Overview

overview

7

Static

static

3

Lucid Inje...IS.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    48s
  • max time network
    22s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/10/2026, 15:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Lucid Injector( ONLY DOWNLOAD THIS.exe
  • Size 39.0MB
  • Sample261024-srbtjsaw7x
  • SHA256 731d61a33dda433a6a096470c248dd8155e139a97cae4d547a7398dc66bb18bc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecutiontrojan

Malware Config

Signatures

  • Loads dropped DLL 42 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 48 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 17 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Lucid Injector( ONLY DOWNLOAD THIS.exe
    "C:\Users\Admin\AppData\Local\Temp\Lucid Injector( ONLY DOWNLOAD THIS.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:256
    • C:\Users\Admin\AppData\Local\Temp\Lucid Injector( ONLY DOWNLOAD THIS.exe
      "C:\Users\Admin\AppData\Local\Temp\Lucid Injector( ONLY DOWNLOAD THIS.exe"
      2⤵
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4676
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
        • Executes a command shell one-liner
        PID:4964
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Lucid Injector( ONLY DOWNLOAD THIS.exe" --user-data-dir="C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --allow-file-access-from-files --disable-features=ElasticOverscroll --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4676.4680.11775752429792541030 /pfhostedapp:245b277e7b97634cd0b0aab0a03015c3408e7d3a
        3⤵
        • Enumerates system info in registry
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of WriteProcessMemory
        PID:2012
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView /prefetch:4 /pfhostedapp:245b277e7b97634cd0b0aab0a03015c3408e7d3a --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x180,0x184,0x188,0x15c,0x190,0x7fff2acc5fd8,0x7fff2acc5fe4,0x7fff2acc5ff0
          4⤵
            PID:5484
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView" --webview-exe-name="Lucid Injector( ONLY DOWNLOAD THIS.exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1748 --field-trial-handle=1752,i,2233745496294559176,5272212706326397641,262144 --enable-features=MojoIpcz --disable-features=ElasticOverscroll --variations-seed-version /prefetch:2 /pfhostedapp:245b277e7b97634cd0b0aab0a03015c3408e7d3a
            4⤵
              PID:2036
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView" --webview-exe-name="Lucid Injector( ONLY DOWNLOAD THIS.exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2940 --field-trial-handle=1752,i,2233745496294559176,5272212706326397641,262144 --enable-features=MojoIpcz --disable-features=ElasticOverscroll --variations-seed-version /prefetch:3 /pfhostedapp:245b277e7b97634cd0b0aab0a03015c3408e7d3a
              4⤵
                PID:2304
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView" --webview-exe-name="Lucid Injector( ONLY DOWNLOAD THIS.exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2988 --field-trial-handle=1752,i,2233745496294559176,5272212706326397641,262144 --enable-features=MojoIpcz --disable-features=ElasticOverscroll --variations-seed-version /prefetch:8 /pfhostedapp:245b277e7b97634cd0b0aab0a03015c3408e7d3a
                4⤵
                  PID:1452
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView" --webview-exe-name="Lucid Injector( ONLY DOWNLOAD THIS.exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3536 --field-trial-handle=1752,i,2233745496294559176,5272212706326397641,262144 --enable-features=MojoIpcz --disable-features=ElasticOverscroll --variations-seed-version /pfhostedapp:245b277e7b97634cd0b0aab0a03015c3408e7d3a /prefetch:1
                  4⤵
                    PID:6048

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  _imaging.cp311-win_amd64.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\PIL\_imaging.cp311-win_amd64.pyd
                  • Size 2.5MB
                  • SHA256 16452bdc0cd84bbc8e034319e67f776ddc9d23767e6c589d89a5c973738d5fb4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VCRUNTIME140.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\VCRUNTIME140.dll
                  • Size 96KB
                  • SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VCRUNTIME140_1.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\VCRUNTIME140_1.dll
                  • Size 37KB
                  • SHA256 1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _asyncio.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_asyncio.pyd
                  • Size 62KB
                  • SHA256 aebc378db08617ea81a0a3a3bc044bcc7e6303e314630392dd51bab12f879bd9
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _bz2.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_bz2.pyd
                  • Size 81KB
                  • SHA256 5843872d5e2b08f138a71fe9ba94813afee59c8b48166d4a8eb0f606107a7e80
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _cffi_backend.cp311-win_amd64.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_cffi_backend.cp311-win_amd64.pyd
                  • Size 175KB
                  • SHA256 0b5c05bf3e9da14c33566d2c546fb7618ac7fc2b89365a66cfb1082ffe3d898d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _ctypes.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_ctypes.pyd
                  • Size 120KB
                  • SHA256 e662d2b35bb48c5f3432bde79c0d20313238af800968ba0faa6ea7e7e5ef4535
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _decimal.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_decimal.pyd
                  • Size 245KB
                  • SHA256 d0df57988a74acd50b2d261e8b5f2c25da7b940ec2aafbee444c277552421e6e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _elementtree.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_elementtree.pyd
                  • Size 123KB
                  • SHA256 df71d64818cfecd61ad0122bea23b685d01bd241f1b06879a2999917818b0787
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _hashlib.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_hashlib.pyd
                  • Size 62KB
                  • SHA256 39bc615842a176db72d4e0558f3cdcae23ab0623ad132f815d21dcfbfd4b110e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _lzma.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_lzma.pyd
                  • Size 154KB
                  • SHA256 613de58e4a9a80eff8f8bc45c350a6eaebf89f85ffd2d7e3b0b266bf0888a60a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _multiprocessing.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_multiprocessing.pyd
                  • Size 32KB
                  • SHA256 0ae3bf383ff998886f97576c55d6bf0a076c24395cf6fcd2265316e9a6e8c007
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _overlapped.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_overlapped.pyd
                  • Size 48KB
                  • SHA256 a083e83f609ed7a2fc18a95d44d8f91c9dc74842f33e19e91988e84db94c3b5b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _queue.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_queue.pyd
                  • Size 30KB
                  • SHA256 2f71046891ba279b00b70eb031fe90b379dbe84559cf49ce5d1297ea6bf47a78
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _socket.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_socket.pyd
                  • Size 76KB
                  • SHA256 39715ef8d043354f0ab15f62878530a38518fb6192bc48da6a098498e8d35769
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _ssl.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_ssl.pyd
                  • Size 155KB
                  • SHA256 cb42e8598e3fa53eeebf63f2af1730b9ec64614bda276ab2cd1f1c196b3d7e32
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _tkinter.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_tkinter.pyd
                  • Size 61KB
                  • SHA256 6ff6cc788f1ab19de383810ddbd15ecd5fc8216faf5e1e406bbf9a608fbb9991
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _uuid.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\_uuid.pyd
                  • Size 23KB
                  • SHA256 f7f57807c15c21c5aa9818edf3993d0b94aef8af5808e1ad86a98637fc499d44
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  base_library.zip
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\base_library.zip
                  • Size 1.4MB
                  • SHA256 d766dd21d82ab1a3f016397f69e9994ecb178bf2ddea82afcdd962f5d75b231e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  cd.cp311-win_amd64.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\charset_normalizer\cd.cp311-win_amd64.pyd
                  • Size 113KB
                  • SHA256 ac9465bbf4a1698015cf306bed26a101677010d89acdd10f7f63dedbaf271798
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  md.cp311-win_amd64.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\charset_normalizer\md.cp311-win_amd64.pyd
                  • Size 195KB
                  • SHA256 f398758fbce16b001e0799c1698d2a623751b8dd4e9ff0d6f4845ea6270f672f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  libcrypto-1_1.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\libcrypto-1_1.dll
                  • Size 3.3MB
                  • SHA256 976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  libffi-8.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\libffi-8.dll
                  • Size 34KB
                  • SHA256 128a583e821e52b595eb4b3dda17697d3ca456ee72945f7ecce48ededad0e93c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  libssl-1_1.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\libssl-1_1.dll
                  • Size 686KB
                  • SHA256 2aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  pyexpat.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\pyexpat.pyd
                  • Size 193KB
                  • SHA256 d97f3e27130c267e7d3287d1b159f65559e84ead9090d02a01b4c7dc663cd509
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  python3.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\python3.dll
                  • Size 64KB
                  • SHA256 4055d1b9e553b78c244143ab6b48151604003b39a9bf54879dee9175455c1281
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  python311.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\python311.dll
                  • Size 5.5MB
                  • SHA256 a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  pythoncom311.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\pywin32_system32\pythoncom311.dll
                  • Size 665KB
                  • SHA256 f20794876cd77d37d893512bdd8f2112bb791e134ebf2697c9034fa32eb93c11
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  pywintypes311.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\pywin32_system32\pywintypes311.dll
                  • Size 132KB
                  • SHA256 dcc14a7ed85a324e357eab7db970d8db61387c8b5d6baa23283aabd8300c4e09
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  select.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\select.pyd
                  • Size 28KB
                  • SHA256 0046eb32f873cde62cf29af02687b1dd43154e9fd10e0aa3d8353d3debb38790
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  INSTALLER
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\setuptools-65.5.0.dist-info\INSTALLER
                  • Size 4B
                  • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
                  • MD5 SHA1 SHA512
                  Submit Download

                  tcl86t.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\tcl86t.dll
                  • Size 1.8MB
                  • SHA256 a91781fe13548b89817462b00058a75fb0b607ec8ce99d265719ced573ade7b6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  tk86t.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\tk86t.dll
                  • Size 1.5MB
                  • SHA256 20139f4c327711baf18289584fa0c8112f7bb3ba55475bded21f3d107672ed94
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  unicodedata.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\unicodedata.pyd
                  • Size 1.1MB
                  • SHA256 ecf7836aa0d36b5880eb6f799ec402b1f2e999f78bfff6fb9a942d1d8d0b9baa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  win32api.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\win32\win32api.pyd
                  • Size 135KB
                  • SHA256 cd9ec02d502dc1548233aa2efe9fcbf47e4677b28c169553f36194a50f55ff28
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  win32gui.pyd
                  • Path C:\Users\Admin\AppData\Local\Temp\_MEI000001002\win32\win32gui.pyd
                  • Size 214KB
                  • SHA256 8b8b30b50a1fb1230af9a288a558b8a4e502b2684b6656831030e39414ce6963
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  218e781f-48e9-40fc-ac2b-8a90ff1e04a5.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\218e781f-48e9-40fc-ac2b-8a90ff1e04a5.tmp
                  • Size 3KB
                  • SHA256 844c1bb4900fbad2c705c6f25570506868a8ef99d3f3f079d45374b50c15af49
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  settings.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Crashpad\settings.dat
                  • Size 280B
                  • SHA256 03d129859a44aa28a096ecc52f98b98fd7269692b7be9c77dd3115c8e17f45b9
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  data_0
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Default\Cache\Cache_Data\data_0
                  • Size 8KB
                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  data_1
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Default\Cache\Cache_Data\data_1
                  • Size 264KB
                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  data_2
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Default\Cache\Cache_Data\data_2
                  • Size 8KB
                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  data_3
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Default\Cache\Cache_Data\data_3
                  • Size 8KB
                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  SCT Auditing Pending Reports
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Default\Network\SCT Auditing Pending Reports
                  • Size 2B
                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                  • MD5 SHA1 SHA512
                  Submit Download

                  MANIFEST-000001
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
                  • Size 41B
                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                  • MD5 SHA1 SHA512
                  Submit Download

                  af8dd3cd-24ad-485e-b6b9-3a42290bcbae.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Default\af8dd3cd-24ad-485e-b6b9-3a42290bcbae.tmp
                  • Size 4KB
                  • SHA256 5eb94439550c439655bfb3acafe2455083e6a6e210c4294c1f117b37bf91a32a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CURRENT
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Default\shared_proto_db\metadata\CURRENT
                  • Size 16B
                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                  • MD5 SHA1 SHA512
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\Local State
                  • Size 1KB
                  • SHA256 dfbae73d1368ea4dab270ebe95ff5ccf139b11acc33aa5a5ec97d3fed263221f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  adffd435-17d3-4a1a-8873-8f0a17f1e2bb.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\adffd435-17d3-4a1a-8873-8f0a17f1e2bb.tmp
                  • Size 2KB
                  • SHA256 cc66013aa209d7a026664d50ce9922d8773698753dfcfaba44c91fb9d112a8cd
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  de5f9a8f-5544-4695-9a20-b1661d2397ab.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\tmp52mkv9uv\EBWebView\de5f9a8f-5544-4695-9a20-b1661d2397ab.tmp
                  • Size 15KB
                  • SHA256 fe375763bfa8e7d3602334a6fd5fe580969ad6e8879b37299fdb6c9c95d644be
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  memory/2036-1297-0x00007FFF52D20000-0x00007FFF52D21000-memory.dmp
                  Download

                  memory/4676-1217-0x00007FFF3075F000-0x00007FFF30760000-memory.dmp
                  Download

                  memory/4676-1220-0x00000281EDA90000-0x00000281EDB04000-memory.dmp
                  Download

                  memory/4676-1232-0x00000281EB1D0000-0x00000281EB1D8000-memory.dmp
                  Download

                  memory/4676-1231-0x00000281EB1D0000-0x00000281EB1D8000-memory.dmp
                  Download

                  memory/4676-1233-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1234-0x00000281EE500000-0x00000281EE5A2000-memory.dmp
                  Download

                  memory/4676-1235-0x00000281EB1D0000-0x00000281EB1DE000-memory.dmp
                  Download

                  memory/4676-1237-0x00000281EB2B0000-0x00000281EB2B8000-memory.dmp
                  Download

                  memory/4676-1238-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1239-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1240-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1244-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1229-0x00000281EEA10000-0x00000281EEFCA000-memory.dmp
                  Download

                  memory/4676-1228-0x00000281EB260000-0x00000281EB282000-memory.dmp
                  Download

                  memory/4676-1227-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1212-0x00000281EBC10000-0x00000281EBC11000-memory.dmp
                  Download

                  memory/4676-1226-0x00000281EB1E0000-0x00000281EB1E8000-memory.dmp
                  Download

                  memory/4676-1225-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1224-0x00000281EB9D0000-0x00000281EB9D8000-memory.dmp
                  Download

                  memory/4676-1223-0x00000281EB950000-0x00000281EB958000-memory.dmp
                  Download

                  memory/4676-1222-0x00000281EBB20000-0x00000281EBB3A000-memory.dmp
                  Download

                  memory/4676-1221-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1230-0x00000281EB1D0000-0x00000281EB1D8000-memory.dmp
                  Download

                  memory/4676-1215-0x00007FFF44430000-0x00007FFF4443A000-memory.dmp
                  Download

                  memory/4676-1216-0x00000281EDB80000-0x00000281EDB90000-memory.dmp
                  Download

                  memory/4676-1396-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1214-0x00000281EB8E0000-0x00000281EB8EA000-memory.dmp
                  Download

                  memory/4676-1411-0x00000281EDB80000-0x00000281EDB90000-memory.dmp
                  Download

                  memory/4676-1412-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/4676-1419-0x00007FFF305D0000-0x00007FFF30F74000-memory.dmp
                  Download

                  memory/6048-1341-0x00007FFF52D20000-0x00007FFF52D21000-memory.dmp
                  Download