44c5ff4856089c27c2a5082fc8b4a51bf9e171de9e991715fb4bb362c745b17a

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 10:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 7.8MB
Sample260804-ma148axerh
SHA256 44c5ff4856089c27c2a5082fc8b4a51bf9e171de9e991715fb4bb362c745b17a
MD5 ad07fb1c99727c9303cccca6a2514750
SHA1 a7f053ac312fdcbe00e153fa8af4c48d755b45b7
SHA512 70cd57178eeef32f326f84d512baf157b45f97e4083276a442ae5728234c89ca9ca246b241086974dba22ec179e716dc588e16df705d52efafdd24ac6435eecf
SSDEEP 98304:zJZQkROUiQ5R8o6dwh/hlnyXp4Hu+ikc7BNygwZHkF:zjQkRk+8JSthlhONDnyH
TLSH
T140863A11BB4A99ACC15AC47483474A725A7170CB0B36BAFF44D492793FAAAF41F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1880	msedgewebview2.exe
1880	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
5032	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1964	2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 1964 wrote to memory of 5032	1964	2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	87
PID 5032 wrote to memory of 4560	5032	msedgewebview2.exe	88
PID 5032 wrote to memory of 4668	5032	msedgewebview2.exe	90
PID 5032 wrote to memory of 4668	5032	msedgewebview2.exe	90
PID 5032 wrote to memory of 4668	5032	msedgewebview2.exe	90
PID 5032 wrote to memory of 4668	5032	msedgewebview2.exe	90
PID 5032 wrote to memory of 244	5032	msedgewebview2.exe	91
PID 5032 wrote to memory of 3656	5032	msedgewebview2.exe	92
PID 5032 wrote to memory of 3656	5032	msedgewebview2.exe	92
PID 5032 wrote to memory of 3656	5032	msedgewebview2.exe	92
PID 5032 wrote to memory of 3776	5032	msedgewebview2.exe	93
PID 5032 wrote to memory of 3776	5032	msedgewebview2.exe	93
PID 5032 wrote to memory of 3776	5032	msedgewebview2.exe	93
PID 5032 wrote to memory of 3776	5032	msedgewebview2.exe	93
PID 5032 wrote to memory of 3776	5032	msedgewebview2.exe	93
PID 5032 wrote to memory of 1880	5032	msedgewebview2.exe	97

C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1964
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.3.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=1964.4516.16875815598092967432 /pfhostedapp:05b6bf243c0fcb238e34007c108b872911f25269
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5032
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView /prefetch:4 /pfhostedapp:05b6bf243c0fcb238e34007c108b872911f25269 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7fff9f525fd8,0x7fff9f525fe4,0x7fff9f525ff0
    3⤵
    PID:4560
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView" --webview-exe-name=2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.3.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1804 --field-trial-handle=1808,i,8271001450128770626,8558005753663724331,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:05b6bf243c0fcb238e34007c108b872911f25269
    3⤵
    PID:4668
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView" --webview-exe-name=2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.3.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2020 --field-trial-handle=1808,i,8271001450128770626,8558005753663724331,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:05b6bf243c0fcb238e34007c108b872911f25269
    3⤵
    PID:244
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView" --webview-exe-name=2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.3.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2292 --field-trial-handle=1808,i,8271001450128770626,8558005753663724331,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:05b6bf243c0fcb238e34007c108b872911f25269
    3⤵
    PID:3656
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView" --webview-exe-name=2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.3.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3388 --field-trial-handle=1808,i,8271001450128770626,8558005753663724331,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:05b6bf243c0fcb238e34007c108b872911f25269 /prefetch:1
    3⤵
    PID:3776
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView" --webview-exe-name=2026-08-03_ad07fb1c99727c9303cccca6a2514750_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe --webview-exe-version=1.3.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4376 --field-trial-handle=1808,i,8271001450128770626,8558005753663724331,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:05b6bf243c0fcb238e34007c108b872911f25269
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b6140345ef7fff768138a178b96145ac5cd96b5ca68071839881741b4b5bcb3f
MD5 d26f5e3d97637cb6b3ae9b46b8376db2
SHA1 b44c8c439eeeed039bc60ef18d44f390004df8cf
SHA512 6ba9e154a0acf7b2434ac04791b3da072ec5f90de8a5eef3210048072c9eb8ae273b9ec6f7160caafef5806186dbcf2fe1141c2aee61dd765811b0f1634902a8
TLSH
T1CDD0122232114138C41021331822F14C0611D11B40454040543D892E5A050701A42881
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e05059f53deb89d073456408862bee7d6be5d63b126067279e7c2c90813b7608
MD5 c91c1375dd71d2ec63eb5d13ce26d410
SHA1 2c9980a12893d3a1eee629e7079765ba83908bc4
SHA512 45ffbf450984c047ba06cac596d0919b2943117eed6c137bba5668e2da59bd72a088dc7a7696960213520ba40339c5a09ad99de1b5301b775576017c35967f03
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

7e67f962-5fa6-4d21-9270-2d1d4c636152.tmp

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Default\7e67f962-5fa6-4d21-9270-2d1d4c636152.tmp
Size 6KB
SHA256 5f6650472827fb0ed2be59c5ccd216baacff6660adcf55f843f9349a2a56e1ee
MD5 86744d40ab347599955c3163bebf2fec
SHA1 a6f0b64580a6e985f8d91e970b8918214677dc12
SHA512 28170ebb02c5bfb721575962de21e1e30f311ad791da96a0e764ddf33c6ee070468b9f584cd49ab571ea391e446b0380a81f8dc9455f71ea62cf2e9f66041619
SSDEEP 96:stkV/dM+70Zv/b907kxo5h16ZPPs7/x+6Mhmuecp7o1ejeoK+gd+28XM1C7K:staOcuu7eo+PsV+FN7oQjwGG6K
TLSH
T142D1B6015E24797B4CCAF109FA29BB07E2FAA07261E11D59EBF8562C04DA6DC231790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 b6da0cf2a2d02fc8d4910ee0a51fde73aa2aa2c9e8adb9b03337a1fe32f9fb36
MD5 ef06cf14808c59a6963678e3a1fa0352
SHA1 1a85d7c28be7ebf415cfe340e36c82c77b8f302c
SHA512 0795935b5813af8e96146e6fb5123657b0f01c1b3d36a9635290ee0f429f4c46d05469b2dfa984683207dd028ac8f50131b752bae2ffd0e92e1112a43419bf5e
TLSH
T15DC04C9C14342E72EB1275B415D7458171340C5475577DCA419465B4957533D1E510F0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f718.TMP

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59f718.TMP
Size 48B
SHA256 5ee90e3c301c48b696410e7be72366477c930c06ffb1d5f984954362623ec53f
MD5 2fc0e79b14833641dd517e98446b19ab
SHA1 92b8234f4665de7f5c1861c501998f65703e8741
SHA512 6f0ff5038bf2f067a88d37f942974300fd72abbf723c2e267750a089121411b1e9775bf8fe660c780ea734716206ec29f5f9ad2fd8953b04cb5b6e64b4bdc865
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5acdd1.TMP

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Default\Network\Network Persistent State~RFe5acdd1.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Default\Preferences
Size 6KB
SHA256 9e70de2f003d0035aa90938e11a75dc1587ad6737222915d99007bbcc3a13de5
MD5 c1fca0df769d608fa46e00b45c35bcf7
SHA1 a2bc6915c76415f40ac0f23d7fa8045f2c99ea24
SHA512 c345f438b391d18fb9899ad158d22387fdf86c09997547d91a1bc118a54ab6a335b0a2306c86bb54e664cd37a087cd6d6ba49e41376b3b3aa554a9480bc5e0a9
SSDEEP 96:stkV/dM+70wGv/b907kxo5h16ZPPs7/x+6Mhmuecp7o1ejeoK+gd728XM1C7K:staOcUu7eo+PsV+FN7oQjwzG6K
TLSH
T1AED1B6025E64797B4CCBF119FA29BB07E2F6A07261E11E59EBFC552C04DA6DC231780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Local State
Size 2KB
SHA256 1f942467f0c4733631c5adc0ed0de958eba66356b2e2c0935f47ed74e8acbe96
MD5 54927bcd15a5ddaa5a7d799d04300122
SHA1 dbe1e4e66eafd834e2be5f87ba5c312451c35fe3
SHA512 bbec54f855b5982fe937c41b1e840fa1f31efea7817084158747f27410c8d3e051f7135b79072f2df3dc5f356a7136fcc44f7f676f6870a6316ae8248ed81213
TLSH
T1D551A8737C60AB379CAA9604784A3F13DE76A0929A521F60F7DD2B1801D765C2352C73
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Local State
Size 3KB
SHA256 ee1d83a0cad8a09742b8a71b6716ea3cb39323d3ad5efff2c1d7ff363efc056c
MD5 ae511984cb118829117a754afb5f4d17
SHA1 a6097955974bee6d71775112c530b8c4e14c679d
SHA512 cd0ae02cdf5a2f811bb39a47fe4a88b620cc60e4684b169840c19edc0268f2bf1df76d90e518a0fa7bb35fae945a02e944ef1533943d392484dd0e920362c0b5
TLSH
T14F61943769B0E93B5DE6DA0578863B06A7A5A023E5913FA5E6ED1F0C01D73981352C23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Local State
Size 15KB
SHA256 d2a144df26eef569dbfa95b03089fbb72d1aabe23a592a9186c69bf433704d8f
MD5 181389472e855dcca4a2d30af8d2dea0
SHA1 cea9c488b8e48537bb86b83aa2e73f83f9ba2c6e
SHA512 2f6df8d28ef3be82b7a96a86609c2882fca24e17ea54625e01534165c88b70e15303ea130f2ca71a6330477b82e6a30f8760a8a892ca7d0c747cd397f673acfd
SSDEEP 384:/+aQikB+z/xvxjg/qhEwNBSwjMjM9d6wCdt9zp:O/UxvxjgC+gcML6wQFp
TLSH
T1A572AF2B95B97E33A5FBE605394D1B4BDBB898B291C26DB44ABD6F0C06873D40302C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe59a61a.TMP

Path C:\Users\Admin\AppData\Local\com.hoshiyomi.subtitle-burner\EBWebView\Local State~RFe59a61a.TMP
Size 1KB
SHA256 d6f5cccfd9760824de3142bd919698a5961f1ece16c760fe04208e5636c6f75b
MD5 e714715b85f426cfa8621291eb1dec8c
SHA1 b5423c0c1342bd732b433eaf5941ecd5a6c39b8a
SHA512 ebd1202bc814fee42f3d2ad75f2ea694735c4e027d9df649036f5bb29e28f2614bc841bddb90098d269f89e71f45ba0885083d516c6d97c5b00f2796efa35587
TLSH
T1FF2138B2A8F49B32BC9A620520437A175E71606792514E40B3EE5B2902D758CA67AD73
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1880-269-0x000001D4C4C40000-0x000001D4C4C41000-memory.dmp

Download

memory/1880-267-0x000001D4C4C40000-0x000001D4C4C41000-memory.dmp

Download

memory/1880-278-0x000001D4C4C40000-0x000001D4C4C41000-memory.dmp

Download

memory/1880-277-0x000001D4C4C40000-0x000001D4C4C41000-memory.dmp

Download

memory/1880-276-0x000001D4C4C40000-0x000001D4C4C41000-memory.dmp

Download

memory/1880-274-0x000001D4C4C40000-0x000001D4C4C41000-memory.dmp

Download

memory/1880-273-0x000001D4C4C40000-0x000001D4C4C41000-memory.dmp

Download

memory/1880-275-0x000001D4C4C40000-0x000001D4C4C41000-memory.dmp

Download

memory/3776-89-0x00007FFFC1230000-0x00007FFFC1231000-memory.dmp

Download

memory/4668-26-0x00007FFFC1230000-0x00007FFFC1231000-memory.dmp

Download