576c2e55b25373377c4e2f55983478b9d6ae00a03d1fb3aaa9c6dd1a6f466d46

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 21:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe
Size 24.5MB
Sample261110-1fq34abd64
SHA256 576c2e55b25373377c4e2f55983478b9d6ae00a03d1fb3aaa9c6dd1a6f466d46
MD5 41c07871b3550d427b903a0c18cc6484
SHA1 9a38d2314eaaf9de9ae37a65f3d564527596f180
SHA512 f2b8711d48468ce683feba225319caab3f70ad0d6d1518f2366f77131eadae4a9da25e90e5e6a254d657775298339912bf567e8d6efd06036b5249094276bc9f
SSDEEP 196608:pJ+LWnQuAuthIhOGjmtudh5ZQd0Ae8yt:prAubUOGjldhEd0Ae8
TLSH
T1134729117A5B98BCE096C87083478A674E2130DB1A36B9BF51C4923C3F7DBF46B39619
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
6092	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3396	2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3396 wrote to memory of 6092	3396	2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe	89
PID 6092 wrote to memory of 4280	6092	msedgewebview2.exe	90
PID 6092 wrote to memory of 6008	6092	msedgewebview2.exe	91
PID 6092 wrote to memory of 6008	6092	msedgewebview2.exe	91
PID 6092 wrote to memory of 6008	6092	msedgewebview2.exe	91
PID 6092 wrote to memory of 3076	6092	msedgewebview2.exe	92
PID 6092 wrote to memory of 6044	6092	msedgewebview2.exe	93
PID 6092 wrote to memory of 6044	6092	msedgewebview2.exe	93
PID 6092 wrote to memory of 3612	6092	msedgewebview2.exe	94
PID 6092 wrote to memory of 3612	6092	msedgewebview2.exe	94
PID 6092 wrote to memory of 3612	6092	msedgewebview2.exe	94

C:\Users\Admin\AppData\Local\Temp\2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3396
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe --webview-exe-version=0.4.0-beta.7 --user-data-dir="C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=3396.5656.12543259265558002512
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:6092
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffcb110b078,0x7ffcb110b084,0x7ffcb110b090
    3⤵
    PID:4280
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView" --webview-exe-name=2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe --webview-exe-version=0.4.0-beta.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1740,i,16790329542616260824,15719748727010076964,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1680 /prefetch:2
    3⤵
    PID:6008
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView" --webview-exe-name=2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe --webview-exe-version=0.4.0-beta.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1912,i,16790329542616260824,15719748727010076964,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1896 /prefetch:3
    3⤵
    PID:3076
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView" --webview-exe-name=2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe --webview-exe-version=0.4.0-beta.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2364,i,16790329542616260824,15719748727010076964,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
    3⤵
    PID:6044
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView" --webview-exe-name=2026-11-09_41c07871b3550d427b903a0c18cc6484_cobalt-strike_glassworm_megazord_satacom_vidar.exe --webview-exe-version=0.4.0-beta.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3588,i,16790329542616260824,15719748727010076964,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
    3⤵
    PID:3612

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2f2ff456-2bb1-48f9-8224-c78fc3089a6d.tmp

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\2f2ff456-2bb1-48f9-8224-c78fc3089a6d.tmp
Size 3KB
SHA256 65508f5a186f840e414348e5c485412d0336bcd86374f538621391e57f88d332
MD5 4a2cc76f119ae18ea25b0bfd1b1d4ed7
SHA1 67b708c9147e4525e149e79eb1afd09794022c15
SHA512 e2dfe60cb111d17eb3e282625af8e178ce30fc13f8438fcb5f75369fa5a44bfe9b7c1070303fcd1d3c4eaf82250378e6869ed3cf12a686a50319bd183730daf1
TLSH
T1F87176726854A52B8EE3DA45BAC52F06FB694137D1D17F58E9ED0F1C01C76C82352C07
MD5 SHA1 SHA512 TLSH

Submit Download

61201b8a-11d2-4f19-8ee2-df4d4114813b.tmp

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\61201b8a-11d2-4f19-8ee2-df4d4114813b.tmp
Size 16KB
SHA256 d1cc94cd6ac1d012c30e30e6763075e784ed84c2b85e5c8d7a775c32bdc39b47
MD5 e7d2b4bca4f128654a77effda4e9796c
SHA1 c551104a65014f90f2f1971df41f6bd439bf0a80
SHA512 69297e97c76dc5f28a6889a548780a6cba3ff68a3245442f0ba17efc6c86392da9b318a74da8176ea8cb7eac3fdfd80df10a5693a93f1f8eb43974370d04628a
SSDEEP 384:zCN+OBqImmJvGBLx3NaFMJFq3Nbpd1hVpSDg6rP:mAcvGtlNqbj3p6b
TLSH
T12172AE76186059277CE7C549BACE2B0BDB796263C1E0BFD4DCED5F0E019B1842392C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 4198096f408b608d2614daf033820da500dfd40b4f202cc5ef72ea5ffa0801f3
MD5 82e5c070d9532cc845e284168b4f78de
SHA1 39f57c89c5b7bf8205abc95b91a8e4ab4f0f7f04
SHA512 076a1c59c0ae6968d09d88f16fc3e2647028eeebab6edb3db98ad564de1c743af922a2e11ec9cd6cd3d54ea9ee78c704c6880b911f35264371ff4097ec20c9df
TLSH
T1CCD02B3223000B74C331383312C2D6071981F11F8101D128E838C56E1E080F40E464C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 54ca823ac7d1b05b4ba93a1f54743e64abfcffadbeb49b5ab0308b6dfe33bde8
MD5 3c2bdc287008b21d1e97e5e5046b62c6
SHA1 cd88a37fdffb2eba51260f0f9138eaac94cb8824
SHA512 cd1ee324c54210e76e40a727d7c9d3aaefd8bed52a730a563a0f805ed5c556cd0b1254923d065bc782378e5d451aa2bb36f74e9305fcad1e7bd1d3b5d96fe41c
TLSH
T15BD0047151441101C3D5307310D047434105C45C11011710C470114705443341047001
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 34d0443eb894c358a87ae7df818725968700eb231b4e38a9920ab7a8476960b2
MD5 8a02f11eac66af1c79db2e94245a9a1c
SHA1 477c89ea8fc55c72f247c13eb335767b1131de2e
SHA512 fe4e2bf60d320120bf8bfd95a66286cb9c11760bb70b3f0ab885b10097f1f93da3f12c432f4447502581635a2d126901eb1c271ad222dbffab49f34902e8f5de
TLSH
T11BD0123332410234C260307310C2664A0401C11F41054100D838965F1B081741907442
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 586b55d0366b773e2fcfe877ca06f4a3ddf44e1684120b321028ddbf63b6bcab
MD5 d7e6af36101654444db9dfc9657e5e57
SHA1 589142206ffe7673ec5ce727e25452785829de87
SHA512 771f07a24fe14cdbca4d68e24eb3442ba8ae8bfdfba6c9aaa5ff3728b9da8d94fd8d4635e30b92ef53d0b1a44246e900ec022c822ab4ce7073e6fcf6f6695805
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 7c35af972d8c9af23758f05aba626ddf586906da6ae55747cb894789efa5e433
MD5 201d57a62a1b52197b8290a3f8114980
SHA1 bf29220ca2c23845ab9bce08b4387d24c768be89
SHA512 c15515250fbc172c576b5aa5241e4ae43e0fed3361a656f14c6ca31b60b81bb8340da80e4a7f83bf748f39ec5d4c27d29080b695eb07a51fd9330d58fffc01f1
TLSH
T137A002150EA41447C7412B78A9911193336CCD681122170559A01478ECF87559352080
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 bdd00ce13e703ab0eea9f5cd73c1490c5945a90034f87f7fdad05160484cebf6
MD5 b96ddf4f3a95e739aff6c4b683ead04d
SHA1 2a3dcd52d617e4cbe371213455ae4bed488fe424
SHA512 b0a3b617826059b1e3ea5826f40d799b8d06339b8590e4732fda81536c9a5f97e4d0abfbbc85fb3be1cf30670d6bb1c41a24a0cf072541cac796952485b0b713
SSDEEP 3:LstlNllkll/lZbKtll:LsX3lEtle
MD5 SHA1 SHA512 SSDEEP

Submit Download

ExtensionActivityComp

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\ExtensionActivityComp
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\GrShaderCache\index
Size 256KB
SHA256 0dbb0561b6c49e1a1102097f9b1d5f00351d57a9bb67fb81c0b07ee3c0824591
MD5 4c4330cf717e7c928fd325ca89669c6a
SHA1 e9136da877a0092921f7a3734d25fbd6cf025f0f
SHA512 de9c8e8a78fcc3c2ac00eecb4da00b4ded4cc710b76f80e59c0be411408d592494a339509ef65c26fa2d1163aefa92039138cae4876dd299e7725aceec3ee863
SSDEEP 3:LstlNllkll/lOpull:LsX3lEtv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Local State
Size 1KB
SHA256 264f91c61401d843491891bc5e828e4837bfd0ea67d31c25f769fa1503f3c740
MD5 a2f9d54eb942855440843fdb6a20e02a
SHA1 5de0964eb82c10d0bca080d4825d92cd2c6f8871
SHA512 fa41e25e1126e7fa73a7f323ef8f83ca88ae2e72f3fc6032e04ac42ca287639578a2bc4006060b843a0e6dfb00745375d97f75f562de6e7d9e33e8fbd66c7c92
TLSH
T1A4219573D4842A35E552898AB7467F07AF24813A5190EF0CF6EF071802CB8CCA677C67
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\Local State
Size 2KB
SHA256 0d1e773159de45ca03b7ea20340ff203e6e282fc9a4cf36243694574fcf16104
MD5 6b3f260c439886e5e8d7b6695d64e3b5
SHA1 e9bf97f4cc8d3a35da57604fec9305357cdf876a
SHA512 6c7a3c15633d08dde2608792d65172345d7fd11aebc3c91fd1098adb685e61e76e82092efa884feed15ec13f608b52cf3d53debe675b78d3c3b1ba3835286bc2
TLSH
T18651B873B804A63AC5E39A857F893F13DF3A816692A16F54A5EE0B1801CB58C2342C1B
MD5 SHA1 SHA512 TLSH

Submit Download

fc29c2cc-16e7-4b40-9653-34bb97a9b453.tmp

Path C:\Users\Admin\AppData\Local\jp.porta-gate.jrd-receiver\EBWebView\fc29c2cc-16e7-4b40-9653-34bb97a9b453.tmp
Size 1KB
SHA256 2520995ea62bd6d79fbd3e8c831bc07f8686147cae351206cff3a948e50c6f88
MD5 c4d7ff4c042d006856955a0882ad84a1
SHA1 f01696a0f2049b19b25d9faea9cfed2446c4ac43
SHA512 8bbd6f3ba36f6f93e04408adb9260fe5c8f0ec159f838a5d55b52141dc4096f26439af818773a3b584b93f4b3e2e622911b36341686b012825e3737e3c9611d1
TLSH
T1A5318A72E4402735E952968677463F07AF3551379191DF08B5EF0B1802D75CCA576C27
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3612-158-0x00007FFCCD7E0000-0x00007FFCCD7E1000-memory.dmp

Download

memory/6008-26-0x00007FFCCD7E0000-0x00007FFCCD7E1000-memory.dmp

Download

memory/6008-356-0x0000020B166B0000-0x0000020B1675D000-memory.dmp

Download

memory/6044-52-0x00007FFCCC9B0000-0x00007FFCCC9B1000-memory.dmp

Download

memory/6044-53-0x00007FFCCDC10000-0x00007FFCCDC11000-memory.dmp

Download

memory/6092-357-0x000001B7410E0000-0x000001B7420E0000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads