8b0eb53ca98457dec118b0c9b0946eec96dd19dc6796d7bfb2774b0f4cb2097e

Analysis

user interaction
yes
max time kernel
68s
max time network
73s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 17:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
potass/Potassium.tunnel.exe
Size 25.4MB
Sample261001-wdw44stdqg
SHA256 8b0eb53ca98457dec118b0c9b0946eec96dd19dc6796d7bfb2774b0f4cb2097e
MD5 50d645cf733d1d85c2499673f855bdeb
SHA1 90bc2f85fe9cefd14ecbbfab3115bd93b78745af
SHA512 d7cad9049692533866352fe2a691e685d066a80aac94d12b6171839f6346e655e8e6f0671ac0b3c9a9959511ed60321cc09ae4f499fd23e54c424844e1183c33
SSDEEP 196608:JsqJtqlfcOnRXcd4pEBkvLSQxR5m0KJNTTH1/+30vVUkYHLHjL5HD:OlfznSd4pESvLSI9KfTXfYLHjNj
TLSH
T10B473A257B5A996CD05BC474838B4A729A7130CB0B35B9FF449492782F7EAF42F38358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Potassium.tunnel.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Potassium.tunnel.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Potassium.tunnel.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
2208	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3068	Potassium.tunnel.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 3068 wrote to memory of 2208	3068	Potassium.tunnel.exe	89
PID 2208 wrote to memory of 2988	2208	msedgewebview2.exe	90
PID 2208 wrote to memory of 932	2208	msedgewebview2.exe	91
PID 2208 wrote to memory of 932	2208	msedgewebview2.exe	91
PID 2208 wrote to memory of 932	2208	msedgewebview2.exe	91
PID 2208 wrote to memory of 932	2208	msedgewebview2.exe	91
PID 2208 wrote to memory of 4292	2208	msedgewebview2.exe	92
PID 2208 wrote to memory of 300	2208	msedgewebview2.exe	93
PID 2208 wrote to memory of 300	2208	msedgewebview2.exe	93
PID 2208 wrote to memory of 300	2208	msedgewebview2.exe	93
PID 2208 wrote to memory of 2724	2208	msedgewebview2.exe	94
PID 2208 wrote to memory of 2724	2208	msedgewebview2.exe	94
PID 2208 wrote to memory of 2724	2208	msedgewebview2.exe	94
PID 2208 wrote to memory of 2724	2208	msedgewebview2.exe	94
PID 2208 wrote to memory of 2724	2208	msedgewebview2.exe	94

C:\Users\Admin\AppData\Local\Temp\potass\Potassium.tunnel.exe
"C:\Users\Admin\AppData\Local\Temp\potass\Potassium.tunnel.exe"
1⤵
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3068
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Potassium.tunnel.exe --webview-exe-version=1.2.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=3068.3680.1544077206121606030 /pfhostedapp:a6f4c2cdda1a5636fd6c405112e0015bf2b17363
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2208
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView /prefetch:4 /pfhostedapp:a6f4c2cdda1a5636fd6c405112e0015bf2b17363 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x160,0x7ff8a9905fd8,0x7ff8a9905fe4,0x7ff8a9905ff0
    3⤵
    PID:2988
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView" --webview-exe-name=Potassium.tunnel.exe --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1800 --field-trial-handle=1788,i,16543503436923292969,7933754520733759488,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:a6f4c2cdda1a5636fd6c405112e0015bf2b17363
    3⤵
    PID:932
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView" --webview-exe-name=Potassium.tunnel.exe --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2228 --field-trial-handle=1788,i,16543503436923292969,7933754520733759488,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:a6f4c2cdda1a5636fd6c405112e0015bf2b17363
    3⤵
    PID:4292
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView" --webview-exe-name=Potassium.tunnel.exe --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2260 --field-trial-handle=1788,i,16543503436923292969,7933754520733759488,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a6f4c2cdda1a5636fd6c405112e0015bf2b17363
    3⤵
    PID:300
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView" --webview-exe-name=Potassium.tunnel.exe --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3420 --field-trial-handle=1788,i,16543503436923292969,7933754520733759488,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:a6f4c2cdda1a5636fd6c405112e0015bf2b17363 /prefetch:1
    3⤵
    PID:2724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0e7c4985-9d7c-4d75-8897-37c7f5676faf.tmp

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\0e7c4985-9d7c-4d75-8897-37c7f5676faf.tmp
Size 2KB
SHA256 4ceba062c91e87d585f5106e15eb8f7fd1ffbb88bbdaf4cc69c3717814dcf97d
MD5 15cbedb415751a8798578e13894818d2
SHA1 686ffc8471b984c3c7b02a779ce1d9f464869579
SHA512 215282a6672fa06fd56363d62adee34a820f87bf378ebb5955c4fcaabaf2aee9506fd05225bf99a95919236e21688881584d620c9dae453f3d3b1cbef4f0b6b4
TLSH
T1D751957379946BB785F24A08798A7F52EEB4D062A6512F90DADC0F1800DA26C1381C77
MD5 SHA1 SHA512 TLSH

Submit Download

49c22d0d-ef33-41b0-a114-f4cabd6d9f45.tmp

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\49c22d0d-ef33-41b0-a114-f4cabd6d9f45.tmp
Size 15KB
SHA256 e11c61f5b92a670052b46ad311b3058c502b9b4ae7de87e97fceaeb430c82428
MD5 ece9f9593aed1026f8cd4a164ee4979f
SHA1 ef23fee6aa540aac93e1348adbf7a98a6707eee1
SHA512 528d22643c99d2756abbba5e00761ff5f5f69b8f9b426132109597b6446da948260ce9a2d85ac94effd41549a4e3b0fe95c1cccbacbf749f2ce1d5f97ada97d1
SSDEEP 384:1+aQikB+z/xvxjg/qhEwNBSWYvDAEck3QB9z3:A/UxvxjgC+FcLk4F3
TLSH
T15472AE2B65693E7395F3E50479591B8BDEB8947290816FB88EFD4F0916C73A80342D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 4139253faa3362cadd63174bbecc8f27c6c18a8e3691d8ba71b40cdf9b3211ff
MD5 47ca4d40650e7d7d92a47fb46fbc724e
SHA1 7b8c3d9d787bc355fb2831bf04804a35653635c5
SHA512 15b0c6a36e56a11f09dd19e112e3375485157b28f2b0053602940abcb2cbc029671a0b99d589a50a97af2d95ba2af2ec46c6a2aefbf928392e9c661c1841932c
TLSH
T17CD0121336019938C02024330402719C0800D51B400941215828855D2E1C1B00907851
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 430fbdf6febcf9100d3a8de50db6c451c930c9283c181fb81ae2eb90d780f0a7
MD5 4afd6d0f8e713685cfda42121fb34391
SHA1 0a95d198966a69cc2b1cd149816a917914960ee9
SHA512 5648b9d13df94ac38551cca93af7d8592923d5b6bda795fb3fecf6b10ee19f8f9be9586eb5c85583c3060789e00b2728d89c35260fadf1eca8d2b4d5d47406da
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 4987c4ab05c649d64228ed3bfb1e801b8cfff41b87c3fe73eff32bedcdbd4529
MD5 ce5761df4f80f322fb9f16f133a31ddd
SHA1 0a7b39a4a2d63c626b9056dc9880116ebb8a806b
SHA512 c372e02e94449bcf3735f4544d4a4c2d00823af092874fd828ff9ab2f7ef504363c96eec4d6f1c81f87c3d7e7ee2a2443f35e5323630c928c3251988ef8b5b09
TLSH
T1C8B00168A7844F42DA8947B9BAE655DC353479998AA38A8340A6C1B4FC2034A45554A2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 0367e1e0cce7e85d0647fbe6ed4a945576c3418102c56404caed195572461055
MD5 3ebc9e60aee88ae6d655b4f42a2dc694
SHA1 3ecf81c18aa30c4e8a613bb8a3c59b2b35100dc6
SHA512 fecd885b9722223e812331a4efe2a6d9e27b36e8631e930079a603ee672e512f3c1fdbd62528b79d451b4c00c729c177da3130f03d05b6f78749c7830731463f
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

d650a830-057c-44aa-9b1b-27ae7b36e3ab.tmp

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Default\d650a830-057c-44aa-9b1b-27ae7b36e3ab.tmp
Size 6KB
SHA256 31dbeb6232d8bb3a2c6837ae117b2a2639bd5ec623cbeedf59f14d65faa548da
MD5 e66c823e530df544210991c293b1fe62
SHA1 273c3592df9a7051d34eb8e33351cfc1e4455f15
SHA512 f3c1c52a525b207480140159c85044ab560fa0b861d9025b474d265e1fb38789be00514de7c48784f41afe1551fc7eab2f68fc28a7511c64fcd9e9d63ef5c0ac
SSDEEP 192:stabN9OYsBMona3sV+Fdae2AQjmq7AZrFG6K:stwNqOsGjQkK
TLSH
T1D3D195015E2879FB4CC7E109FA29BE57E2F5603261D51E98E7F8462C04EA6DC6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\Local State
Size 1KB
SHA256 21e0d6d41da927b363a65b46dafddd8aa5f8981aecd8ea459973a2b652ee06e0
MD5 f4da2338362c18c3018229760bc1edac
SHA1 669ffe3d0b06460445df20fa6304ef0570a9fa32
SHA512 7648bfb27000a184fb1b9758f5a0c5f3cc357ee24afb003010329719516adec08f07adefda02f98b068855235dfa6bd7bd17e81e8f22698fa10700bbcddb3944
TLSH
T10D2195B2A8D01BB3ED92150831867F87AE70D03791404F40A9DD4F2C11EA1AC6676C73
MD5 SHA1 SHA512 TLSH

Submit Download

d732a7a0-b740-4ec8-b434-00d5049974ee.tmp

Path C:\Users\Admin\AppData\Local\com.pot.potassium-tauri\EBWebView\d732a7a0-b740-4ec8-b434-00d5049974ee.tmp
Size 3KB
SHA256 d241af684a43f8d30936411845cf95ba06a9319f8724e5220adb213cafe899c2
MD5 37a0345b6b05fe9bc36c47666a05f8fb
SHA1 7cae7b6f67cd001be9aacb01a83be016e2e554d7
SHA512 e02fb6c3c32932ee5230281a755953154032a4972ca3cd1e22341d54b6177e64c6d12ada87f42835eaf7f9ecd7c300dad8c813a82d9cc26f9dd7004f272d8887
TLSH
T19D61763669A4AA778DF2890478863B12BAA49033E5813F94DAEC0F1C01D73981391C67
MD5 SHA1 SHA512 TLSH

Submit Download

memory/932-99-0x00007FF8CAE90000-0x00007FF8CAE91000-memory.dmp

Download

memory/2724-102-0x00007FF8CAE90000-0x00007FF8CAE91000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads