
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
3236	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
1796	SolaraV3.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2012 wrote to memory of 5000	2012	msedge.exe	83
PID 2012 wrote to memory of 5924	2012	msedge.exe	84
PID 2012 wrote to memory of 5804	2012	msedge.exe	85
PID 2012 wrote to memory of 5804	2012	msedge.exe	85
PID 2012 wrote to memory of 5804	2012	msedge.exe	85
PID 2012 wrote to memory of 848	2012	msedge.exe	86
PID 2012 wrote to memory of 848	2012	msedge.exe	86
PID 2012 wrote to memory of 5168	2012	msedge.exe	87
PID 2012 wrote to memory of 5168	2012	msedge.exe	87
PID 2012 wrote to memory of 5168	2012	msedge.exe	87
PID 2012 wrote to memory of 3572	2012	msedge.exe	88
PID 2012 wrote to memory of 3572	2012	msedge.exe	88
PID 2012 wrote to memory of 3572	2012	msedge.exe	88
PID 2012 wrote to memory of 1128	2012	msedge.exe	96
PID 2012 wrote to memory of 2160	2012	msedge.exe	97
PID 2012 wrote to memory of 5972	2012	msedge.exe	98
PID 2012 wrote to memory of 5544	2012	msedge.exe	99
PID 2012 wrote to memory of 5544	2012	msedge.exe	99
PID 2012 wrote to memory of 8	2012	msedge.exe	100
PID 2012 wrote to memory of 8	2012	msedge.exe	100
PID 2012 wrote to memory of 8	2012	msedge.exe	100
PID 2012 wrote to memory of 1972	2012	msedge.exe	101
PID 2012 wrote to memory of 1972	2012	msedge.exe	101
PID 2012 wrote to memory of 1972	2012	msedge.exe	101
PID 2012 wrote to memory of 2752	2012	msedge.exe	102
PID 2012 wrote to memory of 2752	2012	msedge.exe	102
PID 2012 wrote to memory of 2752	2012	msedge.exe	102
PID 2012 wrote to memory of 2884	2012	msedge.exe	103
PID 2012 wrote to memory of 2884	2012	msedge.exe	103
PID 2012 wrote to memory of 2884	2012	msedge.exe	103
PID 2012 wrote to memory of 3472	2012	msedge.exe	104
PID 2012 wrote to memory of 1600	2012	msedge.exe	105
PID 2012 wrote to memory of 3472	2012	msedge.exe	104
PID 2012 wrote to memory of 1600	2012	msedge.exe	105
PID 2012 wrote to memory of 4416	2012	msedge.exe	107
PID 2012 wrote to memory of 3772	2012	msedge.exe	110
PID 2012 wrote to memory of 3772	2012	msedge.exe	110
PID 2012 wrote to memory of 3772	2012	msedge.exe	110
PID 2012 wrote to memory of 2352	2012	msedge.exe	111
PID 2012 wrote to memory of 2352	2012	msedge.exe	111
PID 2012 wrote to memory of 216	2012	msedge.exe	112
PID 2012 wrote to memory of 216	2012	msedge.exe	112
PID 2012 wrote to memory of 216	2012	msedge.exe	112
PID 2012 wrote to memory of 6036	2012	msedge.exe	113
PID 2012 wrote to memory of 6036	2012	msedge.exe	113
PID 2012 wrote to memory of 6036	2012	msedge.exe	113
PID 2012 wrote to memory of 5448	2012	msedge.exe	114
PID 2012 wrote to memory of 5448	2012	msedge.exe	114
PID 2012 wrote to memory of 5448	2012	msedge.exe	114
PID 2012 wrote to memory of 3340	2012	msedge.exe	115
PID 2012 wrote to memory of 3340	2012	msedge.exe	115
PID 2012 wrote to memory of 3340	2012	msedge.exe	115
PID 2012 wrote to memory of 1580	2012	msedge.exe	116
PID 2012 wrote to memory of 1580	2012	msedge.exe	116
PID 2012 wrote to memory of 1580	2012	msedge.exe	116
PID 2012 wrote to memory of 3728	2012	msedge.exe	117
PID 2012 wrote to memory of 3728	2012	msedge.exe	117
PID 2012 wrote to memory of 3728	2012	msedge.exe	117
PID 2012 wrote to memory of 2224	2012	msedge.exe	118
PID 2012 wrote to memory of 2224	2012	msedge.exe	118
PID 2012 wrote to memory of 2224	2012	msedge.exe	118
PID 2012 wrote to memory of 4188	2012	msedge.exe	119
PID 2012 wrote to memory of 4188	2012	msedge.exe	119
PID 2012 wrote to memory of 4188	2012	msedge.exe	119

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffcdc6ac188,0x7ffcdc6ac194,0x7ffcdc6ac1a0
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,903739821220448089,13213732650075157418,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1772,i,5085156652259723138,3876226437914459560,262144 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:2
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,652434731333039331,3746660770979255463,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:8
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,18182133924961495068,6501930499063723451,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=2916,i,7584456518447553545,17339179364846746171,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,753463789328620846,15636029733163902856,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,16118247275004116772,11877833480454263986,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,1052541270024099899,1986483198607687097,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,13515003995616350406,4171261845097236312,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5672,i,8766789799296104090,457625419093513176,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5080,i,15441505979857353653,2060316803035392471,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4328,i,12069598742926935328,11012298647396135435,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6044,i,3284948795812308182,4317375345974607131,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,4561517206963077723,17234215856190534416,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,17599547220341148234,17671169279807962830,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,11503117161821574705,4134823304310078461,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,11503117161821574705,4134823304310078461,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4844,i,2347157845333011555,688994481155459929,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,12712609299762707402,18405578456038919118,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5312,i,389520562463510873,16613717723486667190,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=796,i,10876124194694524754,13250142058568137554,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7148,i,15200138122194098433,14718370838065385090,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7192,i,11650452514009348404,13443767890831311690,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4020,i,13170107819624272343,15716711124234397992,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7560,i,9323694828922416884,769252022973967139,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=7208 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7600,i,4769106764856808648,7599307217234340894,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7516,i,15337068106000916457,2145424017771948722,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7736,i,13477168980579126375,2628541764769974841,262144 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=7360 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,14398453831466035505,16209526856708692856,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,15705626674900820901,8843306946326113,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7740,i,1549853383575079341,15755908332716501915,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7496,i,6517302766112390625,1927020500451522980,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=2172,i,16278183467636376859,1098231908883255062,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7904,i,12195992544130495392,9292813426094950142,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=7916 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7908,i,91122235400666326,7690394121343682896,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=7936 /prefetch:1
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,7647422434472313690,3215227100631106150,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7432,i,1346878894688885539,13117659948997652287,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7432,i,1346878894688885539,13117659948997652287,524288 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7252,i,5950179080710596733,4336514466859318298,2097152 --field-trial-handle=2988,i,5030923390114225339,14448622696981254553,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:3312
- C:\Users\Admin\Downloads\SolaraV3.exe
  "C:\Users\Admin\Downloads\SolaraV3.exe"
  2⤵
  - Downloads MZ/PE file
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks whether UAC is enabled
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  PID:1796
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1796.4152.10072099942013171042
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:3236
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x1a0,0x1a4,0x1a8,0x17c,0x1b0,0x7ffcbd28b078,0x7ffcbd28b084,0x7ffcbd28b090
      4⤵
      PID:2984
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1784,i,4159539379239130096,6835249860215971001,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1780 /prefetch:2
      4⤵
      PID:3368
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1904,i,4159539379239130096,6835249860215971001,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:3
      4⤵
      PID:4924
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2352,i,4159539379239130096,6835249860215971001,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:8
      4⤵
      PID:2088
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3512,i,4159539379239130096,6835249860215971001,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
      4⤵
      PID:4424

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 35cc5409a0e92c7b1f173401d1114c9d5fdc977752a8e45ce9068d8101c9a651
MD5 4177a98ec95c7b8511089a1be66e9e7b
SHA1 523d632928047252508b7d45169327ef4523179e
SHA512 d9e67625f1cfcaf9b90149a3ed0ce8899f43e93e14c729f7cf114adedf8a6a345c93240cebfa58351038924578a437d9d7144c7dcd826b1b8892dc523920e947
TLSH
T17AD08077670FF411E36D5131D503C75117AE547179625723F118C40D99741D693C51C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e9b606cfbfc7b0fcbfab1ff9a90d94ddcf0c4033903cc47f13cbcd8bcac95cc
MD5 66bd1dbef8b4df50e7a09a2d2848fb79
SHA1 69983a576369225e69f3c4e38eef011e7e436249
SHA512 7f8546014287d3ced2b59766b273c8d8981aee3ef643630332615e594a89f92a95f1ce112c2fa889b0e249a10643792bfc57043bfc523d6ada97b8bc7d6e7d6c
TLSH
T17CD080776B0BF411E35D5131D503C75127BE507179625723F158C41D99B41D697C51C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 e9774589a23342cce53e23c1b51791143f878a2efa53decc18979ce895824e5c
MD5 883ed830f6922cb7662ed2223d2a7a34
SHA1 81111514b1ead68000a41cb14e6f96b24dcffe6c
SHA512 2b60136eb0b02b9fd60daf5b34830630ae09c428a68451986a2bdb9f5377547267fedde820fab035c0eb9303a16ea475fe52ec3a90f8dfaed8addb0a5c56c2b9
TLSH
T1F3E02614A6C4CEEA4F81D487F044F319C9D0B507BE8CF8DE33AC6C9E28501489B6A8F8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 ae99fdfc3fbac7deff206af98556f3993f1c3f40fe1176939f3effc93833bc8d
MD5 9683ee0effa2bfca240118d3a9a92e68
SHA1 7f5846f3cd2adc8fd0788f67733e1a66a9a4502d
SHA512 063dd8a1a4838b395fcd50939ca3e5b24ac72a8407ffd4463838b0b2ee5bb8d41938609e4216ead91f6f1a45a694113987c815ba88fb7d83f6eb6cc2fa33d737
TLSH
T194D02B9AFDEC9E5ED7E41ABD5BA5B4000A4802A2840B9B1300747EC03495AF01E25030
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c77d1bf8748e3034ad7e75adad430d40cf7152e2ec02cc117265f165fd4dfb00
MD5 6508e548ee50e1ea1884b77e2226f319
SHA1 a105fe4edb2467f1fd2bc65bad053c1039f3cceb
SHA512 f178db54ff6e743e39baf9ea1d0c5861718ebae8b6b16477cd01409e31201d33c01c16b66d43dae1ff06224527906b7fcf9944ed959042bd76cd46e46edfb55b
TLSH
T12FE02BAEC921AC3704FC1B5C6459078AD70413172A404A6F3B3D601D8FB17375686D6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000ae

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 405KB
SHA256 2b036b7e09fee4750d77ccd8ad23938777524be6c38c71f7055906813870d60b
MD5 da77c21ff0fb800a00576fbbc57832a6
SHA1 def9ee27b7f44abc2dbeaf1b56f242c140993adc
SHA512 5b463b253d5f9c713e7f89fade6509db42bad397158b5d42bd541b5ca15e79067ae0199d7382de54fae92f9d712b0f66003ede6f5a45d15317023a2c2242c41b
SSDEEP 12288:Wkbz9yLTEpq7JjSozRS7Wlc6YpUl1TQ8cQZB/1wmx:/bxyLYgjrEsuYwmx
TLSH
T1969423D7F25924C0D1A4DB4CCC83102FD55328AA66246B0EDAB8164F3D67D4FFED982A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
Size 67KB
SHA256 76cf4c97264a6758f3d6ba9b78ce0a4130fe0804100305819fe8e9145526e432
MD5 abae0fb3c48e9ff2101729741f639220
SHA1 3ff3b23eb90676ea32a6c03a454e6d85eb269a0b
SHA512 bf88989d4c60813fd61473092975c79a3e257e2c5d99cc30ec6ed322ba75042cb42e6051e958608033e9e7f8ed60807d8e433793e2528aefbacd46c28e447f9d
SSDEEP 1536:FVlVdK2EiPI19zT1jQrvVqorLuZJHOj5R8v4yPqBpkzTjVRz:Xl3hEiPIr9je5/uTHOj38QySLkzThRz
TLSH
T1A06302F37E5CC85E8EC4B2B837DA19A1B027D4D63E5580F5ABF910C3E1E424A07D949A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 1832c31f891c0bea9b51283aefed20347fa3d0e50a9d6f85f8f256049411b9df
MD5 6329cb82e534ed2c35e092bbd9412e0b
SHA1 baa4794f75cfa908b67a49331a23ee0e8dc84324
SHA512 787f03f0498446fb59312382dda47de858f3d5262c2826edcc26fed986c262711d3153d6c61bbdbc5ffd98784516e548c3a07f7786a7cbda2f5c9c736f6a4d74
SSDEEP 96:m9h7jrYbNNM56ma2FN/SJQ5U9/D6At2rgAnV:8jraU++UB6g2rd
TLSH
T193A1A66501E125E8E777C2F0B8E30D347A7DC6B99B670EDE1A905772311ABD06133C88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 40e79b6a9e88a820c1d609dce1a39edec8562e9a2966b79a58f7eb5453361281
MD5 a38c2da1a762634b14df46a511254538
SHA1 359c964bf5b61447c780e0a5795858b267966089
SHA512 a0a056f529ec2ab45cc315eda1f6f9594eff7b9ddf35a0cf6decc5c0cd87c79d73be2470bc02ca573598bb5a5a8d9e6a217551430b18ab6d7d0a67dc6eb40d35
SSDEEP 96:5D54jPuoc4BGuqvRDvaeSjhxl3Qrq7xeIXrsywkxPFN/klRJHGoMv82lfU:o7ufSNeCl3Qe7okrsKsljmoZ22
TLSH
T17BE12C2C01F115D8EF66C1F179D30C313A7CC9BA8B57DFEA2A615AA1750A7C16223C88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6ef83fd0e26abc341e6bdbf2ee311f0c7ce8231e7a6bd25f0826f9c4d80d7ce4
MD5 8759bd8344d6431ff36702221a570859
SHA1 6515d24ef6c444482c3900fd297974630d4f961a
SHA512 580f6e5aebcf3720cd9a13548d0ec06642d14ffac9021224e40dd541c34d024042f4a156436a3e9cb396bf708dede07955711d7c6be255507c9a1c93fed60ff0
TLSH
T1CF816D5512B225E8E363C2F0B0E30634BE7DC6B14B670EDE2BA06BB076213E56177D48
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5952c9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5952c9.TMP
Size 3KB
SHA256 fe8ddf8ede5c3880fcace467fd18fb1c7deefc0b544c307b935f6896f7ee6f8d
MD5 f0d8b786d3f9d567914e824af7a0d65c
SHA1 ce446582a858215aae1cc20e60a74aa37066638f
SHA512 7694297997dba25b4e5a8ee4d3df21309be1af3483889a2f02a67718bff4ccb8982127ec6199ba5b5147f7fc8232cc42a7f937751d140c4201bfffc8a3c1d7fe
TLSH
T1E6713955026229ECD323C2F1B4A34274BE7DC6B64B670EDD2FA06BB075203E2A173D48
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 14ee8d909e95d8a1560f9ae9f2e5bc643a51e966536cdd5ed2303ebb08f44108
MD5 02a6e4f1bdae79c55d60d6e822e64249
SHA1 5320d866090f75ae800d201ada3efe51a22306f7
SHA512 6d80ba9cb4b432a4aaf937cbed328d9c3c4205b0bb3c38412f2922bfede0ff69d7b790022e0c8449331b846771415a6f332821d1da59cbcd00f3b73681afb159
SSDEEP 384:DW1jFMoXmJ2aJbJXPMPgPuP3PRPsPpPRP5PoPfF48uPRhL0aaiGVRiZIj1INNlX3:NxBSOcfpyBpR2KSjIFI31KDfW/0rTIc9
TLSH
T1497289F793E5862DD91192F49A146F1FCE2E1925432C3C3AC9E5AE0B93E2471E24178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 2c1ea9ef7bf30d2f63f482b4c53beb0457c2305cc25a679df9001f2006b4a08d
MD5 fe91f54e74f126cbaba59e86d2b55596
SHA1 f3e9ab869b79dccffec328805bd30e8fa862197c
SHA512 8aaaf6fdb108575ff08d263bfa172ff01f03a3ae752e823e9f40a9371f9172e4c86bd269da7cc5a28b09b128d31ab304609d69cb22bbc792769734e30faef01f
SSDEEP 384:DW1CoMYfbpUVJdJMPiPNPkPgPRPsPpPRP5PoPfF48uPpaaiGVRiZVjqNpNlXgC0B:9Xc4tKOpyBpR2KVjI+K/qKnfW/0rT6bI
TLSH
T16F727AB7C3E4862D991152F49B246F1FCE2E1925432C3C3ACDE6AE4B97E2471E24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 a2ef5a081c20400cd930c9e09dc7d322a11ae96e8b83913cdc78aa8796a87b9d
MD5 c026465e035d032457b769e4eb8f2f5a
SHA1 2ba97fb3dc28a76d817d638b76a685adbbc0ed31
SHA512 eb105e8be4b4e5b1a4cbafce512f59ce471f0fbad3aaa1ce5c361fcdc820ece300136e9a37452cc0934885f2732c3585ce079e50eabb1ca004bf6fd4006e816a
SSDEEP 384:DW1jFMXmJ2aJbJXPMPgPuP3PqP8PBP9PpPDPbpt/IhLooPtaaiGVRiZIj1INNlXm:axBSOcfACZdBzoZjIFR31KDfW/0rTIcx
TLSH
T1F36299F793E5866D9A1192F09A146F1FCE2E1825432C7C39CAE5AE07D3E2471E24178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 62e5f6ff243b4457cb34e77a23aba411f22ab1e52f055d67fe8198d6117a51eb
MD5 1d53c6a50cd18be192eb2879575d4423
SHA1 1fb21d29c04df7f5b866007a563897696ec8017e
SHA512 ad5a31074a79216a6872358796eae26b70ce940db009d583f5313cdfddf667b0bf4e2730afb471101468cb5f1e6bf8b8e72d3b54f7be1043f364721b022ae20d
SSDEEP 192:DW1CMJMYfNJpoJVJdJIaaij6VRiZVjqpHpNlXgCNqj5PkkwmPVGhWPi9i6n:DW1CoMYfbpUVJdJIaaiGVRiZVjqNpNlh
TLSH
T187E19FFB87E4D66E891152F09B24AE2FDE1D041A522C7C2ACCE5AE4BD3D2471E14178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 33KB
SHA256 9c3eceeb7f0e97b9c8d142fbb55d3c4e6a60528ddbc3ac776a4f7e8eb97f9db3
MD5 1033e24ed8019f75c3bc183d4af2a48f
SHA1 902912b59ac17dffd87c56f1209b90ab178b78cc
SHA512 b9bc402a32c5fb9c63d5d27adec38dcddb0206d056fa5145450a787583ae96bbcb9c59c25cb23dd5e8d499d6263c221f008068f2bcf9f1e8b6d713cf81682f1b
SSDEEP 768:sYrBX4/f2dE4nnc7WeT+Kg3pLKSLeoThHbcDJ:HBXdlnmW0g3pLKSLeoT9cl
TLSH
T1F4E209059520C87BDBD39D19A83DBE73D6AC40539584CEDA5AECCE0C009E6FDAB07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 5e0633936a04641bbfef553c5deb5dc32559f1aead639ce06d76d3d77a359254
MD5 b9a1c00066a1e50960cbfc3f920284fa
SHA1 f1cda6f2c199dae696124e69289981f5b1ca6b86
SHA512 cad5e8d587d732adc73fdf96f457de12a7369c1eea6faea107416e786d9971b9e6719e0e1689807a83ec3fbc42038eb71eee125b1d35f0a32fbe53fec0e5e6cf
SSDEEP 192:sxZnRL1yMqZjK1Ml8Mk4/fLszdiuo4hguzodpHv0RHW6+WN+/DE/YXsvFnZIg555:sxZnRoM4/fLszd50AHbL/BDH5
TLSH
T1B962F9056A749D7BCCDBD309F945BB93D2F9556392944E489AFC9E0C04E7AEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 981082558544c691bd0370d9d37a17a601e35d29ba52752a4b380136da2fc853
MD5 107fc179a5fe7f533e92b30547905dbd
SHA1 e6f9e75c274159ae2c2a1694672462110095ba6f
SHA512 959a7c6e6279682b41dbe07a0c45637f6e0600032ce4d93974c67aeb443c86308c1cb2af270f3590e2140ec328d0532e391b791b4d50bc84e58df2a5bf6a5a15
SSDEEP 192:sxZnRL1yMqZjK1Ml8UQhk4/fLszdiuo4VguzodpqoKv0/jys+HW6+WN+/LwSDEp8:sxZnRoqy4/fLszd5UiHb3W/pDH5
TLSH
T15672F806A674997BCCEBD319F955BB93D2F55463A1844E48AAFC9E0C00D7BEC620381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3abb47db0f0f0c96e57b548eddd209b5465d2f8931c49b6e1b9b756adfbfbd6e
MD5 965c0ddc1a4a89b9ddf28eab89914275
SHA1 62dd8c9941cdc2349995c22f31b4f2c2719032ef
SHA512 c4344b9b5cf5a5597614f795fc04dc57b4f14a66827b1ef8ccc15b0a47c79a468ba81f568484d48f5bb3294969b7406965ccc0875abfd15d05fabcc8f63cef42
SSDEEP 192:sxZnRL1yMqZjK1Ml8Mk4/fLsldOuo40guzodpHGHW6+WNGYXxMzZIgjXJ:sxZnRoM4/fLsldtfmHbGWOj5
TLSH
T13562FA056A38597BCCDBD309F9457F93D7F95563A2904E489AFC8A0C04E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 33a391965bb825fae1d2497f21874e02decd5b8ff9cdf8aebc5e72f48bfeb07a
MD5 f507ff5bd5c06654fcd9e4a6ca28d6b2
SHA1 a6187c5652047c7037e91a584b1ca96d7dade399
SHA512 3e724b626826c7c781641fa2a424bc9a18388d5a8173091a2139547486c15caa5137487bd38922f981006881decfd8ac7a5b0db4c5c85de6a406a6263478b5dd
SSDEEP 768:/Zk4PXDWvXt4h8F1+UoAYDCx9Tuqh0VfUC9xbog/OViiLl42vJ4roWpN1Z4STU:/Zk4PXDWvXt4hu1jaHiL+QJDWpah
TLSH
T1D0D21B3F680CCB7E4F844E5CEC26AF966ED801CB66988D4447FA494C03C77EB521A59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\64d35e3d-c11a-4565-9675-8f69df0b3009\index-dir\the-real-index
Size 72B
SHA256 f141340229871c993fd83a76964b0f4080e24107484d0c5c5f0d65ab8b17ba3b
MD5 ab89f68cbe78f971913ded70e7f8b4d2
SHA1 b45d643d75dcf1d97af7c4bd058688005898e602
SHA512 49b7cf104a36dc2e16dc8b4d3aa94deef6113e62c3f8a8e7638629ff6b42acf8e059ce6bdb31f031563b786cd3e66be2b471d863edb026d9a3bf3d7a20b7ad3f
TLSH
T19EA002102BC53445D01321B15F9307411340D82027002A0741D50454CC588BA454231C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\64d35e3d-c11a-4565-9675-8f69df0b3009\index-dir\the-real-index
Size 72B
SHA256 255a9516922d1492191e275b0758100cd3e31384ead842990750fb3a8f31ad7b
MD5 78a47263527d86fa9ebeb7fbfa6aad78
SHA1 e5de07192a2a77a1616c4ca835ed7f3f8ce31c32
SHA512 092c5698ebb0b59c66183eff656a72cd20495a48b3f4042a02d5308df9ff07ec1b171463293ecb85368cefbc99e240235abaf65922bc7326e763beafe64d2cd8
TLSH
T146A0021D02C05087D553A3F275D7417162184950E753AB0955900254CC50565495310C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\99755d9e-864c-41e7-ab4d-7cb31e17682c\index-dir\the-real-index
Size 3KB
SHA256 2a863de0dcefd837679ed6e730bc94d7c0927abf1065e0eb78eab2d879570632
MD5 d214bcf1978b8f445718c13ace4eec1a
SHA1 532e88ecc551a0165681703dcab18f6a6305a139
SHA512 2e698b7c4477796b79a7f5774856128f28bd1fc87123b587dda3ae38c433775bcd61bd1089652ed8cd472475b65853875a7fdcc90b0823d65cab8cbb33ed2908
TLSH
T15051C90E4D422A1BEDBC117318F7149437F6D8DD56889E1BA49CA030BCC772A2E6A216
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 abd3c6662f4d5287eb5d3901223da5d7c6509358d5d484498b46a3d1eeffa735
MD5 988d215d9983db656812887a1f06d50a
SHA1 5932917624965ebde49c14197f9756b3b81fecca
SHA512 5d058931c71f7e3077182841e446d94fb9a0ce15ea577aa750237a8f1573be5051e0a8bcfb1835b7ee57eee77d4f57058aac54bda4e41e1b52cd457871bef5f9
TLSH
T1DAE0C0F72CD31D00AC7FC3D1347264910A1179A88904AC8F142F92C7B0B16142817C73
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 6b52db2b7d8c58d2fbe8ffc01ed00b1dcbf8fbbb540af09b07dc8eae695efc87
MD5 4b93b316f351171e4feb3044ad0b4dbb
SHA1 8d1548fd63e3b75f42a101514e48174e0a62f641
SHA512 eb9169e7e460ccadc64e62b5b1e9a5b51584dce84cd7e1451a467a07847d86f7dad9e820576fadcfeec8831286562372281dddfa2da4ef7f8c55f5bb5f77672f
TLSH
T108E020F72DE71D14AD7FC7D2347264510A11759C8904ED8F542E92C7B0B16252856C73
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 12fc3ade87d9476381d60098e529212096cf73c06007d1bd6ba575d522358740
MD5 6c570e6af8bab834ece690c5f3cbb109
SHA1 e295f844f67ad21b1bce704c325fad33e1b3e704
SHA512 2d0e60590dd54b364690aaed02d51e5c4242014cac1e8a69d9d4eadb8971f218e274e285cdaea22132db21e6297c039a0a057cd9598286783a955537902cdb7f
TLSH
T1D5A00275DF5C88D9C500537090A5018462208EAC6A3BA31140AF0394C8BD19449FA148
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e2a3a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5e2a3a.TMP
Size 48B
SHA256 6ea0485119595aa1953e58e85fd5f7c67d99296fd48f32a5ae5d45f19d8e27ce
MD5 37b3a2110820c97f113612ff5e7da1a8
SHA1 e7c976b35c6ccb0c0fbaef9582865c06383a7786
SHA512 ddf67e5a33d9f1c86e1c2d13265e75b45a494618b4fd14569b57c5557b61a3fff55c6cc4e5b91cfbcba324e1cc3b209b58e23121280e3446fc62a4859fc71ae8
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 4bfc5f99e8f3a175bbb1b1a5188309d393164bf5c93311149e3af7a3c52ffd7f
MD5 2ac36b21c8d3f33a53881a5cc32b2c1b
SHA1 358b5934f161e25c106f6bd9b5a371ccbd635fe2
SHA512 84a33527648d5b8e3a0bf6d1c8b1b1aaabac36dd169044cfac0089c009967bb8028fc96f664dcb88aae3e66ac34769f49debdd3b4e270848b7a26a51a46dffa1
SSDEEP 192:EtjGz7Y1/St59NZp1ZVzDqHgnmz3th9AZkzPr1PVIfPU1SZ7+:EJGnYNSv9PpHV/qj8F+
TLSH
T142B20B13313A03423CBE2519A6B686779E4231B33019E67F77A904A64E6BE124DFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 a0529e83dcc35cfa6928bca8d6f402b748d6d153a70174b7af602804f18956d7
MD5 1aeb08baf51cc06cf4c8f0bd21e51e93
SHA1 b337b1c18bcb76d731b27c8b83c30231997ac9e2
SHA512 4130d174eb16ce9a8d005fb565904a260439f4c3b64e192fd2af026098ba9344c0bf52afc3abac937b7245aa5900fd803712c3db476d7f5ec6aede70fd98b70c
SSDEEP 384:nWiF9CcmyWCs3sNS8TUNTUlI4kYzoNm0ad9yifgVIiqB/XwkBX2QrfFxHy/7Ig8:9Fccps3dwgiddUVbqBTGQrfv
TLSH
T15BB24B32EC94D9BBECE79BD9B74A3643EEE04263C58C5AD4DAD91D1C009B1DD030B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 81331f31ad28a16f6c637802c20df575c255c7071e1518b869a3bc3076961757
MD5 c0b48baf4284e9190f4e592846191461
SHA1 ef16686ffa40aa750f677fa7a9222700d9ce81cf
SHA512 91562ee45531d65305f24493a9c028e0fa192b171a73810540fef15b6a01c6e6eb5798805c5632d3c0283fd95e41a0e6c5c145cd6a70c21b4eb0168aef60a090
SSDEEP 384:nXiFiZcIntsNS8TUNTUlI4k7zoNmWud9yifgVIiqB/XwkBX9f6HlytEDq1uW8HyZ:SFQtdwgL3dUVbqBTtfoy6DqAW9
TLSH
T142D25C32D8A4D97BEDE79BC9B74A3A03EEE44253D69C5AD8E6DC5D1C008B19D030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 58edb1882a3814f6eb9be22df54cb159bb1df409b46a0828769fd168c37df617
MD5 c04a979dfeae6e9b8deb349b08f5f266
SHA1 775b9c93ef554ef90a76e8bd191d46a7e5614b0b
SHA512 b66b340093558a91112eea5f044bc7c7256cdbc8b673844d93263abb3ce5634c7c9df96e721cee13c829c4ecb9a22949aff96db8a0efabd97327af3b9c3e793e
SSDEEP 384:nmkiF9CcmyWCs3sNu8TUNTUlImkrzoNmfNvyifgVIiqB/XwkkQ1FPehkP+lFYS/c:m/Fccps3twglnWVbqBOQ1IhkoFYS/c
TLSH
T13BB25B36EC98CDBBECE64FCAA74A7A07EEE01263819C49D4DAD91D1C009B1DD1707C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 04c05209f0730b8a2d7d0f16758daf19b1cc8cb93b04970aa26baee284f4b433
MD5 415cfe4e34292e21d4c852b60920e90a
SHA1 00a2f4df540e2dcb1633f02650e85defccad971e
SHA512 66bd6605c792f5c3d1a099df2da8e08a58ba1bc970c56e432b66ed63e941cfc56b44c640f0814688453af4fa8da380fa6e311762ea5e536ff460aa30135f16ce
SSDEEP 384:nXiFAZcInjsNLp8TUNTUlI4A8T5oNm+GhdxyifgVIiqB/XwkBXAf6HlytEDq1uW9:SF+jgpwg6tdYVbqBTwfoy6DqAW9
TLSH
T180F2D4F198D78977E9AE4B87A77D2D0299FCC113B5885984B7C81D1CCC861BFC30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 3ba02ed55ca7eab2647e20db30df89be1cb41610dab81863b2bc53f2d35f5fa3
MD5 330c48e380bf87ba1741695a50ffea24
SHA1 d569dd6ee336b543dac19f5b5bdc01a7a608ae51
SHA512 358a8b1f63c07e1fc16021b7e13c10f7ef7433c56a78681a8d10de79022cd7c7d9e07c7c2fb11ddb7d545241307460bc1c70c353717aab56c1bdce77f29fcbac
SSDEEP 384:nWiFiZcIvsNS8TUNTUlI4k7zoNm0ud9yifgVIiqB/XwkBX2Qrf6HlytEDq1uW8Ho:9FQvdwgLNdUVbqBTGQrfoy6DqAW9
TLSH
T193D26D32D8A4D9BBEDE79BC5B74A3A03EEE44253D69C5AD8E6DC5D1C008B19D030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 993dd8c6ef0e48071b62885e29616011a3737372c3efaf43ede79864f75e835c
MD5 ea0b26835403a7302b3fae6f23ff4470
SHA1 a590860acef07a3309f8bc00d6cc2f00620c9825
SHA512 7200697e19eaa71afbe96974a44ab4c8bbd24be46f503478ac5808bae1263af60df1fa15fa942ced0634ba218c9513ad66245a94065c3d0ff9634b44b2fa6142
SSDEEP 384:ndiF9CcmyWCs3sNG8TUNTUlImkrzoNmSwuyifgVIiqB/XwkBX2Q6fhkP+lFYS/KJ:UFccps3twgl/3VbqBTGQ6fhkoFYS/c
TLSH
T1F3C25B32EC98CDABECE64BD9A74A3947EDE04263C28C99D4DAD91D1C00DF1DD430B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 71db38b4d03c2cbf979769ac844caefbac6377eb35116072f12efc6b6b02f334
MD5 9639d55ea5315b7157970442926157f5
SHA1 9af12118a778de408167e261caae8d7e5c74ddf2
SHA512 9e7498aee4d54c4ae91098f045a0692d4058f5bd36923ffa019f4bf55f5d55fd3cb559ceb96f6a411cadf77ddd200bbddfe355eda3e460558d2327b599b60a6a
SSDEEP 384:nPiF9CcmyWCs3sNS8TUNTUlI4kYzoNm0dd9yifgVIiqB/XwkBX2QrfFxHy/7Ig8:aFccps3dwgiadUVbqBTGQrfv
TLSH
T158B24A32EC94D9BBECE79BD9B74A3643EEE04263C58C9AD4DAD91D1C009B1DD030B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a4aa93161b70dc2e24d950b2b124278ed9392eda57006d7907857ea06a55bdfb
MD5 07614f23b941d70b241fb6b19ca78c2c
SHA1 39fc79383e8eb15c5db05f5373330ded63108edd
SHA512 6edf277431ec06672b0f54b3e279a7c898326c5cf08cc9c55e91db45e000a9e0b9aadcfa0d74f091c68487a903e508a4f3205c58308b5c7e0b9c35cb10c17926
TLSH
T18EE00913D30200FEC02C0334188B1BB43AE3852012F253264E7911682C673147F30FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4609a00af9e01ac463704a4a9742326f2fbdcf5ae268dbc04e4e5aabbdfe6b1b
MD5 d29bb59a59148668ac3a40f18d0f97bd
SHA1 f841a7553239c638b961fb92a90ac8b5dcc04939
SHA512 7865e0f299d717513c86e1a48f2b221d760cce9be39f334f0eabe54583beaee99dcc34a261e4f6872906ca3aa32641f14b8c703cc090052330550b1cf42d8a8d
TLSH
T16FE00101930010ABC028033410C71BA43AB1C41003A342164A6511782C263043A20A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1aa391dff70ca2297f7d30436be66b1d60b3f106d0573bf9c4d479b32fa030e6
MD5 6b1c85f339690bc9c83e5cf163c1491d
SHA1 9fa12f5b24479a2e68dc874d03f33fb38957728f
SHA512 c3f27d1c967669d6937cc7a6c5d1db2eb6b06c61f4885a9a498272d4c6f03dbcd2a1a231421051743ea8ba2c8d785f0493f3d4a0b28ce894202398112f21e237
TLSH
T195E00902930100FEC02C0334188B1BB47AA2C42002E252164E6511682C663143F30EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59a83c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59a83c.TMP
Size 392B
SHA256 bbdad7ecb5cb024c4c52dc490fae5262e36308345ac1aecbe98d1ed23ca8c5ed
MD5 74dae130d97b294cf2773817db319dc6
SHA1 ee2217b0c2b8bd2ad04193799548abddcad2c127
SHA512 c4962081cfbcb00d5ba34984b50423443b3ed40505159d1d7127fdde73694d21574b06f7ee0daad5c5767af0e7bcced60539d437fca4802e2e5466ad0990f289
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fa319a630c4eb4b419d9c6449c74153cfa923dcbd76e9783c73ee181904b17a8
MD5 18309ff0b117ebb6e18d1e45c1f743c4
SHA1 69714ec34791618cd81c3a191ebddc0e2c10a925
SHA512 e24337dacf64a8d793e0284b785f9fb9f5ab7f991870ca3f3c741211720c813f03e306265cdbd89ece5adf10001cf36ccf7f36ed6b06d8a4d04c49b7297dcd86
TLSH
T11E413B4CA6E91108B7776F599BF6696E547BBD372F06C45D00010E4F0623B40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e6d95e89ba2f830c35def25726352ed51adf5a85a92d0e928625add761184018
MD5 cc8ac34e2494d605f18adcf45fbd8516
SHA1 3b2ef9b9dcb2431bc99a32592fdc53c704e83fe7
SHA512 0ab1eb498bc6fe7024b9ff00e5c9b9c5d8e3fd632b6da279a583f10fc351023cb4a48c7ec9ebb79ee481da124070bff1d2296bc1846f49230469e94d5f256b82
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 8c91f1f43ab1766f0ecd2b9c1607683709c30ac5a95beb079802c23226cc0297
MD5 bba39ca2ff4119f8b63a8d26573df3a9
SHA1 772ad3574e0e48e77be6c35dedfe36bd6931c227
SHA512 261dbb353064523c49987d9f4af06abad6c2c3bf62766f9df2397d6bf9868664fd767d94b99d9c116d70a855832eac0c1b3d77a31acfdbe6f436e7da8810c977
TLSH
T105D0122232910574C0102433144279180541C10F82464010742D859F1E684540E03441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 dd43f8d538734149c823164b0cbd41d57aedf35812e14311b070eb07ba9b408e
MD5 4f739812ee6c9738f155f566358ed425
SHA1 98db3625a2c5f17ae19ccb1bbde4c56ea443be5f
SHA512 02a35ce46d81e8f1c4baf82128368ed8d6b2f955e549e82658dad2c4bdeb80780a1e7a44ea231d54e472e918921b5d116d657bd4f70b0acd145a2ac26cf66389
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 f8f53d5aaba60735d9f8d3ff17760d08f66c9a5b23ddd98bc088eea6bff12d4f
MD5 c2b00c289ed05ea2c08339cb840d5e44
SHA1 43a3ba0100a4228a6976da4a9749f5ad04ae2ed1
SHA512 c0e7462e166fd94bd92079c4b506dbe7cc93fc041eeab521754527777e81159d34c0df27a523ac6bd23d6ad4da704e1228fb25f402d82992cfb0857f95c28dec
TLSH
T15CD0A715A5C9BC04D72125B702C744573AB60F2C11520EC313CA1B74ED283869681155
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
Size 6KB
SHA256 9e4771f2e0b6e7bfce5ae59778a3cb0ce695bdd39dbbf4099e80fd102f0c2125
MD5 18c440312f9386b1616850cf7c7e27ef
SHA1 eb54ecbd9f3abdbc884604cf96ff5a49ac361e91
SHA512 92ce00ba85691588bd769c5b0a2f582c24698b6063996526af70ff4a4dd4266218b062e7a2111e811f94f7622c3b7e600c47695575fe4fcc8dc9e5f1de22cec8
SSDEEP 96:st005lLGOb9N5DffqoZ8i0vhEL5ktNm/7qx+WVHMSm+uecJ/lS1ixg0QjR+gkDM8:st007blf5Z8paEw/S+WiT/cwxg0Q6DM8
TLSH
T1E7D1C7026E68B97B4CCBE6197E35FB52D2F5112261D40E98EBFC861C08D66DC624790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
Size 6KB
SHA256 f6c4e3042f54d10f33f06bc3a69feb1dfbe2e2e21c6e59af37d507aacac1946c
MD5 b900791ed653a3eaa128c3242859e759
SHA1 3dde68b86f5f090b5f7da56984cfa69ed0a9af3a
SHA512 33eefdabca44b1bb477e95eb3d9b34c6b3074f2f5465829b31f2f7deedfc532a989e26cd52a8a46ae584492bf2c9d15d8f362cf1e5e8cf68df54b6e3a23931b1
SSDEEP 96:st005lLGOb9r5DffqoZ8i0vhEL5ktNm/7qx+WVHMSm+uecJ/lS1ixg0QjR+gwDMC:st0075lf5Z8paEw/S+WiT/cwxg0QyDMC
TLSH
T1CCE1D7126E68797B4CCBF6097A35FF52E2F5112261C40E98EBFC861C04E66DD638790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe60ba6b.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences~RFe60ba6b.TMP
Size 6KB
SHA256 5fb870b17b6da648b5945e95fd251eb8db2fbc5d598b12e0b0a94e1383ab47d5
MD5 a25b80434e687796f3f65c7a5bd94adf
SHA1 4ef3553ad447d44aa84daf3285e9f49610cb3ff6
SHA512 c55e0662b7d8e6aca41f8606de07c2551b22bdb9891c52bb31dccccd5d2e4d9092d8358ba451dc81edb4f15150be570dc32496466f51cb345bd325ae8c875171
SSDEEP 96:st005lLGOb9N5DffqSdZ8i0oEL5ktNm/7qx+WVHMSm+uecJ/lS1ixg0QjR+gkDM8:st007blffZ8pFEw/S+WiT/cwxg0Q6DM8
TLSH
T15BD1C8036E78797B4CCBE6097A35FB56D2F5112261D40E98EBFC861C08D66DC6247D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 4KB
SHA256 3a844c082570edc3cca4b93f756cc55fb3274a21a1927964c2ecf0d1b0a12029
MD5 d2504f51b0b795267b8a96dcb3067039
SHA1 453637665e5533331e5d3071bebf09665a5622da
SHA512 bf96c8c3af8b7bb7d8cf6c17a11635b20651476e3eafbeae6bbb331deda3cfb662313bf517a3d4f2dd8cab6931b1ae4b0fa155d799d7ea0d42e88043235ce5af
SSDEEP 96:zuqIbNkCEMlxfr1XX5Z8Frh/cInURoDoto+5e7DnB5ZI6TFZALTwl5a:zubNbZlJVYooDUhSB5Z6X9
TLSH
T1B591A731B4A4B9374CF2D905B88A3F57BAA15137E5966FA8D9DD0F0C01D72981342D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 1KB
SHA256 a1abcce6d86baabcc45f3d2f77f35ba24687248ed8a457dde31ba380d90d6765
MD5 58a5df17933ef98a225c8ff2b005a691
SHA1 9c8d9d85115ccafca8d3db0d361ba73a92ff289a
SHA512 ebd30c7743a65d5bd78ea58aecc32e9d3d13a585e8d5809c9296241cd48c434ffa3b6d009b1a1b2e10f6ddd4816b0444004b4449686a2c4d097d68172ff78206
TLSH
T13731A772F0E43B365CD1A502B68E7F97AEA12239D2024E48A1CE0B0C11D76CCA566D33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 2KB
SHA256 17dfdba4ff8b2948088642bc8fda8b5edca1204da1a1b41b30986043efaa8fe8
MD5 eb068aaf41935a092e87f568bdf7597e
SHA1 1d0d4da298ae690a546d73169d9452283bef140b
SHA512 964903585cd977c49e82242191ee1363cc7e9c6d9ccfe1ad59a5ee58c106d8eb9d63b120a6b435bdf00b80067114f1b140f00c82a6066217098cc88a59228dfa
TLSH
T1CE51B832F894B63B48E39504BD4E3F53EE715275AA521F6499DE0B1C01CB65C2342D3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 3KB
SHA256 d55f5e14c4e40a9b918ff29c13a29da21d25a2552e11c1845cc24dbfc927c19d
MD5 1bea9b5483b4197093e9d7e920c9905e
SHA1 6845294fadcda5e51f77c32c11bb7d6067fec36a
SHA512 431af1782bc4143140b65f92f32f632f5160ee63b3e8203227ec10c606f9c45512f1a5acfa1e37252a73349f9f7e29fd0aea6253df3bd85c25a614dc367a0a81
TLSH
T142718736B4A4B53B4DF2D901B98A3F16BAA15237E5853FA8D9ED0F0C01D73981391D27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 16KB
SHA256 1ce25606507d10cf73aefeda76615f6e52cd814607fab5cd5a8f580d88f1e630
MD5 0740eb4f7d13bfda0327b79f9138d38b
SHA1 1c818a0493343140e20ac849c915766891f7f635
SHA512 effa1be500974aaaf5d55764693d4dae0877bd458a88e1121b4c91347060803441ded99aa4abcea7de7ed4940fbb4d9080d0f31eff941f2a4d85e0943261b274
SSDEEP 384:z++aQikB+z/xvxjg/qhEwNbZlKl7t1BzG9zB:9/UxvxjgC++lOPByFB
TLSH
T1AD728E37A4A87A2754F3F904794D1B4BDFB599B290C22EB889EE1F0D068B3940342E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe6061bc.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State~RFe6061bc.TMP
Size 1KB
SHA256 5c708de1d279c48b9743aad2befd736f59551ddee581277160857ddbd594cee9
MD5 3b69ab7d43c3e15a7f8527364ec50218
SHA1 887728176dcadd54ca1922b80811d2346b0b7f60
SHA512 e16267ba2f445bbb2dea2a61bc7a191d009056b0d4441c78c454a39e57a52b1aaab01d3b74f6344d0567fb4d078aecdd96028a5fa401f7fb58314ccd351afe84
TLSH
T12C218472F0E87A7A58A19401B64BBF8B6D916379A2024E08E0CE070C11CB9DC9576D33
MD5 SHA1 SHA512 TLSH

Submit Download

SolaraV3.exe.crdownload

Path C:\Users\Admin\Downloads\SolaraV3.exe.crdownload
Size 18.3MB
SHA256 fe8d032fde42038d8f37d1a93134fe1a2105a0e80259555fd9578ac4f7986666
MD5 03eb0a1f8f30c124509e8a517c9c6999
SHA1 ec9ff3c15ab6b7822155641ca79cf9d6c6c758d8
SHA512 896392fc461aa5433bbf4d0ff0b0388bb0fb725c115a22945c36d25598cacfa52cb9c8fc7176d7c6815753af4c16eb9ce183d30ad963c842e9f16d1da863309d
SSDEEP 393216:ItXdJBvGlmAzKCUqhqJmY1ypQ4d4SAIsdZz:QXdJBvGlmAzKCUqhqJmY1ypOKe5
TLSH
T11317E7617B5B99ACD09BC47483478A720A7170CB0B35B9FF449496382F6EBF42F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\Downloads\bin\DEBUG.txt
Size 206B
SHA256 6145bbc29621b46d8d2dc59c58fbd17968b3a5d71658b6b02bfbd450af325f6c
MD5 7d98aa8ea4e5b4ed6b6c285e18081c8a
SHA1 b5dafcf29b0d95ed129241c96f37d781c32a98e6
SHA512 86312da0ce942a2735ad6f677419829f0f08ba4462d3230686fbdf0b0548f41b83ec24a1df4f24a39bd3cc63c1d8a27d01b9e2bdac5991d46998d9a6198a3e49
TLSH
T1ECD0021563BCE0F35917634F7D511F915681B44384460EDC778A450776B481E0E9FC03
MD5 SHA1 SHA512 TLSH

Submit Download

DLCTBL_FRTS.tmp

Path C:\Users\Admin\Downloads\bin\DLCTBL_FRTS.tmp
Size 111KB
SHA256 8288bc83978fe08ac83ef833a331ce32a3c6b13876aae200819692bc34afaf7a
MD5 4bd15bb6010dc5fe35a66693b8933d7b
SHA1 898ff5de27fbf24f94a205a176328e19b6f74233
SHA512 fbe5757b80aee63510b8204187691f8ba5e02180eb28c2de0f3442960caaf658af3e2977255db43eac406502a549550df8100e6a94ddb9cfebf137c430a7a10d
SSDEEP 3072:tms7SO04MZaAOyoDdNVvrKKFZvF4OIVRrSXO++1/u/:tmsSO0dRCt/ZveOI/Wq2
TLSH
T1A1B31245BF5FE2609989190E359C8E6270746767EC82F0D38B7947934A3BFB2D0CA10E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
Size 583B
SHA256 2694abf0a50a8e0f02f9b7945f26a23b23c8efc1632c9fd82de0c16d07cfbea2
MD5 6ac3d3d36576749fd86a3ede473a6307
SHA1 bbabfc51c23a2f652f7c5d39977ca5b61d48bf4b
SHA512 2373338354282219b1b529d305bf5a18ad866e614a77ce08f881b9eb5249ba8cdfbd3d6448c71d771cd20ffda3b97e2e8fdb1dbe0cce0b2138821f3541bda2aa
TLSH
T1EDF0B49F1BFE51A60D0344ABF8970CD38480710706635FC4EB91616235C8C2F5E5BD2B
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
Size 1KB
SHA256 f54a5a99dc20392171b98363175c4bcdbada8a2c62a4ffcc8fa4b526e0023b29
MD5 b483f86cf527bbe6b3b176e4632903bb
SHA1 1dedc44b174e6b13fd8a552f10b4a114eb661a68
SHA512 6c835d027cd6c10a7ae430fe7684e8d8175fc431ecae6a271bac1383953633b5e4777be8224669c62ccec171b5a3411f418a4d72860e56819ae3e7a2ae1f01ab
TLSH
T19E31E50F1BFD96A70852518FEC460DA38845700B62624F88EF9110877BE5C1E5E2BC3B
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
Size 2KB
SHA256 41a0c0d6ae757c1898a45bb591b31d41976bcd0f09bbcb9501ae0e343d0c14b0
MD5 54b1eb1cbbb8f66e2d5af8ad5b7d8822
SHA1 5bc08c5cbbd40af6ddeb8378f3f80d4cd401fab8
SHA512 3904912ae47fd9b58800dbf1b2c31b4b57dcb2bba1bae2c1bcd6556c9ec49a07191f0859f9381b1011b3cd0f9a983097d0942ba8a225220cad57a8fbc17a3a67
TLSH
T18F51561F5BFED5630D92508FEC4A0EA7A445701B66628F8CEF92008676E581F6E27C37
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
Size 3KB
SHA256 341a366bf9d954d8a62422a78b948c851b8be0dcaa0668d7b7fa341275674166
MD5 67bdd9a549413abc4b1d205a2fc46156
SHA1 a05621ee8cf7900516b0eb0a552c85826bd17d4d
SHA512 4eb2f4d6d622b4be3bbf77529ba1f44e425edf29a97a16f72dbf55e60be5012233344a279cf5fc4c1d672f151ba23ed8309cdd3a2711f7cef81143939b91a607
TLSH
T14E71544F17FED4A71D92108FEC460EE76815301666629F88FFA5108672D981FAE27C37
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
Size 4KB
SHA256 df5c5509cd9103b4d0eec1f673a7e0546ab5d4640380ba95a7b442a145e1c741
MD5 ad116e12258a7c678fc373183a0aaa9a
SHA1 8dc60cbd61aa95274aa265b32ce7e9b3298d401e
SHA512 c3654330f170c182a8dd940ba8ffb9cf27199bdc6a07abc96221ff6304280a5065b91f7e15e6e4ab810fa404480826683448c2bfeab60a0eaa0a29814e4fa86f
SSDEEP 48:oP2UREm09r5z8unbWh85XXKQ5453T48EIftfngEbWoQwxv9D/DzDPl+KWVoyVDFB:oPNqDzfA8IzlXtsFuo12jyMctxagVb5X
TLSH
T13A91349F17FE94A70D92808FFD971EE75402705666A24F8CFE96108672D881F6E27C23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SolaraV3.dll

Path C:\Users\Admin\Downloads\bin\dll\SolaraV3.dll
Size 14.1MB
SHA256 5867c50c281aaee3bb5863548b53787aeb8eb895f52768d6656b36147808a8af
MD5 e764887cbd13f3dfab533b1eed7a5863
SHA1 0553edc9a9bb177ed41109113cd85d48f7ded154
SHA512 697d9eec732f94e7e4ca014cc88ab789c19dd2397e812468153aae17f24bdd3e312b6df8c6b7b0af7fa4c49a79a680eb45099d9a840d8e51ce4f71c9bcea11c1
SSDEEP 393216:0wS83kqL4CtTqThEMH2w5h6AF+DvzwH0G5lCy0:0S0qLptglsA6
TLSH
T14BE69EE734D950ACD426C579C793E63BC66F78390335D5E71664A2A20E23ED03ABAF01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1796-1655-0x00007FFCB9DF0000-0x00007FFCBAC10000-memory.dmp

Download

memory/2088-1552-0x00007FFCEC9A0000-0x00007FFCEC9A1000-memory.dmp

Download

memory/2088-1553-0x00007FFCEAD40000-0x00007FFCEAD41000-memory.dmp

Download

memory/3368-1475-0x00007FFCEBFB0000-0x00007FFCEBFB1000-memory.dmp

Download

memory/4416-312-0x000002A5DA4E0000-0x000002A5DB4E0000-memory.dmp

Download

memory/4424-1554-0x00007FFCEBFB0000-0x00007FFCEBFB1000-memory.dmp

Download

memory/4476-1700-0x0000026DBCDE0000-0x0000026DBDDE0000-memory.dmp

Download