Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    145s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 02:09

General

  • Target
    Bootstrapper_v2,3.exe
  • Size 5.8MB
  • Sample260809-cljn7sstbv
  • SHA256 08774d1c8c3afac9a32da58b78dbf47efda4de6a46f26541482f70281ba2e8f9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Windows directory 5 IoCs
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 34 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Bootstrapper_v2,3.exe
    "C:\Users\Admin\AppData\Local\Temp\Bootstrapper_v2,3.exe"
    1⤵
    • Downloads MZ/PE file
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: RenamesItself
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4668
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Bootstrapper_v2,3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4668.5000.3383898215817390414 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:4304
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffb7bfb5fd8,0x7ffb7bfb5fe4,0x7ffb7bfb5ff0
        3⤵
          PID:2392
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=Bootstrapper_v2,3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1760 --field-trial-handle=1764,i,1944864867702012958,5013072743223820997,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
          3⤵
            PID:4248
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=Bootstrapper_v2,3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2060 --field-trial-handle=1764,i,1944864867702012958,5013072743223820997,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
            3⤵
              PID:4652
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=Bootstrapper_v2,3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2284 --field-trial-handle=1764,i,1944864867702012958,5013072743223820997,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
              3⤵
                PID:1184
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=Bootstrapper_v2,3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3404 --field-trial-handle=1764,i,1944864867702012958,5013072743223820997,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 /prefetch:1
                3⤵
                  PID:5332
              • C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe
                "C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe" --cleanup-old C:\Users\Admin\AppData\Local\Temp\Bootstrapper_v2,3.old
                2⤵
                • Deletes itself
                • Executes dropped EXE
                • Loads dropped DLL
                • Checks whether UAC is enabled
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of WriteProcessMemory
                PID:4440
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4440.1788.8471435996406909668 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                  3⤵
                  • Drops file in Windows directory
                  • Enumerates system info in registry
                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                  • Suspicious use of WriteProcessMemory
                  PID:5284
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x19c,0x7ffb7bfb5fd8,0x7ffb7bfb5fe4,0x7ffb7bfb5ff0
                    4⤵
                      PID:4552
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1832 --field-trial-handle=1916,i,4044622419059322593,5990209818952068684,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                      4⤵
                        PID:5992
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2180 --field-trial-handle=1916,i,4044622419059322593,5990209818952068684,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                        4⤵
                          PID:4640
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2580 --field-trial-handle=1916,i,4044622419059322593,5990209818952068684,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                          4⤵
                            PID:2072
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3572 --field-trial-handle=1916,i,4044622419059322593,5990209818952068684,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 /prefetch:1
                            4⤵
                              PID:5956
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=1032 --field-trial-handle=1916,i,4044622419059322593,5990209818952068684,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                              4⤵
                                PID:2784

                        Network

                              MITRE ATT&CK Enterprise v16

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              SolaraV3.exe

                              • Path C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe
                              • Size 18.5MB
                              • SHA256 230a8a5c55e9e4f0bbd05286d16306082801d6793108f3e806d941ec982f09f1
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              DEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
                              • Size 206B
                              • SHA256 43c3752be0ab30817066d9340f88e14e275afa3c16a4637108627850eb08247b
                              • MD5 SHA1 SHA512 TLSH

                              DEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
                              • Size 206B
                              • SHA256 de633d77c125a896454783838863685113cb12d82973077f4f384b5a2082f0b8
                              • MD5 SHA1 SHA512 TLSH

                              DLCTBL_FRTS.tmp

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\DLCTBL_FRTS.tmp
                              • Size 111KB
                              • SHA256 fba3aa8e09973cbf8f8d3fcdc86a23f500b0a6a29bcd76cf1942f9e78076a701
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 888B
                              • SHA256 b296aa1d4c866289ef8013239f9a9a3888c670f463b6ea124afb04d18d61aa5c
                              • MD5 SHA1 SHA512 TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 1KB
                              • SHA256 24635729babb634be99adb41d2d52812168b0a13ec4cb58ce67cffa2cc960eaf
                              • MD5 SHA1 SHA512 TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 3KB
                              • SHA256 e5fac17784430c44f46377fbe67ce564115519d9d0433f3f526714d07f5aacea
                              • MD5 SHA1 SHA512 TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 3KB
                              • SHA256 67aef70f572e25b840a520ca327bfdb387cc534c6e52690364d1f275483562d1
                              • MD5 SHA1 SHA512 TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 4KB
                              • SHA256 cf7ac42a8c1b54087370d8e03c9d27d7df1168f4147aa3db4ed8c300a88c43c4
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 601B
                              • SHA256 a0606ed471debbe6935f7aafcf0a8360e5e54f5c9fe5091ddc52ab9005bf895a
                              • MD5 SHA1 SHA512 TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 1KB
                              • SHA256 0b9b02f222192e661fab6b1e866feccc314e620d4a352c0b48ac56fdd49a8408
                              • MD5 SHA1 SHA512 TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 2KB
                              • SHA256 6d04fbf3bd193461dabc810497b713703ee74be25db6ac4b1da80b47760cd2a4
                              • MD5 SHA1 SHA512 TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 3KB
                              • SHA256 43c887b2fcc3d39d7fb3efd13cff15884460c6ce28fb8b91410cf0abd2b47f35
                              • MD5 SHA1 SHA512 TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 4KB
                              • SHA256 1e0f8fb75ca23d396a79764bac2f229fcbb7f4da00332d31168db688feff5851
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              UIDEBUG.txt

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
                              • Size 4KB
                              • SHA256 724e0913bec1443e26974d0e462f0e634194fbe920c73ee317342edc6a894df0
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              SolaraV3.dll

                              • Path C:\Users\Admin\AppData\Local\Temp\bin\dll\SolaraV3.dll
                              • Size 14.1MB
                              • SHA256 b263100cabeadbb3c1599c958800ff4c64e5c892d80aa3855d66a3270a76cbe5
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              settings.dat

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
                              • Size 280B
                              • SHA256 efaa0ffa74337304aea596ad75bef247e4bdfff3a4277949f539608d2d72dc22
                              • MD5 SHA1 SHA512 TLSH

                              settings.dat

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
                              • Size 280B
                              • SHA256 57b9ad4c374e019a02e79c9e5f685e0e229ed155afa2ed8ad3d813d97ba80101
                              • MD5 SHA1 SHA512 TLSH

                              settings.dat

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
                              • Size 280B
                              • SHA256 42c3cfd615ebf08584b31c8457d90f6b0bbc7069f571f9a7b7c80752bcdb2ed5
                              • MD5 SHA1 SHA512 TLSH

                              settings.dat

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
                              • Size 280B
                              • SHA256 16130241c65d37e90b046bc0a404219d894b51a719b70c986ab16a6eeb76e6ac
                              • MD5 SHA1 SHA512 TLSH

                              settings.dat

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
                              • Size 280B
                              • SHA256 a58d8139a862bc812b19102aa361bed0ea209697eaf13c4e293d6a0917e95416
                              • MD5 SHA1 SHA512 TLSH

                              throttle_store.dat

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\throttle_store.dat
                              • Size 20B
                              • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                              • MD5 SHA1 SHA512

                              66f50c4c-8c64-4ff8-92ae-fb6d4cc02f1b.tmp

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\66f50c4c-8c64-4ff8-92ae-fb6d4cc02f1b.tmp
                              • Size 5KB
                              • SHA256 582f00ce0f13ddf6c3bf18a74400c3c6dc016adcc19daef19dba52cd3b980b0c
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              data_0

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Cache\Cache_Data\data_0
                              • Size 44KB
                              • SHA256 840100a9fec2fb7f48a588e02d82a2e2cd28c807ea12b4058c317d44c06b9dac
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              data_1

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Cache\Cache_Data\data_1
                              • Size 264KB
                              • SHA256 4d82da09a217801e555a47e7aded8597414708f337274747c49693ba448349ed
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              data_2

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Cache\Cache_Data\data_2
                              • Size 1.0MB
                              • SHA256 be8947520bf0338136eebbd49a0cb5d5947f7a56b6b7b64634e1febbe018215a
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              data_3

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Cache\Cache_Data\data_3
                              • Size 4.0MB
                              • SHA256 7a5921eec187ba1821cfe968c2fe401d8e5318209d13ffbe93d19712b052ac1b
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              f_000001

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Cache\Cache_Data\f_000001
                              • Size 718KB
                              • SHA256 4a66145cb99a95efc16d24bd293ff7a85da3870fd8fdf5fdc99d6098a245634a
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              f_000002

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Cache\Cache_Data\f_000002
                              • Size 352KB
                              • SHA256 6d8e0e4da495893e1612e5660aa3630196b515f691337f321630e0e1741142d1
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              f_000003

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Cache\Cache_Data\f_000003
                              • Size 17KB
                              • SHA256 ba05705f435e7c2c89b4066f24a39a7019746ba6584a11ea5077ce2087ae2aae
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              f_000004

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Cache\Cache_Data\f_000004
                              • Size 89KB
                              • SHA256 f3ab6045c286ccadd23190e2486072327365aaccf9754de2a277d288ca30e0e9
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              index

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Cache\Cache_Data\index
                              • Size 256KB
                              • SHA256 37ca154c6d877e03d7602e7cffdbaf67de192b3cd2e74a2e4025af0b809ef772
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              576099b0934ee515_0

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\576099b0934ee515_0
                              • Size 257B
                              • SHA256 d9b4c08cc889533077a2bf9737ce3f5b2d6267ac3dc3ed85c3cb1810b0a12c5a
                              • MD5 SHA1 SHA512 TLSH

                              5edb259fc53e8c95_0

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\5edb259fc53e8c95_0
                              • Size 255B
                              • SHA256 67a59a5f2dc80caaa3857db8610afecd0d7c251e4b4b090ee5339eb4a29f1a62
                              • MD5 SHA1 SHA512 TLSH

                              9db47b61b4b691c4_0

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\9db47b61b4b691c4_0
                              • Size 258B
                              • SHA256 79b054f5cf3937b6a4f348023913f96e71d65a1ec6700d16807cf09f2aa15e37
                              • MD5 SHA1 SHA512 TLSH

                              9e5416c50bc2bd50_0

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\9e5416c50bc2bd50_0
                              • Size 256B
                              • SHA256 9dfe024866ccb1ad2c742381904d95df0746d0f7514b8520427ff2688263fada
                              • MD5 SHA1 SHA512 TLSH

                              the-real-index

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                              • Size 240B
                              • SHA256 d21f18c60a648ab6aad8132cc1329ee5e3454ec6eb582a7f40ed53006fc8ab46
                              • MD5 SHA1 SHA512 TLSH

                              the-real-index

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                              • Size 336B
                              • SHA256 f60c3f9410872f2ad57743e019a869ec440d3307c0990ae12bd447a5cbb35f52
                              • MD5 SHA1 SHA512 TLSH

                              the-real-index~RFe5a2bc4.TMP

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a2bc4.TMP
                              • Size 48B
                              • SHA256 36dfe11f419a78b8ca2d7aa72a07bea9ccf22aca6846f1ce556d0573fab16162
                              • MD5 SHA1 SHA512

                              index

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\wasm\index
                              • Size 24B
                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                              • MD5 SHA1 SHA512

                              MANIFEST-000001

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Extension Rules\MANIFEST-000001
                              • Size 41B
                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                              • MD5 SHA1 SHA512

                              Favicons

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Favicons
                              • Size 20KB
                              • SHA256 2db221a44885c046a4b116717721b688f9a026c4cae3a17cf61ba9bef3ad97f4
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              History

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\History
                              • Size 164KB
                              • SHA256 91430afa1a3f8fa2e3c7cc3b01cfe2b74a3c9ff68f8a84d59d0ffe303882eec4
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Cookies

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Cookies
                              • Size 20KB
                              • SHA256 0628922305d2478ba75a48efadf932d439616eaf1ff908be334793f7bde28107
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Network Persistent State

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Network Persistent State
                              • Size 1KB
                              • SHA256 1dc7785856d6392f6a64d515facd204b205227137b3c8929f21808bba9925c32
                              • MD5 SHA1 SHA512 TLSH

                              Network Persistent State

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Network Persistent State
                              • Size 1KB
                              • SHA256 7dd0e11d1dc626585a413b200027d5656910ac539b7181b461df306c5e4f697f
                              • MD5 SHA1 SHA512 TLSH

                              Network Persistent State~RFe5a2c51.TMP

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Network Persistent State~RFe5a2c51.TMP
                              • Size 59B
                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                              • MD5 SHA1 SHA512 TLSH

                              Reporting and NEL

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Reporting and NEL
                              • Size 36KB
                              • SHA256 5b459a2aa31eb8f821bc806baf9df304fa2c60c238756cd745ffed0ffe56a292
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              SCT Auditing Pending Reports

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\SCT Auditing Pending Reports
                              • Size 2B
                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                              • MD5 SHA1 SHA512

                              Sdch Dictionaries

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Sdch Dictionaries
                              • Size 40B
                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                              • MD5 SHA1 SHA512

                              TransportSecurity

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity
                              • Size 523B
                              • SHA256 1374ca1f621f73d1dc93e74ad958c21020744c5e034f33a1a2d21271b9a4f307
                              • MD5 SHA1 SHA512 TLSH

                              TransportSecurity

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity
                              • Size 523B
                              • SHA256 2a53182f5914222e945cd6f62b63a347bbfb98f23b7d3c07135d99712bc75679
                              • MD5 SHA1 SHA512 TLSH

                              TransportSecurity~RFe5a2c61.TMP

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity~RFe5a2c61.TMP
                              • Size 188B
                              • SHA256 fef1068b6a70748e52d23275ed20eebb5dc5b226e833624b8c81a039e3cf1796
                              • MD5 SHA1 SHA512 TLSH

                              Trust Tokens

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Trust Tokens
                              • Size 36KB
                              • SHA256 2d4ccf8ac8ae4f5c6ec8e0566210ff56585b6ba0290501a1a11ed9b23bfc226e
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Preferences

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
                              • Size 6KB
                              • SHA256 167faa92958e5b39e17d5664d279ac5056acb58fb029c30e888c187ccb985306
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Preferences

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
                              • Size 6KB
                              • SHA256 c1f826970b2265c8305c805894b5a5d72a29be909b21cf47d3f4c8d2bf866943
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Preferences

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
                              • Size 6KB
                              • SHA256 086e63f3c66686f0ab55e7955520c495c9eba133f6410a2087fbadfc659bcd67
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Secure Preferences

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Secure Preferences
                              • Size 6KB
                              • SHA256 1e277af2069233f5d470eddeb42f2e14bcda38a232c1b2f9ebf5cc8b4dce0985
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              the-real-index

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
                              • Size 48B
                              • SHA256 1537b5f8132cf4720f6defb60e2b9c267424331290c4c72e6ad6921317979f58
                              • MD5 SHA1 SHA512

                              db

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Shared Dictionary\db
                              • Size 44KB
                              • SHA256 79b107307408e5ad9a145c87533316174fd13f4ad943497d079522fbe325b3b1
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              000003.log

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Site Characteristics Database\000003.log
                              • Size 112B
                              • SHA256 84e660855be7f677779ab13e098c74a8d87288e409124a1cfa336b06b3aeffc0
                              • MD5 SHA1 SHA512 TLSH

                              LOG

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Site Characteristics Database\LOG
                              • Size 305B
                              • SHA256 350439eb849f631160618c670282c1548262e8f8c390d19f693fa5ed1c64f87e
                              • MD5 SHA1 SHA512 TLSH

                              000003.log

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Sync Data\LevelDB\000003.log
                              • Size 46B
                              • SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
                              • MD5 SHA1 SHA512

                              CURRENT

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Sync Data\LevelDB\CURRENT
                              • Size 16B
                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                              • MD5 SHA1 SHA512

                              LOG

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Sync Data\LevelDB\LOG
                              • Size 283B
                              • SHA256 1f4ab77d1c8a3a1b560ffb9bfef00117561d5c0230a2091faa9d19d6b5dd59f4
                              • MD5 SHA1 SHA512 TLSH

                              Visited Links

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Visited Links
                              • Size 128KB
                              • SHA256 61340b81f399f12222af5ad253311c413a887f8e38fce4d0e427f907194ae4b6
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Web Data

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Web Data
                              • Size 210KB
                              • SHA256 db93cc6874e6ae80c9a151c1dd6a326ffee07b127e5899438873c19399c79b85
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              data_0

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_0
                              • Size 8KB
                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                              • MD5 SHA1 SHA512 SSDEEP

                              data_1

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_1
                              • Size 264KB
                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                              • MD5 SHA1 SHA512 SSDEEP

                              data_2

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_2
                              • Size 8KB
                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                              • MD5 SHA1 SHA512 SSDEEP

                              data_3

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_3
                              • Size 8KB
                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                              • MD5 SHA1 SHA512 SSDEEP

                              Last Version

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Last Version
                              • Size 14B
                              • SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
                              • MD5 SHA1 SHA512

                              Local State

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
                              • Size 15KB
                              • SHA256 8e2a25fbc86ae4bde88e7f963285ba5b995f10d30badbc43c7cfe755a49f3943
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Local State

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
                              • Size 16KB
                              • SHA256 f9db2c2afd94b151eeb626b25e962637324ab6940363109ece28ba6543e6fc5d
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Local State

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
                              • Size 2KB
                              • SHA256 63033f6eab29d7abef3f18c51b9d12170ecbdee8178f3616b63b76dd5ee9d69e
                              • MD5 SHA1 SHA512 TLSH

                              Local State

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
                              • Size 3KB
                              • SHA256 d12621ac0f1557ec5129c8852907c7f18f7e4f2b06f2e2cde2164724d6f9ad47
                              • MD5 SHA1 SHA512 TLSH

                              Local State

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
                              • Size 15KB
                              • SHA256 310f08a308322d499b3f086da3306f063861fceafda0d7ac86d890a00cd6d294
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              Local State~RFe595b07.TMP

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State~RFe595b07.TMP
                              • Size 1KB
                              • SHA256 471ef09e0704c35f32453ce2664f9a288effd545de0c5d86e265c48fb888f479
                              • MD5 SHA1 SHA512 TLSH

                              data_1

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\ShaderCache\data_1
                              • Size 264KB
                              • SHA256 79948e1cefa35a5e50a4e10b54f9f707220005055e768b9ee6c279515a8ed84d
                              • MD5 SHA1 SHA512 SSDEEP TLSH

                              index

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\ShaderCache\index
                              • Size 256KB
                              • SHA256 e628b59664e01341dc3bf2ada12859bf057c9960b0776b988e6c84b32a187814
                              • MD5 SHA1 SHA512 SSDEEP

                              Variations

                              • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Variations
                              • Size 86B
                              • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                              • MD5 SHA1 SHA512 TLSH

                              memory/2784-771-0x00007FFB9BF90000-0x00007FFB9BF91000-memory.dmp

                              memory/2784-770-0x00007FFB9AFC0000-0x00007FFB9AFC1000-memory.dmp

                              memory/4248-190-0x0000025B4AFA0000-0x0000025B4B048000-memory.dmp

                              memory/4248-30-0x00007FFB9BDB0000-0x00007FFB9BDB1000-memory.dmp

                              memory/4440-630-0x00007FFB77A70000-0x00007FFB78890000-memory.dmp

                              memory/4440-791-0x00007FFB77A70000-0x00007FFB78890000-memory.dmp

                              memory/4668-259-0x00007FFB77A70000-0x00007FFB78890000-memory.dmp

                              memory/4668-357-0x00007FFB77A70000-0x00007FFB78890000-memory.dmp

                              memory/4668-356-0x00007FF6EC740000-0x00007FF6ED9B7000-memory.dmp

                              memory/4668-186-0x00007FF6EC740000-0x00007FF6ED9B7000-memory.dmp

                              memory/4668-341-0x00007FF6EC740000-0x00007FF6ED9B7000-memory.dmp

                              memory/4668-210-0x00007FF6EC740000-0x00007FF6ED9B7000-memory.dmp

                              memory/4668-260-0x00007FF6EC740000-0x00007FF6ED9B7000-memory.dmp

                              memory/4668-3-0x00007FF6EC740000-0x00007FF6ED9B7000-memory.dmp

                              memory/5332-106-0x00007FFB9BDB0000-0x00007FFB9BDB1000-memory.dmp

                              memory/5992-642-0x000001AB5EC00000-0x000001AB5ECA8000-memory.dmp