Analysis
- max time kernel
150s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
26/08/2026, 16:48
Static task
static1
Behavioral task
behavioral1
Sample
solara.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
solara.zip
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
SolaraV3.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
SolaraV3.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
General
- Target SolaraV3.exe
- Size 18.4MB
- Sample260826-va84tssfph
- SHA256 f07e7c06d1a66307bc38a5b50c3b2a2308ebdbfbb2edcc8132678e0735b6ba99
- MD5 f8492589e784210e01e3e1be866ff66d
- SHA1 df1a10229580316766f36aa084ec8be5f3548f06
- SHA512 ac3d44a312eb2cdfbcc3bfcdaf07b09c4e2a98cd1f0741d7c384427fab022b973fa81fcca0bc200cddf95ad1422577c9a73edfdc9129290526ad2b85a4ff5862
- SSDEEP 196608:IVz5s2HBOMaY77v9G5LCAIJzB+zKg5RPMDd5j3z:K5s2HBOMaY77v9GIAIJzB+2gv0Ddx3z
- TLSH T15417F7257A5B99ACD09BC47483478A724A3130CB0B35B9FF449496382F6EBF46F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Downloads MZ/PE file 2 IoCs
flow pid Process 14 4448 SolaraV3.exe 14 4448 SolaraV3.exe - Drops file in Program Files directory 8 IoCs
description ioc Process File created C:\Program Files\chrome_Unpacker_BeginUnzipping2536_1965488686\crl-set msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2536_1965488686\manifest.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2536_1965488686\manifest.fingerprint msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2536_180355650\manifest.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2536_180355650\manifest.fingerprint msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2536_1874172088\manifest.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2536_1874172088\protocols.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2536_1874172088\manifest.fingerprint msedgewebview2.exe - Loads dropped DLL 1 IoCs
pid Process 4448 SolaraV3.exe - Checks whether UAC is enabled 1 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SolaraV3.exe - Embeds OpenSSL 1 IoCs
Embeds OpenSSL, may be used to circumvent TLS interception.
resource yara_rule behavioral3/files/0x0007000000024675-239.dat embeds_openssl - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedgewebview2.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry msedgewebview2.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322365485720368" msedgewebview2.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe 4448 SolaraV3.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
pid Process 2536 msedgewebview2.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4448 SolaraV3.exe - Suspicious use of WriteProcessMemory 18 IoCs
description pid Process procid_target PID 4448 wrote to memory of 2536 4448 SolaraV3.exe 85 PID 2536 wrote to memory of 4024 2536 msedgewebview2.exe 86 PID 2536 wrote to memory of 4276 2536 msedgewebview2.exe 87 PID 2536 wrote to memory of 4276 2536 msedgewebview2.exe 87 PID 2536 wrote to memory of 4276 2536 msedgewebview2.exe 87 PID 2536 wrote to memory of 2456 2536 msedgewebview2.exe 88 PID 2536 wrote to memory of 4004 2536 msedgewebview2.exe 89 PID 2536 wrote to memory of 4004 2536 msedgewebview2.exe 89 PID 2536 wrote to memory of 612 2536 msedgewebview2.exe 90 PID 2536 wrote to memory of 612 2536 msedgewebview2.exe 90 PID 2536 wrote to memory of 612 2536 msedgewebview2.exe 90 PID 2536 wrote to memory of 3628 2536 msedgewebview2.exe 103 PID 2536 wrote to memory of 3628 2536 msedgewebview2.exe 103 PID 2536 wrote to memory of 1388 2536 msedgewebview2.exe 104 PID 2536 wrote to memory of 1388 2536 msedgewebview2.exe 104 PID 2536 wrote to memory of 688 2536 msedgewebview2.exe 105 PID 2536 wrote to memory of 688 2536 msedgewebview2.exe 105 PID 2536 wrote to memory of 3832 2536 msedgewebview2.exe 106
Processes
-
C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe"C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe"1⤵
- Downloads MZ/PE file
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4448 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4448.4220.7191781526210284582⤵
- Drops file in Program Files directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:2536 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x13c,0x16c,0x7ffa3018b078,0x7ffa3018b084,0x7ffa3018b0903⤵PID:4024
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1712,i,2539296285873650339,5855222801906959965,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1704 /prefetch:23⤵PID:4276
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2020,i,2539296285873650339,5855222801906959965,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:33⤵PID:2456
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2348,i,2539296285873650339,5855222801906959965,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1688 /prefetch:83⤵PID:4004
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3560,i,2539296285873650339,5855222801906959965,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:13⤵PID:612
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1196,i,2539296285873650339,5855222801906959965,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:83⤵PID:3628
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4460,i,2539296285873650339,5855222801906959965,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:83⤵PID:1388
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4512,i,2539296285873650339,5855222801906959965,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:83⤵PID:688
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4572,i,2539296285873650339,5855222801906959965,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:83⤵PID:3832
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping2536_180355650\manifest.json
- Size 43B
- SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
- MD5 af3a9104ca46f35bb5f6123d89c25966
- SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
- SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
- MD5 SHA1 SHA512
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping2536_1874172088\manifest.fingerprint
- Size 66B
- SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
- MD5 06d2b48de0edcb3e022ed639f0fb0085
- SHA1 32f93d5a76998c407087269794026d1ea028828f
- SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
- TLSH T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping2536_1874172088\manifest.json
- Size 135B
- SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
- MD5 616eb6b585f16811dc5db5063e088cd7
- SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
- SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
- TLSH T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping2536_1965488686\manifest.json
- Size 113B
- SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
- MD5 7ef3c71464d0fef472bc1d81fd363c62
- SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
- SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
- TLSH T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
- Size 206B
- SHA256 6bde0b3a0d9a4a5c276e43fddca3c506683a8aff03cd5ed1907cf8cfc665f147
- MD5 813f7e10c5c534216e960057e862b533
- SHA1 c9a61286073192872cc95d3dfa70dcd4c0c2eec8
- SHA512 a52d6ef452b62aff2c188ae5cefe1fd2e328b90e1427f8c83b9ded59ea04283c442381d495775a6a875dd374169f92149383f94cb2c3554f15c7cf091139904c
- TLSH T130D0023063FCE8B36A1B614759981F906683F5430C860CFD374A664674DE8190DDFB0B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
- Size 646B
- SHA256 81d1597a23e5aef2c687c1381d8a3b24cb4f630b14a1e4484eb0af98972cac70
- MD5 30b25d5f5ed6e03037c68c646b001b66
- SHA1 d4dac4b77b4d06553e2431667cd4fd473b7ddac2
- SHA512 55489767fad3c2fafed24bc0c4ecdf7703e19116b35f0b035b4e7cebc54f957ee110cca6924fbea3039543faf252fe7ed67ea7e55041ce0e382c02f04f01719c
- TLSH T131F0C2631EF922661E13589B916F5D90A083F21857F6AAA8234331907AD2E0E9ED7718
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
- Size 1KB
- SHA256 f662765c2ab7dde334f970bfe31f8c9a676ca9f49d1196c7bd6fc82070407b80
- MD5 310278ab98b87bbf8ec0812d8fddb9eb
- SHA1 eddbd16afb11478437e7304be82fabc33cc40242
- SHA512 fa4c3753ddf9db313c815486c67d1fe7a1868603826f111ccfc59298a554c3ad9a3794e2d463b005e68a4066196629851e1157c941842be45bb135c52233587b
- TLSH T187410A661EF9E6265C52A54FC44A0E62A843F10F23E25D689B9321C4B6E3C0C9CA773D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
- Size 2KB
- SHA256 b39db0c47df49e7943f7fd78772959fa6ddb9f03e01589a48e4d09386e9aec4e
- MD5 f82ab0692097f1244e38a4578315b0e1
- SHA1 b2dca203a5e5386a5a1118bdaa9499aa20599ec1
- SHA512 5aef3f551d4b3559ad2acd2d03b73fb9028afd24e94753eef391f11a551c681c2ee4b7a46591a43990380f4226c6594c2e715ef93a0bd91f386f118a5c018927
- TLSH T16B5158661EFAE2225C52514FC50E4EA16443F70A67E25D689B522188B5E3C0CACA773D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
- Size 4KB
- SHA256 ee09e4851ad591aa42a6e4d31e20e6610fe0c9f1e8f13b1228802030ab36796c
- MD5 a3ef584b396746a4bf4d548791ee8fd3
- SHA1 30a433fcfd459ac02b27a2a5dc27077950985f62
- SHA512 05e99e44c8caa155d23cab375eef0e864124f1254d69d3d389bc1f3bdc6f65b636e4416bd9ab648edd0505c363544e00d1630a4e5c0d0896b241e8ee2647df9c
- SSDEEP 96:oUE+k+O8v9X3O4/zOThrJkoFXnKl1MztxNIeL0kf4Ya1:3EcO8v9X3OKzOtrBXh/FLN4N
- TLSH T14291CC721BFAE122AC92555FC40F0E916443F60A57E25D7CAB5671C8B2D3C0DACA372D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\dll\SolaraV3.dll
- Size 14.5MB
- SHA256 50011b8df1357efe72f613931f00f1f8eb2d27e0b41ecb4336cc5d82b392109d
- MD5 907b077f30759e84c5a31da9123a3a5f
- SHA1 ea5f872edffe96834d08c312a15cb73fe4e5732e
- SHA512 abc286913bc2460b60a1e12a99a68398ae69e8e240d848a44034964f0f2f26ac16d0597feb355ecd50af15b3e23a9cf601504153c3f9fcb1752b5b1ab34e24c6
- SSDEEP 393216:RDQDCTWjmRsnaCVJ085yYKO2i8Hoi42RXzg:Rwjaabzv
- TLSH T18BE68DD664D961ACC839C2B98347AE3BC66F74290334D9DB166496720E23EC53B7BF01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
- Size 3KB
- SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
- MD5 5e2067a92dcfcb05537479c384a89725
- SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
- SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
- TLSH T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
- Size 22KB
- SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
- MD5 d01869348d5a783f61f90cbb27b82a78
- SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
- SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
- SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
- TLSH T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 093500acc1885600c9b2da04c989163e6a0a1b5dc227681acebe2e09188501f9
- MD5 8632df815b3b7e02cb1d76f2c5904774
- SHA1 4e102c6a94aa65b1672c9b4e6b91c779ede7c052
- SHA512 69a29c117d04f08439ccf5ac987deceee8fe4db3ba64c53a2ed3fa654c2e3ac3f241180897c761cf1248aca85b7d5f5affeb3fa04e879de0719d121739888b00
- TLSH T142D0122232468574D0102033042263481401C20FC04640439838895D1A040500D12841
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 23dac81a9678436fa5065622f58e823195ff07efc28cd397e1c220d4498ee2fb
- MD5 409daaf27ac246d5beb7d0b3ee71fbb8
- SHA1 b27df82da6a5b6a0698356f868558334a3af245a
- SHA512 2991e8d50fc4d21c99d3d6b4b160cabd3171311d48706c9d27043c933c64f9a7bca3030c2f60636da0a15aaf8ce93dd16ac3e5120ce98faacb7755fc022fbe9d
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\throttle_store.dat
- Size 20B
- SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
- MD5 9e4e94633b73f4a7680240a0ffd6cd2c
- SHA1 e68e02453ce22736169a56fdb59043d33668368f
- SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 c1c2cc90f44045656780f0e9fb2798cd1e359eedc7832335abd3f9aca86534c8
- MD5 a12b7f6df4492ca970767764085269fc
- SHA1 f644ee19b333c934c541c809e0164d62909dc19c
- SHA512 cefcbcc14dca3271299b9ddafd5519488db1836514dac9edfc733e900595560ef59bf988e275b2a66e6492561d75adda40177657a3ecf39f40161af48c2986a4
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
- Size 288B
- SHA256 3df42fac1aa751aa2c6f1e09fee7efa3ffe00341272ab59be4f7a7e4b66ee89f
- MD5 ca0399625e2936ad614f03af72732509
- SHA1 23ced7d5a8b9fc01b881248a8ebeedf9e0562008
- SHA512 2bd1293a623f604b5b797cbeecaeb40f26b3c2d084eefdfbd6071be18d4a2f7b9860c5545ab231b5ec80babbb2a3640f030ea6e7570f055f5caa1610d5f49d98
- TLSH T1E5D0A97ED68B309CCB033D7A06C98B81307D46055A131E1365EF50BAA03A7818882128
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnGraphiteCache\index
- Size 256KB
- SHA256 85d406eea17759e98ebe1151b83b04b0c5079f0a7ba0e253db4e1394cd2a88a1
- MD5 d0080a92a5853af789613d75782eccd8
- SHA1 e49c12f6dc7c624819ebc98c26ab38c162d66b8f
- SHA512 83f93ef50e9411569888f7291b3afa1dc4690652c14f6ff4118bb8a6014035c098bf5c174fc91849af4ebe996121f5dae093c6d661504c79ad5857d8c3c4b84e
- SSDEEP 3:LstlNllkll/lta:LsX3lEt4
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Network Persistent State~RFe594c42.TMP
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\b6ce3df0-c7ef-44c8-8378-e1b469fb8274.tmp
- Size 1KB
- SHA256 f42a9c6cab5a3fe6f0606d36f9fa02a6394cdfbb49046197f24515e7c90f5880
- MD5 29b2fdc2553e722daf1de71ffb7f0755
- SHA1 b28d640c5c9824944a275895e079a8f51b7756dc
- SHA512 9ec51c8d7a88332624c2eafd140b3777606bb1ccf50c49238b3f49f2459048fa7260cb2c55d9ffad88056b80a4f116d32709f058a5865543979999df74df57fa
- TLSH T141416EA2C7E4C66D851126F457307817CD3D0518A2247E27DEDAFBAA67D10B1E32124F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
- Size 6KB
- SHA256 1e81606be41c92dde8402cc60b43f2fb7d49a4964af6bc6ab4d951edb0bceeec
- MD5 a5b75090b38a48ecb8db8943e0defcdc
- SHA1 03afc621af24bb2bfc0b732805666c8da9c90f71
- SHA512 be1f8b75c4f29a66923e36f08ce0fffae1381555aa243598658487bf5928286cb4c890355da150848093b90a35fa78036dfafd15e79123308c95b2959ec1f33f
- SSDEEP 96:st905twX5ub9lsffqrZ8i0vhEoktXm/7qx+WVHMSm+uecJu81ixgEQj++gD83MEB:st90nOf8Z8paz2/S+WiTu8wxgEndGM8
- TLSH T129D186436E68AD774CC7E61ABE35BB63D2F5106265D40E58EBFC861C08D66CC620B80B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
- Size 6KB
- SHA256 2d2a66229c13c04349d322d0909e40e3a4609f06ac2e1eef7e116d8872d086de
- MD5 0b7b37c72b90ac1bfecc2c796642e80b
- SHA1 cc2f6366a8ade9da37bcbd4173c0d7bba0934a6e
- SHA512 30a0d05c1af8502e881812b9412b5265af38a7dc4cc02854aee67a2b1221421d68db743d3ce61331c269d3b317a4b3060c5ab443b9677e5ece678b6efcb23db2
- SSDEEP 96:st905twX5ub9leffqrZ8i0vhEoktXm/7qx+WVHMSm+uecJu81ixgEQj++gM83MOB:st90ngf8Z8paz2/S+WiTu8wxgEnCGMC
- TLSH T1EDE1A6436E68AD774CC7E61ABE35BF63E2F5106265D50E58EBFC861C04D66CC520B80B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences~RFe5882b8.TMP
- Size 6KB
- SHA256 2770b9cd33e32b549452ac96a8da62ac7aeae4d683d2d628e5b15bf67a379706
- MD5 714bfd88dae6f3a70382a0ef58e0fc46
- SHA1 51a0eb0715668b0a2d2210081d41f5322fc6fe00
- SHA512 4619becb3a154e9baa9b454ccd61073d774313eaeb8f7c59087f60315e16078ae209a6003ece8504c15ec22b7ac037527d31077ee69e80ac6712152dcf7b2cac
- SSDEEP 96:st905twX5ub9lsffLZ8i0vhEoklm/7qx+WVHMSm+uecadQj++gd83MEB:st90nOfjZ8pa6/S+Wi8dnzGM8
- TLSH T12DD197436F68A9774CC7E219BE35BB52D2FA202265D51E58EBFC861C08D66CC530B90F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
- Size 1KB
- SHA256 f30993067d6f0f807e9424628c65ff6949cf5a996b3cbb22cabace45b520cf85
- MD5 5dfa834f00922d2f33ca0b236f0c93fb
- SHA1 428fd73064bcb4d14d150e09fc4e6673082cac0c
- SHA512 ede8c0f4275b873d07b7bec0c17c06325a07abfff8575dc7f1ac854ef6c10942604869d99d8c5bd037bb4c2da724d9ad21ec8951242fe14dffb6444c29e4f55a
- TLSH T10831C7B3E0C47F325EC22258A6027BAB2D228076C0025E4D91FD4B1803E358C227FD33
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
- Size 2KB
- SHA256 38f905724047b1a57d158452f6fcd73254867f82c81669c25d15a4c700246e1e
- MD5 5545a53eb75ce1bd9af069c38d91130b
- SHA1 c638cc14b2c380a7ff4398d6d262fdd387c02047
- SHA512 4e31005d892f93635e74920e5287435c7939a6d0336d0823449a315fe4f60ce7e7ee6427bf623f7d96ec53bc42e20f10b927c71d23a6b94a809d602c342cd1bc
- TLSH T15A51C633B848AF374AE35A04BD063F63A97690A1D5522F4595FD0B1C01D765C231AC2B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
- Size 3KB
- SHA256 ab6774d7a0c7ce8b8cfde06ed3565210ab1186622515d73d5125f85f3bb9ae28
- MD5 7087da35d1854f897d5dfa8b79ce4cc7
- SHA1 ebf8806574bd9cb58dd9b1c5b9a2c5c768952167
- SHA512 a4ac9fb136fc96a5a4dfcd5e83325e8e547c7a96f657fe9499ab9aba8413a5541d17d14ff785deb10e6591ccb31b6061ddcff9f62db3648a041dd87316eec016
- TLSH T166719623A8A4EE274EE39A04F9863B17B6A65132E5853F99C5FD0F1C02D73981356C17
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
- Size 16KB
- SHA256 23a15075c1bef149e826948edd615636d0d010c0e15ab74204b636d7d85c770e
- MD5 31eef9b51689f35f2187cedf648d1500
- SHA1 180619840831a7490858155427b170090042f331
- SHA512 164055f59ef5611a9370152bb3067ef30decf2932101507379c3d51aafb55fbf28a8c003bee7505b690f3a768baadc97baf21cb2731f16eacec7018dca7e46cd
- SSDEEP 384:z0+aQikB+z/xvxjg/qhEwNbLQl5J+JVA9zS:v/UxvxjgC+TP+JSFS
- TLSH T12C72AE2764A83E2359F3B904BA490B9FDAB984B290826EBC4AFD5F0D07C72C40346D07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State~RFe5825f2.TMP
- Size 1KB
- SHA256 44a03c3a4b24dd060aee7e450ebd1d3360e19716b815fae361cf34fac0499245
- MD5 6c106c495403b985a87c881d0a1e753b
- SHA1 235bcb3edbee621686c68f547e159746c2145c44
- SHA512 fc129de0cd110246fc330b90f6e643ebcfb0561261c276b09244132187db950907885268ae17c23dc436fd9faa0bd11236a1c8a5d7befe62ca1fa43663f87c6c
- TLSH T1A9214073D4C8BF326EC61558A612BB9B2D528076D1119E0D91FD471803A799C567FC33
- MD5 SHA1 SHA512 TLSH