8fab8e24eabd250b6dbcc5b58075ec480d8ca949e6e5a065c792230ff50cce8a

Analysis

user interaction
yes
max time kernel
60s
max time network
64s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 02:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
stellar.exe
Size 29.9MB
Sample260820-csfwwsdn2z
SHA256 8fab8e24eabd250b6dbcc5b58075ec480d8ca949e6e5a065c792230ff50cce8a
MD5 418ce4fa4861979a55f9d64bbb8792d9
SHA1 ac7f4a450f21adc03481728780790ea5598ed30b
SHA512 8d4fd9858446fb65b665c82fac0a521868e03e31e9576fbff92c0a6a09e93565e718ad6aeb97ef38e3199f8dc084b3ae16fa6a63bddc1497a30ed1cada34916f
SSDEEP 786432:IX8pL/tZEVw+Hcs8zObxjLQUv9Nm1LEPE4+:uFwGcjabxjLQUVkLEt+
TLSH
T1FE679D117B5B99ACD18BC87083474AB30E2174DB1A36B9AF44C462393F7DBF46F29219
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	stellar.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
3420	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1756	stellar.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 1756 wrote to memory of 3420	1756	stellar.exe	89
PID 3420 wrote to memory of 4772	3420	msedgewebview2.exe	90
PID 3420 wrote to memory of 4932	3420	msedgewebview2.exe	91
PID 3420 wrote to memory of 4932	3420	msedgewebview2.exe	91
PID 3420 wrote to memory of 4932	3420	msedgewebview2.exe	91
PID 3420 wrote to memory of 4932	3420	msedgewebview2.exe	91
PID 3420 wrote to memory of 5096	3420	msedgewebview2.exe	92
PID 3420 wrote to memory of 2460	3420	msedgewebview2.exe	93
PID 3420 wrote to memory of 2460	3420	msedgewebview2.exe	93
PID 3420 wrote to memory of 2460	3420	msedgewebview2.exe	93
PID 3420 wrote to memory of 5140	3420	msedgewebview2.exe	94
PID 3420 wrote to memory of 5140	3420	msedgewebview2.exe	94
PID 3420 wrote to memory of 5140	3420	msedgewebview2.exe	94
PID 3420 wrote to memory of 5140	3420	msedgewebview2.exe	94
PID 3420 wrote to memory of 5140	3420	msedgewebview2.exe	94

C:\Users\Admin\AppData\Local\Temp\stellar.exe
"C:\Users\Admin\AppData\Local\Temp\stellar.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1756
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=stellar.exe --webview-exe-version=2.1.1 --user-data-dir="C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=1756.4496.659422102467642529 /pfhostedapp:7346ada77ad42d3004fa8dbea997eea31e49a493
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3420
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView /prefetch:4 /pfhostedapp:7346ada77ad42d3004fa8dbea997eea31e49a493 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x120,0x194,0x7ffd8da05fd8,0x7ffd8da05fe4,0x7ffd8da05ff0
    3⤵
    PID:4772
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView" --webview-exe-name=stellar.exe --webview-exe-version=2.1.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1764 --field-trial-handle=1768,i,12454052016002646532,3654564482773966010,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:7346ada77ad42d3004fa8dbea997eea31e49a493
    3⤵
    PID:4932
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView" --webview-exe-name=stellar.exe --webview-exe-version=2.1.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2024 --field-trial-handle=1768,i,12454052016002646532,3654564482773966010,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:7346ada77ad42d3004fa8dbea997eea31e49a493
    3⤵
    PID:5096
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView" --webview-exe-name=stellar.exe --webview-exe-version=2.1.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2312 --field-trial-handle=1768,i,12454052016002646532,3654564482773966010,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7346ada77ad42d3004fa8dbea997eea31e49a493
    3⤵
    PID:2460
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView" --webview-exe-name=stellar.exe --webview-exe-version=2.1.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3448 --field-trial-handle=1768,i,12454052016002646532,3654564482773966010,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7346ada77ad42d3004fa8dbea997eea31e49a493 /prefetch:1
    3⤵
    PID:5140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 477519a859368c0b0f2231c96c15dfd4fe383a0124f67162bc13c29e48a54596
MD5 ebc77ed6f82931f766300295ce5a93f0
SHA1 34bba3c021c2117d71a796269026c5189e14f12c
SHA512 a6e7dcbe3ce82362c93097feced45ca7fce0f87594a3e697a42fe2007fc7ec84d8405836d63d8cc3f6e01225c4d47d446f1691b285590542e985c274687f42cb
TLSH
T185D01216B6264538C0106033044661081801C11F40468003542C892E3A945A00916882
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 bd2b28bcdde75811d1919034aea99e687b6c55b34ecb8927b0b9df209b643b46
MD5 5f5b869a46cb94afa0318eaacf890db0
SHA1 77362b424ad3364b3cc1686215f0c4cb12bb7e6c
SHA512 1bb154a33549abe27421e1729f5f4658b16f60228c9f56a636c8ef06a71fbf150964b52a31642c21776d93f999bdf66af413af22921578ebf6d33e0249f7d540
TLSH
T1A8D00414D53D4404D104D031045C411015114415104345130014041534D07504015541
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 a3ca82a96112190a7746c89cca5f391c2b408a4900aa213f873adbc8cc6f1da3
MD5 0dcc23cbd75b1b0d9acf6cc0e6956928
SHA1 77f4579d5f544daad282ee9ea9a31281e967a565
SHA512 67f7841d388b3e06e829238e0137529b41d3b4437e5ccbc852df5b65877af9a62cdaa6e0e1543317852d780b5f321b2ba724980a2ea882be7b39f4518f954c05
TLSH
T1ECA002E45A458406D50C0B7034C9079937315821535B0B6646E2567C8D7E3A24675662
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593fde.TMP

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe593fde.TMP
Size 48B
SHA256 8ffb2834e6211112c44474f502329bfa705c24d441c5b46fe83476a5239f29d7
MD5 6c4bcd669035f610af75ce69aca1dfe8
SHA1 6daa2fe6f9dc12b8af5f6896b30a726dd417b662
SHA512 0e9df9b61b91aabe33abf398a84d89675504d4e3ef582da5e863394712df79e90e275677bb02887ec0b7f287b636ddf7d8211096191250ab71fb4bdf6054091e
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\Network\TransportSecurity
Size 356B
SHA256 a5f028a6bdf6dc19773bfc320b5819e6312ff7de0d0026410fe61d0576c22f4d
MD5 d3f1d87605cd913d620b2a6b2eb2f3c5
SHA1 df4718882e624691af1fed61b74303304ed22458
SHA512 860b17eef297fa6bef5e8fbcf7f395a1e0cf095e48e0eb03845e81b52280a38fefea7d13b780e40e7b4ec66f6693e282121f721ef66dbbdeff2fa77ec1450d85
TLSH
T1F8E0DFE2C07EA0BB60B81A3A0D44BC192F3AB9302550B8E5DA92807CB0812F79A12432
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe59c00a.TMP

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\Network\TransportSecurity~RFe59c00a.TMP
Size 356B
SHA256 a8df21ca5da2b488ba5fae5b3f722ca7fe272e4e87123002c72435aac8816a3a
MD5 ebbc70e9a59016e93ff061f7ef3bad38
SHA1 cc7bc023e9efe552387c2189f4aaa063030559a5
SHA512 0ef3af55ceded5860ed0475668d934fa56eb3c030cc4cb914631163191b405a196bb749bae67a8534144e385caba09f10b7507b4fb81a4e369a7fab3ae7168f7
TLSH
T1FEE020F3C07AB0F720B82D2A0C447C151F79F531255064E5DA53817D70811F74B22431
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\Preferences
Size 6KB
SHA256 ff9ebf5b7d76da1cc112ac28a3193b2dca921682d7804a43db1dfb30b77c03ca
MD5 a67d11b8acf46381689b967b6756ab9a
SHA1 c7ba954590e97ec3a3419f8f7161e391c2598fe0
SHA512 a9d87a58a527924098ec146cf0a31111ae0e5f103e3e0a986e4bb70e1f28c3816aad272381f7a071b6dac497ae281d24f835da535bc5945f024c2e140d833042
SSDEEP 96:sta/dYqUsCb9Ckjo5h16Z0us7/x+6MhmuecJyRj0jeMK+g0n28XM1C7K:stCaqHAonusV+FdyR4jUOnG6K
TLSH
T114D195115E24797B4CC6F549BB39BA17E3F9503260D51E58EBF84A2C14DBADC230B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe595af7.TMP

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\Preferences~RFe595af7.TMP
Size 5KB
SHA256 ab2a64c6938c1a711c05078a744a18ad4a48e48864c315b972294bf3ded16092
MD5 1890bf3e696de183596a87337be70dcb
SHA1 0a758b5d35150de2fa000e96154cadca31fd8205
SHA512 18e8f00711dfdb0ea29eefad32a69176085d257583fe8b098ab4f7e2c74198946fede1d0eea12b994e47773417b58f9034afc2b139e2f786be78a20f45510863
SSDEEP 96:ra/dYqUsCb9CkXdo616Z0us7/x+6MhmuecJm11ejeMK+g0P28XM1C7K:rCaqHco6usV+Fdm1QjUOPG6K
TLSH
T1BBC194125E24797B4CC6F549BA357A17D3F9503164D52E58EBF84A2C18DB9CC231B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Local State
Size 2KB
SHA256 c91c1aa50fb07fc80af87de0062873c7baf31166c7937da1a73bb73df6e3ced8
MD5 17c3c3ddfef8a510ce6727eace78763a
SHA1 4d9e38b22afef4a3369282bc9d23098824cecafd
SHA512 3bd05e80dc846355fadb8cd133826137fb91bf6419d1b93bc4e8c6cf76b969872c9d2f819c32323f71a441b3b4b92f2aeed98f87942e3d7c5d57fe6cb1358cef
TLSH
T1F45192336C20AB779AF29A897A5A3F17CF3890A69A512F109EED0F18009714C1716C66
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Local State
Size 3KB
SHA256 a427cf68d87f88f1deecd0b7e0e1cb29739fcb0f29d78b78f6190936a0bffd10
MD5 b8df4bfac2c26bffcb976a0e264a015b
SHA1 e70b97d9f68eb907705925c97c6e5814e95e66a3
SHA512 4779024b1afda021cacc4c67bcd9fc950e1c337d9896068a1103392552f8de38ad331b794ff6525de53f5ad8e913924de6996a008430bacf8a3ee518bdedc27d
TLSH
T1376182376C30AA7B8EF2DA45799A3B06EBB59027E5813F55CAEC0E1C01D728C1312C16
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Local State
Size 3KB
SHA256 c358c1b228b3375e457e2290d9693614e88fea79a34a07cd20474900b6ce8766
MD5 785930092601fa83799b438c644b90eb
SHA1 dfc79eec7e00d7df11927f1d66bc8dac87bca38b
SHA512 54e73fd7430d8311550938fc95b3fc4c0ad2f1636620b11fffb952b402a2bbc2fc88fbb358940a71cdec3f16879164bb04db7365e806a5c25b66c5cacf35269f
TLSH
T1BC719336A874A9775EF2EA497D9A3B06ABB49023D5853F99CAEC0F1C01D728D0312817
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Local State
Size 15KB
SHA256 801184515124ab0fb3bd7fca1c95226ae465505788c2690633a3d6b955eb2dae
MD5 87f3455cd3bdb01a2c121e97bbed7dd2
SHA1 90d559e965d767d57344f430ef1ff5704fe2d09d
SHA512 27aa56abc07ceba06377f9f6b9dd6a8599821ad1e8d206afa8d51b2dac8e68bb914d627831295bdd74bb66f11e70392ed29d012177a54e05eba53189d02002fe
SSDEEP 384:m+aQikB+z/xvxjg/qhElNBSl50qKF5bd4AB9zL:x/UxvxjgC+wSl5x/BFL
TLSH
T1EB72AF2B99797E33A5F7EA053E5D1B4FCBB898A291C16D684EFD5F0D02C72D80306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58ee33.TMP

Path C:\Users\Admin\AppData\Local\dev.stellar.launcher\EBWebView\Local State~RFe58ee33.TMP
Size 1KB
SHA256 05e52e564e0859ecbf96b3bf823fbc9707bf67bbf72134945f663f252110712a
MD5 128b0dc2eff590f1946a52a5b07f5d06
SHA1 bf7df338a59ac24b4fbf56afd705a32a16ad529d
SHA512 da1789a5b3a754fbba6f84b0413fed1ad94784f56188d4622e44477b2c4b45098b591205a505a29ca7e06803c13aca0c80c314fd3b10be58d40cfa9d0dee280c
TLSH
T14B2157B3EC245B73EEE1B78B372A7A4B9F34506AC2504D046DDF0E28119708D963B832
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4932-24-0x00007FFDAE330000-0x00007FFDAE331000-memory.dmp

Download

memory/5140-101-0x00007FFDAE330000-0x00007FFDAE331000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads