7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59.exe
Size 10.9MB
Sample260930-e67ymss19q
SHA256 7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59
MD5 7286789c81cc0c6790aec78394140e31
SHA1 a7696fa9086304a7d901a94123c262df5c8797cc
SHA512 ffc3385bda110d499f78bab831912af347e3625eb135b43c0e7d119d2dbba6704ce1ed261093d33e0d89cb4cdadef837b70700b186859dde31b3c0f19b4676da
SSDEEP 98304:xD0vAMDKwRt0WEtnVzHyLTqhC1GYmnqntZ/EjmTmr:xU0yLTpYQZcj6u
TLSH
T1A9C64907EDA554E9C8AED530897692637B727C490F2123D72B60B7287F72BD09EB9340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
4660	SeagullVPN.exe
4088	SeagullVPN.exe
5844	SeagullVPN.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	SeagullVPN.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files\SeagullVPN\.seagullvpn-install-2634790786	7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59.exe
File created	C:\Program Files\SeagullVPN\.seagullvpn-install-625675715	7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59.exe
File opened for modification	C:\Program Files\SeagullVPN\Data\log.bin	SeagullVPN.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
4088	SeagullVPN.exe
1440	msedgewebview2.exe
1440	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
3232	msedgewebview2.exe
3232	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5844	SeagullVPN.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
5844	SeagullVPN.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4612 wrote to memory of 4956	4612	7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59.exe	91
PID 4956 wrote to memory of 4660	4956	7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59.exe	92
PID 4088 wrote to memory of 5844	4088	SeagullVPN.exe	94
PID 5844 wrote to memory of 3232	5844	SeagullVPN.exe	95
PID 3232 wrote to memory of 5040	3232	msedgewebview2.exe	96
PID 3232 wrote to memory of 1256	3232	msedgewebview2.exe	97
PID 3232 wrote to memory of 1256	3232	msedgewebview2.exe	97
PID 3232 wrote to memory of 1256	3232	msedgewebview2.exe	97
PID 3232 wrote to memory of 1256	3232	msedgewebview2.exe	97
PID 3232 wrote to memory of 2944	3232	msedgewebview2.exe	98
PID 3232 wrote to memory of 2660	3232	msedgewebview2.exe	99
PID 3232 wrote to memory of 2660	3232	msedgewebview2.exe	99
PID 3232 wrote to memory of 2660	3232	msedgewebview2.exe	99
PID 3232 wrote to memory of 2236	3232	msedgewebview2.exe	100
PID 3232 wrote to memory of 2236	3232	msedgewebview2.exe	100
PID 3232 wrote to memory of 2236	3232	msedgewebview2.exe	100
PID 3232 wrote to memory of 2236	3232	msedgewebview2.exe	100
PID 3232 wrote to memory of 2236	3232	msedgewebview2.exe	100
PID 3232 wrote to memory of 5076	3232	msedgewebview2.exe	101
PID 3232 wrote to memory of 5076	3232	msedgewebview2.exe	101
PID 3232 wrote to memory of 5076	3232	msedgewebview2.exe	101
PID 3232 wrote to memory of 5076	3232	msedgewebview2.exe	101
PID 3232 wrote to memory of 5076	3232	msedgewebview2.exe	101
PID 3232 wrote to memory of 1440	3232	msedgewebview2.exe	103

C:\Users\Admin\AppData\Local\Temp\7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59.exe
"C:\Users\Admin\AppData\Local\Temp\7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4612
- C:\Users\Admin\AppData\Local\Temp\7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59.exe
  "C:\Users\Admin\AppData\Local\Temp\7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59.exe" /installmanagerservice
  2⤵
  - Drops file in Program Files directory
  - Suspicious use of WriteProcessMemory
  PID:4956
- - C:\Program Files\SeagullVPN\SeagullVPN.exe
    "C:\Program Files\SeagullVPN\SeagullVPN.exe" /installmanagerservice
    3⤵
    - Executes dropped EXE
    PID:4660

C:\Program Files\SeagullVPN\SeagullVPN.exe
"C:\Program Files\SeagullVPN\SeagullVPN.exe" /managerservice
1⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4088
- C:\Program Files\SeagullVPN\SeagullVPN.exe
  "C:\Program Files\SeagullVPN\SeagullVPN.exe" /ui 972 968 980 988
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:5844
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SeagullVPN.exe --webview-exe-version=1.2.4 --user-data-dir="C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5844.4580.1824544945037754983 /pfhostedapp:a7042aea7f3ccefdfc1a5034b56043bef1d9ad5e
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:3232
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView /prefetch:4 /pfhostedapp:a7042aea7f3ccefdfc1a5034b56043bef1d9ad5e --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffb934c5fd8,0x7ffb934c5fe4,0x7ffb934c5ff0
      4⤵
      PID:5040
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView" --webview-exe-name=SeagullVPN.exe --webview-exe-version=1.2.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1712 --field-trial-handle=1720,i,7578888688641191908,10116280507650008195,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:a7042aea7f3ccefdfc1a5034b56043bef1d9ad5e
      4⤵
      PID:1256
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView" --webview-exe-name=SeagullVPN.exe --webview-exe-version=1.2.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2172 --field-trial-handle=1720,i,7578888688641191908,10116280507650008195,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:a7042aea7f3ccefdfc1a5034b56043bef1d9ad5e
      4⤵
      PID:2944
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView" --webview-exe-name=SeagullVPN.exe --webview-exe-version=1.2.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2424 --field-trial-handle=1720,i,7578888688641191908,10116280507650008195,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a7042aea7f3ccefdfc1a5034b56043bef1d9ad5e
      4⤵
      PID:2660
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView" --webview-exe-name=SeagullVPN.exe --webview-exe-version=1.2.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3504 --field-trial-handle=1720,i,7578888688641191908,10116280507650008195,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:a7042aea7f3ccefdfc1a5034b56043bef1d9ad5e /prefetch:1
      4⤵
      PID:2236
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView" --webview-exe-name=SeagullVPN.exe --webview-exe-version=1.2.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3632 --field-trial-handle=1720,i,7578888688641191908,10116280507650008195,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:a7042aea7f3ccefdfc1a5034b56043bef1d9ad5e /prefetch:1
      4⤵
      PID:5076
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView" --webview-exe-name=SeagullVPN.exe --webview-exe-version=1.2.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2152 --field-trial-handle=1720,i,7578888688641191908,10116280507650008195,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a7042aea7f3ccefdfc1a5034b56043bef1d9ad5e
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

SeagullVPN.exe

Path C:\Program Files\SeagullVPN\SeagullVPN.exe
Size 10.9MB
SHA256 7931472de486f05b611d876b4c1eee32f56ac1741b72a204df7dab7b290b1d59
MD5 7286789c81cc0c6790aec78394140e31
SHA1 a7696fa9086304a7d901a94123c262df5c8797cc
SHA512 ffc3385bda110d499f78bab831912af347e3625eb135b43c0e7d119d2dbba6704ce1ed261093d33e0d89cb4cdadef837b70700b186859dde31b3c0f19b4676da
SSDEEP 98304:xD0vAMDKwRt0WEtnVzHyLTqhC1GYmnqntZ/EjmTmr:xU0yLTpYQZcj6u
TLSH
T1A9C64907EDA554E9C8AED530897692637B727C490F2123D72B60B7287F72BD09EB9340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wintun.dll

Path C:\Program Files\SeagullVPN\wintun.dll
Size 417KB
SHA256 e5da8447dc2c320edc0fc52fa01885c103de8c118481f683643cacc3220dafce
MD5 e861eb5789c50997d9476a6172d1c269
SHA1 647eb6588b149efe2477fd192c8cab74d018d8ef
SHA512 d8b49a6834c1ea5d73fee6979c59def18900c86d598ea900ab741ce71eefdaaadb4862afefa14e6cc093007eae5d4325857633549f1ade555baa0344b18e6112
SSDEEP 6144:uNsLgQtz9nDZL4tFDjiaOE1DfsnyDQhWmnPIt:iggQh9nD2tFviW4/Qt
TLSH
T1E2947D8273E81C96E9F3CB3889638901EB3779544770CADF1261826DDE6B7D09E34B61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\SeagullVPN\webui\index.html
Size 26KB
SHA256 7b2c870fd9b11f518b1ca1935430a991dd32ff1f379648e29a433cb45de336a6
MD5 65da8dfd28aac0e9fdf0803b5c33d421
SHA1 104debdf018e2a84387182b6345b9f1270b0bc0b
SHA512 4d6e4da537a7efa732d5f8bb58056cc7f057eecd6775874c6c270138e81848bfec39b71eed3430b4ecc6e17ca9ed9087c08f955092204f551d47a4301331b2b6
SSDEEP 384:54I/yziJpZL0oH5z+NwDeK5sVx1nB54R9foZ3WurZ/rjC7kC:54kyz0p2AYNwD+ZQfo3/rjDC
TLSH
T12DC2E8A975A71036A863656A37DBAB063234D003D006C9293ECD3745CF87AE596FB7CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Users\Admin\AppData\Local\SeagullVPN\webui\logo.png
Size 24KB
SHA256 f18a5eadcb0b559e213f9a6462498ee9fcdf4fe8f027f6ebc65ea8143869a0ba
MD5 417e143d25ac11a4d09575b02a156042
SHA1 8898b929cae8d293dd6684debda4fb0d4607dad9
SHA512 4826da37f772bf2ea4d11bc40b8815a9a52aacc07c4cf0092bf11b18e6edbad741e24e8f694e5a5dd1230faae6ca64adb5b82cc589fcae8a974803ab4b1689ef
SSDEEP 768:16SUUy8sMUJbp/d2MeDaI69MVn3D53YQv:4UMMUJBd2m4b
TLSH
T113B2D0546F406EA169EAF6644552C5009602BA8FF9C038D537D5FD338E8A76D03A84EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wheel.png

Path C:\Users\Admin\AppData\Local\SeagullVPN\webui\wheel.png
Size 14KB
SHA256 7c7d1b9f3bb83be93185b3bcc0896bc6e7988f65d09da101d3392d8c5778f72e
MD5 fca12f928ac1ee35487d0d131879db81
SHA1 a23814dcef839adc8235c200007008b7d49730d5
SHA512 578b4c5c0d2c954bea15848e6f480304e69c3eceefeb83352950631dfe590076102f03ebf546592605c0dafcb4d36c9cf42d0206202a1b3b40bb33fe50428ee2
SSDEEP 384:CY9BZ9mnXx0+oSXXjHIRNoau0wWFZOZA3fFR6:CYXzmh0vgcPoauuZOZA3t0
TLSH
T1CA52D0DDA2A455D6EE9C8A3EF214F035728502B32473EF919E421A0DCA84E5C7C6F893
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 616b320e06158ccbc5175d5e2cb29a0a273bd6b69b7ce8ecde7bd8689864cb63
MD5 3557d4adaeed99ba1c6e3ce79bade219
SHA1 12aeaaa3a1b3513a75d2bc54ceb23b4d3909e043
SHA512 e8c83aa3f7c14c8b9e01b3ce74dad2ac41fe204e6e777cb778b265d392631766cfec091d8c6c020ba7eeb4c73fb73bedf29fc887c1528cbfc98b8eeafdf949e9
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 7d24669db37f567f49ecde1763117b09731d615aa5c44178dfb31f7295268282
MD5 5b98733b4a981c3ede9fc8827c85a6ff
SHA1 3fb5287ecf87d9012b656b8326f3820a98b6182c
SHA512 d0267687521c9600b0a7d06fe3fbeaaffcc57d865df235dc8f02b9bf6d4b8588ebc9d24040c57016db3c3c5806792f117d042e8df1cf73123b181ba7d8df6dca
TLSH
T1B3D0121732814174D0203E33008275090702E10F40094015983C856E1A1C4500913441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Default\Preferences
Size 6KB
SHA256 7854da372b34bd933de823f304ac80b6a1efb0dc5aae8b7c73e215354f1a7ea4
MD5 b45596c3e1ab2933083c01fe88b0c606
SHA1 4273d7e44a43e33c9d437dafc9ad9cdc6b95630d
SHA512 1991b55b22c269ce37839e60c0a92d9ff64e5131a1ad1a2619752de4ba15159832759403904ea68323381f4aa0f79a18c6b4237c08ac67ce99f04eec7bac42f8
SSDEEP 96:sti/d8/dqGmb9MkMo5h16Zd5s7/x+6MhmuecmjeeK+g2A28XM1C7K:st6GPfos5sV+Fij+1G6K
TLSH
T13CD1B7025E64787B8CC6F159BA297B53E2F9603274E11E58E7F8462C08DB6DD2307D4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbe3c391-e1e0-45a2-bff6-b9fd796ca6a9.tmp

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Default\cbe3c391-e1e0-45a2-bff6-b9fd796ca6a9.tmp
Size 5KB
SHA256 c24477d2616a90ef51d710e9c64cb1b87db6c4c411e3357f0a6c4a02ea90e2f6
MD5 026194a8984c2eeab816d1fb6725a81c
SHA1 4ce0a336358465a0e32288f8500944c020a0bdf8
SHA512 ccff778678f1b001e3ff46b65a7e86ef0b945fdac582781a9b8b59f8a166fba6d8403cc8e5c6c6436b872f870df21cd63d220de9b8addb1f4886270f55aa0140
SSDEEP 96:sti/d8/d7mb9MkMo5h16Zd5s7/x+6MhmuecmjeeK+g2P28XM1C7K:st6GBfos5sV+Fij+yG6K
TLSH
T165C1A5025E68B8BB4CC6F159BA297A53E2F9603274D11E58E7F8462C08DB6DD2307D4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Default\shared_proto_db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Default\shared_proto_db\metadata\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Local State
Size 3KB
SHA256 172a4c2d1f7b70085f9af57f644da47738931b67e6a9ecb83d6a6b3be34f9c51
MD5 f98f52d3ad4b448d87e3830ea26ba4df
SHA1 2ec375156edd936aa2de7a5fea086c7be7ae255b
SHA512 392aa9f70218d7e64e79528316750546a89041eca378438fc2228bfba94ccb4766e32c369864af4ee504478fa941f1171a9f8c83c9d5b204237b4146f1258817
TLSH
T11A71A3726874AA7B5DF3A605B98A3B17ABB84127E9D53F55C6EC0F1C019738C2342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Local State
Size 2KB
SHA256 d2d864880b208151ecccc020b74de70f914298eae6bded64d38b7b1aefd83e16
MD5 3228efc12aa9d40aa7c5f01d6a607c5b
SHA1 48fc5d52f5b1178c03e129097ee8874856840f3e
SHA512 5706526e2cfc71d0b204056ffe2147ce2f26a58761ab8d4ad99f6d183ebc3f11d3f667e5d6727fd188ba183fe594fdfed2405923c9f503794e01dcacdefed5ca
TLSH
T16651947368246BB788F356446D4A3A338A794262AAA26F0096DD1B2C00D754C2712C77
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Local State
Size 3KB
SHA256 4f2cbedb024ee128e3d70ea1c11e7f2804c1cbb13d4ff27256fbefc5c85673e6
MD5 246179ac05933297a62b357879968a8c
SHA1 42832614f0f1fe8f2661f397cd1a7eb7705f56ab
SHA512 3b0eb716f6bbad53930f828bcc53adaf73c4fd84a468691f92204b734e26b6a38b208837c6ace2d3f73fe812b5c9aa5b311f493f8d326188002bf6d9b4a1051d
TLSH
T12461A3736974AA7B4DF39A047C8A2B26ABB90123E5D17F55C6EC0F1C00D728C2352C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Local State
Size 4KB
SHA256 7882149f84f74d70c482d78d5e5efcc36dcc48d351447fec647dd18973e5832e
MD5 70af232b99b4a5d5d804d4ca3bbf03e9
SHA1 93c74e1d51021e4a2f9107ddb8017904b536e6b9
SHA512 b169efb65a5eb81903824bdcc3d77c317afb2a3c303640cafed0506b05b965db245f7d4458cc2fa11f73a99c6e4e8c59385dfa83b68f1d5dea00e8e84dad83aa
SSDEEP 96:gTFNkGS3fv2mcICad58kh/cI9URoDotoiYxBa4N6jpAgEhdZ2ZW7TjJMa:ENBSHTcBSeoDUDaa44Aguuy1
TLSH
T1F0A1D872A8A4E6375CF3D784794B3B92ABB50263A9D52F84C9ED1E0C418779D2342C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Local State
Size 4KB
SHA256 55630c3bfbdbf11c13ea607de56bcae2e376c7afc0bc1546de3f09f8a7e836de
MD5 0d131103cc083ef2b77b4cff81d83c5a
SHA1 9a31454c7ee4a5a1cce0c140fdea51ef7ea6f2e8
SHA512 6ac14bb27996d2f9c0b01094f75bf5e7e88ca30397609deebbd48e18b1319163f09b73147d1f744797bd0685767edb43ecece67ec764d65fab7e19e0250f4be3
SSDEEP 96:gTFNkE93fv2mcICad58kh/cI9URoDotoiYxBa4N6jpAgEhdZ2ZW7TjJMa:ENlHTcBSeoDUDaa44Aguuy1
TLSH
T1F8A1E972A8B4E6375CF3D78479873B92ABB44223A9C52F94C9ED1E0C418779D2346C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58d8d7.TMP

Path C:\Users\Admin\AppData\Local\SeagullVPN\webview2\EBWebView\Local State~RFe58d8d7.TMP
Size 1KB
SHA256 466b453b835bb56ba88dd65708352e5778fbbd85ecb112842e9c16a79cad8884
MD5 913b62367844ba01eb7407fcc8bc5bf4
SHA1 8939e58ced49a8e55fe145864473e37f972292c6
SHA512 da6af34f390608a9dd46c8ca8210a56ac35643b83e9e035b76736d13843613fd65ad8739bc24e9882925a19a3ba3598d79ffb31c6872e3d68ddf5b3d165c5826
TLSH
T15E2165F294641BB26C936255254B3AAB9E75026B91A1CE0051DE5B2C11B344DEE2AC36
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1256-47-0x00007FFBB5980000-0x00007FFBB5981000-memory.dmp

Download

memory/1440-230-0x000002421ACB0000-0x000002421ACB1000-memory.dmp

Download

memory/1440-232-0x000002421ACB0000-0x000002421ACB1000-memory.dmp

Download

memory/1440-238-0x000002421ACB0000-0x000002421ACB1000-memory.dmp

Download

memory/1440-240-0x000002421ACB0000-0x000002421ACB1000-memory.dmp

Download

memory/1440-239-0x000002421ACB0000-0x000002421ACB1000-memory.dmp

Download

memory/1440-237-0x000002421ACB0000-0x000002421ACB1000-memory.dmp

Download

memory/1440-241-0x000002421ACB0000-0x000002421ACB1000-memory.dmp

Download

memory/1440-236-0x000002421ACB0000-0x000002421ACB1000-memory.dmp

Download

memory/5076-148-0x00007FFBB5980000-0x00007FFBB5981000-memory.dmp

Download

memory/5844-14-0x000001F85C530000-0x000001F85C558000-memory.dmp

Download