575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 05:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe
Size 1.1MB
Sample260819-gmxdxazthy
SHA256 575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1
MD5 da8f0cdc816d27cd34976fb0b81a4cb6
SHA1 174e3a7a75d8e21cb99c2cb8d22809d9aa8aed10
SHA512 44a5adf6e3859a93fee3f8610ea1f8fb6f5e0500f4eaee7af332c436455001f124aa46c9cc3bdaf08947c7443dd271d369c1f56aece093ed0e33fdece9caf960
SSDEEP 12288:qxDFjqJBg1O808j81uQv3sRvrZ0myTlTRTUpThTNTs51GRtVB3ZsrEtJPrCyR/rx:q5FuJBg1O808j81uQv8RzZ9AOsTag9
TLSH
T1CE35182223FD865AF1F26B79A57403208BFBFC96BA75D75E05A8151C0D73B8099A0733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
5596	575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1264_313660151\metadata.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1264_313660151\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1264_1486541232\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1264_1486541232\ct_config.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1264_1486541232\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1264_1486541232\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1264_313660151\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1264_1486541232\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1264_313660151\manifest.json	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
5596	575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe
2972	msedgewebview2.exe
2972	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
1264	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5596	575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 5596 wrote to memory of 1264	5596	575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe	89
PID 1264 wrote to memory of 5532	1264	msedgewebview2.exe	90
PID 1264 wrote to memory of 2152	1264	msedgewebview2.exe	92
PID 1264 wrote to memory of 2152	1264	msedgewebview2.exe	92
PID 1264 wrote to memory of 2152	1264	msedgewebview2.exe	92
PID 1264 wrote to memory of 2152	1264	msedgewebview2.exe	92
PID 1264 wrote to memory of 2564	1264	msedgewebview2.exe	93
PID 1264 wrote to memory of 1052	1264	msedgewebview2.exe	94
PID 1264 wrote to memory of 1052	1264	msedgewebview2.exe	94
PID 1264 wrote to memory of 1052	1264	msedgewebview2.exe	94
PID 1264 wrote to memory of 3508	1264	msedgewebview2.exe	95
PID 1264 wrote to memory of 3508	1264	msedgewebview2.exe	95
PID 1264 wrote to memory of 3508	1264	msedgewebview2.exe	95
PID 1264 wrote to memory of 3508	1264	msedgewebview2.exe	95
PID 1264 wrote to memory of 3508	1264	msedgewebview2.exe	95
PID 1264 wrote to memory of 1316	1264	msedgewebview2.exe	99
PID 1264 wrote to memory of 1316	1264	msedgewebview2.exe	99
PID 1264 wrote to memory of 1316	1264	msedgewebview2.exe	99
PID 1264 wrote to memory of 3304	1264	msedgewebview2.exe	100
PID 1264 wrote to memory of 3304	1264	msedgewebview2.exe	100
PID 1264 wrote to memory of 3304	1264	msedgewebview2.exe	100
PID 1264 wrote to memory of 2972	1264	msedgewebview2.exe	101

C:\Users\Admin\AppData\Local\Temp\575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe
"C:\Users\Admin\AppData\Local\Temp\575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe"
1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5596
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5596.4144.1897161211699242060 /pfhostedapp:eea2b4c7310b4cb5c20de4fc592693320c390e65
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1264
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView /prefetch:4 /pfhostedapp:eea2b4c7310b4cb5c20de4fc592693320c390e65 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x180,0x120,0x7ffa42bb5fd8,0x7ffa42bb5fe4,0x7ffa42bb5ff0
    3⤵
    PID:5532
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView" --webview-exe-name=575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1740 --field-trial-handle=1752,i,7987405536705393534,1967419282033899546,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:eea2b4c7310b4cb5c20de4fc592693320c390e65
    3⤵
    PID:2152
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView" --webview-exe-name=575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2212 --field-trial-handle=1752,i,7987405536705393534,1967419282033899546,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:eea2b4c7310b4cb5c20de4fc592693320c390e65
    3⤵
    PID:2564
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView" --webview-exe-name=575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2216 --field-trial-handle=1752,i,7987405536705393534,1967419282033899546,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:eea2b4c7310b4cb5c20de4fc592693320c390e65
    3⤵
    PID:1052
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView" --webview-exe-name=575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3376 --field-trial-handle=1752,i,7987405536705393534,1967419282033899546,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:eea2b4c7310b4cb5c20de4fc592693320c390e65 /prefetch:1
    3⤵
    PID:3508
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView" --webview-exe-name=575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4400 --field-trial-handle=1752,i,7987405536705393534,1967419282033899546,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:eea2b4c7310b4cb5c20de4fc592693320c390e65
    3⤵
    PID:1316
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView" --webview-exe-name=575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4424 --field-trial-handle=1752,i,7987405536705393534,1967419282033899546,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:eea2b4c7310b4cb5c20de4fc592693320c390e65
    3⤵
    PID:3304
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView" --webview-exe-name=575de579c346a904100ec727d054a23955ab132dc6d590d332feeeaf58a9c5b1.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=828 --field-trial-handle=1752,i,7987405536705393534,1967419282033899546,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:eea2b4c7310b4cb5c20de4fc592693320c390e65
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 64673a7bd6c5529a66211c949b3bb097ea41babf083226c0438ba5599a4f0b8b
MD5 005c8ac413a3be57edb961d4eff39a8c
SHA1 eb41b68e5f8379c4e0b44d0025a500a55d2788aa
SHA512 9b83ac6cf95db37d97a1fbb5311e602df47779a23387ed208d0a93753e70db8a0543d3892083394c70d8b1e4556ca2e710279cf0e56cb2e710dc9123bbb28748
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9e093a16c223b2a8cee3d6f5e81b300bbe8e6d11bc0468358722ab33ad3be3f2
MD5 df595d622f0a63d67808971d27d2ac82
SHA1 bf220c03edc84098fccebc1c11181291c6d207e0
SHA512 077b7f4ef4ffb4bc3cecaa585b7bef889ff55ecc8411461d087f04611640840ec1c0266959cd04977c9d43f9a25bad4e0c4b5c780af468a0fcb4bc5d50a5d95e
TLSH
T15ED012173601017CC010F873461261184A40D1CB450540005838851E1A1C4A01912455
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

129a25d1-9864-46c2-8451-9a34ed895447.tmp

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\129a25d1-9864-46c2-8451-9a34ed895447.tmp
Size 6KB
SHA256 a7aa1a1aace40d75c79da38fde60488ac35b0127be1a1d5733a147f369dcc3fa
MD5 0c9b80d8aa69a54103ec11b6ac7a80cf
SHA1 526fd8e0a9e16f0b72c365be014d500e7a1dfbc5
SHA512 2bddebd14cabf3bf90f4750182dbfd6c5efa2d30971909aad63ec4900dd53cf379fe97112ac9eef144da44db1b9c52a3123e3d77960086d3dd43c27beb0c9336
SSDEEP 96:stV/dyy0TQb9Nwk1o5h16ZB8is7/x+6MhmuecQitoR1ejeVK+g0028XM1C7K:stJM1QwwoW8isV+FUitoRQj3i0G6K
TLSH
T113D1B8025E24797B4CC6F619BA29BB03E3F5A07274D51E58EBF8466C08DB6CD630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 b9460dbdcb692b897183c5799f01e2380d4cf795a434399a904193b8e4ef6106
MD5 b9353f2848044c420706fd0fef8bcb4b
SHA1 f5a5463372d434486d55e0af0889b0e7c746c88b
SHA512 4c2c51600fe10882ec05500dc9ba0e0c43784659ed42d5e2c472ef8ae00250f64812e42599299d8430ffe78f10774e1bd8900f04a05e1c9f6ac604c632037774
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 c006ac85aa439bba8e98aec72fe86992a21457e844a2e5ee33ae733cdfd0e703
MD5 e338df00a6580e41ca94e5886d3f18ff
SHA1 88a0e60a35c967121be1429c3a7896994d56eea5
SHA512 b53875cf0e87fe099161e55e1a1368a28ee8fd1367d6c11ef2fba0fd321e77a524575edbdd5df480fb6151609040e57fe24b2da0a02d49e54ec2025ea7ebb700
TLSH
T138B0228C80802203CE0C0B3082C3A3B830BC0E000A030F82CBEC8C38C223BA22288200
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a9db8.TMP

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Network\Network Persistent State~RFe5a9db8.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Preferences
Size 6KB
SHA256 e686518e2da95b13bfe41419af800fb980d9ee1f83a15f20fc95fb84b6b8dc5e
MD5 9131ac1a7ecaa8b4e5edd750c3591dcc
SHA1 3b9586127822c2cb9aa7966bb10c79f5ae4f90bb
SHA512 8841b4867a9f7ed22ead2574a4613c97176512d6747f8ff38e5402e3c9f2249810d70be0b19ca3440a5ad475314565a84a4c2410c07ef83fbf0b79a4be906965
SSDEEP 96:stV/dyy0SGQb9Nwk1o5h16ZB8is7/x+6MhmuecQitoR1ejeVK+g0yy28XM1C7K:stJM1KwwoW8isV+FUitoRQj3ipG6K
TLSH
T1C1D1C9025E24797B4CC6F619BA29BB03E3F5607270D11E58EBF8465C08DB6CD630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49ac6b5b2f1e1977_0

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Service Worker\CacheStorage\b78c515e663ad1f2ce8013643253a0b426bdbbf3\4f09e1af-f6e7-4b95-9367-157a271aba64\49ac6b5b2f1e1977_0
Size 5KB
SHA256 da310242e7bcfac882d04c0d0bc6860cebb1a6d9a1ad10cd3d06d885b1efc76f
MD5 5b95152b9f52eb5d206c4adfe23ecae9
SHA1 1c69d9a8940eef89cf2d070e30838237c87d5c69
SHA512 9eead06893a8dff866777d37f1315f7a0d635c4f7fc800929860d08c94a682ed3f507be56bc504b0eb8aca06eea05f8648a702217cc805e0afba5abcda0d5bd3
SSDEEP 96:2z0k9lpRote/1l4gL0HUUguisbUCXQgLHokbtVw2MnDLelP+3qC8rU8IP/blgoQi:2z0kRRHLUguiQXQoHo0tVw22ve9/C8r8
TLSH
T1A2B1D69D2B44B06303E4415E083F958EF1319638605EEC1AE2FCE02356758A688EFF37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Service Worker\CacheStorage\b78c515e663ad1f2ce8013643253a0b426bdbbf3\4f09e1af-f6e7-4b95-9367-157a271aba64\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Service Worker\CacheStorage\b78c515e663ad1f2ce8013643253a0b426bdbbf3\4f09e1af-f6e7-4b95-9367-157a271aba64\index-dir\the-real-index
Size 240B
SHA256 5af449d7cd748531de2d9bc9fe19ba6a58f605aabce94b22a22d1661621c3ecc
MD5 226f61119cb39609190c2baf95fc3c2a
SHA1 1acc46066ffe4d29d58a9d66cc5313f90b98a0ab
SHA512 dd3b63ba6801faa747184a4c70c15a3fff1e414a80697f8d5c984df01c4046ba2550582742a9ac238ff211a7941b976e98e103681d15f3abb3abea9dfd67ee85
TLSH
T18FD0801E41551077CA1147F1A9472078F678E8A5420187A3145D48B1DC57394F9255DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d298.TMP

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Service Worker\CacheStorage\b78c515e663ad1f2ce8013643253a0b426bdbbf3\4f09e1af-f6e7-4b95-9367-157a271aba64\index-dir\the-real-index~RFe59d298.TMP
Size 48B
SHA256 1efbb8e4f43b86c1ecca7fb68828f6bfe30f9364132ad569dd8342ec94cd412b
MD5 75ad52fdcc35834741e748fcfdf59e46
SHA1 728cb46eb50121c517dd6aedebb3a2042d622bed
SHA512 54c0b8248750e88d3b02d13d5e4bc1fe3a2f80849d07e835fa53fcde9285c6455899a761e457b37a6f89bf7d0da8d3a28210c2f9ed76fdef511a93d7689ee2c9
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Service Worker\CacheStorage\b78c515e663ad1f2ce8013643253a0b426bdbbf3\index.txt
Size 131B
SHA256 f51c1f4796d322e25cdf4c69be46094714c88a20dea8a7b8bdd9a2b63119a51c
MD5 0aaa4d27ce2ca21aeb1afcd39e56b6c0
SHA1 7c585e1f74252ddb042d3059e256868dccf77331
SHA512 7e49ceee439928dc58ca15960a61a700c389a16c77b9e5a5013adca79dbf3f1aba713ea0cb0f162abc9ea1c2392a84e72a40a73eea9134f43e48e6aabd0eab54
TLSH
T167C09B5B4421DD0F1D40C7D241433394C15D61C4454C7C7F816587904EAD5F2A4597F1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59d2d7.TMP

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Service Worker\CacheStorage\b78c515e663ad1f2ce8013643253a0b426bdbbf3\index.txt~RFe59d2d7.TMP
Size 135B
SHA256 62dd67d28c2a2cabf0ba637996771759e4985ee016b6c25bda1b3a6532f8f12e
MD5 6aa7e65585a9cea98d33ab7ea83dc795
SHA1 e8e5d98fef8c1777a29372131fac249275ff4062
SHA512 751f7905bd0ec1f889bb5107a29193d1d7be1024915db6fa297e354a2edb23073f4e06b3b7c5cf936f034ed1afe77142449292fb7059efeceafd05e9e262c8d7
TLSH
T1ACC04C564021DE4E1E4086D241523294C19D6D84484C647A4165B7904E795F2A4556E1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 7e0ce7e0704b266838571c9fb82fa9aad96a0ec494087c15e35043ed9bbdcaac
MD5 173790ebcc2e4b80a4322a4b3713910f
SHA1 fb869ce623fc4716f050e013ee704028dcb43e40
SHA512 08f512f11ccc38226a7767576bda950b2d53a7500fb78eea68cebab47cbf3f1a7213e94324bf27732e390795bc18b346834ac4800eeaa0638ef7e64e15265f73
TLSH
T115A0021682A00225D04412F0218715C4B2146D6742092F82469D02D7DD70AED53930D1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c932.TMP

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59c932.TMP
Size 48B
SHA256 2b14d0d3bd0d14279427b1372ab73aab9d9d3053261b8f9a90b7869e07e41da7
MD5 67ced375fb0c61f362ab3ba620ba27c1
SHA1 43c3543d19334840880b7a60020e17e055a46696
SHA512 9d9b653a996b0c9ad18db88656466ebfe7b0ebddf9e87fed615728084de535a4027dab635ea0f8f676c5be91babdbc8a0c45d3480f54840bb59c3a288714a77d
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Local State
Size 2KB
SHA256 8baf68e767bb17b9c00ddd7b31a405db92c6b1c40e2df788cb42897d6888aa8a
MD5 0aad6da4464edcdacc8afa23a5fbb214
SHA1 950437246bb5667b8cfa2ec61da9cdb727d39ba7
SHA512 3f456399a40a9e8913b99b5d7e36038e51e49ab0711a368495201518fa99ea484e32ac3c1abb26fa61522ef373a249db3203fafe43384ed12762fb494c310839
TLSH
T19E51A733A9246B3799E2A6087A8F7B13CF79D096AA521F50DADC0F0C40C715D6702C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Local State
Size 3KB
SHA256 1637a795f6721075d8a7c10067a73c97fc5ebe2ad46fd4a64cdfa3673574132d
MD5 16edae19ca35510253e611c3974a9d73
SHA1 9577336a2e83c1081bca81ea375ca95d8df519f7
SHA512 8b4e007c316f9a69df46d4af023842685b36bae51818cb92c48e43299ba89db9281e20dbb097efc8079194c56b599b849b623bc7495307706ba0994e35ea8e24
TLSH
T18461A737A934A9375DE2EA04B9CA3B03ABB59027E5813F95D6EC0F0D00D729C2342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Local State
Size 15KB
SHA256 e57340c1f293c62cd96c2902d0e306306fbae91e9be980f0340394340fc9492c
MD5 b4b930d1ce97c38ec32f778822d8618e
SHA1 53d48255c0a41d71a0d85f08b190ea764bc698cd
SHA512 40268ff917e8a2e115c41ac1262a973eb20d9b6da6f6ee0d4fd33883186b61644c460a63f1e27ab05057cfe989f9ef64b0e74804bd18df4aa90ac5af18221ce3
SSDEEP 384:t+aQikB+z/xvxjg/qhEwNBSnHsyBh8gAs9z3:4/UxvxjgC+PLCsF3
TLSH
T1BF729E2B58397D27A6F6F604799D074BCFBDD8A260C26EB889F95F0906873981302817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5972f4.TMP

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\EBWebView\Local State~RFe5972f4.TMP
Size 1KB
SHA256 8d88d41f4d1aefa5235857fd6fd43c13512a92121af2ee3fef5686f1d484f21f
MD5 47ba58ce85f098a95b4a89a243881069
SHA1 ae21aa03d3fa4a6349da176794898111e03c518f
SHA512 0241f454af0aa08c26e874fc5e7301d605453271a78fcd8dcd3dd59b144539f1593aa6c763eb8fa109ca73cfcaeb07c56ce030d7208c4fd2282d07e42b8c1a5d
TLSH
T1B92162B3D4351F32ACC0B20A728A7A839F72905B92414F44A5DD0F1D41D619EEA2BE3B
MD5 SHA1 SHA512 TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\STC251-IDE-WebView\bin\WebView2Loader.dll
Size 162KB
SHA256 462b36fd1be6ca9f7563466a89e57c41ef4a4def3e0a84fa885d203aea4a3aaf
MD5 c9a5d0f278d57d83a03404b8baeeac64
SHA1 39d44b999c1d89c36136804a373d4d427bc7d679
SHA512 97dfb08eae34624b7679a4bb07dee242b2a38324dc13b8aaec6de7f6fed477e9f9bc7474d4df9fbe907d1a460723db7177b7128a26edf5bd73d38d4d45722db6
SSDEEP 3072:fXAne8TlTRTSpL1ThTNTRyMDjRb/hy75HGRtVBviiZsZ5AalCPTxiEtJx9eg8Xjm:/yTlTRTUL1ThTNTRyeLq1GRtVBvPZsrw
TLSH
T184F36C5772E8007BE16A8274C5A34A11E777B4510B60ABEF03A447791F23BD4EE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1316-359-0x00007FFA68BA0000-0x00007FFA68BA1000-memory.dmp

Download

memory/1316-360-0x00007FFA68C50000-0x00007FFA68C51000-memory.dmp

Download

memory/2152-40-0x00007FFA68AC0000-0x00007FFA68AC1000-memory.dmp

Download

memory/2152-270-0x000001DB17220000-0x000001DB172F6000-memory.dmp

Download

memory/2972-417-0x000002993CF10000-0x000002993CF11000-memory.dmp

Download

memory/2972-410-0x000002993CF10000-0x000002993CF11000-memory.dmp

Download

memory/2972-415-0x000002993CF10000-0x000002993CF11000-memory.dmp

Download

memory/2972-414-0x000002993CF10000-0x000002993CF11000-memory.dmp

Download

memory/2972-419-0x000002993CF10000-0x000002993CF11000-memory.dmp

Download

memory/2972-408-0x000002993CF10000-0x000002993CF11000-memory.dmp

Download

memory/2972-418-0x000002993CF10000-0x000002993CF11000-memory.dmp

Download

memory/2972-416-0x000002993CF10000-0x000002993CF11000-memory.dmp

Download

memory/3508-271-0x0000018AAE2E0000-0x0000018AAE3B6000-memory.dmp

Download

memory/3508-115-0x00007FFA68AC0000-0x00007FFA68AC1000-memory.dmp

Download

memory/5596-275-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-5-0x0000000002840000-0x00000000028D8000-memory.dmp

Download

memory/5596-4-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-2-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-0-0x00007FFA47CFF000-0x00007FFA47D00000-memory.dmp

Download

memory/5596-6-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-7-0x0000000002820000-0x000000000282E000-memory.dmp

Download

memory/5596-272-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-257-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-256-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-11-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-10-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-12-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-13-0x00007FFA47B70000-0x00007FFA48514000-memory.dmp

Download

memory/5596-1-0x0000000000520000-0x0000000000638000-memory.dmp

Download