6cdb32a707f05f12f6d5febf8b6a268ef20aa8861528de5936a6e40d154fe27a

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 04:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
Size 24.3MB
Sample260810-e6khcavzdv
SHA256 6cdb32a707f05f12f6d5febf8b6a268ef20aa8861528de5936a6e40d154fe27a
MD5 83cde762e13d8b0358db8ff12d1f6d00
SHA1 5751e0fe56c486b66148977a91360bce022806ce
SHA512 3c98ac27a9b62228acedcc0550abfc3c31cfdeb63594e4f5f0073f6fea54644fc5124fa9392f79d54804e647ba1a58df3befdb8c87845562d20169cd811ef520
SSDEEP 393216:pzpgo7pB7KzoHOob4Y65zMilH+MPdKdcUIJUUWZzGp:Rpgo7pB7KzoHOob4Y65zMileMACheqp
TLSH
T17C470721BA5B996CD19BC4B083478A770A3134DB0B35B9FF45D492382F7EBF41B28259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 61 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_1977136130\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-el.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_1249112550\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-da.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-as.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-la.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_1977136130\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-te.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_1249112550\protocols.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-es.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-it.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-af.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_1249112550\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_1977136130\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-be.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-or.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-et.hyb	msedgewebview2.exe

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308100134318018"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies system certificate store 2 TTPs 4 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 0f00000001000000300000000b043572c899dec43efd590cfce610cf443a6315925ebfe589f7506907e44824608489581c7ca0e041458514cf157614090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c06200000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a0b00000001000000180000005300650063007400690067006f00200045004300430000001400000001000000140000003ae10986d4cf19c29676744976dce035c663639a1d0000000100000010000000280cf6042c30a2646644ba7286a3aa97030000000100000014000000d1cbca5db2d52a7f693b674de5f05a1d0c957df02000000001000000930200003082028f30820215a00302010202105c8b99c55a94c5d27156decd8980cc26300a06082a8648ce3d040303308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f726974793076301006072a8648ce3d020106052b81040022036200041aac545aa9f96823e77ad5246f53c65ad84babc6d5b6d1e67371aedd9cd60c61fddba08903b80514ec57ceee5d3fe221b3cef7d48a79e0a3837e2d97d061c4f199dc259163ab7f30a3b470e2c7a1339cf3bf2e5c53b15fb37d327f8a34e37979a3423040301d0603551d0e041604143ae10986d4cf19c29676744976dce035c663639a300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300a06082a8648ce3d040303036800306502303667a11608dce49700411d4ebee16301cf3baa421164a09d94390211795c7b1dfa64b9ee1642b3bf8ac209c4ece4b14d023100e92a61478c524a4b4e1870f6d644d66ef583ba6d58bd24d95648eaefc4a24681886a3a46d1a99b4dc961dad15d576a18	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5936	msedgewebview2.exe
5936	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1672	msedgewebview2.exe
3524	msedgewebview2.exe
1672	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
4600	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
4600	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
4600	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
4600	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
4600	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4600	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4600 wrote to memory of 1672	4600	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe	87
PID 1672 wrote to memory of 2256	1672	msedgewebview2.exe	88
PID 1672 wrote to memory of 4012	1672	msedgewebview2.exe	89
PID 1672 wrote to memory of 4012	1672	msedgewebview2.exe	89
PID 1672 wrote to memory of 4012	1672	msedgewebview2.exe	89
PID 1672 wrote to memory of 2664	1672	msedgewebview2.exe	90
PID 1672 wrote to memory of 4288	1672	msedgewebview2.exe	91
PID 1672 wrote to memory of 4288	1672	msedgewebview2.exe	91
PID 1672 wrote to memory of 2780	1672	msedgewebview2.exe	92
PID 1672 wrote to memory of 2780	1672	msedgewebview2.exe	92
PID 1672 wrote to memory of 2780	1672	msedgewebview2.exe	92
PID 4600 wrote to memory of 3524	4600	2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe	95
PID 3524 wrote to memory of 1552	3524	msedgewebview2.exe	96
PID 3524 wrote to memory of 1436	3524	msedgewebview2.exe	97
PID 3524 wrote to memory of 1436	3524	msedgewebview2.exe	97
PID 3524 wrote to memory of 1436	3524	msedgewebview2.exe	97
PID 3524 wrote to memory of 2700	3524	msedgewebview2.exe	98
PID 3524 wrote to memory of 4888	3524	msedgewebview2.exe	99
PID 3524 wrote to memory of 4888	3524	msedgewebview2.exe	99
PID 3524 wrote to memory of 4008	3524	msedgewebview2.exe	100
PID 3524 wrote to memory of 4008	3524	msedgewebview2.exe	100
PID 3524 wrote to memory of 4008	3524	msedgewebview2.exe	100
PID 1672 wrote to memory of 4324	1672	msedgewebview2.exe	101
PID 1672 wrote to memory of 4324	1672	msedgewebview2.exe	101
PID 1672 wrote to memory of 4324	1672	msedgewebview2.exe	101
PID 1672 wrote to memory of 5796	1672	msedgewebview2.exe	116
PID 1672 wrote to memory of 5796	1672	msedgewebview2.exe	116
PID 1672 wrote to memory of 3884	1672	msedgewebview2.exe	117
PID 1672 wrote to memory of 3884	1672	msedgewebview2.exe	117
PID 1672 wrote to memory of 5936	1672	msedgewebview2.exe	118
PID 1672 wrote to memory of 4456	1672	msedgewebview2.exe	119
PID 1672 wrote to memory of 4456	1672	msedgewebview2.exe	119

C:\Users\Admin\AppData\Local\Temp\2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe"
1⤵
- Checks whether UAC is enabled
- Modifies trusted root certificate store through registry
- Modifies system certificate store
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4600
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4600.824.1877068342420413749
  2⤵
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1672
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffe44e0b078,0x7ffe44e0b084,0x7ffe44e0b090
    3⤵
    PID:2256
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1640,i,4807561736516242158,2476108270094124569,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1688 /prefetch:2
    3⤵
    PID:4012
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2024,i,4807561736516242158,2476108270094124569,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3
    3⤵
    PID:2664
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2372,i,4807561736516242158,2476108270094124569,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:8
    3⤵
    PID:4288
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3648,i,4807561736516242158,2476108270094124569,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
    3⤵
    PID:2780
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3660,i,4807561736516242158,2476108270094124569,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:1
    3⤵
    PID:4324
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4928,i,4807561736516242158,2476108270094124569,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:8
    3⤵
    PID:5796
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5104,i,4807561736516242158,2476108270094124569,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
    3⤵
    PID:3884
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4864,i,4807561736516242158,2476108270094124569,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5936
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5096,i,4807561736516242158,2476108270094124569,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
    3⤵
    PID:4456
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4600.824.12358957069249133832
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3524
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x23c,0x7ffe44e0b078,0x7ffe44e0b084,0x7ffe44e0b090
    3⤵
    PID:1552
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1984,i,10785358128243620180,16759855127803505465,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1980 /prefetch:2
    3⤵
    PID:1436
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1644,i,10785358128243620180,16759855127803505465,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:3
    3⤵
    PID:2700
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2320,i,10785358128243620180,16759855127803505465,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
    3⤵
    PID:4888
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView" --webview-exe-name=2026-08-10_83cde762e13d8b0358db8ff12d1f6d00_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe --webview-exe-version=1.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3472,i,10785358128243620180,16759855127803505465,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
    3⤵
    PID:4008

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x498 0x320
1⤵
PID:2892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1672_1249112550\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1672_1249112550\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1672_1977136130\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1672_683739880\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3d94494810a42c4f7675e06a8bfe7022461ea1793da3fb292669cd60c3fecec6
MD5 d2546a7e0f79f2fdf4aa0bbcabfaf864
SHA1 40ff16dc6c249725bc2ef8672e81d52cbd09ffe0
SHA512 86ea34077b09954e6f1849f15b8832181b0a8edad343e13ac39f4df36ff560461474e1055192789f70fb2957dcc2a4f2e0c190b717a250c77a6d9935cbd4a39f
TLSH
T188415A58A6FA2148B3B76F5A9BF6582D887FBC731E07C45E10110E4F0A22A40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 4f6088eda2a2b51637faafab73aafcb6378571e3960ccecfa974f0027fa0b173
MD5 654595cc402cbc50aad3fb3dc82f3a08
SHA1 73e1023a23d0fecd0ca4b7da77a5fbba734eda3f
SHA512 308676facadd06922c530389871a580e8de132500380896197fafac4357eb900b3248ac7839dc50bea532271bc471f1df1da44a431198b4f5eb86ef574726110
TLSH
T125D0122732011334C4103C330002B1490902E10B404A81006879852F3E080701916441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 5e7e7bd582fe5b14220967ac0666bfa6d6f66f8c04cf9f87f08e652d99694f94
MD5 7528039ab45f09a50a84452dd713eb2e
SHA1 2844c75a67b38a7953963c3264d7b41923e0d93e
SHA512 436ee53420472ba43e7338ac8773272e91237cb1e635be36fc0872e445d7e9e74c7fddf406be9973a0c0bf3522547128753b825be0fddad964055b14b7015fce
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 8a10fd0ffb8af6f26552dd828b054751ead7db1a27616af2fd91570919c3cf0b
MD5 22b281799b38f04693e72b3fd0ea25ae
SHA1 492fa169c6271ae7000787c8cb8f79feedf576ab
SHA512 f494cefa95dc4eab4048c91d5e8e900d9f561c7fdb97d681438e20d37f052ec1fa7de4396a8e6f853fedb323701f2ca7debfaa3ff484bf7547f8c243ceb008c5
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 c79e3f69fc04c8cc3c4becccd4d73a10f7120fe43f72b71a7fba8ff4ea9ad890
MD5 6fff064a9ec585d60c2c0c6359992714
SHA1 006104da7111946cd2504c630745cc3494a1c72c
SHA512 d43c5b2c18616ee23b7ee31fce8d01219e446a39968383328615c65960017ca898584c3970b27e6e523e3e57d767fd961c1f722ed558ada18d0aac959fe331a3
TLSH
T108B0122924504003D3002B3422F54E133C31141002C7CF52DB9DFF7C5C0C3518C4318C
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 e1d9615a1f67dd7d065d85ea96593a46c887085e5641605ec1a794738f206a7c
MD5 4b2d255dfed5a3a5dde28b4f8a522795
SHA1 23886c3e14f0c6138b9268bdcb8099a7546b13d5
SHA512 efa14bf5d3db7810e77770dece53d92f100b042216321b93514c4eccda59a06be276ac3b65b3aaa457df45ae580dbf33c72a2c2f2e64c231be12ff39682d5f73
SSDEEP 3:LstlNllkll/lJGIK/l/:LsX3lEtJGIKt/
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Network\Network Persistent State
Size 561B
SHA256 f074f4d240982c176e750134b7fec96449db76b656f5a44ca39b7ae946f5f5be
MD5 11c2154ef839a1be04ac9a90eb16d9d8
SHA1 08dbb40b75f086e480ca8b1112c64ed103f16258
SHA512 067b796542013a62006d5a77facc22d887aa9b55ede305705e987b46657b0c3f65b84155dfbca733ee57be01aea79d728d6fa9bb59a272697885d65e818b86de
TLSH
T135F0C6B3D6D456BF864313E066347817CA6E4416423C3E1DD9F4AB5F43E0038A11054E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Network\TransportSecurity
Size 188B
SHA256 ec92a83b07dc5c506f475608c355da3c39d384cc7dd909ea059f51ad2565950e
MD5 0f4fcccf1f1048c8494cdb9f70f4dda1
SHA1 e4d8c9749813caa61d48a85a29d5436eafd526f1
SHA512 98809f51c2689480b1a854c02088d399dcdc13d1fbf5ea73ffb19208ed731ce407cf0d43c51c97c4e6896ba5c6a1a61db535185aa306d2ee594f93ee0c76b502
TLSH
T173C022A24069E07A102807211E84AD145F36B830014558F8828A8AACA180066561B102
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5927e1.TMP

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Network\TransportSecurity~RFe5927e1.TMP
Size 188B
SHA256 a81f97ac535829fdad9823b4f8b3cab42fb8151e0b92f847aac87a440d07711f
MD5 a28d653f0806d4edfbcc0e928e76f2e5
SHA1 8aa19f52da122f47c39733473fc557177577caee
SHA512 0fe97f64762a1e1b1fa36ea7ee3b6289d8c8a93b4f2748d4e672d591f75833c2460cbdfcd46005c7980ead0be8aff057e07e8842797fd69ee8034bfd20a4cf62
TLSH
T178C0226280A9B0FA10E847626B80AD099F36F430014058F88292453CE0800669103412
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 a839b8d3ac428b6a36a19746219a7a3a98632190dc514ba8bb60b718749e60b5
MD5 7f362e062fa3dbbaf924fa7a693ba9a7
SHA1 8df3b676aa8170c06dcfd664b6497f6f285c64ee
SHA512 e3eae386e84899f40f836a6414d206e0901bb6102b452abcf9d136e720791a6068a824d565d1db1086a25e1b128ec0ba892280c646e6fb42c45b8fd9d8b97789
SSDEEP 192:stTV0wA8ZT2fFoZ8pao5Tl/S+WiVTHXXQWTT9kTpKZUMC:stTuwA8ZitnVZl/VV3XQiZUp6lC
TLSH
T1F1E1A7025E2869774CCBF61A7E35BB12E2FA606265D50E58EBFD861C04D6ACD2307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59230f.TMP

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Preferences~RFe59230f.TMP
Size 6KB
SHA256 27ed39de6440b2b298e0495f89761a48addf3a66a5ab2a529ce9bedb268e488b
MD5 3b7ccd78af03d4218b25443161b01f51
SHA1 0a63066967452ec65a7d07c6ee10ece3d878dab1
SHA512 45d5fd9aeccb4ca48f1411163fa4ba7d50c397e07acfaa175526b3e6e4b6b72d9517fe2a44dfc40f46613d6fc0b1175e343ea9ef19af2d90d2988fe77a72bd9d
SSDEEP 192:stTV0wA8s2fFoZ8pao5Tl/S+WiVTHXXQd9kTiKZUM8:stTuwA8TtnVZl/VV3XQ3Ui6l8
TLSH
T1B1D1B8025E6879774CCFE61A7E35BB02D1FA606265D50E98EBFD851C08DAACD2307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Local State
Size 1KB
SHA256 54d62dee6f6a2b65f116f73190eeb7b67387d73831329f4ad27a32ca32b2ec7a
MD5 ab58e79de05303b1eecf3b75418576db
SHA1 f929eda2e6fd71238163003d59c70f9f96fdf9ff
SHA512 8a7b012daeaf3a3507ea1d47e62c429a6b7c642e7261594ef82d56a637e4fcea6e1e8bb58a87425b969c8e22b0b796559a22bcc6e185f3edf06367803ab8f91d
TLSH
T1EE31A973B0443B32ADCB5542B606B6532D6150B5C2758F5861DF1F2C06E7AFC9116D37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Local State
Size 2KB
SHA256 2af69094d2ddf8e745e3bcb2b33891f8d4c3e5c0cf7ed6be800c7abc1f97a087
MD5 7cccd13a03e4abc5ce7056573c4cbab4
SHA1 23654568c033964e42456b12664cfe1585c40e67
SHA512 dfdc374d21dec3710aa3e55e4f539a0c3be93dd5c22e97d4c38b1cea921d7f6cda798aa0ef3299fc59d3964f3e0cf5a512cbdb1f47c95d5a409a844cd99aed6e
TLSH
T10551C73378087B378AD74A05BD0A7B23A93590A1C7722F6095DE1F1C01DBAAC2302C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Local State
Size 3KB
SHA256 9fdcb7295f886d72a307584abe95c8b40ce9dd48ec647304d5672cd430cfea9f
MD5 4f673f312137abc07db487a509342c20
SHA1 bbab49b08db36723c5dae65ad056695bc9d09d03
SHA512 6b620e71222c9b4a060a06db8244172f48d5b2988a84811bb7bfa163107859b00fadd56634e021b995b093e09bdebb25704b32b9bc383ce5591c4c8492b92f3e
TLSH
T1AA71D7326828AA374EE79901BC853B12B6A55073D5E53FA8C9ED1F0C01DB7EC1342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Local State
Size 16KB
SHA256 4701db597e7dda2221c3e0ad3fe5321ee5784dce7fbfeebc3021918dd8cea529
MD5 0077559f1561b8e64bb927fe74c8dd17
SHA1 58b94a15de1e92e5f31bb21b93dc9faf65c02e1d
SHA512 2fa4f9aaf709c4787a8e9e694f290d06246b51ebcca9a9418577d32193b58e93f0374d40fb23b527cb3421a3197696217b061cb45e5e32cd1269d3415caeea8f
SSDEEP 384:zFn+aQikB+z/xvxjg/qhEZCNbwBu0VPxp7auYJjx9z19:B2/UxvxjgC+Zto0VPxNauYJjxF19
TLSH
T159728D3755383E2795F7EA05BE4C0B5BDAB584B280C16FB84AEE1F0D06CB7A81342D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58846d.TMP

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\EBWebView\Local State~RFe58846d.TMP
Size 1KB
SHA256 1146e784c20fb3ca62835772f4d184bace3849110818779766086fa101db531d
MD5 48685b9e4e09cc07c24d1f118dcac7cf
SHA1 92266e414597c19a1754eb124af67a83681e1467
SHA512 a6acea62a29eb83f7c81c2bcef40340f9284695319686c36101dc733fe04525810dca90a8d71dd4c2a291323b0a3c33e2ef5b641a839442c0478e3d918560dd5
TLSH
T10C216873E0483772AA8A4511B612B6872D5151B5C2258F18A1CF1B2C16EB9FC8266C37
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c04fec054ae6295de84547cd7cbbe5ad9cd0ce41f59f84cc0466776b480794f1
MD5 52740305358c65e662da6e8f46f96a07
SHA1 97001494d0001dfbcdc18e6ad27dd06d3b9549e1
SHA512 7c26b4c44738c1ecb366f5890c076260ada40a24b743f6b3121ae261874f668a83152be5ccd75bdc6b19b57bdd5c94d2d85bb5c59dc44825a7ad30088ebc1f7c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e3a71e008c159b70c7ce7dc8b1d3ceaedebf14b90acea4c7c0900ecd41405df7
MD5 5509a2b9bad65dde477773b0b22d647d
SHA1 9dd13b1102952112dac4eb44e4573f7d1d9057d5
SHA512 2514c5ba4f454ba6be522fac25b7053e48784417cc158e61e0cb58dcdc7c80ab23a69ac459ab5e254f95b263b588cec528ad2fa7c4552e068c735230af940600
TLSH
T14AD012163B020974C01435B30003B5090404C10F801580005839991E1E040903902451
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 c36b8260d266e4b3d6b83743717159c7ca2678022fa2ba8ed4b5d8df4aa3dead
MD5 56ff9f56d3489306d8f48848d51d71e0
SHA1 7e482414002407b1f1bf96576f8d0a6570ff6a91
SHA512 65db5e7ee42642dcd1b051f4dad8987504957d749f699a39d22c6bf651d57384c5a1a32d6c5c787e8f5602b5ae544ac3cbbeaf827846c57f4d6e7de693712055
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 7f1b3fe65f5d2e21f85b85f67d94c320f77a7fcdb993b196e87725462fba524d
MD5 a67f2bdb0a0f1591cbf1c3ea00434230
SHA1 5a65deedceab928c662e7b83f0f2c085bea6550f
SHA512 5c747dd0dc10b9b132f2e6add2de9c58aa0af242505d18bd766d3bfcc633637a709f79ddab1f49e11e41c24cc93818624de24ff671eea494a958c4a4274d76fc
TLSH
T11FE05E10B80A5287D318733352F12E953D4A1E5D4151C242987C7F2D7C2DA895E8944F
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityComp

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Default\ExtensionActivityComp
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 71f14e58809e37c0db7dc7bab3be4b96446e4eb8af9b50c65778faf04ac2f24a
MD5 d9bae2188313fd01bef546f5f08b1845
SHA1 0aa3078b30de48016f0275b55794a85ab497c972
SHA512 d8aab3caf8be5e544325fcdedff851be535e6e9886378d37cd02d50a760dbbfcd47a207678bd4115da032d0a83b29949a0ed61f3c98804ee1b16b299f7aac2e2
TLSH
T1B8415BB7C3D9812DC95117F82B25AB1FCE1E0A28421C392AC8D8BF9B93E1431D22535E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Default\Network\TransportSecurity
Size 355B
SHA256 bf5dff80c878c617c66dfe61a29fcae6867c883746863d24408767758c3eb823
MD5 745fe315606858857518e628a43990f3
SHA1 e920b86c2af264d3a49d57833f07f54933bc6d12
SHA512 522c53eb4d8f50ff95cbb15d1fa4beaf54f0cf0a8f79fd2ea817fb74a8ca06c2e5a8f50865246959c4cef90352682dc8e7033c672b8bc3defe785431e81ba9d9
TLSH
T193E02663A07DA837106C1B6F2E55BE096FB6B0355181D4E8CBE252ACB0C05BB1B03957
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe58ed2a.TMP

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Default\Network\TransportSecurity~RFe58ed2a.TMP
Size 355B
SHA256 ff2e14dad3f0e569bcabc55042c3b351ccb8846967d8faac462e8ea0bb395900
MD5 960646776ea8ad1d521ec1d9d0b776ff
SHA1 572d9cb401326c7ac521dd1ad12be7d58c89e3db
SHA512 90c9c6e25d636d5d0384316011dfc03f4bb80382e05233af7b411a0c0b015d84ac58390dfc7e89f9f7fc0630fea6459c458abb987e78c344892652650bccefe7
TLSH
T1E3E0DFA3917DA0A6106C5BAF2A44BE0A6E7AB430918154E4C7A242ADB0C05AB160396A
MD5 SHA1 SHA512 TLSH

Submit Download

bf0d4ceb-5937-4406-b752-56064fe41b05.tmp

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Default\bf0d4ceb-5937-4406-b752-56064fe41b05.tmp
Size 6KB
SHA256 2a13907353a79b278ef9b6d9d6b725f61af91367c53ba88336eef04a375d2a2f
MD5 22a0bde043b0fb266707688d3119ed04
SHA1 fb8b19092368ee496ab842984a4669454b1a766f
SHA512 aa929c5498f850cc8d20d823b09aa5e39691e397c1855eec2be484f843faed2c368353a5e0d14a44373f59a9229803e0fb99f74e092f9d4b019c1d190eb522e5
SSDEEP 192:stTrY0IAw/ftsZ8paoVTdTV/S+WiNTiXdwd9U+XnZcbK8:stTrBIAw/1DVVtV/VdOdw3/XZc28
TLSH
T1FEE1CA035E6869774CCFE21D7E35BB12D2FA606261D54D98EBFD851C08D6ADC2207D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Local State
Size 1KB
SHA256 d2103749c5bc87507fb1b7fd85ecf94a54761346c2c5a23d672da1de998eb9be
MD5 c2898844886ce43c5dfe679231e08cfc
SHA1 0118d55bd3182d65abffa6947533a896c61dabf1
SHA512 5c922e41ae3ac91f2d97a41c726ae78b113bdfac2f991e2709737cbe9299ecd8ed3f4a816fb22495f4d3e33f2d3b97651b248c15ce43e7aeaa96d9ba47c708ae
TLSH
T188318573F5543F72A95657867A01BA472D24E0B6C1921F54B2CE4B1C11EB58C6127C33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Local State
Size 2KB
SHA256 2cd513ffb0374c35ae45cf955738f1301c71d667b30bdc80cf09f5228295871b
MD5 4a22eda095389afeb418fb5d16bb4525
SHA1 24672b61a23fb52250d97cd4bc2cca35561c5a88
SHA512 b091e4b3835aff1cd94d89d1d22e45dd74cbc94c3ac4881fdbe8301051750830a6a4dccd9c8b666fba78a263d7504c7788036ecc5b914b48543db688a520def0
TLSH
T186518633B9087A7789A74B45BE057E13AE29E0B5C6A22F60A6DE1F1C00DB55C2342C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Local State
Size 3KB
SHA256 e218aa730b3a5c928dd77b944e2f3c89195f384d22d1d94b758240b757218cd9
MD5 1eff4c7feb9d7a601e63b6c038a512f5
SHA1 c85d0112b5d88451fef16d7e4d351fd87c14eace
SHA512 79bdfb19a130e3b7a2700db26f22f94ace43848bacc2cbf8a271ecefc1f0f7a9b95c8f27f0134ae9075d9a9206a201f51c45c0a3e55f0678f7cf16845b3b8528
TLSH
T12C71A433A968AA374EA79A45BD853B06BA659072D1D23FA4D6ED0F0C01DB29C2342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Local State
Size 16KB
SHA256 c9d607bb7440103527688be25f6543919df430fc0a22856e308d166a2dee6a2a
MD5 b72f265c1f241b9b842f957618c1dd93
SHA1 d56247aaecfc3239316c24b313bd86559e1db21e
SHA512 66cc1c3c49d8775b3a28fce263a73fdc559702fb40342e9cb6f5cdf0b69733982dcd06d49f44eccc6887b6a1649ec3a1db78dd91e70da8af1a7c901a9f848c82
SSDEEP 384:zAc+aQikB+z/xvxjg/qhEZpNbHjSuTh1BxK7JuVn19R9z1b:U7/UxvxjgC+ZjjHTPBxEJuV19RF1b
TLSH
T15B729E37A5383E2795B7E6057E481B5BDFB9C4B280C11EB88AEE1F0D068B7981342D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5893bf.TMP

Path C:\Users\Admin\AppData\Local\com.zuno.desktop\youtube-login-webview\EBWebView\Local State~RFe5893bf.TMP
Size 1KB
SHA256 48a8eec1af8952de206eb95414b139a14108308e36225df85b797cc873e74aef
MD5 7eb1f7bff4b4c6cf3dc4352f422cb3ae
SHA1 151597c0d80fe91df837321844433bbcc4a50160
SHA512 04219c6c3f3210ba099fb8b111a260979da80857f6feef987068bfa037017ce0d32ff9f6c4dc218a91117a9ebd0539f1a1afe49856f4828710cbc1023a9007a5
TLSH
T116218733E5543E72A9560B85BB01BA4B2D14D0B5C1561F58F1CE171C15EB59C5267C33
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 50B
SHA256 3d429433c7b6627f1f453e37753b471610ecafa1993f60ab3697dc081b305d41
MD5 3aac4fe25a01e73b72ddff55fd864193
SHA1 a1cbefa651a7c4ade78fa6e1af54d18a69d7f7b7
SHA512 809db6bb1a7db49b01f2f3a97daab044d40bc4fde85d2f78566523917ff4c7dcc7a79e09c0f1195c535ac181558224928185a685599370739901891ba3ed7730
TLSH
T12D9002A040942CB589A4E7095AB2575315584D6511856524505101B5664602741014BA
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 72B
SHA256 59b8aac75dddd06dbddfc43b197ce670b26c7461724cf885c0c345c97d394546
MD5 d88991aad2c7fce819be8738410ec451
SHA1 24338c05f473ba131a6ac63e918a51290d3fe3b6
SHA512 4ee0a77debd616d4311a4091676179b4781244f148d351edaed7a87ce7756e5285f8b88ed5170e082de5bb3b7dbe722b74c25dafa74b9c520b1eb7a188343d1d
TLSH
T1DDA022B082E83CF888A0F308FBBA038302280CB022C0F820800202F8F28F02300200FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 87B
SHA256 de778e822f879810d6a750e3f92d6e7766407dd1199b542e99e054241417ce4d
MD5 ad187beaa27f919510062944ba3416db
SHA1 f5dfd4a1d6c12789195c13d432601358221b190c
SHA512 2998d0c3545936c265fb3ce203850a1c703caabcb04415682e35dc5f434f56aa741736a58c34205220529688f5300f9f3cc146f50691f8642f781174658b0d94
TLSH
T1FBB0126846E42CF84454A348E6690567071808B112C0E420C04105A4A14B05340204A7
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 125B
SHA256 1f57b21a532ee6c7f3a9b989241f5050d88b1b1d4078599a5f0d4321d632fdb4
MD5 8d03563828574c7eed7da882718595ef
SHA1 44cb19fda3764218bc005284449f6a0d16859de4
SHA512 55fd2bcee0e4005f17b0b7ab9def8a658eb133119fcdd446c6c28d995d6af93f06f6974e463f5e68902181c6065f530deac5a05e91dc6e76cb855047fdacdf3b
TLSH
T139B09B5855A418F94474574CE7DFB767071C446122C4E555C052156571C709794325E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 152B
SHA256 52438e64989069b35b690fe5c156cc400aaa86d79732244902c4b19d13bf4068
MD5 6038d798511d391fa6e31b5d8fe0433e
SHA1 298e2cc18272a8a90c2b3e16aa5924e919c3e507
SHA512 5d626f5fb759d42d42b25f03816d16ec0eb1f31f56aab184a876aa961bcad536640d7ac6725f1c287f416201ff88e1b7d9b4839ad7d8e37ec0dbaf8825a7f990
TLSH
T149C08C1455A019BD40B9930CA3AEB7660A2C48A122C0E415C0222571B68B06780229E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 179B
SHA256 71f9e503176bb1eb572e14ddecb802dbf2ecddfc86349444d38f3bc879964afc
MD5 b8ee81847c575480ca0f66dd71935a21
SHA1 cc902fc4ff18c0456c98e17203714d57e940dd4c
SHA512 c0585479aef11e77ef4696e136fc45ed43c4d7df11538e38898bf668021c52e3701535e048c660f46ffddcc14e7e9715b9b3f071528562496b726107d9047533
TLSH
T1D5C08054149029FDC0B5D34DF7AEFB570A3C487121C4F515D4172175B59F16740119F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 284B
SHA256 7dbc1a7fd159a5be6737ec2bb9f4a0640ffe0d77d3a4d7ff95ab68d1c0587694
MD5 3e02caaaee28835e0bdc37f2e47a85b1
SHA1 36b74c4189cb456dfd9606614cc7ceb09e6a1ac9
SHA512 9016bcd2e211bcac05d01b2a8fc11f47c11a1f346bb53b076dea8a3a19c83758d3424f7abf26a969b5fc3d962c83f2b4e2f17cbc4eae06617e58daa13963de60
TLSH
T1DAD0C20444A0267C82A5938EEB59FB22273C483162C4A245F41734B9B6BF2A34123867
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 313B
SHA256 7873615fd15b55c4fbd933feb079e1de2021f74a7dea7e7237c5ea58c2b67ba5
MD5 868f7afcac14f9e990d48e4f50918589
SHA1 b2378a747112237de0fce922f73e0a360985e3e4
SHA512 b35144a2cef8d994457633b566c40648034533e4787f54cb7b6e07a408cf29dde80d4be044f3050ded01e422194c29b5552d2730444ef4b6fb6b1c69411c3497
TLSH
T185E0CD041590257981A5934EEB59FB12273C483162C4B159F417357D75BF1974123C67
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 438B
SHA256 45c71eb862dbb944008174e8dd25f161b4de9528be23a381fb3154720c98b831
MD5 78f62d22378f95f48bdd265c1404a1e2
SHA1 8a00c90ef4f037382ea6a95d0dedb89411f3fc55
SHA512 e2561c1f9158031eb1be6cb9c4d0355f18984f2eb17c9a536b3e0e27b4fac302122c9ed1973a39ae4cfa30dfc55bbb08ee07f5d0fdb1afaf643a9a2915a6269b
TLSH
T156F02B48909029BCC195A38AEB59FF23173C5C7221C0B166E41A787AB9FF2EF4132857
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 470B
SHA256 c0dbdace95104992a9436c05e702d01256802768baf595400d1ab55833a2ad97
MD5 fef411dc23fa4fb04a86391a0085aabc
SHA1 47df1f71fc3b7b7818e7c4de5d22507c09c3e066
SHA512 87fab89e8d7ad90408d5c3caf5a52da791a9109e62abbaaee694b2322d9244fc00e20681def99a9243adf626f9b16e0202d83d3f6a2f213262af0b96150a8372
TLSH
T1A7F0274480D029BCC595939AEA58BF13173C48722185B066E01A687AB9FF2DB0222863
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 de41464a6e390743175ff9c4b66288a9339010b32c7cce4b82d229dabd07fb39
MD5 71a2af7be15665307f18c708190e657e
SHA1 13bcaa686ea5d622a19954acd85e9d575d2ef119
SHA512 618f22085d4ff94ab28abe6bafcdb53593ce3f06436315fe96d013e6d035435f1ffa6e2805dc87c092a619e113b15cd0bae5c403e0692513626cc5197138e2c0
TLSH
T19421CA6F30FD4D74C6E34B0DE28DBB120B3C273912906511DC6D6539A9FA64F84018AF
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 a13964ebe3ee63acb3289c4e73e8153ca2df82abb74c9d567043f24c80392204
MD5 98b6907fb2bd1cea70360bcc9d62f94c
SHA1 717ed302021823e2dcde6f4ddaa8a637edee9467
SHA512 571907074af6d7a21964b4a30df497c1de831b4e576d7f272095373b92c4dd6e22c66a0c0f5ae035ce0612bf38de6c08e6ebde163ae0821dcc020c085d0931d7
TLSH
T13731E96F70FD5D74C6E30A0DE28DBB121B3C273A02906512DC6DA539A9FA24F85018AF
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 6b9cab4eea47f39a8ecc6745bf02c3924e522723acee7d70894b3612ecaaa6e0
MD5 729fc77f72eef5de00e13b2513ff124f
SHA1 3dd25ffdda892e460cbde081e7d36445d3e22305
SHA512 8f1bc059f5df64ae30eae7581abff7ae07d4faa50732946266f9be7f5289f6b390b96e9e02e507d1360c76b14159d107dae4656350cc9197a5e6454f2eae695a
TLSH
T14C31F96F70FD5D74C6E30A0DE28DBF121B3C273A02906502DC6DA57DA9BA24F85018AF
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 54f6f548f3eb4f99354aaa0229be6f2c9b578fea5cf78f12beec5e163c88bb22
MD5 e25e96c385ba57214d48317aa18cb454
SHA1 0ca6afb8f46157b4e506c418ffebcf5c19a9bfac
SHA512 4c5051dee45c09acbdad4d6a2eca09ceeb8ac935cb357f2c2774c63c928070f5300e590aab5e405df921ffc6e26a06882f52da0cd4627b3dc21c0395b456db47
TLSH
T16931E76F70FD4D74C7E70A0CD28DBB121B3C273606916502EC6DA57DA9FA24F450186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 c2ad5ae51b6c129f5e17ac315e6e4d68a53debc6c1403a2be21d65809eb90fcd
MD5 99dae9c806166930685b48d10bbbc0f0
SHA1 6e8ca62a11f06fac954b9cfae3916a3ea300193f
SHA512 7e3893ee7463b46384e35accc5a7a542f9f4beb84e3a5aeb1c07f381e75cfe4acd58c586a7fa3d206f2ae634397acdf33fb3fb5f89420882801e604677565e0c
TLSH
T1B931E66F70FD5D74C7E70A0CE28DBB121B3C273606916542EC6DA17DA9BA28F850186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 51e07beef6d2d9822bd8884167eb24998b714d95bcc4b7527d37b6b4999d0682
MD5 4e7147bd968a965789be6945aa62b1b2
SHA1 0cd962f7d1c6033cf41992843f5914b5c85db493
SHA512 59b5512f24ef96a8bd65ee88f92c9da832deb935b5bd8d37819bd78c97b99e187292503c7cba8eb9200ff5d6759cc3788140d3e881618696d268b22cba21edce
TLSH
T18931D66F70FD5D74C7E70A0DD28DBF121B3C273602916502EC6EA579A5FA28F450185B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 6d8004fa133a12bbd38cb9a218d1c7dac7ab2e5e3d61b8956970239a29a3c3c6
MD5 b5370cb05d4a6976203f113082d9181f
SHA1 e5a139d352547627cfdd54fa376cff5f05f4ae9f
SHA512 3fea60154e92d775ba6a43327d2a4a3446e2e0988f8763b9a5723a7d98d6aeca8e26ec9ff03ebf1461605fbff9cba68f17bacc719f0a5f2a72f4c892c3f430da
TLSH
T1F631266F70FD1974C7E74A0CD28DBB121B3C233606A06502EC6EA579A5FA28F850186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 1de83b23e6ff31fdf037400aea3809a939b2335468e081c892c1d229718881f9
MD5 82b800a8fe0c2ab8cacc6b2ae7fefb52
SHA1 987a831f5d4db1d28cc454932642567804a3aca0
SHA512 11b864fdc19cec598134024d35ab26b11bc479b49a4050a569fa1d49e9fe28a8ce6bd06ed466d68a5075c4d26eef5966ca37ffa3f840b82e13fb42b6593aed3b
TLSH
T13F41286E70FD1974C7E34A0DD28D7B121B3C223606916502EC7EA178A5FA28F460186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 8ea122f4504a6cdfc84d58fdcb2db5974508cbd6cef199e8dc24ea583b6aff4c
MD5 85f1b7ba39fd30826da0a4b852aae6a5
SHA1 d55812dbb0fadce4ebbc3f86031b90d5f16abef8
SHA512 90ae586e54cb6e8c3c83b628040ddc18a1f727367f03ba3fc2f30558802a07c0a70a8db3a6f0427974427e622a4bcfe2530f6a07f5686baf27b649991b7c998a
TLSH
T1CD41292E70FD1D74C7E74A0DE28E7B121B3C263606916502EC7EA17CA5FA28F460186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 213B
SHA256 b0c92fcf998f9d17a9ed27be6ef1a4b7fae6f89f93923e4bf362a3a1a915e4fa
MD5 ff1a54f9e6366cd9ced6b8feb57d24dc
SHA1 5c333f0304d13faf1cf35432dd2c5ebc091cbf33
SHA512 6b7fa525ca51df6d20b1661966a4ada9557c83762b0e25ad4b1bc1d17e1feb2b016061ee442d6d3af34bc4a6008b1193997c2b4ded7aef94e8c68fc2daf8c06f
TLSH
T1BED0A705159025B88065C34DF75EBB22263C487161C0A110E4262178A56F0A380238A3
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 338B
SHA256 8cc9261c6a1a24deafa540a9a8adfa9a0873de01ec5e12a52c65eb7c343532b7
MD5 58a3e321bf09b9457df075f5e717ecac
SHA1 ed791eca2741d4d953a3cf434bf407ce0418010c
SHA512 c758f107f660474f2440d5e024852363886b229586dee4f85c49ea21e13d3dac86ebe8f7513c821a3a5c1dff5c81ff2965b44a607e4167ce1906b73f49f46009
TLSH
T10BE0260955A0327CD2A5A38FE75DFB222B3C48712280B285F4173478B6BF1D34233867
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 257B
SHA256 b75a7cc41ee2fb3b1a6181c86237121483d223534bd7c479d9fb195d1e4bb81a
MD5 a5cff9db90252c90fde90aa762c01993
SHA1 d21f24c967db6ef716a433895f2f6e18e5df62f5
SHA512 2f560dedd2994b94b5ecc22f2bb13c102f87c30dd47d1e0e0e69fbed69c7d24d1711c2bbf69904da2f6c09be8dd04b432c2e6b41d0805fca81c5204b60ec9566
TLSH
T1A7D05B055560267881A5D34EE75DFB12273C487151C4A155F41734B9B6BF5634113C67
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 378B
SHA256 81bfc8bf2538462e03c85214ab1ce3d215c9c4560e206fd2ecea95a4abdd47a6
MD5 1eec5ed41e2a90e016c2cf5271c6be7f
SHA1 e28487b1e33593ed17f7074d58f2d0e0bb936f2d
SHA512 1b503e96827fea3c067a0710b899b128f75b887446724ba018f7ff1f9ad814971036688dec9b7eadb94df7509fc685b33a7352b03c1a5d4288755b2778582db0
TLSH
T1A7E0680841A029BCC2A5638EEB59FB121B3C487221C07159F41B6839B5FF1E74132857
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 405B
SHA256 1c8fcd506c7e2f92195bc611f0e9e66a2deb055ed1b76c715de047c14b244d3d
MD5 90b5ec86080e1922b7046f8fae4486a2
SHA1 515287a7c18fefc9b1f595bc255eae5f1056e736
SHA512 b7c2ffa11af8293238c81cafef992bdb54066d701cddb659271cf79962f83c1ce5cf20666b4eebbea3eae2d2dfbdb736671066671e512b82a78f062a1ec90702
TLSH
T179E06148419015BCC19563CEE759FB12173C487231C0B165F41A787AB9FF2DB4132857
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 cff52ff532bf4ae5dbce0adf28a1756a671559f4f11c6b97c5c4f1ce30a4e627
MD5 835929c0f73544e9a1c8e3a685a7beeb
SHA1 9a53971be8198b3ea9ab75f488fda0bee59303f1
SHA512 b663b82f2e00b06501bb651057190a99ed92accf098a7a2f87a1ea1892d02fb2cbc56786bc9c534069b66211d264aebc02ac29e2c2c475c8378ec49f442f0aae
TLSH
T1F231DB6F30FD5D74C6E30A0DE28DBB120B3C273912906512DC6DA539A9FA24F85018AF
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 f796b7c7bb3c1b9d3ee15ce80680d633a9217e1578a0d1c22611f1f337913895
MD5 279772cea4a25d6f6ee1d245da1d573d
SHA1 c4f35e406b6525b22ba1835eb25d740e75a3bc6a
SHA512 48f2fdcfc62dc44ef6c0e6df819c90ea490a0129638a4b826fb8c4965ace81b2996ba381e9508d54227a4f36821dfd7d7529b7b99fbf28ce93db3f6e325b1367
TLSH
T13A31266E70FD1D74C7E74A0CD18D7F121B3C273602916502EC6EA17DA5FA28F850186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 7cf9898338129692e88d5700851ce8732996122c081ba931322e52aae35f3077
MD5 4347f5ee1667e14842a7fdfe7a8b8720
SHA1 b5dce1cb168a98bd9e4dbe942524dad62050d640
SHA512 14ed472b64dd14d8aed7cdb79789c18247ba022cb4525eb3485cb9ec36fb471ef7bde61fded34f274a6fc1abeff7c95fd229d517bcc0644d249c843cc5932b0c
TLSH
T10531276E70FD1974C7E74A0CD28D7B121B3C233602916502EC7EA179A5FA28F860186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 da2e40109e16ab5c77f1ffc68b922d6a4fa53ee331a8b920edfbb316a3afe52a
MD5 154738a5c1a5f19424e51981225a34d2
SHA1 bf4f3f0bb1cf599e11f4febbcdefaba2c7a50248
SHA512 2ad9effb2f167f1c28ed147812574a04fda548fdd8756b30d5673632285ee4263359a8044e396967f0380b2a2c16b22f6197f5af2c17d013f75639718043f4cb
TLSH
T1CC31D66F70FD5D74C6E70A0DE28DBB121B3C273A02A16502DC6DA57DA9BA24F850186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 327e34ee6f60b214e7f2ab47d9a36ab8c8a0ba6fd3dcdcf82dcf13362680c341
MD5 32256323cbe1a7f0770f7a98088f8060
SHA1 0d26e676e8a893fe5a7274d4dd05506eba945d9e
SHA512 893ec7bb58b325dca9fddc9fbaf741f52df0a37f41457d36d9b7b1b896daadee0cc394567f002ba90c1c0376514fa81f27671239c80fed4b78405cae7a16a398
TLSH
T1B331296E70FD1D74C7E74A0CD28D7B121B3C233602916512EC7DA179A5FA28F460186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 2335393ad5f362518be975ce506d10ef531761acfeef23e0d6ccb924d03532b0
MD5 bc49141e1ec6c492c68bc40fbfbfb68b
SHA1 2fe5e825054ddc28df465fc69c776cc9db00cf58
SHA512 99259a4fc8e87007840e04695c1e58dd0c7ed5cd15a1151e00fafc764bb76b21b7b3f0258f9f88333c096e872112c27fb2841689117d92aee9573e4e811328fb
TLSH
T14331276E70FD1D74C7E74A0CD28D7B121B3C263602916502EC6EA179A5FA28F860186B
MD5 SHA1 SHA512 TLSH

Submit Download

settings-v1.json

Path C:\Users\Admin\AppData\Roaming\com.zuno.desktop\settings-v1.json
Size 1KB
SHA256 2671d366a957e9919954969f7b71dc9b8637607c75d3f102e81980c006308a7d
MD5 de20828687099ca5eaf078baadf587d9
SHA1 2b7c2c780624795198cba49d6ecd0dd52f62cc5b
SHA512 a6dfc0bc34b0e81d7a4c6bc4b633b872d97f6bf934a919a0d03a3d0ae43a88fc4409c3bf4c172021222c27bb8ec0c222352319665ccd2456ab0192e47f937922
TLSH
T127413B5E70FD1974C7E34A0DE28D7B121B3C233606916502EC7EA17CA5FA28F860186B
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1436-687-0x000002BB82540000-0x000002BB825ED000-memory.dmp

Download

memory/2780-146-0x00007FFE610A0000-0x00007FFE610A1000-memory.dmp

Download

memory/4012-647-0x000001BAD3460000-0x000001BAD350D000-memory.dmp

Download

memory/4012-25-0x00007FFE610A0000-0x00007FFE610A1000-memory.dmp

Download

memory/4288-90-0x00007FFE607E0000-0x00007FFE607E1000-memory.dmp

Download

memory/4288-93-0x00007FFE5F840000-0x00007FFE5F841000-memory.dmp

Download

memory/5936-999-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download

memory/5936-1002-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download

memory/5936-1001-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download

memory/5936-1000-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download

memory/5936-996-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download

memory/5936-998-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download

memory/5936-997-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download

memory/5936-990-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download

memory/5936-992-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download

memory/5936-991-0x000001DD025D0000-0x000001DD025D1000-memory.dmp

Download