a2b63a2925ca10e848ab36ed53169cc2e517935db9106f130d87435f71c85bce

Analysis

max time kernel
149s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
my-tools.exe
Size 18.9MB
Sample260813-tknp7stdmd
SHA256 a2b63a2925ca10e848ab36ed53169cc2e517935db9106f130d87435f71c85bce
MD5 822b672df3ee79bdaa3f5e527072600a
SHA1 3703316e4646704d5cf2639d987a53e3c2368579
SHA512 a52fcb87cc39776f4f8421473d4da0abd743b42052e1e151675baee6b00618371a95c78298d1c9c03e6c5df02a9b549dfdf887cdbca2ad2f3afcb90ea48eb698
SSDEEP 196608:PR8uoiYRYbvEOP5Ioglbw8TlNv0DURFxi5h8amqtv/PYuyzRP:PeUYRMmol+lqDaxYhn1v/PpqRP
TLSH
T11317F6257B5B9A6CD05AC4B083478A760A7134DB0B35B9FF44D492382F6DBF42F3825A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	my-tools.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 14 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Part-ES	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Part-RU	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Part-ZH	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Filtering Rules	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Filtering Rules-AA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Part-FR	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Part-IT	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Part-NL	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\adblock_snippet.js	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5576_62436631\Part-DE	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3236	msedgewebview2.exe
3236	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
5576	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3000	my-tools.exe
3000	my-tools.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
3000	my-tools.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 3000 wrote to memory of 5576	3000	my-tools.exe	89
PID 5576 wrote to memory of 4160	5576	msedgewebview2.exe	90
PID 5576 wrote to memory of 6044	5576	msedgewebview2.exe	91
PID 5576 wrote to memory of 6044	5576	msedgewebview2.exe	91
PID 5576 wrote to memory of 6044	5576	msedgewebview2.exe	91
PID 5576 wrote to memory of 6044	5576	msedgewebview2.exe	91
PID 5576 wrote to memory of 6008	5576	msedgewebview2.exe	92
PID 5576 wrote to memory of 5476	5576	msedgewebview2.exe	93
PID 5576 wrote to memory of 5476	5576	msedgewebview2.exe	93
PID 5576 wrote to memory of 5476	5576	msedgewebview2.exe	93
PID 5576 wrote to memory of 3780	5576	msedgewebview2.exe	94
PID 5576 wrote to memory of 3780	5576	msedgewebview2.exe	94
PID 5576 wrote to memory of 3780	5576	msedgewebview2.exe	94
PID 5576 wrote to memory of 3780	5576	msedgewebview2.exe	94
PID 5576 wrote to memory of 3780	5576	msedgewebview2.exe	94
PID 5576 wrote to memory of 1288	5576	msedgewebview2.exe	98
PID 5576 wrote to memory of 1288	5576	msedgewebview2.exe	98
PID 5576 wrote to memory of 1288	5576	msedgewebview2.exe	98
PID 5576 wrote to memory of 3236	5576	msedgewebview2.exe	99

C:\Users\Admin\AppData\Local\Temp\my-tools.exe
"C:\Users\Admin\AppData\Local\Temp\my-tools.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3000
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=my-tools.exe --webview-exe-version=1.4.7 --user-data-dir="C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=3000.3628.13549995213121539497 /pfhostedapp:32103a48df2d3366baf19e4d02234b4870bdc4e5
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5576
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView /prefetch:4 /pfhostedapp:32103a48df2d3366baf19e4d02234b4870bdc4e5 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x160,0x7ffd6bb25fd8,0x7ffd6bb25fe4,0x7ffd6bb25ff0
    3⤵
    PID:4160
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView" --webview-exe-name=my-tools.exe --webview-exe-version=1.4.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1704 --field-trial-handle=1696,i,12851066176904416778,829448615917702154,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:32103a48df2d3366baf19e4d02234b4870bdc4e5
    3⤵
    PID:6044
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView" --webview-exe-name=my-tools.exe --webview-exe-version=1.4.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2036 --field-trial-handle=1696,i,12851066176904416778,829448615917702154,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:32103a48df2d3366baf19e4d02234b4870bdc4e5
    3⤵
    PID:6008
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView" --webview-exe-name=my-tools.exe --webview-exe-version=1.4.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2260 --field-trial-handle=1696,i,12851066176904416778,829448615917702154,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:32103a48df2d3366baf19e4d02234b4870bdc4e5
    3⤵
    PID:5476
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView" --webview-exe-name=my-tools.exe --webview-exe-version=1.4.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3404 --field-trial-handle=1696,i,12851066176904416778,829448615917702154,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:32103a48df2d3366baf19e4d02234b4870bdc4e5 /prefetch:1
    3⤵
    PID:3780
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView" --webview-exe-name=my-tools.exe --webview-exe-version=1.4.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2080 --field-trial-handle=1696,i,12851066176904416778,829448615917702154,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:32103a48df2d3366baf19e4d02234b4870bdc4e5
    3⤵
    PID:1288
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView" --webview-exe-name=my-tools.exe --webview-exe-version=1.4.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4548 --field-trial-handle=1696,i,12851066176904416778,829448615917702154,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:32103a48df2d3366baf19e4d02234b4870bdc4e5
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3236

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2b0bf9903ee46b0098c3261fc80d3afdd2426792d0cff16e00f5c89df593ad51
MD5 05fc6045fa6258f20659026872c958ae
SHA1 ab1eaf475c4dff9a2244ac4bacbb59898a8e150d
SHA512 52d9e1daa1e5b928b6c00b26549f2ccca3e20e4522334ceae214bce1eed5c0124291bc19e000570e44994657e7e8fd91b797a53a2382f231939818a1d61f2475
TLSH
T17CD011233A030338C0A028330203F2880A00EA0F820A8080A8388A3E2F080E02A028EA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f59a2f75715d01eec2c4828bbd9f65f92e4dc25e8f4e027e54041fde203a654c
MD5 44f5e94785fa4e7b8db59931382a98b1
SHA1 902c110d86463dda9b8f2fbd4e5426af4cbc539f
SHA512 fe41d25bb8268dc34d075c04de9805e5b072d99f7629cf20007067eed9e37b045b6b3ef4d7907dc0258ed921a8bd69154d36e1c16a6a6afe07bba408a79c4599
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

97d0b841-567c-4049-916c-88d796573fe8.tmp

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Default\97d0b841-567c-4049-916c-88d796573fe8.tmp
Size 6KB
SHA256 307ff4862e69339c6a807c4c6c31e00c304f73b270af4df7902d0857f3c78757
MD5 0c6f76e9175a02a9e8eb7bf725b80b26
SHA1 2f3cc168ba2c0d701a5428c7fb597cf71fbec53c
SHA512 94a088676f2a5671bf941ab6a6aa9acc7b8e1131e4257e6e2629ccfad16ec5b3a89a95b58ae4aea7123815b7a2bbd24ecfaf6932be81d1dadf81cef4dde8cd20
SSDEEP 96:stV/dblnD1b9Jk1o5h16Z0As7/x+6MhmuecJxV1ejeFK+gDMq28XM1C7K:stJBHConAsV+FdxVQjPLG6K
TLSH
T169D195029E64787B4CC6F109BA257F47E3F960B264D52E58EBF9892C05DA6CC2307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 8a48dc7879fc9f14329ad1ab65e8e60bfc3d8c9153d8bd196dda78b88d1056fe
MD5 f10ce3f714b3d7f5d32123b344f9e089
SHA1 aa7d984e0923ee019189a2393c8eabcdcfe23f53
SHA512 1d556118f4618511cecb6da8cb0062729d4bb4a924e2d9fd7a182023a17828b76e4566ca92ec33dd6e5cf9539b69045843a873c3ae232e90760a60f500d15d33
TLSH
T15CD08C00233B4705DBA4687B20E358A23A3B082803938C4BF3539C37A0B23C0C21630C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595bf1.TMP

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe595bf1.TMP
Size 48B
SHA256 f849b49d18da3dbfe04bbfbed88160a121e29c082bdfd8f6b8114a58db167aaa
MD5 d84641c9a3055debd54d369460cbc674
SHA1 42c95bbfcbd051e1c0b1becee7154be00e0c23a4
SHA512 a8b149ca4d87fbf09a3f74fbfd9aac454d7c312854fe73740d7de19b0aa6e32ffcc3d158ff46c1cc9f0ff259fecfea43836a9844f7ff712d603526ce1804c359
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Default\Network\Network Persistent State
Size 358B
SHA256 cd20fe41c84ae7b29febaa9397f3ca7934d9e2a90cc033ebc66bb385e9090284
MD5 4804a07ac6f156f7365c4d4f303278c4
SHA1 a9fa3f3b1e80556cd3fa93e309dc0b1d3894eab3
SHA512 6de0bfd1aeb4f4dd14fa1ab0e59891662c446dfb36b8e2b317d5e9241be8d68edbeb46d9d3dca625649954bcfeab70e0db0a7bc593da4adb870445c993930a42
TLSH
T17CE0C062C3D09DBD4B4013E837343813C63E0406522C1E6BEEF9B7AA4791478D02080B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a1425.TMP

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Default\Network\Network Persistent State~RFe5a1425.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Default\Preferences
Size 6KB
SHA256 568bdf6b640d8e9d34cae4a9689c68b9919f5ec5f814ff2b6e9a57c37a6b9994
MD5 bb4db7bfeec166ee51ada9233b1eafd0
SHA1 78219faa9c2b00059d89bd70ddb57cce1be6a7a6
SHA512 08401eac7e038c6b79cda6eeb9ceb04ab054875e2e0cb0cbdb71744b97585232814e43088ea25f5ef621700499472dcc9b3c070bf868d072b17f538f7bc019a2
SSDEEP 96:stV/dbl2GD1b9Jk1o5h16Z0As7/x+6MhmuecJxV1ejeFK+gDAv28XM1C7K:stJBlConAsV+FdxVQjPiG6K
TLSH
T12FD1A6029E64787B8CC6F109BB257F57E3F560B265952E48EBF9492C05DAACC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Local State
Size 2KB
SHA256 69f0ce6a4904af7a651747e3364463e872b3f5bda0339f8e6300c25f83c7535b
MD5 8c14773b7addb1c18c59a85452f6e5cf
SHA1 df612a006d27fcebcc21ab62e8f988e1027e24e3
SHA512 ebc08b68faa5de642e72a6deb8be2d11753c990da7245e01257eb999367e6bb510ca5debf1f5af80f57e3ae52cc473012b0e5fd28d75e20c8a5008ac5c3293fe
TLSH
T1B8515372B814AB378AF29A85794A3F27EE3550A2AA513F119AED0F1C029715D1301C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Local State
Size 3KB
SHA256 03251891e181a708b84bd0133366be1897fc679cd97319dfc661bec10f52d753
MD5 d249fd646064f5af2293fee0dfa58b33
SHA1 4854c5eae96b043e2217c3a6dcb96c50d5f9bb0a
SHA512 c59c0cc3991160203300e091a3181309b3c08c7d1dabfa28f7602c4a58d13bb56e6cb6d4ad2422af7e21661d3e173c128b344b0fb80cd7b7c797c9f897c7733c
TLSH
T101618476A964AA374EF3DA45B9863B16BB654073E9913F56DAEC0E0C02D729C1301C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Local State
Size 15KB
SHA256 01e4e34d8b6049c4d5cbfc5c98662615f9a6e502afa68cfbb8efd0e4212050ca
MD5 b783006b12bb17042054ba31e6b5bd25
SHA1 d54d02263945d6d94ea379cba70325941cbe9c7f
SHA512 d187102a3e8e3d4638c6e89c961907aa2565114ed3c2a26237ecd993db9e5cf7d964502ce88c267f18436643430ccee4939cfb95978b9a80c975449f26745cf9
SSDEEP 384:Q+aQikB+z/xvxjg/qhEwNBSIi3cDdRdg9zA:v/UxvxjgC+hEfgFA
TLSH
T193729E2BD579BE2399F7E50579491B4FDBB884B291817D744EFD5F0D03872981302C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58fd18.TMP

Path C:\Users\Admin\AppData\Local\io.github.caolib.my-tools\EBWebView\Local State~RFe58fd18.TMP
Size 1KB
SHA256 4ce9f944d12209e8afd7c5445040f27ae1d855978e257b51f33c2e40dd4ed5ae
MD5 caac75be036de692dd64071749efca2c
SHA1 91d77cb4a273a7aa72176c29851914f509f5a052
SHA512 c2f946d8679e96df5244ed08fe1e07bb4b5502ecd20c5dab49e0ff46016e5cc56a82df6bcecef88becebc1143d1b1898893a489641a82d9c6abd8b6789a2c17a
TLSH
T12B21B7F2E4A8AB33EDA7A68631477E5BBE3000B7C1411F00A6EE0E1C03A305D611AC37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1288-258-0x00007FFD8C0A0000-0x00007FFD8C0A1000-memory.dmp

Download

memory/1288-259-0x00007FFD8CB60000-0x00007FFD8CB61000-memory.dmp

Download

memory/3236-316-0x0000023384600000-0x0000023384601000-memory.dmp

Download

memory/3236-314-0x0000023384600000-0x0000023384601000-memory.dmp

Download

memory/3236-323-0x0000023384600000-0x0000023384601000-memory.dmp

Download

memory/3236-325-0x0000023384600000-0x0000023384601000-memory.dmp

Download

memory/3236-324-0x0000023384600000-0x0000023384601000-memory.dmp

Download

memory/3236-322-0x0000023384600000-0x0000023384601000-memory.dmp

Download

memory/3236-321-0x0000023384600000-0x0000023384601000-memory.dmp

Download

memory/3236-320-0x0000023384600000-0x0000023384601000-memory.dmp

Download

memory/3780-102-0x00007FFD8C0A0000-0x00007FFD8C0A1000-memory.dmp

Download

memory/6044-19-0x00007FFD8C0A0000-0x00007FFD8C0A1000-memory.dmp

Download