Analysis

  • user interaction
    yes
  • max time kernel
    7s
  • max time network
    98s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/08/2026, 22:51

General

  • Target
    https://getsolara.dev/download/static/files/SolaraV3.exe
  • Sample260810-2s2wssbl2v

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 41 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 31 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://getsolara.dev/download/static/files/SolaraV3.exe
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3416
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffbcde5c188,0x7ffbcde5c194,0x7ffbcde5c1a0
      2⤵
        PID:2292
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,16121211969718271759,15327512238826853386,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:11
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:3872
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,14214266084587708778,15884970046839727988,262144 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
        2⤵
          PID:3016
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,4632183805585476512,6144507860568435046,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:13
          2⤵
            PID:1652
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,13966351055040244310,6207548304130674403,2097152 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
            2⤵
              PID:1272
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,8707508893126852826,8083988087720913099,2097152 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
              2⤵
                PID:3652
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,9212604379026924543,4458108264691304483,2097152 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:1
                2⤵
                  PID:408
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,1385250900101512192,12107982867164699489,2097152 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:9
                  2⤵
                    PID:252
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,14497603863069856562,689092993886207948,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
                    2⤵
                      PID:988
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,7337429276688003536,16976318984448850969,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
                      2⤵
                        PID:4168
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5896,i,5747655409303286449,6454582850692595610,2097152 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:1
                        2⤵
                          PID:2604
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,3537388319741138513,974179534449159755,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
                          2⤵
                            PID:1224
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,16140304529937276051,6087837596291224219,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:14
                            2⤵
                              PID:5036
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,8170820064703897833,16020817182822570466,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:14
                              2⤵
                                PID:2608
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6824,i,13289713846696389215,1107100833774198444,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:14
                                2⤵
                                  PID:5944
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6824,i,13289713846696389215,1107100833774198444,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:14
                                  2⤵
                                    PID:2836
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5048,i,1829633869416713378,2337443766474168376,2097152 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:1
                                    2⤵
                                      PID:3144
                                    • C:\Users\Admin\Downloads\SolaraV3.exe
                                      "C:\Users\Admin\Downloads\SolaraV3.exe"
                                      2⤵
                                        PID:3008
                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=3008.1964.15179100281977345936 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                                          3⤵
                                            PID:4924
                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffbc7c25fd8,0x7ffbc7c25fe4,0x7ffbc7c25ff0
                                              4⤵
                                                PID:3100
                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1756 --field-trial-handle=1760,i,4347586755297808856,15080546039359731313,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                                                4⤵
                                                  PID:5356
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2100 --field-trial-handle=1760,i,4347586755297808856,15080546039359731313,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                                                  4⤵
                                                    PID:4628
                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2244 --field-trial-handle=1760,i,4347586755297808856,15080546039359731313,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                                                    4⤵
                                                      PID:5088
                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3412 --field-trial-handle=1760,i,4347586755297808856,15080546039359731313,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 /prefetch:1
                                                      4⤵
                                                        PID:720
                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4368 --field-trial-handle=1760,i,4347586755297808856,15080546039359731313,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 /prefetch:1
                                                        4⤵
                                                          PID:1244
                                                    • C:\Users\Admin\Downloads\SolaraV3.exe
                                                      "C:\Users\Admin\Downloads\SolaraV3.exe"
                                                      2⤵
                                                        PID:1864
                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=1864.1908.13095336581388762264 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
                                                          3⤵
                                                            PID:2976
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x1c4,0x7ffbc7c25fd8,0x7ffbc7c25fe4,0x7ffbc7c25ff0
                                                              4⤵
                                                                PID:1688
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7256,i,14575599976914033628,3136098483766245076,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
                                                            2⤵
                                                              PID:4252
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,8471016907489487226,2118392702730807076,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:14
                                                              2⤵
                                                                PID:1368
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,1467104141382193388,16796823234990312776,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
                                                                2⤵
                                                                  PID:5116
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,6302855046085208269,10380712207579570607,524288 --field-trial-handle=2324,i,3980673312789936709,9827848866498510447,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
                                                                  2⤵
                                                                    PID:7116
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                  1⤵
                                                                    PID:3388
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                    1⤵
                                                                      PID:3928
                                                                    • C:\Windows\system32\werfault.exe
                                                                      werfault.exe /h /shared Global\718bdc24729a436cabcb15610d5f814e /t 4316 /p 3008
                                                                      1⤵
                                                                        PID:3436

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v16

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            blocklist

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                            • Size 105KB
                                                                            • SHA256 f32c5d9efb1ab4f2e9cb6d708b48d04144a1c342b53574c8f51378e2f5200543
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            BookmarkMergedSurfaceOrdering

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                            • Size 6B
                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                            • MD5 SHA1 SHA512

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                            • Size 2KB
                                                                            • SHA256 46ab8f529cbf4045669d4257c23ecff8207a97b15bc91032f3730d845362e632
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            SiteList-Enterprise.json

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                            • Size 2B
                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                            • MD5 SHA1 SHA512

                                                                            Edge Profile.ico

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                            • Size 70KB
                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Network Persistent State

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                            • Size 1KB
                                                                            • SHA256 984ed29420d5f9718eccc977cd63e0a0dae5f80342627b65fa9d705270dfd913
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            SCT Auditing Pending Reports

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                            • Size 2B
                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                            • MD5 SHA1 SHA512

                                                                            Sdch Dictionaries

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                            • Size 40B
                                                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                            • MD5 SHA1 SHA512

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                            • Size 14KB
                                                                            • SHA256 38a7d633e477654687ba268a3a1c65f50c5746b47b3a334df7d3d97fb6aa829a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                            • Size 14KB
                                                                            • SHA256 3053b8d4abd6a515ecb0822259ed8f9d27c4af99fe90ae9a71786ab66959244b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Secure Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                            • Size 27KB
                                                                            • SHA256 f4fb6a4d3dc842c579dd6909e985b142b99ee4ce3876ed1ef47ef9dd9629da73
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            sync_diagnostic.log

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                            • Size 4KB
                                                                            • SHA256 9ac9eecebde649de6a9e2dd178f5cb02d076999835c9f721a55a89ef030f7d86
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            CURRENT

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                            • Size 16B
                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                            • MD5 SHA1 SHA512

                                                                            MANIFEST-000001

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                            • Size 41B
                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                            • MD5 SHA1 SHA512

                                                                            OperationConfig

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                            • Size 22KB
                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            OperationConfig~RFe59e13e.TMP

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59e13e.TMP
                                                                            • Size 3KB
                                                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                            • Size 35KB
                                                                            • SHA256 434acf3c0b59c752a844998e05e65a37ca23c8ca49b49b26da5c0f46bcadb590
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                            • Size 35KB
                                                                            • SHA256 5a976c788e55def8dffc37b422781140ff71bc4dd15e3f1f8e1a54e197765944
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                            • Size 37KB
                                                                            • SHA256 ef65ef0cbf0b1233fd5059e115fb570591cb4ddf4ad3da75e8f14fa9ca71b09a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                            • Size 35KB
                                                                            • SHA256 c25de96b6b0dc86a5fc932d35b758df1d577f6fdd01e2950eb65a2c406cdd8f5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                            • Size 35KB
                                                                            • SHA256 0013046bbae2c736aa12e8b7358e7d8d0e7a83fe1e38137701b32ac99d3397e3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                            • Size 39KB
                                                                            • SHA256 648a309c431f3a17818827e35118576f231d4c129990d00a6a20134d727e7563
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                            • Size 38KB
                                                                            • SHA256 551db201a3d006450b0ccda2107c3bbd849554b0e6140a9c09c8622725c79643
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            260989ce-e5e9-42cd-89da-8526b82390fb.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\260989ce-e5e9-42cd-89da-8526b82390fb.tmp
                                                                            • Size 13B
                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                            • MD5 SHA1 SHA512

                                                                            .active

                                                                            • Path C:\Users\Admin\AppData\Local\SolaraTab\.active
                                                                            • Size 9B
                                                                            • SHA256 28841e863a44b206e83aec5494415a9762b077f4a52069ef588870600c5d9781
                                                                            • MD5 SHA1 SHA512

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 4434b819b089ba143c8b04cc5cd9ad59a11aad74c45a916a10dd5e50997fb895
                                                                            • MD5 SHA1 SHA512

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 5b9b0f17b0f6b9acd6efe52e0f805d30d8dcba020b14acfca9f1035483d615ca
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 6524cbde557bf63d20e607ef9274c9121a4f5fb2c585d6e0ec6f47a476d562f5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            throttle_store.dat

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\throttle_store.dat
                                                                            • Size 20B
                                                                            • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                            • MD5 SHA1 SHA512

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                            • Size 288B
                                                                            • SHA256 109811349f4c0415f2b16bb4756a96f8aa6aec9b37c0456887d16ae20482b0b7
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index~RFe59e8a1.TMP

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59e8a1.TMP
                                                                            • Size 48B
                                                                            • SHA256 acf8c81977bf0c154e4548a6b05a232ee9e5c09787e1b08f386777895bf921d2
                                                                            • MD5 SHA1 SHA512

                                                                            TransportSecurity

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity
                                                                            • Size 691B
                                                                            • SHA256 602e15c26e0eef35c32b3f670f254e9dba575d88e5016fce8095289935a093fe
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            TransportSecurity

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity
                                                                            • Size 523B
                                                                            • SHA256 aab343bec0e84de461b42988634f78962e3eb9d51fb6da078ffa0f594cb0d454
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            TransportSecurity~RFe59af03.TMP

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity~RFe59af03.TMP
                                                                            • Size 188B
                                                                            • SHA256 d7f65daeda7c6e940d08aebca207c65be665164d2d1a39424d35f775b042eccb
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
                                                                            • Size 6KB
                                                                            • SHA256 0726b103036f578191b81375eeddca96d95dd1ccdf7b48b31554a337ef6c0537
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Preferences~RFe599dbd.TMP

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences~RFe599dbd.TMP
                                                                            • Size 5KB
                                                                            • SHA256 29978356698ae437b046b6c808b1b355ac30f2c617264fb35f2a595f3b160ba8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            data_0

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_0
                                                                            • Size 8KB
                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            data_1

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_1
                                                                            • Size 264KB
                                                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            data_2

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_2
                                                                            • Size 8KB
                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            data_3

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GraphiteDawnCache\data_3
                                                                            • Size 8KB
                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
                                                                            • Size 2KB
                                                                            • SHA256 742be79c18efcebce68f6d6386266259c12ac7da7805dd1966d4d7ba25a3e7fd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
                                                                            • Size 3KB
                                                                            • SHA256 ec97c81c0dfe15b3ea02dfb886f2d1033e836462eeed60767c4060a4d795fecd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
                                                                            • Size 15KB
                                                                            • SHA256 e9930fd287150841215b04a15f6360d1323b39157d77316a0f6e98d70d6b679d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State~RFe593fed.TMP

                                                                            • Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State~RFe593fed.TMP
                                                                            • Size 1KB
                                                                            • SHA256 555a4bc0517a57275e1da33f8692ff82fa49f4da1edca974c8ff0b483d8e75e7
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            2a2e0412b8ad04a2.customDestinations-ms

                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a2e0412b8ad04a2.customDestinations-ms
                                                                            • Size 4KB
                                                                            • SHA256 847b7a946a190033584a69ad4e9b057f85fa76ede92bb8521c9c0e4cf9f8f685
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            2a2e0412b8ad04a2.customDestinations-ms

                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a2e0412b8ad04a2.customDestinations-ms
                                                                            • Size 4KB
                                                                            • SHA256 7f9b5909ced472274fc47c341362b2572f168edc9468556b6700e917710a4858
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            settings.bin

                                                                            • Path C:\Users\Admin\AppData\Roaming\com.solara.v3\settings.bin
                                                                            • Size 401B
                                                                            • SHA256 2c7a5e73ddfa01769a1fefe8b0fb27b93a48906ab90cb25fde24db4cfefa73aa
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            settings.bin

                                                                            • Path C:\Users\Admin\AppData\Roaming\com.solara.v3\settings.bin
                                                                            • Size 432B
                                                                            • SHA256 3bf79bf006756399f2959930897b20150cdb1dbe4616c4b93f82ae91113714be
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            settings.bin

                                                                            • Path C:\Users\Admin\AppData\Roaming\com.solara.v3\settings.bin
                                                                            • Size 463B
                                                                            • SHA256 71cf888ddbe1587006b9744e13f737b4f1f8a276702ed0b218ac9cfb89156ffa
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            SolaraV3.exe.crdownload

                                                                            • Path C:\Users\Admin\Downloads\SolaraV3.exe.crdownload
                                                                            • Size 18.3MB
                                                                            • SHA256 fe8d032fde42038d8f37d1a93134fe1a2105a0e80259555fd9578ac4f7986666
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            CHRS

                                                                            • Path C:\Users\Admin\Downloads\bin\CHRS
                                                                            • Size 108B
                                                                            • SHA256 5b2183323af3183222af0f8ba829a5bcdd1ab2d1e8a422313b207932d4fa0135
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            DEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\DEBUG.txt
                                                                            • Size 206B
                                                                            • SHA256 440a93d71f1a283bc76524da4e137d022774f351079f69a94d37b6ef43cb4a32
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            DEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\DEBUG.txt
                                                                            • Size 206B
                                                                            • SHA256 8b37a8f1d22b657ee54c6b4b94a62b056ad3bf486b1e2b375493025ea8d6bc67
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            DEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\DEBUG.txt
                                                                            • Size 631B
                                                                            • SHA256 b6a59c3beec28ca52250e8ac3a272855814a3fb4c46c6504dfe918f1b979054c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            DEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\DEBUG.txt
                                                                            • Size 4KB
                                                                            • SHA256 02aea61dec61d770410cd857de7b86e60296d2984966f60fecf478843046e243
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            DLCTBL_FRTS

                                                                            • Path C:\Users\Admin\Downloads\bin\DLCTBL_FRTS
                                                                            • Size 109KB
                                                                            • SHA256 bdb8895195916d7bf0bceb5883ff2c983f1cad83e1edb6457667985e18a6d010
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            PLTBL

                                                                            • Path C:\Users\Admin\Downloads\bin\PLTBL
                                                                            • Size 108B
                                                                            • SHA256 67d478e4cbcda5efce139a18ee458a4b6c162166c40994317726e9a4ef953c69
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            SolaraV3.exe.tmp

                                                                            • Path C:\Users\Admin\Downloads\bin\SolaraV3.exe.tmp
                                                                            • Size 18.5MB
                                                                            • SHA256 89c9d9376d40747b8183d56ef7487394424237b3ab2879808f8026bc8d2a3d00
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 583B
                                                                            • SHA256 2b2c4a01495ea8e0e1cb1afc7bf85a6478d350180ad52a78ad77450407978e4f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 1KB
                                                                            • SHA256 1efaff4cb04ba925af098abc9c02a48069ce99218f54e4fad5dbc2d60d65adf4
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 2KB
                                                                            • SHA256 84a78e23c8733cdb4384deea50598df20a756473d146e69148d115c3ecdfe451
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 2KB
                                                                            • SHA256 54cf8de5a9bd8fee7c7bdff4379d521a94e1bd8142fafb56426a14f9c2689be0
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 837B
                                                                            • SHA256 e192704342038a6cd1d015c9eb77672e6752770f00c906412e2f5323b4d32cd8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 1010B
                                                                            • SHA256 409a5c31a5a40ad3bcc304a2d162b93ec1e8c459565c75d078abe62a571ded2a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 1KB
                                                                            • SHA256 01a835c3ea8987ebba959f138b332f801f7b3c114c3f95e58c2b456474767938
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 2KB
                                                                            • SHA256 316a0a38497f21d44670dc31cb2c1d7bb83b19cd954383e74e006cf9024d4f8c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 5KB
                                                                            • SHA256 e93b94e90abced686d22155390482be30aec065ae582e889c34e14fa1c743a16
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 5KB
                                                                            • SHA256 e90654115bd07305f532c666534912db4f6e20180496409f3d9b2863150e2b3f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 5KB
                                                                            • SHA256 3baafc2d6187d09c55bcbbc1ad70108391402d5b0ddea2b3c754fbfc8b6481aa
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 6KB
                                                                            • SHA256 af6268df7e619ec474a973dcd97de04469e79053ed96344c1876a16cee383785
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 6KB
                                                                            • SHA256 bf538c9ec7a0d9e380fdb1fcf410e292a7629ace12d192a20a2b6926d08f8d50
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            UIDEBUG.txt

                                                                            • Path C:\Users\Admin\Downloads\bin\UIDEBUG.txt
                                                                            • Size 6KB
                                                                            • SHA256 28c894488bc6ba95f5e110491f24541011282c6b6fb05298cdfbf13ccf511702
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            SolaraV3.dll

                                                                            • Path C:\Users\Admin\Downloads\bin\dll\SolaraV3.dll
                                                                            • Size 14.1MB
                                                                            • SHA256 8f46931dc2c8927f9479bd34bf36e548111e3d4ffb0b84a6c469b00a6ff9b59b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            SLaunch.exe

                                                                            • Path C:\Users\Admin\Downloads\bin\slaunch\SLaunch.exe
                                                                            • Size 245KB
                                                                            • SHA256 fe4e2de98a58a3d67785c9ae2343ba34f3207a2a77fe21c88c1a5488acc02d22
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            memory/720-298-0x00007FFBEBF50000-0x00007FFBEBF51000-memory.dmp

                                                                            memory/720-499-0x000001D2D04D0000-0x000001D2D0577000-memory.dmp

                                                                            memory/1244-621-0x0000022E77B60000-0x0000022E77C07000-memory.dmp

                                                                            memory/1864-576-0x00007FFBBE6F0000-0x00007FFBBF519000-memory.dmp

                                                                            memory/1864-1048-0x00007FFBBE6F0000-0x00007FFBBF519000-memory.dmp

                                                                            memory/3008-436-0x00007FFBC3E40000-0x00007FFBC4C69000-memory.dmp

                                                                            memory/5356-216-0x00007FFBEBF50000-0x00007FFBEBF51000-memory.dmp

                                                                            memory/5356-485-0x0000022479D60000-0x0000022479E07000-memory.dmp