82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316

Analysis

user interaction
yes
max time kernel
85s
max time network
86s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 04:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
solara-bootstrappernew.fluxusofficial.com.exe
Size 8.3MB
Sample260930-e8ae6asxds
SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
MD5 c9f1c55b26e7f781b65a96ea8190517d
SHA1 dad71e6ac2ad9e3ce30152f993d0c765008c6b5a
SHA512 aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d
SSDEEP 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+
TLSH
T169961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Downloads MZ/PE file 3 IoCs

flow	pid	Process
50	2444	Bootstrapper_v2.3.exe
50	2444	Bootstrapper_v2.3.exe
36	2312	solara-bootstrappernew.fluxusofficial.com.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000\Control Panel\International\Geo\Nation	solara-bootstrappernew.fluxusofficial.com.exe

Executes dropped EXE 1 IoCs

pid	Process
2444	Bootstrapper_v2.3.exe

Loads dropped DLL 1 IoCs

pid	Process
2444	Bootstrapper_v2.3.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Bootstrapper_v2.3.exe

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral1/files/0x00090000000241df-276.dat	embeds_openssl

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	solara-bootstrappernew.fluxusofficial.com.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Bootstrapper_v2.3.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Bootstrapper_v2.3.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	solara-bootstrappernew.fluxusofficial.com.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies system certificate store 2 TTPs 5 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB	solara-bootstrappernew.fluxusofficial.com.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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	solara-bootstrappernew.fluxusofficial.com.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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	solara-bootstrappernew.fluxusofficial.com.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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	solara-bootstrappernew.fluxusofficial.com.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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	solara-bootstrappernew.fluxusofficial.com.exe

Suspicious behavior: EnumeratesProcesses 32 IoCs

pid	Process
2312	solara-bootstrappernew.fluxusofficial.com.exe
2312	solara-bootstrappernew.fluxusofficial.com.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe
2444	Bootstrapper_v2.3.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
3944	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2312	solara-bootstrappernew.fluxusofficial.com.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2444	Bootstrapper_v2.3.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2312 wrote to memory of 2444	2312	solara-bootstrappernew.fluxusofficial.com.exe	99
PID 2444 wrote to memory of 3944	2444	Bootstrapper_v2.3.exe	101
PID 3944 wrote to memory of 3456	3944	msedgewebview2.exe	102
PID 3944 wrote to memory of 996	3944	msedgewebview2.exe	103
PID 3944 wrote to memory of 996	3944	msedgewebview2.exe	103
PID 3944 wrote to memory of 996	3944	msedgewebview2.exe	103
PID 3944 wrote to memory of 776	3944	msedgewebview2.exe	104
PID 3944 wrote to memory of 4428	3944	msedgewebview2.exe	105
PID 3944 wrote to memory of 4428	3944	msedgewebview2.exe	105
PID 3944 wrote to memory of 780	3944	msedgewebview2.exe	106
PID 3944 wrote to memory of 780	3944	msedgewebview2.exe	106
PID 3944 wrote to memory of 780	3944	msedgewebview2.exe	106

C:\Users\Admin\AppData\Local\Temp\solara-bootstrappernew.fluxusofficial.com.exe
"C:\Users\Admin\AppData\Local\Temp\solara-bootstrappernew.fluxusofficial.com.exe"
1⤵
- Downloads MZ/PE file
- Checks computer location settings
- Reads the TCP/IP host and domain name from the registry
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2312
- C:\Users\Admin\AppData\Local\Temp\Bootstrapper_v2.3.exe
  "C:\Users\Admin\AppData\Local\Temp\Bootstrapper_v2.3.exe" solara-bootstrappernew.fluxusofficial.com
  2⤵
  - Downloads MZ/PE file
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks whether UAC is enabled
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2444
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Bootstrapper_v2.3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2444.1176.15327508106391084054
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:3944
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffd293eb078,0x7ffd293eb084,0x7ffd293eb090
      4⤵
      PID:3456
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=Bootstrapper_v2.3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1736,i,5047549696126482259,16969810449411328547,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1732 /prefetch:2
      4⤵
      PID:996
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=Bootstrapper_v2.3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1372,i,5047549696126482259,16969810449411328547,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:3
      4⤵
      PID:776
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=Bootstrapper_v2.3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2352,i,5047549696126482259,16969810449411328547,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:8
      4⤵
      PID:4428
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=Bootstrapper_v2.3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3612,i,5047549696126482259,16969810449411328547,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
      4⤵
      PID:780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Bootstrapper_v2.3.exe

Path C:\Users\Admin\AppData\Local\Temp\Bootstrapper_v2.3.exe
Size 18.4MB
SHA256 f07e7c06d1a66307bc38a5b50c3b2a2308ebdbfbb2edcc8132678e0735b6ba99
MD5 f8492589e784210e01e3e1be866ff66d
SHA1 df1a10229580316766f36aa084ec8be5f3548f06
SHA512 ac3d44a312eb2cdfbcc3bfcdaf07b09c4e2a98cd1f0741d7c384427fab022b973fa81fcca0bc200cddf95ad1422577c9a73edfdc9129290526ad2b85a4ff5862
SSDEEP 196608:IVz5s2HBOMaY77v9G5LCAIJzB+zKg5RPMDd5j3z:K5s2HBOMaY77v9GIAIJzB+2gv0Ddx3z
TLSH
T15417F7257A5B99ACD09BC47483478A724A3130CB0B35B9FF449496382F6EBF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
Size 206B
SHA256 f9e94f1fbc1e298d7a64c63865a48ad44d28a7f740dec8e7dcdf5991ffb5fbf8
MD5 30843b50df1f14950def65f4524ff3ea
SHA1 27979a2edd2fcee9b89fe6220e6617d759ed3bd5
SHA512 8f6f0e8b3cbb1c6dd14bd6c42876ec41f2af956d9ce054acd23be2fd70e9dbca3b61a50b967a0a1b723c762023a5ebddd37cd508202e23f90b0039a6c7daf973
TLSH
T1C0D0C950363CA0F2E21A6103DA990FAC2681B343AF00EEDD231AC80E7614918CCEBD02
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 655B
SHA256 ade2c7497caa23cd0af0c19015bfdcab371afc59f0f7e1c169c2c6a10949303d
MD5 69b88fc0c524babbf11c0f6405b16fee
SHA1 8fc447ea6bcd1f7cdf4c4edee5d9f5f745aa3d15
SHA512 1636d3d7645be02e4a908d94364fb6dc4993b51b6eecac3798ed678152aca4648e9fee832ddc2803952d2283c2e269d5cf6bacc145dc1851abccb7e4f47e7a91
TLSH
T1F1F0AFD53E7D60BADF194492A26B1FADE04133177B90FF80232625187A44C0EDEA3514
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 1KB
SHA256 e3e891009c06be19aaf35da3cb63938b9b8dfe38d2faac557d2f68181070c313
MD5 e589992968f1bfc86f19c6110e1ddf7c
SHA1 8851ba6ae92391889a239e6716acc18dd3950d13
SHA512 7f17a4f077ef673e2e93e1da000906f43d120eedf572c70d9cf0c2f31f54b77be3de8961b7671f76f5beaeaece381c828eb571557b21678b20504487368fa7d9
TLSH
T1054123813E7AD5B6E2A85186C65B0FBEA452770B73A0FF055BB1004CB71280CECB7835
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 2KB
SHA256 6efaebd7a94ed769e095240ea8209a4ebd2196dabaaa80a57bab0937f371002a
MD5 06442f6d0079685b74cdb9d2fef18848
SHA1 eb1d7bd38f351b976314a5fabbbbdb9c517dbc2d
SHA512 b8408ee60da363a4719f4439087bdc807459583dc786250d9b2b794a68d35a8db9c6b5e384cf515effad555e3c1939e3a5d56ffb2eea8cdedb5364dd6ace9c5d
TLSH
T1BD41FF913E7AD1B6E6A85046C65B0FBDA456770B77A0FF415B71004CB72280CECB7535
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 4KB
SHA256 ef26a7d29b70965c24a651b1e9e54f4f80af167396cb18070aa6b65aa1e0d111
MD5 e6325fe6ea16fae306b5336a491191a1
SHA1 ca0b27ce54c685b5209bde4b3f852b9d65610bf1
SHA512 f7c482a6001fe2afe929cfaac9682f6f4187eb567e7952d266d31f48dded5d26ba7119e6a46f4408af5816adae2345ad10c105c664ebbca0786edb62587624da
SSDEEP 96:oeH+aQZhN57NI8rAoK50Fe6uAuGm164xNtTkmbnK79a0z:5H+ZhNVNI8coLe/J5LbbQFz
TLSH
T1C3913F813EBBD4B7E6A81146C66A0FBDA5113B0BB761FF40AB75008CB34680DECB3525
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SolaraV3.dll

Path C:\Users\Admin\AppData\Local\Temp\bin\dll\SolaraV3.dll
Size 14.5MB
SHA256 1bbf43282e802f6f7d00e4508f8ffafc60b8df9ba2eac446b197e20b430bc9f6
MD5 f681b6a93958c566305bb3689b54a4fa
SHA1 1b5ad0224b51383b3927f54c7cf1d9b33fedaf4c
SHA512 7cd153f3d1a5d9914a5269711477fb434ff5f3d510ad6dc54ffd59d9848ab363f1fc644714ba34c662e1db23132d0c1910cc4e133977f799b7930e997475f395
SSDEEP 393216:W+8TPzAwfvyrhNNpL1bGFJ15dccukM2LZUw8KlLMbP4pp:W+cfKrhNNxIVtR
TLSH
T107E6AED661E821E8C476C279C343EA3BC66F78391374D5EB575092A11E23EC53A7AF02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e5b94214781627fd3cddc59ad2de518ee8d846709fbdbcf5fa569dfd42293c41
MD5 93801b31da4f1666778fd3e781178c7b
SHA1 3ebed744fdc7dc23e71d4860348e45fa4f0a271e
SHA512 28a91e4f83f2a103b720735bffa2ed0ca1c680eda5323333f359cd1205388cd3423d3bdf756afe8cb6e6eb20bc83259917cfff8251786b30cf3433c4f5d36121
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3c09a1a9ee33587f7657a8d6bd1653f635d73dccd3ed372a519c43986d5688c2
MD5 bb5fbe66365e7cf56b812f185fb82929
SHA1 38f613bb3b53dfa369bffd08a8f483cf71858f70
SHA512 1236af59b6e766a5ca6b4cefd892b410c40c7ca3f301e222f19cb0a7389a4e165c6e593eb82fd564beafac098c3a928fd8e068efd2181b6f2c1fcabe8465a4cc
TLSH
T18AD0122237610178D11022330042750D1500E20F514680045438C55E1A480710D03441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 8e5c88039dfce01c3b96ba16a227aefce7e462cf5badd6af9a633fe1600b7e08
MD5 e9fd73bdc074bf33e8d02490ce1fa687
SHA1 54968f40a3bd48a8a2d6ac000e24f0b22538e3a4
SHA512 98c4a1d2023a8bffd1665a2e608e024800e3be08e1f28b5ff80afefbe71b9c08a7a3e4529015ca1f48d099a467681d7f80f16793187ab4977acab7b4fbdc9781
TLSH
T11FE05E6F8564754BDB11E2B22FC089813A36361382E74FC2438657B17C36B40B122116
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 163a73e809441ffc8d78ef480b5d66040b3f9bd551b3a21857fef09417eb93a0
MD5 529e8aa02839025e219e2d1ed2ff1eca
SHA1 6164e997ce9fa3ce2f2f58ea91066c2b5e373a86
SHA512 6f73e65f50b6474dc4ec2552ce10c026eed243b768a95fbe2ad4e5a1b622b8c2b29b029bd6c3ff5d8880a4ee6b7f709931c99f4ca9c2a9b8b3faf2f258ae66fc
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 50de48d2a16111f8a452c52f3b942479ffeda5794825124ffbf1937524a079f5
MD5 6c86159b21b64394d86d9ef7eda8748f
SHA1 5e294edcc4cbb1768cd08c2bbf50d8622938f3ac
SHA512 1e55ecf91f55b691db1b8fe6401508cb7f3c877417afde4436002f138c1cb3e86f42d50b95411445a43f5e8c72b1acdc5f91de9c679b800c80775216ad39029a
SSDEEP 3:LstlNllkll/lNd:LsX3lEtNd
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity
Size 691B
SHA256 4a871712595ec3d7cb3bb1326ded70a7cfb3e3f7d1c65d4a088d2f21e94e63e5
MD5 74446a329a7c018c742118dfedd2101b
SHA1 011344034e6aa69ab8e36534ff579abceb272d87
SHA512 c307679b425a8d1cb085b5f54e6aac07f13ed5f408594fcc3d83cb8bb07d7df9bfff685ccb2fa113fe3e464366c1c4399e1c98e12afdfedeb6f043132abb0e41
TLSH
T13E012B76517FA8B7217D09621E88BC4A6AFDA475615264E4CBE2823CB0C06F74717836
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe59e092.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity~RFe59e092.TMP
Size 523B
SHA256 4e94a8e117630f8b6afbf65ea2343115f48d865d6eccebd723653807d38271d7
MD5 cc33cad3edd54987da6bc2498099b6de
SHA1 7b41ccbf29270d8ea3404ac51b6d85e0d387daab
SHA512 e4feec9a2a418ebbcebb398adfabc0d98ecb4eaed4e10cd3227aa0e0cdaeae1a88720e0ae0da6554da1d56c37a654b7ec2efbc0dfa1d68b2812883dbf9d08066
TLSH
T135F02B62917EA47A142D09120E40BC493BFDA4B1215350E4C7E3C22C70801F6461B436
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
Size 6KB
SHA256 e49cead7da6e9afc60a280d73875fb0bd299685e6c32c311cfdd8071d14b0f6c
MD5 f12254d8577d2263d5c5aa08027c852d
SHA1 f69374652ccbeafc9f2eb3d20fb7be61debfd06d
SHA512 57e2b4f1464a5c50faa9dca353e3c12d668e65bdb3a561c52e62994378cafae5615e9b90848252704aad5861c97da6891b8e45bfb36dd62e3ebd71692d49d7f8
SSDEEP 192:stH0nsfaZ8pa1L/S+WiTx+oxgY/nPmHM8:stUnsVm/V0ox3h8
TLSH
T13FE1D9025E78A9BB4CC7F6197E35BB56E2FA106121D40E98EBFDC51C04D66CD2207D4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
Size 6KB
SHA256 75bad625e27f4b7e52f4aaf973fcfbe1d501957ec3b7429b0f076ecf52ff78c9
MD5 2541488831cc87f6c41ceae51dcb4975
SHA1 2c3e6506bbfbfe67716781dae3e6cb9203ff39b9
SHA512 29ae48848d8b0b92bbdb1cdd6e73abf3b2d33c18828263bab371fd9d7f42d7c34d03cf3ccc34963d1e4023437688b75bc684faecbb27cc9853f46bb5ee741f62
SSDEEP 192:stH0nsfaZ8pa1L/S+WiT3kqxgY/nPZHMC:stUnsVm/VIqx3iC
TLSH
T11CE1D9025E78A9BB4CC7F6597935BB62E2F6106221C50E98EBFDC61C04E66CD2307D4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59a59d.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences~RFe59a59d.TMP
Size 6KB
SHA256 94f220430d9423d960b0a5a11d9efb211cc4ea401afa5ca0b8c22cb85fef31a4
MD5 fb77a311971bddcb629f50d4bb4163c6
SHA1 40241ccdf6b4767aa4292d9bd736f2c7f3aafacd
SHA512 34ba5be79fb2287dfc2740626e430ecd702f30654b302b31b44366799cd8f31a9fc265bcbbd69e63889495f6d1b59f2f91d98679a8825430465fffab5cada861
SSDEEP 192:stH0nsfxZ8pa1L/S+WiTgPwxgY/nPEHM8:stUnssm/VYwx378
TLSH
T114D1E9035E78ADBB4CCBF6197A35BB56D2FA106121D40E98EBFD851C08D62CD2207D4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 1KB
SHA256 772334598c8c279169434439d4e16dc8441eb01807a05d14b73b6ab20e2e49ad
MD5 f68d95c6e6b7ce2a70e35d4e25de4b46
SHA1 b33ac4ad8be1b159b7773cf58b6af7c854aedb4c
SHA512 aaa6c1175ca4e8eacd28f879c9f34dda38a40dcbfd748b4388451731107fd9414d1e5efaa187c3239d9346c77627e67d71a5879bda7dcf07835784792634df8d
TLSH
T1403185B3E4846B7A5C946A4A72927BA36E30002A91105F4CB1CF0B0C01E72CEA626D72
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 2KB
SHA256 60d93c9b8d363caf0545d1d5b0ef89022d2887256408451f0143c5f259d253a4
MD5 f7f6aeb861904660fab4ef31efa8e34a
SHA1 ff36a35adf528e7fd38d18e9691b6f407ddf006d
SHA512 4e9f1f9f6d3c3fa7bf228f0dbe919ea53a194a00b909bed31c4b0d4d6f4a095f850699a23a7575f7ced5801fe92838da01b62aa51078358ac91b5588627572f6
TLSH
T1C451C973B844AB7B88E65E44BA863F73AA354165A5512F68E5DE0F0C01DB29D3302C77
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 3KB
SHA256 e3d636ef0d787e4b072405acd565499c79076ecfcf0f05c6603e38e3a139e687
MD5 f4fb9afcab812cf9df8cb3ef3108d164
SHA1 5af265d048a5c636867ef9575d14e4c6bfd6e75b
SHA512 bc8449d3c05c5fe3ea5ed0d62a864e0df027f52bc2dbbeead39633942b1f9959664d33b8954c1c854aa56fb79c3d3a31f919acf7220fd47f829daace112c9e11
TLSH
T1DB719672A5A4AA7B4DE6AE44B9863B22B7654137E1903FA8D5ED0F0C01DB3D82342C57
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 16KB
SHA256 e9dc19a69f4422846410cf3df2dfc2b16cf0fb301670e9e64f2c045dd7a85716
MD5 c7d213441aa76612c0e0954ecb0af4be
SHA1 b388548bcf19815ffafc8bfc3a682517a79182cd
SHA512 4ccb5a30b5378caed1dceda6f5f985c806d38e123a9bc7578c4571b4413173663ef847daf643db1522530ac752c05674ea4ea6a811840a3a00b4c98a6958875a
SSDEEP 384:zx+aQikB+z/xvxjg/qhEtNbjdRp3lHJVXjz9zl:I/UxvxjgC+jR1HJRFl
TLSH
T191729F2B94A83E3754F7F9457A49179BDBB8886290C22EBC4AEE5F0D06C73D81302D46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 16KB
SHA256 9a398130f9e23c772da5fc0fc1bbf1375d00368fb29e2e57f86971ec1a33193f
MD5 39df0103ccbcb16d7c173ebb3f081b03
SHA1 b5fda2639cbf3519f37ee00a332ec781797280fa
SHA512 c872a0ff198280b04c6d82b7dc03a7458e195a30533ce55ebf477f0e5387ccd32e1d2b34fd036b162a9e7cbf3fd22b3844e6aa149a278ad754c3ed2c170a4d14
SSDEEP 384:zQ+aQikB+z/xvxjg/qhEtNbjdNp3lHJVXjz9zl:T/UxvxjgC+jl1HJRFl
TLSH
T18A72AF3B94A87E3754F7F9057A59179BDBB8886290C22EBC4AEE5F0D06C73D81302D46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe595191.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State~RFe595191.TMP
Size 1KB
SHA256 9447dc507407d46334bbe797bec149c2579ab5f0ea5c008cd08028baf502315f
MD5 376c8edaccc62b737c7f1feea548865f
SHA1 96159ed1a68aec28cda32f13c6d30899025f49a8
SHA512 adfd0a8d4751ceb4ab08538ea043133c238f9cc22da1a448351d60d802a351e966b12d2487e09ecab86428f33689e515b3038ea527fdb7360200247cd0a06511
TLSH
T12C2132B3D4886ABA58546D49B352BBE72E30412AA1106F4CF1CF061D01EB2DEA676D72
MD5 SHA1 SHA512 TLSH

Submit Download

memory/780-182-0x00007FFD48D70000-0x00007FFD48D71000-memory.dmp

Download

memory/780-354-0x0000023006CD0000-0x0000023006D9D000-memory.dmp

Download

memory/996-61-0x00007FFD48D70000-0x00007FFD48D71000-memory.dmp

Download

memory/996-341-0x0000022055AE0000-0x0000022055BAD000-memory.dmp

Download

memory/2312-7-0x000001F6DDCB0000-0x000001F6DDCBE000-memory.dmp

Download

memory/2312-0-0x000001F6BD1F0000-0x000001F6BDA36000-memory.dmp

Download

memory/2312-2-0x000001F6D7E00000-0x000001F6D7E10000-memory.dmp

Download

memory/2312-1-0x000001F6D7E00000-0x000001F6D7E10000-memory.dmp

Download

memory/2312-15-0x000001F6D7E00000-0x000001F6D7E10000-memory.dmp

Download

memory/2312-4-0x000001F6DDC60000-0x000001F6DDC68000-memory.dmp

Download

memory/2312-3-0x000001F6D7DF0000-0x000001F6D7E00000-memory.dmp

Download

memory/2312-14-0x000001F6D7E00000-0x000001F6D7E10000-memory.dmp

Download

memory/2312-6-0x000001F6DDCE0000-0x000001F6DDD18000-memory.dmp

Download

memory/2312-16-0x000001F6D7E00000-0x000001F6D7E10000-memory.dmp

Download

memory/2312-5-0x000001F6D7E00000-0x000001F6D7E10000-memory.dmp

Download

memory/2312-19-0x000001F6FF810000-0x000001F6FF8C2000-memory.dmp

Download

memory/2312-20-0x000001F6FFA90000-0x000001F6FFAB2000-memory.dmp

Download

memory/2444-338-0x00007FFD2B000000-0x00007FFD2BE89000-memory.dmp

Download

memory/4428-91-0x00007FFD48C30000-0x00007FFD48C31000-memory.dmp

Download

memory/4428-90-0x00007FFD485D0000-0x00007FFD485D1000-memory.dmp

Download